@atlashub/smartstack-cli 3.52.0 → 3.54.0

package/dist/mcp-entry.mjs

@@ -471,8 +471,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path30, errorMaps, issueData } = params;
-      const fullPath = [...path30, ...issueData.path || []];
+      const { data, path: path31, errorMaps, issueData } = params;
+      const fullPath = [...path31, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -786,11 +786,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path30, key) {
+      constructor(parent, value, path31, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path30;
+        this._path = path31;
         this._key = key;
       }
       get path() {
@@ -4367,10 +4367,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path30) {
-  if (!path30)
+function getElementAtPath(obj, path31) {
+  if (!path31)
     return obj;
-  return path30.reduce((acc, key) => acc?.[key], obj);
+  return path31.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -4619,11 +4619,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path30, issues) {
+function prefixIssues(path31, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path30);
+    iss.path.unshift(path31);
     return iss;
   });
 }
@@ -14447,8 +14447,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path30) {
-      let input = path30;
+    function removeDotSegments(path31) {
+      let input = path31;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -14648,8 +14648,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path30, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path30 && path30 !== "/" ? path30 : void 0;
+        const [path31, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path31 && path31 !== "/" ? path31 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -23041,12 +23041,12 @@ var init_esm7 = __esm({
       /**
        * Get the Path object referenced by the string path, resolved from this Path
        */
-      resolve(path30) {
-        if (!path30) {
+      resolve(path31) {
+        if (!path31) {
           return this;
         }
-        const rootPath = this.getRootString(path30);
-        const dir = path30.substring(rootPath.length);
+        const rootPath = this.getRootString(path31);
+        const dir = path31.substring(rootPath.length);
         const dirParts = dir.split(this.splitSep);
         const result = rootPath ? this.getRoot(rootPath).#resolveParts(dirParts) : this.#resolveParts(dirParts);
         return result;
@@ -23798,8 +23798,8 @@ var init_esm7 = __esm({
       /**
        * @internal
        */
-      getRootString(path30) {
-        return win32.parse(path30).root;
+      getRootString(path31) {
+        return win32.parse(path31).root;
       }
       /**
        * @internal
@@ -23845,8 +23845,8 @@ var init_esm7 = __esm({
       /**
        * @internal
        */
-      getRootString(path30) {
-        return path30.startsWith("/") ? "/" : "";
+      getRootString(path31) {
+        return path31.startsWith("/") ? "/" : "";
       }
       /**
        * @internal
@@ -23935,11 +23935,11 @@ var init_esm7 = __esm({
       /**
        * Get the depth of a provided path, string, or the cwd
        */
-      depth(path30 = this.cwd) {
-        if (typeof path30 === "string") {
-          path30 = this.cwd.resolve(path30);
+      depth(path31 = this.cwd) {
+        if (typeof path31 === "string") {
+          path31 = this.cwd.resolve(path31);
         }
-        return path30.depth();
+        return path31.depth();
       }
       /**
        * Return the cache of child entries.  Exposed so subclasses can create
@@ -24426,9 +24426,9 @@ var init_esm7 = __esm({
         process3();
         return results;
       }
-      chdir(path30 = this.cwd) {
+      chdir(path31 = this.cwd) {
         const oldCwd = this.cwd;
-        this.cwd = typeof path30 === "string" ? this.cwd.resolve(path30) : path30;
+        this.cwd = typeof path31 === "string" ? this.cwd.resolve(path31) : path31;
         this.cwd[setAsCwd](oldCwd);
       }
     };
@@ -24809,8 +24809,8 @@ var init_processor = __esm({
       }
       // match, absolute, ifdir
       entries() {
-        return [...this.store.entries()].map(([path30, n]) => [
-          path30,
+        return [...this.store.entries()].map(([path31, n]) => [
+          path31,
           !!(n & 2),
           !!(n & 1)
         ]);
@@ -25025,9 +25025,9 @@ var init_walker = __esm({
       signal;
       maxDepth;
       includeChildMatches;
-      constructor(patterns, path30, opts) {
+      constructor(patterns, path31, opts) {
         this.patterns = patterns;
-        this.path = path30;
+        this.path = path31;
         this.opts = opts;
         this.#sep = !opts.posix && opts.platform === "win32" ? "\\" : "/";
         this.includeChildMatches = opts.includeChildMatches !== false;
@@ -25046,11 +25046,11 @@ var init_walker = __esm({
           });
         }
       }
-      #ignored(path30) {
-        return this.seen.has(path30) || !!this.#ignore?.ignored?.(path30);
+      #ignored(path31) {
+        return this.seen.has(path31) || !!this.#ignore?.ignored?.(path31);
       }
-      #childrenIgnored(path30) {
-        return !!this.#ignore?.childrenIgnored?.(path30);
+      #childrenIgnored(path31) {
+        return !!this.#ignore?.childrenIgnored?.(path31);
       }
       // backpressure mechanism
       pause() {
@@ -25265,8 +25265,8 @@ var init_walker = __esm({
     };
     GlobWalker = class extends GlobUtil {
       matches = /* @__PURE__ */ new Set();
-      constructor(patterns, path30, opts) {
-        super(patterns, path30, opts);
+      constructor(patterns, path31, opts) {
+        super(patterns, path31, opts);
       }
       matchEmit(e) {
         this.matches.add(e);
@@ -25303,8 +25303,8 @@ var init_walker = __esm({
     };
     GlobStream = class extends GlobUtil {
       results;
-      constructor(patterns, path30, opts) {
-        super(patterns, path30, opts);
+      constructor(patterns, path31, opts) {
+        super(patterns, path31, opts);
         this.results = new Minipass({
           signal: this.signal,
           objectMode: true
@@ -25741,10 +25741,10 @@ var init_fs = __esm({
     init_esm_shims();
     init_esm8();
     FileSystemError = class extends Error {
-      constructor(message, operation, path30, cause) {
+      constructor(message, operation, path31, cause) {
         super(message);
         this.operation = operation;
-        this.path = path30;
+        this.path = path31;
         this.cause = cause;
         this.name = "FileSystemError";
       }
@@ -25787,7 +25787,7 @@ function tenantModeToTemplateFlags(mode) {
     tenantMode: mode
   };
 }
-var ProjectConfigSchema, SmartStackConfigSchema, ConventionsConfigSchema, EfCoreContextSchema, EfCoreConfigSchema, ScaffoldingConfigSchema, ConfigSchema, TenantModeSchema, ValidateConventionsInputSchema, CheckMigrationsInputSchema, EntityPropertySchema, ScaffoldExtensionInputSchema, ApiDocsInputSchema, SuggestMigrationInputSchema, GeneratePermissionsInputSchema, TestTypeSchema, TestTargetSchema, ScaffoldTestsInputSchema, AnalyzeTestCoverageInputSchema, ValidateTestConventionsInputSchema, SuggestTestScenariosInputSchema, SecurityCheckSchema, ValidateSecurityInputSchema, QualityMetricSchema, AnalyzeCodeQualityInputSchema, ScaffoldApiClientInputSchema, ScaffoldRoutesInputSchema, ValidateFrontendRoutesInputSchema, SlotDefinitionSchema, ScaffoldFrontendExtensionInputSchema, AnalyzeExtensionPointsInputSchema, AnalyzeHierarchyPatternsInputSchema, ReviewCodeCheckSchema, ReviewCodeInputSchema;
