@happyvertical/smrt-core 0.38.6 → 0.38.8

package/dist/vite-plugin/web-collections.d.ts

@@ -1,3 +1,4 @@
+import { ToolDescriptor } from '../generators/tool-schema.js';
 import { FieldDefinition, SmartObjectDefinition, SmartObjectManifest } from '../scanner/types.js';
 /** Informational per-column metadata carried by a collection definition. */
 export interface WebFieldDefinition {
@@ -35,11 +36,27 @@ export interface WebCollectionEntry {
  * Select the manifest entries that become web collection definitions: one per
  * REST collection, STI children folding into their base model, collection
  * classes excluded, and only models that expose `list` (a read surface is
- * required to materialize a collection). Uses the canonical
- * {@link resolveApiActionSet} so the exposed-action set matches exactly what
- * the REST/SvelteKit generators actually emit.
+ * required to MATERIALIZE a client collection — that is what persists).
  */
 export declare function selectWebCollectionEntries(manifest: SmartObjectManifest): WebCollectionEntry[];
+/**
+ * Build the per-collection web-collection definition literal — the SINGLE
+ * source of truth for the shape emitted by {@link generateWebModule} and hashed
+ * by {@link computeWebManifestHash}. Building it in ONE place is a
+ * cache-coherency requirement: if the emitted shape and the hashed shape were
+ * built independently, adding a field to one and not the other would let the
+ * hash silently UNDER-cover a shape change, so persisted caches would not drop
+ * and stale rows would hydrate into new code.
+ */
+export declare function buildWebCollectionDefinition(entry: WebCollectionEntry, manifest: SmartObjectManifest): {
+    name: string;
+    className: string;
+    endpoint: string;
+    idField: string;
+    actions: string[];
+    fields: Record<string, WebFieldDefinition>;
+    relationships: WebRelationship[];
+};
 /**
  * Build the informational per-field metadata for a web collection definition:
  * the persisted public-DTO columns only. Relationship pseudo-fields, STI meta
@@ -70,4 +87,52 @@ export declare function buildWebFieldDefinitions(obj: SmartObjectDefinition): Re
  * and keeping it avoids a special case.
  */
 export declare function buildWebRelationships(obj: SmartObjectDefinition, manifest: SmartObjectManifest): WebRelationship[];
+/**
+ * Build the WebMCP / MCP tool descriptors for a web collection (#1812): one
+ * descriptor per exposed action, over the SAME public-DTO fields the definition
+ * already exposes (`buildWebFieldDefinitions`). The tool ids match the Node MCP
+ * surface (`<class>_<action>`), so a page's WebMCP tools and its MCP-server
+ * tools share one vocabulary.
+ *
+ * Deliberately NOT part of {@link buildWebCollectionDefinition}: descriptors are
+ * layered onto the emitted value by {@link generateWebModule} instead, so the
+ * #1764 {@link computeWebManifestHash} shape digest keeps hashing ONLY the row
+ * shape. That is safe because a descriptor is a pure function of
+ * className/actions/fields — all already in the hash — so excluding it never
+ * lets the digest under-cover a real shape change.
+ */
+export declare function buildWebToolDescriptors(entry: WebCollectionEntry): ToolDescriptor[];
+/**
+ * A deterministic, replica-stable digest of the web-collection SHAPE (#1764).
+ *
+ * The hash covers exactly the thing whose change means either old persisted
+ * client rows may mis-hydrate OR a stale read ETag would still 304: the same
+ * per-collection definition shape {@link generateWebModule} emits — name,
+ * className, endpoint, idField, actions, fields, relationships — built via the
+ * SHARED {@link buildWebCollectionDefinition} so the hash can never disagree
+ * with what is actually shipped. The shape is CANONICALIZED (keys recursively
+ * sorted; see {@link canonicalize}) before hashing, so the same schema always
+ * yields the same digest across builds and replicas regardless of manifest
+ * iteration order.
+ *
+ * SCOPE — get-OR-list (broader than materializable collections). Covered by
+ * {@link selectWebEtagSaltEntries}, so it includes GET-ONLY models too: those do
+ * not persist (no materializable collection), but their generated GET route IS
+ * salted with this hash, so a shape-only change to a get-only model must change
+ * it or a client holding the old concrete ETag gets a zero-query 304 after a
+ * shape-only deploy (the #1765 gap the salt closes). The two consumers both use
+ * this one value, so it stays identical between them:
+ *  - `@happyvertical/smrt-web` persistence (#1764) folds it into the durable
+ *    namespace, so a contract-changing deploy lands on a fresh namespace and old
+ *    rows are never found (dropped, not mis-hydrated). Including get-only models
+ *    here is harmless over-invalidation — only list-materializable collections
+ *    ever hold a persisted snapshot.
+ *  - the generated read ETag (#1765 salt, #1764) folds it in so a shape-only
+ *    deploy (no table write) busts every read validator, get-only routes too.
+ *
+ * Truncated to the first 16 base64url chars: 96 bits is far more than enough to
+ * make an accidental shape collision negligible, and a short constant keeps the
+ * emitted module and every persistence key compact.
+ */
+export declare function computeWebManifestHash(manifest: SmartObjectManifest): string;
 //# sourceMappingURL=web-collections.d.ts.map

package/dist/vite-plugin/web-collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-collections.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/web-collections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAyB7B,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,iBAAiB,GACjB,WAAW,GACX,YAAY,CAAC;AAEjB;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,GAAG,EAAE,qBAAqB,CAAC;IAC3B,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAiFD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,mBAAmB,GAC5B,kBAAkB,EAAE,CAgCtB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,qBAAqB,GACzB,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAcpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,qBAAqB,EAC1B,QAAQ,EAAE,mBAAmB,GAC5B,eAAe,EAAE,CAiCnB"}
+{"version":3,"file":"web-collections.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/web-collections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAyB7B,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,iBAAiB,GACjB,WAAW,GACX,YAAY,CAAC;AAEjB;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,GAAG,EAAE,qBAAqB,CAAC;IAC3B,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA+HD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,mBAAmB,GAC5B,kBAAkB,EAAE,CAEtB;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,mBAAmB,GAC5B;IACD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3C,aAAa,EAAE,eAAe,EAAE,CAAC;CAClC,CAUA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,qBAAqB,GACzB,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAcpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,qBAAqB,EAC1B,QAAQ,EAAE,mBAAmB,GAC5B,eAAe,EAAE,CAiCnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,kBAAkB,GACxB,cAAc,EAAE,CAelB;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAa5E"}

package/dist/vite-plugin/web-collections.js

@@ -1,6 +1,28 @@
+import { buildToolDescriptors } from "../generators/tool-schema.js";
 import { resolveApiActionSet } from "./sveltekit-generator.js";
+import { createHash } from "node:crypto";
 //#region src/vite-plugin/web-collections.ts
 /**
+* Manifest → web collection selection (single source of truth).
+*
+* The browser client data runtime (`@happyvertical/smrt-web`, #1761) consumes
+* one typed collection definition per API-exposed REST collection. Three
+* emission sites need the SAME selection and field rules, or the emitted
+* runtime values and their declared types drift apart:
+*
+*  - the `\0smrt:web` runtime virtual module (JSON literal — {@link generateWebModule})
+*  - the `@happyvertical/smrt-virt-web` ambient d.ts (vite-plugin)
+*  - the physical `@smrt/web` d.ts (prebuild, for `tsc`-only consumers)
+*
+* All three import {@link selectWebCollectionEntries} from here so the value
+* emission and the type emission can never disagree. The per-collection SHAPE
+* (name/className/endpoint/idField/actions/fields/relationships) is built by the
+* ONE {@link buildWebCollectionDefinition}, shared by the runtime emission AND
+* the #1764 {@link computeWebManifestHash} shape digest — so the emitted shape
+* and the hashed shape can never drift (a drift would let the hash under-cover a
+* change → stale client caches).
