@tailor-platform/sdk-codemod 0.3.0-next.1 → 0.3.0-next.3

package/CHANGELOG.md

@@ -1,17 +1,141 @@
 # @tailor-platform/sdk-codemod
 
+## 0.3.0-next.3
+
+### Patch Changes
+
+- [#1559](https://github.com/tailor-platform/sdk/pull/1559) [`ff8ef1c`](https://github.com/tailor-platform/sdk/commit/ff8ef1c1323daf81812c182e146fd53da20e676e) Thanks [@dqn](https://github.com/dqn)! - Rename auth attribute module augmentation from `AttributeMap` to `Attributes`.
+
+- [#1584](https://github.com/tailor-platform/sdk/pull/1584) [`7faff07`](https://github.com/tailor-platform/sdk/commit/7faff07982909b63b87185dc1186e2919a06d4bb) Thanks [@dqn](https://github.com/dqn)! - Report the codemod runner identity in the JSON summary, including the source checkout commit and local build command when run from a branch build, so prerelease migration validation can distinguish exact npm packages from branch-head behavior.
+
+- [#1599](https://github.com/tailor-platform/sdk/pull/1599) [`b88f6a2`](https://github.com/tailor-platform/sdk/commit/b88f6a2e1c6d8e25a797bec6ca90428f5be3b1b9) Thanks [@dqn](https://github.com/dqn)! - Apply the v2 `rename-bin` codemod to SDK CLI command strings in TypeScript and JavaScript source files.
+
+- [#1578](https://github.com/tailor-platform/sdk/pull/1578) [`579cb47`](https://github.com/tailor-platform/sdk/commit/579cb4705cb295c1fcf9bff948d205fb245ff4e5) Thanks [@dqn](https://github.com/dqn)! - Run v2 codemods when the target version is a v2 prerelease.
+
+- [#1686](https://github.com/tailor-platform/sdk/pull/1686) [`aecaf8c`](https://github.com/tailor-platform/sdk/commit/aecaf8c1bb7813a32e998ea7d034684541cb1c85) Thanks [@dqn](https://github.com/dqn)! - Replace `tailor skills install` with project-local `tailor skills add`, `list`, `remove`, and `sync` commands for bundled Tailor SDK agent skills.
+
+- [#1585](https://github.com/tailor-platform/sdk/pull/1585) [`1c1ca49`](https://github.com/tailor-platform/sdk/commit/1c1ca499b4fd55a616b1531ec7ab280ceed531d3) Thanks [@dqn](https://github.com/dqn)! - Report precise file-local findings for `principal-unify` review follow-ups, including nullable caller call sites and `context.user` helper adapters.
+
+- [#1601](https://github.com/tailor-platform/sdk/pull/1601) [`144f3e3`](https://github.com/tailor-platform/sdk/commit/144f3e30f2b0c5dac1a3288ff65c9dc5ca82c13b) Thanks [@dqn](https://github.com/dqn)! - Fix `v2/principal-unify` review findings for nested SDK field parser invoker values and destructured context helper messages.
+
+- [#1622](https://github.com/tailor-platform/sdk/pull/1622) [`0fe8bad`](https://github.com/tailor-platform/sdk/commit/0fe8bad9afbb7702bc067ac9635b77c0438497a6) Thanks [@dqn](https://github.com/dqn)! - Remove the deprecated `auth.getConnectionToken()` helper from values returned by `defineAuth()`. Use `authconnection.getConnectionToken(...)` from `@tailor-platform/sdk/runtime` in resolvers, executors, and workflows instead. The v2 codemod rewrites direct `auth.getConnectionToken(...)` calls when the `auth` binding is imported from `tailor.config`.
+
+- [#1557](https://github.com/tailor-platform/sdk/pull/1557) [`7ff575f`](https://github.com/tailor-platform/sdk/commit/7ff575fdfa15c00b5fc6282b28c0cb50bfdf927b) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename the CLI binary from `tailor-sdk` to `tailor`.
+  
+  The output directory default changes from `.tailor-sdk` to `.tailor`, and the GitHub Actions lock file path changes from `.github/tailor-sdk.lock` to `.github/tailor.lock`.
+  
+  Run the `v2/rename-bin` codemod to migrate `tailor-sdk` invocations in package.json scripts, shell scripts, CI workflows, and documentation:
+  
+  ```sh
+  npx @tailor-platform/sdk-codemod --from 1.x --to 2.0.0
+  ```
+
+- [#1563](https://github.com/tailor-platform/sdk/pull/1563) [`501e8bf`](https://github.com/tailor-platform/sdk/commit/501e8bfdd2bca7201a1c9b036bf72087476da416) Thanks [@dqn](https://github.com/dqn)! - Standardize SDK-owned environment variables on the `TAILOR_*` namespace.
+  
+  Replace the removed SDK-specific environment variables with their new names: `TAILOR_CONFIG_PATH`, `TAILOR_DTS_PATH`, `TAILOR_CI_ALLOW_ID_INJECTION`, `TAILOR_DEPLOY_BUILD_ONLY`, `TAILOR_BUILD_OUTPUT_DIR`, `TAILOR_SKILLS_SOURCE`, `TAILOR_TEMPLATE_SDK_VERSION`, `TAILOR_PLATFORM_URL`, `TAILOR_PLATFORM_OAUTH2_CLIENT_ID`, `TAILOR_INLINE_SOURCEMAP`, `TAILOR_QUERY_NEWLINE_ON_ENTER`, and `TAILOR_APP_LOG_LEVEL`. The deprecated `TAILOR_TOKEN` fallback is removed; use `TAILOR_PLATFORM_TOKEN`. The v2 codemod rewrites unambiguous removed SDK environment variable names and flags generic names such as `LOG_LEVEL` and `PLATFORM_URL` for manual review.
