@svgrid/enterprise 2.3.2 → 2.5.0

package/src/studio/samples/insurance.ts

@@ -1,6 +1,6 @@
 import type { EntitySchema } from '../../schema.js'
 import type { FormatRule } from '../project.js'
-import { screen, formScreen, boardScreen, calendarScreen, detailScreen, project, dashScreen, statusPills, pad, ids, type SampleApp } from './shared.js'
+import { screen, formScreen, boardScreen, calendarScreen, detailScreen, project, dashScreen, statusPills, pad, ids, whenIs, type SampleApp } from './shared.js'
 
 // SAP Fiori-style chrome: a dark shell bar across the top (the toolbar), a white
 // launchpad-style rail, and a blue left-bar on the active item (square corners).
@@ -88,8 +88,14 @@ const claims: EntitySchema = {
       { value: 'paid', label: 'Paid', color: '#10b981' },
       { value: 'denied', label: 'Denied', color: '#ef4444' },
     ] },
-    { field: 'amount', type: 'number', label: 'Amount ($)', min: 0, required: true },
-    { field: 'deductible', type: 'number', label: 'Deductible ($)', min: 0, defaultValue: 500 },
+    // Money is frozen once the claim has been paid out - the figures stay on
+    // screen for reference, but they can no longer be edited.
+    { field: 'amount', type: 'number', label: 'Amount ($)', min: 0, required: true, when: { disabled: whenIs('status', 'paid') } },
+    { field: 'deductible', type: 'number', label: 'Deductible ($)', min: 0, defaultValue: 500, when: { disabled: whenIs('status', 'paid') } },
+    // A denial has to be justified, and only a denial asks for it.
+    { field: 'denialReason', type: 'text', label: 'Reason for denial', hidden: { grid: true },
+      input: { editorType: 'textarea', span: 2, help: 'Required to deny a claim' },
+      when: { visible: whenIs('status', 'denied'), required: whenIs('status', 'denied') } },
     // Derived: net payout after the deductible (display-only, never stored).
     { field: 'net', type: 'number', label: 'Net payout ($)', readonly: true, formula: 'amount - deductible' },
     { field: 'severity', type: 'number', label: 'Severity', min: 0, max: 100, defaultValue: 40, input: { editorType: 'slider', suffix: '%', help: 'Loss severity 0-100' } },
@@ -123,7 +129,7 @@ const seed = {
     { id: 'cl1', claimNumber: 'CLM-500001', policyId: 'pl1', adjusterId: 'ad1', type: 'collision', status: 'paid', amount: 8400, deductible: 500, severity: 55, fraudRisk: 1, tags: ['rear-end', 'no-injury'], incidentDate: '2026-01-04', filedAt: '2026-01-06T09:30:00.000Z' },
     { id: 'cl2', claimNumber: 'CLM-500002', policyId: 'pl2', adjusterId: 'ad2', type: 'water', status: 'review', amount: 15200, deductible: 1000, severity: 70, fraudRisk: 2, tags: ['burst-pipe'], incidentDate: '2026-02-01', filedAt: '2026-02-03T14:15:00.000Z' },
     { id: 'cl3', claimNumber: 'CLM-500003', policyId: 'pl3', adjusterId: 'ad3', type: 'medical', status: 'approved', amount: 6200, deductible: 750, severity: 40, fraudRisk: 1, tags: ['surgery'], incidentDate: '2026-02-10', filedAt: '2026-02-12T11:00:00.000Z' },
-    { id: 'cl4', claimNumber: 'CLM-500004', policyId: 'pl5', adjusterId: 'ad1', type: 'theft', status: 'denied', amount: 22000, deductible: 500, severity: 90, fraudRisk: 5, tags: ['suspicious', 'late-report'], incidentDate: '2026-01-20', filedAt: '2026-01-28T16:45:00.000Z' },
+    { id: 'cl4', claimNumber: 'CLM-500004', policyId: 'pl5', adjusterId: 'ad1', type: 'theft', status: 'denied', amount: 22000, deductible: 500, severity: 90, fraudRisk: 5, tags: ['suspicious', 'late-report'], incidentDate: '2026-01-20', filedAt: '2026-01-28T16:45:00.000Z', denialReason: 'Loss reported 8 days after the incident, outside the policy window.' },
     { id: 'cl5', claimNumber: 'CLM-500005', policyId: 'pl6', adjusterId: 'ad4', type: 'fire', status: 'paid', amount: 41000, deductible: 2000, severity: 95, fraudRisk: 2, tags: ['kitchen', 'total-loss'], incidentDate: '2026-03-01', filedAt: '2026-03-02T08:20:00.000Z' },
     { id: 'cl6', claimNumber: 'CLM-500006', policyId: 'pl7', adjusterId: 'ad3', type: 'medical', status: 'filed', amount: 3100, deductible: 750, severity: 25, fraudRisk: 1, tags: ['ER-visit'], incidentDate: '2026-03-11', filedAt: '2026-03-12T13:10:00.000Z' },
     { id: 'cl7', claimNumber: 'CLM-500007', policyId: 'pl8', adjusterId: 'ad6', type: 'collision', status: 'review', amount: 9700, deductible: 500, severity: 60, fraudRisk: 3, tags: ['intersection'], incidentDate: '2026-03-15', filedAt: '2026-03-17T10:05:00.000Z' },