+*/
+/**
 * Field types that are relationship pseudo-columns rather than persisted
 * public-DTO columns — they never appear on the wire as scalar values.
 */
@@ -75,19 +97,20 @@ function isStiChildModel(manifest, obj) {
 	return false;
 }
 /**
-* Select the manifest entries that become web collection definitions: one per
-* REST collection, STI children folding into their base model, collection
-* classes excluded, and only models that expose `list` (a read surface is
-* required to materialize a collection). Uses the canonical
-* {@link resolveApiActionSet} so the exposed-action set matches exactly what
-* the REST/SvelteKit generators actually emit.
+* Select one entry per REST collection whose exposed action set satisfies
+* `qualifies` — STI children folding into their base model, collection classes
+* excluded. Uses the canonical {@link resolveApiActionSet} so the exposed-action
+* set matches exactly what the REST/SvelteKit generators actually emit. Shared
+* by {@link selectWebCollectionEntries} (list-qualified — materializable
+* collections) and {@link selectWebEtagSaltEntries} (get-OR-list — every model
+* with a read route the ETag salt must cover).
 */
-function selectWebCollectionEntries(manifest) {
+function selectEntriesQualifiedBy(manifest, qualifies) {
 	const byCollection = /* @__PURE__ */ new Map();
 	for (const obj of Object.values(manifest.objects)) {
 		if (isWebCollectionClass(manifest, obj)) continue;
 		const exposedActions = resolveApiActionSet(obj);
-		if (!exposedActions.has("list")) continue;
+		if (!qualifies(exposedActions)) continue;
 		const isStiChild = isStiChildModel(manifest, obj);
 		const existing = byCollection.get(obj.collection);
 		if (existing && !(existing.isStiChild && !isStiChild)) continue;
@@ -105,6 +128,48 @@ function selectWebCollectionEntries(manifest) {
 	}));
 }
 /**
+* Select the manifest entries that become web collection definitions: one per
+* REST collection, STI children folding into their base model, collection
+* classes excluded, and only models that expose `list` (a read surface is
+* required to MATERIALIZE a client collection — that is what persists).
+*/
+function selectWebCollectionEntries(manifest) {
+	return selectEntriesQualifiedBy(manifest, (actions) => actions.has("list"));
+}
+/**
+* Select the entries the ETag salt (#1764) must cover: every api-exposed model
+* with a GENERATED READ ROUTE — `list` OR `get`. Broader than
+* {@link selectWebCollectionEntries} on purpose: a get-only model
+* (`api: { include: ['get'] }`) has no materializable client collection (so it
+* never persists), but its generated GET route IS salted, so a shape-only change
+* to it must still change the salt — otherwise a client holding the old concrete
+* ETag would get a zero-query 304 after a shape-only deploy (the #1765 gap the
+* salt closes). Not exported: only {@link computeWebManifestHash} consumes it.
+*/
+function selectWebEtagSaltEntries(manifest) {
+	return selectEntriesQualifiedBy(manifest, (actions) => actions.has("list") || actions.has("get"));
+}
+/**
+* Build the per-collection web-collection definition literal — the SINGLE
+* source of truth for the shape emitted by {@link generateWebModule} and hashed
+* by {@link computeWebManifestHash}. Building it in ONE place is a
+* cache-coherency requirement: if the emitted shape and the hashed shape were
+* built independently, adding a field to one and not the other would let the
+* hash silently UNDER-cover a shape change, so persisted caches would not drop
+* and stale rows would hydrate into new code.
+*/
+function buildWebCollectionDefinition(entry, manifest) {
+	return {
+		name: entry.collection,
+		className: entry.obj.className,
+		endpoint: `/${entry.collection}`,
+		idField: "id",
+		actions: entry.actions,
+		fields: buildWebFieldDefinitions(entry.obj),
+		relationships: buildWebRelationships(entry.obj, manifest)
+	};
+}
+/**
 * Build the informational per-field metadata for a web collection definition:
 * the persisted public-DTO columns only. Relationship pseudo-fields, STI meta
 * internals, transient (unpersisted) and sensitive (wire-stripped) fields are
@@ -168,7 +233,91 @@ function buildWebRelationships(obj, manifest) {
 	}
 	return relationships;
 }
+/**
+* Build the WebMCP / MCP tool descriptors for a web collection (#1812): one
+* descriptor per exposed action, over the SAME public-DTO fields the definition
+* already exposes (`buildWebFieldDefinitions`). The tool ids match the Node MCP
+* surface (`<class>_<action>`), so a page's WebMCP tools and its MCP-server
+* tools share one vocabulary.
+*
+* Deliberately NOT part of {@link buildWebCollectionDefinition}: descriptors are
+* layered onto the emitted value by {@link generateWebModule} instead, so the
+* #1764 {@link computeWebManifestHash} shape digest keeps hashing ONLY the row
+* shape. That is safe because a descriptor is a pure function of
+* className/actions/fields — all already in the hash — so excluding it never
+* lets the digest under-cover a real shape change.
+*/
+function buildWebToolDescriptors(entry) {
+	const webFields = buildWebFieldDefinitions(entry.obj);
+	const fields = Object.entries(webFields).map(([name, def]) => ({
+		name,
+		type: def.type,
+		...def.required !== void 0 ? { required: def.required } : {},
+		...def.default !== void 0 ? { default: def.default } : {}
+	}));
+	return buildToolDescriptors({
+		className: entry.obj.className,
+		fields,
+		actions: entry.actions
+	});
+}
+/**
+* Recursively sort object keys so structurally-equal values serialize to the
+* SAME JSON regardless of insertion order. Arrays keep their order (order is
+* semantic for `actions`/`relationships`); objects are rebuilt with keys sorted.
+* Required for {@link computeWebManifestHash} to be replica-stable: two builds
+* that produce the same schema but visit the manifest in a different order (map
+* insertion, scan order) must still hash identically, which a plain
+* `JSON.stringify` of insertion-ordered objects would NOT guarantee.
+*/
+function canonicalize(value) {
+	if (Array.isArray(value)) return value.map((entry) => canonicalize(entry));
+	if (value && typeof value === "object") {
+		const sorted = {};
+		for (const key of Object.keys(value).sort()) sorted[key] = canonicalize(value[key]);
+		return sorted;
+	}
+	return value;
+}
+/**
+* A deterministic, replica-stable digest of the web-collection SHAPE (#1764).
+*
+* The hash covers exactly the thing whose change means either old persisted
+* client rows may mis-hydrate OR a stale read ETag would still 304: the same
+* per-collection definition shape {@link generateWebModule} emits — name,
+* className, endpoint, idField, actions, fields, relationships — built via the
+* SHARED {@link buildWebCollectionDefinition} so the hash can never disagree
+* with what is actually shipped. The shape is CANONICALIZED (keys recursively
+* sorted; see {@link canonicalize}) before hashing, so the same schema always
+* yields the same digest across builds and replicas regardless of manifest
+* iteration order.
+*
+* SCOPE — get-OR-list (broader than materializable collections). Covered by
+* {@link selectWebEtagSaltEntries}, so it includes GET-ONLY models too: those do
+* not persist (no materializable collection), but their generated GET route IS
+* salted with this hash, so a shape-only change to a get-only model must change
+* it or a client holding the old concrete ETag gets a zero-query 304 after a
+* shape-only deploy (the #1765 gap the salt closes). The two consumers both use
+* this one value, so it stays identical between them:
+*  - `@happyvertical/smrt-web` persistence (#1764) folds it into the durable
+*    namespace, so a contract-changing deploy lands on a fresh namespace and old
+*    rows are never found (dropped, not mis-hydrated). Including get-only models
+*    here is harmless over-invalidation — only list-materializable collections
+*    ever hold a persisted snapshot.