+
+- [#1684](https://github.com/tailor-platform/sdk/pull/1684) [`de3ef5e`](https://github.com/tailor-platform/sdk/commit/de3ef5e7421a998624154df5e90da62e17664524) Thanks [@dqn](https://github.com/dqn)! - Restore Tailor field outputs for UUID, date, datetime, time, and decimal fields to plain string-compatible types and remove the strict scalar string migration guidance.
+
+- [#1582](https://github.com/tailor-platform/sdk/pull/1582) [`b8b48a3`](https://github.com/tailor-platform/sdk/commit/b8b48a379a73314c26fbf53c74c2181e77f0565b) Thanks [@dqn](https://github.com/dqn)! - Flag JavaScript files and embedded code strings that still reference ambient Tailor runtime globals during v2 migration review.
+
+- [#1583](https://github.com/tailor-platform/sdk/pull/1583) [`006a588`](https://github.com/tailor-platform/sdk/commit/006a5884583f23fc6852714c41e58a7ab6d65a5a) Thanks [@dqn](https://github.com/dqn)! - Automatically migrate simple direct `tailor.idp.Client` runtime global usage to the typed `idp.Client` wrapper during v2 upgrades.
+
+- [#1639](https://github.com/tailor-platform/sdk/pull/1639) [`6616674`](https://github.com/tailor-platform/sdk/commit/6616674eb41a53619138603405a4498e3f09d70b) Thanks [@dqn](https://github.com/dqn)! - Keep v2 codemods from reusing type-only runtime helper imports when adding runtime value imports.
+
+- [#1581](https://github.com/tailor-platform/sdk/pull/1581) [`79780bc`](https://github.com/tailor-platform/sdk/commit/79780bce19864a238602f4dd7a82fcc84e9f8501) Thanks [@dqn](https://github.com/dqn)! - Add the `v2/tailor-output-ignore-dir` codemod so SDK upgrades rewrite exact `.tailor-sdk/` ignore-file entries to `.tailor/` while leaving other `.tailor-sdk` paths unchanged.
+
+- [#1556](https://github.com/tailor-platform/sdk/pull/1556) [`645949e`](https://github.com/tailor-platform/sdk/commit/645949ed64bda8b82fc44c0db54928698b12a2eb) Thanks [@toiroakr](https://github.com/toiroakr)! - Rename `defineWaitPoint` and `defineWaitPoints` to `createWaitPoint` and `createWaitPoints`.
+  
+  These functions create runtime instances with `.wait()` and `.resolve()` methods that call the platform API at runtime, so the `create*` prefix is more accurate. Update any usages:
+  
+  ```diff
+  -import { defineWaitPoint, defineWaitPoints } from "@tailor-platform/sdk";
+  +import { createWaitPoint, createWaitPoints } from "@tailor-platform/sdk";
+  
+  -export const approval = defineWaitPoint<Payload, Result>("approval");
+  +export const approval = createWaitPoint<Payload, Result>("approval");
+  
+  -export const waitPoints = defineWaitPoints((define) => ({ ... }));
+  +export const waitPoints = createWaitPoints((define) => ({ ... }));
+  ```
+
+## 0.3.0-next.2
+### Minor Changes
+
+
+
+- [#1473](https://github.com/tailor-platform/sdk/pull/1473) [`7ddf3c7`](https://github.com/tailor-platform/sdk/commit/7ddf3c716adf85a66a75d554da7730b5406f84b1) Thanks [@dqn](https://github.com/dqn)! - Add the `v2/principal-unify` codemod so `tailor-sdk upgrade` can migrate SDK principal APIs to `TailorPrincipal`.
+
+
+### Patch Changes
+
+
+
+- [#1515](https://github.com/tailor-platform/sdk/pull/1515) [`dcf66a1`](https://github.com/tailor-platform/sdk/commit/dcf66a1e648f5287eaea9ea330eb4ad726a4d363) Thanks [@dqn](https://github.com/dqn)! - Rewrite `tailor-sdk apply` to `tailor-sdk deploy` in source files that contain embedded CLI command strings.
+
+
+
+- [#1482](https://github.com/tailor-platform/sdk/pull/1482) [`8b5870e`](https://github.com/tailor-platform/sdk/commit/8b5870e85db1efec7647acb98226f8161e3d1583) Thanks [@toiroakr](https://github.com/toiroakr)! - Add LLM-assisted review support to the codemod runner. A codemod can declare `suspiciousPatterns` plus a `prompt`; after running, files whose post-transform content still matches a suspicious pattern are reported as `llmReviews` (in the JSON output and on stderr) together with the codemod's migration prompt. This surfaces the cases a deterministic transform cannot safely complete (e.g. a value reached through a variable) so they can be finished with an LLM. The `auth.invoker(...)` codemod adopts this for its non-literal-argument cases.
+
+
+
