@team-codeme/crud-forge 0.0.0-stage → 1.0.0

package/test/verify.js

@@ -0,0 +1,959 @@
+const fs = require('fs-extra');
+const path = require('path');
+const { generateFromSource } = require('../src/index');
+
+async function verify() {
+  console.log('🧪 Starting CRUDForge Verification Tests...');
+
+  const fixturePath = path.join(__dirname, 'fixtures', 'mock.jdl');
+  const outputDir = path.join(__dirname, 'output');
+
+  // Clean previous output
+  await fs.remove(outputDir);
+
+  const jdlContent = await fs.readFile(fixturePath, 'utf8');
+
+  console.log('🧪 Running generation with standard JDL fixture...');
+  const result = await generateFromSource(jdlContent, {
+    filePath: fixturePath,
+    outputDirectory: outputDir,
+    microservice: 'book-service'
+  });
+
+  console.log('🧪 Checking generated files...');
+  
+  // Define expected files
+  const expectedFiles = [
+    'generator/README.md',
+    'generator/issues/.gitkeep',
+    'entities/book/book.model.ts',
+    'entities/book/book.routes.ts',
+    'entities/book/service/book.service.ts',
+    'entities/book/components/forms/update/book-form.service.ts',
+    'entities/book/components/forms/form-page/book-form-page.component.ts',
+    'entities/book/components/forms/form-page/book-form-page.component.html',
+    'entities/book/components/presentation/detail/book-detail.component.ts',
+    'entities/book/components/presentation/detail/book-detail.component.html',
+    'entities/book/components/presentation/detail/book-detail.component.css',
+    'entities/book/components/presentation/list/book-list.component.ts',
+    'entities/book/components/presentation/list/book-list.component.html',
+    
+    // Author files (no dates)
+    'entities/author/author.model.ts',
+    'entities/author/service/author.service.ts',
+    'entities/author/components/forms/update/author-form.service.ts'
+  ];
+
+  for (const relPath of expectedFiles) {
+    const fullPath = path.join(outputDir, relPath);
+    const exists = await fs.pathExists(fullPath);
+    if (!exists) {
+      throw new Error(`❌ File verification failed: Missing ${relPath}`);
+    }
+  }
+  console.log('✅ All expected component files generated successfully.');
+
+  // Verify dates conversion bug fix
+  const authorServiceContent = await fs.readFile(path.join(outputDir, 'entities/author/service/author.service.ts'), 'utf8');
+  if (authorServiceContent.includes('Omit<T, >')) {
+    throw new Error('❌ Date type error validation failed: Generated author.service.ts contains invalid "Omit<T, >" type syntax.');
+  }
+  console.log('✅ author.service.ts Omit syntax type is correct (Omit<T, never>).');
+
+  // Real-API builds must not import mock files that are never generated.
+  if (authorServiceContent.includes('../mock/data') || authorServiceContent.includes('mockData')) {
+    throw new Error('Non-mock service references missing mock data.');
+  }
+  const mockOutput = await fs.mkdtemp(path.join(require('os').tmpdir(), 'crudforge-mock-service-'));
+  try {
+    await generateFromSource(jdlContent, {
+      filePath: fixturePath,
+      outputDirectory: mockOutput,
+      microservice: 'book-service',
+      mock: { enabled: true, recordsPerEntity: 2 },
+    });
+    const service = await fs.readFile(path.join(mockOutput, 'entities/author/service/author.service.ts'), 'utf8');
+    if (!service.includes("from '../mock/data'") ||
+        !await fs.pathExists(path.join(mockOutput, 'entities/author/mock/data.ts'))) {
+      throw new Error('Mock services must retain their generated mock data dependency.');
+    }
+  } finally {
+    await fs.remove(mockOutput);
+  }
+
+  // Verify text highlights XSS bug fix
+  const bookListContent = await fs.readFile(path.join(outputDir, 'entities/book/components/presentation/list/book-list.component.ts'), 'utf8');
+  const bookBaseListContent = await fs.readFile(path.join(outputDir, 'shared/base/base-list.component.ts'), 'utf8');
+  if (!bookBaseListContent.includes('.replace(/&/g, \'&amp;\')')) {
+    throw new Error('❌ Security check failed: Book list component does not escape HTML text before highlighting.');
+  }
+  console.log('✅ highlightText security HTML escape logic is present.');
+
+  const bookSettingsContent = await fs.readFile(path.join(outputDir, 'entities/book/settings/settings.config.ts'), 'utf8');
+  if (!bookSettingsContent.includes("formMode: 'sidebar'") || !bookSettingsContent.includes("searchMode: 'field'")) {
+    throw new Error('❌ Settings check failed: book settings.config.ts is missing formMode sidebar or searchMode field.');
+  }
+  if (!bookListContent.includes('openFormFromQueryParams') || !bookListContent.includes('mountSidebarForm') || !bookListContent.includes('skipConfirm')) {
+    throw new Error('❌ Form mode check failed: book list does not keep edit and new on the same sidebar path.');
+  }
+  const bookFormPageContent = await fs.readFile(path.join(outputDir, 'entities/book/components/forms/form-page/book-form-page.component.ts'), 'utf8');
+  if (!bookFormPageContent.includes("Settings.formMode !== 'page'") || !bookFormPageContent.includes("form: 'edit'")) {
+    throw new Error('❌ Form mode check failed: form-page does not redirect sidebar-mode edits back to the list drawer.');
+  }
+  const bookActionsHtml = await fs.readFile(path.join(outputDir, 'entities/book/components/interaction/actions/book-actions.component.html'), 'utf8');
+  if (!bookActionsHtml.includes("searchMode === 'field'") || !bookActionsHtml.includes('Search all fields')) {
+    throw new Error('❌ Search mode check failed: actions toolbar is missing field/global search switch.');
+  }
+  console.log('✅ Form mode and search mode generation checks passed.');
+
+  // Verify JDL String Capitalization fix
+  const bookModelContent = await fs.readFile(path.join(outputDir, 'entities/book/book.model.ts'), 'utf8');
+  if (bookModelContent.includes('title?: String')) {
+    throw new Error('❌ Type capitalization check failed: Model interface maps JDL String to capitalized String class.');
+  }
