@dereekb/dbx-components-mcp 14.0.0 → 14.1.0

package/README.md

@@ -78,4 +78,4 @@ The Firebase model registry (`src/registry/firebase-models.generated.ts`) is pro
 npx nx run dbx-components-mcp:generate-firebase-models
 ```
 
-The script formats output through Prettier so regenerating produces a byte-equal file when source models haven't changed.
+The script formats output through oxfmt so regenerating produces a byte-equal file when source models haven't changed.

package/dbx-components-mcp.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 // packages/dbx-components-mcp/package.json
 var package_default = {
   name: "@dereekb/dbx-components-mcp",
-  version: "14.0.0",
+  version: "14.1.0",
   type: "module",
   bin: {
     "dbx-components-mcp": "dbx-components-mcp.js"
@@ -21,8 +21,8 @@ var package_default = {
     "ts-morph": "^21.0.0"
   },
   peerDependencies: {
-    "@dereekb/dbx-cli": "14.0.0",
-    "@dereekb/util": "14.0.0"
+    "@dereekb/dbx-cli": "14.1.0",
+    "@dereekb/util": "14.1.0"
   }
 };
 
@@ -706,7 +706,7 @@ function tallyProp(input) {
 }
 function scoreAgainstEntry(input, entry) {
   const tally = { matched: [], extraEntry: [], missingInput: [], weightedIntersect: 0, weightedUnion: 0 };
-  const allProps = /* @__PURE__ */ new Set([...input.keys(), ...entry.keys()]);
+  const allProps = /* @__PURE__ */ new Set([...Array.from(input.keys()), ...Array.from(entry.keys())]);
   for (const prop of allProps) {
     tallyProp({ tally, prop, inputValue: input.get(prop), entryValue: entry.get(prop) });
   }
@@ -3003,6 +3003,14 @@ var FIREBASE_MODELS = [
         optional: false,
         description: "Per-provider connection state, keyed by provider type."
       },
+      {
+        name: "li",
+        longName: "logins",
+        converter: "firestoreObjectMap<UserExternalConnectionLogin, FirestoreModelData<UserExternalConnectionLogin>, UserExternalConnectionProviderType>({ objectField: { fields: userExternalConnectionLoginFields } })",
+        tsType: "UserExternalConnectionLoginMap",
+        optional: false,
+        description: "Per-provider LOGIN LINKS, keyed by provider type."
+      },
       {
         name: "c",
         longName: "connectedProviderTypes",
@@ -3011,6 +3019,14 @@ var FIREBASE_MODELS = [
         optional: false,
         description: "DERIVED from `e`: every provider type whose entry status is `connected`."
       },
+      {
+        name: "ec",
+        longName: "externalAccountKeys",
+        converter: "optionalFirestoreArray<UserExternalConnectionExternalAccountKey>()",
+        tsType: "Maybe<UserExternalConnectionExternalAccountKey[]>",
+        optional: true,
+        description: "DERIVED from `e` UNION `li`: the `<providerType>:<externalAccountId>` key of every entry that names an external account, plus every login link's."
+      },
       {
         name: "uat",
         longName: "updatedAt",
@@ -3021,7 +3037,7 @@ var FIREBASE_MODELS = [
       }
     ],
     enums: [],
-    detectionHints: ["e", "c", "uat"],
+    detectionHints: ["e", "li", "c", "ec", "uat"],
     description: "The client-readable half of a user's third-party OAuth connection state.",
     modelGroup: "UserExternalConnection",
     collectionKind: "root",
@@ -10134,7 +10150,7 @@ function collectFromTypeReference(ref, context) {
     result = collectFromTypeNode(args[0], { ...context, forceOptional: false }).map((p) => ({ ...p, required: true }));
   } else if (refName === "Omit" && args.length === 2) {
     const keys = parseKeyUnion(args[1]);
-    const merged = /* @__PURE__ */ new Set([...context.omit, ...keys]);
+    const merged = /* @__PURE__ */ new Set([...Array.from(context.omit), ...Array.from(keys)]);
     result = collectFromTypeNode(args[0], { ...context, omit: merged });
   } else if (refName === "Pick" && args.length === 2) {
     const keys = parseKeyUnion(args[1]);
@@ -11476,7 +11492,7 @@ function tryTransitiveResolution(input) {
     const calleeLine = resolved.decl.getStartLineNumber();
     warnings.push({ kind: "unannotated-query-helper", severity: "warning", name: factoryName, callee: calleeName, calleeFilePath, calleeLine, filePath, line: call.getStartLineNumber() });
   }
-  const nextVisited = /* @__PURE__ */ new Set([...visited, calleeKey]);
+  const nextVisited = new Set(visited).add(calleeKey);
   walkBodyInto({
     decl: resolved.decl,
     factoryName,
@@ -15456,13 +15472,21 @@ function formatBuildFailure(outcome) {
 }
 function formatWriteSummary(input) {
   const { outputPath, diff, generatedComposites, generatedFieldOverrides } = input;
-  const lines = [`generate-firestore-indexes: wrote ${outputPath}`, `  composites: ${generatedComposites} (added ${diff.added.length}, removed ${diff.removed.length}, unchanged ${diff.unchanged.length})`, `  fieldOverrides: ${generatedFieldOverrides} (added ${diff.fieldOverridesAdded.length}, removed ${diff.fieldOverridesRemoved.length}, unchanged ${diff.fieldOverridesUnchanged.length})`];
+  const lines = [
+    `generate-firestore-indexes: wrote ${outputPath}`,
+    `  composites: ${generatedComposites} (added ${diff.added.length}, removed ${diff.removed.length}, unchanged ${diff.unchanged.length})`,
+    `  fieldOverrides: ${generatedFieldOverrides} (added ${diff.fieldOverridesAdded.length}, removed ${diff.fieldOverridesRemoved.length}, unchanged ${diff.fieldOverridesUnchanged.length})`
+  ];
   return appendDiffSection(lines, diff).join("\n");
 }
 function formatCheckSummary(input) {
   const { drift, outputPath, diff, generatedComposites, generatedFieldOverrides } = input;
   const headline = drift ? `generate-firestore-indexes: drift detected against ${outputPath}` : `generate-firestore-indexes: in sync (${outputPath})`;
-  const lines = [headline, `  composites: ${generatedComposites} (added ${diff.added.length}, removed ${diff.removed.length}, unchanged ${diff.unchanged.length})`, `  fieldOverrides: ${generatedFieldOverrides} (added ${diff.fieldOverridesAdded.length}, removed ${diff.fieldOverridesRemoved.length}, unchanged ${diff.fieldOverridesUnchanged.length})`];
+  const lines = [
+    headline,
+    `  composites: ${generatedComposites} (added ${diff.added.length}, removed ${diff.removed.length}, unchanged ${diff.unchanged.length})`,
+    `  fieldOverrides: ${generatedFieldOverrides} (added ${diff.fieldOverridesAdded.length}, removed ${diff.fieldOverridesRemoved.length}, unchanged ${diff.fieldOverridesUnchanged.length})`
+  ];
   return appendDiffSection(lines, diff).join("\n");
 }
 function appendDiffSection(lines, diff) {
@@ -19816,7 +19840,7 @@ function registerResources(server, options = {}) {
   if (options.authRegistry !== void 0) {
     registerAuthResource(server, { registry: options.authRegistry });
   }
-  registerFirestoreRulesResource(server, { ...options.cwd === void 0 ? {} : { cwd: options.cwd } });
+  registerFirestoreRulesResource(server, options.cwd === void 0 ? {} : { cwd: options.cwd });
 }
 
 // packages/dbx-components-mcp/src/tools/lookup-form.tool.ts
@@ -19909,7 +19933,19 @@ function formatBrief(field) {
   const tierBits = formatTierBits(field);
   const arrayOptional = field.arrayOutput === "optional" ? " (single or array)" : "";
   const array = field.arrayOutput === "yes" ? " (array)" : arrayOptional;
-  return [`## ${field.factoryName}`, "", `**slug:** \`${field.slug}\` \xB7 **tier:** \`${field.tier}\` \xB7 **produces:** \`${field.produces}\`${array}${tierBits}`, "", field.description, "", "```ts", field.minimalExample, "```", "", `\u2192 Call \`dbx_form_lookup topic="${field.slug}" depth="full"\` for the config table and full example.`].join("\n");
+  return [
+    `## ${field.factoryName}`,
+    "",
+    `**slug:** \`${field.slug}\` \xB7 **tier:** \`${field.tier}\` \xB7 **produces:** \`${field.produces}\`${array}${tierBits}`,
+    "",
+    field.description,
+    "",
+    "```ts",
+    field.minimalExample,
+    "```",
+    "",
+    `\u2192 Call \`dbx_form_lookup topic="${field.slug}" depth="full"\` for the config table and full example.`
+  ].join("\n");
 }
 function formatFull(field) {
   const header = formatHeader(field);
@@ -20411,7 +20447,19 @@ function formatSearchResults(input) {
     const field = hit.entry;
     const optionalArray = field.arrayOutput === "optional" ? " *(single or array)*" : "";
     const array = field.arrayOutput === "yes" ? " *(array)*" : optionalArray;
-    lines.push(`## \`${field.slug}\` \xB7 form \xB7 score ${hit.score}`, "", `- **factory:** \`${field.factoryName}\``, `- **tier:** \`${field.tier}\``, `- **produces:** \`${field.produces}\`${array}`, `- **matched:** \`${hit.matchedTokens.join(", ")}\``, "", field.description, "", `\u2192 \`dbx_form_lookup topic="${field.slug}"\` for full docs.`, "");
+    lines.push(
+      `## \`${field.slug}\` \xB7 form \xB7 score ${hit.score}`,
+      "",
+      `- **factory:** \`${field.factoryName}\``,
+      `- **tier:** \`${field.tier}\``,
+      `- **produces:** \`${field.produces}\`${array}`,
+      `- **matched:** \`${hit.matchedTokens.join(", ")}\``,
+      "",
+      field.description,
+      "",
+      `\u2192 \`dbx_form_lookup topic="${field.slug}"\` for full docs.`,
+      ""
+    );
   }
   return lines.join("\n").trimEnd();
 }
@@ -21463,7 +21511,19 @@ function formatSearchResults2(options) {
   } else {
     const lines = [`# Search: \`${query}\``, "", `Tokens: \`${tokenDisplay}\`${scopeLabel} \xB7 ${hits.length} result${hits.length === 1 ? "" : "s"}`, ""];
     for (const hit of hits) {
-      lines.push(`## \`${hit.entry.slug}\` \xB7 ${hit.entry.category} \xB7 score ${hit.score}`, "", `- **class:** \`${hit.entry.className}\``, `- **kind:** \`${hit.entry.kind}\``, `- **selector:** \`${hit.entry.selector}\``, `- **matched:** \`${hit.matchedTokens.join(", ")}\``, "", hit.entry.description, "", `\u2192 \`dbx_ui_lookup topic="${hit.entry.slug}"\` for full docs.`, "");
+      lines.push(
+        `## \`${hit.entry.slug}\` \xB7 ${hit.entry.category} \xB7 score ${hit.score}`,
