@c9up/station 0.1.11 → 0.1.13

package/dist/ResourceRegistry.d.ts

@@ -6,9 +6,28 @@ import type { Resource } from "./types.js";
  * lands in story 54.7. Iteration order is registration order, which is what
  * the admin sidebar wants.
  */
+/**
+ * How a registered resource reaches the router.
+ *
+ * Installed by `StationProvider` once the admin surface is prepared, so a
+ * resource declared in a preload becomes mounted routes at the moment it is
+ * declared. The provider used to read a SNAPSHOT of this registry in `start()`
+ * and give up when it was empty — and providers start before preloads run, so
+ * `station.register(...)` written where the docs say to write it arrived after
+ * the only pass that would have mounted it.
+ */
+export type ResourceMounter = (resource: Resource) => void;
 export declare class ResourceRegistry {
     #private;
     register<T>(resource: Resource<T>): void;
+    /**
+     * @internal Give the registry a way to mount what it is told about.
+     *
+     * Mounts everything already registered before it arrived: an application is
+     * free to declare a resource at module scope, which runs while the provider
+     * is still starting.
+     */
+    useMounter(mounter: ResourceMounter): void;
     get(name: string): Resource | undefined;
     getOrThrow(name: string): Resource;
     has(name: string): boolean;

package/dist/ResourceRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistry.d.ts","sourceRoot":"","sources":["../src/ResourceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;GAMG;AACH,qBAAa,gBAAgB;;IAG5B,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI;IAUxC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ;IAUlC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,KAAK,IAAI,MAAM;IAIf,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC;CAI9B"}
+{"version":3,"file":"ResourceRegistry.d.ts","sourceRoot":"","sources":["../src/ResourceRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;GAMG;AACH;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;AAE3D,qBAAa,gBAAgB;;IAI5B,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI;IAWxC;;;;;;OAMG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAK1C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ;IAUlC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,KAAK,IAAI,MAAM;IAIf,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC;CAI9B"}

package/dist/ResourceRegistry.js

@@ -1,18 +1,25 @@
-/**
- * Central catalogue of declared resources for a Station-powered admin surface.
- *
- * Plain data structure: no boot()/start() lifecycle here — provider wiring
- * lands in story 54.7. Iteration order is registration order, which is what
- * the admin sidebar wants.
- */
 export class ResourceRegistry {
     #map = new Map();
+    #mounter;
     register(resource) {
         const existing = this.#map.get(resource.name);
         if (existing !== undefined) {
             throw new Error(`[station] ResourceRegistry: duplicate resource name '${resource.name}' (already registered for ${existing.entity.name})`);
         }
         this.#map.set(resource.name, resource);
+        this.#mounter?.(resource);
+    }
+    /**
+     * @internal Give the registry a way to mount what it is told about.
+     *
+     * Mounts everything already registered before it arrived: an application is
+     * free to declare a resource at module scope, which runs while the provider
+     * is still starting.
+     */
+    useMounter(mounter) {
+        this.#mounter = mounter;
+        for (const resource of this.#map.values())
+            mounter(resource);
     }
     get(name) {
         return this.#map.get(name);

package/dist/ResourceRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistry.js","sourceRoot":"","sources":["../src/ResourceRegistry.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IACnB,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE5C,QAAQ,CAAI,QAAqB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACd,wDAAwD,QAAQ,CAAC,IAAI,6BAA6B,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CACzH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU,CAAC,IAAY;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACd,kDAAkD,IAAI,GAAG,CACzD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,GAAG;QACF,MAAM,QAAQ,GAAe,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACD"}
+{"version":3,"file":"ResourceRegistry.js","sourceRoot":"","sources":["../src/ResourceRegistry.ts"],"names":[],"mappings":"AAqBA,MAAM,OAAO,gBAAgB;IACnB,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,QAAQ,CAAmB;IAE3B,QAAQ,CAAI,QAAqB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACd,wDAAwD,QAAQ,CAAC,IAAI,6BAA6B,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CACzH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,OAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU,CAAC,IAAY;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACd,kDAAkD,IAAI,GAAG,CACzD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,GAAG;QACF,MAAM,QAAQ,GAAe,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACD"}

package/dist/StationProvider.d.ts

@@ -72,7 +72,7 @@ type RuneValidationResult = {
 /**
  * A built rune schema — only the result-based check is consumed.
