@saasicat/cli 1.0.0-rc.0 → 1.0.0-rc.2

package/bin/saasicat.js

@@ -27,7 +27,7 @@
 
 import { readFile, writeFile, readdir, mkdir } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import { spawn } from 'node:child_process';
@@ -43,13 +43,16 @@ import {
     applyTokens,
     constraintsFor,
     checkSchema,
-    extractModelBlocks,
+    extractFragmentBlocks,
     findFkPointers,
     hasConstraints,
     assertValidProjectKey,
+    judgeModuleResolution,
+    readEffectiveModuleResolution,
     buildImportMap,
     migrationCreatedBy,
     rewriteImports,
+    rewriteManifest,
     rewriteNames,
     reportConstraints,
     patchAppModule,
@@ -132,14 +135,15 @@ async function selectFragmentFiles(dir, filter) {
 
 async function loadFragments(dir, filter) {
     const selected = await selectFragmentFiles(dir, filter);
-    const blocks = new Map();
+    const blocks = { enums: new Map(), models: new Map() };
     for (const file of selected) {
         const content = await readFile(join(dir, file), 'utf8');
-        const fileBlocks = extractModelBlocks(content);
-        for (const [name, body] of fileBlocks) {
-            if (!blocks.has(name)) {
-                blocks.set(name, body);
-            }
+        const fileBlocks = extractFragmentBlocks(content);
+        for (const [name, body] of fileBlocks.enums) {
+            if (!blocks.enums.has(name)) blocks.enums.set(name, body);
+        }
+        for (const [name, body] of fileBlocks.models) {
+            if (!blocks.models.has(name)) blocks.models.set(name, body);
         }
     }
     return { files: selected, blocks };
@@ -171,7 +175,7 @@ async function cmdSchemaApply(args) {
     }
 
     const { files, blocks } = await loadFragments(fragmentsDir, filter);
-    if (blocks.size === 0) {
+    if (blocks.models.size === 0) {
         console.error('✗ No models found in the selected fragments.');
         process.exit(1);
     }
@@ -185,13 +189,16 @@ async function cmdSchemaApply(args) {
     // one where the manual step is most likely to have been forgotten.
     const fk = resolveFkPointers(result.schema, args);
 
-    if (result.added.length === 0 && fk.enabled.length === 0) {
+    if (result.added.length === 0 && result.addedEnums.length === 0 && fk.enabled.length === 0) {
         console.log(`→ Nothing to do. Models already present: ${result.skipped.join(', ')}`);
         reportFkPointers(fk, args);
         return;
     }
 
     if (args['dry-run']) {
+        if (result.addedEnums.length) {
+            console.log(`(--dry-run) Would append enums: ${result.addedEnums.join(', ')}`);
+        }
         if (result.added.length) {
             console.log(`(--dry-run) Would append: ${result.added.join(', ')}`);
         }
@@ -209,12 +216,18 @@ async function cmdSchemaApply(args) {
         for (const { line } of fk.enabled) {
             console.log(`  ${line + 1}: ${fk.schema.split('\n')[line]?.trim() ?? ''}`);
         }
-        if (fk.enabled.length > 0 && result.added.length > 0) console.log('');
-        if (result.added.length > 0) console.log(result.schema.slice(schema.length));
+        const appended = result.added.length > 0 || result.addedEnums.length > 0;
+        if (fk.enabled.length > 0 && appended) console.log('');
+        if (appended) console.log(result.schema.slice(schema.length));
         return;
     }
 
     await writeFile(schemaPath, fk.schema, 'utf8');
+    if (result.addedEnums.length) {
+        console.log(
+            `✓ Appended ${result.addedEnums.length} enum(s): ${result.addedEnums.join(', ')}`,
+        );
+    }
     console.log(`✓ Appended ${result.added.length} model(s): ${result.added.join(', ')}`);
     if (result.skipped.length) {
         console.log(`→ Skipped (already present): ${result.skipped.join(', ')}`);
@@ -548,6 +561,7 @@ async function cmdCodemodV1Imports(args) {
     let rewritten = 0;
     let touched = 0;
     await walkSources(root, async (full, source) => {
+        if (basename(full) === CODEMOD_MANIFEST) return;
         const result = rewriteImports(source, map);
         for (const [subpath, n] of result.unmapped) {
             unmapped.set(subpath, (unmapped.get(subpath) ?? 0) + n);
@@ -592,8 +606,15 @@ async function cmdCodemodV1Rename(args) {
     const ambiguous = new Map();
     let rewritten = 0;
     let touched = 0;
+    let manifestsTouched = 0;
     await walkSources(root, async (full, source) => {
-        const result = rewriteNames(source, table);
+        // A manifest takes the package renames in its dependency fields; a
+        // source file takes everything. Under pnpm an import a manifest does
+        // not declare fails to resolve, so the two travel together.
+        const result =
+            basename(full) === CODEMOD_MANIFEST
+                ? rewriteManifest(source, table, { targetRange: `^${OWN_VERSION}` })
+                : rewriteNames(source, table);
         for (const name of result.ambiguous) {
             ambiguous.set(name, (ambiguous.get(name) ?? 0) + 1);
         }
@@ -601,11 +622,26 @@ async function cmdCodemodV1Rename(args) {
         if (!dryRun) await writeFile(full, result.text);
         rewritten += result.rewritten;
         touched += 1;
+        if (basename(full) === CODEMOD_MANIFEST) manifestsTouched += 1;
     });
 
     console.log(
         `${dryRun ? 'Would rewrite' : 'Rewrote'} ${rewritten} name(s) in ${touched} file(s).`,
     );
+    if (manifestsTouched > 0) {
+        // The lockfile is not rewritten: its shape is the package manager's,
+        // and a wrong guess at it is worse than an honest instruction. A CI
+        // that installs with a frozen lockfile refuses the migrated checkout
+        // until it is regenerated.
+        console.log('');
+        console.log(
+            `${manifestsTouched} package.json ${manifestsTouched === 1 ? 'file' : 'files'} changed — ` +
+                'regenerate the lockfile before committing:',
+        );
+        console.log(
+            '  pnpm install   (or npm install / yarn install, whichever owns your lockfile)',
+        );
+    }
     if (ambiguous.size === 0) return;
 
     console.log('');
@@ -617,8 +653,20 @@ async function cmdCodemodV1Rename(args) {
     console.log('  FEATURE_UI_REGISTRY_TOKEN meant one registry in `@saasicat/nest/billing`');
     console.log('  and another in `@saasicat/nest/catalog`. Import it from the entry you');
     console.log('  mean — BILLING_FEATURE_UI_REGISTRY_TOKEN or CATALOG_FEATURE_UI_REGISTRY_TOKEN.');
+    console.log('  A dependency listed "in <field> (<range>)" points at a workspace or a path;');
+    console.log('  rename it by hand to @saasicat/core at the location you keep it.');
 }
 