+        "",
+        `- **class:** \`${hit.entry.className}\``,
+        `- **kind:** \`${hit.entry.kind}\``,
+        `- **selector:** \`${hit.entry.selector}\``,
+        `- **matched:** \`${hit.matchedTokens.join(", ")}\``,
+        "",
+        hit.entry.description,
+        "",
+        `\u2192 \`dbx_ui_lookup topic="${hit.entry.slug}"\` for full docs.`,
+        ""
+      );
     }
     appendRelatedExamples(lines, hits, examplesRegistry);
     result = lines.join("\n").trimEnd();
@@ -25553,7 +25613,31 @@ function attachRemediation(code17) {
 
 // packages/dbx-cli/validate/src/lib/_core/rule-catalog/format.ts
 function formatRuleAsMarkdown(entry) {
-  const lines = [`# \`${entry.code}\``, "", `**${entry.title}**`, "", `- **Severity:** \`${entry.severity}\``, `- **Source tool:** \`${entry.source}\``, "", "## What it flags", "", entry.whatItFlags, "", "## When it applies", "", entry.whenItApplies, "", "## When it does NOT apply", "", entry.whenItDoesNotApply, "", "## Canonical fix", "", entry.canonicalFix, ""];
+  const lines = [
+    `# \`${entry.code}\``,
+    "",
+    `**${entry.title}**`,
+    "",
+    `- **Severity:** \`${entry.severity}\``,
+    `- **Source tool:** \`${entry.source}\``,
+    "",
+    "## What it flags",
+    "",
+    entry.whatItFlags,
+    "",
+    "## When it applies",
+    "",
+    entry.whenItApplies,
+    "",
+    "## When it does NOT apply",
+    "",
+    entry.whenItDoesNotApply,
+    "",
+    "## Canonical fix",
+    "",
+    entry.canonicalFix,
+    ""
+  ];
   if (entry.canonicalFixTemplate) {
     lines.push("## Fix template", "", entry.canonicalFixTemplate, "");
   }
@@ -35894,7 +35978,15 @@ function appendGroupSection(lines, apiRel, group) {
 function appendFileTable(lines, group) {
   lines.push("", "| File | Kind | Subgroups | Canonical | Rename suggestion |", "|---|---|---|---|---|");
   for (const file of group.files) {
-    lines.push("| " + [code3(file.filename), KIND_LABEL[file.classification.kind], file.classification.subgroups.length === 0 ? "\u2014" : code3(file.classification.subgroups.join(".")), file.classification.isCanonical ? "\u2713" : "\u2717", file.classification.recommendedRename === void 0 ? "\u2014" : code3(file.classification.recommendedRename)].join(" | ") + " |");
+    lines.push(
+      "| " + [
+        code3(file.filename),
+        KIND_LABEL[file.classification.kind],
+        file.classification.subgroups.length === 0 ? "\u2014" : code3(file.classification.subgroups.join(".")),
+        file.classification.isCanonical ? "\u2713" : "\u2717",
+        file.classification.recommendedRename === void 0 ? "\u2014" : code3(file.classification.recommendedRename)
+      ].join(" | ") + " |"
+    );
   }
 }
 function appendWhereToAddSection(lines, apiRel, group) {
@@ -35910,7 +36002,17 @@ function appendRecommendation(lines, rec, group) {
   lines.push("", `- **${rec.label}** \u2192 \`${rec.canonicalPath}\` ${status}`, `  ${rec.summary}`);
 }
 function appendConventionLegend(lines) {
-  lines.push("", "## Naming convention", "", "- `<group>.crud.spec.ts` \u2014 non-scenario CRUD tests.", "- `<group>.crud.<sub>[.<sub>...].spec.ts` \u2014 focused CRUD sub-test.", "- `<group>.scenario.spec.ts` \u2014 generic multi-step scenario tests.", "- `<group>.scenario.<sub>[.<sub>...].spec.ts` \u2014 focused scenario sub-bucket.", "", "Drift forms are still parsed but flagged \u2014 see the `Rename suggestion` column.");
+  lines.push(
+    "",
+    "## Naming convention",
+    "",
+    "- `<group>.crud.spec.ts` \u2014 non-scenario CRUD tests.",
+    "- `<group>.crud.<sub>[.<sub>...].spec.ts` \u2014 focused CRUD sub-test.",
+    "- `<group>.scenario.spec.ts` \u2014 generic multi-step scenario tests.",
+    "- `<group>.scenario.<sub>[.<sub>...].spec.ts` \u2014 focused scenario sub-bucket.",
+    "",
+    "Drift forms are still parsed but flagged \u2014 see the `Rename suggestion` column."
+  );
 }
 function appendDriftSummary(lines, catalog) {
   const driftFiles = [];
@@ -36056,7 +36158,14 @@ function stringify(value) {
 
 // packages/dbx-cli/model-test/src/lib/fixture/format.markdown.ts
 function formatListAsMarkdown(extraction) {
-  const lines = [`# App fixtures \u2014 ${extraction.fixturePath}`, "", `Detected workspace prefix: \`${extraction.prefix ?? "(none)"}\``, `Identity imports: ${extraction.identityImports.length === 0 ? "_None._" : extraction.identityImports.map((s) => "`" + s + "`").join(", ")}`, "", `## Fixtures (${extraction.entries.length})`];
+  const lines = [
+    `# App fixtures \u2014 ${extraction.fixturePath}`,
+    "",
+    `Detected workspace prefix: \`${extraction.prefix ?? "(none)"}\``,
+    `Identity imports: ${extraction.identityImports.length === 0 ? "_None._" : extraction.identityImports.map((s) => "`" + s + "`").join(", ")}`,
+    "",
+    `## Fixtures (${extraction.entries.length})`
+  ];
   if (extraction.entries.length === 0) {
     lines.push("", "_No model fixtures found._");
   } else {
@@ -36113,7 +36222,15 @@ function nonModelDescription(entry) {
   return "Non-Firestore-model fixture.";
 }
 function appendLookupTriplet(lines, entry) {
-  lines.push("## Triplet", "", `- Fixture: \`${entry.fixtureClassName}\` (lines ${entry.fixtureLine}-${entry.fixtureEndLine})`, `- Instance: \`${entry.instanceClassName}\` (lines ${entry.instanceLine}-${entry.instanceEndLine})`, `- Params: \`${entry.paramsTypeName}\``, `- Factory: \`${entry.factoryName ?? "\u2014"}\``, `- Singleton: \`${entry.singletonName ?? "\u2014"}\``);
+  lines.push(
+    "## Triplet",
+    "",
+    `- Fixture: \`${entry.fixtureClassName}\` (lines ${entry.fixtureLine}-${entry.fixtureEndLine})`,
+    `- Instance: \`${entry.instanceClassName}\` (lines ${entry.instanceLine}-${entry.instanceEndLine})`,
+    `- Params: \`${entry.paramsTypeName}\``,
+    `- Factory: \`${entry.factoryName ?? "\u2014"}\``,
+    `- Singleton: \`${entry.singletonName ?? "\u2014"}\``
+  );
 }
 function appendLookupGenerics(lines, entry) {
   if (entry.fixtureExtendsGenerics.length > 0) {
@@ -36283,11 +36400,19 @@ function renderParamsBlock(input, paramsTypeName, todos) {
 }
 function renderInstanceBlock(input) {
   input.todos.push(`Add instance methods to \`${input.instanceClassName}\`.`);
-  return [`export class ${input.instanceClassName}<F extends FirebaseAdminFunctionTestContextInstance = FirebaseAdminFunctionTestContextInstance> extends ModelTestContextInstance<${input.model}, ${input.modelDocumentTypeName}, ${input.prefix}FunctionContextFixtureInstance<F>> {`, "  // TODO: implement instance-side methods (these own the real logic).", "}"].join("\n");
+  return [
+    `export class ${input.instanceClassName}<F extends FirebaseAdminFunctionTestContextInstance = FirebaseAdminFunctionTestContextInstance> extends ModelTestContextInstance<${input.model}, ${input.modelDocumentTypeName}, ${input.prefix}FunctionContextFixtureInstance<F>> {`,
+    "  // TODO: implement instance-side methods (these own the real logic).",
+    "}"
+  ].join("\n");
 }
 function renderFixtureBlock(input) {
   input.todos.push(`Add forwarder methods to \`${input.fixtureClassName}\` after defining instance methods.`);
-  return [`export class ${input.fixtureClassName}<F extends FirebaseAdminFunctionTestContextInstance = FirebaseAdminFunctionTestContextInstance> extends ModelTestContextFixture<${input.model}, ${input.modelDocumentTypeName}, ${input.prefix}FunctionContextFixtureInstance<F>, ${input.prefix}FunctionContextFixture<F>, ${input.instanceClassName}<F>> {`, "  // TODO: forward instance methods. Run `dbx_model_fixture_forward` after adding instance methods.", "}"].join("\n");
+  return [
+    `export class ${input.fixtureClassName}<F extends FirebaseAdminFunctionTestContextInstance = FirebaseAdminFunctionTestContextInstance> extends ModelTestContextFixture<${input.model}, ${input.modelDocumentTypeName}, ${input.prefix}FunctionContextFixtureInstance<F>, ${input.prefix}FunctionContextFixture<F>, ${input.instanceClassName}<F>> {`,
+    "  // TODO: forward instance methods. Run `dbx_model_fixture_forward` after adding instance methods.",
+    "}"
+  ].join("\n");
 }
 function renderFactoryBlock(input) {
   const generics = renderFactoryGenerics(input);
@@ -36307,7 +36432,15 @@ function renderFactoryBlock(input) {
   return lines.join("\n");
 }
 function renderFactoryGenerics(input) {
-  const baseGenerics = [input.model, input.modelDocumentTypeName, input.paramsTypeName, `${input.prefix}FunctionContextFixtureInstance<FirebaseAdminFunctionTestContextInstance>`, `${input.prefix}FunctionContextFixture<FirebaseAdminFunctionTestContextInstance>`, `${input.instanceClassName}<FirebaseAdminFunctionTestContextInstance>`, `${input.fixtureClassName}<FirebaseAdminFunctionTestContextInstance>`];
+  const baseGenerics = [
+    input.model,
+    input.modelDocumentTypeName,
+    input.paramsTypeName,
+    `${input.prefix}FunctionContextFixtureInstance<FirebaseAdminFunctionTestContextInstance>`,
+    `${input.prefix}FunctionContextFixture<FirebaseAdminFunctionTestContextInstance>`,
+    `${input.instanceClassName}<FirebaseAdminFunctionTestContextInstance>`,
+    `${input.fixtureClassName}<FirebaseAdminFunctionTestContextInstance>`
+  ];
   if (input.collectionGenericArg) {
     return [...baseGenerics, input.collectionGenericArg];
   }
@@ -36329,10 +36462,13 @@ function renderFactoryCallbacks(input) {
   } else {
     callbacks.push(`getCollection: (fi) => fi.${defaultCollectionsAccessor(input.prefix)}.${camelInitial(input.model)}Collection`);
   }
-  callbacks.push(`makeInstance: (delegate, ref, testInstance) => new ${input.instanceClassName}(delegate, ref, testInstance)`, `makeRef: async (collection, params, _p) => {
+  callbacks.push(
+    `makeInstance: (delegate, ref, testInstance) => new ${input.instanceClassName}(delegate, ref, testInstance)`,
+    `makeRef: async (collection, params, _p) => {
       // TODO: choose the correct ref strategy (auto id vs deterministic id).
