@tailor-platform/sdk-codemod 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @tailor-platform/sdk-codemod
 
+## 0.7.0
+
+### Minor Changes
+
+- [#2088](https://github.com/tailor-platform/sdk/pull/2088) [`c9f91d9`](https://github.com/tailor-platform/sdk/commit/c9f91d944e4b041250979ec4438c36cabf818e14) Thanks [@dqn](https://github.com/dqn)! - The `--branch` option of `tailor setup branch` is renamed to `--target`, so it no longer collides with the subcommand name. The old spelling keeps working as a deprecated alias until v3 and prints a deprecation warning when used; `tailor upgrade` offers the `v3/setup-branch-flag-rename` codemod to rewrite `setup branch --branch` invocations across package.json scripts, shell and Windows scripts, YAML, Markdown, and JavaScript/TypeScript sources. The `--branch` option of `setup tag`, `setup preview`, and `setup coordinate` is unchanged.
+
+### Patch Changes
+
+- [#2137](https://github.com/tailor-platform/sdk/pull/2137) [`d38497a`](https://github.com/tailor-platform/sdk/commit/d38497ac214f547483028e2622d53dbf1414ecb2) Thanks [@dqn](https://github.com/dqn)! - Keep LLM review detection working in multi-major upgrades: each codemod's review detector and suspicious patterns now inspect the file as of that codemod's position in the transform chain, so a later codemod's rewrite can no longer silently hide an earlier codemod's review findings.
+
+- [#2138](https://github.com/tailor-platform/sdk/pull/2138) [`870c8cd`](https://github.com/tailor-platform/sdk/commit/870c8cdaa007adcbb8f565fe9b4d238d98c00e6d) Thanks [@dqn](https://github.com/dqn)! - Stop exporting internal declarations that were only used within their own module.
+
+- [#2089](https://github.com/tailor-platform/sdk/pull/2089) [`90948e6`](https://github.com/tailor-platform/sdk/commit/90948e6f6e1f3624a9c30595b3ff3a46ffbbced0) Thanks [@toiroakr](https://github.com/toiroakr)! - Add a targeted hint to the `Remote schema drift detected` error when every reported drift is a missing script hash — the pattern left by an environment last deployed with the pre-v2 CLI, which never wrote script hashes. The hint points at `migration sync <N>`, which is already listed as one of the general resolution options. The v2 migration guide (`docs/migration/v2.md`) now also documents that the first `tailor deploy` against such an environment needs a `migration sync` first.
+
+## 0.6.0
+
+### Minor Changes
+
+- [#2075](https://github.com/tailor-platform/sdk/pull/2075) [`bd0e397`](https://github.com/tailor-platform/sdk/commit/bd0e39720015248e6ebb2c31efca49f9238b7060) Thanks [@dqn](https://github.com/dqn)! - `tailor function test-run` is renamed to `tailor function run`. The old name keeps working as a deprecated alias until v3 and prints a deprecation warning when used; `tailor upgrade` offers the `v3/function-test-run-rename` codemod to rewrite `function test-run` invocations across package.json scripts, shell and Windows scripts, YAML, Markdown, and JavaScript/TypeScript sources.
+
+### Patch Changes
+
+- [#2031](https://github.com/tailor-platform/sdk/pull/2031) [`ecc18ee`](https://github.com/tailor-platform/sdk/commit/ecc18eebc4e5c03c78e362a9b17bacc31bc88a31) Thanks [@renovate](https://github.com/apps/renovate)! - fix(deps): update dependency @ast-grep/napi to v0.45.1
+
+- [#2065](https://github.com/tailor-platform/sdk/pull/2065) [`5a3a0e1`](https://github.com/tailor-platform/sdk/commit/5a3a0e1ce8bfadb769dc4540ef257e944f0c077e) Thanks [@toiroakr](https://github.com/toiroakr)! - Raise the minimum supported Node.js version to 22.18.0 (from 22.15.0).
+  
+  `tailor seed validate` crashed on Node 22.15.0–22.17.x with `Expected a string, an ArrayBuffer, or a TypedArray to be returned for the "source" from the "load" hook but got null`. This is a Node.js bug ([nodejs/node#58607](https://github.com/nodejs/node/issues/58607)): requiring a `node:`-scheme-only builtin (`node:sqlite`, used internally by the seed validator) while both a synchronous `resolve` and `load` hook are registered via `module.registerHooks()` crashes the loader on those versions. The SDK always registers both hooks, so any project on Node 22.15.0–22.17.x hit this. Node fixed it upstream in 22.18.0 ([nodejs/node#58612](https://github.com/nodejs/node/pull/58612)); this release raises `engines.node` to match, since Node 22.15.0–22.17.x never actually supported `tailor seed validate`.
+
 ## 0.5.0
 
