@tulipes/cli 0.2.0 → 0.3.0-rc.2

package/dist/migrate-0.12-scaffold.d.ts

@@ -0,0 +1 @@
+export declare function migrateScaffoldIdioms(rootDir: string, changed: string[]): void;

package/dist/migrate-0.12-scaffold.js

@@ -0,0 +1,197 @@
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join, relative } from "node:path";
+const REWRITES = [
+    {
+        file: "modules/auth/bootstrap/credentials.bootstrap.ts",
+        // The names are the ones the environment step derives from the variables
+        // (`AUTH_ADMIN_EMAIL` → `authAdminEmail`), not the fresh scaffold's.
+        note: "reads config.auth.*, names the variables in its message",
+        from: `export default function credentials({ Environment }: RuntimeCtx): void {
+  if (Environment.appEnv !== "production" && Environment.appEnv !== "staging") return;
+  const invalid: string[] = [];
+  const defaults = [
+    ["JWT_ACCESS_SECRET", "dev-only-access-secret-change-me"],
+    ["JWT_REFRESH_SECRET", "dev-only-refresh-secret-change-me"],
+    ["AUTH_ADMIN_PASSWORD", "dev-admin-password"],
+    ["AUTH_ADMIN_EMAIL", "admin@example.com"],
+  ] as const;
+  for (const [name, developmentValue] of defaults) {
+    const value = String(Environment.get(name)).trim();
+    if (!value || value === developmentValue) invalid.push(name);
+  }
+  if (Environment.get("JWT_ACCESS_SECRET") === Environment.get("JWT_REFRESH_SECRET")) {
+    invalid.push("JWT_ACCESS_SECRET / JWT_REFRESH_SECRET (use distinct keys)");
+  }
+  if (invalid.length) throw new Error("Unsafe production credentials: configure " + invalid.join(", "));
+}`,
+        to: `const PLACEHOLDERS = [
+  ["jwtAccessSecret", "JWT_ACCESS_SECRET", "dev-only-access-secret-change-me"],
+  ["jwtRefreshSecret", "JWT_REFRESH_SECRET", "dev-only-refresh-secret-change-me"],
+  ["authAdminPassword", "AUTH_ADMIN_PASSWORD", "dev-admin-password"],
+  ["authAdminEmail", "AUTH_ADMIN_EMAIL", "admin@example.com"],
+] as const;
+
+export default function credentials({ appEnv, config }: RuntimeCtx): void {
+  if (appEnv !== "production" && appEnv !== "staging") return;
+
+  // The values are this module's environment values; the message names the
+  // variables an operator sets, not the config names.
+  const auth = config.auth!;
+  const invalid: string[] = [];
+
+  for (const [name, variable, developmentValue] of PLACEHOLDERS) {
+    const value = auth[name].trim();
+    if (!value || value === developmentValue) invalid.push(variable);
+  }
+  if (auth.jwtAccessSecret === auth.jwtRefreshSecret) {
+    invalid.push("JWT_ACCESS_SECRET / JWT_REFRESH_SECRET (use distinct keys)");
+  }
+
+  if (invalid.length) throw new Error("Unsafe production credentials: configure " + invalid.join(", "));
+}`,
+    },
+    {
+        file: "modules/auth/helpers/tokens.ts",
+        note: "the signing keys are config.auth.*",
+        from: `const secret = (ctx: Ctx, typ: "access" | "refresh"): string =>
+  String(
+    ctx.Environment.get(
+      typ === "access" ? "JWT_ACCESS_SECRET" : "JWT_REFRESH_SECRET",
+    ),
+  );`,
+        to: `const secret = (ctx: Ctx, typ: "access" | "refresh"): string =>
+  typ === "access" ? ctx.config.auth!.jwtAccessSecret : ctx.config.auth!.jwtRefreshSecret;`,
+    },
+    {
+        file: "modules/config/helpers/describe.ts",
+        note: "the console describes environment values through ctx.settings.describeEnv()",
+        from: `  const variables = ctx.Environment.store.describe()
+    .filter((variable) => variable.owner === name)
+    .map((variable) => ({
+      name: variable.spec.name,
+      type: variable.spec.type,
+      description: variable.spec.description,
+      group: variable.spec.group ?? null,
+      required: variable.spec.required ?? false,
+      enum: variable.spec.enum ?? null,
+      default: variable.spec.type === "secret" ? null : (variable.spec.default ?? null),
+      source: variable.source,
+      is_secret: variable.isSecret,
+      is_set: variable.isSet,
+      // What this process resolved; a secret is never here.
+      value: variable.isSecret ? null : (variable.value ?? null),
+    }));`,
+        to: `  // The env half of the module's namespace, as the framework describes it:
+  // a secret's value and default are already withheld.
+  const variables = ctx.settings.describeEnv(name).map((variable) => ({
+    name: variable.name,
+    key: variable.key,
+    type: variable.type,
+    description: variable.description,
+    group: variable.group ?? null,
+    required: variable.required,
+    enum: variable.enum ?? null,
+    default: variable.default ?? null,
+    source: variable.source ?? null,
+    is_secret: variable.isSecret,
+    is_set: variable.isSet,
+    value: variable.value ?? null,
+  }));`,
+    },
+    {
+        file: "modules/settings/tests/settings.test.ts",
+        note: "the stream tests boot with file logging on, into a directory they own",
+        from: `const app = useTestApp({ rootDir, env: testEnv(), settings: testSettings() }, { beforeAll, afterAll });
+`,
+        to: `/**
+ * Where this boot's logger writes and the stream reads: environment values
+ * are bound once at boot, so the file logging the stream needs is on for
+ * the whole file, into a directory the suite owns and empties per test.
+ */
+const logDir = mkdtempSync(join(tmpdir(), "tulipes-log-http-"));
+const app = useTestApp({ rootDir, env: { ...testEnv(), LOG_FILE: "true", LOG_DIR: logDir }, settings: testSettings() }, { beforeAll, afterAll });
+afterAll(() => rm(logDir, { recursive: true, force: true }));
+`,
+    },
+    {
+        file: "modules/settings/tests/settings.test.ts",
+        note: "logFiles() empties the directory instead of changing read-only values",
+        from: `async function logFiles(run: (dir: string) => Promise<void>) {
+  const { mkdtemp, rm } = await import("node:fs/promises");
+  const { tmpdir } = await import("node:os");
+  const { join } = await import("node:path");
+  const dir = await mkdtemp(join(tmpdir(), "tulipes-log-http-"));
+  const env = app.handle.ctx.Environment;
+
+  const previous = {
+    file: env.get("LOG_FILE"),
+    dir: env.get("LOG_DIR"),
+  };
+
+  env.store.set("LOG_FILE", true);
+
+  env.store.set("LOG_DIR", dir);
+
+  try {
+    await run(dir);
+  } finally {
+    env.store.set("LOG_FILE", previous.file);
+
+    env.store.set("LOG_DIR", previous.dir);
+
+    await rm(dir, { recursive: true, force: true });
+  }
+}`,
+        to: `/** \`run\` sees the log directory empty: one test's files never serve another's stream. */
+async function logFiles(run: (dir: string) => Promise<void>) {
+  const empty = async () => {
+    for (const entry of await readdir(logDir)) await rm(join(logDir, entry), { recursive: true, force: true });
+  };
+  await empty();
+  try {
+    await run(logDir);
+  } finally {
+    await empty();
+  }
+}`,
+    },
+    {
+        file: "modules/settings/tests/settings.test.ts",
+        note: "a second boot reads the same LOG_FILE and LOG_DIR from the process",
+        from: `      try {
+        next.env.store.set("LOG_FILE", true);
+
+        next.env.store.set("LOG_DIR", dir);
+
+        const address = next.server!.address();`,
+        to: `      try {
+        // LOG_FILE and LOG_DIR are still set on the process, so this boot
+        // reads the same directory.
+        const address = next.server!.address();`,
+    },
+    {
+        file: "modules/settings/tests/settings.test.ts",
+        note: "the imports the rewritten helpers use",
+        from: `import { randomBytes } from "node:crypto";
+import { fileURLToPath } from "node:url";`,
+        to: `import { randomBytes } from "node:crypto";
+import { mkdtempSync } from "node:fs";
+import { readdir, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";`,
+    },
+];
+export function migrateScaffoldIdioms(rootDir, changed) {
+    for (const rewrite of REWRITES) {
+        const file = join(rootDir, rewrite.file);
+        if (!existsSync(file))
+            continue;
+        const source = readFileSync(file, "utf8");
+        if (!source.includes(rewrite.from))
+            continue; // edited, or already migrated
+        writeFileSync(file, source.replace(rewrite.from, rewrite.to));
+        changed.push(`${relative(rootDir, file)}: ${rewrite.note}`);
+    }
+}
+//# sourceMappingURL=migrate-0.12-scaffold.js.map