       return collection.documentAccessor().newDocument().documentRef;
-    }`);
+    }`
+  );
   if (input.withInitDocument) {
     callbacks.push(`initDocument: async (instance, params) => {
       // TODO: seed the new document with sensible defaults from \`params\`.
@@ -37532,7 +37668,18 @@ function formatReportAsJson4(report) {
 // packages/dbx-cli/validate/src/lib/dbx-asset-list-app/format.markdown.ts
 function formatReportAsMarkdown4(report) {
   const basename12 = report.componentDir.split("/").pop() ?? report.componentDir;
-  const lines = [`# App assets \u2014 ${basename12}`, "", `Component: \`${report.componentDir}\``, `App: \`${report.apiDir}\``, "", `\`src/lib/assets.ts\`: ${formatBool(report.assetsFileExists)}`, `Barrel re-exports \`./assets\`: ${formatBool(report.barrelReExportsAssets)}`, `\`provideDbxAssetLoader()\` called in \`src/root.app.config.ts\`: ${formatBool(report.providerWiredInApp)}`, "", `## Assets (${report.assets.length})`];
+  const lines = [
+    `# App assets \u2014 ${basename12}`,
+    "",
+    `Component: \`${report.componentDir}\``,
+    `App: \`${report.apiDir}\``,
+    "",
+    `\`src/lib/assets.ts\`: ${formatBool(report.assetsFileExists)}`,
+    `Barrel re-exports \`./assets\`: ${formatBool(report.barrelReExportsAssets)}`,
+    `\`provideDbxAssetLoader()\` called in \`src/root.app.config.ts\`: ${formatBool(report.providerWiredInApp)}`,
+    "",
+    `## Assets (${report.assets.length})`
+  ];
   if (report.assets.length === 0) {
     lines.push("", "_None found._");
   } else {
@@ -37923,7 +38070,18 @@ function formatReportAsJson6(report) {
 function formatReportAsMarkdown6(report) {
   const basename12 = report.componentDir.split("/").pop() ?? report.componentDir;
   const uploadServiceFactoryText = report.uploadServiceFactoryName ? code7(report.uploadServiceFactoryName) : "_Not defined._";
-  const lines = [`# App storagefiles \u2014 ${basename12}`, "", `Component: \`${report.componentDir}\``, `API: \`${report.apiDir}\``, "", `Upload service factory: ${uploadServiceFactoryText}`, `Wired via \`StorageFileInitializeFromUploadService\` provider: ${formatBool3(report.uploadServiceWiredInApi)}`, `Processing handler call present: ${formatBool3(report.processingHandlerWiredInApi)}`, "", `## Purposes (${report.purposes.length})`];
+  const lines = [
+    `# App storagefiles \u2014 ${basename12}`,
+    "",
+    `Component: \`${report.componentDir}\``,
+    `API: \`${report.apiDir}\``,
+    "",
+    `Upload service factory: ${uploadServiceFactoryText}`,
+    `Wired via \`StorageFileInitializeFromUploadService\` provider: ${formatBool3(report.uploadServiceWiredInApi)}`,
+    `Processing handler call present: ${formatBool3(report.processingHandlerWiredInApi)}`,
+    "",
+    `## Purposes (${report.purposes.length})`
+  ];
   if (report.purposes.length === 0) {
     lines.push("", "_None found._");
   } else {
@@ -41602,7 +41760,14 @@ function rootDocumentStoreBody(args) {
   if (args.functionsClass !== void 0) {
     packageImports.push(args.functionsClass);
   }
-  const lines = [`import { Injectable, inject } from '@angular/core';`, `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`, `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`, "", `@Injectable()`, `export class ${storeClass} extends ${baseClass}<${args.modelName}, ${docType}> {`];
+  const lines = [
+    `import { Injectable, inject } from '@angular/core';`,
+    `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`,
+    `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`,
+    "",
+    `@Injectable()`,
+    `export class ${storeClass} extends ${baseClass}<${args.modelName}, ${docType}> {`
+  ];
   if (args.functionsClass !== void 0) {
     lines.push(`  readonly ${functionsFieldName(args.functionsClass)} = inject(${args.functionsClass});`, "");
   }
@@ -41645,11 +41810,29 @@ function subDocumentStoreBody(args) {
   if (args.functionsClass !== void 0) {
     packageImports.push(args.functionsClass);
   }
-  const lines = [`import { Injectable, inject } from '@angular/core';`, `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`, `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`, `import { ${parentStore} } from './${parentBaseFile}.document.store';`, "", `@Injectable()`, `export class ${storeClass} extends ${baseClass}<${args.modelName}, ${parent.name}, ${docType}, ${parent.documentType}> {`];
+  const lines = [
+    `import { Injectable, inject } from '@angular/core';`,
+    `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`,
+    `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`,
+    `import { ${parentStore} } from './${parentBaseFile}.document.store';`,
+    "",
+    `@Injectable()`,
+    `export class ${storeClass} extends ${baseClass}<${args.modelName}, ${parent.name}, ${docType}, ${parent.documentType}> {`
+  ];
   if (args.functionsClass !== void 0) {
     lines.push(`  readonly ${functionsFieldName(args.functionsClass)} = inject(${args.functionsClass});`, "");
   }
-  lines.push(`  constructor() {`, `    const collections = inject(${collections});`, `    super({ collectionFactory: collections.${args.factoryAccessor}, firestoreCollectionLike: collections.${args.groupAccessor} });`, `    const parent = inject(${parentStore}, { optional: true });`, "", `    if (parent) {`, `      this.setParentStore(parent);`, `    }`, `  }`);
+  lines.push(
+    `  constructor() {`,
+    `    const collections = inject(${collections});`,
+    `    super({ collectionFactory: collections.${args.factoryAccessor}, firestoreCollectionLike: collections.${args.groupAccessor} });`,
+    `    const parent = inject(${parentStore}, { optional: true });`,
+    "",
+    `    if (parent) {`,
+    `      this.setParentStore(parent);`,
+    `    }`,
+    `  }`
+  );
   const crudLines = renderCrudLines(args, "this");
   if (crudLines.length > 0) {
     lines.push("", ...crudLines);
@@ -41694,7 +41877,14 @@ function systemStateAccessorBody(args) {
   if (args.functionsClass !== void 0) {
     packageImports.push(args.functionsClass);
   }
-  const lines = [`import { Injectable, inject } from '@angular/core';`, `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`, `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`, "", `@Injectable()`, `export class ${accessorClass} extends AbstractSystemStateDocumentStoreAccessor<${dataType}> {`];
+  const lines = [
+    `import { Injectable, inject } from '@angular/core';`,
+    `import { ${joinUnique(dbxFirebaseImports)} } from '@dereekb/dbx-firebase';`,
+    `import { ${joinUnique(packageImports)} } from '${args.firebasePackage}';`,
+    "",
+    `@Injectable()`,
+    `export class ${accessorClass} extends AbstractSystemStateDocumentStoreAccessor<${dataType}> {`
+  ];
   if (args.functionsClass !== void 0) {
     lines.push(`  readonly ${functionsFieldName(args.functionsClass)} = inject(${args.functionsClass});`, "");
   }
@@ -42277,7 +42467,17 @@ var ForwardArgsType = type62({
 });
 var TOOL8 = {
   name: "dbx_model_fixture_forward",
-  description: ["Insert the missing Fixture forwarder methods for one model in `<apiDir>/src/test/fixture.ts`. Every public Instance method that lacks a Fixture method gains a thin wrapper:", "", "```ts", "async <name>(<paramText>): <returnType> {", "  return this.instance.<name>(<args>);", "}", "```", "", "Existing forwarders are left untouched (idempotent). Pass `methods` to limit the run to specific method names; omit to forward everything that's missing."].join("\n"),
+  description: [
+    "Insert the missing Fixture forwarder methods for one model in `<apiDir>/src/test/fixture.ts`. Every public Instance method that lacks a Fixture method gains a thin wrapper:",
+    "",
+    "```ts",
+    "async <name>(<paramText>): <returnType> {",
+    "  return this.instance.<name>(<args>);",
+    "}",
+    "```",
+    "",
+    "Existing forwarders are left untouched (idempotent). Pass `methods` to limit the run to specific method names; omit to forward everything that's missing."