 ### Minor Changes

package/dist/codemods/v2/auth-attributes-rename/scripts/transform.js

@@ -197,7 +197,8 @@ function rewriteImportTypeReferences(root, edits, editedRanges) {
 function transform(source, _filePath) {
 	if (!quickFilter(source)) return null;
 	const filePath = _filePath?.toLowerCase();
-	const root = parse(filePath?.endsWith(".tsx") || filePath?.endsWith(".jsx") ? Lang.Tsx : filePath ? Lang.TypeScript : source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const lang = filePath?.endsWith(".tsx") || filePath?.endsWith(".jsx") ? Lang.Tsx : filePath ? Lang.TypeScript : source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript;
+	const root = parse(lang, source).root();
 	const edits = [];
 	const editedRanges = /* @__PURE__ */ new Set();
 	const { localTypeRenames, namespaceNames } = collectSdkImports(root, edits, editedRanges);

package/dist/codemods/v2/auth-invoker-unwrap/scripts/transform.js

@@ -224,7 +224,8 @@ function renameQuotedKey(node) {
 function transformAuthInvoker(source, _filePath, options = {}) {
 	if (!quickFilter(source)) return null;
 	const renameOptionKeys = options.renameOptionKeys ?? true;
-	const root = parse(source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const lang = source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript;
+	const root = parse(lang, source).root();
 	const calls = findInvokerCalls(root).filter((c) => isSupportedInvokerValueCall(c.callNode));
 	const edits = calls.map((c) => c.callNode.replace(c.argText));
 	if (renameOptionKeys) {

package/dist/codemods/v2/execute-script-arg/scripts/transform.js

@@ -44,7 +44,8 @@ function isExecuteScriptArg(stringifyCall) {
 */
 function transform(source, _filePath) {
 	if (!quickFilter(source)) return null;
-	const root = parse(source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const lang = source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript;
+	const root = parse(lang, source).root();
 	const edits = [];
 	for (const match of root.findAll({ rule: { pattern: "JSON.stringify($X)" } })) {
 		if (!isExecuteScriptArg(match)) continue;

package/dist/codemods/v2/plugin-cli-import/scripts/transform.js

@@ -43,7 +43,8 @@ function hasNonNamedBinding(importStmt) {
 */
 function transform(source, _filePath) {
 	if (!source.includes(CLI_MODULE)) return null;
-	const root = parse(source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const lang = source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript;
+	const root = parse(lang, source).root();
 	const edits = [];
 	const importStmts = root.findAll({ rule: {
 		kind: "import_statement",

package/dist/codemods/v2/principal-unify/scripts/transform.js

@@ -699,18 +699,19 @@ function transformResolverBody(arrowNode, edits, parseContext) {
 		const principalAliasBindings = [];
 		for (const child of pattern.children()) {
 			const kind = child.kind();
-			if (kind === "shorthand_property_identifier_pattern" && child.text() === "user") if (aliasRenamedUser) {
-				edits.push(child.replace("caller: user"));
-				aliasedShorthandUser = true;
-				principalAliasBindings.push({
-					name: "user",
-					bindingStart: child.range().start.index
-				});
-			} else {
-				edits.push(child.replace("caller"));
-				renamedShorthandUser = true;
-			}
-			else if (kind === "pair_pattern") {
+			if (kind === "shorthand_property_identifier_pattern" && child.text() === "user") {
+				if (aliasRenamedUser) {
+					edits.push(child.replace("caller: user"));
+					aliasedShorthandUser = true;
+					principalAliasBindings.push({
+						name: "user",
+						bindingStart: child.range().start.index
+					});
+				} else {
+					edits.push(child.replace("caller"));
+					renamedShorthandUser = true;
+				}
+			} else if (kind === "pair_pattern") {
 				const key = child.field("key");
 				if (key && key.text() === "user") {
 					edits.push(key.replace("caller"));
@@ -722,16 +723,18 @@ function transformResolverBody(arrowNode, edits, parseContext) {
 				}
 			} else if (kind === "object_assignment_pattern") {
 				const inner = child.children().find((c) => c.kind() === "shorthand_property_identifier_pattern");
-				if (inner && inner.text() === "user") if (aliasRenamedUser) {
-					edits.push(inner.replace("caller: user"));
-					aliasedShorthandUser = true;
-					principalAliasBindings.push({
-						name: "user",
-						bindingStart: inner.range().start.index
-					});
-				} else {
-					edits.push(inner.replace("caller"));
-					renamedShorthandUser = true;
+				if (inner && inner.text() === "user") {
+					if (aliasRenamedUser) {
+						edits.push(inner.replace("caller: user"));
+						aliasedShorthandUser = true;
+						principalAliasBindings.push({
+							name: "user",
+							bindingStart: inner.range().start.index
+						});
+					} else {
+						edits.push(inner.replace("caller"));
+						renamedShorthandUser = true;
+					}
 				}
 			}
 		}
@@ -1061,33 +1064,36 @@ function transformPrincipalCallbackParam(fn, edits, typeContext) {
 	let renamedShorthandUser = false;
 	for (const child of pattern.children()) {
 		const kind = child.kind();
-		if (kind === "shorthand_property_identifier_pattern" && child.text() === "user") if (aliasRenamedUser) {
-			edits.push(child.replace("invoker: user"));
-			aliasedShorthandUser = true;
-			principalAliasBindings.push({
-				name: "user",
-				bindingStart: child.range().start.index
-			});
-		} else {
-			edits.push(child.replace("invoker"));
-			renamedShorthandUser = true;
-		}
-		else if (kind === "pair_pattern") {
-			const key = child.field("key");
-			if (key?.text() === "user") edits.push(key.replace("invoker"));
-		} else if (kind === "object_assignment_pattern") {
-			const inner = child.children().find((c) => c.kind() === "shorthand_property_identifier_pattern");
-			if (inner?.text() === "user") if (aliasRenamedUser) {
-				edits.push(inner.replace("invoker: user"));
+		if (kind === "shorthand_property_identifier_pattern" && child.text() === "user") {
+			if (aliasRenamedUser) {
+				edits.push(child.replace("invoker: user"));
 				aliasedShorthandUser = true;
 				principalAliasBindings.push({
 					name: "user",
-					bindingStart: inner.range().start.index
+					bindingStart: child.range().start.index
 				});
 			} else {
-				edits.push(inner.replace("invoker"));
+				edits.push(child.replace("invoker"));
 				renamedShorthandUser = true;
 			}
+		} else if (kind === "pair_pattern") {
+			const key = child.field("key");
+			if (key?.text() === "user") edits.push(key.replace("invoker"));
+		} else if (kind === "object_assignment_pattern") {
+			const inner = child.children().find((c) => c.kind() === "shorthand_property_identifier_pattern");
+			if (inner?.text() === "user") {
+				if (aliasRenamedUser) {
+					edits.push(inner.replace("invoker: user"));
+					aliasedShorthandUser = true;
+					principalAliasBindings.push({
+						name: "user",
+						bindingStart: inner.range().start.index
+					});
+				} else {
+					edits.push(inner.replace("invoker"));
+					renamedShorthandUser = true;
+				}
+			}
 		}
 	}
 	if (!renamedShorthandUser) {