+/**
+ * The version this CLI was released as — and therefore the line a consumer
+ * running its codemod is migrating to. The manifest rewrite sets the renamed
+ * dependency to `^<this>`, because the old range (`^0.27.0`) names a line
+ * the renamed package was never published on.
+ */
+const OWN_VERSION = JSON.parse(
+    await readFile(join(dirname(require_.resolve('@saasicat/cli')), '..', 'package.json'), 'utf8'),
+).version;
+
 /** Where a shipped codemod table lives, resolved through the package itself. */
 function codemodTable(name) {
     return join(dirname(require_.resolve('@saasicat/cli')), '..', 'codemods', name);
@@ -630,6 +678,8 @@ function codemodTable(name) {
 const CODEMOD_SKIP = new Set(['node_modules', '.git', '.output', 'coverage']);
 const isBuildOutput = (name) => name === 'dist' || name.startsWith('dist-');
 const CODEMOD_EXTENSIONS = /\.(ts|tsx|mts|cts|js|jsx|mjs|cjs|vue|md)$/;
+/** Walked for the package renames alone; see `rewriteManifest`. */
+const CODEMOD_MANIFEST = 'package.json';
 
 /** Every source file under `root` a codemod may touch, with its text. */
 async function walkSources(root, visit) {
@@ -641,7 +691,7 @@ async function walkSources(root, visit) {
                 await walk(full);
                 continue;
             }
-            if (!CODEMOD_EXTENSIONS.test(entry.name)) continue;
+            if (!CODEMOD_EXTENSIONS.test(entry.name) && entry.name !== CODEMOD_MANIFEST) continue;
             await visit(full, await readFile(full, 'utf8'));
         }
     };
@@ -673,6 +723,23 @@ async function cmdInit(args, argv) {
     }
 
     const root = resolve(args.dir ?? '.');
+
+    // Before anything is written: the files below import subpath exports,
+    // and under `moduleResolution: node` none of them resolves. Found by
+    // running the quickstart against an app that predates `nodenext`.
+    if (existsSync(join(root, 'tsconfig.json'))) {
+        const ts = loadTypeScript(root);
+        if (ts === null) {
+            console.log('! tsconfig.json not checked: no TypeScript resolvable from this project.');
+        } else {
+            const verdict = judgeModuleResolution(readEffectiveModuleResolution(root, ts));
+            if (!verdict.ok) {
+                console.error(`✗ ${verdict.reason}`);
+                process.exit(1);
+            }
+        }
+    }
+
     const plan = planInit({
         projectKey: args['project-key'],
         appName: args['app-name'],
@@ -734,12 +801,33 @@ async function cmdInit(args, argv) {
     console.log('     — the generated app does NOT compile until you do. An empty');
     console.log('       array means "deliberately auth-free" to the platform, and');
     console.log('       would publish GET /admin/discovery to anyone who asks.');
+    console.log('  2. Name the modules in `imports: [YourPrismaModule, YourAuthModule]`');
+    console.log('     — the one exporting PrismaService and the one your guard needs.');
+    console.log('       The platform module resolves its providers from that list;');
+    console.log('       without it the first boot stops at "Nest can\'t resolve');
+    console.log('       dependencies of … (PrismaService)".');
     if (plan.quotaProviders.length > 0) {
-        console.log('  2. Check each quota provider counts the right thing');
-        console.log('  3. saasicat schema migrate --name=add_saasicat');
+        console.log('  3. Check each quota provider counts the right thing');
+        console.log('  4. saasicat schema migrate --name=add_saasicat');
     } else {
-        console.log('  2. saasicat schema migrate --name=add_saasicat');
+        console.log('  3. saasicat schema migrate --name=add_saasicat');
+    }
+}
+
+/**
+ * The TypeScript that will compile the project: the consumer's own, resolved
+ * from the project root, so the tsconfig is read the way the build reads it.
+ * Falls back to the one this CLI was installed with, then to null.
+ */
+function loadTypeScript(root) {
+    for (const from of [join(root, 'package.json'), import.meta.url]) {
+        try {
+            return createRequire(from)('typescript');
+        } catch {
+            // Not resolvable from here — try the next origin.
+        }
     }
+    return null;
 }
 
 /** Adds the platform to `src/app.module.ts`, or says exactly what to paste. */

package/codemods/v1-rename.map.json

@@ -15,6 +15,8 @@
         "consumer that spelled a key themselves gets the same symbol the platform",
         "now registers; without this their injection would resolve to nothing.",
         "",
+        "`packages` renames a whole package — in specifiers and in package.json.",
+        "",
         "`entryTokens` is keyed by the import specifier, because the old name",
         "meant different registries in different entries. An import of it from",
         "anywhere else is reported, not guessed."
@@ -41,5 +43,9 @@
     },
     "subpaths": {
         "@saasicat/ui-vue/testing-e2e/": "@saasicat/ui-vue/testing/"
+    },
+    "packages": {
+        "_": "A package that was renamed. Applied to import specifiers AND to the dependency fields of every package.json the walk meets: an import rewritten without its manifest does not resolve under pnpm.",
+        "@saasicat/types": "@saasicat/core"
     }
 }

package/dist/.build-stamp

@@ -1 +1 @@
-87fdb737df2d686fe3d296add0d87c2a3765371380b486e2ff20fda896b3db65
+d16106f714ce74c061cc0211a2be4ebe01a1cb80b8e4b5da45ff296c861cff71