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -42756,7 +42956,11 @@ function bucketSummary(group, bucket) {
   }
   return "Multi-step scenarios using fixture chains (mirrors real workflows). Add focused buckets as `" + group + ".scenario.<sub>.spec.ts` (chain subgroups freely, e.g. `.scenario.requirement.worker.spec.ts`).";
 }
-var DRIFT_RULES = ["`<group>.<sub>.crud.spec.ts` \u2192 rename to `<group>.crud.<sub>.spec.ts` (`crud` belongs directly after the group name).", "`<group>.<sub>.scenario.spec.ts` \u2192 rename to `<group>.scenario.<sub>.spec.ts` (`scenario` belongs directly after the group name).", "`<group>.<rest>.spec.ts` with no `crud` / `scenario` segment \u2192 add one (default to `scenario` when in doubt)."];
+var DRIFT_RULES = [
+  "`<group>.<sub>.crud.spec.ts` \u2192 rename to `<group>.crud.<sub>.spec.ts` (`crud` belongs directly after the group name).",
+  "`<group>.<sub>.scenario.spec.ts` \u2192 rename to `<group>.scenario.<sub>.spec.ts` (`scenario` belongs directly after the group name).",
+  "`<group>.<rest>.spec.ts` with no `crud` / `scenario` segment \u2192 add one (default to `scenario` when in doubt)."
+];
 function formatMarkdown(report) {
   const lines = [];
   lines.push(`# Spec convention for \`${report.group}\``, "", `Tests live under \`${report.apiDir}/src/app/function/${report.group}/\`. Canonical name segments:`, "");
@@ -43536,7 +43740,14 @@ var ARCHETYPE_RECOMMEND_TOOL = {
 import { type as type70 } from "arktype";
 var DBX_MODEL_ARCHETYPE_LOOKUP_TOOL = {
   name: "dbx_model_archetype_lookup",
-  description: ["Look up an archetype in the model-archetype catalog. Accepts:", '  \u2022 a slug (`"root-entity"`, `"denormalised-aggregate"`, \u2026);', '  \u2022 the literal `"list"` for the full catalog grouped by family.', "", "Optional inputs:", '  \u2022 `axes`: optional axis filter (`{ "subPurpose": "private" }`) \u2014 when set, the description shifts to focus on the matched axis.'].join("\n"),
+  description: [
+    "Look up an archetype in the model-archetype catalog. Accepts:",
+    '  \u2022 a slug (`"root-entity"`, `"denormalised-aggregate"`, \u2026);',
+    '  \u2022 the literal `"list"` for the full catalog grouped by family.',
+    "",
+    "Optional inputs:",
+    '  \u2022 `axes`: optional axis filter (`{ "subPurpose": "private" }`) \u2014 when set, the description shifts to focus on the matched axis.'
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -44929,7 +45140,18 @@ function formatStateInteraction(entry) {
   return result;
 }
 function formatDirectiveEntry(entry, depth) {
-  const lines = [`# ${entry.className}`, "", entry.description, "", bullet("selector", `\`${entry.selector}\``), bullet("module", `\`${entry.module}\``), bullet("slug", `\`${entry.slug}\``), bullet("produces context", entry.producesContext ? "yes (provides `ActionContextStore` via DI)" : "no"), bullet("consumes context", entry.consumesContext ? "yes (injects `DbxActionContextStoreSourceInstance`)" : "no"), ""];
+  const lines = [
+    `# ${entry.className}`,
+    "",
+    entry.description,
+    "",
+    bullet("selector", `\`${entry.selector}\``),
+    bullet("module", `\`${entry.module}\``),
+    bullet("slug", `\`${entry.slug}\``),
+    bullet("produces context", entry.producesContext ? "yes (provides `ActionContextStore` via DI)" : "no"),
+    bullet("consumes context", entry.consumesContext ? "yes (injects `DbxActionContextStoreSourceInstance`)" : "no"),
+    ""
+  ];
   if (depth === "full") {
     lines.push("## Inputs", "", entry.inputs.length > 0 ? formatInputsTable2(entry.inputs) : "_No inputs._", "");
     if (entry.outputs.length > 0) {
@@ -45692,7 +45914,15 @@ export class TagEditorComponent {
 };
 
 // packages/dbx-components-mcp/src/tools/data/patterns/action-patterns.ts
-var ACTION_EXAMPLE_PATTERNS = [ACTION_PATTERN_BUTTON_CONFIRM_DELETE, ACTION_PATTERN_FORM_SUBMIT, ACTION_PATTERN_FORM_WITH_SECONDARY, ACTION_PATTERN_AUTO_TRIGGER_ON_MODIFY, ACTION_PATTERN_DISABLED_BY_KEY, ACTION_PATTERN_VALUE_GETTER_ON_TRIGGER, ACTION_PATTERN_PROVIDE_CONTEXT_UP];
+var ACTION_EXAMPLE_PATTERNS = [
+  ACTION_PATTERN_BUTTON_CONFIRM_DELETE,
+  ACTION_PATTERN_FORM_SUBMIT,
+  ACTION_PATTERN_FORM_WITH_SECONDARY,
+  ACTION_PATTERN_AUTO_TRIGGER_ON_MODIFY,
+  ACTION_PATTERN_DISABLED_BY_KEY,
+  ACTION_PATTERN_VALUE_GETTER_ON_TRIGGER,
+  ACTION_PATTERN_PROVIDE_CONTEXT_UP
+];
 function getActionExamplePattern(slug) {
   const lowered = slug.trim().toLowerCase();
   return ACTION_EXAMPLE_PATTERNS.find((p) => p.slug === lowered);
@@ -46016,7 +46246,27 @@ function renderScaffold3(args) {
   const directivesUsed = buildDirectivesUsed(args);
   const examplePattern = relatedExamplePattern(args);
   const lines = [];
-  lines.push(`# Action scaffold \u2014 ${args.useCase}`, "", `Trigger: \`${args.trigger}\` \xB7 Confirm: \`${args.confirm}\` \xB7 Success feedback: \`${args.successFeedback}\` \xB7 Context: \`${args.contextProvider}\``, "", "## Template", "", "```html", template, "```", "", "## Component class", "", "```ts", handler, "```", "", "## Imports", "", "```ts");
+  lines.push(
+    `# Action scaffold \u2014 ${args.useCase}`,
+    "",
+    `Trigger: \`${args.trigger}\` \xB7 Confirm: \`${args.confirm}\` \xB7 Success feedback: \`${args.successFeedback}\` \xB7 Context: \`${args.contextProvider}\``,
+    "",
+    "## Template",
+    "",
+    "```html",
+    template,
+    "```",
+    "",
+    "## Component class",
+    "",
+    "```ts",
+    handler,
+    "```",
+    "",
+    "## Imports",
+    "",
+    "```ts"
+  );
   for (const line of imports) {
     lines.push(line);
   }
@@ -46460,7 +46710,13 @@ function formatMissingRouteModelLine(param) {
 // packages/dbx-components-mcp/src/tools/route-lookup.tool.ts
 var DBX_ROUTE_LOOKUP_TOOL = {
   name: "dbx_route_lookup",
-  description: ["Look up a single UIRouter state by name, full URL, or component class name. Returns the state's URL, component, parent chain, params, resolves, siblings, and children.", "", "Provide at least one of `sources` / `paths` / `glob` to point the tool at the source set, plus a `topic`.", "", "Resolution order: exact state name \u2192 URL path \u2192 component class name \u2192 fuzzy substring (returns up to 5 candidates)."].join("\n"),
+  description: [
+    "Look up a single UIRouter state by name, full URL, or component class name. Returns the state's URL, component, parent chain, params, resolves, siblings, and children.",
+    "",
+    "Provide at least one of `sources` / `paths` / `glob` to point the tool at the source set, plus a `topic`.",
+    "",
+    "Resolution order: exact state name \u2192 URL path \u2192 component class name \u2192 fuzzy substring (returns up to 5 candidates)."
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -46720,7 +46976,11 @@ var ROUTE_LOOKUP_TOOL = {
 import { type as type82 } from "arktype";
 var DBX_ROUTE_SEARCH_TOOL = {
   name: "dbx_route_search",
-  description: ["Search the UIRouter state tree of a dbx-components app. Matches against state names, full URLs, component class names, resolve keys, and source-file paths. Returns the top 10 results with state name, URL, component, and source location.", "", "Provide at least one of `sources` / `paths` / `glob` plus a `query`. `scope` narrows to a single axis (`name`, `url`, `component`, `resolve`)."].join("\n"),
+  description: [
+    "Search the UIRouter state tree of a dbx-components app. Matches against state names, full URLs, component class names, resolve keys, and source-file paths. Returns the top 10 results with state name, URL, component, and source location.",
+    "",
+    "Provide at least one of `sources` / `paths` / `glob` plus a `query`. `scope` narrows to a single axis (`name`, `url`, `component`, `resolve`)."
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -47812,7 +48072,25 @@ function formatScaffold2(args) {
   if (args.presetKeys.length > 0) {
     lines.push("## Presets", "", "```ts", renderPresetConstants(args), "```", "");
   }
-  lines.push("## Template", "", "```html", renderTemplate(args), "```", "", "## Component class", "", "```ts", ...renderImports(args), "", renderClass(args), "```", "", "## Notes", "", "- The outer `[dbxFilterSourceConnector]` provides both `FilterSource` and `FilterSourceConnector`. Children that own the form use `[dbxFilterSource]` + `[dbxFilterConnectSource]` to wire up.");
+  lines.push(
+    "## Template",
+    "",
+    "```html",
+    renderTemplate(args),
+    "```",
+    "",
+    "## Component class",
+    "",
+    "```ts",
+    ...renderImports(args),
+    "",
+    renderClass(args),
+    "```",
+    "",
+    "## Notes",
+    "",
+    "- The outer `[dbxFilterSourceConnector]` provides both `FilterSource` and `FilterSourceConnector`. Children that own the form use `[dbxFilterSource]` + `[dbxFilterConnectSource]` to wire up."