+  console.log('✅ Model interface correctly maps String to primitive lowercase string.');
+
+  // Verify generator statistics
+  if (!result.stats || result.stats.entityCount !== 2 || typeof result.stats.fileCount !== 'number') {
+    throw new Error('❌ Stats verification failed: generateFromSource did not return expected execution stats.');
+  }
+  console.log(`✅ Generation statistics verified successfully. Processed: ${result.stats.entityCount} entities, ${result.stats.fileCount} files.`);
+
+  // Verify Colors utility under NO_COLOR override
+  delete require.cache[require.resolve('../src/utils/colors')];
+  process.env.NO_COLOR = '1';
+  const colorsNoColor = require('../src/utils/colors');
+  if (colorsNoColor.green('hello') !== 'hello') {
+    throw new Error('❌ Colors check failed: green() did not fall back to plain text when NO_COLOR is set.');
+  }
+  console.log('✅ Colors utility correctly respects process.env.NO_COLOR.');
+  
+  delete require.cache[require.resolve('../src/utils/colors')];
+  delete process.env.NO_COLOR;
+
+  // Verify Branding configuration properties
+  const branding = require('../src/utils/branding');
+  const colors = require('../src/utils/colors');
+  if (!branding.BANNER.includes('CRUDForge') && !branding.BANNER.includes('___')) {
+    throw new Error('❌ Branding check failed: ASCII banner is missing.');
+  }
+  if (branding.DEVELOPER_INFO !== 'Developed by TeamCodeMe') {
+    throw new Error('❌ Branding check failed: Developer attribution is incorrect.');
+  }
+  
+  // Verify Branding configuration options
+  console.log('🧪 Testing branding configuration settings...');
+  let loggedOutput = [];
+  const originalLog = console.log;
+  console.log = (...args) => {
+    loggedOutput.push(args.join(' '));
+  };
+  try {
+    // 1. Test banner: false disables banner print
+    loggedOutput = [];
+    branding.printBanner({ branding: { banner: false } });
+    if (loggedOutput.length > 0) {
+      throw new Error('Banner was printed despite banner: false config preference.');
+    }
+
+    // 2. Test bannerColor: 'red' uses red color formatting
+    loggedOutput = [];
+    branding.printBanner({ branding: { banner: true, bannerColor: 'red' } });
+    const expectedColor = colors.colorsEnabled ? '\x1b[31m' : '____';
+    if (loggedOutput.length === 0 || !loggedOutput[0].includes(expectedColor)) {
+      throw new Error('Banner was not printed in red color format as requested.');
+    }
+  } finally {
+    console.log = originalLog;
+  }
+  console.log('✅ Branding banner configuration options validated successfully.');
+  console.log('✅ ASCII banner and developer info validated successfully.');
+
+  // Verify Blueprint Validator
+  const { validateBlueprint } = require('../src/validator/blueprint-validator');
+  
+  // Test case 1: Valid JDL
+  const validJdl = `
+    entity Book {
+      title String required
+      pages Integer min(5)
+    }
+  `;
+  const errors1 = validateBlueprint(validJdl, false);
+  if (errors1.length !== 0) {
+    throw new Error('❌ Validator check failed: valid JDL was reported as invalid.');
+  }
+  console.log('✅ Validator correctly marked valid JDL as clean.');
+
+  // Test case 2: Braces mismatch
+  const mismatchedBracesJdl = `
+    entity Book {
+      title String
+  `;
+  const errors2 = validateBlueprint(mismatchedBracesJdl, false);
+  if (errors2.length !== 1 || !errors2[0].includes('Mismatched curly braces')) {
+    throw new Error('❌ Validator check failed: mismatched curly braces error was not detected.');
+  }
+  console.log('✅ Validator correctly detected mismatched curly braces.');
+
+  // Test case 3: Invalid validation type constraints (Semantic error)
+  const invalidConstraintsJdl = `
+    entity Book {
+      title String min(5)
+      pages Integer minlength(3)
+    }
+  `;
+  const errors3 = validateBlueprint(invalidConstraintsJdl, false);
+  if (errors3.length !== 2) {
+    throw new Error(`❌ Validator check failed: expected 2 semantic validation errors, got ${errors3.length}.`);
+  }
+  if (!errors3[0].includes('min') || !errors3[0].includes('column 20')) {
+    throw new Error('❌ Validator check failed: did not report correct error column for String min constraint.');
+  }
+  if (!errors3[1].includes('minlength') || !errors3[1].includes('column 21')) {
+    throw new Error('❌ Validator check failed: did not report correct error column for Integer minlength constraint.');
+  }
+  console.log('✅ Validator correctly flagged invalid validations and returned line & column caret details.');
+
+  // Test case 4: Undefined relationship entities (Semantic error)
+  const undefinedRelJdl = `
+    entity Book {
+      title String
+    }
+    relationship OneToOne {
+      Book to Library
+    }
+  `;
+  const errors4 = validateBlueprint(undefinedRelJdl, false);
+  if (errors4.length !== 1 || !errors4[0].includes('Library') || !errors4[0].includes('is not defined')) {
+    throw new Error('❌ Validator check failed: undefined relationship target entity error was not detected.');
+  }
+  console.log('✅ Validator correctly caught relationship pointing to undefined entities.');
+
+  // Verify Dry-Run and Diff Preview
+  console.log('🧪 Testing dry-run and diff preview logic...');
+  const dryRunOutputDir = path.join(__dirname, 'output-dryrun');
+  await fs.remove(dryRunOutputDir);
+
+  // Load loadConfig and programmatic parser wrapper to run generation in dryRun
+  const { loadConfig } = require('../src/config/load-config');
+  const { parseJdl } = require('../src/parser/jdl-parser');
+  const { generate } = require('../src/generator');
+  
+  const { config } = await loadConfig(process.cwd(), null);
+  config.dryRun = true;
+  config.output.directory = dryRunOutputDir;
+  config.api.microservice = 'book-service';
+
+  const parsed = parseJdl(jdlContent, config);
+  const dryRunStats = await generate(parsed, config);
+
+  // Ensure output directory is empty or does not exist
+  const folderExists = await fs.pathExists(dryRunOutputDir);
+  if (folderExists) {