+*  - the generated read ETag (#1765 salt, #1764) folds it in so a shape-only
+*    deploy (no table write) busts every read validator, get-only routes too.
+*
+* Truncated to the first 16 base64url chars: 96 bits is far more than enough to
+* make an accidental shape collision negligible, and a short constant keeps the
+* emitted module and every persistence key compact.
+*/
+function computeWebManifestHash(manifest) {
+	const definitions = {};
+	for (const entry of selectWebEtagSaltEntries(manifest)) definitions[entry.collection] = buildWebCollectionDefinition(entry, manifest);
+	const canonicalJson = JSON.stringify(canonicalize(definitions));
+	return createHash("sha256").update(canonicalJson).digest("base64url").slice(0, 16);
+}
 //#endregion
-export { buildWebFieldDefinitions, buildWebRelationships, selectWebCollectionEntries };
+export { buildWebCollectionDefinition, buildWebFieldDefinitions, buildWebRelationships, buildWebToolDescriptors, computeWebManifestHash, selectWebCollectionEntries };
 
 //# sourceMappingURL=web-collections.js.map

package/dist/vite-plugin/web-collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-collections.js","names":[],"sources":["../../src/vite-plugin/web-collections.ts"],"sourcesContent":["/**\n * Manifest → web collection selection (single source of truth).\n *\n * The browser client data runtime (`@happyvertical/smrt-web`, #1761) consumes\n * one typed collection definition per API-exposed REST collection. Three\n * emission sites need the SAME selection and field rules, or the emitted\n * runtime values and their declared types drift apart:\n *\n *  - the `\\0smrt:web` runtime virtual module (JSON literal — {@link generateWebModule})\n *  - the `@happyvertical/smrt-virt-web` ambient d.ts (vite-plugin)\n *  - the physical `@smrt/web` d.ts (prebuild, for `tsc`-only consumers)\n *\n * All three import {@link selectWebCollectionEntries} from here so the value\n * emission and the type emission can never disagree.\n */\n\nimport type {\n  FieldDefinition,\n  SmartObjectDefinition,\n  SmartObjectManifest,\n} from '../scanner/types.js';\nimport { resolveApiActionSet } from './sveltekit-generator.js';\n\n/**\n * Field types that are relationship pseudo-columns rather than persisted\n * public-DTO columns — they never appear on the wire as scalar values.\n */\nconst RELATIONSHIP_FIELD_TYPES: ReadonlySet<FieldDefinition['type']> = new Set([\n  'oneToMany',\n  'manyToMany',\n]);\n\n/**\n * Field types that describe a relationship to another model. A superset of\n * {@link RELATIONSHIP_FIELD_TYPES}: `foreignKey`/`crossPackageRef` are persisted\n * scalar id columns (they DO appear on the wire), while `oneToMany`/`manyToMany`\n * are pseudo-columns — but all four carry a `related` edge to a sibling model.\n */\nconst RELATIONSHIP_EDGE_TYPES: ReadonlySet<FieldDefinition['type']> = new Set([\n  'foreignKey',\n  'crossPackageRef',\n  'oneToMany',\n  'manyToMany',\n]);\n\n/** Informational per-column metadata carried by a collection definition. */\nexport interface WebFieldDefinition {\n  type: FieldDefinition['type'];\n  required?: boolean;\n  default?: unknown;\n}\n\n/** The relationship kinds a web collection edge can describe. */\nexport type WebRelationshipKind =\n  | 'foreignKey'\n  | 'crossPackageRef'\n  | 'oneToMany'\n  | 'manyToMany';\n\n/**\n * One manifest-derived relationship edge from a collection to a sibling REST\n * collection. Consumed by the browser client-data runtime to invalidate\n * dependent collection caches when this collection is mutated (#1761) — the\n * cache-invalidation graph is derived entirely from these edges, never\n * hand-wired. SMRT-owned data: no client-engine type appears here.\n */\nexport interface WebRelationship {\n  /** The declaring field carrying the relationship (e.g. `groupId`, `items`). */\n  field: string;\n  /** The relationship kind, mirroring the manifest field type. */\n  kind: WebRelationshipKind;\n  /** REST collection name the edge resolves to (e.g. `ad_groups`). */\n  relatedCollection: string;\n}\n\n/** One selected REST collection and the model that owns its definition. */\nexport interface WebCollectionEntry {\n  /** REST collection name (pluralized), e.g. `products`. */\n  collection: string;\n  /** The manifest object that owns this collection's definition. */\n  obj: SmartObjectDefinition;\n  /** Sorted set of exposed CRUD + custom actions. */\n  actions: string[];\n}\n\n/** Resolve a manifest object by qualified name or simple class name. */\nfunction findByName(\n  manifest: SmartObjectManifest,\n  name: string,\n): SmartObjectDefinition | undefined {\n  return Object.values(manifest.objects).find(\n    (candidate) =>\n      candidate.qualifiedName === name || candidate.className === name,\n  );\n}\n\n/**\n * Normalize a relationship field's `related` value to a resolvable class name.\n *\n * Thunk forward-ref decorators — `@foreignKey(() => Scene)`, used heavily in\n * video/voice for models that reference a class declared later — serialize as\n * the RAW arrow-function source string `\"() => Scene\"` in the manifest, which\n * neither `className` nor `qualifiedName` matches. Extract the target class\n * name from the thunk so the edge resolves. Plain (`\"Scene\"`) and qualified\n * (`\"@happyvertical/smrt-assets:Asset\"`) forms contain no `=>` and pass through\n * untouched — the qualified `:` separator is preserved.\n *\n * Kept local to the relationship-edge path on purpose: extends-chain resolution\n * never sees a thunk, so `findByName` and the scanner stay unchanged.\n */\nfunction normalizeRelatedName(related: string): string {\n  const thunk = related.match(/=>\\s*([A-Za-z_$][\\w$]*)/);\n  return thunk ? thunk[1] : related.trim();\n}\n\n/**\n * True when `obj` is (transitively) a SmrtCollection subclass. Collection\n * classes describe access, not row shapes, so they never become web\n * collection definitions.\n *\n * NOTE: deliberately stronger than sveltekit-generator's private\n * `isCollectionClass`, which only inspects the direct base / a type argument.\n * A deeper subclass (`SpecialWidgetCollection extends WidgetCollection`)\n * carries no type argument of its own; without walking the extends chain it\n * would be mistaken for a model and claim its base model's REST collection.\n */\nfunction isWebCollectionClass(\n  manifest: SmartObjectManifest,\n  obj: SmartObjectDefinition,\n  seen: Set<string> = new Set(),\n): boolean {\n  // Truthy check (not `!== undefined`) mirrors the scanner's own\n  // manifest-generator: a scanner that emits `extendsTypeArg: null` for a\n  // non-generic base must not be misread as a collection.