@ultimat3/cli 29.4.0 → 30.0.0

package/wiki/Migrating-From-Laravel.md

@@ -0,0 +1,53 @@
+**Status: `not executed end to end`.** No Laravel app has been cut over by following this page yet; it flips to `executed` on evidence from an adopter's measured run.
+
+# Migrating from Laravel
+
+The concept map for a Laravel app. The runbook — phases, exit conditions, stop conditions — is
+[Migrating an existing app](Migrating-An-Existing-App); this page says what each Laravel term
+becomes. `As of 2026-11`, against the current release ([laravel.com/docs](https://laravel.com/docs)).
+
+## Concept map
+
+| Laravel | Ultimate |
+|---|---|
+| `routes/web.php` + a controller that returns a view | a route file: [Routes and render modes](Routes-And-Render-Modes) |
+| a controller that writes, a form request | an `action`, its input schema: [Actions](Actions) |
+| an Eloquent model | an `entity()`: [Entities and migrations](Entities-And-Migrations) |
+| a query scope, the query builder | a `query`: [Queries and live queries](Queries-And-Live-Queries) |
+| `php artisan make:migration`, `migrate` | `x db gen "<name>"`, then `x db migrate` |
+| `php artisan make:*` | `x g <kind> <name>` ([CLI reference](CLI-Reference)) |
+| a queued job | a `job`: [Jobs and workflows](Jobs-And-Workflows) |
+| the scheduler (`schedule:run`) | a `task`: [Scheduled tasks](Scheduled-Tasks) |
+| Breeze, Fortify, Sanctum | [Auth](Auth) |
+| gates and policies | a `policy`: [Policies and authz](Policies-And-Authz) |
+| broadcasting (Reverb, Pusher) | a live query: [Realtime](Realtime) |
+| Mailables | [Mail](Mail) |
+| `Storage` disks | [Storage and uploads](Storage-And-Uploads) |
+| Nova, Filament | [Admin dashboard](Admin-Dashboard) |
+| `lang/*.php` | one flat catalog per locale: [I18n](I18n) |
+| Pest, PHPUnit | [Testing](Testing) |
+| `php artisan serve` | `x dev` |
+
+## What does not map
+
+| Laravel | Why |
+|---|---|
+| PHP and its packages | Bun only. A Composer package is rewritten or bought as a service |
+| MySQL, SQLite, SQL Server | Postgres only, by design: [Home](Home) |
+| Blade, Livewire | pages render with SolidJS; interactive parts are islands. No converter |
+| model events and observers | no implicit hooks: the write is an `action` or a `mutator` that says what it does ([Actions](Actions)) |
+| polymorphic relations (`morphTo`) | model each target as its own foreign key ([Entities and migrations](Entities-And-Migrations)) |
+
+## Schema adoption
+
+Laravel ids are `bigint` (`$table->id()`) and timestamps are `created_at` / `updated_at`. Phase 1
+of the runbook declares the existing tables with the physical-name overrides it gives, then
+`x db gen` until `x verify --only drift` agrees: [Migrating an existing app](Migrating-An-Existing-App).
+
+## Identity cutover
+
+| Laravel stores | Branch |
+|---|---|
+| `users.password` as `$2y$…` — bcrypt, Laravel's default driver | **proceed**: verified natively, rewritten as argon2id on first login ([Migrating an existing app](Migrating-An-Existing-App)) |
+| `$argon2id$…` (the `argon2id` driver) | **proceed**: rehashed when weaker than the policy |
+| the session: an encrypted cookie keyed by `APP_KEY` | bridge it with your own verifier behind `configureAuthenticator()`, or keep the Laravel login until every user has signed in once ([Auth](Auth)) |