package/dist/index.cjs

@@ -85,6 +85,9 @@ __export(index_exports, {
   enableFkPointers: () => enableFkPointers,
   extractBlockNames: () => extractBlockNames,
   extractBlocks: () => extractBlocks,
+  extractEnumBlocks: () => extractEnumBlocks,
+  extractEnumNames: () => extractEnumNames,
+  extractFragmentBlocks: () => extractFragmentBlocks,
   extractModelBlocks: () => extractModelBlocks,
   extractModelNames: () => extractModelNames,
   findFkPointers: () => findFkPointers,
@@ -93,6 +96,7 @@ __export(index_exports, {
   hasConstraints: () => hasConstraints,
   isNoLongerPublic: () => isNoLongerPublic,
   isOneToOne: () => isOneToOne,
+  judgeModuleResolution: () => judgeModuleResolution,
   kebabCase: () => kebabCase,
   migrationCreatedBy: () => migrationCreatedBy,
   minimumQuotasPerPlan: () => minimumQuotasPerPlan,
@@ -108,9 +112,11 @@ __export(index_exports, {
   planInit: () => planInit,
   projectKeyPattern: () => projectKeyPattern,
   quotaKeyPattern: () => quotaKeyPattern,
+  readEffectiveModuleResolution: () => readEffectiveModuleResolution,
   relationNameOf: () => relationNameOf,
   reportConstraints: () => reportConstraints,
   rewriteImports: () => rewriteImports,
+  rewriteManifest: () => rewriteManifest,
   rewriteNames: () => rewriteNames,
   rewriteSubpath: () => rewriteSubpath,
   stripLineComment: () => stripLineComment,
@@ -1247,13 +1253,43 @@ function extractModelBlocks(fragment) {
   return extractBlocks(fragment, "model");
 }
 __name(extractModelBlocks, "extractModelBlocks");
+function extractEnumBlocks(fragment) {
+  return extractBlocks(fragment, "enum");
+}
+__name(extractEnumBlocks, "extractEnumBlocks");
+function extractEnumNames(schema2) {
+  return extractBlockNames(schema2, "enum");
+}
+__name(extractEnumNames, "extractEnumNames");
+function extractFragmentBlocks(fragment) {
+  return {
+    enums: extractEnumBlocks(fragment),
+    models: extractModelBlocks(fragment)
+  };
+}
+__name(extractFragmentBlocks, "extractFragmentBlocks");
 function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
-  const existing = new Set(extractModelNames(schema2));
+  const blocks = fragmentBlocks instanceof Map ? {
+    enums: /* @__PURE__ */ new Map(),
+    models: fragmentBlocks
+  } : fragmentBlocks;
+  const existingModels = new Set(extractModelNames(schema2));
+  const existingEnums = new Set(extractEnumNames(schema2));
   const added = [];
   const skipped = [];
+  const addedEnums = [];
+  const skippedEnums = [];
   const additions = [];
-  for (const [name, block] of fragmentBlocks) {
-    if (existing.has(name)) {
+  for (const [name, block] of blocks.enums) {
+    if (existingEnums.has(name)) {
+      skippedEnums.push(name);
+    } else {
+      addedEnums.push(name);
+      additions.push(block);
+    }
+  }
+  for (const [name, block] of blocks.models) {
+    if (existingModels.has(name)) {
       skipped.push(name);
     } else {
       added.push(name);
@@ -1264,6 +1300,8 @@ function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
     return {
       added,
       skipped,
+      addedEnums,
+      skippedEnums,
       schema: schema2
     };
   }
@@ -1280,6 +1318,8 @@ function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
   return {
     added,
     skipped,
+    addedEnums,
+    skippedEnums,
     schema: trimmedSchema + header + additions.join("\n\n") + "\n"
   };
 }
@@ -1834,6 +1874,38 @@ function patchOptionsFor(plan) {
 }
 __name(patchOptionsFor, "patchOptionsFor");
 
+// src/init/module-resolution.ts
+var import_node_path = require("path");
+var RESOLVES_SUBPATHS = /* @__PURE__ */ new Set([
+  "node16",
+  "nodenext",
+  "bundler"
+]);
+function judgeModuleResolution(value) {
+  if (value === null || RESOLVES_SUBPATHS.has(value)) {
+    return {
+      ok: true,
+      value
+    };
+  }
+  return {
+    ok: false,
+    value,
+    reason: `tsconfig.json resolves modules with "moduleResolution": "${value}"` + (value === "node10" ? ' (what TypeScript calls the "node" setting)' : "") + '. The files init writes import subpath exports (`@saasicat/nest/platform`, `/billing`, `/discovery`), which TypeScript resolves only under "node16", "nodenext" or "bundler". Set one of those first \u2014 `nest new` has used "nodenext" since NestJS 10.'
+  };
+}
+__name(judgeModuleResolution, "judgeModuleResolution");
+function readEffectiveModuleResolution(root, ts) {
+  const configPath = (0, import_node_path.join)(root, "tsconfig.json");
+  const read = ts.readConfigFile(configPath, ts.sys.readFile);
+  if (read.error || read.config === void 0) return null;
+  const parsed = ts.parseJsonConfigFileContent(read.config, ts.sys, root);
+  const kind = parsed.options.moduleResolution;
+  if (kind === void 0) return null;
+  return ts.ModuleResolutionKind[kind].toLowerCase();
+}
+__name(readEffectiveModuleResolution, "readEffectiveModuleResolution");
+
 // src/codemods/v1-imports.ts
 var PUBLIC_PREFIXES = [
   "ui/",
@@ -1999,6 +2071,13 @@ function rewriteNames(text, table) {
       return `${quote}${to}`;
     });
   }
+  for (const [from, to] of Object.entries(table.packages ?? {})) {
+    if (from === "_") continue;
+    next = next.replace(new RegExp(`${escape(from)}(?=['"\`/])`, "g"), () => {
+      rewritten += 1;
+      return to;
+    });
+  }
   for (const [from, to] of Object.entries(table.subpaths)) {
     next = next.replace(new RegExp(escape(from), "g"), () => {
       rewritten += 1;
@@ -2014,6 +2093,81 @@ function rewriteNames(text, table) {
   };
 }
 __name(rewriteNames, "rewriteNames");
+var DEPENDENCY_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "peerDependencies",
+  "optionalDependencies"
+];
+var UNTRANSLATABLE_RANGE = /^(workspace:|file:|link:|npm:|git\+|https?:)/;
+function rewriteManifest(text, table, options) {
+  const renames = Object.entries(table.packages ?? {}).filter(([from]) => from !== "_");
+  const ambiguous = [];
+  let manifest;
+  try {
+    manifest = JSON.parse(text);
+  } catch {
+    return {
+      text,
+      rewritten: 0,
+      ambiguous
+    };
+  }
+  let rewritten = 0;
+  for (const field of DEPENDENCY_FIELDS) {
+    const deps = manifest[field];
+    if (!deps || typeof deps !== "object") continue;
+    const entries = Object.entries(deps);
+    const renamed = entries.map(([name, range]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        range
+      ];
+      if (UNTRANSLATABLE_RANGE.test(range)) {
+        ambiguous.push(`${name} in ${field} (${range})`);
+        return [
+          name,
+          range
+        ];
+      }
+      rewritten += 1;
+      return [
+        to,
+        options.targetRange
+      ];
+    });
+    manifest[field] = Object.fromEntries(renamed);
+  }
+  const meta = manifest.peerDependenciesMeta;
+  if (meta && typeof meta === "object") {
+    manifest.peerDependenciesMeta = Object.fromEntries(Object.entries(meta).map(([name, flags]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        flags
+      ];
+      rewritten += 1;
+      return [
+        to,
+        flags
+      ];
+    }));
+  }
+  if (rewritten === 0) return {
+    text,
+    rewritten: 0,
+    ambiguous
+  };
+  const indent = /^[ \t]+/m.exec(text)?.[0] ?? "    ";
+  const trailing = text.endsWith("\n") ? "\n" : "";
+  return {
+    text: JSON.stringify(manifest, null, indent) + trailing,
+    rewritten,
+    ambiguous
+  };
+}
+__name(rewriteManifest, "rewriteManifest");
 