+- [#1495](https://github.com/tailor-platform/sdk/pull/1495) [`6234022`](https://github.com/tailor-platform/sdk/commit/6234022d7dc03813b8dade831b86f63a5f7a20e6) Thanks [@toiroakr](https://github.com/toiroakr)! - Generate the v2 migration guide (`packages/sdk/docs/migration/v2.md`) from the codemod registry, which is the single source of truth. Each entry renders its name, automation level (Automatic / Partially automatic / Manual), description, optional before/after `examples`, and — for changes the codemods cannot fully migrate on their own — the LLM/manual migration prompt. Run `pnpm codemod:docs:update` to regenerate and `pnpm codemod:docs:check` (wired into `pnpm check`) to verify it is in sync.
+
+  `scriptPath` is now optional, so the registry can also describe codemod-less ("manual") migrations that ship only guidance (`examples` / `prompt` / `suspiciousPatterns`) with no automatic transform. A manual entry with a `prompt` but no scoping pattern is surfaced as a project-wide `llmReviews` entry at runtime.
+
+  Add a `sdk-codemod list` command that prints every registered rule (id, name, kind, version range).
+
+
+- [#1517](https://github.com/tailor-platform/sdk/pull/1517) [`a649764`](https://github.com/tailor-platform/sdk/commit/a6497649be2786b3f6e410c8aa98c4247a599258) Thanks [@dqn](https://github.com/dqn)! - Reduce false-positive v2 codemod warnings and LLM-review prompts from source comments, string literals, and identifier substring matches.
+
+
+
+- [#1476](https://github.com/tailor-platform/sdk/pull/1476) [`fa83075`](https://github.com/tailor-platform/sdk/commit/fa83075f5e0e91085c0ef0cb44b7058a28a79ec3) Thanks [@toiroakr](https://github.com/toiroakr)! - `executeScript` now takes its `arg` as a JSON-serializable value instead of a pre-serialized JSON string. Pass the value directly (e.g. `arg: { a: 1 }`) instead of `arg: JSON.stringify({ a: 1 })`.
+
+  Add the `v2/execute-script-arg` codemod, which unwraps `JSON.stringify(...)` passed as the `executeScript` `arg` option. Indirect forms (a stringified value held in a variable, etc.) cannot be rewritten automatically and are surfaced as an LLM-assisted review task with a migration prompt.
+
+
+- [#1518](https://github.com/tailor-platform/sdk/pull/1518) [`ab10b1f`](https://github.com/tailor-platform/sdk/commit/ab10b1fea309ec5496e09bdca394d46d58603f5f) Thanks [@dqn](https://github.com/dqn)! - Reduce noisy `executeScript` LLM-review prompts by flagging files only when unresolved `arg` stringification remains likely.
+
+
+
+- [#1509](https://github.com/tailor-platform/sdk/pull/1509) [`7cadaa7`](https://github.com/tailor-platform/sdk/commit/7cadaa7c4987b81130ca80ba80bc5d5b26276394) Thanks [@dqn](https://github.com/dqn)! - Rename resolver, executor, workflow trigger, and typed workflow start machine-user options from `authInvoker` to `invoker`.
+
+  Update create-sdk templates and the v2 auth invoker codemod to generate the new `invoker` option.
+
+
+- [#1519](https://github.com/tailor-platform/sdk/pull/1519) [`4e3fa47`](https://github.com/tailor-platform/sdk/commit/4e3fa47d24e6bb1145eac13c355e976f2d594851) Thanks [@dqn](https://github.com/dqn)! - Limit the `openDownloadStream` migration review prompt to files that reference deprecated download stream APIs.
+
+
+
+- [#1521](https://github.com/tailor-platform/sdk/pull/1521) [`2d0689e`](https://github.com/tailor-platform/sdk/commit/2d0689e8ac0079473294fab367799a5431c130f4) Thanks [@dqn](https://github.com/dqn)! - Flag files that need project-specific review after the v2 principal migration, including resolver helper adapters and nullable `caller` follow-ups.
+
+
+
+- [#1525](https://github.com/tailor-platform/sdk/pull/1525) [`425a19d`](https://github.com/tailor-platform/sdk/commit/425a19dd58da6e373b739d3b3e838c2ff3d1736a) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency semver to v7.8.5
+
+
+
+- [#1520](https://github.com/tailor-platform/sdk/pull/1520) [`ed3d338`](https://github.com/tailor-platform/sdk/commit/ed3d338ce71d68904ef1fb83afbbd06a7e5f6973) Thanks [@dqn](https://github.com/dqn)! - Flag files that still reference ambient Tailor runtime globals so the v2 migration can opt them into `@tailor-platform/sdk/runtime/globals`.
+
+
+
+- [#1439](https://github.com/tailor-platform/sdk/pull/1439) [`c5b10d2`](https://github.com/tailor-platform/sdk/commit/c5b10d2841ded08927285bce538c05220cde5e4c) Thanks [@dqn](https://github.com/dqn)! - Unify function principal context around `TailorPrincipal`.
+
+  Resolver contexts now use `caller` and `invoker` as `TailorPrincipal | null`, workflow and executor invokers also use `TailorPrincipal | null`, and event executor `actor` uses `TailorPrincipal | null` with `id`/`type` fields. The legacy `TailorUser`, `TailorInvoker`, `TailorActor`, `TailorActorType`, and `unauthenticatedTailorUser` exports are removed.
+
 ## 0.3.0-next.1
 ### Patch Changes
 