\n  if (obj.extends === 'SmrtCollection' || obj.extendsTypeArg) {\n    return true;\n  }\n  const parentName = obj.extendsQualified || obj.extends;\n  if (!parentName || seen.has(parentName)) return false;\n  seen.add(parentName);\n  const parent = findByName(manifest, parentName);\n  return parent ? isWebCollectionClass(manifest, parent, seen) : false;\n}\n\n/**\n * True when some ancestor model maps to the SAME REST collection (a shared STI\n * table). The STI base model owns the shared table's single definition.\n */\nfunction isStiChildModel(\n  manifest: SmartObjectManifest,\n  obj: SmartObjectDefinition,\n): boolean {\n  const seen = new Set<string>();\n  let parentName = obj.extendsQualified || obj.extends;\n  while (parentName && !seen.has(parentName)) {\n    seen.add(parentName);\n    const parent = findByName(manifest, parentName);\n    if (!parent) return false;\n    if (parent.collection === obj.collection) return true;\n    parentName = parent.extendsQualified || parent.extends;\n  }\n  return false;\n}\n\n/**\n * Select the manifest entries that become web collection definitions: one per\n * REST collection, STI children folding into their base model, collection\n * classes excluded, and only models that expose `list` (a read surface is\n * required to materialize a collection). Uses the canonical\n * {@link resolveApiActionSet} so the exposed-action set matches exactly what\n * the REST/SvelteKit generators actually emit.\n */\nexport function selectWebCollectionEntries(\n  manifest: SmartObjectManifest,\n): WebCollectionEntry[] {\n  const byCollection = new Map<\n    string,\n    WebCollectionEntry & { isStiChild: boolean }\n  >();\n\n  for (const obj of Object.values(manifest.objects)) {\n    if (isWebCollectionClass(manifest, obj)) continue;\n\n    const exposedActions = resolveApiActionSet(obj);\n    if (!exposedActions.has('list')) continue;\n\n    const isStiChild = isStiChildModel(manifest, obj);\n    const existing = byCollection.get(obj.collection);\n    // One definition per REST collection. The STI BASE model owns it: a child\n    // only wins while no base has been recorded yet, so the result is\n    // independent of declaration / scan order.\n    if (existing && !(existing.isStiChild && !isStiChild)) continue;\n\n    byCollection.set(obj.collection, {\n      collection: obj.collection,\n      obj,\n      actions: [...exposedActions].sort(),\n      isStiChild,\n    });\n  }\n\n  return [...byCollection.values()].map(({ collection, obj, actions }) => ({\n    collection,\n    obj,\n    actions,\n  }));\n}\n\n/**\n * Build the informational per-field metadata for a web collection definition:\n * the persisted public-DTO columns only. Relationship pseudo-fields, STI meta\n * internals, transient (unpersisted) and sensitive (wire-stripped) fields are\n * excluded — they are not columns a client reads back over the REST surface.\n */\nexport function buildWebFieldDefinitions(\n  obj: SmartObjectDefinition,\n): Record<string, WebFieldDefinition> {\n  const fields: Record<string, WebFieldDefinition> = {};\n  for (const [fieldName, field] of Object.entries(obj.fields ?? {})) {\n    if (RELATIONSHIP_FIELD_TYPES.has(field.type)) continue;\n    if (field.type === 'meta') continue;\n    if (field.transient) continue;\n    if (field.sensitive) continue;\n    fields[fieldName] = {\n      type: field.type,\n      ...(field.required !== undefined ? { required: field.required } : {}),\n      ...(field.default !== undefined ? { default: field.default } : {}),\n    };\n  }\n  return fields;\n}\n\n/**\n * Build the manifest-derived relationship edges for a web collection\n * definition (#1761): one entry per relationship field (`foreignKey`,\n * `crossPackageRef`, `oneToMany`, `manyToMany`) whose `related` target resolves\n * to another API-exposed REST collection.\n *\n * These edges drive relationship-derived cache invalidation in the browser\n * client-data runtime: mutating this collection invalidates the caches of the\n * collections named here. The invalidation graph is thus derived entirely from\n * the manifest — no hand-wired cache keys.\n *\n * An edge is SKIPPED (not emitted) when:\n *  - `related` is missing, or\n *  - `related` cannot be resolved to a manifest object (e.g. a cross-package\n *    target not present in this package's manifest), or\n *  - the resolved target is not itself an API-exposed web collection (no read\n *    surface to invalidate — it never appears in {@link selectWebCollectionEntries}).\n *\n * Self-referential edges (a collection related to itself) are kept: the runtime\n * always invalidates the mutated collection anyway, so a self edge is harmless\n * and keeping it avoids a special case.\n */\nexport function buildWebRelationships(\n  obj: SmartObjectDefinition,\n  manifest: SmartObjectManifest,\n): WebRelationship[] {\n  // The set of REST collections that are actually materialized as web\n  // collections. An edge to a model outside this set has no client cache to\n  // invalidate, so it is dropped.\n  const exposedCollections = new Set(\n    selectWebCollectionEntries(manifest).map((entry) => entry.collection),\n  );\n\n  const relationships: WebRelationship[] = [];\n  const seen = new Set<string>();\n  for (const [fieldName, field] of Object.entries(obj.fields ?? {})) {\n    if (!RELATIONSHIP_EDGE_TYPES.has(field.type)) continue;\n    if (!field.related) continue;\n\n    // Normalize first: `@foreignKey(() => Scene)` thunks serialize as the raw\n    // \"() => Scene\" source, which findByName cannot match on its own.\n    const target = findByName(manifest, normalizeRelatedName(field.related));\n    if (!target) continue;\n    if (!exposedCollections.has(target.collection)) continue;\n\n    // De-dupe on (field, relatedCollection): a model never declares the same\n    // field twice, but guard anyway so the emitted edge list is stable.