@happyvertical/smrt-core 0.45.3 → 0.46.0

package/AGENTS.md

@@ -14,6 +14,7 @@ and repository rules.
 | `src/collection.ts` | Limits, sort whitelist, generated list order | [agents/query-bounds.md](agents/query-bounds.md) |
 | `src/data-query.ts` | Transport-neutral bounded query normalization | [agents/data-query.md](agents/data-query.md) |
 | `src/schema/`, `src/migrations/`, `src/cascade.ts`, `src/system/` | DDL parity, indexes, migrations, delete integrity, retention | [agents/schema-paths.md](agents/schema-paths.md) |
+| `src/postgres-permissions.ts` | Explicit PostgreSQL ACL plans and atomic reconciliation | [deployment permission contract](../../docs/content/postgres-permissions.md) |
 | `src/change-feed.ts` | Durable changes, cursors, table versions, retention | [agents/change-feed.md](agents/change-feed.md) |
 | `src/change-signals.ts` | Signal bus, replica fan-out, SSE | [agents/change-signals.md](agents/change-signals.md) |
 | `src/generators/`, `src/vite-plugin/web-collections.ts` | REST/CLI/MCP generation, manifest hashes, ETags | [agents/generators.md](agents/generators.md) |

package/agents/generators.md

@@ -9,7 +9,6 @@ invariants, and the traps that apply before editing anything live in
 | Generator | Location | Output |
 |-----------|----------|--------|
 | REST API | `src/generators/rest.ts` | OpenAPI-compliant CRUD endpoints |
-| CLI | `src/generators/cli.ts` | `objectname:action` admin commands — writable allowlist, exhaustive-include, `--from-file`, fail-closed tenant context |
 | MCP Server | `src/generators/mcp.ts` | Model Context Protocol tools |
 | Web collections | `src/vite-plugin/web-collections.ts` (selectors) + `generateWebModule` | `@happyvertical/smrt-virt-web` — one typed collection definition per API-exposed REST collection (#1761), consumed by `@happyvertical/smrt-web` |
 

package/dist/browser.d.ts

@@ -6,7 +6,8 @@
  * builds, federation, and client-side applications.
  *
  * Excluded:
- * - Code generators (CLIGenerator, APIGenerator, MCPGenerator)
+ * - Code generators (APIGenerator, MCPGenerator; the local CLI transport
+ *   lives outside core in packages/cli/src/cli-generator.ts)
  * - Runtime manifest utilities (Node.js-only)
  * - Prebuild utilities (Node.js-only)
  *

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,cAAc,kBAAkB,CAAC;AAEjC,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAOlC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,cAAc,UAAU,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,2BAA2B,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAElD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,cAAc,eAAe,CAAC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,cAAc,kBAAkB,CAAC;AAEjC,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAOlC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,cAAc,UAAU,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,2BAA2B,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAElD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,cAAc,eAAe,CAAC"}

package/dist/embedded-write-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embedded-write-queue.d.ts","sourceRoot":"","sources":["../src/embedded-write-queue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AA0C5D,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAEjE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAG3E;AAMD;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GACxD,OAAO,CAAC,CAAC,CAAC,CAeZ"}
+{"version":3,"file":"embedded-write-queue.d.ts","sourceRoot":"","sources":["../src/embedded-write-queue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AA0C5D,UAAU,iBAAiB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAEjE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAG3E;AA0BD;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GACxD,OAAO,CAAC,CAAC,CAAC,CAeZ"}

package/dist/embedded-write-queue.js

@@ -69,8 +69,27 @@ function usesEmbeddedRevisionFallback(db) {
 	const url = db?.url ?? "";
 	return isEmbeddedDatabase(db) && !/^(?:https?|libsql):\/\//iu.test(url);
 }
+/**
+* Whether `url` identifies a SQLite/DuckDB in-memory database that is
+* private to its own connection, as opposed to shared state.
+*
+* Bare `:memory:` and `file::memory:` (no query string) each mint a fresh,
+* connection-private database -- `resolveDuckDBUrl(':memory:')` returns it
+* unchanged, with no per-instance suffix -- so two independent handles that
+* both happen to carry this literal string are NOT the same database and
+* must not share a write-queue identity (#2707). A `cache=shared` query
+* parameter (e.g. `file::memory:?cache=shared`) is the opposite case: it is
+* SQLite's own mechanism for making an in-memory database genuinely shared
+* across connections in the process, so a URL carrying it must keep the
+* ordinary string-keyed (shared) behavior.
+*/
+function isPerConnectionMemoryUrl(url) {
+	if (url.includes("cache=shared")) return false;
+	return url === ":memory:" || url === "file::memory:";
+}
 function queueKey(db) {
-	return typeof db?.url === "string" && db.url.length > 0 ? db.url : db;
+	if (typeof db?.url !== "string" || db.url.length === 0) return db;
+	return isPerConnectionMemoryUrl(db.url) ? db : db.url;
 }
 /**
 * Run `operation` after every previously queued write on the same database