  *
- * `validateResult`, NOT `validate`: rune reserves `validate()` for the VineJS
+ * `validateResult`, NOT `validate`: rune reserves `validate()` for the
  * contract (async, throwing). Reading `.valid` off a Promise gives `undefined`,
  * so keeping the old name would have made every admin write fail closed with an
  * empty error list.
@@ -141,11 +141,14 @@ export declare function resourcesNeedValidation(resources: ReadonlyArray<Resourc
  * NEVER `in` on an instance (`@Column() declare` makes `in` always false —
  * mirror `BaseRepository.#hydrate`).
  *
- * Per-column rule mapping tolerates the form-post wire shape (values arrive as
- * strings — rune does NOT coerce): booleans `.parse(isCheckedValue)`, numbers
+ * Per-column rule mapping tolerates the form-post wire shape, where every
+ * value arrives as a string: booleans `.parse(isCheckedValue)`, numbers
  * `.parse` string→Number (NaN falls through to a type error), everything else
- * `rules.string()`. `.parse`/`.optional`/`.nullable` force rune's TS path, so
- * no native `.node` is touched.
+ * `rules.string()`. The explicit `.parse` is deliberate even though rune now
+ * coerces both itself — a checkbox posts the values IT chooses (`isCheckedValue`
+ * is the column's own truthy spelling), which is a wider set than any
+ * general-purpose coercion should accept. `.parse`/`.optional`/`.nullable`
+ * force rune's TS path, so no native `.node` is touched.
  *
  * Returns the built schema plus the set of boolean columns — the handler
  * default-fills an ABSENT boolean key to `false` before validating (an
@@ -172,6 +175,13 @@ export default class StationProvider {
     register(): void;
     boot(): Promise<void>;
     start(): Promise<void>;
+    /**
+     * The gaps worth reporting once, when the full set of resources is known.
+     *
+     * `ready()` runs after every preload, so this is the first moment the whole
+     * admin surface exists. Nothing is mounted here — the routes were built as
+     * each resource was declared.
+     */
     ready(): Promise<void>;
     shutdown(): Promise<void>;
 }
@@ -182,5 +192,23 @@ export default class StationProvider {
  * mock graph.
  */
 export declare function isModuleNotFound(err: unknown): boolean;
+/**
+ * Is THIS package the one that is missing?
+ *
+ * The code alone does not say. `@c9up/atlas` installed but missing one of its
+ * OWN dependencies raises the same `ERR_MODULE_NOT_FOUND`, and station read
+ * that as "atlas is absent" and disabled the admin — silently, which is the
+ * whole point of the degraded-host path and exactly wrong here: the peer IS
+ * there and something inside it is broken, which the operator has to be told.
+ *
+ * Node distinguishes the two in the message it writes:
+ *
+ *   Cannot find package '@c9up/atlas' imported from …   ← the peer is absent
+ *   Cannot find module '/…/node_modules/@c9up/atlas/…'  ← something inside it
+ *
+ * A bare-specifier miss names the PACKAGE; a miss inside an installed package
+ * names a path. Anything that is not unmistakably the first is re-thrown.