package/dist/migrate-0.12-scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-0.12-scaffold.js","sourceRoot":"","sources":["../src/migrate-0.12-scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAqB3C,MAAM,QAAQ,GAAc;IAC1B;QACE,IAAI,EAAE,iDAAiD;QACvD,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,EAAE,yDAAyD;QAC/D,IAAI,EAAE;;;;;;;;;;;;;;;;;EAiBR;QACE,EAAE,EAAE;;;;;;;;;;;;;;;;;;;;;;;;EAwBN;KACC;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,IAAI,EAAE,oCAAoC;QAC1C,IAAI,EAAE;;;;;KAKL;QACD,EAAE,EAAE;2FACmF;KACxF;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,IAAI,EAAE,6EAA6E;QACnF,IAAI,EAAE;;;;;;;;;;;;;;;SAeD;QACL,EAAE,EAAE;;;;;;;;;;;;;;;OAeD;KACJ;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,uEAAuE;QAC7E,IAAI,EAAE;CACT;QACG,EAAE,EAAE;;;;;;;;CAQP;KACE;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,uEAAuE;QAC7E,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;EAyBR;QACE,EAAE,EAAE;;;;;;;;;;;EAWN;KACC;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE;;;;;gDAKsC;QAC5C,EAAE,EAAE;;;gDAGwC;KAC7C;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,uCAAuC;QAC7C,IAAI,EAAE;0CACgC;QACtC,EAAE,EAAE;;;;;0CAKkC;KACvC;CACF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,OAAiB;IACtE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,8BAA8B;QAC5E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/migrate-0.12.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `tulipes migrate 0.12` — every RAI id gains a scope.
+ *
+ * 0.12 ids are `module:scope:resource[:extra]`. A 0.11 app's are
+ * `module:resource`, so this inserts one scope (`web` unless `--scope`
+ * says otherwise) into:
+ *
+ *   - every `id: "a:b"` in `routes/` (any depth) and `agent/`;
+ *   - every two-segment grant inside an `allow(...)` call in
+ *     `module.acl.ts` (`"a:*"` and `"*"` are already valid and stay);
+ *   - every other string literal in the app's TypeScript that is exactly
+ *     one of the ids rewritten above — an access check written by hand,
+ *     an assertion in a test.
+ *
+ * It renames no file: scope-first names are a convention, not a contract.
+ * What it cannot read — an id built at runtime — is a TODO line in the
+ * report and in the record; no comment is written into the file. Idempotent: an id that already has a scope is left alone.
+ *
+ * The one judgement it leaves to a person is which ids belong to another
+ * scope: everything lands in one, and moving the back office to `bo` is a
+ * rename of the id, its grants and its references, by hand.
+ *
+ * The same command carries the environment into the config — see
+ * `migrate-0.12-env.ts` for the rules and `migrate-0.12-scaffold.ts` for
+ * the reference app's own idioms.
+ */
+export interface Migration012Report {
+    scope: string;
+    changed: string[];
+    todos: string[];
+    /** Every id rewritten, old → new. */
+    ids: Record<string, string>;
+    /** Per module: variable → the config name it is read under. */
+    env: Record<string, Record<string, string>>;
+}
+export declare function migrate012(rootDir: string, options?: {
+    scope?: string;
+}): Migration012Report;
+/**
+ * Applies `rewrite` to every string literal inside each `allow(...)` call,
+ * and to nothing else in the file — an import specifier like "node:fs"
+ * also has two segments.
+ */
+export declare function rewriteAllowCalls(source: string, rewrite: (grant: string) => string): string;
+export declare function runMigrate012(rootDir: string, options: {
+    scope?: string;
+}): Promise<void>;