package/dist/codemods/v2/wait-point-rename/scripts/transform.js

@@ -24,7 +24,8 @@ function isInsideImportStatement(node) {
 function transform(source, _filePath) {
 	if (!Object.keys(RENAMES).some((name) => source.includes(name))) return null;
 	if (!source.includes(SDK_MODULE)) return null;
-	const root = parse(source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript, source).root();
+	const lang = source.includes("</") || source.includes("/>") ? Lang.Tsx : Lang.TypeScript;
+	const root = parse(lang, source).root();
 	const edits = [];
 	const needsBodyRename = /* @__PURE__ */ new Set();
 	const importStmts = root.findAll({ rule: {

package/dist/codemods/v3/function-test-run-rename/scripts/transform.js

@@ -0,0 +1,48 @@
+import * as path from "pathe";
+//#region codemods/v3/function-test-run-rename/scripts/transform.ts
+const TOKEN_SEPARATOR = "(?:[ \\t]|\\\\\\r?\\n)+";
+const COMMAND_PATTERN = new RegExp(`(?<![\\w.-])(tailor(?:-sdk)?(?:\\.(?:cmd|ps1|exe))?${TOKEN_SEPARATOR}function${TOKEN_SEPARATOR})test-run(?![\\w.-])`, "g");
+function replaceCommand(value) {
+	return value.replace(COMMAND_PATTERN, "$1run");
+}
+function transformText(source) {
+	const updated = replaceCommand(source);
+	return updated === source ? null : updated;
+}
+function transformPackageJson(source) {
+	let parsed;
+	try {
+		parsed = JSON.parse(source);
+	} catch {
+		return null;
+	}
+	let modified = false;
+	const scripts = parsed.scripts;
+	if (typeof scripts === "object" && scripts != null && !Array.isArray(scripts)) for (const [name, value] of Object.entries(scripts)) {
+		if (typeof value !== "string") continue;
+		const updated = replaceCommand(value);
+		if (updated !== value) {
+			scripts[name] = updated;
+			modified = true;
+		}
+	}
+	if (!modified) return null;
+	const trailing = source.endsWith("\n") ? "\n" : "";
+	return JSON.stringify(parsed, null, 2) + trailing;
+}
+/**
+* Rename `tailor function test-run` invocations to `tailor function run`.
+*
+* `test-run` remains as a deprecated alias until v3, where only `run` is
+* recognized.
+* @param source - File contents
+* @param filePath - Absolute path to the file (used to dispatch package.json vs text)
+* @returns Transformed source or null when nothing matched.
+*/
+function transform(source, filePath) {
+	if (!source.includes("test-run")) return null;
+	if (path.extname(filePath).toLowerCase() === ".json") return transformPackageJson(source);
+	return transformText(source);
+}
+//#endregion
+export { transform as default };