+var ProjectConfigSchema, SmartStackConfigSchema, ConventionsConfigSchema, EfCoreContextSchema, EfCoreConfigSchema, ScaffoldingConfigSchema, ConfigSchema, TenantModeSchema, ValidateConventionsInputSchema, CheckMigrationsInputSchema, EntityPropertySchema, ScaffoldExtensionInputSchema, ApiDocsInputSchema, SuggestMigrationInputSchema, GeneratePermissionsInputSchema, TestTypeSchema, TestTargetSchema, ScaffoldTestsInputSchema, AnalyzeTestCoverageInputSchema, ValidateTestConventionsInputSchema, SuggestTestScenariosInputSchema, SecurityCheckSchema, ValidateSecurityInputSchema, QualityMetricSchema, AnalyzeCodeQualityInputSchema, ScaffoldApiClientInputSchema, ScaffoldRoutesInputSchema, ValidateFrontendRoutesInputSchema, SlotDefinitionSchema, ScaffoldFrontendExtensionInputSchema, AnalyzeExtensionPointsInputSchema, ScaffoldDataExportInputSchema, AnalyzeHierarchyPatternsInputSchema, ReviewCodeCheckSchema, ReviewCodeInputSchema;
 var init_types3 = __esm({
   "src/mcp/types/index.ts"() {
     "use strict";
@@ -26067,6 +26067,18 @@ var init_types3 = __esm({
       target: external_exports.enum(["pages", "components", "forms", "tables", "all"]).default("all").describe("Type of components to analyze"),
       filter: external_exports.string().optional().describe('Filter by file name pattern (e.g., "User*")')
     });
+    ScaffoldDataExportInputSchema = external_exports.object({
+      name: external_exports.string().min(1).describe('Entity name in PascalCase (e.g., "Product", "Order")'),
+      navRoute: external_exports.string().min(1).describe('NavRoute of the source entity (e.g., "business.sales.products") \u2014 used for permission derivation'),
+      options: external_exports.object({
+        entityProperties: external_exports.array(EntityPropertySchema).optional().describe("Properties for the export DTO"),
+        rateLimitPerMinute: external_exports.number().int().positive().default(60).describe("Rate limit per minute (default: 60)"),
+        maxPageSize: external_exports.number().int().positive().default(1e3).describe("Max page size (default: 1000)"),
+        includeAuditFields: external_exports.boolean().default(true).describe("Include CreatedAt/UpdatedAt in DTO (default: true)"),
+        includeFrontendClient: external_exports.boolean().default(false).describe("Generate TypeScript API client (default: false)"),
+        dryRun: external_exports.boolean().default(false).describe("Preview without writing files (default: false)")
+      }).optional()
+    });
     AnalyzeHierarchyPatternsInputSchema = external_exports.object({
       path: external_exports.string().optional().describe("Project path to analyze (default: SmartStack.app path)"),
       entityFilter: external_exports.string().optional().describe('Filter entities by name pattern (e.g., "User*", "*Group*")'),
@@ -26394,7 +26406,8 @@ var init_config = __esm({
           "ref_",
           "loc_",
           "lic_",
-          "tenant_"
+          "tenant_",
+          "ext_"
         ],
         customTablePrefixes: [],
         scopeTypes: ["Core", "Extension", "Partner", "Community"],
@@ -29863,13 +29876,13 @@ var require_ast = __commonJS({
         helperExpression: function helperExpression(node) {
           return node.type === "SubExpression" || (node.type === "MustacheStatement" || node.type === "BlockStatement") && !!(node.params && node.params.length || node.hash);
         },
-        scopedId: function scopedId(path30) {
-          return /^\.|this\b/.test(path30.original);
+        scopedId: function scopedId(path31) {
+          return /^\.|this\b/.test(path31.original);
         },
         // an ID is simple if it only has one part, and that part is not
         // `..` or `this`.
-        simpleId: function simpleId(path30) {
-          return path30.parts.length === 1 && !AST2.helpers.scopedId(path30) && !path30.depth;
+        simpleId: function simpleId(path31) {
+          return path31.parts.length === 1 && !AST2.helpers.scopedId(path31) && !path31.depth;
         }
       }
     };
@@ -30943,12 +30956,12 @@ var require_helpers2 = __commonJS({
         loc
       };
     }
-    function prepareMustache(path30, params, hash, open, strip, locInfo) {
+    function prepareMustache(path31, params, hash, open, strip, locInfo) {
       var escapeFlag = open.charAt(3) || open.charAt(2), escaped = escapeFlag !== "{" && escapeFlag !== "&";
       var decorator = /\*/.test(open);
       return {
         type: decorator ? "Decorator" : "MustacheStatement",
-        path: path30,
+        path: path31,
         params,
         hash,
         escaped,
@@ -31220,9 +31233,9 @@ var require_compiler = __commonJS({
       },
       DecoratorBlock: function DecoratorBlock(decorator) {
         var program = decorator.program && this.compileProgram(decorator.program);
-        var params = this.setupFullMustacheParams(decorator, program, void 0), path30 = decorator.path;
+        var params = this.setupFullMustacheParams(decorator, program, void 0), path31 = decorator.path;
         this.useDecorators = true;
-        this.opcode("registerDecorator", params.length, path30.original);
+        this.opcode("registerDecorator", params.length, path31.original);
       },
       PartialStatement: function PartialStatement(partial2) {
         this.usePartial = true;
@@ -31286,46 +31299,46 @@ var require_compiler = __commonJS({
         }
       },
       ambiguousSexpr: function ambiguousSexpr(sexpr, program, inverse) {
-        var path30 = sexpr.path, name = path30.parts[0], isBlock = program != null || inverse != null;
-        this.opcode("getContext", path30.depth);
+        var path31 = sexpr.path, name = path31.parts[0], isBlock = program != null || inverse != null;
+        this.opcode("getContext", path31.depth);
         this.opcode("pushProgram", program);
         this.opcode("pushProgram", inverse);
-        path30.strict = true;
-        this.accept(path30);
+        path31.strict = true;
+        this.accept(path31);
         this.opcode("invokeAmbiguous", name, isBlock);
       },
       simpleSexpr: function simpleSexpr(sexpr) {
-        var path30 = sexpr.path;
-        path30.strict = true;
-        this.accept(path30);
+        var path31 = sexpr.path;
+        path31.strict = true;
+        this.accept(path31);
         this.opcode("resolvePossibleLambda");
       },
       helperSexpr: function helperSexpr(sexpr, program, inverse) {
-        var params = this.setupFullMustacheParams(sexpr, program, inverse), path30 = sexpr.path, name = path30.parts[0];
+        var params = this.setupFullMustacheParams(sexpr, program, inverse), path31 = sexpr.path, name = path31.parts[0];
         if (this.options.knownHelpers[name]) {
           this.opcode("invokeKnownHelper", params.length, name);
         } else if (this.options.knownHelpersOnly) {
           throw new _exception2["default"]("You specified knownHelpersOnly, but used the unknown helper " + name, sexpr);