 
 
 - [#1460](https://github.com/tailor-platform/sdk/pull/1460) [`f49c6d1`](https://github.com/tailor-platform/sdk/commit/f49c6d1b5a856969cb4e04ae7d3a87ed34aa020f) Thanks [@dqn](https://github.com/dqn)! - Remove the v1 runtime globals compatibility layer. Importing from `@tailor-platform/sdk` no longer activates the ambient `tailor.*` / `tailordb.*` declarations; opt into globals with `@tailor-platform/sdk/runtime/globals` or use the typed wrappers from `@tailor-platform/sdk/runtime`.
-  
+
   The capital-cased `Tailordb.*` namespace is removed. If your project still references `Tailordb.QueryResult`, `Tailordb.CommandType`, `Tailordb.Client`, or `typeof Tailordb.Client`, migrate before upgrading: run `pnpm dlx @tailor-platform/sdk-codemod v2/tailordb-namespace` to rewrite them to lowercase `tailordb.*`, then add `import "@tailor-platform/sdk/runtime/globals"` so the rewritten references resolve.
 
 
 - [#1457](https://github.com/tailor-platform/sdk/pull/1457) [`84325f8`](https://github.com/tailor-platform/sdk/commit/84325f8602a5631b7c323c997b1425235509920e) Thanks [@dqn](https://github.com/dqn)! - Remove deprecated CLI aliases for the v2 command surface. Use `tailor-sdk deploy` instead of `tailor-sdk apply`, `tailor-sdk crashreport` instead of `tailor-sdk crash-report`, and the hyphenated `--machine-user` option instead of the hidden `--machineuser` alias.
-  
+
   Fix the v2 CLI rename codemod to migrate the hidden `--machineuser` option to `--machine-user`.
 
 ## 0.3.0-next.0
@@ -26,6 +150,54 @@
 
 
 
+- [#1435](https://github.com/tailor-platform/sdk/pull/1435) [`49c0cc9`](https://github.com/tailor-platform/sdk/commit/49c0cc99171d7e317a50a18804a21067d89f9493) Thanks [@dqn](https://github.com/dqn)! - Add the `v2/plugin-cli-import` codemod so `tailor-sdk upgrade` rewrites deprecated plugin imports from `@tailor-platform/sdk/cli` (`kyselyTypePlugin`, `enumConstantsPlugin`, `fileUtilsPlugin`, `seedPlugin`) to their dedicated `@tailor-platform/sdk/plugin/*` subpaths, splitting any non-plugin specifiers onto a separate import.
+
+## 0.3.5
+
+### Patch Changes
+
+- [#1659](https://github.com/tailor-platform/sdk/pull/1659) [`6ba468f`](https://github.com/tailor-platform/sdk/commit/6ba468f4654a723ab4db01d3f3474ae96c25cc71) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency picomatch to v4.0.5
+
+## 0.3.4
+
+### Patch Changes
+
+- [#1626](https://github.com/tailor-platform/sdk/pull/1626) [`06cc5f2`](https://github.com/tailor-platform/sdk/commit/06cc5f2960c5a09e9783d6b0923ed8c1b3d606a8) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency politty to v0.11.0
+
+## 0.3.3
+### Patch Changes
+
+
+
+- [#1598](https://github.com/tailor-platform/sdk/pull/1598) [`a5a4c58`](https://github.com/tailor-platform/sdk/commit/a5a4c58cabc24af3088d85c7a0d975d5be459def) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency politty to v0.10.1
+
+## 0.3.2
+### Patch Changes
+
+
+
+- [#1525](https://github.com/tailor-platform/sdk/pull/1525) [`425a19d`](https://github.com/tailor-platform/sdk/commit/425a19dd58da6e373b739d3b3e838c2ff3d1736a) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency semver to v7.8.5
+
+
+
+- [#1533](https://github.com/tailor-platform/sdk/pull/1533) [`e3bc2ce`](https://github.com/tailor-platform/sdk/commit/e3bc2ce65ab30ee53e5de0eb48ca6c24049fcd1b) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency politty to v0.9.2
+
+
+
+- [#1554](https://github.com/tailor-platform/sdk/pull/1554) [`a2ca1f9`](https://github.com/tailor-platform/sdk/commit/a2ca1f989a69153138ddef66931f1e8a94c8c3e9) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @ast-grep/napi to v0.44.0
+
+## 0.3.1
+### Patch Changes
+
+
+
+- [#1428](https://github.com/tailor-platform/sdk/pull/1428) [`753ac38`](https://github.com/tailor-platform/sdk/commit/753ac3876319d007322c23a7052a2399d194fb72) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency semver to v7.8.4
+
+## 0.3.0
+### Minor Changes
+
+
+
 - [#1435](https://github.com/tailor-platform/sdk/pull/1435) [`49c0cc9`](https://github.com/tailor-platform/sdk/commit/49c0cc99171d7e317a50a18804a21067d89f9493) Thanks [@dqn](https://github.com/dqn)! - Add the `v2/plugin-cli-import` codemod so `tailor-sdk upgrade` rewrites deprecated plugin imports from `@tailor-platform/sdk/cli` (`kyselyTypePlugin`, `enumConstantsPlugin`, `fileUtilsPlugin`, `seedPlugin`) to their dedicated `@tailor-platform/sdk/plugin/*` subpaths, splitting any non-plugin specifiers onto a separate import.
 