\n    const dedupeKey = `${fieldName}:${target.collection}`;\n    if (seen.has(dedupeKey)) continue;\n    seen.add(dedupeKey);\n\n    relationships.push({\n      field: fieldName,\n      kind: field.type as WebRelationshipKind,\n      relatedCollection: target.collection,\n    });\n  }\n  return relationships;\n}\n"],"mappings":";;;;;;AA2BA,IAAM,2CAAiE,IAAI,IAAI,CAC7E,aACA,YACF,CAAC;;;;;;;AAQD,IAAM,0CAAgE,IAAI,IAAI;CAC5E;CACA;CACA;CACA;AACF,CAAC;;AA2CD,SAAS,WACP,UACA,MACmC;CACnC,OAAO,OAAO,OAAO,SAAS,OAAO,CAAC,CAAC,MACpC,cACC,UAAU,kBAAkB,QAAQ,UAAU,cAAc,IAChE;AACF;;;;;;;;;;;;;;;AAgBA,SAAS,qBAAqB,SAAyB;CACrD,MAAM,QAAQ,QAAQ,MAAM,yBAAyB;CACrD,OAAO,QAAQ,MAAM,KAAK,QAAQ,KAAK;AACzC;;;;;;;;;;;;AAaA,SAAS,qBACP,UACA,KACA,uBAAoB,IAAI,IAAI,GACnB;CAIT,IAAI,IAAI,YAAY,oBAAoB,IAAI,gBAC1C,OAAO;CAET,MAAM,aAAa,IAAI,oBAAoB,IAAI;CAC/C,IAAI,CAAC,cAAc,KAAK,IAAI,UAAU,GAAG,OAAO;CAChD,KAAK,IAAI,UAAU;CACnB,MAAM,SAAS,WAAW,UAAU,UAAU;CAC9C,OAAO,SAAS,qBAAqB,UAAU,QAAQ,IAAI,IAAI;AACjE;;;;;AAMA,SAAS,gBACP,UACA,KACS;CACT,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI,aAAa,IAAI,oBAAoB,IAAI;CAC7C,OAAO,cAAc,CAAC,KAAK,IAAI,UAAU,GAAG;EAC1C,KAAK,IAAI,UAAU;EACnB,MAAM,SAAS,WAAW,UAAU,UAAU;EAC9C,IAAI,CAAC,QAAQ,OAAO;EACpB,IAAI,OAAO,eAAe,IAAI,YAAY,OAAO;EACjD,aAAa,OAAO,oBAAoB,OAAO;CACjD;CACA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,2BACd,UACsB;CACtB,MAAM,+BAAe,IAAI,IAGvB;CAEF,KAAK,MAAM,OAAO,OAAO,OAAO,SAAS,OAAO,GAAG;EACjD,IAAI,qBAAqB,UAAU,GAAG,GAAG;EAEzC,MAAM,iBAAiB,oBAAoB,GAAG;EAC9C,IAAI,CAAC,eAAe,IAAI,MAAM,GAAG;EAEjC,MAAM,aAAa,gBAAgB,UAAU,GAAG;EAChD,MAAM,WAAW,aAAa,IAAI,IAAI,UAAU;EAIhD,IAAI,YAAY,EAAE,SAAS,cAAc,CAAC,aAAa;EAEvD,aAAa,IAAI,IAAI,YAAY;GAC/B,YAAY,IAAI;GAChB;GACA,SAAS,CAAC,GAAG,cAAc,CAAC,CAAC,KAAK;GAClC;EACF,CAAC;CACH;CAEA,OAAO,CAAC,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,KAAK,eAAe;EACvE;EACA;EACA;CACF,EAAE;AACJ;;;;;;;AAQA,SAAgB,yBACd,KACoC;CACpC,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;EACjE,IAAI,yBAAyB,IAAI,MAAM,IAAI,GAAG;EAC9C,IAAI,MAAM,SAAS,QAAQ;EAC3B,IAAI,MAAM,WAAW;EACrB,IAAI,MAAM,WAAW;EACrB,OAAO,aAAa;GAClB,MAAM,MAAM;GACZ,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;GACnE,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;EAClE;CACF;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,sBACd,KACA,UACmB;CAInB,MAAM,qBAAqB,IAAI,IAC7B,2BAA2B,QAAQ,CAAC,CAAC,KAAK,UAAU,MAAM,UAAU,CACtE;CAEA,MAAM,gBAAmC,CAAC;CAC1C,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;EACjE,IAAI,CAAC,wBAAwB,IAAI,MAAM,IAAI,GAAG;EAC9C,IAAI,CAAC,MAAM,SAAS;EAIpB,MAAM,SAAS,WAAW,UAAU,qBAAqB,MAAM,OAAO,CAAC;EACvE,IAAI,CAAC,QAAQ;EACb,IAAI,CAAC,mBAAmB,IAAI,OAAO,UAAU,GAAG;EAIhD,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO;EACzC,IAAI,KAAK,IAAI,SAAS,GAAG;EACzB,KAAK,IAAI,SAAS;EAElB,cAAc,KAAK;GACjB,OAAO;GACP,MAAM,MAAM;GACZ,mBAAmB,OAAO;EAC5B,CAAC;CACH;CACA,OAAO;AACT"}
+{"version":3,"file":"web-collections.js","names":[],"sources":["../../src/vite-plugin/web-collections.ts"],"sourcesContent":["/**\n * Manifest → web collection selection (single source of truth).\n *\n * The browser client data runtime (`@happyvertical/smrt-web`, #1761) consumes\n * one typed collection definition per API-exposed REST collection. Three\n * emission sites need the SAME selection and field rules, or the emitted\n * runtime values and their declared types drift apart:\n *\n *  - the `\\0smrt:web` runtime virtual module (JSON literal — {@link generateWebModule})\n *  - the `@happyvertical/smrt-virt-web` ambient d.ts (vite-plugin)\n *  - the physical `@smrt/web` d.ts (prebuild, for `tsc`-only consumers)\n *\n * All three import {@link selectWebCollectionEntries} from here so the value\n * emission and the type emission can never disagree. The per-collection SHAPE\n * (name/className/endpoint/idField/actions/fields/relationships) is built by the\n * ONE {@link buildWebCollectionDefinition}, shared by the runtime emission AND\n * the #1764 {@link computeWebManifestHash} shape digest — so the emitted shape\n * and the hashed shape can never drift (a drift would let the hash under-cover a\n * change → stale client caches).\n */\n\nimport { createHash } from 'node:crypto';\nimport {\n  buildToolDescriptors,\n  type ToolDescriptor,\n  type ToolFieldMeta,\n} from '../generators/tool-schema.js';\nimport type {\n  FieldDefinition,\n  SmartObjectDefinition,\n  SmartObjectManifest,\n} from '../scanner/types.js';\nimport { resolveApiActionSet } from './sveltekit-generator.js';\n\n/**\n * Field types that are relationship pseudo-columns rather than persisted\n * public-DTO columns — they never appear on the wire as scalar values.\n */\nconst RELATIONSHIP_FIELD_TYPES: ReadonlySet<FieldDefinition['type']> = new Set([\n  'oneToMany',\n  'manyToMany',\n]);\n\n/**\n * Field types that describe a relationship to another model. A superset of\n * {@link RELATIONSHIP_FIELD_TYPES}: `foreignKey`/`crossPackageRef` are persisted\n * scalar id columns (they DO appear on the wire), while `oneToMany`/`manyToMany`\n * are pseudo-columns — but all four carry a `related` edge to a sibling model.\n */\nconst RELATIONSHIP_EDGE_TYPES: ReadonlySet<FieldDefinition['type']> = new Set([\n  'foreignKey',\n  'crossPackageRef',\n  'oneToMany',\n  'manyToMany',\n]);\n\n/** Informational per-column metadata carried by a collection definition. */\nexport interface WebFieldDefinition {\n  type: FieldDefinition['type'];\n  required?: boolean;\n  default?: unknown;\n}\n\n/** The relationship kinds a web collection edge can describe. */\nexport type WebRelationshipKind =\n  | 'foreignKey'\n  | 'crossPackageRef'\n  | 'oneToMany'\n  | 'manyToMany';\n\n/**\n * One manifest-derived relationship edge from a collection to a sibling REST\n * collection. Consumed by the browser client-data runtime to invalidate\n * dependent collection caches when this collection is mutated (#1761) — the\n * cache-invalidation graph is derived entirely from these edges, never\n * hand-wired. SMRT-owned data: no client-engine type appears here.\n */\nexport interface WebRelationship {\n  /** The declaring field carrying the relationship (e.g. `groupId`, `items`). */\n  field: string;\n  /** The relationship kind, mirroring the manifest field type. */\n  kind: WebRelationshipKind;\n  /** REST collection name the edge resolves to (e.g. `ad_groups`). */\n  relatedCollection: string;\n}\n\n/** One selected REST collection and the model that owns its definition. */\nexport interface WebCollectionEntry {\n  /** REST collection name (pluralized), e.g. `products`. */\n  collection: string;\n  /** The manifest object that owns this collection's definition. */\n  obj: SmartObjectDefinition;\n  /** Sorted set of exposed CRUD + custom actions. */\n  actions: string[];\n}\n\n/** Resolve a manifest object by qualified name or simple class name. */\nfunction findByName(\n  manifest: SmartObjectManifest,\n  name: string,\n): SmartObjectDefinition | undefined {\n  return Object.values(manifest.objects).find(\n    (candidate) =>\n      candidate.qualifiedName === name || candidate.className === name,\n  );\n}\n\n/**\n * Normalize a relationship field's `related` value to a resolvable class name.\n *\n * Thunk forward-ref decorators — `@foreignKey(() => Scene)`, used heavily in\n * video/voice for models that reference a class declared later — serialize as\n * the RAW arrow-function source string `\"() => Scene\"` in the manifest, which\n * neither `className` nor `qualifiedName` matches. Extract the target class\n * name from the thunk so the edge resolves. Plain (`\"Scene\"`) and qualified\n * (`\"@happyvertical/smrt-assets:Asset\"`) forms contain no `=>` and pass through\n * untouched — the qualified `:` separator is preserved.