 // src/init/patch-app-module.ts
 var MARKER = "SaaSiCatModule.forRoot";
@@ -2035,7 +2189,7 @@ ${block}`;
     return {
       source,
       status: "declined",
-      reason: "no `@Module({ imports: [ ... ] })` was found in this file, so there is nowhere to add the platform without guessing at the structure",
+      reason: "this file has no `@Module({ ... })` with an `imports:` key on a line of its own \u2014 the shape `nest new` writes \u2014 so there is nowhere to add the platform without guessing at the structure",
       manualBlock
     };
   }
@@ -2123,6 +2277,13 @@ function renderForRootBlock(options) {
     "        // your whole capability inventory \u2014 and the manifest routes to",
     "        // anyone who asks. Import your guard and put it in.",
     "        controller: { guards: [YourAuthGuard] },",
+    "        // The modules whose providers the platform injects: the one",
+    "        // exporting PrismaService, and the one your guard depends on.",
+    "        // `prismaPersistence({ client: PrismaService })` is resolved",
+    "        // inside the platform module, which sees only what is listed",
+    "        // here or declared @Global. Same rule as the guard: this does",
+    "        // not compile until you name them.",
+    "        imports: [YourPrismaModule, YourAuthModule],",
     options.persistenceImport ? "        persistence," : "        // persistence: prismaPersistence({ client: PrismaService }),",
     "        catalog: { featureUiRegistry: " + options.registry.constName + " },",
     "        adminResources: true,",
@@ -2769,7 +2930,7 @@ DoctorCommands = _ts_decorate12([
 
 // src/discovery.command.ts
 var import_node_fs = require("fs");
-var import_node_path = require("path");
+var import_node_path2 = require("path");
 var import_common13 = require("@nestjs/common");
 var import_nest_commander5 = require("nest-commander");
 var import_nest6 = require("@saasicat/nest");
@@ -2807,8 +2968,8 @@ var DiscoveryScanCommand = class extends import_nest_commander5.CommandRunner {
     try {
       const snapshot = this.scanner.rebuildSnapshot();
       if (flags.out) {
-        const outPath = (0, import_node_path.resolve)(flags.out);
-        (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(outPath), {
+        const outPath = (0, import_node_path2.resolve)(flags.out);
+        (0, import_node_fs.mkdirSync)((0, import_node_path2.dirname)(outPath), {
           recursive: true
         });
         (0, import_node_fs.writeFileSync)(outPath, JSON.stringify(snapshot, null, 2) + "\n", "utf-8");
@@ -2817,7 +2978,7 @@ var DiscoveryScanCommand = class extends import_nest_commander5.CommandRunner {
       process.stdout.write(`Discovery-Scan (${snapshot.app.key} v${snapshot.app.version}): ${snapshot.capabilities.length} Capabilities \xB7 ${snapshot.features.length} Features \xB7 ${snapshot.quotas.length} Quotas \xB7 hash ${snapshot.hash.slice(0, 19)}\u2026
 `);
       if (target) {
-        process.stdout.write(`Snapshot persisted: ${(0, import_node_path.resolve)(target)}
+        process.stdout.write(`Snapshot persisted: ${(0, import_node_path2.resolve)(target)}
 `);
       } else {
         process.stderr.write("WARNING: the snapshot was not persisted \u2014 neither snapshotPath (DiscoveryModule.forRoot) configured nor --out given. The seed gate will find no snapshot this way.\n");
@@ -3246,6 +3407,9 @@ UserCommands = _ts_decorate14([
   enableFkPointers,
   extractBlockNames,
   extractBlocks,
+  extractEnumBlocks,
+  extractEnumNames,
+  extractFragmentBlocks,
   extractModelBlocks,
   extractModelNames,
   findFkPointers,
@@ -3254,6 +3418,7 @@ UserCommands = _ts_decorate14([
   hasConstraints,
   isNoLongerPublic,
   isOneToOne,
+  judgeModuleResolution,
   kebabCase,
   migrationCreatedBy,
   minimumQuotasPerPlan,
@@ -3269,9 +3434,11 @@ UserCommands = _ts_decorate14([
   planInit,
   projectKeyPattern,
   quotaKeyPattern,
+  readEffectiveModuleResolution,
   relationNameOf,
   reportConstraints,
   rewriteImports,
+  rewriteManifest,
   rewriteNames,
   rewriteSubpath,
   stripLineComment,