+  );
   if (args.presetKeys.length > 0) {
     lines.push("- Each `ClickableFilterPreset` listed in the preset array becomes a chip; clicking sets `presetValue` on the filter source.");
   }
@@ -47879,7 +48157,20 @@ function formatArgsTable(args) {
   return lines.join("\n");
 }
 function formatEntry4(entry, depth) {
-  const lines = [`# ${entry.className}`, "", entry.description, "", bullet3("slug", `\`${entry.slug}\``), bullet3("pipe", `\`${entry.pipeName}\``), bullet3("category", `\`${entry.category}\``), bullet3("purity", `\`${entry.purity}\``), bullet3("input", `\`${entry.inputType}\``), bullet3("output", `\`${entry.outputType}\``), bullet3("module", `\`${entry.module}\``), ""];
+  const lines = [
+    `# ${entry.className}`,
+    "",
+    entry.description,
+    "",
+    bullet3("slug", `\`${entry.slug}\``),
+    bullet3("pipe", `\`${entry.pipeName}\``),
+    bullet3("category", `\`${entry.category}\``),
+    bullet3("purity", `\`${entry.purity}\``),
+    bullet3("input", `\`${entry.inputType}\``),
+    bullet3("output", `\`${entry.outputType}\``),
+    bullet3("module", `\`${entry.module}\``),
+    ""
+  ];
   if (depth === "full") {
     if (entry.args.length > 0) {
       lines.push("## Args", "", formatArgsTable(entry.args), "");
@@ -48041,7 +48332,20 @@ function formatSearchResults5(input) {
   const lines = [`# Search: \`${query}\``, "", `Tokens: \`${tokenDisplay}\` \xB7 ${hits.length} result${hits.length === 1 ? "" : "s"}`, ""];
   for (const hit of hits) {
     const entry = hit.entry;
-    lines.push(`## \`${entry.slug}\` \xB7 ${entry.category} \xB7 score ${hit.score}`, "", `- **pipe:** \`${entry.pipeName}\``, `- **class:** \`${entry.className}\``, `- **input:** \`${entry.inputType}\``, `- **output:** \`${entry.outputType}\``, `- **matched:** \`${hit.matchedTokens.join(", ")}\``, "", entry.description, "", `\u2192 \`dbx_pipe_lookup topic="${entry.slug}"\` for full docs.`, "");
+    lines.push(
+      `## \`${entry.slug}\` \xB7 ${entry.category} \xB7 score ${hit.score}`,
+      "",
+      `- **pipe:** \`${entry.pipeName}\``,
+      `- **class:** \`${entry.className}\``,
+      `- **input:** \`${entry.inputType}\``,
+      `- **output:** \`${entry.outputType}\``,
+      `- **matched:** \`${hit.matchedTokens.join(", ")}\``,
+      "",
+      entry.description,
+      "",
+      `\u2192 \`dbx_pipe_lookup topic="${entry.slug}"\` for full docs.`,
+      ""
+    );
   }
   return lines.join("\n").trimEnd();
 }
@@ -48317,7 +48621,20 @@ function formatCatalogHit(input) {
   const tagDisplay = entry.tags.length > 0 ? `
 - **tags:** ${tagBadges}` : "";
   const badge = options.headerBadge ?? "";
-  return [`## \`${entry.slug}\` \xB7 \`${entry.name}\` \xB7 ${entry.kind}${badge} \xB7 score ${hit.score}`, "", `- **module:** \`${entry.module}\``, `- **category:** \`${entry.category}\``, `- **subpath:** \`${entry.subpath}\``, `- **signature:** \`${entry.signature}\``, `- **matched:** \`${hit.matchedTokens.join(", ")}\`${tagDisplay}`, "", entry.description.split("\n")[0], "", `\u2192 \`${options.lookupTool} topic="${entry.slug}"\` for full docs.`, ""];
+  return [
+    `## \`${entry.slug}\` \xB7 \`${entry.name}\` \xB7 ${entry.kind}${badge} \xB7 score ${hit.score}`,
+    "",
+    `- **module:** \`${entry.module}\``,
+    `- **category:** \`${entry.category}\``,
+    `- **subpath:** \`${entry.subpath}\``,
+    `- **signature:** \`${entry.signature}\``,
+    `- **matched:** \`${hit.matchedTokens.join(", ")}\`${tagDisplay}`,
+    "",
+    entry.description.split("\n")[0],
+    "",
+    `\u2192 \`${options.lookupTool} topic="${entry.slug}"\` for full docs.`,
+    ""
+  ];
 }
 function formatCatalogSearchResults(input) {
   const { query, tokens, hits, filters, entityLabel, emptyHint, hitOptions } = input;
@@ -48493,7 +48810,20 @@ function appendFullEntrySections2(lines, entry) {
 }
 function formatEntry6(entry, depth) {
   const heading = `# ${entry.name}`;
-  const lines = [heading, "", entry.description, "", bullet5("slug", `\`${entry.slug}\``), bullet5("kind", `\`${entry.kind}\``), bullet5("category", `\`${entry.category}\``), bullet5("module", `\`${entry.module}\``), bullet5("subpath", `\`${entry.subpath}\``), bullet5("optional", entry.optional ? "yes (use this for `Maybe<T>` fields)" : "no (required)"), bullet5("signature", `\`${entry.signature}\``), ""];
+  const lines = [
+    heading,
+    "",
+    entry.description,
+    "",
+    bullet5("slug", `\`${entry.slug}\``),
+    bullet5("kind", `\`${entry.kind}\``),
+    bullet5("category", `\`${entry.category}\``),
+    bullet5("module", `\`${entry.module}\``),
+    bullet5("subpath", `\`${entry.subpath}\``),
+    bullet5("optional", entry.optional ? "yes (use this for `Maybe<T>` fields)" : "no (required)"),
+    bullet5("signature", `\`${entry.signature}\``),
+    ""
+  ];
   appendDeprecationNotice2(lines, entry);
   if (depth === "full") {
     appendFullEntrySections2(lines, entry);
@@ -49823,7 +50153,14 @@ function appendTaggedSections(lines, tagged) {
 }
 function appendUntaggedSection(lines, untagged) {
   if (untagged.length === 0) return;
-  lines.push("## Untagged candidates", "", "Exported functions returning `FirestoreQueryConstraint[]` without an `@dbxModelFirebaseIndex` block. Tag them so the validator can verify their indexes \u2014 or annotate with `@dbxModelFirebaseIndexSkip` to record that they were considered.", "", "| Function | File |", "| --- | --- |");
+  lines.push(
+    "## Untagged candidates",
+    "",
+    "Exported functions returning `FirestoreQueryConstraint[]` without an `@dbxModelFirebaseIndex` block. Tag them so the validator can verify their indexes \u2014 or annotate with `@dbxModelFirebaseIndexSkip` to record that they were considered.",
+    "",
+    "| Function | File |",
+    "| --- | --- |"
+  );
   for (const candidate of untagged) {
     lines.push(`| \`${candidate.name}\` | \`${candidate.subpath}:${candidate.line}\` |`);
   }
@@ -50523,7 +50860,14 @@ function formatReportAsMarkdown17(report) {
   } else {
     lines.push("## \u2705 In sync", "");
   }
-  lines.push(`- generated composites: ${report.generatedComposites}`, `- existing composites: ${report.existingComposites}`, `- generated fieldOverrides: ${report.generatedFieldOverrides}`, `- existing fieldOverrides: ${report.existingFieldOverrides}`, `- ${report.errorCount} error(s), ${report.warningCount} warning(s)`, "");
+  lines.push(
+    `- generated composites: ${report.generatedComposites}`,
+    `- existing composites: ${report.existingComposites}`,
+    `- generated fieldOverrides: ${report.generatedFieldOverrides}`,
+    `- existing fieldOverrides: ${report.existingFieldOverrides}`,
+    `- ${report.errorCount} error(s), ${report.warningCount} warning(s)`,
+    ""
+  );
   if (report.violations.length > 0) {
     appendViolationSection(
       lines,
@@ -50941,7 +51285,10 @@ function renderStorageFilePurpose(input, ctx) {
     tokens: ctx.tokens,
     files: [componentFile, handlerFile],
     wiring,
-    summary: applyTokens(`Scaffolds a new \`<<SCREAMING>>_PURPOSE\` storage-file purpose end-to-end: component-side constants + path helpers (append to \`storagefile.ts\`) and an API-side upload-initializer factory in \`handlers/\`. After applying, run \`dbx_validate_app_storagefiles\` and \`dbx_validate_storagefile_folder\` against your project \u2014 both should PASS.`, ctx)
+    summary: applyTokens(
+      `Scaffolds a new \`<<SCREAMING>>_PURPOSE\` storage-file purpose end-to-end: component-side constants + path helpers (append to \`storagefile.ts\`) and an API-side upload-initializer factory in \`handlers/\`. After applying, run \`dbx_validate_app_storagefiles\` and \`dbx_validate_storagefile_folder\` against your project \u2014 both should PASS.`,
+      ctx
+    )
   };
   return result;
 }
@@ -50949,19 +51296,28 @@ function renderNotificationTemplate(input, ctx) {
   const componentFile = {
     status: "append",
     path: applyTokens("<<componentDir>>/src/lib/model/notification/notification.ts", ctx),
-    description: applyTokens(`Append the \`<<Pascal>>\` notification block to \`notification.ts\`: type constant + info + data interface + template factory. Reuses the file's existing imports \u2014 no new top-level imports required as long as \`NotificationTemplateType\`, \`NotificationTemplateTypeInfo\`, \`CreateNotificationTemplate\`, \`createNotificationTemplate\`, \`FirebaseAuthUserId\`, \`profileIdentity\`, and \`ProfileDocument\` are already in scope.`, ctx),
+    description: applyTokens(
+      `Append the \`<<Pascal>>\` notification block to \`notification.ts\`: type constant + info + data interface + template factory. Reuses the file's existing imports \u2014 no new top-level imports required as long as \`NotificationTemplateType\`, \`NotificationTemplateTypeInfo\`, \`CreateNotificationTemplate\`, \`createNotificationTemplate\`, \`FirebaseAuthUserId\`, \`profileIdentity\`, and \`ProfileDocument\` are already in scope.`,
+      ctx
+    ),
     content: applyTokens(NOTIFICATION_TEMPLATE_COMPONENT_TEMPLATE, ctx)
   };
   const factoryFile = {
     status: "append",
     path: applyTokens("<<apiDir>>/src/app/common/model/notification/notification.factory.ts", ctx),
-    description: applyTokens(`Append the \`<<appCamel>><<Pascal>>NotificationFactory\` to \`notification.factory.ts\`. Reuses the file's existing imports for \`NotificationMessageFunctionFactoryConfig\`, \`NotificationMessageInputContext\`, \`NotificationMessageContent\`, \`NotificationMessage\`, \`notificationMessageFunction\`, and \`NotificationTemplateServiceTypeConfig\`.`, ctx),
+    description: applyTokens(
+      `Append the \`<<appCamel>><<Pascal>>NotificationFactory\` to \`notification.factory.ts\`. Reuses the file's existing imports for \`NotificationMessageFunctionFactoryConfig\`, \`NotificationMessageInputContext\`, \`NotificationMessageContent\`, \`NotificationMessage\`, \`notificationMessageFunction\`, and \`NotificationTemplateServiceTypeConfig\`.`,