         } else {
-          path30.strict = true;
-          path30.falsy = true;
-          this.accept(path30);
-          this.opcode("invokeHelper", params.length, path30.original, _ast2["default"].helpers.simpleId(path30));
+          path31.strict = true;
+          path31.falsy = true;
+          this.accept(path31);
+          this.opcode("invokeHelper", params.length, path31.original, _ast2["default"].helpers.simpleId(path31));
         }
       },
-      PathExpression: function PathExpression(path30) {
-        this.addDepth(path30.depth);
-        this.opcode("getContext", path30.depth);
-        var name = path30.parts[0], scoped = _ast2["default"].helpers.scopedId(path30), blockParamId = !path30.depth && !scoped && this.blockParamIndex(name);
+      PathExpression: function PathExpression(path31) {
+        this.addDepth(path31.depth);
+        this.opcode("getContext", path31.depth);
+        var name = path31.parts[0], scoped = _ast2["default"].helpers.scopedId(path31), blockParamId = !path31.depth && !scoped && this.blockParamIndex(name);
         if (blockParamId) {
-          this.opcode("lookupBlockParam", blockParamId, path30.parts);
+          this.opcode("lookupBlockParam", blockParamId, path31.parts);
         } else if (!name) {
           this.opcode("pushContext");
-        } else if (path30.data) {
+        } else if (path31.data) {
           this.options.data = true;
-          this.opcode("lookupData", path30.depth, path30.parts, path30.strict);
+          this.opcode("lookupData", path31.depth, path31.parts, path31.strict);
         } else {
-          this.opcode("lookupOnContext", path30.parts, path30.falsy, path30.strict, scoped);
+          this.opcode("lookupOnContext", path31.parts, path31.falsy, path31.strict, scoped);
         }
       },
       StringLiteral: function StringLiteral(string3) {
@@ -31681,16 +31694,16 @@ var require_util2 = __commonJS({
     }
     exports.urlGenerate = urlGenerate;
     function normalize2(aPath) {
-      var path30 = aPath;
+      var path31 = aPath;
       var url2 = urlParse(aPath);
       if (url2) {
         if (!url2.path) {
           return aPath;
         }
-        path30 = url2.path;
+        path31 = url2.path;
       }
-      var isAbsolute = exports.isAbsolute(path30);
-      var parts = path30.split(/\/+/);
+      var isAbsolute = exports.isAbsolute(path31);
+      var parts = path31.split(/\/+/);
       for (var part, up = 0, i = parts.length - 1; i >= 0; i--) {
         part = parts[i];
         if (part === ".") {
@@ -31707,15 +31720,15 @@ var require_util2 = __commonJS({
           }
         }
       }
-      path30 = parts.join("/");
-      if (path30 === "") {
-        path30 = isAbsolute ? "/" : ".";
+      path31 = parts.join("/");
+      if (path31 === "") {
+        path31 = isAbsolute ? "/" : ".";
       }
       if (url2) {
-        url2.path = path30;
+        url2.path = path31;
         return urlGenerate(url2);
       }
-      return path30;
+      return path31;
     }
     exports.normalize = normalize2;
     function join2(aRoot, aPath) {
@@ -34516,8 +34529,8 @@ var require_printer = __commonJS({
       return this.accept(sexpr.path) + " " + params + hash;
     };
     PrintVisitor.prototype.PathExpression = function(id) {
-      var path30 = id.parts.join("/");
-      return (id.data ? "@" : "") + "PATH:" + path30;
+      var path31 = id.parts.join("/");
+      return (id.data ? "@" : "") + "PATH:" + path31;
     };
     PrintVisitor.prototype.StringLiteral = function(string3) {
       return '"' + string3.value + '"';
@@ -46114,11 +46127,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path30) {
-      if (!path30 || typeof path30 !== "string") {
+    function lookup(path31) {
+      if (!path31 || typeof path31 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path30).toLowerCase().substr(1);
+      var extension2 = extname("x." + path31).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -47281,7 +47294,7 @@ var require_form_data = __commonJS({
     init_esm_shims();
     var CombinedStream = require_combined_stream();
     var util4 = __require("util");
-    var path30 = __require("path");
+    var path31 = __require("path");
     var http3 = __require("http");
     var https2 = __require("https");
     var parseUrl = __require("url").parse;
@@ -47409,11 +47422,11 @@ var require_form_data = __commonJS({
     FormData3.prototype._getContentDisposition = function(value, options) {
       var filename;
       if (typeof options.filepath === "string") {
-        filename = path30.normalize(options.filepath).replace(/\\/g, "/");
+        filename = path31.normalize(options.filepath).replace(/\\/g, "/");
       } else if (options.filename || value && (value.name || value.path)) {
-        filename = path30.basename(options.filename || value && (value.name || value.path));
+        filename = path31.basename(options.filename || value && (value.name || value.path));
       } else if (value && value.readable && hasOwn(value, "httpVersion")) {
-        filename = path30.basename(value.client._httpMessage.path || "");
+        filename = path31.basename(value.client._httpMessage.path || "");
       }
       if (filename) {
         return 'filename="' + filename + '"';
@@ -47612,9 +47625,9 @@ function isVisitable(thing) {
 function removeBrackets(key) {
   return utils_default.endsWith(key, "[]") ? key.slice(0, -2) : key;
 }
-function renderKey(path30, key, dots) {
-  if (!path30) return key;
-  return path30.concat(key).map(function each(token, i) {
+function renderKey(path31, key, dots) {
+  if (!path31) return key;
+  return path31.concat(key).map(function each(token, i) {
     token = removeBrackets(token);
     return !dots && i ? "[" + token + "]" : token;
   }).join(dots ? "." : "");
@@ -47659,9 +47672,9 @@ function toFormData(obj, formData, options) {
     }
     return value;
   }
-  function defaultVisitor(value, key, path30) {
+  function defaultVisitor(value, key, path31) {
     let arr = value;
-    if (value && !path30 && typeof value === "object") {
+    if (value && !path31 && typeof value === "object") {
       if (utils_default.endsWith(key, "{}")) {
         key = metaTokens ? key : key.slice(0, -2);
         value = JSON.stringify(value);
@@ -47680,7 +47693,7 @@ function toFormData(obj, formData, options) {
     if (isVisitable(value)) {
       return true;
     }
-    formData.append(renderKey(path30, key, dots), convertValue(value));
+    formData.append(renderKey(path31, key, dots), convertValue(value));
     return false;
   }
   const stack = [];
@@ -47689,10 +47702,10 @@ function toFormData(obj, formData, options) {
     convertValue,
     isVisitable
   });
-  function build(value, path30) {
+  function build(value, path31) {
     if (utils_default.isUndefined(value)) return;
     if (stack.indexOf(value) !== -1) {
-      throw Error("Circular reference detected in " + path30.join("."));
+      throw Error("Circular reference detected in " + path31.join("."));
     }
     stack.push(value);
     utils_default.forEach(value, function each(el, key) {
@@ -47700,11 +47713,11 @@ function toFormData(obj, formData, options) {
         formData,
         el,