package/dist/migrate-0.12.js

@@ -0,0 +1,210 @@
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { isRai, RAI_SEGMENT } from "@tulipes/core/acl";
+import { walkTs } from "./migrate.js";
+import { migrateEnv } from "./migrate-0.12-env.js";
+import { migrateScaffoldIdioms } from "./migrate-0.12-scaffold.js";
+const TWO_SEGMENTS = /^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9-]*$/;
+/**
+ * Where an id is declared. In a routes file only inside `rai({ … })`, so a
+ * zod field or a payload named `id` is never mistaken for one; an agent
+ * file holds nothing but declarations, so any `id:` there is an action's.
+ */
+const PATTERNS = {
+    routes: {
+        literal: /(\brai\s*\(\s*\{[^{}]*?\bid\s*:\s*)(["'])([^"'\n]*)\2/g,
+        computed: /\brai\s*\(\s*\{[^{}]*?\bid\s*:\s*(?:`|[A-Za-z_$])/g,
+    },
+    agent: {
+        literal: /(\bid\s*:\s*)(["'])([^"'\n]*)\2/g,
+        computed: /\bid\s*:\s*(?:`|[A-Za-z_$])/g,
+    },
+};
+export function migrate012(rootDir, options = {}) {
+    const scope = options.scope ?? "web";
+    if (!RAI_SEGMENT.test(scope)) {
+        throw new Error(`--scope "${scope}" is not a scope — lowercase, starting with a letter ([a-z][a-z0-9-]*)`);
+    }
+    const report = { scope, changed: [], todos: [], ids: {}, env: {} };
+    const scoped = (id) => {
+        const [module, resource] = id.split(":");
+        return `${module}:${scope}:${resource}`;
+    };
+    const modulesDir = join(rootDir, "modules");
+    const modules = existsSync(modulesDir)
+        ? readdirSync(modulesDir, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory() && !entry.name.startsWith("."))
+            .map((entry) => entry.name)
+            .sort()
+        : [];
+    const declarations = new Set();
+    // ── declarations: routes (any depth) and agent actions ────────────────
+    for (const name of modules) {
+        const dir = join(modulesDir, name);
+        const files = [
+            ...(existsSync(join(dir, "routes")) ? walkTs(join(dir, "routes")).map((file) => [file, PATTERNS.routes]) : []),
+            ...(existsSync(join(dir, "agent")) ? walkTs(join(dir, "agent")).map((file) => [file, PATTERNS.agent]) : []),
+        ];
+        for (const [file, pattern] of files) {
+            declarations.add(file);
+            const label = relative(rootDir, file);
+            const source = readFileSync(file, "utf8");
+            let count = 0;
+            const next = source.replace(pattern.literal, (match, head, quote, id) => {
+                if (isRai(id))
+                    return match;
+                if (!TWO_SEGMENTS.test(id)) {
+                    report.todos.push(`${label}: id "${id}" is neither a 0.11 id nor a 0.12 one — rewrite it as module:scope:resource[:extra]`);
+                    return match;
+                }
+                const target = scoped(id);
+                if (!isRai(target)) {
+                    report.todos.push(`${label}: id "${id}" cannot take a scope as is — every segment must start with a letter ("${target}")`);
+                    return match;
+                }
+                report.ids[id] = target;
+                count++;
+                return `${head}${quote}${target}${quote}`;
+            });
+            for (const computed of source.matchAll(pattern.computed)) {
+                const line = source.slice(0, computed.index).split("\n").length;
+                report.todos.push(`${label}:${line}: an id built at runtime — make sure it produces module:scope:resource[:extra]`);
+            }
+            if (next !== source) {
+                writeFileSync(file, next);
+                report.changed.push(`${label}: ${count} id(s) scoped`);
+            }
+        }
+    }
+    // ── grants: two-segment literals inside allow(...) ────────────────────
+    for (const name of modules) {
+        const file = join(modulesDir, name, "module.acl.ts");
+        if (!existsSync(file))
+            continue;
+        declarations.add(file);
+        const source = readFileSync(file, "utf8");
+        let count = 0;
+        const next = rewriteAllowCalls(source, (grant) => {
+            if (!TWO_SEGMENTS.test(grant))
+                return grant;
+            const target = report.ids[grant] ?? scoped(grant);
+            if (!isRai(target)) {
+                report.todos.push(`${relative(rootDir, file)}: grant "${grant}" cannot take a scope as is — every segment must start with a letter`);
+                return grant;
+            }
+            report.ids[grant] = target;
+            count++;
+            return target;
+        });
+        if (next !== source) {
+            writeFileSync(file, next);
+            report.changed.push(`${relative(rootDir, file)}: ${count} grant(s) scoped`);
+        }