+    const files = await fs.readdir(dryRunOutputDir);
+    if (files.length > 0) {
+      throw new Error('❌ Dry-run check failed: Files were written to disk when dryRun was enabled.');
+    }
+  }
+  console.log('✅ Dry-run mode correctly bypassed filesystem writes.');
+
+  // Validate dryRunReport properties
+  if (!dryRunStats || !dryRunStats.dryRun || !dryRunStats.dryRunReport) {
+    throw new Error('❌ Dry-run check failed: stats.dryRunReport was not returned.');
+  }
+  const report = dryRunStats.dryRunReport;
+  if (report.newFiles.length === 0 || report.modifiedFiles.length !== 0) {
+    throw new Error('❌ Dry-run check failed: newFiles or modifiedFiles count in report is incorrect.');
+  }
+  console.log('✅ Dry-run report returned correct metrics.');
+
+  // Verify Diff formatter utility
+  const { formatDiff } = require('../src/utils/diff');
+  const oldText = 'line1\nline2\nline3';
+  const newText = 'line1\nlinechanged\nline3';
+  const diff = formatDiff(oldText, newText);
+
+  const hasAdded = diff.some(line => line.type === 'added' && line.text.includes('linechanged'));
+  const hasRemoved = diff.some(line => line.type === 'removed' && line.text.includes('line2'));
+  if (!hasAdded || !hasRemoved) {
+    throw new Error('❌ Diff utility check failed: line-level differences were not calculated correctly.');
+  }
+  console.log('✅ Diff utility computed and formatted unified diff successfully.');
+
+  // Verify Relationship Generation on Author components
+  console.log('🧪 Testing relationship generation logic...');
+  const authorFormContent = await fs.readFile(path.join(outputDir, 'entities/author/components/forms/form/author-form.component.ts'), 'utf8');
+  if (!authorFormContent.includes('BookService') || !authorFormContent.includes('booksSharedCollection') || !authorFormContent.includes('compareBook')) {
+    throw new Error('❌ Relationship check failed: AuthorForm component is missing Book relationship bindings.');
+  }
+  console.log('✅ AuthorForm component typescript correctly loads related Book collections.');
+
+  const authorFormHtml = await fs.readFile(path.join(outputDir, 'entities/author/components/forms/form/author-form.component.html'), 'utf8');
+  if (!authorFormHtml.includes('formControlName="book"') && !authorFormHtml.includes('booksSharedCollection')) {
+    throw new Error('❌ Relationship check failed: AuthorForm HTML is missing relationship select dropdown picker.');
+  }
+  console.log('✅ AuthorForm component HTML correctly renders relationship dropdown picker.');
+
+  const authorDetailHtml = await fs.readFile(path.join(outputDir, 'entities/author/components/presentation/detail/author-detail.component.html'), 'utf8');
+  if (!authorDetailHtml.includes('[routerLink]="[\'/book\'') || !authorDetailHtml.includes('item.id')) {
+    throw new Error('❌ Relationship check failed: AuthorDetail HTML is missing relationship detail links.');
+  }
+  console.log('✅ AuthorDetail component HTML correctly renders relationship router links.');
+
+  // Verify Feature Custom Config Preferences overrides
+  console.log('🧪 Testing custom configurability overrides...');
+  const configOutputDir = path.join(__dirname, 'output-config-test');
+  await fs.remove(configOutputDir);
+  await fs.ensureDir(configOutputDir);
+
+  // Invalid schemas must never bypass the shared fail-fast gate.
+  await require('node:assert/strict').rejects(generateFromSource('entity InvalidBook {', {
+    outputDirectory: configOutputDir, validation: false
+  }), /Unclosed/);
+
+  // 2. Test generate.relationships: false disables relationships rendering
+  const cleanRelationOutputDir = path.join(__dirname, 'output-no-relations');
+  await fs.remove(cleanRelationOutputDir);
+  await fs.ensureDir(cleanRelationOutputDir);
+  await generateFromSource(jdlContent, {
+    outputDirectory: cleanRelationOutputDir,
+    generate: {
+      relationships: false // disable relations rendering!
+    }
+  });
+
+  const noRelAuthorFormContent = await fs.readFile(path.join(cleanRelationOutputDir, 'entities/author/components/forms/form/author-form.component.ts'), 'utf8');
+  if (noRelAuthorFormContent.includes('BookService') || noRelAuthorFormContent.includes('booksSharedCollection')) {
+    throw new Error('❌ Config preference failed: relationships: false did not disable TS imports/loaders.');
+  }
+  const noRelAuthorFormHtml = await fs.readFile(path.join(cleanRelationOutputDir, 'entities/author/components/forms/form/author-form.component.html'), 'utf8');
+  if (noRelAuthorFormHtml.includes('booksSharedCollection')) {
+    throw new Error('❌ Config preference failed: relationships: false did not disable select input picker HTML.');
+  }
+  const noRelAuthorDetailHtml = await fs.readFile(path.join(cleanRelationOutputDir, 'entities/author/components/presentation/detail/author-detail.component.html'), 'utf8');
+  if (noRelAuthorDetailHtml.includes('[routerLink]="[\'/book\'')) {
+    throw new Error('❌ Config preference failed: relationships: false did not disable detail view links.');
+  }
+  console.log('✅ Bypassed relationships generation successfully using generate.relationships: false preference.');
+
+  // Clean up config test folders
+  await fs.remove(configOutputDir);
+  await fs.remove(cleanRelationOutputDir);
+
+  // 3. Test Fuse Project Scaffolding & Generation
+  console.log('🧪 Testing Fuse Angular project generation...');
+  const fuseOutputDir = path.join(__dirname, 'output-fuse-test');
+  await fs.remove(fuseOutputDir);
+  await fs.ensureDir(fuseOutputDir);
+
+  const starterPackPath = path.resolve(__dirname, '../fuse-starter-pack/fuse-v21.1');
+
+  await generateFromSource(jdlContent, {
+    outputDirectory: fuseOutputDir,
+    fuse: {
+      enabled: true,
+      starterPackPath: starterPackPath,
+      cleanLayout: true,
+      theme: {
+        scheme: 'light',
+        primary: '#0f766e',
+        error: '#b91c1c'
+      }
+    }
+  });
+
+  // Verify that files were copied
+  if (!fs.existsSync(path.join(fuseOutputDir, 'tsconfig.json'))) {