package/dist/codemods/v3/setup-branch-flag-rename/scripts/transform.js

@@ -0,0 +1,76 @@
+import * as path from "pathe";
+//#region codemods/v3/setup-branch-flag-rename/scripts/transform.ts
+const TOKEN_SEPARATOR = "(?:[ \\t]|\\\\\\r?\\n)+";
+const COMMAND_START = new RegExp(`(?<![\\w.-])tailor(?:-sdk)?(?:\\.(?:cmd|ps1|exe))?${TOKEN_SEPARATOR}setup${TOKEN_SEPARATOR}branch(?![\\w.-])`, "g");
+const NEXT_TOKEN = new RegExp(`${TOKEN_SEPARATOR}("[^"\\n]*"|'[^'\\n]*'|[^\\s;&|]+)`, "y");
+function replaceCommand(value) {
+	let result = "";
+	let cursor = 0;
+	COMMAND_START.lastIndex = 0;
+	for (let match = COMMAND_START.exec(value); match; match = COMMAND_START.exec(value)) {
+		let pos = COMMAND_START.lastIndex;
+		result += value.slice(cursor, pos);
+		NEXT_TOKEN.lastIndex = pos;
+		for (let token = NEXT_TOKEN.exec(value); token; token = NEXT_TOKEN.exec(value)) {
+			const chunk = token[0];
+			const word = token[1];
+			if (word.startsWith("#")) break;
+			const quoted = /^(['"])(--branch(?:=.*)?)\1$/.exec(word);
+			const quote = quoted ? quoted[1] : "";
+			const bare = quoted ? quoted[2] : word;
+			if (bare === "--branch" || bare.startsWith("--branch=")) {
+				const separator = chunk.slice(0, chunk.length - word.length);
+				result += `${separator}${quote}--target${bare.slice(8)}${quote}`;
+			} else result += chunk;
+			pos = NEXT_TOKEN.lastIndex;
+			if (/\$\(|`|<\(|>\(/.test(word)) break;
+		}
+		cursor = pos;
+		COMMAND_START.lastIndex = pos;
+	}
+	result += value.slice(cursor);
+	return result;
+}
+function transformText(source) {
+	const updated = replaceCommand(source);
+	return updated === source ? null : updated;
+}
+function transformPackageJson(source) {
+	let parsed;
+	try {
+		parsed = JSON.parse(source);
+	} catch {
+		return null;
+	}
+	let modified = false;
+	const scripts = parsed.scripts;
+	if (typeof scripts === "object" && scripts != null && !Array.isArray(scripts)) for (const [name, value] of Object.entries(scripts)) {
+		if (typeof value !== "string") continue;
+		const updated = replaceCommand(value);
+		if (updated !== value) {
+			scripts[name] = updated;
+			modified = true;
+		}
+	}
+	if (!modified) return null;
+	const trailing = source.endsWith("\n") ? "\n" : "";
+	return JSON.stringify(parsed, null, 2) + trailing;
+}
+/**
+* Rename the `--branch` option of `tailor setup branch` invocations to
+* `--target`.
+*
+* `--branch` remains as a deprecated alias until v3, where only
+* `--target` is recognized. `setup tag`, `setup preview`, and
+* `setup coordinate` keep their own `--branch` option unchanged.
+* @param source - File contents
+* @param filePath - Absolute path to the file (used to dispatch package.json vs text)
+* @returns Transformed source or null when nothing matched.
+*/
+function transform(source, filePath) {
+	if (!source.includes("--branch")) return null;
+	if (path.extname(filePath).toLowerCase() === ".json") return transformPackageJson(source);
+	return transformText(source);
+}
+//#endregion
+export { transform as default };

