@happyvertical/smrt-cli 0.57.10 → 0.57.11

package/dist/index.js

@@ -51,77 +51,77 @@ var _cookbookCommands = null;
 var _kitchenCommands = null;
 async function getGnodeCommands() {
 	if (!_gnodeCommands) {
-		const { gnodeCommands } = await import("./commands-DTdDVLOD.js");
+		const { gnodeCommands } = await import("./commands-CogDQhN_.js");
 		_gnodeCommands = gnodeCommands;
 	}
 	return _gnodeCommands;
 }
 async function getGitCommands() {
 	if (!_gitCommands) {
-		const { gitCommands } = await import("./commands-DTdDVLOD.js");
+		const { gitCommands } = await import("./commands-CogDQhN_.js");
 		_gitCommands = gitCommands;
 	}
 	return _gitCommands;
 }
 async function getGenerateCommands() {
 	if (!_generateCommands) {
-		const { generateCommands } = await import("./commands-DTdDVLOD.js");
+		const { generateCommands } = await import("./commands-CogDQhN_.js");
 		_generateCommands = generateCommands;
 	}
 	return _generateCommands;
 }
 async function getInitCommands() {
 	if (!_initCommands) {
-		const { initCommands } = await import("./commands-DTdDVLOD.js");
+		const { initCommands } = await import("./commands-CogDQhN_.js");
 		_initCommands = initCommands;
 	}
 	return _initCommands;
 }
 async function getUtilityCommands() {
 	if (!_utilityCommands) {
-		const { utilityCommands } = await import("./commands-DTdDVLOD.js");
+		const { utilityCommands } = await import("./commands-CogDQhN_.js");
 		_utilityCommands = utilityCommands;
 	}
 	return _utilityCommands;
 }
 async function getDispatchCommands() {
 	if (!_dispatchCommands) {
-		const { dispatchCommands } = await import("./commands-DTdDVLOD.js");
+		const { dispatchCommands } = await import("./commands-CogDQhN_.js");
 		_dispatchCommands = dispatchCommands;
 	}
 	return _dispatchCommands;
 }
 async function getDocsCommands() {
 	if (!_docsCommands) {
-		const { docsCommands } = await import("./commands-DTdDVLOD.js");
+		const { docsCommands } = await import("./commands-CogDQhN_.js");
 		_docsCommands = docsCommands;
 	}
 	return _docsCommands;
 }
 async function getPlaygroundCommands() {
 	if (!_playgroundCommands) {
-		const { playgroundCommands } = await import("./commands-DTdDVLOD.js");
+		const { playgroundCommands } = await import("./commands-CogDQhN_.js");
 		_playgroundCommands = playgroundCommands;
 	}
 	return _playgroundCommands;
 }
 async function getCookbookCommands() {
 	if (!_cookbookCommands) {
-		const { cookbookCommands } = await import("./commands-DTdDVLOD.js");
+		const { cookbookCommands } = await import("./commands-CogDQhN_.js");
 		_cookbookCommands = cookbookCommands;
 	}
 	return _cookbookCommands;
 }
 async function getKitchenCommands() {
 	if (!_kitchenCommands) {
-		const { kitchenCommands } = await import("./commands-DTdDVLOD.js");
+		const { kitchenCommands } = await import("./commands-CogDQhN_.js");
 		_kitchenCommands = kitchenCommands;
 	}
 	return _kitchenCommands;
 }
 async function getWorkbenchCommands() {
 	if (!_workbenchCommands) {
-		const { workbenchCommands } = await import("./commands-DTdDVLOD.js");
+		const { workbenchCommands } = await import("./commands-CogDQhN_.js");
 		_workbenchCommands = workbenchCommands;
 	}
 	return _workbenchCommands;
@@ -1234,6 +1234,41 @@ var CLIGenerator = class {
 		}
 	}
 	/**
+	* Keep only the fields a generated create/update may write, exactly as the
+	* REST routes and MCP tools do: never framework/server-managed keys,
+	* underscored internals or `readonly` fields, and only `api.writable` when
+	* the model declares it. Applies to every input mode (`--from-file`,
+	* interactive, flags), so the CLI is not a way around a model's write
+	* allowlist.