+    throw new Error('❌ Fuse check failed: tsconfig.json was not copied.');
+  }
+
+  // Verify that new assets (environments, Nginx, Docker, push.sh, proxy files) were copied
+  if (!fs.existsSync(path.join(fuseOutputDir, 'src/environments/environment.ts')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'src/environments/environment.prod.ts')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'src/environments/environment.mock.ts'))) {
+    throw new Error('❌ Fuse check failed: Environment files were not copied.');
+  }
+  if (!fs.existsSync(path.join(fuseOutputDir, 'proxy.dev.conf.json')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'proxy.conf.json'))) {
+    throw new Error('❌ Fuse check failed: Proxy configurations were not copied.');
+  }
+  if (!fs.existsSync(path.join(fuseOutputDir, 'nginx.conf')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'nginx.dev.conf'))) {
+    throw new Error('❌ Fuse check failed: Nginx configuration files were not copied.');
+  }
+  if (!fs.existsSync(path.join(fuseOutputDir, 'Dockerfile')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'push.sh'))) {
+    throw new Error('❌ Fuse check failed: Deployment Dockerfile or push.sh script was not copied.');
+  }
+  const appJson = require(path.join(fuseOutputDir, 'angular.json'));
+  if (!appJson.projects.fuse.architect.build.configurations.production.fileReplacements ||
+      !appJson.projects.fuse.architect.serve.configurations.production.proxyConfig) {
+    throw new Error('❌ Fuse check failed: angular.json was not updated with environment and proxy configurations.');
+  }
+  const pkgJson = require(path.join(fuseOutputDir, 'package.json'));
+  if (!pkgJson.scripts['dev'] || !pkgJson.scripts['start']) {
+    throw new Error('❌ Fuse check failed: package.json is missing environment scripts.');
+  }
+
+  // Verify generic error page fallback routing
+  const appRoutesPath = path.join(fuseOutputDir, 'src/app/app.routes.ts');
+  const appRoutesContent = fs.readFileSync(appRoutesPath, 'utf8');
+  if (!appRoutesContent.includes('path: \'**\'') || !appRoutesContent.includes('error-page')) {
+    throw new Error('❌ Fuse routing check failed: Global wildcard fallback route is missing from app.routes.ts');
+  }
+
+  const adminRoutesPath = path.join(fuseOutputDir, 'src/app/domains/admin/routes.ts');
+  const adminRoutesContent = fs.readFileSync(adminRoutesPath, 'utf8');
+  if (!adminRoutesContent.includes('path: \'**\'') || !adminRoutesContent.includes('error-page')) {
+    throw new Error('❌ Fuse routing check failed: Scoped wildcard fallback route is missing from admin/routes.ts');
+  }
+
+  // Verify that entity folder was created inside the correct Fuse modules path
+  const bookRoutesPath = path.join(fuseOutputDir, 'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/book.routes.ts');
+  if (!fs.existsSync(bookRoutesPath)) {
+    throw new Error('❌ Fuse check failed: entity book.routes.ts was not generated in microservice path.');
+  }
+  const fuseSharedConfirm = path.join(
+    fuseOutputDir,
+    'src/app/domains/admin/modules/apps/shared/components/confirmation-dialog.component.ts'
+  );
+  if (!fs.existsSync(fuseSharedConfirm)) {
+    throw new Error('❌ Fuse check failed: shared confirmation dialog was not hoisted to apps/shared.');
+  }
+  const fuseBookListHtml = await fs.readFile(
+    path.join(fuseOutputDir, 'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/components/presentation/list/book-list.component.html'),
+    'utf8'
+  );
+  if (!fuseBookListHtml.includes('data-screen-id="microservice/book"')) {
+    throw new Error('❌ Fuse check failed: book list is missing data-screen-id stamps.');
+  }
+  if (fuseBookListHtml.includes('accessCtrl')) {
+    throw new Error('❌ Fuse check failed: book list hides actions with accessCtrl when auth is off.');
+  }
+
+  // Verify that routes.ts contains the generated routing entry
+  const mainRoutesPath = path.join(fuseOutputDir, 'src/app/domains/admin/routes.ts');
+  const mainRoutesContent = await fs.readFile(mainRoutesPath, 'utf8');
+  if (!mainRoutesContent.includes('loadChildren: () => import(\'./modules/apps/micro-functions/microservice/entities/book/book.routes\')')) {
+    throw new Error('❌ Fuse check failed: routes.ts is missing book lazy loading entry.');
+  }
+
+  // Verify clean routes layout: other route paths (like dashboards, academy) should be removed
+  if (mainRoutesContent.includes('loadChildren: () => import(\'./modules/dashboards/routes\')') || mainRoutesContent.includes('path: \'academy\'')) {
+    throw new Error('❌ Fuse clean layout failed: routes.ts still contains pre-built dashboards or academy routes.');
+  }
+
+  // Verify that routes backup file was created
+  if (!fs.existsSync(mainRoutesPath + '.bak')) {
+    throw new Error('❌ Fuse check failed: routes backup file was not created.');
+  }
+
+  // Verify that navigation.ts contains the navigation items
+  const navPath = path.join(fuseOutputDir, 'src/app/domains/admin/layout/data/navigation.ts');
+  const navContent = await fs.readFile(navPath, 'utf8');
+  if (!navContent.includes('id: \'microservice-group\'') || !navContent.includes('route: \'/admin/book\'')) {
+    throw new Error('❌ Fuse check failed: navigation.ts is missing microservice menu bindings.');
+  }
+
+  // Verify clean navigation layout: other default category entries (like dashboards) should be removed
+  if (navContent.includes('id: \'dashboards\'') || navContent.includes('id: \'documentation\'')) {
+    throw new Error('❌ Fuse clean layout failed: navigation.ts still contains pre-built dashboards or documentation options.');
+  }
+
+  // Verify that navigation backup file was created
+  if (!fs.existsSync(navPath + '.bak')) {
+    throw new Error('❌ Fuse check failed: navigation backup file was not created.');
+  }
+
+  // Verify sign-in page branding updates
+  const signInPath = path.join(fuseOutputDir, 'src/app/domains/auth/features/sign-in/sign-in.html');
+  const signInHtml = await fs.readFile(signInPath, 'utf8');