package/dist/index.js

@@ -123,6 +123,7 @@ const V2_NEXT_6 = "2.0.0-next.6";
 const V2_NEXT_7 = "2.0.0-next.7";
 const V2_NEXT_9 = "2.0.0-next.9";
 const V2_NEXT_11 = "2.0.0-next.11";
+const SETUP_BRANCH_RESIDUAL_FLAG = /(?:(?<![\w.-])tailor(?:-sdk)?(?:\.(?:cmd|ps1|exe))?|@tailor-platform\/sdk(?:@\S{1,32})?)[\s\\^`]{1,16}setup[\s\\^`]{1,16}branch\b(?:'[^'\n]*'|"[^"\n]*"|[^\n;&|'"#]|[\\^`]\r?\n)*(?:[ \t]|[\\^`]\r?\n)--branch(?![\w-])/;
 /** All registered codemods, in registration order. */
 const allCodemods = [
 	{
@@ -816,7 +817,11 @@ const allCodemods = [
 			"  them to StartWorkflowOptions / ExecJobFunctionOptions.",
 			"- An invoker option passed via a variable or spread (not a literal object) —",
 			"  the codemod only inspects literal object arguments; rename the invoker key",
-			"  to authInvoker in the options object's own definition."
+			"  to authInvoker in the options object's own definition.",
+			"- A renamed triggerJobFunction call whose target is another workflow job —",
+			"  rewrite it further to that job's own .start() method (e.g. worker.start(args)).",
+			"  Calling execJobFunction directly is not detected as a build-time dependency",
+			"  and fails the build."
 		].join("\n")
 	},
 	{
@@ -849,7 +854,45 @@ const allCodemods = [
 			"- mockWorkflow().startJobFunction in tests — assert on the execJobFunction vi.fn",
 			"  instead; the alias was the same mock function.",
 			"- A file that already imports ExecJobFunctionOptions alongside the removed type —",
-			"  rename the remaining references by hand and drop the duplicate specifier."
+			"  rename the remaining references by hand and drop the duplicate specifier.",
+			"- A renamed call whose target is another workflow job — rewrite it further to",
+			"  that job's own .start() method (e.g. worker.start(args)). Calling",
+			"  execJobFunction directly is not detected as a build-time dependency and fails",
+			"  the build."
+		].join("\n")
+	},
+	{
+		id: "v3/remove-workflow-exec-job-function",
+		name: "workflow.execJobFunction (imported) removed — use job.start()",
+		description: "`execJobFunction` on the `workflow` value imported from @tailor-platform/sdk/runtime(/workflow) is removed in v3. Calling it directly from a workflow job body to reach another job is not detected as a build-time dependency and has no working use; the target job's own `.start()` method is the only supported way to call it. This does not affect the ambient `tailor.workflow.execJobFunction` global — that's what `.start()` itself compiles down to at build time, and it remains fully supported.",
+		since: "1.0.0",
+		until: "3.0.0",
+		filePatterns: ["**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}"],
+		suspiciousPatterns: ["execJobFunction"],
+		examples: [{
+			before: "import { workflow } from \"@tailor-platform/sdk/runtime\";\n\nawait workflow.execJobFunction(\"worker\", { id: 1 });",
+			after: "import { worker } from \"./jobs/worker\";\n\nawait worker.start({ id: 1 });"
+		}],
+		prompt: [
+			"workflow.execJobFunction — the value imported from",
+			"@tailor-platform/sdk/runtime or @tailor-platform/sdk/runtime/workflow — is",
+			"removed in v3. Replace each call with the target job's own .start() method:",
+			"import the WorkflowJob the call names and call <job>.start(args, options)",
+			"instead of workflow.execJobFunction(\"<job-name>\", args, options).",
+			"",
+			"This only removes the re-export from @tailor-platform/sdk/runtime. It does",
+			"not affect the ambient tailor.workflow.execJobFunction global, which stays",
+			"fully supported and is what .start() itself compiles down to at build time.",
+			"This codemod does not rewrite ambient tailor.workflow.execJobFunction(...)",
+			"call sites, since removing the import re-export does not affect them — but",
+			"if such a call site sits inside workflow job source and calls another job",
+			"by name, a separate build-time check already rejects it; migrate that call",
+			"to the target job's own .start() method too.",
+			"",
+			"If the job name passed to execJobFunction is not a string literal (a truly",
+			"dynamic dispatch), there is currently no supported replacement — .start()",
+			"only targets a statically known job. Flag this case for a human instead of",
+			"guessing a rewrite."
 		].join("\n")
 	},
 	{
@@ -1303,7 +1346,7 @@ const allCodemods = [
 	{
 		id: "v2/seed-exec-to-cli-plugin",
 		name: "Generated seed exec.mjs → tailor seed CLI plugin",