         utils_default.isString(key) ? key.trim() : key,
-        path30,
+        path31,
         exposedHelpers
       );
       if (result === true) {
-        build(el, path30 ? path30.concat(key) : [key]);
+        build(el, path31 ? path31.concat(key) : [key]);
       }
     });
     stack.pop();
@@ -47990,7 +48003,7 @@ var init_platform = __esm({
 // node_modules/axios/lib/helpers/toURLEncodedForm.js
 function toURLEncodedForm(data, options) {
   return toFormData_default(data, new platform_default.classes.URLSearchParams(), {
-    visitor: function(value, key, path30, helpers) {
+    visitor: function(value, key, path31, helpers) {
       if (platform_default.isNode && utils_default.isBuffer(value)) {
         this.append(key, value.toString("base64"));
         return false;
@@ -48029,11 +48042,11 @@ function arrayToObject(arr) {
   return obj;
 }
 function formDataToJSON(formData) {
-  function buildPath(path30, value, target, index) {
-    let name = path30[index++];
+  function buildPath(path31, value, target, index) {
+    let name = path31[index++];
     if (name === "__proto__") return true;
     const isNumericKey = Number.isFinite(+name);
-    const isLast = index >= path30.length;
+    const isLast = index >= path31.length;
     name = !name && utils_default.isArray(target) ? target.length : name;
     if (isLast) {
       if (utils_default.hasOwnProp(target, name)) {
@@ -48046,7 +48059,7 @@ function formDataToJSON(formData) {
     if (!target[name] || !utils_default.isObject(target[name])) {
       target[name] = [];
     }
-    const result = buildPath(path30, value, target[name], index);
+    const result = buildPath(path31, value, target[name], index);
     if (result && utils_default.isArray(target[name])) {
       target[name] = arrayToObject(target[name]);
     }
@@ -50946,9 +50959,9 @@ var init_http = __esm({
           auth = urlUsername + ":" + urlPassword;
         }
         auth && headers.delete("authorization");
-        let path30;
+        let path31;
         try {
-          path30 = buildURL(
+          path31 = buildURL(
             parsed.pathname + parsed.search,
             config2.params,
             config2.paramsSerializer
@@ -50966,7 +50979,7 @@ var init_http = __esm({
           false
         );
         const options = {
-          path: path30,
+          path: path31,
           method,
           headers: headers.toJSON(),
           agents: { http: config2.httpAgent, https: config2.httpsAgent },
@@ -51219,14 +51232,14 @@ var init_cookies = __esm({
     cookies_default = platform_default.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
-        write(name, value, expires, path30, domain, secure, sameSite) {
+        write(name, value, expires, path31, domain, secure, sameSite) {
           if (typeof document === "undefined") return;
           const cookie = [`${name}=${encodeURIComponent(value)}`];
           if (utils_default.isNumber(expires)) {
             cookie.push(`expires=${new Date(expires).toUTCString()}`);
           }
-          if (utils_default.isString(path30)) {
-            cookie.push(`path=${path30}`);
+          if (utils_default.isString(path31)) {
+            cookie.push(`path=${path31}`);
           }
           if (utils_default.isString(domain)) {
             cookie.push(`domain=${domain}`);
@@ -62091,8 +62104,505 @@ var init_analyze_code_quality = __esm({
   }
 });
 
-// src/mcp/tools/analyze-hierarchy-patterns.ts
+// src/mcp/tools/scaffold-data-export.ts
 import path25 from "path";
+async function handleScaffoldDataExport(args, config2) {
+  const input = ScaffoldDataExportInputSchema.parse(args);
+  logger.info("Scaffolding Data Export", { name: input.name, navRoute: input.navRoute });
+  const result = await scaffoldDataExport(input, config2);
+  return formatResult9(result, input);
+}
+async function scaffoldDataExport(input, config2) {
+  const result = {
+    success: true,
+    files: [],
+    instructions: []
+  };
+  const { name, navRoute, options } = input;
+  const dryRun = options?.dryRun ?? false;
+  const includeAuditFields = options?.includeAuditFields ?? true;
+  const includeFrontendClient = options?.includeFrontendClient ?? false;
+  const rateLimitPerMinute = options?.rateLimitPerMinute ?? 60;
+  const maxPageSize = options?.maxPageSize ?? 1e3;
+  const entityProperties = options?.entityProperties ?? [];
+  const nameLower = name.charAt(0).toLowerCase() + name.slice(1);
+  const namePlural = pluralize(nameLower);
+  const segments = navRoute.split(".");
+  const permissionPath = segments.join(".");
+  const baseNamespace = config2.conventions.namespaces.api.replace(".Api", "");
+  const appSegment = segments.length >= 2 ? toPascalCase2(segments[1]) : "Default";
+  const moduleSegment = segments.length >= 3 ? toPascalCase2(segments[2]) : name;
+  const projectRoot = config2.smartstack.projectPath;
+  const structure = await findSmartStackStructure(projectRoot);
+  const apiPath = structure.api || path25.join(projectRoot, "Api");
+  const applicationPath = structure.application || path25.join(projectRoot, "Application");
+  const infrastructurePath = structure.infrastructure || path25.join(projectRoot, "Infrastructure");
+  const webPath = structure.web || path25.join(projectRoot, "web");
+  const controllerContent = generateExportController(name, namePlural, permissionPath, baseNamespace, maxPageSize);
+  const controllerFile = path25.join(apiPath, "Controllers", "DataExport", "v1", `Export${name}Controller.cs`);
+  if (!dryRun) {
+    await ensureDirectory(path25.dirname(controllerFile));
+    await writeText(controllerFile, controllerContent);
+  }
+  result.files.push({ path: controllerFile, content: controllerContent, type: "created" });
+  const interfaceContent = generateExportServiceInterface(name, baseNamespace);
+  const interfaceFile = path25.join(applicationPath, "Common", "Interfaces", `IExport${name}Service.cs`);
+  if (!dryRun) {
+    await ensureDirectory(path25.dirname(interfaceFile));
+    await writeText(interfaceFile, interfaceContent);
+  }
+  result.files.push({ path: interfaceFile, content: interfaceContent, type: "created" });
+  const serviceContent = generateExportService(name, namePlural, baseNamespace, entityProperties, includeAuditFields);
+  const serviceFile = path25.join(infrastructurePath, "Services", "DataExport", `Export${name}Service.cs`);
+  if (!dryRun) {
+    await ensureDirectory(path25.dirname(serviceFile));
+    await writeText(serviceFile, serviceContent);
+  }
+  result.files.push({ path: serviceFile, content: serviceContent, type: "created" });
+  const dtoContent = generateExportDto(name, baseNamespace, entityProperties, includeAuditFields);
+  const dtoFile = path25.join(applicationPath, "DataExport", "Dtos", `Export${name}Dto.cs`);
+  if (!dryRun) {
+    await ensureDirectory(path25.dirname(dtoFile));
+    await writeText(dtoFile, dtoContent);
+  }
+  result.files.push({ path: dtoFile, content: dtoContent, type: "created" });
+  const seedContent = generateSeedDataFragment(name, namePlural, permissionPath, appSegment, moduleSegment, rateLimitPerMinute, maxPageSize);
+  const seedFile = path25.join(infrastructurePath, "Persistence", "Seeding", "Data", "DataExport", `Export${name}EndpointSeedData.cs`);