package/src/studio/samples/samples.test.ts

@@ -214,6 +214,42 @@ describe('sample apps', () => {
       }
     })
   })
+
+  describe('forms that react to the answers', () => {
+    // Each of these asks a question only when the answer matters: a lost deal
+    // wants a reason, a closed ticket wants its resolution, a denied claim wants
+    // a justification.
+    const cases: Record<string, { field: string; drivenBy: string }> = {
+      crm: { field: 'lostReason', drivenBy: 'stage' },
+      support: { field: 'resolution', drivenBy: 'status' },
+      insurance: { field: 'denialReason', drivenBy: 'status' },
+    }
+
+    for (const [id, { field, drivenBy }] of Object.entries(cases)) {
+      it(`${id}: asks for "${field}" only when "${drivenBy}" calls for it`, () => {
+        const project = getSampleApp(id)!.build()
+        const conditional = project.entities.flatMap((e) => e.fields).find((f) => f.field === field)!
+        expect(conditional.when?.visible, `${field} should be conditional`).toBeTruthy()
+        expect(conditional.when?.required, `${field} should be demanded when shown`).toBeTruthy()
+        // The condition has to read a field that exists, or it would sit hidden
+        // forever - validateProject enforces this, so assert it stays clean.
+        expect(validateProject(project).filter((i) => i.level === 'error')).toEqual([])
+        // And it must survive into the generated app as plain data.
+        const schemas = emitStudioProject(project).find((f) => f.path === 'src/lib/schemas.ts')!.contents
+        expect(schemas).toContain(`"${field}"`)
+        expect(schemas).toMatch(new RegExp(`"column": "${drivenBy}"`))
+      })
+    }
+
+    it('seeds the conditional fields, so a loaded sample shows real answers', () => {
+      const rowsOf = (id: string, entity: string) =>
+        (getSampleApp(id)!.build().dataSources?.[entity] as { seed?: Record<string, unknown>[] })?.seed ?? []
+      expect(rowsOf('crm', 'deals').filter((r) => r.stage === 'lost').every((r) => !!r.lostReason)).toBe(true)
+      expect(rowsOf('support', 'tickets').filter((r) => r.status === 'resolved' || r.status === 'closed')
+        .every((r) => !!r.resolution)).toBe(true)
+      expect(rowsOf('insurance', 'claims').filter((r) => r.status === 'denied').every((r) => !!r.denialReason)).toBe(true)
+    })
+  })
 })
 
 describe('starter project (fresh `svgrid-studio designer` session)', () => {

package/src/studio/samples/shared.ts

@@ -8,6 +8,7 @@
  * parse/serialize and generates a runnable app with no special-casing.
  */
 import type { EntitySchema } from '../../schema.js'
+import type { PredicateExpr } from '../../expressions/expression-types.js'
 import { generateValue } from '../sample-data.js'
 import { gridConfig, type GridOpts } from '../screen-suites.js'
 import { sanitizeProject, screenFromTemplate, buildDockLayout, type Block, type GridConfig, type Screen, type ScreenTemplate, type StudioProject, type EntityDataSource, type ShellStyle, type SchedulerViewConfig, type SchedulerViewMode, type AuthConfig, type AccessControl } from '../project.js'
@@ -61,6 +62,19 @@ export function pad(schema: EntitySchema, rows: Row[], target: number, fkPools:
 /** The `id` values of a seed array (for building foreign-key pools). */
 export const ids = (rows: Row[]): string[] => rows.map((r) => String(r.id))
 