\n *\n * Kept local to the relationship-edge path on purpose: extends-chain resolution\n * never sees a thunk, so `findByName` and the scanner stay unchanged.\n */\nfunction normalizeRelatedName(related: string): string {\n  const thunk = related.match(/=>\\s*([A-Za-z_$][\\w$]*)/);\n  return thunk ? thunk[1] : related.trim();\n}\n\n/**\n * True when `obj` is (transitively) a SmrtCollection subclass. Collection\n * classes describe access, not row shapes, so they never become web\n * collection definitions.\n *\n * NOTE: deliberately stronger than sveltekit-generator's private\n * `isCollectionClass`, which only inspects the direct base / a type argument.\n * A deeper subclass (`SpecialWidgetCollection extends WidgetCollection`)\n * carries no type argument of its own; without walking the extends chain it\n * would be mistaken for a model and claim its base model's REST collection.\n */\nfunction isWebCollectionClass(\n  manifest: SmartObjectManifest,\n  obj: SmartObjectDefinition,\n  seen: Set<string> = new Set(),\n): boolean {\n  // Truthy check (not `!== undefined`) mirrors the scanner's own\n  // manifest-generator: a scanner that emits `extendsTypeArg: null` for a\n  // non-generic base must not be misread as a collection.\n  if (obj.extends === 'SmrtCollection' || obj.extendsTypeArg) {\n    return true;\n  }\n  const parentName = obj.extendsQualified || obj.extends;\n  if (!parentName || seen.has(parentName)) return false;\n  seen.add(parentName);\n  const parent = findByName(manifest, parentName);\n  return parent ? isWebCollectionClass(manifest, parent, seen) : false;\n}\n\n/**\n * True when some ancestor model maps to the SAME REST collection (a shared STI\n * table). The STI base model owns the shared table's single definition.\n */\nfunction isStiChildModel(\n  manifest: SmartObjectManifest,\n  obj: SmartObjectDefinition,\n): boolean {\n  const seen = new Set<string>();\n  let parentName = obj.extendsQualified || obj.extends;\n  while (parentName && !seen.has(parentName)) {\n    seen.add(parentName);\n    const parent = findByName(manifest, parentName);\n    if (!parent) return false;\n    if (parent.collection === obj.collection) return true;\n    parentName = parent.extendsQualified || parent.extends;\n  }\n  return false;\n}\n\n/**\n * Select one entry per REST collection whose exposed action set satisfies\n * `qualifies` — STI children folding into their base model, collection classes\n * excluded. Uses the canonical {@link resolveApiActionSet} so the exposed-action\n * set matches exactly what the REST/SvelteKit generators actually emit. Shared\n * by {@link selectWebCollectionEntries} (list-qualified — materializable\n * collections) and {@link selectWebEtagSaltEntries} (get-OR-list — every model\n * with a read route the ETag salt must cover).\n */\nfunction selectEntriesQualifiedBy(\n  manifest: SmartObjectManifest,\n  qualifies: (actions: ReadonlySet<string>) => boolean,\n): WebCollectionEntry[] {\n  const byCollection = new Map<\n    string,\n    WebCollectionEntry & { isStiChild: boolean }\n  >();\n\n  for (const obj of Object.values(manifest.objects)) {\n    if (isWebCollectionClass(manifest, obj)) continue;\n\n    const exposedActions = resolveApiActionSet(obj);\n    if (!qualifies(exposedActions)) continue;\n\n    const isStiChild = isStiChildModel(manifest, obj);\n    const existing = byCollection.get(obj.collection);\n    // One definition per REST collection. The STI BASE model owns it: a child\n    // only wins while no base has been recorded yet, so the result is\n    // independent of declaration / scan order.\n    if (existing && !(existing.isStiChild && !isStiChild)) continue;\n\n    byCollection.set(obj.collection, {\n      collection: obj.collection,\n      obj,\n      actions: [...exposedActions].sort(),\n      isStiChild,\n    });\n  }\n\n  return [...byCollection.values()].map(({ collection, obj, actions }) => ({\n    collection,\n    obj,\n    actions,\n  }));\n}\n\n/**\n * Select the manifest entries that become web collection definitions: one per\n * REST collection, STI children folding into their base model, collection\n * classes excluded, and only models that expose `list` (a read surface is\n * required to MATERIALIZE a client collection — that is what persists).\n */\nexport function selectWebCollectionEntries(\n  manifest: SmartObjectManifest,\n): WebCollectionEntry[] {\n  return selectEntriesQualifiedBy(manifest, (actions) => actions.has('list'));\n}\n\n/**\n * Select the entries the ETag salt (#1764) must cover: every api-exposed model\n * with a GENERATED READ ROUTE — `list` OR `get`. Broader than\n * {@link selectWebCollectionEntries} on purpose: a get-only model\n * (`api: { include: ['get'] }`) has no materializable client collection (so it\n * never persists), but its generated GET route IS salted, so a shape-only change\n * to it must still change the salt — otherwise a client holding the old concrete\n * ETag would get a zero-query 304 after a shape-only deploy (the #1765 gap the\n * salt closes). Not exported: only {@link computeWebManifestHash} consumes it.\n */\nfunction selectWebEtagSaltEntries(\n  manifest: SmartObjectManifest,\n): WebCollectionEntry[] {\n  return selectEntriesQualifiedBy(\n    manifest,\n    (actions) => actions.has('list') || actions.has('get'),\n  );\n}\n\n/**\n * Build the per-collection web-collection definition literal — the SINGLE\n * source of truth for the shape emitted by {@link generateWebModule} and hashed\n * by {@link computeWebManifestHash}. Building it in ONE place is a\n * cache-coherency requirement: if the emitted shape and the hashed shape were\n * built independently, adding a field to one and not the other would let the\n * hash silently UNDER-cover a shape change, so persisted caches would not drop\n * and stale rows would hydrate into new code.\n */\nexport function buildWebCollectionDefinition(\n  entry: WebCollectionEntry,\n  manifest: SmartObjectManifest,\n): {\n  name: string;\n  className: string;\n  endpoint: string;\n  idField: string;\n  actions: string[];\n  fields: Record<string, WebFieldDefinition>;\n  relationships: WebRelationship[];\n} {\n  return {\n    name: entry.collection,\n    className: entry.obj.className,\n    endpoint: `/${entry.collection}`,\n    idField: 'id',\n    actions: entry.actions,\n    fields: buildWebFieldDefinitions(entry.obj),\n    relationships: buildWebRelationships(entry.obj, manifest),\n  };\n}\n\n/**\n * Build the informational per-field metadata for a web collection definition:\n * the persisted public-DTO columns only. Relationship pseudo-fields, STI meta\n * internals, transient (unpersisted) and sensitive (wire-stripped) fields are\n * excluded — they are not columns a client reads back over the REST surface.