-		description: "`seedPlugin` no longer generates the `exec.mjs` seed runner. Seeding and validation move to the `tailor seed` commands provided by the `@tailor-platform/sdk-plugin-seed` CLI plugin: install it as a devDependency, replace `node <distPath>/exec.mjs` invocations with `tailor seed apply` and `node <distPath>/exec.mjs validate` with `tailor seed validate`, and delete the stale generated `<distPath>/exec.mjs` file. Seed data and schema generation (`data/*.jsonl`, `data/*.schema.ts`) is unchanged, and the `tailor seed apply` options mirror the old script (`--machine-user`, `--namespace`, `--skip-idp`, `--truncate`, `--yes`, type-name arguments), plus a new `--upsert` flag to update existing rows instead of failing on duplicate ids.",
+		description: "`seedPlugin` no longer generates the `exec.mjs` seed runner. Seeding and validation move to the `tailor seed` commands provided by the `@tailor-platform/sdk-plugin-seed` CLI plugin: install it as a devDependency, replace `node <distPath>/exec.mjs` invocations with `tailor seed apply` and `node <distPath>/exec.mjs validate` with `tailor seed validate`, and delete the stale generated `<distPath>/exec.mjs` file. Seed data and schema generation (`data/*.jsonl`, `data/*.schema.ts`) is unchanged, and the `tailor seed apply` options mirror the old script (`--machine-user`, `--namespace`, `--skip-idp`, `--truncate`, `--yes`, entity-name arguments), plus a new `--upsert` flag to update existing rows instead of failing on duplicate ids.",
 		since: "1.0.0",
 		until: "2.0.0",
 		prereleaseUntil: V2_NEXT_9,
@@ -1328,8 +1371,8 @@ const allCodemods = [
 			"- Install @tailor-platform/sdk-plugin-seed as a devDependency next to",
 			"  @tailor-platform/sdk.",
 			"- Replace `node <distPath>/exec.mjs [options] [types...]` invocations with",
-			"  `tailor seed apply [options] [types...]` (same options: --machine-user/-m,",
-			"  --namespace/-n, --skip-idp, --truncate, --yes, and type-name arguments,",
+			"  `tailor seed apply [options] [entities...]` (same options: --machine-user/-m,",
+			"  --namespace/-n, --skip-idp, --truncate, --yes, and entity-name arguments,",
 			"  plus a new --upsert flag to update existing rows instead of failing on",
 			"  duplicate ids).",
 			"- Replace `node <distPath>/exec.mjs validate [path]` with",
@@ -1450,7 +1493,7 @@ const allCodemods = [
 	{
 		id: "v2/node-minimum-22-15-0",
 		name: "Node.js minimum version raised to 22.15.0",
-		description: "v2 requires Node.js **22.15.0** or later. This is the first version that includes `module.registerHooks()`, which the SDK uses to register its TypeScript loader hook synchronously in the main thread. No source change is required; ensure your environment runs Node.js 22.15.0+.",
+		description: "v2 requires Node.js **22.15.0** or later. This is the first version that includes `module.registerHooks()`, which the SDK uses to register its TypeScript loader hook synchronously in the main thread. The actual floor is now **22.18.0**: Node 22.15.0–22.17.x has a bug that crashes `tailor seed validate` when requiring `node:`-scheme-only builtins such as `node:sqlite`, fixed upstream by [nodejs/node#58612](https://github.com/nodejs/node/pull/58612) in 22.18.0. No source change is required; ensure your environment runs Node.js 22.18.0+.",
 		since: "1.0.0",
 		until: "2.0.0",
 		notice: true
@@ -1463,6 +1506,14 @@ const allCodemods = [
 		until: "2.0.0",
 		notice: true
 	},
+	{
+		id: "v2/tailordb-script-hash-migration-sync",
+		name: "First v2 deploy to a v1-deployed environment needs migration sync",
+		description: "The pre-v2 CLI never wrote a script hash into deployed schemas, so the first `tailor deploy` against an environment last deployed with it reports `Remote schema drift detected` with every scripted type showing `has no script hash on remote`. Run `tailor tailordb migration sync <current migration number>` once for that environment to write the missing hashes, then `tailor deploy` as usual. Preview/PR workspaces don't hit this, since they're built with v2 from the start. No source change is required.",
+		since: "1.0.0",
+		until: "2.0.0",
+		notice: true
+	},
 	{
 		id: "v2/dts-env-value-types",
 		name: "tailor.d.ts Env uses value types instead of literal values",
@@ -1496,6 +1547,65 @@ const allCodemods = [
 			"editing `tailor.d.ts`: it is generated and will be overwritten, and embedding",
 			"env values there is what leaked configured secrets into version control."
 		].join("\n")
+	},
+	{
+		id: "v3/function-test-run-rename",
+		name: "function test-run → function run",
+		description: "Rename `tailor function test-run` invocations to `tailor function run`. `test-run` remains as a deprecated alias until it is removed in v3.",
+		since: "1.22.0",
+		until: "3.0.0",
+		scriptPath: "v3/function-test-run-rename/scripts/transform.js",
+		filePatterns: [
+			"**/package.json",
+			"**/*.{sh,bash,zsh,ps1,cmd,bat,yml,yaml}",
+			"**/*.md",
+			"**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}"