+/**
+ * `field = value` as a form condition (see `EntityField.when`). Helpers rather
+ * than hand-written literals because an operator the filter engine does not know
+ * silently matches everything, which would leave a conditional field permanently
+ * on-screen.
+ */
+export const whenIs = (field: string, value: string | number): PredicateExpr =>
+  ({ kind: 'cmp', column: field, op: 'equals', value })
+
+/** `field` is any one of `values`. */
+export const whenIsAny = (field: string, values: ReadonlyArray<string | number>): PredicateExpr =>
+  ({ kind: 'or', parts: values.map((value) => ({ kind: 'cmp', column: field, op: 'equals', value })) })
+
 /** A ready-made app shown in the gallery. */
 export type SampleApp = {
   /** Stable id (also the `--template` value). */

package/src/studio/samples/support.ts

@@ -1,5 +1,5 @@
 import type { EntitySchema } from '../../schema.js'
-import { screen, formScreen, boardScreen, workspaceScreen, detailScreen, project, dashScreen, statusPills, pad, ids, type SampleApp } from './shared.js'
+import { screen, formScreen, boardScreen, workspaceScreen, detailScreen, project, dashScreen, statusPills, pad, ids, whenIsAny, type SampleApp } from './shared.js'
 
 // Outlook-style chrome: a solid blue command ribbon (the toolbar), a light "folder"
 // rail with compact rows, and an accented left bar on the active folder.
@@ -86,7 +86,14 @@ const tickets: EntitySchema = {
     { field: 'tags', type: 'text', label: 'Tags', input: { editorType: 'chips', help: 'Topic labels for routing' } },
     { field: 'createdAt', type: 'datetime', label: 'Created', input: { editorType: 'datetime', help: 'When the ticket was opened' } },
     { field: 'firstResponseMins', type: 'number', label: 'First response (min)', min: 0, input: { help: 'Time to the first agent reply' } },
-    { field: 'satisfaction', type: 'number', label: 'CSAT', min: 1, max: 5, input: { editorType: 'rating', help: 'Customer rating on close' } },
+    // The close notes appear the moment a ticket reaches a terminal status, and
+    // the ticket cannot be saved in that state without them.
+    { field: 'resolution', type: 'text', label: 'Resolution', hidden: { grid: true },
+      input: { editorType: 'textarea', span: 2, help: 'What fixed it - required to resolve or close' },
+      when: { visible: whenIsAny('status', ['resolved', 'closed']), required: whenIsAny('status', ['resolved', 'closed']) } },
+    { field: 'satisfaction', type: 'number', label: 'CSAT', min: 1, max: 5, input: { editorType: 'rating', help: 'Customer rating on close' },
+      // A rating only means something once the customer has had an outcome.
+      when: { visible: whenIsAny('status', ['resolved', 'closed']) } },
     { field: 'estimateHrs', type: 'number', label: 'Estimate (hrs)', min: 0, defaultValue: 1, input: { help: 'Estimated effort to resolve' } },
     { field: 'hourlyRate', type: 'number', label: 'Rate ($/hr)', min: 0, defaultValue: 90, input: { help: 'Billed support rate' } },
     // Derived: estimated support cost for the ticket (display-only, never seeded).
@@ -111,10 +118,10 @@ const seed = {
     { id: 'tk1', subject: 'Cannot reset password', customerId: 'c1', agentId: 'a1', priority: 'high', status: 'open', channel: 'email', tags: ['auth', 'login'], createdAt: '2026-07-10T08:30:00Z', firstResponseMins: 12, satisfaction: 4, estimateHrs: 2, hourlyRate: 90 },
     { id: 'tk2', subject: 'Invoice discrepancy', customerId: 'c2', agentId: 'a2', priority: 'normal', status: 'pending', channel: 'email', tags: ['billing'], createdAt: '2026-07-08T11:05:00Z', firstResponseMins: 45, satisfaction: 3, estimateHrs: 1, hourlyRate: 75 },
     { id: 'tk3', subject: 'API returns 500', customerId: 'c3', agentId: 'a1', priority: 'urgent', status: 'open', channel: 'chat', tags: ['api', 'outage'], createdAt: '2026-07-12T15:40:00Z', firstResponseMins: 4, satisfaction: 5, estimateHrs: 4, hourlyRate: 120 },
-    { id: 'tk4', subject: 'How do I export data?', customerId: 'c4', agentId: 'a3', priority: 'low', status: 'resolved', channel: 'chat', tags: ['export'], createdAt: '2026-07-02T09:20:00Z', firstResponseMins: 20, satisfaction: 5, estimateHrs: 1, hourlyRate: 60 },
-    { id: 'tk5', subject: 'Upgrade to Business', customerId: 'c5', agentId: 'a3', priority: 'normal', status: 'closed', channel: 'phone', tags: ['upgrade', 'billing'], createdAt: '2026-06-28T13:10:00Z', firstResponseMins: 8, satisfaction: 4, estimateHrs: 1, hourlyRate: 75 },
+    { id: 'tk4', subject: 'How do I export data?', customerId: 'c4', agentId: 'a3', priority: 'low', status: 'resolved', channel: 'chat', tags: ['export'], createdAt: '2026-07-02T09:20:00Z', firstResponseMins: 20, satisfaction: 5, estimateHrs: 1, hourlyRate: 60, resolution: 'Walked the customer through Export > CSV in the toolbar.' },
+    { id: 'tk5', subject: 'Upgrade to Business', customerId: 'c5', agentId: 'a3', priority: 'normal', status: 'closed', channel: 'phone', tags: ['upgrade', 'billing'], createdAt: '2026-06-28T13:10:00Z', firstResponseMins: 8, satisfaction: 4, estimateHrs: 1, hourlyRate: 75, resolution: 'Upgraded the account to Business and prorated the invoice.' },
     { id: 'tk6', subject: 'SSO configuration', customerId: 'c1', agentId: 'a1', priority: 'high', status: 'pending', channel: 'email', tags: ['sso', 'security'], createdAt: '2026-07-11T10:00:00Z', firstResponseMins: 60, satisfaction: 2, estimateHrs: 3, hourlyRate: 120 },
-    { id: 'tk7', subject: 'Double charge refund', customerId: 'c2', agentId: 'a2', priority: 'urgent', status: 'resolved', channel: 'phone', tags: ['refund', 'billing'], createdAt: '2026-07-05T16:25:00Z', firstResponseMins: 15, satisfaction: 4, estimateHrs: 2, hourlyRate: 90 },
+    { id: 'tk7', subject: 'Double charge refund', customerId: 'c2', agentId: 'a2', priority: 'urgent', status: 'resolved', channel: 'phone', tags: ['refund', 'billing'], createdAt: '2026-07-05T16:25:00Z', firstResponseMins: 15, satisfaction: 4, estimateHrs: 2, hourlyRate: 90, resolution: 'Refunded the duplicate charge; payment retry guard added.' },
     { id: 'tk8', subject: 'Feature request: dark mode', customerId: 'c3', agentId: 'a3', priority: 'low', status: 'open', channel: 'chat', tags: ['feature'], createdAt: '2026-07-13T12:50:00Z', firstResponseMins: 90, satisfaction: 3, estimateHrs: 5, hourlyRate: 100 },
   ],
 }