+	*/
+	applyWritablePolicy(objectName, data) {
+		if (!data || typeof data !== "object" || Array.isArray(data)) return {};
+		const serverManaged = /* @__PURE__ */ new Set([
+			"id",
+			"tenantId",
+			"tenant_id",
+			"createdAt",
+			"created_at",
+			"updatedAt",
+			"updated_at"
+		]);
+		const apiConfig = ObjectRegistry.getConfig(objectName)?.api;
+		const writable = apiConfig && typeof apiConfig === "object" && Array.isArray(apiConfig.writable) ? apiConfig.writable : null;
+		const readonly = /* @__PURE__ */ new Set();
+		for (const [name, definition] of ObjectRegistry.getFields(objectName)) {
+			const meta = definition;
+			if (meta?.readonly === true || meta?._meta?.readonly === true) readonly.add(name);
+		}
+		const result = {};
+		for (const [key, value] of Object.entries(data)) {
+			if (key.startsWith("_")) continue;
+			if (serverManaged.has(key) || readonly.has(key)) continue;
+			if (writable && !writable.includes(key)) continue;
+			result[key] = value;
+		}
+		return result;
+	}
+	/**
 	* Handle CREATE command
 	*/
 	async handleCreate(objectName, options) {
@@ -1251,6 +1286,9 @@ var CLIGenerator = class {
 					if (options[optionName] !== void 0) data[fieldName] = this.parseFieldValue(String(options[optionName]));
 				}
 			}
+			const metaType = data._meta_type;
+			data = this.applyWritablePolicy(objectName, data);
+			if (typeof metaType === "string") data._meta_type = metaType;
 			const spinner = this.createSpinner(`Creating ${objectName}...`);
 			const result = await (await this.getCollection(objectName)).create(data);
 			spinner.succeed(`Created ${objectName} with ID: ${result.id}`);
@@ -1283,6 +1321,7 @@ var CLIGenerator = class {
 					if (options[optionName] !== void 0) data[fieldName] = this.parseFieldValue(String(options[optionName]));
 				}
 			}
+			data = this.applyWritablePolicy(objectName, data);
 			const spinner = this.createSpinner(`Updating ${objectName}...`);
 			await collection.withAuditMutation(existing, "updated", async (bound) => {
 				Object.assign(bound, data);

package/dist/{oidcProvisioningPrimitives-DNP9EZlU-DwTTwWII.js → oidcProvisioningPrimitives-DNP9EZlU-B9po079I.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-CNCLrvjW.js";
-import { a as ProfileCollection, f as saveOidcRaceArbiter, i as Profile } from "./ProfileCollection-C4INKh7Y-DOp8miUa.js";
-import { t as ProfileTypeCollection } from "./ProfileTypeCollection-B7kwi1mU-Ce3gA1Qy.js";
+import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-Ckm8QYCF.js";
+import { a as ProfileCollection, f as saveOidcRaceArbiter, i as Profile } from "./ProfileCollection-C4INKh7Y-CWCUc0Hb.js";
+import { t as ProfileTypeCollection } from "./ProfileTypeCollection-B7kwi1mU-4EyAFp2c.js";
 import { smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/oidcProvisioningPrimitives-DNP9EZlU.js
 var oidcProvisioningPrimitives_DNP9EZlU_exports = /* @__PURE__ */ __exportAll({

package/dist/{resolveIdentity-CkyqvctR-AkDcBv37.js → resolveIdentity-CkyqvctR-BWp3cZAz.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { m as withSystemContext } from "./dist-DtPJO_5w.js";
+import { m as withSystemContext } from "./dist-BVztM_cy.js";
 import { n as __exportAll$1, t as NostrIdentity, u as verifyAuthEvent } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { t as ApiKey } from "./ApiKey-CVmlf3V6-BAeHuH48.js";
-import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-CNCLrvjW.js";
-import { c as coordinateOidcProvisioning, l as isOidcProvisioningRaceConflict, u as normalizeIdentityEmail } from "./ProfileCollection-C4INKh7Y-DOp8miUa.js";
-import { a as insertOidcProvisioningIdentity, i as createOidcProvisioningPerson } from "./oidcProvisioningPrimitives-DNP9EZlU-DwTTwWII.js";
+import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-Ckm8QYCF.js";
+import { c as coordinateOidcProvisioning, l as isOidcProvisioningRaceConflict, u as normalizeIdentityEmail } from "./ProfileCollection-C4INKh7Y-CWCUc0Hb.js";