+		],
+		legacyPatterns: [/\bfunction[\s\\]{1,16}test-run(?![\w.-])/],
+		sourceStringLegacyPatterns: [/\bfunction[\s\\]{1,16}test-run(?![\w.-])/],
+		examples: [{
+			lang: "sh",
+			before: "tailor function test-run resolvers/add.ts --arg '{\"a\":1,\"b\":2}'",
+			after: "tailor function run resolvers/add.ts --arg '{\"a\":1,\"b\":2}'"
+		}],
+		prompt: [
+			"The `tailor function test-run` subcommand is renamed to `tailor function run`;",
+			"the old name is removed in v3. Replace any remaining `function test-run`",
+			"invocations the codemod did not rewrite (e.g. wrapped across lines or invoked",
+			"through a package runner such as `npx @tailor-platform/sdk`) with",
+			"`function run`. Leave prose that merely mentions the old subcommand name",
+			"unchanged unless it documents a command to type."
+		].join("\n")
+	},
+	{
+		id: "v3/setup-branch-flag-rename",
+		name: "setup branch --branch → --target",
+		description: "Rename the `--branch` option of `tailor setup branch` invocations to `--target`. `--branch` remains as a deprecated alias until it is removed in v3. The `--branch` option of `setup tag`, `setup preview`, and `setup coordinate` is unchanged.",
+		since: "1.72.0",
+		until: "3.0.0",
+		scriptPath: "v3/setup-branch-flag-rename/scripts/transform.js",
+		filePatterns: [
+			"**/package.json",
+			"**/*.{sh,bash,zsh,ps1,cmd,bat,yml,yaml}",
+			"**/*.md",
+			"**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}"
+		],
+		legacyPatterns: [SETUP_BRANCH_RESIDUAL_FLAG],
+		sourceStringLegacyPatterns: [SETUP_BRANCH_RESIDUAL_FLAG],
+		examples: [{
+			lang: "sh",
+			before: "tailor setup branch --name my-app-stg --branch main",
+			after: "tailor setup branch --name my-app-stg --target main"
+		}],
+		prompt: [
+			"The `--branch` option of `tailor setup branch` is renamed to `--target`;",
+			"the old spelling is removed in v3. Replace any remaining `--branch` options of",
+			"`setup branch` invocations the codemod did not rewrite (e.g. wrapped across",
+			"lines or invoked through a package runner such as `npx @tailor-platform/sdk`)",
+			"with `--target`. Do not touch the `--branch` option of `setup tag`,",
+			"`setup preview`, or `setup coordinate`, which keeps its name, and leave prose",
+			"that merely mentions the option unchanged unless it documents a command to type."
+		].join("\n")
 	}
 ];
 /**
@@ -1996,6 +2106,27 @@ function legacyPatternWarnings(relative, content, sourceStringContent, sourceTex
 		return [`${relative}: contains ${Array.from(found).join(", ")} but was not migrated automatically (rule: ${lt.id}). Manual migration may be needed.`];
 	});
 }
+function lineRemapper(before, after) {
+	const hunks = structuredPatch("", "", before, after, "", "", { context: 0 }).hunks;
+	const lastLine = Math.max(1, after.split("\n").length - (after.endsWith("\n") ? 1 : 0));
+	const map = (line) => {
+		let offset = 0;
+		for (const hunk of hunks) {
+			if (line < hunk.oldStart) break;
+			if (hunk.oldLines === 0) {
+				offset += hunk.newLines;
+				continue;
+			}
+			if (line < hunk.oldStart + hunk.oldLines) {
+				if (hunk.newLines === 0) return hunk.newStart;
+				return Math.min(hunk.newStart + (line - hunk.oldStart), hunk.newStart + hunk.newLines - 1);
+			}
+			offset += hunk.newLines - hunk.oldLines;
+		}
+		return line + offset;
+	};
+	return (line) => Math.min(lastLine, Math.max(1, map(line)));
+}
 function compareReviewFindings(a, b) {
 	return a.file.localeCompare(b.file) || a.line - b.line || a.message.localeCompare(b.message) || a.excerpt.localeCompare(b.excerpt);
 }
@@ -2003,6 +2134,9 @@ function compareReviewFindings(a, b) {
 * Run multiple codemods on a project directory using in-memory chaining.
 * Each file is processed through all transforms whose filePatterns match it.
 * Later transforms see earlier transforms' output — even in dry-run mode.
+* Review detection (reviewFindings and suspicious patterns) runs against each
+* codemod's own position in the transform chain, so a later codemod's rewrite
+* cannot hide an earlier codemod's findings.
 *
 * In dry-run mode, colorized diffs are printed to stderr.
 * @param codemods - Codemod packages to run (with resolved script paths)
@@ -2048,25 +2182,41 @@ async function runCodemods(codemods, targetPath, dryRun) {
 			continue;
 		}
 		let current = original;
+		const reviewTargets = [];
 		for (const lt of matchedTransforms) {
-			if (!lt.transform) continue;
-			const result = await lt.transform(current, absolute);
-			if (result != null) {
-				current = result;
-				appliedCodemodIds.add(lt.id);
+			if (lt.transform) {
+				const result = await lt.transform(current, absolute);
+				if (result != null) {
+					current = result;