+      ctx
+    ),
     content: applyTokens(NOTIFICATION_TEMPLATE_FACTORY_TEMPLATE, ctx)
   };
   const wiring = [
     {
       file: applyTokens("<<apiDir>>/src/app/common/model/notification/notification.factory.ts", ctx),
-      description: applyTokens(`Two registrations are required: (1) add a call to \`<<appCamel>><<Pascal>>NotificationFactory(context)\` in the existing configs-array factory return list (so the handler is reachable through the template service); (2) add \`<<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE_INFO\` to the \`*_NOTIFICATION_TEMPLATE_TYPE_INFO_RECORD\` aggregator in \`notification.ts\` so the metadata path is wired.`, ctx),
+      description: applyTokens(
+        `Two registrations are required: (1) add a call to \`<<appCamel>><<Pascal>>NotificationFactory(context)\` in the existing configs-array factory return list (so the handler is reachable through the template service); (2) add \`<<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE_INFO\` to the \`*_NOTIFICATION_TEMPLATE_TYPE_INFO_RECORD\` aggregator in \`notification.ts\` so the metadata path is wired.`,
+        ctx
+      ),
       snippet: applyTokens(NOTIFICATION_TEMPLATE_WIRING_SNIPPET, ctx)
     }
   ];
@@ -50970,7 +51326,10 @@ function renderNotificationTemplate(input, ctx) {
     tokens: ctx.tokens,
     files: [componentFile, factoryFile],
     wiring,
-    summary: applyTokens(`Scaffolds a new \`<<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE\` end-to-end: component-side type + info + data + template factory (append to \`notification.ts\`) and an API-side template-service factory (append to \`notification.factory.ts\`). After applying the wiring, run \`dbx_notification_m_validate_app\` and \`dbx_notification_m_validate_folder\` against your project \u2014 both should PASS.`, ctx)
+    summary: applyTokens(
+      `Scaffolds a new \`<<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE\` end-to-end: component-side type + info + data + template factory (append to \`notification.ts\`) and an API-side template-service factory (append to \`notification.factory.ts\`). After applying the wiring, run \`dbx_notification_m_validate_app\` and \`dbx_notification_m_validate_folder\` against your project \u2014 both should PASS.`,
+      ctx
+    )
   };
   return result;
 }
@@ -50995,7 +51354,10 @@ function renderNotificationTask(input, ctx) {
   const wiring = [
     {
       file: applyTokens("<<apiDir>>/src/app/common/model/notification/notification.task.service.ts", ctx),
-      description: applyTokens(`Import the new factory, instantiate it bound to \`<<camel>>Handler\`, push that name into the existing \`handlers\` array, and add \`<<SCREAMING>>_NOTIFICATION_TASK_TYPE\` to the \`ALL_NOTIFICATION_TASK_TYPES\` aggregate in the component package's \`notification.task.ts\` so the validate-vs-handler parity check stays consistent.`, ctx),
+      description: applyTokens(
+        `Import the new factory, instantiate it bound to \`<<camel>>Handler\`, push that name into the existing \`handlers\` array, and add \`<<SCREAMING>>_NOTIFICATION_TASK_TYPE\` to the \`ALL_NOTIFICATION_TASK_TYPES\` aggregate in the component package's \`notification.task.ts\` so the validate-vs-handler parity check stays consistent.`,
+        ctx
+      ),
       snippet: applyTokens(NOTIFICATION_TASK_WIRING_SNIPPET, ctx)
     }
   ];
@@ -51004,7 +51366,10 @@ function renderNotificationTask(input, ctx) {
     tokens: ctx.tokens,
     files: [componentFile, handlerFile],
     wiring,
-    summary: applyTokens(`Scaffolds a new \`<<SCREAMING>>_NOTIFICATION_TASK_TYPE\` end-to-end: component-side type + checkpoint alias + data + template factory (append to \`notification.task.ts\`) and an API-side handler factory in \`handlers/\`. After applying the wiring (handlers array + ALL_NOTIFICATION_TASK_TYPES), run \`dbx_notification_m_validate_app\` and \`dbx_notification_m_validate_folder\` against your project \u2014 both should PASS.`, ctx)
+    summary: applyTokens(
+      `Scaffolds a new \`<<SCREAMING>>_NOTIFICATION_TASK_TYPE\` end-to-end: component-side type + checkpoint alias + data + template factory (append to \`notification.task.ts\`) and an API-side handler factory in \`handlers/\`. After applying the wiring (handlers array + ALL_NOTIFICATION_TASK_TYPES), run \`dbx_notification_m_validate_app\` and \`dbx_notification_m_validate_folder\` against your project \u2014 both should PASS.`,
+      ctx
+    )
   };
   return result;
 }
@@ -51269,7 +51634,11 @@ var STORAGEFILE_PURPOSE = {
       heading: "API upload handler",
       path: "<apiDir>/src/app/common/model/storagefile/handlers/upload.<name>.ts",
       altPaths: ["Inline in `<apiDir>/src/app/common/model/storagefile/storagefile.upload.service.ts` for tiny workspaces."],
-      body: ["**Required export:** `<camelName>StorageFileUploadInitializers(context): StorageFileInitializeFromUploadServiceInitializer[]`.", "", "**Wire into:** `<apiDir>/src/app/common/model/storagefile/storagefile.upload.service.ts` \u2014 spread into the `initializer: [...]` array passed to `storageFileInitializeFromUploadService({ initializer })`."].join("\n")
+      body: [
+        "**Required export:** `<camelName>StorageFileUploadInitializers(context): StorageFileInitializeFromUploadServiceInitializer[]`.",
+        "",
+        "**Wire into:** `<apiDir>/src/app/common/model/storagefile/storagefile.upload.service.ts` \u2014 spread into the `initializer: [...]` array passed to `storageFileInitializeFromUploadService({ initializer })`."
+      ].join("\n")
     },
     {
       heading: "API processor (only if subtasks declared)",
@@ -51331,12 +51700,27 @@ var STORAGEFILE_PROCESSOR = {
     {
       heading: "API processor handler",
       path: "<apiDir>/src/app/common/model/notification/handlers/storagefile/task.handler.storagefile.<name>.ts",
-      body: ["**Required shape:**", "```ts", "export function <camelName>ProcessingNotificationTaskHandler(context): StorageFileProcessingPurposeSubtaskProcessorConfig<<Name>SubtaskMetadata, <Name>ProcessingSubtask> {", "  const config: StorageFileProcessingPurposeSubtaskProcessorConfig<...> = {", "    target: <NAME>_PURPOSE,", "    flow: [", "      { subtask: <NAME>_PURPOSE_<DESC>_SUBTASK, fn: async (input) => ... }", "    ]", "  };", "  return config;", "}", "```"].join("\n")
+      body: [
+        "**Required shape:**",
+        "```ts",
+        "export function <camelName>ProcessingNotificationTaskHandler(context): StorageFileProcessingPurposeSubtaskProcessorConfig<<Name>SubtaskMetadata, <Name>ProcessingSubtask> {",
+        "  const config: StorageFileProcessingPurposeSubtaskProcessorConfig<...> = {",
+        "    target: <NAME>_PURPOSE,",
+        "    flow: [",
+        "      { subtask: <NAME>_PURPOSE_<DESC>_SUBTASK, fn: async (input) => ... }",
+        "    ]",
+        "  };",
+        "  return config;",
+        "}",
+        "```"
+      ].join("\n")
     },
     {
       heading: "Wire into processing handler",
       path: "<apiDir>/src/app/common/model/notification/handlers/task.handler.storagefile.ts",
-      body: ["Push the new processor config into the `processors: [...]` array passed to `storageFileProcessingNotificationTaskHandler({ processors })`. The surrounding handler is itself wired into `notificationTaskService({ handlers })` \u2014 already covered by the notification-task plumbing, so no further wiring needed here."].join("\n")
+      body: [
+        "Push the new processor config into the `processors: [...]` array passed to `storageFileProcessingNotificationTaskHandler({ processors })`. The surrounding handler is itself wired into `notificationTaskService({ handlers })` \u2014 already covered by the notification-task plumbing, so no further wiring needed here."
+      ].join("\n")
     }
   ],
   seeAlso: ["storagefile-purpose", "storagefile-processor-subtask", "notification-task"],
@@ -51350,7 +51734,12 @@ var STORAGEFILE_PROCESSOR_SUBTASK = {
     {
       heading: "Component declarations",
       path: "<componentDir>/src/lib/model/storagefile/storagefile.<name>.ts (the file that already declares the purpose)",
-      body: ["**Add:**", "- `<NAME>_PURPOSE_<DESC>_SUBTASK: StorageFileProcessingSubtask = '<descriptor>'` \u2014 the new subtask constant.", "- Extend the `<Name>ProcessingSubtask` union alias: `typeof <NAME>_PURPOSE_<DESC>_SUBTASK | ...existing`.", "- Optional: extend `<Name>ProcessingSubtaskMetadata` with any new fields the new subtask needs."].join("\n")
+      body: [
+        "**Add:**",
+        "- `<NAME>_PURPOSE_<DESC>_SUBTASK: StorageFileProcessingSubtask = '<descriptor>'` \u2014 the new subtask constant.",
+        "- Extend the `<Name>ProcessingSubtask` union alias: `typeof <NAME>_PURPOSE_<DESC>_SUBTASK | ...existing`.",
+        "- Optional: extend `<Name>ProcessingSubtaskMetadata` with any new fields the new subtask needs."
+      ].join("\n")
     },
     {
       heading: "API processor flow",
@@ -51382,13 +51771,19 @@ var NOTIFICATION_TEMPLATE = {
     {
       heading: "Component aggregator",
       path: "<componentDir>/src/lib/model/notification/notification.ts",
-      body: ["Add the new info to the call to `notificationTemplateTypeInfoRecord([...])` \u2014 either as a direct entry (`<NAME>_NOTIFICATION_TEMPLATE_TYPE_INFO`) or via a spread of the module aggregate (`...ALL_<MODULE>_NOTIFICATION_TEMPLATE_TYPE_INFOS`). The result constant is typically `<APP>_FIREBASE_NOTIFICATION_TEMPLATE_TYPE_INFO_RECORD`."].join("\n")
+      body: [
+        "Add the new info to the call to `notificationTemplateTypeInfoRecord([...])` \u2014 either as a direct entry (`<NAME>_NOTIFICATION_TEMPLATE_TYPE_INFO`) or via a spread of the module aggregate (`...ALL_<MODULE>_NOTIFICATION_TEMPLATE_TYPE_INFOS`). The result constant is typically `<APP>_FIREBASE_NOTIFICATION_TEMPLATE_TYPE_INFO_RECORD`."