package/dist/index.d.cts

@@ -1,6 +1,7 @@
 import { MfaService, AdminAuditService, AdminManifestService, DiscoverySnapshot, ProviderSpec, DiscoveryScanner } from '@saasicat/nest';
-import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/types';
+import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/core';
 import { Type, DynamicModule } from '@nestjs/common';
+import * as TypeScript from 'typescript';
 import { CommandRunner } from 'nest-commander';
 
 declare const CLI_CONTEXT_CONFIG_TOKEN: unique symbol;
@@ -381,19 +382,41 @@ declare function extractModelNames(schema: string): string[];
  * `name -> complete block text incl. opening/closing braces`.
  */
 declare function extractModelBlocks(fragment: string): Map<string, string>;
+/** Returns all `enum X { ... }` blocks from a fragment, keyed by name. */
+declare function extractEnumBlocks(fragment: string): Map<string, string>;
+/** Names of all top-level `enum X { ... }` blocks in the schema. */
+declare function extractEnumNames(schema: string): string[];
+/**
+ * What a fragment contributes: its enums and its models. Both travel
+ * together, because a model's `BillingCycle` field is a validation error in
+ * a schema that has the model and not the enum — which is what `apply` used
+ * to produce for every consumer whose schema did not already carry the enums
+ * by hand, and what the example app masked by carrying them.
+ */
+interface FragmentBlocks {
+    enums: Map<string, string>;
+    models: Map<string, string>;
+}
+declare function extractFragmentBlocks(fragment: string): FragmentBlocks;
 interface ApplyResult {
-    /** Number of models that were added. */
+    /** Models that were added. */
     added: string[];
-    /** Number of models that were already present (no write). */
+    /** Models that were already present (no write). */
     skipped: string[];
-    /** Resulting schema text. When `added.length === 0` identical to the input. */
+    /** Enums that were added, before the models that use them. */
+    addedEnums: string[];
+    /** Enums that were already present (no write). */
+    skippedEnums: string[];
+    /** Resulting schema text. When nothing was added, identical to the input. */
     schema: string;
 }
 /**
- * Appends missing models from `fragmentBlocks` to the end of `schema`. Existing
- * models (same name) stay unchanged and are listed in `skipped`.
+ * Appends missing enums and models from `fragmentBlocks` to the end of
+ * `schema`. Existing blocks (same name) stay unchanged and are listed as
+ * skipped. A plain map of models is accepted for the callers that only ever
+ * had models; the enums are then `[]`, which is what they were before.
  */
-declare function applyFragmentBlocks(schema: string, fragmentBlocks: Map<string, string>, options?: {
+declare function applyFragmentBlocks(schema: string, fragmentBlocks: FragmentBlocks | Map<string, string>, options?: {
     fragmentLabel?: string;
 }): ApplyResult;
 
@@ -804,6 +827,33 @@ interface PatchOptionsFromPlan {
     };
 }
 
+interface ModuleResolutionVerdict {
+    readonly ok: boolean;
+    /** The effective setting, lower-cased as TypeScript names it, or null when unset. */
+    readonly value: string | null;
+    readonly reason?: string;
+}
+/**
+ * Judges an effective `moduleResolution`, as `readEffectiveModuleResolution`
+ * reports it.
+ *
+ * Unset is `ok`: TypeScript then derives it from `module`, and a `module`
+ * that implies the old resolution is a setup this cannot see from here —
+ * the next build says so, with TypeScript's own message.
+ */
+declare function judgeModuleResolution(value: string | null): ModuleResolutionVerdict;
+/**
+ * The `moduleResolution` a project's `tsconfig.json` resolves to, after
+ * `extends`, lower-cased as TypeScript names the kind (`node10`, `node16`,
+ * `nodenext`, `bundler`, `classic`) — or null when there is no config, the
+ * config cannot be parsed, or the option is not set anywhere in the chain.
+ *
+ * `ts` is whichever TypeScript will compile the project: the consumer's own
+ * when it can be resolved from the project root, so the reading matches the
+ * build that follows.
+ */
+declare function readEffectiveModuleResolution(root: string, ts: typeof TypeScript): string | null;
+
 /** The pattern `plan-catalog.schema.json` puts on `projectKey`. */
 declare function projectKeyPattern(): RegExp;
 /** The pattern it puts on the keys inside a plan's `quotas` object. */
@@ -878,6 +928,13 @@ interface RenameTable {
     readonly entryTokens: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** A module specifier prefix and its replacement. */
     readonly subpaths: Readonly<Record<string, string>>;
+    /**
+     * A package that was renamed. Rewritten in specifiers by `rewriteNames`
+     * and in `package.json` dependency fields by `rewriteManifest` — both,
+     * because an import a manifest does not declare fails to resolve under
+     * pnpm's isolated `node_modules`.
+     */
+    readonly packages?: Readonly<Record<string, string>>;
 }
 interface RenameResult {
     readonly text: string;
@@ -903,6 +960,26 @@ declare function namedImports(text: string): Array<{
 }>;
 /** Applies the table to one file's text. Idempotent: a second run changes nothing. */
 declare function rewriteNames(text: string, table: RenameTable): RenameResult;
+/**
+ * Applies the package renames to a `package.json` text.
+ *
+ * Parsed and re-serialised rather than string-replaced, so a rename lands in a
+ * dependency field and nowhere else — not in `name`, not in a description.
+ * The file's indentation is kept; a consumer's formatter must not see a diff
+ * it did not cause. Returns the text unchanged when nothing applied.
+ */
+interface ManifestRewriteOptions {
+    /**
+     * The range the renamed dependency gets — `^<the version this CLI was
+     * released as>`. The old range cannot be carried over: a 0.x consumer
+     * declares `"@saasicat/types": "^0.27.0"`, and `@saasicat/core` has no
+     * 0.27 — the rename starts on the 1.0 line. The caller passes the CLI's
+     * own version because that IS the line the consumer is migrating to;
+     * the codemod ships with it.
+     */
+    readonly targetRange: string;
+}
+declare function rewriteManifest(text: string, table: RenameTable, options: ManifestRewriteOptions): RenameResult;
 
 interface PatchAppModuleOptions {
     /** Import specifier for the persistence bundle, or null when not generated. */
@@ -1147,4 +1224,4 @@ declare class UserCommands extends CommandRunner {
     parsePassword(val: string): string;
 }
 