 ## 0.2.7

package/dist/codemods/ast-grep-helpers-Bfn39biW.js

@@ -0,0 +1,171 @@
+//#region src/ast-grep-helpers.ts
+const DECLARATION_KINDS = [
+	"function_declaration",
+	"function_expression",
+	"class_declaration",
+	"class",
+	"enum_declaration",
+	"interface_declaration",
+	"type_alias_declaration",
+	"internal_module",
+	"import_alias"
+];
+function isBindingLeafKind(kind) {
+	return kind === "identifier" || kind === "type_identifier" || kind === "shorthand_property_identifier_pattern";
+}
+function isBindingPatternKind(kind) {
+	return isBindingLeafKind(kind) || kind === "object_pattern" || kind === "array_pattern" || kind === "rest_pattern";
+}
+function stringValue(node) {
+	return node?.text().replace(/^['"]|['"]$/g, "") ?? null;
+}
+function importSource(importStmt) {
+	return stringValue(importStmt.find({ rule: { kind: "string" } }) ?? null);
+}
+function isTypeOnlyImport(importStmt) {
+	return importStmt.children().some((child) => child.kind() === "type");
+}
+function namedImportsNode(importStmt) {
+	return importStmt.find({ rule: { kind: "named_imports" } }) ?? null;
+}
+function importSpecNames(spec) {
+	const ids = spec.children().filter((child) => child.kind() === "identifier");
+	if (ids.length === 0) return null;
+	return {
+		importedName: ids[0].text(),
+		localName: ids[1]?.text() ?? ids[0].text(),
+		typeOnly: spec.children().some((child) => child.kind() === "type")
+	};
+}
+function findImportStatements(root) {
+	return root.findAll({ rule: { kind: "import_statement" } }).filter((stmt) => stmt.parent()?.kind() === "program").toSorted((a, b) => a.range().start.index - b.range().start.index);
+}
+function importBindings(importStmt) {
+	const source = importSource(importStmt);
+	if (!source) return [];
+	const requireClause = importStmt.children().find((child) => child.kind() === "import_require_clause");
+	if (requireClause) {
+		const local = requireClause.children().find((child) => child.kind() === "identifier");
+		return local ? [{
+			localName: local.text(),
+			source,
+			typeOnly: false
+		}] : [];
+	}
+	const typeOnly = isTypeOnlyImport(importStmt);
+	const clause = importStmt.children().find((child) => child.kind() === "import_clause");
+	if (!clause) return [];
+	const bindings = [];
+	for (const child of clause.children()) {
+		if (child.kind() === "identifier") {
+			bindings.push({
+				localName: child.text(),
+				source,
+				typeOnly
+			});
+			continue;
+		}
+		if (child.kind() === "namespace_import") {
+			const local = child.children().find((grandchild) => grandchild.kind() === "identifier");
+			if (local) bindings.push({
+				localName: local.text(),
+				source,
+				typeOnly
+			});
+			continue;
+		}
+		if (child.kind() !== "named_imports") continue;
+		for (const spec of child.findAll({ rule: { kind: "import_specifier" } })) {
+			const names = importSpecNames(spec);
+			if (!names) continue;
+			bindings.push({
+				...names,
+				source,
+				typeOnly: typeOnly || names.typeOnly
+			});
+		}
+	}
+	return bindings;
+}
+function buildAddNamedImportEdit(options) {
+	const { importName, imports, insertionIndex, moduleName, root, source } = options;
+	const existingImport = imports.find((importStmt) => importSource(importStmt) === moduleName && !isTypeOnlyImport(importStmt) && namedImportsNode(importStmt)) ?? null;
+	const namedImports = existingImport ? namedImportsNode(existingImport) : null;
+	if (namedImports) {
+		const specTexts = namedImports.findAll({ rule: { kind: "import_specifier" } }).map((spec) => {
+			const names = importSpecNames(spec);
+			return names?.importedName === importName && names.localName === importName ? importName : spec.text();
+		});
+		const nextSpecTexts = specTexts.includes(importName) ? specTexts : [...specTexts, importName];
+		return namedImports.replace(`{ ${nextSpecTexts.join(", ")} }`);
+	}
+	const pos = insertionIndex(root, imports, source);
+	return {
+		startPos: pos,
+		endPos: pos,
+		insertedText: pos === 0 || source[pos - 1] === "\n" ? `import { ${importName} } from "${moduleName}";\n\n` : `\nimport { ${importName} } from "${moduleName}";`
+	};
+}
+function collectBindingNames(node, names) {
+	if (isBindingLeafKind(node.kind())) {
+		names.add(node.text());
+		return;
+	}
+	for (const child of node.children()) {
+		if (child.kind() === "property_identifier") continue;
+		if (child.kind() === "=") break;
+		collectBindingNames(child, names);
+	}
+}
+function firstDeclaratorChild(node) {
+	return node.children().find((child) => child.kind() !== "=") ?? null;
+}
+function collectDirectBindingChildren(node, names) {
+	for (const child of node.children()) {
+		if (child.kind() === "=") break;
+		if (isBindingPatternKind(child.kind())) collectBindingNames(child, names);
+	}
+}
+function collectParameters(root, names) {
+	for (const param of root.findAll({ rule: { any: [{ kind: "required_parameter" }, { kind: "optional_parameter" }] } })) collectDirectBindingChildren(param, names);
+}
+function collectDeclarationNames(root, names) {
+	for (const decl of root.findAll({ rule: { any: DECLARATION_KINDS.map((kind) => ({ kind })) } })) {
+		const name = decl.children().find((child) => child.kind() === "identifier" || child.kind() === "type_identifier");
+		if (name) names.add(name.text());
+	}
+}
+function collectArrowParameters(root, names) {
+	for (const arrow of root.findAll({ rule: { kind: "arrow_function" } })) {
+		const children = arrow.children();
+		const arrowIndex = children.findIndex((child) => child.kind() === "=>");
+		if (arrowIndex === -1) continue;
+		for (const child of children.slice(0, arrowIndex)) {
+			if (child.kind() === "=") break;
+			if (isBindingPatternKind(child.kind())) collectBindingNames(child, names);
+		}
+	}
+}
+function collectForInBindings(root, names) {
+	for (const loop of root.findAll({ rule: { kind: "for_in_statement" } })) {
+		const children = loop.children();
+		const keywordIndex = children.findIndex((child) => child.kind() === "in" || child.kind() === "of");
+		if (keywordIndex === -1) continue;
+		for (const child of children.slice(0, keywordIndex)) collectBindingNames(child, names);
+	}
+}
+function localDeclarationNames(root) {
+	const names = /* @__PURE__ */ new Set();
+	for (const decl of root.findAll({ rule: { kind: "variable_declarator" } })) {
+		const binding = firstDeclaratorChild(decl);
+		if (binding) collectBindingNames(binding, names);
+	}
+	collectParameters(root, names);
+	collectDeclarationNames(root, names);
+	for (const catchClause of root.findAll({ rule: { kind: "catch_clause" } })) collectDirectBindingChildren(catchClause, names);
+	collectArrowParameters(root, names);
+	collectForInBindings(root, names);
+	return names;
+}
+//#endregion
+export { importSpecNames as a, importSource as i, findImportStatements as n, isTypeOnlyImport as o, importBindings as r, localDeclarationNames as s, buildAddNamedImportEdit as t };