+ */
+export declare function isPackageMissing(err: unknown, specifier: string): boolean;
 export {};
 //# sourceMappingURL=StationProvider.d.ts.map

package/dist/StationProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StationProvider.d.ts","sourceRoot":"","sources":["../src/StationProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAEX,cAAc,EAGd,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EAAc,QAAQ,EAAkB,MAAM,YAAY,CAAC;AAQvE;;;;GAIG;AACH,UAAU,gBAAgB;IACzB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACnD,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;CAC3B;AAED,UAAU,kBAAkB;IAC3B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AA+LD,mEAAmE;AACnE,UAAU,aAAa;IACtB,QAAQ,IAAI,aAAa,CAAC;IAC1B,QAAQ,IAAI,aAAa,CAAC;IAC1B,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,aAAa,CAAC;CACtD;AAED,yEAAyE;AACzE,UAAU,SAAS;IAClB,MAAM,IAAI,aAAa,CAAC;IACxB,MAAM,IAAI,aAAa,CAAC;IACxB,OAAO,IAAI,aAAa,CAAC;IACzB,8FAA8F;IAC9F,GAAG,IAAI,aAAa,CAAC;CACrB;AAED,uCAAuC;AACvC,UAAU,mBAAmB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uEAAuE;AACvE,KAAK,oBAAoB,GACtB;IACA,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7B,GACD;IACA,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,SAAS,CAAC;CAChB,CAAC;AAEL;;;;;;;GAOG;AACH,UAAU,UAAU;IACnB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,oBAAoB,CAAC;CACpD;AAED,uEAAuE;AACvE,UAAU,UAAU;IACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC;IAC1D,KAAK,EAAE,SAAS,CAAC;CACjB;AAyHD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,wDAAwD;AACxD,wBAAgB,yBAAyB,IAAI,IAAI,CAMhD;AA+CD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,GAChC,OAAO,CAIT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,EACtC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,EAClC,IAAI,EAAE,UAAU,GACd;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAAE,CAmC1D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,oBAAoB,CAMtB;AAqND,MAAM,CAAC,OAAO,OAAO,eAAe;;IAsBvB,SAAS,CAAC,GAAG,EAAE,iBAAiB;gBAAtB,GAAG,EAAE,iBAAiB;IAE5C,QAAQ,IAAI,IAAI;IAWV,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAobtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAEtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CA6tB/B;AAkGD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAItD"}
+{"version":3,"file":"StationProvider.d.ts","sourceRoot":"","sources":["../src/StationProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAEX,cAAc,EAGd,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAc,QAAQ,EAAkB,MAAM,YAAY,CAAC;AASvE;;;;GAIG;AACH,UAAU,gBAAgB;IACzB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACnD,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;CAC3B;AAED,UAAU,kBAAkB;IAC3B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AA+LD,mEAAmE;AACnE,UAAU,aAAa;IACtB,QAAQ,IAAI,aAAa,CAAC;IAC1B,QAAQ,IAAI,aAAa,CAAC;IAC1B,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,aAAa,CAAC;CACtD;AAED,yEAAyE;AACzE,UAAU,SAAS;IAClB,MAAM,IAAI,aAAa,CAAC;IACxB,MAAM,IAAI,aAAa,CAAC;IACxB,OAAO,IAAI,aAAa,CAAC;IACzB,8FAA8F;IAC9F,GAAG,IAAI,aAAa,CAAC;CACrB;AAED,uCAAuC;AACvC,UAAU,mBAAmB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,uEAAuE;AACvE,KAAK,oBAAoB,GACtB;IACA,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7B,GACD;IACA,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,SAAS,CAAC;CAChB,CAAC;AAEL;;;;;;;GAOG;AACH,UAAU,UAAU;IACnB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,oBAAoB,CAAC;CACpD;AAED,uEAAuE;AACvE,UAAU,UAAU;IACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC;IAC1D,KAAK,EAAE,SAAS,CAAC;CACjB;AAyHD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,wDAAwD;AACxD,wBAAgB,yBAAyB,IAAI,IAAI,CAMhD;AA+CD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,GAChC,OAAO,CAIT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,EACtC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,EAClC,IAAI,EAAE,UAAU,GACd;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAAE,CAmC1D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,oBAAoB,CAMtB;AAqND,MAAM,CAAC,OAAO,OAAO,eAAe;;IAyBvB,SAAS,CAAC,GAAG,EAAE,iBAAiB;gBAAtB,GAAG,EAAE,iBAAiB;IAE5C,QAAQ,IAAI,IAAI;IAWV,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAOrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8F5B;;;;;;OAMG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsYtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAquB/B;AAkGD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAItD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAUzE"}

package/dist/StationProvider.js

@@ -19,9 +19,9 @@
  */
 import "./augmentations.js";
 import { fileURLToPath } from "node:url";
-import { inProduction } from "./nodeEnv.js";
 import { ResourceRegistry } from "./ResourceRegistry.js";
-import { setStation } from "./services/main.js";
+import { clearStation, getStation, setStation } from "./services/main.js";
+import { inProduction } from "./vendor/nodeEnv.js";
 // note: AuditEvent + ResourceAction are used by the CRUD handlers below;
 // the imports stay in one block for clarity.
 import { buildFormViewModel } from "./views/form.js";
@@ -129,11 +129,14 @@ export function resourcesNeedValidation(resources) {
  * NEVER `in` on an instance (`@Column() declare` makes `in` always false —
  * mirror `BaseRepository.#hydrate`).