+					appliedCodemodIds.add(lt.id);
+				}
 			}
+			if (lt.prompt) reviewTargets.push({
+				lt,
+				snapshot: current
+			});
 		}
 		if (current !== original) {
 			filesModified.push(absolute);
 			if (dryRun) printDiff(absolute, original, current);
 			else await fs.promises.writeFile(absolute, current, "utf-8");
 		}
-		const residualContent = contentForResidualMatching(relative, current);
-		const sourceStringContent = sourceStringContentForResidualMatching(relative, current);
+		const residualBySnapshot = /* @__PURE__ */ new Map();
+		const residualFor = (content) => {
+			let entry = residualBySnapshot.get(content);
+			if (!entry) {
+				entry = {
+					residual: contentForResidualMatching(relative, content),
+					sourceString: sourceStringContentForResidualMatching(relative, content)
+				};
+				residualBySnapshot.set(content, entry);
+			}
+			return entry;
+		};
+		const { residual: residualContent, sourceString: sourceStringContent } = residualFor(current);
 		const sourceTextContent = sourceTextContentForResidualMatching(relative, current);
 		warnings.push(...legacyPatternWarnings(relative, residualContent, sourceStringContent, sourceTextContent, matchedTransforms));
-		for (const lt of matchedTransforms) {
-			if (!lt.prompt) continue;
+		for (const { lt, snapshot } of reviewTargets) {
 			const filesForReview = () => {
 				let files = suspiciousByCodemod.get(lt.id);
 				if (!files) {
@@ -2076,7 +2226,14 @@ async function runCodemods(codemods, targetPath, dryRun) {
 				return files;
 			};
 			if (lt.reviewFindings) {
-				const findings = await lt.reviewFindings(current, absolute, relative);
+				let findings = await lt.reviewFindings(snapshot, absolute, relative);
+				if (snapshot !== current && findings.length > 0) {
+					const remap = lineRemapper(snapshot, current);
+					findings = findings.map((finding) => ({
+						...finding,
+						line: remap(finding.line)
+					}));
+				}
 				if (findings.length > 0) {
 					const files = filesForReview();
 					for (const finding of findings) files.add(finding.file);
@@ -2088,7 +2245,9 @@ async function runCodemods(codemods, targetPath, dryRun) {
 					existing.push(...findings);
 				}
 			}
-			if (lt.suspiciousPatterns.some((p) => matchResidualPattern(residualContent, p) !== null) || sourceStringContent != null && lt.sourceStringSuspiciousPatterns.some((p) => matchResidualPattern(sourceStringContent, p) !== null)) filesForReview().add(relative);
+			if (lt.suspiciousPatterns.length === 0 && lt.sourceStringSuspiciousPatterns.length === 0) continue;
+			const { residual, sourceString } = residualFor(snapshot);
+			if (lt.suspiciousPatterns.some((p) => matchResidualPattern(residual, p) !== null) || sourceString != null && lt.sourceStringSuspiciousPatterns.some((p) => matchResidualPattern(sourceString, p) !== null)) filesForReview().add(relative);
 		}
 	}
 	const llmReviews = [];
@@ -2219,7 +2378,7 @@ function printLlmReview(review) {
 	}
 	process.stderr.write(`\nPrompt for an LLM:\n${review.prompt.trim()}\n`);
 }
-runMain(defineCommand({
+const main = defineCommand({
 	name: packageName,
 	description: packageJson.description ?? "Codemod runner for Tailor Platform SDK upgrades",
 	subCommands: { list: listCommand },
@@ -2301,6 +2460,7 @@ human-readable form, so \`stdout\` stays pure JSON for piping.`,
 		process.stdout.write(JSON.stringify(output) + "\n");
 		if (output.errors.length > 0) process.exit(1);
 	}
-}), { version: packageVersion });
+});
+runMain(main, { version: packageVersion });
 //#endregion
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailor-platform/sdk-codemod",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Codemod runner for Tailor Platform SDK upgrades",
   "license": "MIT",
   "repository": {
@@ -16,7 +16,7 @@
   ],
   "type": "module",
   "dependencies": {
-    "@ast-grep/napi": "0.45.0",
+    "@ast-grep/napi": "0.45.1",
     "diff": "9.0.0",
     "pathe": "2.0.3",
     "picomatch": "4.0.5",
@@ -29,8 +29,9 @@
     "@types/node": "24.13.3",
     "@types/picomatch": "4.0.3",
     "@types/semver": "7.8.0",
-    "eslint-plugin-zod": "4.9.0",
-    "oxlint": "1.76.0",
+    "eslint-plugin-zod": "4.9.1",
+    "oxlint": "1.78.0",
+    "oxlint-tsgolint": "7.0.2001",
     "tsdown": "0.22.14",
     "typescript": "6.0.3",
     "vitest": "4.1.10",
@@ -38,12 +39,13 @@
   },
   "engines": {
     "bun": ">=1.2.0",
-    "node": ">=22.15.0"
+    "node": ">=22.18.0"
   },
   "scripts": {
     "build": "tsdown",
-    "lint": "oxlint .",
-    "lint:fix": "oxlint . --fix",
+    "lint": "oxlint --type-aware .",
+    "lint:fix": "oxlint --type-aware . --fix",
+    "knip": "knip",
     "typecheck": "tsc --noEmit",
     "test": "vitest",
     "prepublish": "pnpm run build",