+  if (!signInHtml.includes('Welcome to CRUDForge') || !signInHtml.includes('CRUDForge logo')) {
+    throw new Error('❌ Fuse sign-in branding failed: sign-in.html was not updated with CRUDForge assets.');
+  }
+  if (
+    signInHtml.includes('Google') ||
+    signInHtml.includes('Or continue with') ||
+    signInHtml.includes('/images/photos/') ||
+    signInHtml.includes('You are browsing')
+  ) {
+    throw new Error('❌ Fuse sign-in branding failed: demo chrome / stock photos still present on sign-in.');
+  }
+  if (!fs.existsSync(path.join(fuseOutputDir, 'public/images/logo/logo.png')) ||
+      !fs.existsSync(path.join(fuseOutputDir, 'public/images/logo/logo-mark.png'))) {
+    throw new Error('❌ Fuse branding failed: logo.png / logo-mark.png missing from public/images/logo.');
+  }
+  if (fs.existsSync(path.join(fuseOutputDir, 'public/images/photos')) ||
+      fs.existsSync(path.join(fuseOutputDir, 'public/images/cards'))) {
+    throw new Error('❌ Fuse branding failed: unused stock image folders (photos/cards) should not ship.');
+  }
+
+  // Verify clean layout visual components
+  const layoutFilePath = path.join(fuseOutputDir, 'src/app/domains/admin/layout/layout.ts');
+  const layoutContent = await fs.readFile(layoutFilePath, 'utf8');
+  if (layoutContent.includes('BuilderKit') || layoutContent.includes('<language-switcher />')) {
+    throw new Error('❌ Fuse clean layout failed: layout.ts still contains promo banner or language flag switcher.');
+  }
+
+  const sidebarFilePath = path.join(fuseOutputDir, 'src/app/domains/admin/layout/ui/sidebar.ts');
+  const sidebarContent = await fs.readFile(sidebarFilePath, 'utf8');
+  if (sidebarContent.includes('Your trial is expiring soon') || sidebarContent.includes('Upgrade now')) {
+    throw new Error('❌ Fuse clean layout failed: sidebar.ts still contains expiring trial notification card.');
+  }
+  if (!sidebarContent.includes('/images/logo/logo.png') || !sidebarContent.includes('CRUDForge logo')) {
+    throw new Error('❌ Fuse clean layout failed: sidebar.ts is missing the CRUDForge wordmark logo.');
+  }
+
+  const fuseAppTs = await fs.readFile(path.join(fuseOutputDir, 'src/app/app.ts'), 'utf8');
+  if (!fuseAppTs.includes('export const fuseTheme') || !fuseAppTs.includes("primary: '#0f766e'") || !fuseAppTs.includes("error: '#b91c1c'")) {
+    throw new Error('❌ Fuse theme check failed: app.ts fuseTheme was not written from fuse.theme config.');
+  }
+  const fuseAppConfig = await fs.readFile(path.join(fuseOutputDir, 'src/app/app.config.ts'), 'utf8');
+  if (!fuseAppConfig.includes('provideTheming(fuseTheme)')) {
+    throw new Error('❌ Fuse theme check failed: app.config.ts does not use root fuseTheme.');
+  }
+  console.log('✅ Fuse root theme colors were applied from app.ts.');
+
+  // Symlink node_modules to run strict compilation
+  const outputNodeModules = path.join(fuseOutputDir, 'node_modules');
+  const sourceNodeModules = path.join(starterPackPath, 'node_modules');
+  if (fs.existsSync(sourceNodeModules)) {
+    await fs.symlink(sourceNodeModules, outputNodeModules, 'dir');
+    console.log('✅ Symlinked node_modules to output directory.');
+    
+    // Execute tsc compilation
+    console.log('🧪 Running strict TypeScript compilation check on Fuse output...');
+    const execSync = require('child_process').execSync;
+    try {
+      execSync('npx tsc -p tsconfig.app.json --noEmit', { cwd: fuseOutputDir, stdio: 'pipe' });
+      console.log('✅ Strict TypeScript compilation check PASSED successfully.');
+    } catch (err) {
+      const errMsg = err.stdout ? err.stdout.toString() : err.message;
+      throw new Error('❌ Fuse compilation failed: ' + errMsg);
+    }
+  }
+
+  // Clean up
+  await fs.remove(fuseOutputDir);
+
+  console.log('🧪 Testing Keycloak auth + IAM pack...');
+  const iamOutputDir = path.join(__dirname, 'output-iam-test');
+  await fs.remove(iamOutputDir);
+  await generateFromSource(jdlContent, {
+    outputDirectory: iamOutputDir,
+    fuse: {
+      enabled: true,
+      starterPackPath,
+      cleanLayout: true,
+    },
+    auth: {
+      provider: 'keycloak',
+      useMockAuth: true,
+      clientSecret: 'MUST-NOT-EMIT-SECRET',
+    },
+    iam: {
+      enabled: true,
+    },
+  });
+
+  const iamFiles = [
+    'src/app/core/auth/AGENT_README.md',
+    'src/app/core/auth/index.ts',
+    'src/app/core/auth/services/auth.service.ts',
+    'src/app/core/auth/services/access-control.service.ts',
+    'src/app/core/auth/services/keycloak-admin.service.ts',
+    'src/app/core/auth/interceptors/auth.interceptor.ts',
+    'src/app/core/auth/guards/auth.guard.ts',
+    'src/app/core/auth/guards/landing.guard.ts',
+    'src/app/core/auth/components/disabled-account-overlay/disabled-account-overlay.component.ts',
+    'src/app/core/auth/components/disabled-account-overlay/disabled-account-overlay.component.html',
+    'src/app/core/auth/components/disabled-account-overlay/disabled-account-overlay.component.css',
+    'src/app/domains/admin/modules/apps/shared/components/confirmation-dialog.component.ts',
+    'src/app/domains/admin/modules/apps/shared/components/confirm-with-input-dialog.component.ts',
+    'src/app/domains/admin/modules/apps/shared/components/loading-overlay.component.ts',
+    'src/app/domains/admin/modules/extras/no-access/no-access.component.ts',
+    'src/app/core/user-management/users/user-list/user-list.component.ts',
+    'src/app/core/user-management/users/user-list/user-list.component.html',
+    'src/app/core/user-management/users/user-list/user-list.component.scss',
+    'src/app/core/user-management/roles/role-list/role-list.component.ts',
+    'src/app/core/user-management/roles/role-list/role-list.component.html',
+    'src/app/core/user-management/roles/role-list/role-list.component.scss',
+    'src/app/core/user-management/roles/role-list/components/role-header/role-header.component.ts',
+    'src/app/core/user-management/roles/role-list/components/role-users/role-users.component.ts',