package/src/studio/screen-suites.test.ts

@@ -5,7 +5,9 @@ import {
   createProject,
   parseProject,
   serializeProject,
+  ssrEligible,
   validateProject,
+  withSsrDefaults,
   type DetailConfig,
   type GridConfig,
   type Screen,
@@ -196,6 +198,47 @@ describe('crudAppFromSchemas', () => {
     expect(app.dataSource).toBe('sql')
   })
 
+  describe('server rendering defaults', () => {
+    const sqlApp = () => crudAppFromSchemas([customers, orders], {
+      dataSource: 'sql',
+      sources: {
+        customers: { kind: 'sql', table: 'customers', dialect: 'postgres' },
+        orders: { kind: 'sql', table: 'orders', dialect: 'postgres' },
+      },
+    })
+
+    it('renders database-backed screens on the server', () => {
+      const app = sqlApp()
+      const list = app.screens.find((s) => s.id === 'customers')!
+      expect(list.renderMode).toBe('ssr')
+      // Every screen that opted in has to actually be emittable that way.
+      for (const s of app.screens.filter((s) => s.renderMode === 'ssr')) {
+        expect(ssrEligible(app, s), `${s.id} claims ssr but is not eligible`).toBe(true)
+      }
+    })
+
+    it('leaves in-memory apps as a client SPA', () => {
+      // In-memory sources are per-process singletons: an SSR screen would mutate
+      // the server's rows while the app's SPA screens read the browser's.
+      const app = crudAppFromSchemas([customers, orders])
+      expect(app.screens.every((s) => s.renderMode === undefined)).toBe(true)
+    })
+
+    it('leaves PGlite alone even in a SQL project', () => {
+      const app = crudAppFromSchemas([customers], {
+        dataSource: 'sql',
+        sources: { customers: { kind: 'pglite', table: 'customers' } },
+      })
+      expect(app.screens.every((s) => s.renderMode === undefined)).toBe(true)
+    })
+
+    it('never overrides a mode that is already set', () => {
+      const app = sqlApp()
+      const pinned = { ...app, screens: app.screens.map((s) => ({ ...s, renderMode: 'spa' as const })) }
+      expect(withSsrDefaults(pinned).screens.every((s) => s.renderMode === 'spa')).toBe(true)
+    })
+  })
+
   it('applies per-entity overrides', () => {
     const app = crudAppFromSchemas([customers, orders], {
       overviewDashboard: false,