+      ].join("\n")
     },
     {
       heading: "API handler factory",
       path: "<apiDir>/src/app/common/model/notification/notification.factory.ts",
       altPaths: ["<apiDir>/src/app/common/model/notification/notification.factory.<name>.ts (split per-template for larger workspaces)"],
-      body: ["**Required export:** A factory function returning a `NotificationTemplateServiceTypeConfig` with `{ type: <NAME>_NOTIFICATION_TEMPLATE_TYPE, factory: async (...) => ... }`.", "", "**Wire into:** the top-level `<app>NotificationTemplateServiceConfigsArrayFactory(context)` \u2014 call the new factory inside its returned array. The configs-array factory is itself bound via `NOTIFICATION_TEMPLATE_SERVICE_CONFIGS_ARRAY_TOKEN` in the notification module."].join("\n")
+      body: [
+        "**Required export:** A factory function returning a `NotificationTemplateServiceTypeConfig` with `{ type: <NAME>_NOTIFICATION_TEMPLATE_TYPE, factory: async (...) => ... }`.",
+        "",
+        "**Wire into:** the top-level `<app>NotificationTemplateServiceConfigsArrayFactory(context)` \u2014 call the new factory inside its returned array. The configs-array factory is itself bound via `NOTIFICATION_TEMPLATE_SERVICE_CONFIGS_ARRAY_TOKEN` in the notification module."
+      ].join("\n")
     }
   ],
   seeAlso: ["notification-task"],
@@ -51417,7 +51812,17 @@ var NOTIFICATION_TASK = {
       heading: "API handler config",
       path: "<apiDir>/src/app/common/model/notification/notification.task.service.ts",
       altPaths: ["<apiDir>/src/app/common/model/notification/handlers/task.handler.<name>.ts (per-task split for larger workspaces)"],
-      body: ["**Required shape:**", "```ts", "const <camelName>NotificationTaskHandler: NotificationTaskServiceTaskHandlerConfig<<Name>NotificationTaskData, <Name>NotificationTaskCheckpoint> = {", "  type: <NAME>_NOTIFICATION_TASK_TYPE,", "  flow: [", "    { checkpoint: 'part_a', fn: async (notificationTask) => ... }", "  ]", "};", "```"].join("\n")
+      body: [
+        "**Required shape:**",
+        "```ts",
+        "const <camelName>NotificationTaskHandler: NotificationTaskServiceTaskHandlerConfig<<Name>NotificationTaskData, <Name>NotificationTaskCheckpoint> = {",
+        "  type: <NAME>_NOTIFICATION_TASK_TYPE,",
+        "  flow: [",
+        "    { checkpoint: 'part_a', fn: async (notificationTask) => ... }",
+        "  ]",
+        "};",
+        "```"
+      ].join("\n")
     },
     {
       heading: "Wire into task service",
@@ -52340,7 +52745,12 @@ function formatFirestoreRulesScanReportAsMarkdown(report) {
   }
   lines.push("");
   if (report.serverOnly.length > 0) {
-    lines.push(`**Server-only (${report.serverOnly.length}):** ${report.serverOnly.map((c) => `\`${c}\``).join(", ")}`, "", "Each of these must carry `@dbxModelServerOnly` on its model interface AND `serverOnly: true` on its `firebaseModelServiceFactory` config, so the model API refuses the read instead of authorizing it via `roleMapForModel`.", "");
+    lines.push(
+      `**Server-only (${report.serverOnly.length}):** ${report.serverOnly.map((c) => `\`${c}\``).join(", ")}`,
+      "",
+      "Each of these must carry `@dbxModelServerOnly` on its model interface AND `serverOnly: true` on its `firebaseModelServiceFactory` config, so the model API refuses the read instead of authorizing it via `roleMapForModel`.",
+      ""
+    );
   }
   if (report.gettableNotListable.length > 0) {
     lines.push(`**Gettable but not listable (${report.gettableNotListable.length}):** ${report.gettableNotListable.map((c) => `\`${c}\``).join(", ")}`, "", "`firestore-get` works on these; `firestore-query` does not \u2014 the rules grant reads by id only.", "");
@@ -52578,7 +52988,15 @@ function validateModelServerOnly(input) {
   }
   for (const iface of input.interfaces) {
     if (iface.serverOnly && !iface.hasModelTag) {
-      violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_TAG_WITHOUT_MODEL_TAG" /* MODEL_SERVER_ONLY_TAG_WITHOUT_MODEL_TAG */, severity: "warning", modelType: void 0, file: iface.file, message: `Interface \`${iface.name}\` carries \`@dbxModelServerOnly\` but no \`@dbxModel\` tag, so the model extractor skips it and \`serverOnly\` never lands on the generated model manifest.` }));
+      violations.push(
+        buildViolation({
+          code: "MODEL_SERVER_ONLY_TAG_WITHOUT_MODEL_TAG" /* MODEL_SERVER_ONLY_TAG_WITHOUT_MODEL_TAG */,
+          severity: "warning",
+          modelType: void 0,
+          file: iface.file,
+          message: `Interface \`${iface.name}\` carries \`@dbxModelServerOnly\` but no \`@dbxModel\` tag, so the model extractor skips it and \`serverOnly\` never lands on the generated model manifest.`
+        })
+      );
     }
   }
   const errorCount = violations.filter((v) => v.severity === "error").length;
@@ -52600,22 +53018,78 @@ function appendServiceViolations(input) {
   const { modelType, collection, tag, flag, rules } = reconciliation;
   const declared = tag === true || flag;
   if (collection == null) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_UNRESOLVED_IDENTITY" /* MODEL_SERVER_ONLY_UNRESOLVED_IDENTITY */, severity: "warning", modelType, file: service.exportName, message: `No \`firestoreModelIdentity(...)\` for model type \`${modelType}\` was found in the scanned dirs, so its collection name \u2014 and therefore the rules leg of the reconciliation \u2014 could not be resolved.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_UNRESOLVED_IDENTITY" /* MODEL_SERVER_ONLY_UNRESOLVED_IDENTITY */,
+        severity: "warning",
+        modelType,
+        file: service.exportName,
+        message: `No \`firestoreModelIdentity(...)\` for model type \`${modelType}\` was found in the scanned dirs, so its collection name \u2014 and therefore the rules leg of the reconciliation \u2014 could not be resolved.`
+      })
+    );
   } else if (rules === true && !flag) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_MISSING_RUNTIME_FLAG" /* MODEL_SERVER_ONLY_MISSING_RUNTIME_FLAG */, severity: "error", modelType, file: service.exportName, message: `\`${collection}\` has no client read grant in the rules (get=${reconciliation.rulesGet}, list=${reconciliation.rulesList}) but \`${service.exportName}\` does not set \`serverOnly: true\`, so the model API will hand a client a document the rules would refuse.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_MISSING_RUNTIME_FLAG" /* MODEL_SERVER_ONLY_MISSING_RUNTIME_FLAG */,
+        severity: "error",
+        modelType,
+        file: service.exportName,
+        message: `\`${collection}\` has no client read grant in the rules (get=${reconciliation.rulesGet}, list=${reconciliation.rulesList}) but \`${service.exportName}\` does not set \`serverOnly: true\`, so the model API will hand a client a document the rules would refuse.`
+      })
+    );
   } else if (rules === false && declared) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_RULES_ALLOW_READ" /* MODEL_SERVER_ONLY_RULES_ALLOW_READ */, severity: "error", modelType, file: service.exportName, message: `\`${modelType}\` declares server-only (${describeDeclarations(tag, flag)}) but \`${collection}\` IS client-readable in the rules (get=${reconciliation.rulesGet}, list=${reconciliation.rulesList}).` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_RULES_ALLOW_READ" /* MODEL_SERVER_ONLY_RULES_ALLOW_READ */,
+        severity: "error",
+        modelType,
+        file: service.exportName,
+        message: `\`${modelType}\` declares server-only (${describeDeclarations(tag, flag)}) but \`${collection}\` IS client-readable in the rules (get=${reconciliation.rulesGet}, list=${reconciliation.rulesList}).`
+      })
+    );
   }
   if (rules === true && iface != null && !iface.serverOnly) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_MISSING_TAG" /* MODEL_SERVER_ONLY_MISSING_TAG */, severity: "warning", modelType, file: iface.file, message: `\`${collection}\` has no client read grant in the rules but interface \`${iface.name}\` has no \`@dbxModelServerOnly\` tag, so the CLI cannot refuse the read locally.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_MISSING_TAG" /* MODEL_SERVER_ONLY_MISSING_TAG */,
+        severity: "warning",
+        modelType,
+        file: iface.file,
+        message: `\`${collection}\` has no client read grant in the rules but interface \`${iface.name}\` has no \`@dbxModelServerOnly\` tag, so the CLI cannot refuse the read locally.`
+      })
+    );
   }
   if (iface == null && flag) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_NO_INTERFACE" /* MODEL_SERVER_ONLY_NO_INTERFACE */, severity: "warning", modelType, file: service.exportName, message: `\`${modelType}\` sets \`serverOnly: true\` but its data type \`${service.modelName ?? "(unknown)"}\` resolves to no interface in the scanned dirs, so there is nothing to carry \`@dbxModelServerOnly\`.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_NO_INTERFACE" /* MODEL_SERVER_ONLY_NO_INTERFACE */,
+        severity: "warning",
+        modelType,
+        file: service.exportName,
+        message: `\`${modelType}\` sets \`serverOnly: true\` but its data type \`${service.modelName ?? "(unknown)"}\` resolves to no interface in the scanned dirs, so there is nothing to carry \`@dbxModelServerOnly\`.`
+      })
+    );