+  if (!dryRun) {
+    await ensureDirectory(path25.dirname(seedFile));
+    await writeText(seedFile, seedContent);
+  }
+  result.files.push({ path: seedFile, content: seedContent, type: "created" });
+  if (includeFrontendClient) {
+    const clientContent = generateFrontendClient(name, nameLower, namePlural);
+    const clientFile = path25.join(webPath, "src", "services", "api", `export${name}.ts`);
+    if (!dryRun) {
+      await ensureDirectory(path25.dirname(clientFile));
+      await writeText(clientFile, clientContent);
+    }
+    result.files.push({ path: clientFile, content: clientContent, type: "created" });
+  }
+  result.instructions.push(`Register IExport${name}Service in DI container (Program.cs or DependencyInjection.cs)`);
+  result.instructions.push(`Add the export permission "${permissionPath}.export" to PermissionConfiguration.cs`);
+  result.instructions.push(`Add the seed data to DataExportEndpointConfiguration or call the fragment from your seeder`);
+  result.instructions.push(`Create an EF Core migration to apply the new seed data`);
+  if (includeFrontendClient) {
+    result.instructions.push(`Import the client: import { export${name}Api } from './services/api/export${name}';`);
+  }
+  return result;
+}
+function generateExportController(name, namePlural, permissionPath, baseNamespace, maxPageSize) {
+  return `using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.RateLimiting;
+using ${baseNamespace}.Application.Common.Models;
+using ${baseNamespace}.Application.DataExport.Dtos;
+using ${baseNamespace}.Application.Common.Interfaces;
+using ${baseNamespace}.Api.Authorization;
+
+namespace ${baseNamespace}.Api.Controllers.DataExport.v1;
+
+/// <summary>
+/// Data Export endpoint for ${name} entities.
+/// Security: JWT authentication + RequirePermission + Rate limiting + DataExportAccessMiddleware
+/// </summary>
+[ApiController]
+[Route("api/v1/export")]
+[Authorize]
+[EnableRateLimiting("ExternalApp")]
+public class Export${name}Controller : ControllerBase
+{
+    private readonly IExport${name}Service _exportService;
+
+    public Export${name}Controller(IExport${name}Service exportService)
+    {
+        _exportService = exportService;
+    }
+
+    /// <summary>
+    /// Export ${name} data with pagination and optional modified-since filter.
+    /// </summary>
+    [HttpGet("${namePlural}")]
+    [RequirePermission(Permissions.${permissionPath.split(".").map((s) => toPascalCase2(s)).join(".")}.Export)]
+    public async Task<ActionResult<PaginatedResult<Export${name}Dto>>> Export(
+        [FromQuery] int page = 1,
+        [FromQuery] int pageSize = 100,
+        [FromQuery] DateTime? modifiedSince = null,
+        CancellationToken ct = default)
+    {
+        pageSize = Math.Clamp(pageSize, 1, ${maxPageSize});
+        page = Math.Max(1, page);
+
+        var result = await _exportService.ExportAsync(page, pageSize, modifiedSince, ct);
+        return Ok(result);
+    }
+}
+`;
+}
+function generateExportServiceInterface(name, baseNamespace) {
+  return `using ${baseNamespace}.Application.Common.Models;
+using ${baseNamespace}.Application.DataExport.Dtos;
+
+namespace ${baseNamespace}.Application.Common.Interfaces;
+
+/// <summary>
+/// Service interface for ${name} data export.
+/// </summary>
+public interface IExport${name}Service
+{
+    /// <summary>
+    /// Export ${name} data with pagination and optional modified-since filter.
+    /// </summary>
+    Task<PaginatedResult<Export${name}Dto>> ExportAsync(
+        int page = 1,
+        int pageSize = 100,
+        DateTime? modifiedSince = null,
+        CancellationToken ct = default);
+}
+`;
+}
+function generateExportService(name, namePlural, baseNamespace, entityProperties, includeAuditFields) {
+  const projectionFields = ["        Id = x.Id"];
+  for (const prop of entityProperties) {
+    projectionFields.push(`        ${prop.name} = x.${prop.name}`);
+  }
+  if (includeAuditFields) {
+    projectionFields.push("        CreatedAt = x.CreatedAt");
+    projectionFields.push("        UpdatedAt = x.UpdatedAt");
+  }
+  const projectionBlock = projectionFields.join(",\n");
+  return `using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using ${baseNamespace}.Application.Common.Interfaces;
+using ${baseNamespace}.Application.Common.Models;
+using ${baseNamespace}.Application.DataExport.Dtos;
+using ${baseNamespace}.Infrastructure.Persistence;
+
+namespace ${baseNamespace}.Infrastructure.Services.DataExport;
+
+/// <summary>
+/// Data export service for ${name} entities.
+/// Enforces tenant isolation via ICurrentTenantService.
+/// </summary>
+public class Export${name}Service : IExport${name}Service
+{
+    private readonly ApplicationDbContext _db;
+    private readonly ICurrentTenantService _currentTenant;
+    private readonly ICurrentUserService _currentUser;
+    private readonly ILogger<Export${name}Service> _logger;
+
+    public Export${name}Service(
+        ApplicationDbContext db,
+        ICurrentTenantService currentTenant,
+        ICurrentUserService currentUser,
+        ILogger<Export${name}Service> logger)
+    {
+        _db = db;
+        _currentTenant = currentTenant;
+        _currentUser = currentUser;
+        _logger = logger;
+    }
+
+    public async Task<PaginatedResult<Export${name}Dto>> ExportAsync(
+        int page = 1,
+        int pageSize = 100,
+        DateTime? modifiedSince = null,
+        CancellationToken ct = default)
+    {
+        var tenantId = _currentTenant.TenantId
+            ?? throw new UnauthorizedAccessException("Tenant context is required");
+
+        _logger.LogInformation("Data export requested for ${name} by {UserId}, tenant {TenantId}, page {Page}",
+            _currentUser.UserId, tenantId, page);
+
+        var query = _db.${toPascalCase2(namePlural)}
+            .Where(x => x.TenantId == tenantId)
+            .AsNoTracking();
+
+        if (modifiedSince.HasValue)
+        {
+            query = query.Where(x => x.UpdatedAt >= modifiedSince.Value
+                                  || x.CreatedAt >= modifiedSince.Value);
+        }
+
+        var totalCount = await query.CountAsync(ct);
+
+        var items = await query
+            .OrderBy(x => x.Id)
+            .Skip((page - 1) * pageSize)
+            .Take(pageSize)
+            .Select(x => new Export${name}Dto
+            {
+${projectionBlock}
+            })
+            .ToListAsync(ct);
+
+        return new PaginatedResult<Export${name}Dto>(items, totalCount, page, pageSize);
+    }
+}
+`;
+}
+function generateExportDto(name, baseNamespace, entityProperties, includeAuditFields) {
+  const properties = ["    public Guid Id { get; init; }"];
+  for (const prop of entityProperties) {
+    const nullableSuffix = prop.required ? "" : "?";
+    properties.push(`    public ${prop.type}${nullableSuffix} ${prop.name} { get; init; }`);
+  }
+  if (includeAuditFields) {
+    properties.push("    public DateTime CreatedAt { get; init; }");
+    properties.push("    public DateTime? UpdatedAt { get; init; }");
+  }
+  return `namespace ${baseNamespace}.Application.DataExport.Dtos;
+
+/// <summary>
+/// Flat DTO for ${name} data export (external consumption).