package/wiki/Migrating-From-Node-Drizzle.md

@@ -0,0 +1,53 @@
+**Status: `not executed end to end`.** No Node/Drizzle app has been cut over by following this page yet; it flips to `executed` on evidence from an adopter's measured run.
+
+# Migrating from Node and Drizzle
+
+The concept map for a Node app on Drizzle ORM — Express, Fastify, Hono or Next.js route handlers in
+front. The runbook — phases, exit conditions, stop conditions — is
+[Migrating an existing app](Migrating-An-Existing-App); this page says what each term becomes.
+`As of 2026-11` ([orm.drizzle.team](https://orm.drizzle.team/)).
+
+## Concept map
+
+| Node / Drizzle | Ultimate |
+|---|---|
+| an Express / Fastify / Hono route that renders | a route file: [Routes and render modes](Routes-And-Render-Modes) |
+| a route handler that writes, a tRPC mutation | an `action`: [Actions](Actions) |
+| a tRPC query, a GET handler | a `query`: [Queries and live queries](Queries-And-Live-Queries) |
+| a `pgTable()` declaration | an `entity()`: [Entities and migrations](Entities-And-Migrations) |
+| `drizzle-kit generate`, `migrate` | `x db gen "<name>"`, then `x db migrate` |
+| a Zod schema on a handler | the action's `input`: [Actions](Actions) |
+| BullMQ, pg-boss | a `job`: [Jobs and workflows](Jobs-And-Workflows) |
+| `node-cron`, a repeatable job | a `task`: [Scheduled tasks](Scheduled-Tasks) |
+| Passport, Auth.js, Lucia | [Auth](Auth) |
+| CASL, hand-written middleware checks | a `policy`: [Policies and authz](Policies-And-Authz) |
+| Socket.IO, `ws` | a live query: [Realtime](Realtime) |
+| Nodemailer | [Mail](Mail) |
+| S3 SDK calls | [Storage and uploads](Storage-And-Uploads) |
+| Vitest, Jest | `bun test` through [Testing](Testing) |
+| `node server.js`, `next dev` | `x dev` |
+
+## What does not map
+
+| Node / Drizzle | Why |
+|---|---|
+| Node-only APIs and native addons | Bun only: check each against Bun's own list, [bun.sh/docs/runtime/nodejs-apis](https://bun.sh/docs/runtime/nodejs-apis) |
+| MySQL, SQLite (`mysqlTable`, `sqliteTable`) | Postgres only, by design: [Home](Home) |
+| React components | pages render with SolidJS; interactive parts are islands. No converter |
+| a serverless or edge deploy target | containers only: [Deployment](Deployment) |
+
+## Schema adoption
+
+Drizzle already declares tables in TypeScript, so the shape carries over column by column; ids are
+whatever the app chose. Phase 1 of the runbook declares the existing tables with the physical-name
+overrides and type map it gives, then `x db gen` until `x verify --only drift` agrees:
+[Migrating an existing app](Migrating-An-Existing-App).
+
+## Identity cutover
+
+| The app stores | Branch |
+|---|---|
+| `bcrypt` / `bcryptjs` hashes (`$2a$`, `$2b$`) | **proceed**: verified natively, rewritten as argon2id on first login ([Migrating an existing app](Migrating-An-Existing-App)) |
+| `argon2` hashes (`$argon2id$`) | **proceed**: rehashed when weaker than the policy |
+| scrypt, PBKDF2, anything else | **⛔ stop**: no verifier ships. Keep the old login as a bridge, or force a reset |
+| a JWT or a session table | bridge it with your own verifier behind `configureAuthenticator()` ([Auth](Auth)) |

package/wiki/Migrating-From-Rails.md

@@ -0,0 +1,53 @@
+**Status: `not executed end to end`.** No Rails app has been cut over by following this page yet; it flips to `executed` on evidence from an adopter's measured run.
+
+# Migrating from Rails
+
+The concept map for a Rails app. The runbook — phases, exit conditions, stop conditions — is
+[Migrating an existing app](Migrating-An-Existing-App); this page says what each Rails term
+becomes. `As of 2026-11`, against Rails 8 ([guides.rubyonrails.org](https://guides.rubyonrails.org/)).
+
+## Concept map
+
+| Rails | Ultimate |
+|---|---|
+| `config/routes.rb` + a controller action that renders | a route file: [Routes and render modes](Routes-And-Render-Modes) |
+| a controller action that writes | an `action`: [Actions](Actions) |
+| an Active Record model | an `entity()`: [Entities and migrations](Entities-And-Migrations) |
+| a scope, a `where` chain | a `query`: [Queries and live queries](Queries-And-Live-Queries) |
+| `db/migrate/*.rb`, `schema.rb` | `x db gen "<name>"`, then `x db migrate` |
+| `rails generate` | `x g <kind> <name>` ([CLI reference](CLI-Reference)) |
+| Active Job, Sidekiq | a `job`: [Jobs and workflows](Jobs-And-Workflows) |
+| `whenever`, `sidekiq-cron` | a `task`: [Scheduled tasks](Scheduled-Tasks) |
+| Devise, `has_secure_password` | [Auth](Auth) |
+| Pundit, CanCanCan | a `policy`: [Policies and authz](Policies-And-Authz) |
+| Action Cable, Turbo Streams | a live query: [Realtime](Realtime) |
+| Action Mailer | [Mail](Mail) |
+| Active Storage | [Storage and uploads](Storage-And-Uploads) |
+| ActiveAdmin, Administrate | [Admin dashboard](Admin-Dashboard) |
+| `config/locales/*.yml` | one flat catalog per locale: [I18n](I18n) |
+| RSpec, Minitest | [Testing](Testing) |
+| `bin/rails server` | `x dev` |
+| `bin/rails test` + CI | `x verify` |
+
+## What does not map
+
+| Rails | Why |
+|---|---|
+| Ruby and its gems | Bun only. Nothing runs Ruby; a gem's behaviour is rewritten or bought as a service |
+| MySQL, SQLite | Postgres only, by design: [Home](Home) |
+| ERB, Hotwire, Stimulus | pages render with SolidJS; interactive parts are islands ([Routes and render modes](Routes-And-Render-Modes)). No converter |
+| model callbacks (`before_save`, `after_commit`) | no implicit hooks: the write is an `action` or a `mutator` that says what it does ([Actions](Actions)) |
+| SAML (`devise_saml_authenticatable`) | not shipped: put an OIDC bridge in front ([Auth](Auth)) |
+
+## Schema adoption
+
+Rails ids are `bigint` sequences and timestamps are `created_at` / `updated_at`. Phase 1 of the
+runbook declares the existing tables as entities with the physical-name overrides and type map it
+gives, then `x db gen` until `x verify --only drift` agrees: [Migrating an existing app](Migrating-An-Existing-App).
+
+## Identity cutover
+
+| Rails stores | Branch |
+|---|---|
+| `password_digest` (`has_secure_password`) or Devise's `encrypted_password` — bcrypt by default | **proceed**: verified natively, rewritten as argon2id on first login ([Migrating an existing app](Migrating-An-Existing-App)) |
+| the session: an encrypted cookie keyed by `secret_key_base` | bridge it with your own verifier behind `configureAuthenticator()`, or keep the Rails login until every user has signed in once ([Auth](Auth)) |