  *
- * Per-column rule mapping tolerates the form-post wire shape (values arrive as
- * strings — rune does NOT coerce): booleans `.parse(isCheckedValue)`, numbers
+ * Per-column rule mapping tolerates the form-post wire shape, where every
+ * value arrives as a string: booleans `.parse(isCheckedValue)`, numbers
  * `.parse` string→Number (NaN falls through to a type error), everything else
- * `rules.string()`. `.parse`/`.optional`/`.nullable` force rune's TS path, so
- * no native `.node` is touched.
+ * `rules.string()`. The explicit `.parse` is deliberate even though rune now
+ * coerces both itself — a checkbox posts the values IT chooses (`isCheckedValue`
+ * is the column's own truthy spelling), which is a wider set than any
+ * general-purpose coercion should accept. `.parse`/`.optional`/`.nullable`
+ * force rune's TS path, so no native `.node` is touched.
  *
  * Returns the built schema plus the set of boolean columns — the handler
  * default-fills an ABSENT boolean key to `false` before validating (an
@@ -229,7 +232,7 @@ function fieldErrors(errors) {
     for (const e of errors) {
         if (e.field === "_root")
             continue;
-        // Collapse a nested VineJS-style path (`profile.name`) to its top-level
+        // Collapse a nested dotted path (`profile.name`) to its top-level
         // key — `form.ts` keys errors by column propertyKey. `split` always yields
         // a non-empty array, so `[0]` is a string (no fallback needed).
         const [key = e.field] = e.field.split(".");
@@ -394,6 +397,8 @@ let auditCloneWarnEmitted = false;
 const TEMPLATES_ROOT = fileURLToPath(new URL("../templates/", import.meta.url));
 export default class StationProvider {
     app;
+    /** What this provider bound, so shutdown only clears its own. */
+    #owned;
     #contexts = new Map();
     #viewRenderer;
     /**
@@ -425,15 +430,20 @@ export default class StationProvider {
     async boot() {
         // Force-resolve so `setStation` runs even if no preload touches the
         // singleton. Mirrors AuroraProvider.boot().
-        await this.app.container.resolve(ResourceRegistry);
+        this.#owned =
+            await this.app.container.resolve(ResourceRegistry);
     }
     async start() {
         if (this.#started)
             return;
         const registry = await this.app.container.resolve(ResourceRegistry);
-        const resources = registry.all();
-        if (resources.length === 0)
-            return;
+        // NOT gated on the registry being non-empty any more. Providers start
+        // BEFORE preloads run, and a preload is where the docs say to write
+        // `station.register(...)`, so reading a snapshot here and giving up when
+        // it was empty meant an application that followed the documentation got
+        // no admin at all. The surface is prepared here and each resource is
+        // mounted as it is declared — the shape upstream's Transmit uses for the
+        // same ordering problem.
         // 54.7 — read the optional `station` config block. Defaults bake
         // in `requireAuth: true` when @c9up/warden is detected later in
         // Phase 1, so a host that just installs the peer gets the auth
@@ -445,58 +455,89 @@ export default class StationProvider {
         if (!peers)
             return;
         const { router, atlas, rune } = peers;
-        // 57.7 fail-closed: a write-capable admin (create/edit) validates + guards
-        // mass-assignment through a rune-derived schema. If atlas is present (CRUD
-        // is live) but `@c9up/rune` is NOT installed, refuse to boot rather than
-        // silently accept unvalidated bodies — there is NO fallback to the deleted
-        // key-filter (`feedback_security_first`). Read-only admins need no rune.