+/// Auto-generated by SmartStack MCP \u2014 customize as needed.
+/// </summary>
+public class Export${name}Dto
+{
+${properties.join("\n")}
+}
+`;
+}
+function generateSeedDataFragment(name, namePlural, permissionPath, appSegment, moduleSegment, rateLimitPerMinute, maxPageSize) {
+  return `// ============================================================================
+// Data Export Endpoint Seed Data \u2014 ${name}
+// Auto-generated by SmartStack MCP \u2014 add to DataExportEndpointConfiguration.cs
+// ============================================================================
+//
+// Copy the HasData() block below into your DataExportEndpointConfiguration
+// or IClientSeedDataProvider to register this export endpoint.
+//
+// builder.HasData(new
+// {
+//     Id = DeterministicGuid.Create("data-export:${namePlural}"),
+//     Code = "${namePlural}",
+//     Name = "${name} Export",
+//     RouteTemplate = "/api/v1/export/${namePlural}",
+//     RequiredPermission = "${permissionPath}.export",
+//     EntityType = "${name}",
+//     IsActive = true,
+//     DefaultRateLimitPerMinute = ${rateLimitPerMinute},
+//     DefaultMaxPageSize = ${maxPageSize},
+//     CreatedAt = seedDate
+// });
+//
+// IMPORTANT: NavigationApplicationId and NavigationModuleId must reference
+// actual seed data IDs from NavigationApplicationSeedData and
+// NavigationModuleSeedData respectively.
+//
+// Permission to add to PermissionConfiguration.cs:
+//   "${permissionPath}.export" \u2014 Export ${name} data via M2M API
+`;
+}
+function generateFrontendClient(name, nameLower, namePlural) {
+  return `/**
+ * ${name} Data Export API Client
+ *
+ * Auto-generated by SmartStack MCP - DO NOT EDIT MANUALLY
+ * Endpoint: /api/v1/export/${namePlural}
+ */
+
+import { apiClient } from '../lib/apiClient';
+
+export interface Export${name}Dto {
+  id: string;
+  [key: string]: unknown;
+  createdAt: string;
+  updatedAt?: string;
+}
+
+export interface ExportParams {
+  page?: number;
+  pageSize?: number;
+  modifiedSince?: string;
+}
+
+export interface PaginatedExportResult<T> {
+  items: T[];
+  totalCount: number;
+  page: number;
+  pageSize: number;
+  totalPages: number;
+  hasPreviousPage: boolean;
+  hasNextPage: boolean;
+}
+
+const EXPORT_ENDPOINT = '/api/v1/export/${namePlural}';
+
+export const export${name}Api = {
+  /**
+   * Fetch paginated export data
+   */
+  async getPage(params?: ExportParams): Promise<PaginatedExportResult<Export${name}Dto>> {
+    const response = await apiClient.get<PaginatedExportResult<Export${name}Dto>>(EXPORT_ENDPOINT, { params });
+    return response.data;
+  },
+
+  /**
+   * Download all pages as a blob (CSV/JSON)
+   */
+  async downloadAll(format: 'json' | 'csv' = 'json'): Promise<Blob> {
+    const response = await apiClient.get(EXPORT_ENDPOINT, {
+      params: { pageSize: 1000, format },
+      responseType: 'blob',
+    });
+    return response.data;
+  },
+};
+
+export default export${name}Api;
+`;
+}
+function formatResult9(result, input) {
+  const lines = [];
+  const namePlural = pluralize(input.name.charAt(0).toLowerCase() + input.name.slice(1));
+  lines.push(`# Scaffold Data Export: ${input.name}`);
+  lines.push("");
+  if (input.options?.dryRun) {
+    lines.push("> **DRY RUN** - No files were written");
+    lines.push("");
+  }
+  lines.push("## Export Endpoint");
+  lines.push("");
+  lines.push(`- **Entity**: \`${input.name}\``);
+  lines.push(`- **NavRoute**: \`${input.navRoute}\``);
+  lines.push(`- **Permission**: \`${input.navRoute}.export\``);
+  lines.push(`- **Endpoint**: \`GET /api/v1/export/${namePlural}\``);
+  lines.push(`- **Rate Limit**: ${input.options?.rateLimitPerMinute ?? 60}/min`);
+  lines.push(`- **Max Page Size**: ${input.options?.maxPageSize ?? 1e3}`);
+  lines.push("");
+  lines.push("## Security Layers");
+  lines.push("");
+  lines.push("1. **Authentication** \u2014 `[Authorize]` + JWT assertion from ExternalApplicationAuthService");
+  lines.push(`2. **Authorization** \u2014 \`[RequirePermission("${input.navRoute}.export")]\``);
+  lines.push("3. **Access Control** \u2014 DataExportAccessMiddleware verifies per-app endpoint access");
+  lines.push(`4. **Rate Limiting** \u2014 \`[EnableRateLimiting("ExternalApp")]\` (${input.options?.rateLimitPerMinute ?? 60}/min)`);
+  lines.push("");
+  lines.push("## Generated Files");
+  lines.push("");
+  for (const file of result.files) {
+    const relativePath = file.path.replace(/\\/g, "/");
+    const parts = relativePath.split("/");
+    const srcIdx = parts.findIndex((p) => ["Controllers", "Application", "Infrastructure", "services", "Persistence"].includes(p));
+    const displayPath = srcIdx >= 0 ? parts.slice(srcIdx).join("/") : parts.slice(-3).join("/");
+    lines.push(`### ${displayPath}`);
+    lines.push("");
+    const ext2 = file.path.endsWith(".ts") ? "typescript" : "csharp";
+    const truncated = file.content.length > 2e3 ? file.content.substring(0, 2e3) + "\n// ... (truncated)" : file.content;
+    lines.push(`\`\`\`${ext2}`);
+    lines.push(truncated);
+    lines.push("```");
+    lines.push("");
+  }
+  lines.push("## Next Steps");
+  lines.push("");
+  for (const instruction of result.instructions) {
+    lines.push(`- ${instruction}`);
+  }
+  return lines.join("\n");
+}
+function toPascalCase2(s) {
+  return s.split("-").map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("");
+}
+function pluralize(s) {
+  if (s.endsWith("y") && !["ay", "ey", "oy", "uy"].some((v) => s.endsWith(v))) {
+    return s.slice(0, -1) + "ies";
+  }
+  if (s.endsWith("s") || s.endsWith("x") || s.endsWith("z") || s.endsWith("ch") || s.endsWith("sh")) {
+    return s + "es";
+  }
+  return s + "s";
+}
+var scaffoldDataExportTool;
+var init_scaffold_data_export = __esm({
+  "src/mcp/tools/scaffold-data-export.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_types3();
+    init_logger();
+    init_detector();
+    init_fs();
+    scaffoldDataExportTool = {
+      name: "scaffold_data_export",
+      description: `Generate Data Export API for a SmartStack entity.