+    'src/app/core/user-management/roles/role-list/components/role-inheritance/role-inheritance.component.ts',
+    'src/app/core/user-management/roles/role-list/components/role-permissions-panel/role-permissions-panel.component.ts',
+    'src/app/core/user-management/roles/role-list/components/user-select-dialog/user-select-dialog.component.ts',
+    'src/app/core/user-management/shared/confirm-dialog.component.ts',
+    'src/app/core/user-management/matrices/role-permission-matrix/role-permission-matrix.component.ts',
+    'src/app/core/user-management/matrices/role-permission-matrix/role-permission-matrix.component.html',
+    'src/app/core/user-management/matrices/role-permission-matrix/role-permission-matrix.component.scss',
+    'src/app/core/user-management/shared/permission-matrix-sound.ts',
+    'public/assets/sound/apple-play.mp3',
+    'public/assets/sound/remove.mp3',
+    'src/app/core/user-management/AGENT_README.md',
+    'src/app/core/user-management/user-management.routes.ts',
+    'src/app/core/user-management/shared/screen-catalog.ts',
+  ];
+  for (const relPath of iamFiles) {
+    if (!fs.existsSync(path.join(iamOutputDir, relPath))) {
+      throw new Error(`❌ IAM pack check failed: Missing ${relPath}`);
+    }
+  }
+
+  const iamEnv = await fs.readFile(path.join(iamOutputDir, 'src/environments/environment.ts'), 'utf8');
+  if (iamEnv.includes('kcClientSecret') || iamEnv.includes('MUST-NOT-EMIT-SECRET')) {
+    throw new Error('❌ IAM pack check failed: environment.ts must not contain kcClientSecret or provision secrets.');
+  }
+  const iamBookForm = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/components/forms/form/book-form.component.ts'),
+    'utf8'
+  );
+  if (iamBookForm.includes('MUST-NOT-EMIT-SECRET') || iamBookForm.includes('"clientSecret"')) {
+    throw new Error('❌ IAM pack check failed: generated preferences must not embed auth.clientSecret.');
+  }
+  if (!iamEnv.includes('kcRealm') || !iamEnv.includes('useMockAuth: true')) {
+    throw new Error('❌ IAM pack check failed: environment.ts is missing Keycloak settings.');
+  }
+  if (
+    !iamEnv.includes('sessionIdleTimeoutMs: 0') ||
+    !iamEnv.includes('sessionRefreshOnFocus:') ||
+    !iamEnv.includes('disabledAccountEnabled: false')
+  ) {
+    throw new Error('❌ IAM pack check failed: environment.ts is missing session / disabled-account settings.');
+  }
+  const iamAuthService = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/core/auth/services/auth.service.ts'),
+    'utf8'
+  );
+  if (
+    !iamAuthService.includes('tryStartDisabledAccountLockFromAuthError') ||
+    !iamAuthService.includes('refreshTokenIfDue') ||
+    !iamAuthService.includes('SignOutReason')
+  ) {
+    throw new Error('❌ IAM pack check failed: auth.service.ts missing session / disabled-account pack.');
+  }
+  const iamAppRoot = await fs.readFile(path.join(iamOutputDir, 'src/app/app.ts'), 'utf8');
+  if (
+    !iamAppRoot.includes('DisabledAccountOverlayComponent') ||
+    !iamAppRoot.includes('disabledAccountOverlayVisible')
+  ) {
+    throw new Error('❌ IAM pack check failed: app.ts missing disabled-account overlay wiring.');
+  }
+  const iamAppConfig = await fs.readFile(path.join(iamOutputDir, 'src/app/app.config.ts'), 'utf8');
+  if (!iamAppConfig.includes('authInterceptor') || !iamAppConfig.includes('withInterceptors')) {
+    throw new Error('❌ IAM pack check failed: app.config.ts does not register authInterceptor.');
+  }
+  const iamSignIn = await fs.readFile(path.join(iamOutputDir, 'src/app/domains/auth/features/sign-in/sign-in.ts'), 'utf8');
+  if (!iamSignIn.includes('AuthService') || !iamSignIn.includes('signIn({ username')) {
+    throw new Error('❌ IAM pack check failed: sign-in.ts does not call Keycloak AuthService.');
+  }
+  const iamAdminRoutes = await fs.readFile(path.join(iamOutputDir, 'src/app/domains/admin/routes.ts'), 'utf8');
+  if (!iamAdminRoutes.includes('AuthGuard') || !iamAdminRoutes.includes('user-management')) {
+    throw new Error('❌ IAM pack check failed: admin routes missing AuthGuard or user-management.');
+  }
+  if (!iamAdminRoutes.includes('LandingGuard') || !iamAdminRoutes.includes('no-access')) {
+    throw new Error('❌ IAM pack check failed: admin routes missing LandingGuard or no-access.');
+  }
+  const entitySharedCopy = path.join(
+    iamOutputDir,
+    'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/shared/confirmation-dialog.component.ts'
+  );
+  if (fs.existsSync(entitySharedCopy)) {
+    throw new Error('❌ IAM pack check failed: Fuse still copied confirmation-dialog into the entity folder.');
+  }
+  const iamBookList = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/components/presentation/list/book-list.component.html'),
+    'utf8'
+  );
+  if (!iamBookList.includes('data-screen-id="microservice/book"') || !iamBookList.includes("accessCtrl: 'edit'")) {
+    throw new Error('❌ IAM pack check failed: book list is missing accessCtrl stamps.');
+  }
+  const iamBookActions = await fs.readFile(
+    path.join(
+      iamOutputDir,
+      'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/components/interaction/actions/book-actions.component.html'
+    ),
+    'utf8'
+  );
+  if (
+    !iamBookActions.includes("accessCtrl: 'create'") ||
+    !iamBookActions.includes("accessCtrl: 'open-filter'") ||
+    !iamBookActions.includes("accessCtrl: 'toggle-view'") ||
+    !iamBookActions.includes("accessCtrl: 'open-columns'")
+  ) {
+    throw new Error('❌ IAM pack check failed: book actions missing semantic ACL ids (create/open-filter/toggle-view/open-columns).');
+  }
+  const aclToolsRoot = path.join(
+    iamOutputDir,
+    'src/app/domains/admin/modules/apps/shared/access-control-tools'
+  );
+  for (const rel of [
+    'access-control-sync.js',
+    'lib/id-rules.js',
+    'lib/ts-component-index.js',
+    'lib/hierarchy-scanner.js',
+    'run.sh',
+    'README.md',
+    'AGENT_README.md',
+    'AGENT_MEMORY.md',
+    'AGENTS.md',
+  ]) {
+    if (!fs.existsSync(path.join(aclToolsRoot, rel))) {
+      throw new Error(`❌ Access-control tools pack missing: ${rel}`);