-export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };
+export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type FragmentBlocks, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, type ManifestRewriteOptions, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type ModuleResolutionVerdict, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractEnumBlocks, extractEnumNames, extractFragmentBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, judgeModuleResolution, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, readEffectiveModuleResolution, relationNameOf, reportConstraints, rewriteImports, rewriteManifest, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { MfaService, AdminAuditService, AdminManifestService, DiscoverySnapshot, ProviderSpec, DiscoveryScanner } from '@saasicat/nest';
-import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/types';
+import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/core';
 import { Type, DynamicModule } from '@nestjs/common';
+import * as TypeScript from 'typescript';
 import { CommandRunner } from 'nest-commander';
 
 declare const CLI_CONTEXT_CONFIG_TOKEN: unique symbol;
@@ -381,19 +382,41 @@ declare function extractModelNames(schema: string): string[];
  * `name -> complete block text incl. opening/closing braces`.
  */
 declare function extractModelBlocks(fragment: string): Map<string, string>;
+/** Returns all `enum X { ... }` blocks from a fragment, keyed by name. */
+declare function extractEnumBlocks(fragment: string): Map<string, string>;
+/** Names of all top-level `enum X { ... }` blocks in the schema. */
+declare function extractEnumNames(schema: string): string[];
+/**
+ * What a fragment contributes: its enums and its models. Both travel
+ * together, because a model's `BillingCycle` field is a validation error in
+ * a schema that has the model and not the enum — which is what `apply` used
+ * to produce for every consumer whose schema did not already carry the enums
+ * by hand, and what the example app masked by carrying them.
+ */
+interface FragmentBlocks {
+    enums: Map<string, string>;
+    models: Map<string, string>;
+}
+declare function extractFragmentBlocks(fragment: string): FragmentBlocks;
 interface ApplyResult {
-    /** Number of models that were added. */
+    /** Models that were added. */
     added: string[];
-    /** Number of models that were already present (no write). */
+    /** Models that were already present (no write). */
     skipped: string[];
-    /** Resulting schema text. When `added.length === 0` identical to the input. */
+    /** Enums that were added, before the models that use them. */
+    addedEnums: string[];
+    /** Enums that were already present (no write). */
+    skippedEnums: string[];
+    /** Resulting schema text. When nothing was added, identical to the input. */
     schema: string;
 }
 /**
- * Appends missing models from `fragmentBlocks` to the end of `schema`. Existing
- * models (same name) stay unchanged and are listed in `skipped`.
+ * Appends missing enums and models from `fragmentBlocks` to the end of
+ * `schema`. Existing blocks (same name) stay unchanged and are listed as
+ * skipped. A plain map of models is accepted for the callers that only ever
+ * had models; the enums are then `[]`, which is what they were before.
  */
-declare function applyFragmentBlocks(schema: string, fragmentBlocks: Map<string, string>, options?: {
+declare function applyFragmentBlocks(schema: string, fragmentBlocks: FragmentBlocks | Map<string, string>, options?: {
     fragmentLabel?: string;
 }): ApplyResult;
 
@@ -804,6 +827,33 @@ interface PatchOptionsFromPlan {
     };
 }
 
+interface ModuleResolutionVerdict {
+    readonly ok: boolean;
+    /** The effective setting, lower-cased as TypeScript names it, or null when unset. */
+    readonly value: string | null;
+    readonly reason?: string;
+}
+/**
+ * Judges an effective `moduleResolution`, as `readEffectiveModuleResolution`
+ * reports it.
+ *
+ * Unset is `ok`: TypeScript then derives it from `module`, and a `module`
+ * that implies the old resolution is a setup this cannot see from here —
+ * the next build says so, with TypeScript's own message.
+ */
+declare function judgeModuleResolution(value: string | null): ModuleResolutionVerdict;
+/**
+ * The `moduleResolution` a project's `tsconfig.json` resolves to, after
+ * `extends`, lower-cased as TypeScript names the kind (`node10`, `node16`,
+ * `nodenext`, `bundler`, `classic`) — or null when there is no config, the
+ * config cannot be parsed, or the option is not set anywhere in the chain.
+ *
+ * `ts` is whichever TypeScript will compile the project: the consumer's own
+ * when it can be resolved from the project root, so the reading matches the
+ * build that follows.
+ */
+declare function readEffectiveModuleResolution(root: string, ts: typeof TypeScript): string | null;
+
 /** The pattern `plan-catalog.schema.json` puts on `projectKey`. */
 declare function projectKeyPattern(): RegExp;
 /** The pattern it puts on the keys inside a plan's `quotas` object. */
@@ -878,6 +928,13 @@ interface RenameTable {
     readonly entryTokens: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** A module specifier prefix and its replacement. */
     readonly subpaths: Readonly<Record<string, string>>;
+    /**
+     * A package that was renamed. Rewritten in specifiers by `rewriteNames`
+     * and in `package.json` dependency fields by `rewriteManifest` — both,
+     * because an import a manifest does not declare fails to resolve under
+     * pnpm's isolated `node_modules`.
+     */
+    readonly packages?: Readonly<Record<string, string>>;
 }
 interface RenameResult {
     readonly text: string;
@@ -903,6 +960,26 @@ declare function namedImports(text: string): Array<{
 }>;
 /** Applies the table to one file's text. Idempotent: a second run changes nothing. */
 declare function rewriteNames(text: string, table: RenameTable): RenameResult;
+/**
+ * Applies the package renames to a `package.json` text.
+ *
+ * Parsed and re-serialised rather than string-replaced, so a rename lands in a
+ * dependency field and nowhere else — not in `name`, not in a description.
+ * The file's indentation is kept; a consumer's formatter must not see a diff
+ * it did not cause. Returns the text unchanged when nothing applied.
+ */
+interface ManifestRewriteOptions {
+    /**
+     * The range the renamed dependency gets — `^<the version this CLI was
+     * released as>`. The old range cannot be carried over: a 0.x consumer
+     * declares `"@saasicat/types": "^0.27.0"`, and `@saasicat/core` has no
+     * 0.27 — the rename starts on the 1.0 line. The caller passes the CLI's
+     * own version because that IS the line the consumer is migrating to;
+     * the codemod ships with it.
+     */
+    readonly targetRange: string;
+}
+declare function rewriteManifest(text: string, table: RenameTable, options: ManifestRewriteOptions): RenameResult;
 
 interface PatchAppModuleOptions {
     /** Import specifier for the persistence bundle, or null when not generated. */
@@ -1147,4 +1224,4 @@ declare class UserCommands extends CommandRunner {
     parsePassword(val: string): string;
 }
 