+
+Creates all code needed to expose an entity via the M2M Data Export API with 3-layer security:
+- Export Controller (versioned, rate-limited, permission-protected)
+- Export Service (interface + implementation with tenant isolation)
+- Export DTO (flat projection for external consumption)
+- Seed data fragment (DataExportEndpointConfiguration HasData)
+- Frontend client (optional, TypeScript blob download)
+
+Example:
+  scaffold_data_export name="Product" navRoute="business.sales.products"
+
+The generated code follows the External Application & Data Export pattern
+documented in smartstack-api.md.`,
+      inputSchema: {
+        type: "object",
+        properties: {
+          name: {
+            type: "string",
+            description: 'Entity name in PascalCase (e.g., "Product", "Order")'
+          },
+          navRoute: {
+            type: "string",
+            description: 'NavRoute of the source entity (e.g., "business.sales.products") \u2014 used for permission derivation'
+          },
+          options: {
+            type: "object",
+            properties: {
+              entityProperties: {
+                type: "array",
+                items: {
+                  type: "object",
+                  properties: {
+                    name: { type: "string" },
+                    type: { type: "string" },
+                    required: { type: "boolean" },
+                    maxLength: { type: "number" }
+                  },
+                  required: ["name", "type"]
+                },
+                description: "Properties for the export DTO"
+              },
+              rateLimitPerMinute: {
+                type: "number",
+                default: 60,
+                description: "Rate limit per minute (default: 60)"
+              },
+              maxPageSize: {
+                type: "number",
+                default: 1e3,
+                description: "Max page size (default: 1000)"
+              },
+              includeAuditFields: {
+                type: "boolean",
+                default: true,
+                description: "Include CreatedAt/UpdatedAt in DTO (default: true)"
+              },
+              includeFrontendClient: {
+                type: "boolean",
+                default: false,
+                description: "Generate TypeScript API client (default: false)"
+              },
+              dryRun: {
+                type: "boolean",
+                default: false,
+                description: "Preview without writing files (default: false)"
+              }
+            }
+          }
+        },
+        required: ["name", "navRoute"]
+      }
+    };
+  }
+});
+
+// src/mcp/tools/analyze-hierarchy-patterns.ts
+import path26 from "path";
 async function handleAnalyzeHierarchyPatterns(args, config2) {
   const input = AnalyzeHierarchyPatternsInputSchema.parse(args);
   const projectPath = input.path || config2.smartstack.projectPath;
@@ -62115,7 +62625,7 @@ async function handleAnalyzeHierarchyPatterns(args, config2) {
     recommendations,
     circularDependencies: detectCircularDependencies(entityGraph)
   };
-  return formatResult9(result, outputFormat, structure.root);
+  return formatResult10(result, outputFormat, structure.root);
 }
 async function buildEntityGraph(domainPath, filter3) {
   const entityFiles = await findFiles("**/*.cs", { cwd: domainPath });
@@ -62171,7 +62681,7 @@ async function buildEntityGraph(domainPath, filter3) {
   return entityMap;
 }
 function parseEntity(content, file, domainPath) {
-  const fileName = path25.basename(file, ".cs");
+  const fileName = path26.basename(file, ".cs");
   if (fileName.endsWith("Dto") || fileName.endsWith("Command") || fileName.endsWith("Query") || fileName.endsWith("Handler") || fileName.endsWith("Validator") || fileName.endsWith("Exception") || fileName.startsWith("I")) {
     return null;
   }
@@ -62215,7 +62725,7 @@ function parseEntity(content, file, domainPath) {
   const parentEntity = foreignKeys.length > 0 ? foreignKeys[0].referencedEntity : void 0;
   return {
     name: entityName,
-    file: path25.relative(domainPath, file),
+    file: path26.relative(domainPath, file),
     baseClass: hasSystemEntity ? "SystemEntity" : "BaseEntity",
     isTenantAware: hasITenantEntity,
     isSystemEntity: hasSystemEntity,
@@ -62246,24 +62756,24 @@ function detectCircularDependencies(entityMap) {
   const cycles = [];
   for (const [name] of entityMap) {
     let dfs2 = function(current) {
-      if (path30.includes(current)) {
-        const cycleStart = path30.indexOf(current);
-        cycles.push([...path30.slice(cycleStart), current]);
+      if (path31.includes(current)) {
+        const cycleStart = path31.indexOf(current);
+        cycles.push([...path31.slice(cycleStart), current]);
         return true;
       }
       if (visited.has(current)) return false;
       visited.add(current);
-      path30.push(current);
+      path31.push(current);
       const node = entityMap.get(current);
       if (node?.parent) {
         dfs2(node.parent);
       }
-      path30.pop();
+      path31.pop();
       return false;
     };
     var dfs = dfs2;
     const visited = /* @__PURE__ */ new Set();
-    const path30 = [];
+    const path31 = [];
     dfs2(name);
   }
   const unique = /* @__PURE__ */ new Map();
@@ -62470,7 +62980,7 @@ function getImplementationSteps(pattern, node) {
       return [];
   }
 }
-function formatResult9(result, format, _rootPath) {
+function formatResult10(result, format, _rootPath) {
   if (format === "json") {
     return JSON.stringify(result, null, 2);
   }
@@ -66412,7 +66922,7 @@ var init_conventions = __esm({
 });
 
 // src/mcp/resources/project-info.ts
-import path26 from "path";
+import path27 from "path";
 async function getProjectInfoResource(config2) {
   const projectPath = config2.smartstack.projectPath;
   const projectInfo = await detectProject(projectPath);
@@ -66443,16 +66953,16 @@ async function getProjectInfoResource(config2) {
   lines.push("```");
   lines.push(`${projectInfo.name}/`);
   if (structure.domain) {
-    lines.push(`\u251C\u2500\u2500 ${path26.basename(structure.domain)}/          # Domain layer (entities)`);
+    lines.push(`\u251C\u2500\u2500 ${path27.basename(structure.domain)}/          # Domain layer (entities)`);
   }
   if (structure.application) {
-    lines.push(`\u251C\u2500\u2500 ${path26.basename(structure.application)}/     # Application layer (services)`);