+import { a as insertOidcProvisioningIdentity, i as createOidcProvisioningPerson } from "./oidcProvisioningPrimitives-DNP9EZlU-B9po079I.js";
 import { resolveDatabase } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/resolveIdentity-CkyqvctR.js
 var resolveIdentity_CkyqvctR_exports = /* @__PURE__ */ __exportAll({
@@ -72,13 +72,13 @@ async function resolveIdentity(context) {
 	};
 }
 async function findProfileByExternalId(provider, externalId, options) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CXbCuX6s.js").then((n) => n.r).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DgdpVtwP.js").then((n) => n.r).then((n) => n.r);
 	const identities = await (await OidcIdentityCollection.create(options)).findByProvider(provider);
 	for (const identity of identities) if (identity.subject === externalId || identity.email?.includes(externalId)) {
 		const profile = await identity.getProfile();
 		if (profile) return profile;
 	}
-	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-DOp8miUa.js").then((n) => n.o).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CWCUc0Hb.js").then((n) => n.o).then((n) => n.r);
 	const profiles = await (await ProfileCollection.create(options)).list({
 		where: { email: `${externalId}@users.noreply.github.com` },
 		limit: 1
@@ -99,7 +99,7 @@ async function reuseExistingOidcIdentityForProfile(profileId, claims, provider,
 		createConcurrencyError: (cause) => new Error("Concurrent exact OIDC identity reuse did not converge.", cause === void 0 ? void 0 : { cause }),
 		rebindRootResult: rebindOidcProfileResult,
 		provision: (tx) => withSystemContext(async () => {
-			const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CXbCuX6s.js").then((n) => n.r).then((n) => n.r);
+			const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DgdpVtwP.js").then((n) => n.r).then((n) => n.r);
 			const identity = await (await OidcIdentityCollection.create({ db: tx })).findBySubject(normalizedClaims.iss, normalizedClaims.sub);
 			if (!identity) throw new Error("OidcIdentity.findOrCreate() no longer creates authentication links; use UserCollection.getOrCreateFromOidc() or createProfileFromOidc().");
 			if (identity.profileId !== profileId) throw new Error(`OIDC identity ${normalizedClaims.iss} subject ${normalizedClaims.sub} belongs to a different Profile.`);
@@ -133,7 +133,7 @@ async function coordinateProfileOidcProvisioning(claims, provider, options) {
 	});
 }
 async function provisionOidcProfile(claims, provider, options) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CXbCuX6s.js").then((n) => n.r).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DgdpVtwP.js").then((n) => n.r).then((n) => n.r);
 	const existingIdentity = await (await OidcIdentityCollection.create(options)).findBySubject(claims.iss, claims.sub);
 	if (existingIdentity) {
 		const profile2 = await existingIdentity.getProfile();
@@ -148,7 +148,7 @@ async function provisionOidcProfile(claims, provider, options) {
 			created: false
 		};
 	}
-	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-DOp8miUa.js").then((n) => n.o).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CWCUc0Hb.js").then((n) => n.o).then((n) => n.r);
 	const profileCollection = await ProfileCollection.create(options);
 	if (claims.email) {
 		if (await profileCollection.findUniqueGlobalPersonByEmail(claims.email)) {
@@ -175,8 +175,8 @@ async function provisionOidcProfile(claims, provider, options) {
 	};
 }
 async function rebindOidcProfileResult(result, rootDb) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CXbCuX6s.js").then((n) => n.r).then((n) => n.r);
-	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-DOp8miUa.js").then((n) => n.o).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DgdpVtwP.js").then((n) => n.r).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CWCUc0Hb.js").then((n) => n.o).then((n) => n.r);
 	const profileId = requireOidcProfileId(result.profile.id);
 	const identityId = requireOidcProfileId(result.oidcIdentity.id);