\n */\nexport function buildWebFieldDefinitions(\n  obj: SmartObjectDefinition,\n): Record<string, WebFieldDefinition> {\n  const fields: Record<string, WebFieldDefinition> = {};\n  for (const [fieldName, field] of Object.entries(obj.fields ?? {})) {\n    if (RELATIONSHIP_FIELD_TYPES.has(field.type)) continue;\n    if (field.type === 'meta') continue;\n    if (field.transient) continue;\n    if (field.sensitive) continue;\n    fields[fieldName] = {\n      type: field.type,\n      ...(field.required !== undefined ? { required: field.required } : {}),\n      ...(field.default !== undefined ? { default: field.default } : {}),\n    };\n  }\n  return fields;\n}\n\n/**\n * Build the manifest-derived relationship edges for a web collection\n * definition (#1761): one entry per relationship field (`foreignKey`,\n * `crossPackageRef`, `oneToMany`, `manyToMany`) whose `related` target resolves\n * to another API-exposed REST collection.\n *\n * These edges drive relationship-derived cache invalidation in the browser\n * client-data runtime: mutating this collection invalidates the caches of the\n * collections named here. The invalidation graph is thus derived entirely from\n * the manifest — no hand-wired cache keys.\n *\n * An edge is SKIPPED (not emitted) when:\n *  - `related` is missing, or\n *  - `related` cannot be resolved to a manifest object (e.g. a cross-package\n *    target not present in this package's manifest), or\n *  - the resolved target is not itself an API-exposed web collection (no read\n *    surface to invalidate — it never appears in {@link selectWebCollectionEntries}).\n *\n * Self-referential edges (a collection related to itself) are kept: the runtime\n * always invalidates the mutated collection anyway, so a self edge is harmless\n * and keeping it avoids a special case.\n */\nexport function buildWebRelationships(\n  obj: SmartObjectDefinition,\n  manifest: SmartObjectManifest,\n): WebRelationship[] {\n  // The set of REST collections that are actually materialized as web\n  // collections. An edge to a model outside this set has no client cache to\n  // invalidate, so it is dropped.\n  const exposedCollections = new Set(\n    selectWebCollectionEntries(manifest).map((entry) => entry.collection),\n  );\n\n  const relationships: WebRelationship[] = [];\n  const seen = new Set<string>();\n  for (const [fieldName, field] of Object.entries(obj.fields ?? {})) {\n    if (!RELATIONSHIP_EDGE_TYPES.has(field.type)) continue;\n    if (!field.related) continue;\n\n    // Normalize first: `@foreignKey(() => Scene)` thunks serialize as the raw\n    // \"() => Scene\" source, which findByName cannot match on its own.\n    const target = findByName(manifest, normalizeRelatedName(field.related));\n    if (!target) continue;\n    if (!exposedCollections.has(target.collection)) continue;\n\n    // De-dupe on (field, relatedCollection): a model never declares the same\n    // field twice, but guard anyway so the emitted edge list is stable.\n    const dedupeKey = `${fieldName}:${target.collection}`;\n    if (seen.has(dedupeKey)) continue;\n    seen.add(dedupeKey);\n\n    relationships.push({\n      field: fieldName,\n      kind: field.type as WebRelationshipKind,\n      relatedCollection: target.collection,\n    });\n  }\n  return relationships;\n}\n\n/**\n * Build the WebMCP / MCP tool descriptors for a web collection (#1812): one\n * descriptor per exposed action, over the SAME public-DTO fields the definition\n * already exposes (`buildWebFieldDefinitions`). The tool ids match the Node MCP\n * surface (`<class>_<action>`), so a page's WebMCP tools and its MCP-server\n * tools share one vocabulary.\n *\n * Deliberately NOT part of {@link buildWebCollectionDefinition}: descriptors are\n * layered onto the emitted value by {@link generateWebModule} instead, so the\n * #1764 {@link computeWebManifestHash} shape digest keeps hashing ONLY the row\n * shape. That is safe because a descriptor is a pure function of\n * className/actions/fields — all already in the hash — so excluding it never\n * lets the digest under-cover a real shape change.\n */\nexport function buildWebToolDescriptors(\n  entry: WebCollectionEntry,\n): ToolDescriptor[] {\n  const webFields = buildWebFieldDefinitions(entry.obj);\n  const fields: ToolFieldMeta[] = Object.entries(webFields).map(\n    ([name, def]) => ({\n      name,\n      type: def.type,\n      ...(def.required !== undefined ? { required: def.required } : {}),\n      ...(def.default !== undefined ? { default: def.default } : {}),\n    }),\n  );\n  return buildToolDescriptors({\n    className: entry.obj.className,\n    fields,\n    actions: entry.actions,\n  });\n}\n\n/**\n * Recursively sort object keys so structurally-equal values serialize to the\n * SAME JSON regardless of insertion order. Arrays keep their order (order is\n * semantic for `actions`/`relationships`); objects are rebuilt with keys sorted.\n * Required for {@link computeWebManifestHash} to be replica-stable: two builds\n * that produce the same schema but visit the manifest in a different order (map\n * insertion, scan order) must still hash identically, which a plain\n * `JSON.stringify` of insertion-ordered objects would NOT guarantee.\n */\nfunction canonicalize(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.map((entry) => canonicalize(entry));\n  }\n  if (value && typeof value === 'object') {\n    const sorted: Record<string, unknown> = {};\n    for (const key of Object.keys(value as Record<string, unknown>).sort()) {\n      sorted[key] = canonicalize((value as Record<string, unknown>)[key]);\n    }\n    return sorted;\n  }\n  return value;\n}\n\n/**\n * A deterministic, replica-stable digest of the web-collection SHAPE (#1764).\n *\n * The hash covers exactly the thing whose change means either old persisted\n * client rows may mis-hydrate OR a stale read ETag would still 304: the same\n * per-collection definition shape {@link generateWebModule} emits — name,\n * className, endpoint, idField, actions, fields, relationships — built via the\n * SHARED {@link buildWebCollectionDefinition} so the hash can never disagree\n * with what is actually shipped. The shape is CANONICALIZED (keys recursively\n * sorted; see {@link canonicalize}) before hashing, so the same schema always\n * yields the same digest across builds and replicas regardless of manifest\n * iteration order.