-        if (rune === null && resourcesNeedValidation(resources)) {
-            throw new Error("[station] @c9up/rune is required to validate admin write forms (create/edit) but is not installed. Add @c9up/rune (a Station peer dependency) — Station will NOT fall back to unvalidated mass-assignment. See https://ream.dev/modules/station#mass-assignment.");
-        }
         // Phase 1a2 — resolve the SHARED inker renderer (AdonisJS/Edge parity)
         // and mount Station's package templates as the `station` disk. Unlike
         // warden (whose absence keeps the open dev-preview path), a view engine
         // is a HARD render requirement (D2): once an admin surface exists there
-        // is no page without it. Fail LOUD at boot when @c9up/inker is not wired
-        // — mirrors #resolveDb's loud-on-missing posture — rather than degrade
-        // silently or 500 on the first request.
-        const renderer = await this.#resolveViewRenderer();
-        // Mount once: `station::<template>` now resolves to this package's
-        // templates/ dir on the host's single inker engine (edge.mount parity).
-        renderer.mount("station", TEMPLATES_ROOT);
-        this.#viewRenderer = renderer;
+        // is no page without it.
+        //
+        // The failure is HELD rather than thrown: with no resource declared
+        // there is no admin surface, and an application that installed the
+        // provider without ever registering a resource must not be forced to
+        // wire a view engine. It is rethrown on the first resource, which is the
+        // moment the requirement becomes real.
+        let rendererFailure;
+        try {
+            const renderer = await this.#resolveViewRenderer();
+            // Mount once: `station::<template>` now resolves to this package's
+            // templates/ dir on the host's single inker engine (edge.mount parity).
+            renderer.mount("station", TEMPLATES_ROOT);
+            this.#viewRenderer = renderer;
+        }
+        catch (err) {
+            rendererFailure = err;
+        }
         // Phase 1b — wire the warden auth gate (or warn-once when it stays open).
         await this.#configureAuth(userConfig);
-        // Phase 2 — build per-resource context ONCE. `#resolveDb()` is
-        // loud: if the host installed `@c9up/atlas` but didn't register
-        // `@c9up/atlas/provider` in `reamrc.ts`, AC11's "surface
-        // AtlasProvider misconfiguration" intent kicks in.
         const db = await this.#resolveDb();
-        for (const resource of resources) {
+        // Phase 2 — mount every resource, now and as they arrive. The shell (the
+        // login surface, the `/admin` index) goes up with the first one: an
+        // application with no resources has no admin, and had none before.
+        let shellMounted = false;
+        registry.useMounter((resource) => {
+            if (!shellMounted) {
+                if (rendererFailure !== undefined)
+                    throw rendererFailure;
+                try {
+                    this.#registerShellRoutes(router);
+                }
+                catch (err) {
+                    // The router proxy may still throw "Router accessed before
+                    // initialization" on first property access (a boot-ordering
+                    // hazard where the proxy module imported but Ignitor's
+                    // `setRouter` never fired). That is a legitimate degraded-host
+                    // shape — give up quietly. Anything else propagates.
+                    if (isRouterProxyUninit(err))
+                        return;
+                    throw err;
+                }
+                shellMounted = true;
+            }
+            // 57.7 fail-closed: a write-capable admin (create/edit) validates +
+            // guards mass-assignment through a rune-derived schema. If atlas is
+            // present (CRUD is live) but `@c9up/rune` is NOT installed, refuse
+            // rather than silently accept unvalidated bodies — there is NO
+            // fallback to the deleted key-filter. Read-only admins need no rune.
+            // Checked per resource, so the refusal names the one at fault.
+            if (rune === null && resourcesNeedValidation([resource])) {
+                throw new Error(`[station] @c9up/rune is required to validate the write forms of the '${resource.name}' admin (create/edit) but is not installed. Add @c9up/rune (a Station peer dependency) — Station will NOT fall back to unvalidated mass-assignment. See https://ream.dev/modules/station#mass-assignment.`);
+            }
             this.#contexts.set(resource, buildResourceContext(resource, db, atlas, rune));
-        }
-        // 56.5 + 54.6 boot-time warn-onces. We surface the "auth wired but no
-        // permissions seeded" and "no audit sink" gaps loud-and-once so a
-        // half-wired install can't ship to prod without operators noticing.
-        // (CSRF is no longer a boot-time warn — enforcement is request-time and
-        // honest now: every write route fail-closes on `ctx.request.csrfProtected`.)