+    }
+  }
+  const iamPkg = JSON.parse(await fs.readFile(path.join(iamOutputDir, 'package.json'), 'utf8'));
+  if (!iamPkg.scripts?.['access-control:sync'] || !iamPkg.scripts?.['access-control:apply']) {
+    throw new Error('❌ Access-control tools pack missing npm scripts access-control:sync/apply.');
+  }
+  const roleMatrixTs = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/core/user-management/matrices/role-permission-matrix/role-permission-matrix.component.ts'),
+    'utf8'
+  );
+  if (
+    !roleMatrixTs.includes('isUiLocked') ||
+    !roleMatrixTs.includes('playPermissionGrantSound') ||
+    !roleMatrixTs.includes('offline_access') ||
+    !roleMatrixTs.includes('setRoleScreenPermission')
+  ) {
+    throw new Error('❌ Role permission matrix missing lock/sync/sound behavior.');
+  }
+  if (
+    !roleMatrixTs.includes('ScreenNavigationRegistry') ||
+    !roleMatrixTs.includes('buildMatrixHierarchy') ||
+    !roleMatrixTs.includes('grantPageEssentials') ||
+    !roleMatrixTs.includes('filterEssentialComponentIds')
+  ) {
+    throw new Error('❌ Role permission matrix missing hierarchy / sensitive-action consumer.');
+  }
+  const navMapUtil = path.join(
+    iamOutputDir,
+    'src/app/core/user-management/shared/screen-navigation-map.ts'
+  );
+  const navRegistry = path.join(
+    iamOutputDir,
+    'src/app/core/user-management/shared/screen-navigation.registry.ts'
+  );
+  const matrixHier = path.join(
+    iamOutputDir,
+    'src/app/core/user-management/shared/matrix-hierarchy.util.ts'
+  );
+  const navAsset = path.join(iamOutputDir, 'public/assets/screen-navigation-map.json');
+  for (const f of [navMapUtil, navRegistry, matrixHier, navAsset]) {
+    if (!fs.existsSync(f)) {
+      throw new Error(`❌ IAM hierarchy consumer missing: ${path.relative(iamOutputDir, f)}`);
+    }
+  }
+  const acsPath = path.join(iamOutputDir, 'src/app/core/auth/services/access-control.service.ts');
+  if (!fs.existsSync(acsPath)) {
+    throw new Error('❌ AccessControlService missing at core/auth/services/.');
+  }
+  const acs = await fs.readFile(acsPath, 'utf8');
+  if (!acs.includes('ScreenNavigationRegistry') || !acs.includes('getParentHostScreenIds')) {
+    throw new Error('❌ AccessControlService missing ScreenNavigationRegistry host/embed fallbacks.');
+  }
+  const roleMatrixHtml = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/core/user-management/matrices/role-permission-matrix/role-permission-matrix.component.html'),
+    'utf8'
+  );
+  if (!roleMatrixHtml.includes('overflow-auto') || !roleMatrixHtml.includes('permission-toggle-visual')) {
+    throw new Error('❌ Role permission matrix missing scrollable grid / PMB toggle visuals.');
+  }
+  if (!roleMatrixHtml.includes('Syncing Permissions') || !roleMatrixHtml.includes('matrix-enabled-fab')) {
+    throw new Error('❌ Role permission matrix missing PMB sync badge / enabled-only FAB.');
+  }
+  const accessMatrixHtml = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/core/user-management/matrices/user-access-matrix/user-access-matrix.component.html'),
+    'utf8'
+  );
+  if (!accessMatrixHtml.includes('Assigned Roles') || !accessMatrixHtml.includes('Available Roles') || !accessMatrixHtml.includes('requestRoleToggle')) {
+    throw new Error('❌ User access matrix must follow PMB assigned/available role cards + confirm toggle.');
+  }
+  const screenCsv = await fs.readFile(path.join(iamOutputDir, 'public/assets/screen-components.csv'), 'utf8');
+  if (!/,create,BUTTON,/.test(screenCsv) || /,new,BUTTON,/.test(screenCsv)) {
+    throw new Error('❌ screen-components.csv should use semantic create (not legacy new) component ids.');
+  }
+  if (!/,open-filter,BUTTON,/.test(screenCsv) || !/,toggle-view,BUTTON,/.test(screenCsv)) {
+    throw new Error('❌ screen-components.csv missing open-filter / toggle-view semantic component ids.');
+  }
+  const iamNav = await fs.readFile(path.join(iamOutputDir, 'src/app/domains/admin/layout/data/navigation.ts'), 'utf8');
+  if (!iamNav.includes("id: 'identity-group'") || !iamNav.includes("label: 'User Management'") || !iamNav.includes('user-management')) {
+    throw new Error('❌ IAM pack check failed: navigation is missing the User Management group.');
+  }
+  const iamUserMenu = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/layout/ui/user.ts'),
+    'utf8'
+  );
+  if (!iamUserMenu.includes('AuthService') || !iamUserMenu.includes("signOut('user')")) {
+    throw new Error('❌ IAM pack check failed: user menu Sign out must call AuthService.signOut(\'user\').');
+  }
+  if (
+    !iamUserMenu.includes('power-btn-container') ||
+    !iamUserMenu.includes('Super Admin') ||
+    !iamUserMenu.includes('confirmLogout') ||
+    !iamUserMenu.includes('AccessControlService')
+  ) {
+    throw new Error('❌ IAM pack check failed: sidebar user chip must include PMB power logout + Super Admin badge.');
+  }
+  const iamSidebar = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/layout/ui/sidebar.ts'),
+    'utf8'
+  );
+  if (!iamSidebar.includes('border-t') || !iamSidebar.includes('<user')) {
+    throw new Error('❌ IAM pack check failed: sidebar footer must host the bordered user chip.');
+  }
+  const embeddedConfig = path.join(iamOutputDir, 'config/crudforge.config.yml');
+  if (!fs.existsSync(embeddedConfig)) {
+    throw new Error('❌ Fuse generate must embed config/crudforge.config.yml.');
+  }
+  const embeddedText = await fs.readFile(embeddedConfig, 'utf8');
+  if (embeddedText.includes('MUST-NOT-EMIT-SECRET') || /clientSecret:\s*['"]?[^'"\n\s]+/.test(embeddedText)) {
+    throw new Error('❌ Embedded crudforge.config.yml must not contain client secrets.');
+  }
+  if (!embeddedText.includes('Generated at') || !embeddedText.includes('meta:') || !embeddedText.includes('generatedAt:')) {
+    throw new Error('❌ Embedded crudforge.config.yml must include a readable header and meta.generatedAt.');
+  }
+  if (!embeddedText.includes('# --- Project') || !embeddedText.includes('# --- Auth')) {