-export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };
+export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type FragmentBlocks, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, type ManifestRewriteOptions, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type ModuleResolutionVerdict, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractEnumBlocks, extractEnumNames, extractFragmentBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, judgeModuleResolution, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, readEffectiveModuleResolution, relationNameOf, reportConstraints, rewriteImports, rewriteManifest, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };

package/dist/index.js

@@ -1129,13 +1129,43 @@ function extractModelBlocks(fragment) {
   return extractBlocks(fragment, "model");
 }
 __name(extractModelBlocks, "extractModelBlocks");
+function extractEnumBlocks(fragment) {
+  return extractBlocks(fragment, "enum");
+}
+__name(extractEnumBlocks, "extractEnumBlocks");
+function extractEnumNames(schema2) {
+  return extractBlockNames(schema2, "enum");
+}
+__name(extractEnumNames, "extractEnumNames");
+function extractFragmentBlocks(fragment) {
+  return {
+    enums: extractEnumBlocks(fragment),
+    models: extractModelBlocks(fragment)
+  };
+}
+__name(extractFragmentBlocks, "extractFragmentBlocks");
 function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
-  const existing = new Set(extractModelNames(schema2));
+  const blocks = fragmentBlocks instanceof Map ? {
+    enums: /* @__PURE__ */ new Map(),
+    models: fragmentBlocks
+  } : fragmentBlocks;
+  const existingModels = new Set(extractModelNames(schema2));
+  const existingEnums = new Set(extractEnumNames(schema2));
   const added = [];
   const skipped = [];
+  const addedEnums = [];
+  const skippedEnums = [];
   const additions = [];
-  for (const [name, block] of fragmentBlocks) {
-    if (existing.has(name)) {
+  for (const [name, block] of blocks.enums) {
+    if (existingEnums.has(name)) {
+      skippedEnums.push(name);
+    } else {
+      addedEnums.push(name);
+      additions.push(block);
+    }
+  }
+  for (const [name, block] of blocks.models) {
+    if (existingModels.has(name)) {
       skipped.push(name);
     } else {
       added.push(name);
@@ -1146,6 +1176,8 @@ function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
     return {
       added,
       skipped,
+      addedEnums,
+      skippedEnums,
       schema: schema2
     };
   }
@@ -1162,6 +1194,8 @@ function applyFragmentBlocks(schema2, fragmentBlocks, options = {}) {
   return {
     added,
     skipped,
+    addedEnums,
+    skippedEnums,
     schema: trimmedSchema + header + additions.join("\n\n") + "\n"
   };
 }
@@ -1716,6 +1750,38 @@ function patchOptionsFor(plan) {
 }
 __name(patchOptionsFor, "patchOptionsFor");
 
+// src/init/module-resolution.ts
+import { join } from "path";
+var RESOLVES_SUBPATHS = /* @__PURE__ */ new Set([
+  "node16",
+  "nodenext",
+  "bundler"
+]);
+function judgeModuleResolution(value) {
+  if (value === null || RESOLVES_SUBPATHS.has(value)) {
+    return {
+      ok: true,
+      value
+    };
+  }
+  return {
+    ok: false,
+    value,
+    reason: `tsconfig.json resolves modules with "moduleResolution": "${value}"` + (value === "node10" ? ' (what TypeScript calls the "node" setting)' : "") + '. The files init writes import subpath exports (`@saasicat/nest/platform`, `/billing`, `/discovery`), which TypeScript resolves only under "node16", "nodenext" or "bundler". Set one of those first \u2014 `nest new` has used "nodenext" since NestJS 10.'
+  };
+}
+__name(judgeModuleResolution, "judgeModuleResolution");
+function readEffectiveModuleResolution(root, ts) {
+  const configPath = join(root, "tsconfig.json");
+  const read = ts.readConfigFile(configPath, ts.sys.readFile);
+  if (read.error || read.config === void 0) return null;
+  const parsed = ts.parseJsonConfigFileContent(read.config, ts.sys, root);
+  const kind = parsed.options.moduleResolution;
+  if (kind === void 0) return null;
+  return ts.ModuleResolutionKind[kind].toLowerCase();
+}
+__name(readEffectiveModuleResolution, "readEffectiveModuleResolution");
+
 // src/codemods/v1-imports.ts
 var PUBLIC_PREFIXES = [
   "ui/",
@@ -1881,6 +1947,13 @@ function rewriteNames(text, table) {
       return `${quote}${to}`;
     });
   }
+  for (const [from, to] of Object.entries(table.packages ?? {})) {
+    if (from === "_") continue;
+    next = next.replace(new RegExp(`${escape(from)}(?=['"\`/])`, "g"), () => {
+      rewritten += 1;
+      return to;
+    });
+  }
   for (const [from, to] of Object.entries(table.subpaths)) {
     next = next.replace(new RegExp(escape(from), "g"), () => {
       rewritten += 1;
@@ -1896,6 +1969,81 @@ function rewriteNames(text, table) {
   };
 }
 __name(rewriteNames, "rewriteNames");
+var DEPENDENCY_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "peerDependencies",
+  "optionalDependencies"
+];
+var UNTRANSLATABLE_RANGE = /^(workspace:|file:|link:|npm:|git\+|https?:)/;
+function rewriteManifest(text, table, options) {
+  const renames = Object.entries(table.packages ?? {}).filter(([from]) => from !== "_");
+  const ambiguous = [];
+  let manifest;
+  try {
+    manifest = JSON.parse(text);
+  } catch {
+    return {
+      text,
+      rewritten: 0,
+      ambiguous
+    };
+  }
+  let rewritten = 0;
+  for (const field of DEPENDENCY_FIELDS) {
+    const deps = manifest[field];
+    if (!deps || typeof deps !== "object") continue;
+    const entries = Object.entries(deps);
+    const renamed = entries.map(([name, range]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        range
+      ];
+      if (UNTRANSLATABLE_RANGE.test(range)) {
+        ambiguous.push(`${name} in ${field} (${range})`);
+        return [
+          name,
+          range
+        ];
+      }
+      rewritten += 1;
+      return [
+        to,
+        options.targetRange
+      ];
+    });
+    manifest[field] = Object.fromEntries(renamed);
+  }
+  const meta = manifest.peerDependenciesMeta;
+  if (meta && typeof meta === "object") {
+    manifest.peerDependenciesMeta = Object.fromEntries(Object.entries(meta).map(([name, flags]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        flags
+      ];
+      rewritten += 1;
+      return [
+        to,
+        flags
+      ];
+    }));
+  }
+  if (rewritten === 0) return {
+    text,
+    rewritten: 0,
+    ambiguous
+  };
+  const indent = /^[ \t]+/m.exec(text)?.[0] ?? "    ";
+  const trailing = text.endsWith("\n") ? "\n" : "";
+  return {
+    text: JSON.stringify(manifest, null, indent) + trailing,
+    rewritten,
+    ambiguous
+  };
+}
+__name(rewriteManifest, "rewriteManifest");
 