package/src/studio/screen-suites.ts

@@ -25,6 +25,7 @@ import {
   entityOf,
   pickFacetFields,
   sanitizeProject,
+  withSsrDefaults,
   type Block,
   type BlockConfig,
   type DataSourceKind,
@@ -434,12 +435,14 @@ export function crudAppFromSchemas(schemas: EntitySchema[], opts: CrudAppOptions
       : source
   }
 
-  return sanitizeProject({
+  // Database-backed screens render on the server by default, so a generated app
+  // ships real SvelteKit (load + form actions) rather than a client SPA.
+  return withSsrDefaults(sanitizeProject({
     title: opts.title ?? 'My Studio App',
     entities: [...schemas],
     screens,
     dataSource: kind,
     dataSources,
     ...(opts.theme ? { theme: opts.theme } : {}),
-  })
+  }))
 }

package/src/studio/user-error.ts

@@ -0,0 +1,31 @@
+/**
+ * UserError - a mistake the person at the keyboard can fix (a typo in a
+ * connection string, an empty table selection, a folder that already holds
+ * another app), as opposed to a defect in Studio.
+ *
+ * The CLI prints these plainly and stops. Everything else is treated as a crash
+ * and gets a sanitized bug report plus a prefilled issue link, so ordinary
+ * fat-fingering never looks like something worth reporting.
+ *
+ * `isUserError` is duck-typed rather than an `instanceof` check: the class can
+ * cross a bundle boundary (browser ESM source vs. the Node build), and a
+ * mis-detected user error would send someone to file an issue about their own
+ * typo.
+ */
+export class UserError extends Error {
+  /** Marker read by `isUserError`; survives bundling and subclassing. */
+  readonly isUserError = true
+  /** Optional follow-up: what to try instead. */
+  readonly hint?: string
+
+  constructor(message: string, hint?: string) {
+    super(message)
+    this.name = 'UserError'
+    if (hint !== undefined) this.hint = hint
+  }
+}
+
+/** True for anything thrown as a `UserError`, across module instances. */
+export function isUserError(err: unknown): err is UserError {
+  return !!err && typeof err === 'object' && (err as { isUserError?: unknown }).isUserError === true
+}

package/src/upgrade-prompt.ts

@@ -39,13 +39,16 @@ export type EnterpriseFeatureLabel =
  * been shown this session, a card is already up, or we're on the server. Safe
  * to call on every Pro feature invocation - it self-throttles.
  */
-export function showUpgradePrompt(feature?: EnterpriseFeatureLabel | string): void {
+export function showUpgradePrompt(
+  feature?: EnterpriseFeatureLabel | string,
+  opts?: { expired?: boolean },
+): void {
   if (shownThisSession) return
   if (typeof document === 'undefined' || typeof window === 'undefined') return
   if (document.querySelector(`[${CARD_ATTR}]`)) return
   shownThisSession = true
 
-  const card = buildCard(feature)
+  const card = buildCard(feature, opts?.expired === true)
   document.body.appendChild(card)
   // Animate in on the next frame so the transition actually runs.
   requestAnimationFrame(() => {
@@ -73,11 +76,11 @@ function close(card: HTMLElement): void {
   window.setTimeout(() => card.remove(), 220)
 }
 
-function buildCard(feature?: EnterpriseFeatureLabel | string): HTMLElement {
+function buildCard(feature?: EnterpriseFeatureLabel | string, expired = false): HTMLElement {
   const card = document.createElement('div')
   card.setAttribute(CARD_ATTR, '1')
   card.setAttribute('role', 'dialog')
-  card.setAttribute('aria-label', 'Unlock SvGrid Pro')
+  card.setAttribute('aria-label', expired ? 'Your trial has ended' : 'Unlock SvGrid Pro')
   Object.assign(card.style, {
     position: 'fixed',
     bottom: '16px',
@@ -105,24 +108,34 @@ function buildCard(feature?: EnterpriseFeatureLabel | string): HTMLElement {
     ? `<strong style="color:#fff">${escapeHtml(featureName)}</strong> is a Pro feature.`
     : `You just used a <strong style="color:#fff">Pro</strong> feature.`
 