+    }
+    // ── references: a literal equal to a rewritten id, anywhere else ──────
+    const known = Object.keys(report.ids);
+    if (known.length > 0) {
+        const literal = new RegExp(`(["'\`])(${known.map(escape).join("|")})\\1`, "g");
+        for (const file of walkTs(rootDir)) {
+            if (declarations.has(file))
+                continue;
+            const source = readFileSync(file, "utf8");
+            let count = 0;
+            const next = source.replace(literal, (_match, quote, id) => {
+                count++;
+                return `${quote}${report.ids[id]}${quote}`;
+            });
+            if (next !== source) {
+                writeFileSync(file, next);
+                report.changed.push(`${relative(rootDir, file)}: ${count} reference(s) to a rewritten id`);
+            }
+        }
+    }
+    // ── the environment: declarations keyed by config name, reads through ctx.config ──
+    // The scaffold's own idioms first, while their 0.11 text is still intact.
+    migrateScaffoldIdioms(rootDir, report.changed);
+    const env = migrateEnv(rootDir);
+    report.changed.push(...env.changed);
+    report.todos.push(...env.todos);
+    report.env = env.env;
+    const record = join(rootDir, "config", "migration-0.12.json");
+    mkdirSync(dirname(record), { recursive: true });
+    writeFileSync(record, JSON.stringify({ migrated_at: new Date().toISOString(), scope, ids: report.ids, env: report.env, todos: report.todos }, null, 2) + "\n");
+    report.changed.push(`wrote config/migration-0.12.json (${known.length} id(s) scoped "${scope}", ${Object.values(report.env).reduce((n, m) => n + Object.keys(m).length, 0)} variable(s) keyed)`);
+    return report;
+}
+/**
+ * Applies `rewrite` to every string literal inside each `allow(...)` call,
+ * and to nothing else in the file — an import specifier like "node:fs"
+ * also has two segments.
+ */
+export function rewriteAllowCalls(source, rewrite) {
+    let output = "";
+    let cursor = 0;
+    const call = /\ballow\s*\(/g;
+    for (let match = call.exec(source); match; match = call.exec(source)) {
+        const open = match.index + match[0].length;
+        let depth = 1;
+        let index = open;
+        let quote;
+        for (; index < source.length && depth > 0; index++) {
+            const char = source[index];
+            if (quote) {
+                if (char === "\\")
+                    index++;
+                else if (char === quote)
+                    quote = undefined;
+            }
+            else if (char === '"' || char === "'" || char === "`")
+                quote = char;
+            else if (char === "(")
+                depth++;
+            else if (char === ")")
+                depth--;
+        }
+        const args = source.slice(open, index);
+        output += source.slice(cursor, open) + args.replace(/(["'])([^"'\n]*)\1/g, (_whole, q, value) => `${q}${rewrite(value)}${q}`);
+        cursor = index;
+        call.lastIndex = index;
+    }
+    return output + source.slice(cursor);
+}
+export async function runMigrate012(rootDir, options) {
+    let report;
+    try {
+        report = migrate012(rootDir, options);
+    }
+    catch (error) {
+        console.error(error.message);
+        process.exitCode = 2;
+        return;
+    }
+    for (const line of report.changed)
+        console.log(`  ${line}`);
+    const ids = Object.entries(report.ids);
+    console.log(`\nscoped ${ids.length} id(s) "${report.scope}"; ${report.todos.length} TODO(s) to review`);
+    for (const [from, to] of ids)
+        console.log(`  ${from} → ${to}`);
+    for (const [module, variables] of Object.entries(report.env)) {
+        for (const [variable, name] of Object.entries(variables))
+            console.log(`  ${variable} → config.${module}.${name}`);
+    }
+    for (const todo of report.todos)
+        console.log(`  ! ${todo}`);
+    console.log([
+        "",
+        "next:",
+        "  every variable is read as ctx.config.<module>.<name>; config/app.config.ts wires",
+        "  server.port, mongoose.uri and bullmq.redisUrl from them (add the MongoDB parts if you want them)",
+        `  every id is in scope "${report.scope}" now. Move the back office (and any other surface)`,
+        "  by hand: rename the id in routes/ or agent/, its grants in module.acl.ts, and its",
+        "  references — `pnpm tulipes routes` lists them, `pnpm typecheck` finds a two-segment id",
+        "  optional: name routes and controllers scope-first (routes/web.users.routes.ts)",
+        "  pnpm typecheck && pnpm test",
+        "  review config/migration-0.12.json, then delete it",
+    ].join("\n"));
+}
+function escape(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=migrate-0.12.js.map