package/dist/codemods/v2/apply-to-deploy/scripts/transform.js

@@ -3,6 +3,16 @@ import * as path from "pathe";
 const ARG_VALUE = `(?:[^\\s'"\`;&|]+|'[^']*'|"(?:(?:\\\\.)|[^"\\\\])*")`;
 const GLOBAL_ARG_PATTERN = `(?:(?:\\s+(?:--verbose|--json|-j))|(?:\\s+(?:--env-file|--env-file-if-exists|-e)(?:=${ARG_VALUE}|\\s+${ARG_VALUE})))*`;
 const APPLY_PATTERN = new RegExp(`(?<![\\w-])tailor-sdk(?:@[^\\s'"\`]+)?(?![\\w-])(${GLOBAL_ARG_PATTERN}\\s+)apply(?![-\\w])`, "g");
+const SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
+	".ts",
+	".tsx",
+	".mts",
+	".cts",
+	".js",
+	".jsx",
+	".mjs",
+	".cjs"
+]);
 function replaceApply(value) {
 	return value.replace(APPLY_PATTERN, (match) => `${match.slice(0, -5)}deploy`);
 }
@@ -12,6 +22,10 @@ function transformText(source) {
 	const updated = replaceApply(source);
 	return updated === source ? null : updated;
 }
+function transformSourceText(source) {
+	const updated = source.split(/(\r\n|\n|\r)/).map((part, index) => index % 2 === 0 ? replaceApply(part) : part).join("");
+	return updated === source ? null : updated;
+}
 function transformPackageJson(source) {
 	let parsed;
 	try {
@@ -44,7 +58,9 @@ function transformPackageJson(source) {
 */
 function transform(source, filePath) {
 	if (!source.includes("tailor-sdk")) return null;
-	if (path.extname(filePath).toLowerCase() === ".json") return transformPackageJson(source);
+	const ext = path.extname(filePath).toLowerCase();
+	if (ext === ".json") return transformPackageJson(source);
+	if (SOURCE_EXTENSIONS.has(ext)) return transformSourceText(source);
 	return transformText(source);
 }
 //#endregion