 	const [profile, oidcIdentity] = await withSystemContext(async () => {
@@ -225,11 +225,11 @@ async function createProfileFromNostr(email, nostrData, options) {
 			created: false
 		};
 	}
-	const { Person } = await import("./oidcProvisioningPrimitives-DNP9EZlU-DwTTwWII.js").then((n) => n.o).then((n) => n.o);
-	const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-Ce3gA1Qy.js").then((n) => n.n).then((n) => n.n);
+	const { Person } = await import("./oidcProvisioningPrimitives-DNP9EZlU-B9po079I.js").then((n) => n.o).then((n) => n.o);
+	const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-4EyAFp2c.js").then((n) => n.n).then((n) => n.n);
 	let personType = await (await ProfileTypeCollection.create(options)).getBySlug("person");
 	if (!personType) {
-		const { ProfileType } = await import("./ProfileCollection-C4INKh7Y-DOp8miUa.js").then((n) => n.o).then((n) => n.h);
+		const { ProfileType } = await import("./ProfileCollection-C4INKh7Y-CWCUc0Hb.js").then((n) => n.o).then((n) => n.h);
 		personType = new ProfileType({
 			...options,
 			slug: "person",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-cli",
-  "version": "0.57.10",
+  "version": "0.57.11",
   "description": "Developer CLI for SMRT framework - introspection, testing, and project management",
   "type": "module",
   "main": "./dist/index.js",
@@ -30,20 +30,20 @@
     }
   },
   "dependencies": {
-    "@happyvertical/ai": "^0.105.3",
-    "@happyvertical/files": "^0.105.3",
-    "@happyvertical/logger": "^0.105.3",
-    "@happyvertical/smrt-agents": "0.57.10",
-    "@happyvertical/smrt-app-runtime": "0.57.10",
-    "@happyvertical/smrt-config": "0.57.10",
-    "@happyvertical/smrt-core": "0.57.10",
-    "@happyvertical/smrt-dev-mcp": "0.57.10",
-    "@happyvertical/smrt-ledgers": "0.57.10",
-    "@happyvertical/smrt-playground": "0.57.10",
-    "@happyvertical/smrt-types": "0.57.10",
-    "@happyvertical/smrt-users": "0.57.10",
-    "@happyvertical/sql": "^0.105.3",
-    "@happyvertical/utils": "^0.105.3",
+    "@happyvertical/ai": "^0.105.5",
+    "@happyvertical/files": "^0.105.5",
+    "@happyvertical/logger": "^0.105.5",
+    "@happyvertical/smrt-agents": "0.57.11",
+    "@happyvertical/smrt-app-runtime": "0.57.11",
+    "@happyvertical/smrt-config": "0.57.11",
+    "@happyvertical/smrt-core": "0.57.11",
+    "@happyvertical/smrt-dev-mcp": "0.57.11",
+    "@happyvertical/smrt-ledgers": "0.57.11",
+    "@happyvertical/smrt-playground": "0.57.11",
+    "@happyvertical/smrt-types": "0.57.11",
+    "@happyvertical/smrt-users": "0.57.11",
+    "@happyvertical/sql": "^0.105.5",
+    "@happyvertical/utils": "^0.105.5",
     "@modelcontextprotocol/server": "2.0.0",
     "acorn": "^8.18.0",
     "fast-glob": "3.3.3",

package/dist/dist-cdXD3BbE.js

@@ -1,21 +0,0 @@
-import "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import "./ApiKey-CVmlf3V6-BAeHuH48.js";
-import "./ApiKeyCollection-CiiDNFdD-CMGF3_ul.js";
-import "./AuditLogCollection-WDHL-_AF-B-XEAxVt.js";
-import "./NostrIdentityCollection-CctlECpX-fkAPnK02.js";
-import "./OidcIdentity-BUblgQLs-CNCLrvjW.js";
-import "./OidcIdentityCollection-ClOyaHeF-CXbCuX6s.js";
-import "./ProfileAssetCollection-CRMcjLJ--c-GEluUg.js";
-import { a as ProfileCollection } from "./ProfileCollection-C4INKh7Y-DOp8miUa.js";
-import "./ProfileLinkCollection-DFfZRsgv-B6WUopKV.js";
-import "./ProfileMetadataCollection-BIYKy4Y3-0ifgavRP.js";
-import "./ProfileMetafieldCollection-Buz7gzag-LmZuJkfj.js";
-import "./ProfileRelationshipCollection-C4g_QLI4-zqqRMcCG.js";
-import "./ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js";
-import "./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js";
-import "./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js";
-import "./ProfileTypeCollection-B7kwi1mU-Ce3gA1Qy.js";
-import "./oidcProvisioningPrimitives-DNP9EZlU-DwTTwWII.js";
-import "./resolveIdentity-CkyqvctR-AkDcBv37.js";
-import "./dist-Bh0ccFH6.js";
-export { ProfileCollection };