+            this.#registerResourceRoutes(router, resource);
+        });
+        this.#started = true;
+    }
+    /**
+     * The gaps worth reporting once, when the full set of resources is known.
+     *
+     * `ready()` runs after every preload, so this is the first moment the whole
+     * admin surface exists. Nothing is mounted here — the routes were built as
+     * each resource was declared.
+     */
+    async ready() {
+        if (!this.#started)
+            return;
+        const registry = await this.app.container.resolve(ResourceRegistry);
+        const resources = registry.all();
+        if (resources.length === 0)
+            return;
+        // 56.5 + 54.6 — "auth wired but no permissions seeded" and "no audit
+        // sink" are surfaced loud-and-once so a half-wired install cannot ship to
+        // prod without operators noticing. (CSRF is not a boot-time warn:
+        // enforcement is request-time, and every write route fail-closes on
+        // `ctx.request.csrfProtected`.)
         this.#warnSeedPermissionsOnce(resources);
         this.#warnAuditGapsOnce(resources);
-        // Phase 3 — route registration. The router proxy may still throw
-        // "Router accessed before initialization" on first property access
-        // (boot ordering hazard where the proxy module imported but
-        // Ignitor's `setRouter` never fired). That's another legitimate
-        // degraded-host shape — silent return. Anything else (slug
-        // collision, future validation) propagates.
-        try {
-            this.#registerAdminRoutes(router, resources);
-        }
-        catch (err) {
-            if (isRouterProxyUninit(err))
-                return;
-            throw err;
-        }
-        this.#started = true;
     }
     /**
      * Phase 1 — resolve the host router from the container (Ream registers it as
@@ -525,7 +566,11 @@ export default class StationProvider {
             return { router, atlas, rune };
         }
         catch (err) {
-            if (isModuleNotFound(err))
+            // ONLY when atlas itself is what is missing. An atlas that is
+            // installed but cannot load — a dependency of its own gone, a broken
+            // build — is not a host without atlas, and disabling the admin over
+            // it hides the actual fault.
+            if (isPackageMissing(err, "@c9up/atlas"))
                 return null;
             throw err;
         }
@@ -541,7 +586,7 @@ export default class StationProvider {
             return loadBearingCast(await import("@c9up/rune"));
         }
         catch (err) {
-            if (isModuleNotFound(err))
+            if (isPackageMissing(err, "@c9up/rune"))
                 return null;
             throw err;
         }
@@ -706,7 +751,17 @@ export default class StationProvider {
                 : ""));
     }
     /** Phase 3 — mount the login surface + per-resource CRUD routes. */
-    #registerAdminRoutes(router, resources) {
+    /** Wrap a handler in the auth gate when one is configured. */
+    #gate(handler) {
+        return this.#authConfig.requireAuth ? this.#withAuth(handler) : handler;
+    }
+    /**
+     * The routes that belong to the admin itself rather than to a resource.
+     *
+     * Registered once, while the provider starts — before the HTTP server is
+     * listening, and before any resource has necessarily been declared.
+     */
+    #registerShellRoutes(router) {
         // 54.7 — mount login surface first when auth is required, so
         // `/admin/login` is reachable even when the auth gate redirects every
         // other path to it.
@@ -715,14 +770,23 @@ export default class StationProvider {
             router.post("/admin/login", this.#buildLoginPostHandler());
             router.post("/admin/logout", this.#buildLogoutHandler());
         }
-        const gate = (handler) => this.#authConfig.requireAuth ? this.#withAuth(handler) : handler;
-        // `/admin` index — send the operator to the first listable resource (or the
-        // login surface). Without it, the post-login redirect("/admin") lands on a 404.
-        router.get("/admin", gate(async (ctx) => {
-            const home = resources.find((r) => r.actions.includes("list"));
+        // `/admin` index — send the operator to the first listable resource (or
+        // the login surface). Without it, the post-login redirect("/admin") lands
+        // on a 404.
+        //
+        // The registry is read WHEN THE REQUEST ARRIVES, not when this route is
+        // built: resources are declared in preloads, so a list captured here
+        // would name whatever happened to exist first — or nothing at all.