\n *\n * SCOPE — get-OR-list (broader than materializable collections). Covered by\n * {@link selectWebEtagSaltEntries}, so it includes GET-ONLY models too: those do\n * not persist (no materializable collection), but their generated GET route IS\n * salted with this hash, so a shape-only change to a get-only model must change\n * it or a client holding the old concrete ETag gets a zero-query 304 after a\n * shape-only deploy (the #1765 gap the salt closes). The two consumers both use\n * this one value, so it stays identical between them:\n *  - `@happyvertical/smrt-web` persistence (#1764) folds it into the durable\n *    namespace, so a contract-changing deploy lands on a fresh namespace and old\n *    rows are never found (dropped, not mis-hydrated). Including get-only models\n *    here is harmless over-invalidation — only list-materializable collections\n *    ever hold a persisted snapshot.\n *  - the generated read ETag (#1765 salt, #1764) folds it in so a shape-only\n *    deploy (no table write) busts every read validator, get-only routes too.\n *\n * Truncated to the first 16 base64url chars: 96 bits is far more than enough to\n * make an accidental shape collision negligible, and a short constant keeps the\n * emitted module and every persistence key compact.\n */\nexport function computeWebManifestHash(manifest: SmartObjectManifest): string {\n  const definitions: Record<string, unknown> = {};\n  for (const entry of selectWebEtagSaltEntries(manifest)) {\n    definitions[entry.collection] = buildWebCollectionDefinition(\n      entry,\n      manifest,\n    );\n  }\n  const canonicalJson = JSON.stringify(canonicalize(definitions));\n  return createHash('sha256')\n    .update(canonicalJson)\n    .digest('base64url')\n    .slice(0, 16);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,IAAM,2CAAiE,IAAI,IAAI,CAC7E,aACA,YACF,CAAC;;;;;;;AAQD,IAAM,0CAAgE,IAAI,IAAI;CAC5E;CACA;CACA;CACA;AACF,CAAC;;AA2CD,SAAS,WACP,UACA,MACmC;CACnC,OAAO,OAAO,OAAO,SAAS,OAAO,CAAC,CAAC,MACpC,cACC,UAAU,kBAAkB,QAAQ,UAAU,cAAc,IAChE;AACF;;;;;;;;;;;;;;;AAgBA,SAAS,qBAAqB,SAAyB;CACrD,MAAM,QAAQ,QAAQ,MAAM,yBAAyB;CACrD,OAAO,QAAQ,MAAM,KAAK,QAAQ,KAAK;AACzC;;;;;;;;;;;;AAaA,SAAS,qBACP,UACA,KACA,uBAAoB,IAAI,IAAI,GACnB;CAIT,IAAI,IAAI,YAAY,oBAAoB,IAAI,gBAC1C,OAAO;CAET,MAAM,aAAa,IAAI,oBAAoB,IAAI;CAC/C,IAAI,CAAC,cAAc,KAAK,IAAI,UAAU,GAAG,OAAO;CAChD,KAAK,IAAI,UAAU;CACnB,MAAM,SAAS,WAAW,UAAU,UAAU;CAC9C,OAAO,SAAS,qBAAqB,UAAU,QAAQ,IAAI,IAAI;AACjE;;;;;AAMA,SAAS,gBACP,UACA,KACS;CACT,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI,aAAa,IAAI,oBAAoB,IAAI;CAC7C,OAAO,cAAc,CAAC,KAAK,IAAI,UAAU,GAAG;EAC1C,KAAK,IAAI,UAAU;EACnB,MAAM,SAAS,WAAW,UAAU,UAAU;EAC9C,IAAI,CAAC,QAAQ,OAAO;EACpB,IAAI,OAAO,eAAe,IAAI,YAAY,OAAO;EACjD,aAAa,OAAO,oBAAoB,OAAO;CACjD;CACA,OAAO;AACT;;;;;;;;;;AAWA,SAAS,yBACP,UACA,WACsB;CACtB,MAAM,+BAAe,IAAI,IAGvB;CAEF,KAAK,MAAM,OAAO,OAAO,OAAO,SAAS,OAAO,GAAG;EACjD,IAAI,qBAAqB,UAAU,GAAG,GAAG;EAEzC,MAAM,iBAAiB,oBAAoB,GAAG;EAC9C,IAAI,CAAC,UAAU,cAAc,GAAG;EAEhC,MAAM,aAAa,gBAAgB,UAAU,GAAG;EAChD,MAAM,WAAW,aAAa,IAAI,IAAI,UAAU;EAIhD,IAAI,YAAY,EAAE,SAAS,cAAc,CAAC,aAAa;EAEvD,aAAa,IAAI,IAAI,YAAY;GAC/B,YAAY,IAAI;GAChB;GACA,SAAS,CAAC,GAAG,cAAc,CAAC,CAAC,KAAK;GAClC;EACF,CAAC;CACH;CAEA,OAAO,CAAC,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,KAAK,eAAe;EACvE;EACA;EACA;CACF,EAAE;AACJ;;;;;;;AAQA,SAAgB,2BACd,UACsB;CACtB,OAAO,yBAAyB,WAAW,YAAY,QAAQ,IAAI,MAAM,CAAC;AAC5E;;;;;;;;;;;AAYA,SAAS,yBACP,UACsB;CACtB,OAAO,yBACL,WACC,YAAY,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CACvD;AACF;;;;;;;;;;AAWA,SAAgB,6BACd,OACA,UASA;CACA,OAAO;EACL,MAAM,MAAM;EACZ,WAAW,MAAM,IAAI;EACrB,UAAU,IAAI,MAAM;EACpB,SAAS;EACT,SAAS,MAAM;EACf,QAAQ,yBAAyB,MAAM,GAAG;EAC1C,eAAe,sBAAsB,MAAM,KAAK,QAAQ;CAC1D;AACF;;;;;;;AAQA,SAAgB,yBACd,KACoC;CACpC,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;EACjE,IAAI,yBAAyB,IAAI,MAAM,IAAI,GAAG;EAC9C,IAAI,MAAM,SAAS,QAAQ;EAC3B,IAAI,MAAM,WAAW;EACrB,IAAI,MAAM,WAAW;EACrB,OAAO,aAAa;GAClB,MAAM,MAAM;GACZ,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;GACnE,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;EAClE;CACF;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,sBACd,KACA,UACmB;CAInB,MAAM,qBAAqB,IAAI,IAC7B,2BAA2B,QAAQ,CAAC,CAAC,KAAK,UAAU,MAAM,UAAU,CACtE;CAEA,MAAM,gBAAmC,CAAC;CAC1C,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,WAAW,UAAU,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC,GAAG;EACjE,IAAI,CAAC,wBAAwB,IAAI,MAAM,IAAI,GAAG;EAC9C,IAAI,CAAC,MAAM,SAAS;EAIpB,MAAM,SAAS,WAAW,UAAU,qBAAqB,MAAM,OAAO,CAAC;EACvE,IAAI,CAAC,QAAQ;EACb,IAAI,CAAC,mBAAmB,IAAI,OAAO,UAAU,GAAG;EAIhD,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO;EACzC,IAAI,KAAK,IAAI,SAAS,GAAG;EACzB,KAAK,IAAI,SAAS;EAElB,cAAc,KAAK;GACjB,OAAO;GACP,MAAM,MAAM;GACZ,mBAAmB,OAAO;EAC5B,CAAC;CACH;CACA,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,SAAgB,wBACd,OACkB;CAClB,MAAM,YAAY,yBAAyB,MAAM,GAAG;CACpD,MAAM,SAA0B,OAAO,QAAQ,SAAS,CAAC,CAAC,KACvD,CAAC,MAAM,UAAU;EAChB;EACA,MAAM,IAAI;EACV,GAAI,IAAI,aAAa,KAAA,IAAY,EAAE,UAAU,IAAI,SAAS,IAAI,CAAC;EAC/D,GAAI,IAAI,YAAY,KAAA,IAAY,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;CAC9D,EACF;CACA,OAAO,qBAAqB;EAC1B,WAAW,MAAM,IAAI;EACrB;EACA,SAAS,MAAM;CACjB,CAAC;AACH;;;;;;;;;;AAWA,SAAS,aAAa,OAAyB;CAC7C,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,UAAU,aAAa,KAAK,CAAC;CAEjD,IAAI,SAAS,OAAO,UAAU,UAAU;EACtC,MAAM,SAAkC,CAAC;EACzC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAgC,CAAC,CAAC,KAAK,GACnE,OAAO,OAAO,aAAc,MAAkC,IAAI;EAEpE,OAAO;CACT;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,uBAAuB,UAAuC;CAC5E,MAAM,cAAuC,CAAC;CAC9C,KAAK,MAAM,SAAS,yBAAyB,QAAQ,GACnD,YAAY,MAAM,cAAc,6BAC9B,OACA,QACF;CAEF,MAAM,gBAAgB,KAAK,UAAU,aAAa,WAAW,CAAC;CAC9D,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,aAAa,CAAC,CACrB,OAAO,WAAW,CAAC,CACnB,MAAM,GAAG,EAAE;AAChB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-core",
-  "version": "0.38.6",
+  "version": "0.38.8",
   "description": "Core AI agent framework with standardized collections, object-relational mapping, and code generators",
   "author": "HappyVertical",
   "type": "module",
@@ -154,9 +154,9 @@
     "tsx": "^4.23.0",
     "typescript": "^5.9.3",
     "yaml": "^2.9.0",
-    "@happyvertical/smrt-config": "0.38.6",
-    "@happyvertical/smrt-scanner": "0.38.6",
-    "@happyvertical/smrt-types": "0.38.6"
+    "@happyvertical/smrt-config": "0.38.8",
+    "@happyvertical/smrt-scanner": "0.38.8",
+    "@happyvertical/smrt-types": "0.38.8"
   },
   "peerDependencies": {
     "@huggingface/transformers": ">=3.0.0 <4.0.0",