+  // An expired trial is a different message from "you never had a licence":
+  // they already evaluated, so the ask is to convert, not to start over.
+  const badge = expired ? 'TRIAL ENDED' : 'PRO'
+  const heading = expired ? 'Your trial has ended' : 'Unlock SvGrid Pro'
+  const body = expired
+    ? `${featurePhrase} Your evaluation period is over - everything still works,
+       but this notice stays until a licence key is set.`
+    : `${featurePhrase} It runs in evaluation with a watermark - start a free trial
+       to remove it and ship to production.`
+  const cta = expired ? 'Buy a licence' : 'Start free trial'
+
   card.innerHTML = `
     <button type="button" data-act="x" aria-label="Dismiss"
       style="position:absolute;top:8px;right:8px;width:24px;height:24px;display:flex;
       align-items:center;justify-content:center;background:transparent;border:0;
       color:#94a3b8;font-size:18px;line-height:1;cursor:pointer;border-radius:6px;">&times;</button>
     <div style="display:flex;align-items:center;gap:8px;margin-bottom:8px;">
-      <span style="display:inline-block;background:#4f46e5;color:#fff;font-size:10px;
-        font-weight:700;letter-spacing:0.06em;padding:2px 7px;border-radius:999px;">PRO</span>
-      <span style="font-weight:700;color:#fff;">Unlock SvGrid Pro</span>
+      <span style="display:inline-block;background:${expired ? '#b45309' : '#4f46e5'};color:#fff;font-size:10px;
+        font-weight:700;letter-spacing:0.06em;padding:2px 7px;border-radius:999px;">${badge}</span>
+      <span style="font-weight:700;color:#fff;">${heading}</span>
     </div>
     <p style="margin:0 0 12px;color:#cbd5e1;">
-      ${featurePhrase} It runs in evaluation with a watermark - start a free trial
-      to remove it and ship to production.
+      ${body}
     </p>
     <div style="display:flex;gap:8px;align-items:center;">
       <a data-act="trial" href="${TRIAL_URL}" target="_blank" rel="noopener noreferrer"
         style="flex:1;text-align:center;background:#6366f1;color:#fff;font-weight:600;
-        text-decoration:none;padding:8px 12px;border-radius:8px;">Start free trial</a>
+        text-decoration:none;padding:8px 12px;border-radius:8px;">${cta}</a>
       <a data-act="pricing" href="${PRICING_URL}" target="_blank" rel="noopener noreferrer"
         style="color:#a5b4fc;text-decoration:none;padding:8px 6px;font-weight:600;">Pricing</a>
     </div>

package/src/version.test.ts

@@ -0,0 +1,17 @@
+import { describe, it, expect } from 'vitest'
+import { readFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { SVGRID_VERSION } from './version'
+
+describe('SVGRID_VERSION', () => {
+  it('matches package.json, so generated apps pin a version that exists', () => {
+    // Generated apps depend on `^SVGRID_VERSION`. If this drifts below the real
+    // version, every scaffolded app asks for a runtime older than the generator
+    // and can miss features the emitted code uses.
+    const pkg = JSON.parse(readFileSync(resolve(process.cwd(), 'package.json'), 'utf8')) as { name: string; version: string }
+    // Guard the guard: if the runner's cwd ever moves, fail loudly here rather
+    // than quietly comparing against some other package's version.
+    expect(pkg.name).toBe('@svgrid/enterprise')
+    expect(SVGRID_VERSION).toBe(pkg.version)
+  })
+})

package/src/version.ts

@@ -0,0 +1,13 @@
+/**
+ * The version of this package, as a value the pure (browser-safe) generator can
+ * read - it cannot open `package.json` at runtime.
+ *
+ * Generated apps depend on `^SVGRID_VERSION` rather than `latest`, so an app
+ * always installs a runtime at least as new as the generator that wrote it.
+ * `latest` made that a coin toss: an app scaffolded today and the same app
+ * scaffolded tomorrow could resolve different runtimes, and an unrelated publish
+ * could break an app nobody had touched.
+ *
+ * `version.test.ts` asserts this matches `package.json`, so the two cannot drift.
+ */
+export const SVGRID_VERSION = '2.4.0'