+    throw new Error('❌ Embedded crudforge.config.yml must use section comments for readability.');
+  }
+  const teamFiles = [
+    'AGENT_README.md',
+    'docs/ai/README.md',
+    'docs/ai/ARCHITECTURE.md',
+    'docs/ai/ENTITIES.md',
+    'docs/ai/ROUTES.md',
+    'docs/ai/UI_CONTRACTS.md',
+    'docs/ai/PRESERVATION.md',
+    '.crudforge/config.yaml',
+    '.cursor/agents/generator-engineer.md',
+    '.codex/agents/generator-engineer.md',
+    '.agents/agents/generator-engineer.md',
+    '.agents/rules/generator-engineer.md',
+    '.vscode/extensions/README.md',
+    '.vscode/extensions.json',
+  ];
+  for (const rel of teamFiles) {
+    if (!fs.existsSync(path.join(iamOutputDir, rel))) {
+      throw new Error(`❌ GO-DUCK-style / keep-team pack missing: ${rel}`);
+    }
+  }
+  const entitiesDoc = await fs.readFile(path.join(iamOutputDir, 'docs/ai/ENTITIES.md'), 'utf8');
+  if (!entitiesDoc.includes('Generated by `@crudforge/cli`') && !entitiesDoc.includes('Generated by **`@crudforge/cli`**')) {
+    throw new Error('❌ docs/ai/ENTITIES.md must declare Generated by @crudforge/cli.');
+  }
+  if (entitiesDoc.includes('`undefined`: undefined') || entitiesDoc.includes('| `undefined` |')) {
+    throw new Error('❌ docs/ai/ENTITIES.md must use fieldName/fieldType (got undefined placeholders).');
+  }
+  if (!entitiesDoc.includes('`title`') || !entitiesDoc.includes('`Book`')) {
+    throw new Error('❌ docs/ai/ENTITIES.md must list real entity fields from the blueprint.');
+  }
+  const bookService = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/service/book.service.ts'),
+    'utf8'
+  );
+  const bookListHtml = await fs.readFile(
+    path.join(
+      iamOutputDir,
+      'src/app/domains/admin/modules/apps/micro-functions/microservice/entities/book/components/presentation/list/book-list.component.html'
+    ),
+    'utf8'
+  );
+  const sharedUtil = await fs.readFile(
+    path.join(iamOutputDir, 'src/app/domains/admin/modules/apps/shared/base/filter-types.ts'),
+    'utf8'
+  );
+  for (const [label, text] of [
+    ['book.service.ts', bookService],
+    ['book-list.component.html', bookListHtml],
+    ['filter-types.ts', sharedUtil],
+  ]) {
+    if (!text.includes('@generated by @crudforge/cli')) {
+      throw new Error(`❌ Generated Fuse file missing @crudforge/cli banner: ${label}`);
+    }
+  }
+  console.log('✅ Keycloak auth + IAM pack generated core files, config/, docs/ai, and team pack.');
+  await fs.remove(iamOutputDir);
+
+  // Verify Overwrite Protection and Safe Merging
+  console.log('🧪 Testing overwrite protection and safe merging policies...');
+  const policyOutputDir = path.join(__dirname, 'output-policy');
+  await fs.remove(policyOutputDir);
+  await fs.ensureDir(policyOutputDir);
+
+  // Pre-seed an existing file with custom code blocks
+  const targetFilePath = path.join(policyOutputDir, 'entities/book/book.model.ts');
+  await fs.ensureDir(path.dirname(targetFilePath));
+  
+  const existingWithCustomCode = `
+import dayjs from 'dayjs/esm';
+export interface IBook {
+  id?: number;
+}
+// cforge-custom-code-start:model-additions
+export const MY_CUSTOM_CONSTANT = 'hello';
+// cforge-custom-code-end
+  `.trim();
+  await fs.writeFile(targetFilePath, existingWithCustomCode, 'utf8');
+
+  // Load parser and loadConfig
+  const policyConfig = (await loadConfig(process.cwd(), null)).config;
+  policyConfig.output.directory = policyOutputDir;
+  policyConfig.api.microservice = 'book-service';
+
+  // Test case 1: 'skip' policy
+  policyConfig.output.overwritePolicy = 'skip';
+  const parsedForPolicy = parseJdl(jdlContent, policyConfig);
+  await generate(parsedForPolicy, policyConfig);
+  const skipContent = await fs.readFile(targetFilePath, 'utf8');
+  if (skipContent !== existingWithCustomCode) {
+    throw new Error('❌ Overwrite policy "skip" failed: File was overwritten.');
+  }
+  console.log('✅ Overwrite policy "skip" successfully preserved existing file.');
+
+  // Test case 2: 'fail' policy
+  policyConfig.output.overwritePolicy = 'fail';
+  try {
+    await generate(parsedForPolicy, policyConfig);
+    throw new Error('❌ Overwrite policy "fail" failed: Did not throw expected conflict error.');
+  } catch (err) {
+    if (!err.message.includes('Conflict Error')) {
+      throw err;
+    }
+  }
+  console.log('✅ Overwrite policy "fail" correctly aborted and threw conflict error.');
+
+  // Test case 3: 'merge' policy
+  policyConfig.output.overwritePolicy = 'merge';
+  await generate(parsedForPolicy, policyConfig);
+  const mergedContent = await fs.readFile(targetFilePath, 'utf8');
+  if (!mergedContent.includes('export const MY_CUSTOM_CONSTANT = \'hello\';')) {
+    throw new Error('❌ Overwrite policy "merge" failed: Developer custom code was not preserved.');
+  }
+  if (!mergedContent.includes('title?: string | null;')) {
+    throw new Error('❌ Overwrite policy "merge" failed: New pristine fields were not generated.');
+  }
+  console.log('✅ Overwrite policy "merge" correctly preserved custom code block zones and merged new fields.');
+
+  // Test case 4: 'ask' policy returns conflict objects
+  policyConfig.output.overwritePolicy = 'ask';
+  // Re-seed file with changes to trigger conflict
+  const modifiedSeed = existingWithCustomCode + '\n// trigger diff';
+  await fs.writeFile(targetFilePath, modifiedSeed, 'utf8');
+  const askStats = await generate(parsedForPolicy, policyConfig);
+  const bookConflict = askStats.conflicts && askStats.conflicts.find(c => c.relativePath === 'entities/book/book.model.ts');
+  if (!bookConflict) {
+    throw new Error('❌ Overwrite policy "ask" failed: Did not report expected conflict for book.model.ts.');
+  }
+  console.log('✅ Overwrite policy "ask" correctly accumulated and returned conflict stats.');
+
+  const { runAuthProvisionChecks } = require('./auth-provision-checks');
+  await runAuthProvisionChecks();
+
+  console.log('🎉 CRUDForge Rebuild verification PASSED successfully!');
+}
+
+verify().catch(err => {
+  console.error(err.message);
+  process.exit(1);
+});