+    lines.push(`\u251C\u2500\u2500 ${path27.basename(structure.application)}/     # Application layer (services)`);
   }
   if (structure.infrastructure) {
-    lines.push(`\u251C\u2500\u2500 ${path26.basename(structure.infrastructure)}/  # Infrastructure (EF Core)`);
+    lines.push(`\u251C\u2500\u2500 ${path27.basename(structure.infrastructure)}/  # Infrastructure (EF Core)`);
   }
   if (structure.api) {
-    lines.push(`\u251C\u2500\u2500 ${path26.basename(structure.api)}/             # API layer (controllers)`);
+    lines.push(`\u251C\u2500\u2500 ${path27.basename(structure.api)}/             # API layer (controllers)`);
   }
   if (structure.web) {
     lines.push(`\u2514\u2500\u2500 web/smartstack-web/      # React frontend`);
@@ -66465,8 +66975,8 @@ async function getProjectInfoResource(config2) {
     lines.push("| Project | Path |");
     lines.push("|---------|------|");
     for (const csproj of projectInfo.csprojFiles) {
-      const name = path26.basename(csproj, ".csproj");
-      const relativePath = path26.relative(projectPath, csproj);
+      const name = path27.basename(csproj, ".csproj");
+      const relativePath = path27.relative(projectPath, csproj);
       lines.push(`| ${name} | \`${relativePath}\` |`);
     }
     lines.push("");
@@ -66476,10 +66986,10 @@ async function getProjectInfoResource(config2) {
       cwd: structure.migrations,
       ignore: ["*.Designer.cs"]
     });
-    const migrations = migrationFiles.map((f) => path26.basename(f)).filter((f) => !f.includes("ModelSnapshot") && !f.includes(".Designer.")).sort();
+    const migrations = migrationFiles.map((f) => path27.basename(f)).filter((f) => !f.includes("ModelSnapshot") && !f.includes(".Designer.")).sort();
     lines.push("## EF Core Migrations");
     lines.push("");
-    lines.push(`**Location**: \`${path26.relative(projectPath, structure.migrations)}\``);
+    lines.push(`**Location**: \`${path27.relative(projectPath, structure.migrations)}\``);
     lines.push(`**Total Migrations**: ${migrations.length}`);
     lines.push("");
     if (migrations.length > 0) {
@@ -66514,11 +67024,11 @@ async function getProjectInfoResource(config2) {
   lines.push("dotnet build");
   lines.push("");
   lines.push("# Run API");
-  lines.push(`cd ${structure.api ? path26.relative(projectPath, structure.api) : "src/Api"}`);
+  lines.push(`cd ${structure.api ? path27.relative(projectPath, structure.api) : "src/Api"}`);
   lines.push("dotnet run");
   lines.push("");
   lines.push("# Run frontend");
-  lines.push(`cd ${structure.web ? path26.relative(projectPath, structure.web) : "web"}`);
+  lines.push(`cd ${structure.web ? path27.relative(projectPath, structure.web) : "web"}`);
   lines.push("npm run dev");
   lines.push("");
   lines.push("# Create migration");
@@ -66556,7 +67066,7 @@ var init_project_info = __esm({
 });
 
 // src/mcp/resources/api-endpoints.ts
-import path27 from "path";
+import path28 from "path";
 async function getApiEndpointsResource(config2, endpointFilter) {
   const structure = await findSmartStackStructure(config2.smartstack.projectPath);
   if (!structure.api) {
@@ -66575,7 +67085,7 @@ async function getApiEndpointsResource(config2, endpointFilter) {
 }
 async function parseController(filePath, _rootPath) {
   const content = await readText(filePath);
-  const fileName = path27.basename(filePath, ".cs");
+  const fileName = path28.basename(filePath, ".cs");
   const controllerName = fileName.replace("Controller", "");
   const endpoints = [];
   const routeMatch = content.match(/\[Route\s*\(\s*"([^"]+)"\s*\)\]/);
@@ -66737,7 +67247,7 @@ var init_api_endpoints = __esm({
 });
 
 // src/mcp/resources/db-schema.ts
-import path28 from "path";
+import path29 from "path";
 async function getDbSchemaResource(config2, tableFilter) {
   const structure = await findSmartStackStructure(config2.smartstack.projectPath);
   if (!structure.domain && !structure.infrastructure) {
@@ -66821,7 +67331,7 @@ async function parseEntity2(filePath, rootPath, _config) {
     tableName,
     properties,
     relationships,
-    file: path28.relative(rootPath, filePath)
+    file: path29.relative(rootPath, filePath)
   };
 }
 async function enrichFromConfigurations(entities, infrastructurePath, _config) {
@@ -66982,7 +67492,7 @@ var init_db_schema = __esm({
 });
 
 // src/mcp/resources/entities.ts
-import path29 from "path";
+import path30 from "path";
 async function getEntitiesResource(config2, entityFilter) {
   const structure = await findSmartStackStructure(config2.smartstack.projectPath);
   if (!structure.domain) {
@@ -67036,7 +67546,7 @@ async function parseEntitySummary(filePath, rootPath, config2) {
     hasSoftDelete,
     hasRowVersion,
     file: filePath,
-    relativePath: path29.relative(rootPath, filePath)
+    relativePath: path30.relative(rootPath, filePath)
   };
 }
 function inferTableInfo(entityName, config2) {
@@ -67094,11 +67604,11 @@ function inferTableInfo(entityName, config2) {
   if (!validPrefixes.includes(tablePrefix)) {
     tablePrefix = "ref_";
   }
-  const tableName = `${tablePrefix}${pluralize(entityName)}`;
+  const tableName = `${tablePrefix}${pluralize2(entityName)}`;
   const schema = config2.conventions.schemas.platform;
   return { tableName, tablePrefix, schema };
 }
-function pluralize(name) {
+function pluralize2(name) {
   if (name.endsWith("y") && !/[aeiou]y$/i.test(name)) {
     return name.slice(0, -1) + "ies";
   }
@@ -67254,6 +67764,8 @@ async function createServer() {
         // Frontend Extension Tools
         scaffoldFrontendExtensionTool,
         analyzeExtensionPointsTool,
+        // Data Export Tool
+        scaffoldDataExportTool,
         // Security & Code Quality Tools
         validateSecurityTool,
         analyzeCodeQualityTool,
@@ -67323,6 +67835,10 @@ async function createServer() {
         case "analyze_extension_points":
           result = await handleAnalyzeExtensionPoints(args ?? {}, config2);
           break;
+        // Data Export Tool
+        case "scaffold_data_export":
+          result = await handleScaffoldDataExport(args ?? {}, config2);
+          break;
         // Security & Code Quality Tools
         case "validate_security":
           result = await handleValidateSecurity(args ?? {}, config2);
@@ -67451,6 +67967,7 @@ var init_server3 = __esm({
     init_scaffold_frontend_tests();
     init_validate_security();
     init_analyze_code_quality();
+    init_scaffold_data_export();
     init_analyze_hierarchy_patterns();
     init_review_code();
     init_conventions();