 // src/init/patch-app-module.ts
 var MARKER = "SaaSiCatModule.forRoot";
@@ -1917,7 +2065,7 @@ ${block}`;
     return {
       source,
       status: "declined",
-      reason: "no `@Module({ imports: [ ... ] })` was found in this file, so there is nowhere to add the platform without guessing at the structure",
+      reason: "this file has no `@Module({ ... })` with an `imports:` key on a line of its own \u2014 the shape `nest new` writes \u2014 so there is nowhere to add the platform without guessing at the structure",
       manualBlock
     };
   }
@@ -2005,6 +2153,13 @@ function renderForRootBlock(options) {
     "        // your whole capability inventory \u2014 and the manifest routes to",
     "        // anyone who asks. Import your guard and put it in.",
     "        controller: { guards: [YourAuthGuard] },",
+    "        // The modules whose providers the platform injects: the one",
+    "        // exporting PrismaService, and the one your guard depends on.",
+    "        // `prismaPersistence({ client: PrismaService })` is resolved",
+    "        // inside the platform module, which sees only what is listed",
+    "        // here or declared @Global. Same rule as the guard: this does",
+    "        // not compile until you name them.",
+    "        imports: [YourPrismaModule, YourAuthModule],",
     options.persistenceImport ? "        persistence," : "        // persistence: prismaPersistence({ client: PrismaService }),",
     "        catalog: { featureUiRegistry: " + options.registry.constName + " },",
     "        adminResources: true,",
@@ -3127,6 +3282,9 @@ export {
   enableFkPointers,
   extractBlockNames,
   extractBlocks,
+  extractEnumBlocks,
+  extractEnumNames,
+  extractFragmentBlocks,
   extractModelBlocks,
   extractModelNames,
   findFkPointers,
@@ -3135,6 +3293,7 @@ export {
   hasConstraints,
   isNoLongerPublic,
   isOneToOne,
+  judgeModuleResolution,
   kebabCase,
   migrationCreatedBy,
   minimumQuotasPerPlan,
@@ -3150,9 +3309,11 @@ export {
   planInit,
   projectKeyPattern,
   quotaKeyPattern,
+  readEffectiveModuleResolution,
   relationNameOf,
   reportConstraints,
   rewriteImports,
+  rewriteManifest,
   rewriteNames,
   rewriteSubpath,
   stripLineComment,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saasicat/cli",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.2",
   "description": "CLI helpers for SaaS platform consumers. Provides CliContextService (identity, MFA, production confirm, audit tag).",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -16,7 +16,8 @@
         "types": "./dist/index.d.cts",
         "default": "./dist/index.cjs"
       }
-    }
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
@@ -29,9 +30,9 @@
   },
   "dependencies": {
     "qrcode-terminal": "^0.12.0",
-    "@saasicat/nest": "^1.0.0-rc.0",
-    "@saasicat/spec": "^1.0.0-rc.0",
-    "@saasicat/types": "^1.0.0-rc.0"
+    "@saasicat/nest": "^1.0.0-rc.2",
+    "@saasicat/spec": "^1.0.0-rc.2",
+    "@saasicat/core": "^1.0.0-rc.2"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
@@ -59,7 +60,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "node ../../scripts/build-and-prune.mjs \"tsup src/index.ts --format esm,cjs --dts --external @saasicat/types --external @saasicat/nest --external @nestjs/common --external nest-commander --external qrcode-terminal\"",
+    "build": "node ../../scripts/build-and-prune.mjs \"tsup src/index.ts --format esm,cjs --dts --external @saasicat/core --external @saasicat/nest --external @nestjs/common --external nest-commander --external qrcode-terminal\"",
     "pretest": "pnpm run build",
     "test": "node --test 'tests/*.test.js'"
   }

package/templates/init/src/auth/password.hasher.ts.tpl

@@ -1,6 +1,6 @@
 import { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
 import { Injectable } from '@nestjs/common';
-import type { PasswordHasher } from '@saasicat/types';
+import type { PasswordHasher } from '@saasicat/core';
 
 const KEY_LENGTH = 64;
 

package/templates/init/src/saas/admin-manifest.contribution.ts.tpl

@@ -1,4 +1,4 @@
-import type { ManifestContribution } from '@saasicat/types';
+import type { ManifestContribution } from '@saasicat/core';
 
 /**
  * What this app adds to the SuperAdmin UI.

package/templates/init/src/saas/feature-ui-registry.ts.tpl

@@ -1,4 +1,4 @@
-import type { FeatureUiRegistry } from '@saasicat/types';
+import type { FeatureUiRegistry } from '@saasicat/core';
 
 /**
  * Labels and icons for the feature and quota keys discovery finds in your code.

package/templates/init/src/saas/quota.provider.ts.tpl

@@ -1,6 +1,6 @@
 import { Injectable } from '@nestjs/common';
 import { DefinesQuota } from '@saasicat/nest/discovery';
-import type { QuotaProvider } from '@saasicat/types';
+import type { QuotaProvider } from '@saasicat/core';
 
 import { PrismaService } from '../prisma/prisma.service';