package/dist/migrate-0.12.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-0.12.js","sourceRoot":"","sources":["../src/migrate-0.12.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAsCnE,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE;QACN,OAAO,EAAE,wDAAwD;QACjE,QAAQ,EAAE,oDAAoD;KAC/D;IACD,KAAK,EAAE;QACL,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,8BAA8B;KACzC;CACO,CAAC;AAEX,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAO,GAAuB,EAAE;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,wEAAwE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,CAAC,EAAU,EAAU,EAAE;QACpC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QAC7D,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC;QACpC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,EAAE;QACX,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvH,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACrH,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;YAEd,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,KAAa,EAAE,EAAU,EAAE,EAAE;gBAC9F,IAAI,KAAK,CAAC,EAAE,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,qFAAqF,CAAC,CAAC;oBAC5H,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,0EAA0E,MAAM,IAAI,CAAC,CAAC;oBAC3H,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;gBACxB,KAAK,EAAE,CAAC;gBACR,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAChE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,gFAAgF,CAAC,CAAC;YACtH,CAAC;YAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,KAAK,eAAe,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,KAAK,sEAAsE,CAAC,CAAC;gBACrI,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;YAC3B,KAAK,EAAE,CAAC;YACR,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAU,EAAE,EAAE;gBACzE,KAAK,EAAE,CAAC;gBACR,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,iCAAiC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,0EAA0E;IAC1E,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAErB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC9D,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,aAAa,CACX,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACxI,CAAC;IACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,KAAK,CAAC,MAAM,kBAAkB,KAAK,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACjM,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAkC;IAClF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,KAAyB,CAAC;QAC9B,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,IAAI,KAAK,IAAI;oBAAE,KAAK,EAAE,CAAC;qBACtB,IAAI,IAAI,KAAK,KAAK;oBAAE,KAAK,GAAG,SAAS,CAAC;YAC7C,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;iBACjE,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBAC1B,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,CAAS,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9I,MAAM,GAAG,KAAK,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,OAA2B;IAC9E,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,WAAW,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,aAAa,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CACT;QACE,EAAE;QACF,OAAO;QACP,oFAAoF;QACpF,oGAAoG;QACpG,2BAA2B,MAAM,CAAC,KAAK,qDAAqD;QAC5F,qFAAqF;QACrF,0FAA0F;QAC1F,kFAAkF;QAClF,+BAA+B;QAC/B,qDAAqD;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/dist/migrate.d.ts