package/dist/codemods/v2/auth-attributes-rename/scripts/transform.js

@@ -0,0 +1,213 @@
+import { Lang, parse } from "@ast-grep/napi";
+//#region codemods/v2/auth-attributes-rename/scripts/transform.ts
+const SDK_MODULE = "@tailor-platform/sdk";
+const TYPE_RENAME_MAP = {
+	AttributeMap: "Attributes",
+	UserAttributeMap: "UserAttributes",
+	InferredAttributeMap: "InferredAttributes"
+};
+function quickFilter(source) {
+	return source.includes(SDK_MODULE) && Object.keys(TYPE_RENAME_MAP).some((name) => source.includes(name));
+}
+function isSdkModuleLiteral(node) {
+	return node.kind() === "string" && /^["']@tailor-platform\/sdk["']$/.test(node.text());
+}
+function hasSdkModuleLiteral(node) {
+	return node.findAll({ rule: { kind: "string" } }).some(isSdkModuleLiteral);
+}
+function moduleSpecifierLiteral(node) {
+	const directLiteral = node.children().find((child) => child.kind() === "string");
+	if (directLiteral) return directLiteral;
+	return node.children().find((child) => child.kind() === "module")?.children().find((child) => child.kind() === "string");
+}
+function hasSdkModuleSpecifier(node) {
+	const literal = moduleSpecifierLiteral(node);
+	return literal ? isSdkModuleLiteral(literal) : false;
+}
+function identifierChildren(node) {
+	return node.children().filter((child) => child.kind() === "identifier");
+}
+function typeIdentifierChildren(node) {
+	return node.children().filter((child) => child.kind() === "type_identifier");
+}
+function sameRange(a, b) {
+	const ar = a.range();
+	const br = b.range();
+	return ar.start.index === br.start.index && ar.end.index === br.end.index;
+}
+function addReplacement(edits, editedRanges, node, replacement) {
+	if (node.text() === replacement) return;
+	const r = node.range();
+	const key = `${r.start.index}:${r.end.index}`;
+	if (editedRanges.has(key)) return;
+	editedRanges.add(key);
+	edits.push(node.replace(replacement));
+}
+function renamedType(name) {
+	return TYPE_RENAME_MAP[name];
+}
+function isDeclarationName(node) {
+	const parent = node.parent();
+	if (!parent || ![
+		"class_declaration",
+		"enum_declaration",
+		"interface_declaration",
+		"type_alias_declaration",
+		"type_parameter"
+	].includes(parent.kind())) return false;
+	const name = parent?.field("name");
+	return !!name && sameRange(name, node);
+}
+function isNestedTypeName(node) {
+	return node.parent()?.kind() === "nested_type_identifier";
+}
+function declarationName(node) {
+	if ([
+		"class_declaration",
+		"enum_declaration",
+		"interface_declaration",
+		"type_alias_declaration"
+	].includes(node.kind())) return node.field("name") ?? void 0;
+	if (node.kind() !== "export_statement") return void 0;
+	return node.children().find((child) => [
+		"class_declaration",
+		"enum_declaration",
+		"interface_declaration",
+		"type_alias_declaration"
+	].includes(child.kind()))?.field("name") ?? void 0;
+}
+function scopeDeclaresType(scope, name, reference) {
+	return scope.children().some((child) => {
+		const declaredName = declarationName(child);
+		return !!declaredName && declaredName.text() === name && !sameRange(declaredName, reference);
+	});
+}
+function hasTypeParameterShadow(node, name) {
+	return node.findAll({ rule: { kind: "type_parameter" } }).some((parameter) => typeIdentifierChildren(parameter)[0]?.text() === name);
+}
+function isShadowedTypeReference(node, name) {
+	let current = node.parent();
+	while (current) {
+		if (current.kind() === "statement_block" && scopeDeclaresType(current, name, node)) return true;
+		if ([
+			"class_declaration",
+			"function_declaration",
+			"interface_declaration",
+			"method_definition",
+			"type_alias_declaration"
+		].includes(current.kind()) && hasTypeParameterShadow(current, name)) return true;
+		current = current.parent();
+	}
+	return false;
+}
+function collectSdkImports(root, edits, editedRanges) {
+	const localTypeRenames = /* @__PURE__ */ new Map();
+	const namespaceNames = /* @__PURE__ */ new Set();
+	const importStmts = root.findAll({ rule: { kind: "import_statement" } });
+	for (const importStmt of importStmts) {
+		if (!hasSdkModuleSpecifier(importStmt)) continue;
+		const namespaceImports = importStmt.findAll({ rule: { kind: "namespace_import" } });
+		for (const namespaceImport of namespaceImports) {
+			const localName = identifierChildren(namespaceImport).at(-1)?.text();
+			if (localName) namespaceNames.add(localName);
+		}
+		const specs = importStmt.findAll({ rule: { kind: "import_specifier" } });
+		for (const spec of specs) {
+			const identifiers = identifierChildren(spec);