+        router.get("/admin", this.#gate(async (ctx) => {
+            const registry = await this.app.container.resolve(ResourceRegistry);
+            const home = registry.all().find((r) => r.actions.includes("list"));
             ctx.response.redirect(home ? `/admin/${home.name}` : "/admin/login");
         }));
-        for (const resource of resources) {
+    }
+    /** Every route one resource contributes, mounted the moment it is declared. */
+    #registerResourceRoutes(router, resource) {
+        const gate = (handler) => this.#gate(handler);
+        {
             const slug = resource.name;
             if (resource.actions.includes("list")) {
                 router.get(`/admin/${slug}`, gate(this.#buildListHandler(resource)));
@@ -784,8 +848,15 @@ export default class StationProvider {
         missingAuditWarned = true;
         console.warn(`[station] No audit sink configured for write-enabled resources: ${missing.map((r) => r.name).join(", ")}. Pass 'audit:' in defineResource() to persist mutations to your audit log.`);
     }
-    async ready() { }
-    async shutdown() { }
+    async shutdown() {
+        // Release the module-level singleton, while it is still ours. A stopped
+        // application left a dead resource registry reachable through `services/main`, and
+        // with two applications in one process the survivor's binding must not
+        // be the one cleared.
+        if (this.#owned !== undefined && getStation() === this.#owned)
+            clearStation();
+        this.#owned = undefined;
+    }
     #requireContext(resource) {
         const ctx = this.#contexts.get(resource);
         if (!ctx) {
@@ -810,7 +881,7 @@ export default class StationProvider {
      * Fail-closed response for invalid write input (57.7, AC4). Content-negotiated:
      *
      *  - **JSON/XHR** → `422` with `{ error, code: "E_VALIDATION_ERROR", messages }`
-     *    (Adonis/Vine parity — API clients get the machine-readable errors).
+     *    (Adonis parity — API clients get the machine-readable errors).
      *  - **HTML with a session** → the AdonisJS web idiom (PRG): flash the old
      *    input + per-field errors, then `redirect().back()` to the form `GET`,
      *    which re-reads the flash and re-renders with values + errors. No inline
@@ -826,7 +897,7 @@ export default class StationProvider {
     async #denyValidation(ctx, resource, submitted, errors, formUrl, row) {
         if (wantsJsonResponse(ctx)) {
             ctx.response.status(422);
-            // AdonisJS/VineJS parity: `{ errors: [{ field, rule, message }] }` —
+            // AdonisJS parity: `{ errors: [{ field, rule, message }] }` —
             // the same shape ream's own `E_VALIDATION_ERROR` handler emits.
             ctx.response.json({
                 errors: errors.map((e) => ({
@@ -1518,6 +1589,33 @@ export function isModuleNotFound(err) {
     const { code } = err;
     return code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND";
 }
+/**
+ * Is THIS package the one that is missing?
+ *
+ * The code alone does not say. `@c9up/atlas` installed but missing one of its
+ * OWN dependencies raises the same `ERR_MODULE_NOT_FOUND`, and station read
+ * that as "atlas is absent" and disabled the admin — silently, which is the
+ * whole point of the degraded-host path and exactly wrong here: the peer IS
+ * there and something inside it is broken, which the operator has to be told.
+ *
+ * Node distinguishes the two in the message it writes:
+ *
+ *   Cannot find package '@c9up/atlas' imported from …   ← the peer is absent
+ *   Cannot find module '/…/node_modules/@c9up/atlas/…'  ← something inside it
+ *
+ * A bare-specifier miss names the PACKAGE; a miss inside an installed package
+ * names a path. Anything that is not unmistakably the first is re-thrown.
+ */
+export function isPackageMissing(err, specifier) {
+    if (!isModuleNotFound(err))
+        return false;
+    const message = err instanceof Error ? err.message : String(err);
+    // The exact forms Node emits for a bare specifier that resolves to nothing.
+    return (message.includes(`Cannot find package '${specifier}'`) ||
+        message.includes(`Cannot find module '${specifier}'`) ||
+        // The CJS wording, kept for a host that transpiles.
+        message.includes(`Cannot find module "${specifier}"`));
+}
 /** Ream's router proxy throws this exact string before Ignitor wires it. */
 function isRouterProxyUninit(err) {
     return (err instanceof Error &&