@@ -20,7 +20,9 @@ export interface MigrationReport {
         type: string;
     }>>;
 }
-export declare function runMigrate(rootDir: string, target: string): Promise<void>;
+export declare function runMigrate(rootDir: string, target: string, options?: {
+    scope?: string;
+}): Promise<void>;
 export declare function migrate(rootDir: string): MigrationReport;
 export declare function rewriteSpecifiers(source: string): string;
 /** `constructor(private readonly ctx: Ctx) {}` → a declared field assigned in the body. */

package/dist/migrate.js

@@ -1,9 +1,14 @@
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative } from "node:path";
 const PNPM = "pnpm@10.28.0";
-export async function runMigrate(rootDir, target) {
+export async function runMigrate(rootDir, target, options = {}) {
     if (target !== "0.11") {
-        console.error(`unknown migration target "${target}" — this CLI migrates an app to 0.11`);
+        console.error(`unknown migration target "${target}" — this CLI migrates an app to 0.11 (from 0.10) or 0.12 (from 0.11)`);
+        process.exitCode = 2;
+        return;
+    }
+    if (options.scope !== undefined) {
+        console.error("--scope applies to tulipes migrate 0.12 only");
         process.exitCode = 2;
         return;
     }
@@ -263,9 +268,10 @@ function migrateModule(rootDir, dir, name, report) {
     // routes: defineRoutes/runtime → plain functions; `agent: false` gone
     const routesDir = join(dir, "routes");
     if (existsSync(routesDir)) {
-        for (const file of readdirSync(routesDir).filter((entry) => entry.endsWith(".ts"))) {
-            migrateRoutesFile(join(routesDir, file), dir, name, report);
-            stripAgentOptOut(join(routesDir, file), `${label}/routes/${file}`, report);
+        for (const path of walkTs(routesDir)) {
+            const file = relative(routesDir, path);
+            migrateRoutesFile(path, dir, name, report);
+            stripAgentOptOut(path, `${label}/routes/${file}`, report);
         }
     }
     // agent: tools with route references → actions only (0.11.0-rc.3)