+			const imported = identifiers[0];
+			if (!imported) continue;
+			const replacement = renamedType(imported.text());
+			if (!replacement) continue;
+			addReplacement(edits, editedRanges, imported, replacement);
+			if (identifiers.length === 1) localTypeRenames.set(imported.text(), replacement);
+		}
+	}
+	return {
+		localTypeRenames,
+		namespaceNames
+	};
+}
+function rewriteSdkExports(root, edits, editedRanges) {
+	const exportStmts = root.findAll({ rule: { kind: "export_statement" } });
+	for (const exportStmt of exportStmts) {
+		if (!hasSdkModuleSpecifier(exportStmt)) continue;
+		const specs = exportStmt.findAll({ rule: { kind: "export_specifier" } });
+		for (const spec of specs) {
+			const exported = identifierChildren(spec)[0];
+			if (!exported) continue;
+			const replacement = renamedType(exported.text());
+			if (replacement) addReplacement(edits, editedRanges, exported, replacement);
+		}
+	}
+}
+function rewriteModuleAugmentations(root, edits, editedRanges) {
+	const declarations = root.findAll({ rule: { kind: "ambient_declaration" } });
+	for (const declaration of declarations) {
+		if (!hasSdkModuleSpecifier(declaration)) continue;
+		const interfaces = declaration.findAll({ rule: { kind: "interface_declaration" } });
+		for (const iface of interfaces) {
+			const name = typeIdentifierChildren(iface)[0];
+			if (name?.text() === "AttributeMap") addReplacement(edits, editedRanges, name, "Attributes");
+		}
+	}
+}
+function rewriteLocalTypeReferences(root, edits, editedRanges, localTypeRenames) {
+	if (localTypeRenames.size === 0) return;
+	const typeIdentifiers = root.findAll({ rule: { kind: "type_identifier" } });
+	for (const typeIdentifier of typeIdentifiers) {
+		if (isDeclarationName(typeIdentifier) || isNestedTypeName(typeIdentifier)) continue;
+		const replacement = localTypeRenames.get(typeIdentifier.text());
+		if (replacement && isShadowedTypeReference(typeIdentifier, typeIdentifier.text())) continue;
+		if (replacement) addReplacement(edits, editedRanges, typeIdentifier, replacement);
+	}
+}
+function rewriteNamespaceTypeReferences(root, edits, editedRanges, namespaceNames) {
+	if (namespaceNames.size === 0) return;
+	const nestedTypes = root.findAll({ rule: { kind: "nested_type_identifier" } });
+	for (const nestedType of nestedTypes) {
+		const namespaceName = identifierChildren(nestedType)[0]?.text();
+		if (!namespaceName || !namespaceNames.has(namespaceName)) continue;
+		const typeName = typeIdentifierChildren(nestedType).at(-1);
+		if (!typeName) continue;
+		const replacement = renamedType(typeName.text());
+		if (replacement) addReplacement(edits, editedRanges, typeName, replacement);
+	}
+}
+function isSdkImportCall(node) {
+	return node.kind() === "call_expression" && hasSdkModuleLiteral(node);
+}
+function rewriteImportTypeReferences(root, edits, editedRanges) {
+	const members = root.findAll({ rule: { kind: "member_expression" } });
+	for (const member of members) {
+		const object = member.field("object");
+		if (!object || !isSdkImportCall(object)) continue;
+		const property = member.field("property");
+		if (!property || property.kind() !== "property_identifier") continue;
+		const replacement = renamedType(property.text());
+		if (replacement) addReplacement(edits, editedRanges, property, replacement);
+	}
+}
+/**
+* Rename the v1 auth attribute type API to its v2 names only when a reference
+* can be tied to `@tailor-platform/sdk`.
+* @param source - File contents
+* @param _filePath - Absolute path to the file (kept for the runner signature)
+* @returns Transformed source or null when nothing matched.
+*/
+function transform(source, _filePath) {
+	if (!quickFilter(source)) return null;
+	const filePath = _filePath?.toLowerCase();
+	const root = parse(filePath?.endsWith(".tsx") || filePath?.endsWith(".jsx") ? Lang.Tsx : filePath ? Lang.TypeScript : source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const edits = [];
+	const editedRanges = /* @__PURE__ */ new Set();
+	const { localTypeRenames, namespaceNames } = collectSdkImports(root, edits, editedRanges);
+	rewriteSdkExports(root, edits, editedRanges);
+	rewriteModuleAugmentations(root, edits, editedRanges);
+	rewriteLocalTypeReferences(root, edits, editedRanges, localTypeRenames);
+	rewriteNamespaceTypeReferences(root, edits, editedRanges, namespaceNames);
+	rewriteImportTypeReferences(root, edits, editedRanges);
+	if (edits.length === 0) return null;
+	return root.commitEdits(edits);
+}
+//#endregion
+export { transform as default };