   } else if (iface != null && tag !== flag) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_TAG_FLAG_MISMATCH" /* MODEL_SERVER_ONLY_TAG_FLAG_MISMATCH */, severity: "error", modelType, file: iface.file, message: `\`${modelType}\`: interface \`${iface.name}\` ${tag === true ? "carries" : "does NOT carry"} \`@dbxModelServerOnly\` while \`${service.exportName}\` ${flag ? "DOES" : "does not"} set \`serverOnly: true\`.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_TAG_FLAG_MISMATCH" /* MODEL_SERVER_ONLY_TAG_FLAG_MISMATCH */,
+        severity: "error",
+        modelType,
+        file: iface.file,
+        message: `\`${modelType}\`: interface \`${iface.name}\` ${tag === true ? "carries" : "does NOT carry"} \`@dbxModelServerOnly\` while \`${service.exportName}\` ${flag ? "DOES" : "does not"} set \`serverOnly: true\`.`
+      })
+    );
   }
   if (manifestModelTypes != null && declared && !manifestModelTypes.has(modelType)) {
-    violations.push(buildViolation({ code: "MODEL_SERVER_ONLY_NOT_IN_MANIFEST" /* MODEL_SERVER_ONLY_NOT_IN_MANIFEST */, severity: "warning", modelType, file: manifestFile, message: `\`${modelType}\` is server-only but has no entry in the generated model manifest, so the CLI's local pre-transport refusal cannot fire for it \u2014 the read costs a round-trip to an API that refuses it.` }));
+    violations.push(
+      buildViolation({
+        code: "MODEL_SERVER_ONLY_NOT_IN_MANIFEST" /* MODEL_SERVER_ONLY_NOT_IN_MANIFEST */,
+        severity: "warning",
+        modelType,
+        file: manifestFile,
+        message: `\`${modelType}\` is server-only but has no entry in the generated model manifest, so the CLI's local pre-transport refusal cannot fire for it \u2014 the read costs a round-trip to an API that refuses it.`
+      })
+    );
   }
 }
 function legsAgree(input) {
@@ -52724,7 +53198,6 @@ async function walkTypeScriptFiles(dir) {
   try {
     entries = (await readdir12(dir)).sort();
   } catch {
-    return out;
   }
   for (const entry of entries) {
     if (entry === "node_modules" || entry === "dist") continue;
@@ -55739,7 +56212,13 @@ async function tryReadBatchPath(path, cwd, reader) {
 import { type as type104 } from "arktype";
 var DBX_AUTH_CLAIM_LOOKUP_TOOL = {
   name: "dbx_auth_claim_lookup",
-  description: ["Look up a Firebase Auth custom-claim entry by key (`a`, `o`, `fr`) or by `*ApiAuthClaims` interface name (`DemoApiAuthClaims`).", "", "Returns the claim meaning, value type, role mapping through `authRoleClaimsService`, owning app + interface, and the source path:line where the claim is declared.", "", "Use the optional `app` parameter (`demo-api`) to scope the lookup when the same claim key exists in multiple apps."].join("\n"),
+  description: [
+    "Look up a Firebase Auth custom-claim entry by key (`a`, `o`, `fr`) or by `*ApiAuthClaims` interface name (`DemoApiAuthClaims`).",
+    "",
+    "Returns the claim meaning, value type, role mapping through `authRoleClaimsService`, owning app + interface, and the source path:line where the claim is declared.",
+    "",
+    "Use the optional `app` parameter (`demo-api`) to scope the lookup when the same claim key exists in multiple apps."
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -55962,7 +56441,14 @@ function sourceLink2(path, line) {
 import { type as type106 } from "arktype";
 var DBX_AUTH_ROLE_LOOKUP_TOOL = {
   name: "dbx_auth_role_lookup",
-  description: ["Look up auth roles forward (by role string / const name), by tag, or in reverse (model + verb \u2192 required roles/scopes).", "", '- `topic="admin"` or `topic="AUTH_ADMIN_ROLE"` \u2192 role entry + claims that set it.', '- `tag="privileged"` \u2192 every role tagged with `privileged`.', '- `model="StorageFile" verb="read"` \u2192 reverse lookup of the roles/scopes the gate would expect.', '- `topic="list"` \u2192 catalog.'].join("\n"),
+  description: [
+    "Look up auth roles forward (by role string / const name), by tag, or in reverse (model + verb \u2192 required roles/scopes).",
+    "",
+    '- `topic="admin"` or `topic="AUTH_ADMIN_ROLE"` \u2192 role entry + claims that set it.',
+    '- `tag="privileged"` \u2192 every role tagged with `privileged`.',
+    '- `model="StorageFile" verb="read"` \u2192 reverse lookup of the roles/scopes the gate would expect.',
+    '- `topic="list"` \u2192 catalog.'
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -56145,7 +56631,11 @@ function sourceLink3(path, line) {
 import { type as type107 } from "arktype";
 var DBX_AUTH_TOKEN_EXPLAIN_TOOL = {
   name: "dbx_auth_token_explain",
-  description: ["Decode a JWT or claims object and annotate each claim with the catalogued meaning, role mapping, and source path:line.", "", "Pass `token` (raw JWT string) **or** `claims` (decoded JSON object). Reserved JWT claims (`iss`/`aud`/`exp`/`iat`/`sub`/`scope`) are listed separately. Flags expired tokens and unknown wrong-issuer claims."].join("\n"),
+  description: [
+    "Decode a JWT or claims object and annotate each claim with the catalogued meaning, role mapping, and source path:line.",
+    "",
+    "Pass `token` (raw JWT string) **or** `claims` (decoded JSON object). Reserved JWT claims (`iss`/`aud`/`exp`/`iat`/`sub`/`scope`) are listed separately. Flags expired tokens and unknown wrong-issuer claims."
+  ].join("\n"),
   inputSchema: {
     type: "object",
     properties: {
@@ -56604,7 +57094,13 @@ function createAuthClusterTools(registry) {
 function registerTools(server, options = {}) {
   const underlyingServer = server.server;
   const tools = [...DBX_TOOLS];
-  tools.push(createUiExamplesTool({ examplesRegistry: options.dbxDocsUiExamplesRegistry }), createModelValidateTool({ ruleOptions: options.modelValidateRuleOptions }), createModelValidateFolderTool({ ruleOptions: options.modelValidateRuleOptions }), createModelFixtureValidateAppTool({ getRegistry: () => options.fixtureModelRegistry }), createLogSearchTool(options.logSearchConfig));
+  tools.push(
+    createUiExamplesTool({ examplesRegistry: options.dbxDocsUiExamplesRegistry }),
+    createModelValidateTool({ ruleOptions: options.modelValidateRuleOptions }),
+    createModelValidateFolderTool({ ruleOptions: options.modelValidateRuleOptions }),
+    createModelFixtureValidateAppTool({ getRegistry: () => options.fixtureModelRegistry }),
+    createLogSearchTool(options.logSearchConfig)
+  );
   if (options.forgeFieldRegistry !== void 0) {
     tools.push(createLookupFormTool({ registry: options.forgeFieldRegistry }), createSearchFormTool({ registry: options.forgeFieldRegistry }), createFormScaffoldTool({ registry: options.forgeFieldRegistry }));
   }
@@ -56858,7 +57354,25 @@ async function loadServerContext(options = {}) {
   await emitDownstreamHints({ cwd, externalCounts, onDownstreamHints: options.onDownstreamHints });
   const context = {
     resources: { semanticTypeRegistry: registry, forgeFieldRegistry: forgeRegistry, pipeRegistry, utilRegistry, modelSnapshotFieldRegistry, modelFirebaseIndexRegistry, uiComponentRegistry: uiRegistry, actionRegistry, filterRegistry, tokenRegistry, cssUtilityRegistry, authRegistry, cwd },
-    tools: { semanticTypeRegistry: registry, forgeFieldRegistry: forgeRegistry, pipeRegistry, utilRegistry, modelSnapshotFieldRegistry, modelFirebaseIndexRegistry, uiComponentRegistry: uiRegistry, dbxDocsUiExamplesRegistry, actionRegistry, filterRegistry, tokenRegistry, cssUtilityRegistry, fixtureModelRegistry, modelValidateRuleOptions, authRegistry, cwd, logSearchConfig }
+    tools: {
+      semanticTypeRegistry: registry,
+      forgeFieldRegistry: forgeRegistry,
+      pipeRegistry,
+      utilRegistry,
+      modelSnapshotFieldRegistry,
+      modelFirebaseIndexRegistry,
+      uiComponentRegistry: uiRegistry,
+      dbxDocsUiExamplesRegistry,
+      actionRegistry,
+      filterRegistry,
+      tokenRegistry,
+      cssUtilityRegistry,
+      fixtureModelRegistry,
+      modelValidateRuleOptions,
+      authRegistry,
+      cwd,
+      logSearchConfig
+    }
   };
   return context;
 }
@@ -56962,7 +57476,14 @@ async function resolveAuthRegistry(input) {
 }
 function reportAuthLoaderResult(result) {
   const { registry, scannedFiles, fileWarnings, extractWarnings, extractedAppCount, extractedClaimCount } = result;
-  const summary = [`[dbx-components-mcp] auth registry loaded`, `  sources: ${registry.loadedSources.join(", ") || "(none)"}`, `  scanned-files: ${scannedFiles.length}`, `  apps: ${registry.apps.length} (extracted: ${extractedAppCount})`, `  claims: ${registry.claims.length} (extracted: ${extractedClaimCount})`, `  warnings: ${fileWarnings.length + extractWarnings.length}`].join("\n");
+  const summary = [
+    `[dbx-components-mcp] auth registry loaded`,
+    `  sources: ${registry.loadedSources.join(", ") || "(none)"}`,
+    `  scanned-files: ${scannedFiles.length}`,
+    `  apps: ${registry.apps.length} (extracted: ${extractedAppCount})`,
+    `  claims: ${registry.claims.length} (extracted: ${extractedClaimCount})`,
+    `  warnings: ${fileWarnings.length + extractWarnings.length}`
+  ].join("\n");
   process.stderr.write(`${summary}
 `);
   for (const warning of fileWarnings) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/dbx-components-mcp",
-  "version": "14.0.0",
+  "version": "14.1.0",
   "type": "module",
   "bin": {
     "dbx-components-mcp": "dbx-components-mcp.js"
@@ -11,7 +11,7 @@
     "ts-morph": "^21.0.0"
   },
   "peerDependencies": {
-    "@dereekb/dbx-cli": "14.0.0",
-    "@dereekb/util": "14.0.0"
+    "@dereekb/dbx-cli": "14.1.0",
+    "@dereekb/util": "14.1.0"
   }
 }