package/dist/embedded-write-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"embedded-write-queue.js","names":[],"sources":["../src/embedded-write-queue.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks';\nimport type { DatabaseInterface } from '@happyvertical/sql';\n\n/**\n * In-process write serialization for embedded database engines (#2360).\n *\n * File-backed SQLite (libsql) allows one writer at a time and the SDK opens a\n * NEW connection for every null-aware upsert attempt (`transaction(\"write\")`),\n * with no busy timeout on either connection. Any other write on the root\n * connection while such a transaction is open — most commonly the change-feed\n * append that follows every model save — collides as `SQLITE_BUSY`, and under\n * sustained concurrency (a `Promise.all` of creates) the two sides livelock\n * through every retry tier. Before the tenant-led conflict target (#2360) the\n * null-aware path was rare (custom conflict keys with NULL values, #1246);\n * with `tenant_id` leading every tenant-scoped default key, EVERY NULL-tenant\n * (global) create takes it, so the collision became the steady state.\n *\n * The queue makes the process a single writer per embedded database for:\n *\n * - a `save()` whose upsert conflict values contain NULL (the only shape the\n *   SDK routes through a second-connection transaction), and\n * - the change-feed append (a root-connection write that follows every save).\n * - every model save and delete, so the embedded revision-CAS compare/upsert\n *   fallback cannot race an ordinary save, natural-key create, or delete.\n * - a complete root `SmrtObject.withTransaction()` callback, with writes on\n *   its bound handle re-entering the same hold instead of self-deadlocking.\n *\n * Ordinary save/delete holds contain database calls only — never an\n * interceptor or hook. Explicit transaction callbacks are caller-controlled,\n * so their bound model writes re-enter the existing hold. PostgreSQL is never\n * serialized here:\n * its null-aware upsert already arbitrates through advisory locks\n * server-side, and cross-process writers exist that an in-process queue could\n * not order anyway (which is also why this queue is a mitigation for embedded\n * engines' in-process writers, not a cross-process guarantee — embedded\n * engines have no cross-process writers in supported deployments).\n */\n\n/** Queue tail per database identity (URL string, or the handle itself). */\nconst urlQueues = new Map<string, Promise<unknown>>();\nconst handleQueues = new WeakMap<object, Promise<unknown>>();\nconst activeQueueKeys = new AsyncLocalStorage<ReadonlySet<string | object>>();\n\ninterface QueueableDatabase {\n  url?: string;\n}\n\n/**\n * Whether `db` is an embedded engine (SQLite/DuckDB/JSON — anything that is\n * not PostgreSQL). Handles without a URL are treated as embedded: serializing\n * them is at worst a throughput cost, while not serializing an embedded\n * handle reintroduces the livelock.\n */\nexport function isEmbeddedDatabase(db: QueueableDatabase): boolean {\n  return !isPostgresDatabase(db);\n}\n\n/**\n * Whether `db` is a PostgreSQL handle.\n *\n * The revision compare-and-swap predicate is dialect-specific (#2620): only\n * PostgreSQL needs the millisecond-truncating, timezone-tolerant guard, and\n * only PostgreSQL can evaluate `date_trunc`.\n */\nexport function isPostgresDatabase(db: QueueableDatabase): boolean {\n  return /^postgres(?:ql)?:/iu.test(db?.url ?? '');\n}\n\n/**\n * Whether revision compare-and-swap needs the process-local read/upsert path.\n *\n * DuckDB/JSON cannot express the timestamp predicate through the generic\n * update API, and local SQLite has only the process's writers in supported\n * deployments. Remote LibSQL/Turso is different: other processes may write\n * the same database, so it must use one conditional UPDATE at the server.\n */\nexport function usesEmbeddedRevisionFallback(db: QueueableDatabase): boolean {\n  const url = db?.url ?? '';\n  return isEmbeddedDatabase(db) && !/^(?:https?|libsql):\\/\\//iu.test(url);\n}\n\nfunction queueKey(db: QueueableDatabase): string | object {\n  return typeof db?.url === 'string' && db.url.length > 0 ? db.url : db;\n}\n\n/**\n * Run `operation` after every previously queued write on the same database\n * has settled. When `serialize` is false the operation runs immediately.\n */\nexport async function withEmbeddedWriteQueue<T>(\n  db: QueueableDatabase,\n  serialize: boolean,\n  operation: () => Promise<T>,\n): Promise<T> {\n  if (!serialize) return operation();\n\n  const key = queueKey(db);\n  const active = activeQueueKeys.getStore();\n  if (active?.has(key)) return operation();\n  const previous =\n    (typeof key === 'string' ? urlQueues.get(key) : handleQueues.get(key)) ??\n    Promise.resolve();\n  const run = () =>\n    activeQueueKeys.run(new Set([...(active ?? []), key]), operation);\n  const next = previous.then(run, run);\n  // The stored tail must never reject, or one failed write would poison the\n  // queue for every later writer.\n  const tail = next.catch(() => undefined);\n  if (typeof key === 'string') {\n    urlQueues.set(key, tail);\n    void tail.finally(() => {\n      if (urlQueues.get(key) === tail) urlQueues.delete(key);\n    });\n  } else {\n    handleQueues.set(key, tail);\n  }\n  return next;\n}\n\n/**\n * Serialize a complete embedded root transaction with ordinary model writes.\n * The transaction handle is registered as a reentrant alias so saves and\n * change-feed appends inside the callback do not queue behind their own root\n * transaction.\n */\nexport async function withEmbeddedWriteTransaction<T>(\n  db: DatabaseInterface,\n  serialize: boolean,\n  operation: (transaction: DatabaseInterface) => Promise<T>,\n): Promise<T> {\n  const transaction = db.transaction?.bind(db);\n  if (!transaction) {\n    throw new Error('Database transaction support is required');\n  }\n  return withEmbeddedWriteQueue(db, serialize, () =>\n    transaction((bound) => {\n      if (!serialize) return operation(bound);\n      const active = activeQueueKeys.getStore();\n      return activeQueueKeys.run(\n        new Set([...(active ?? []), queueKey(bound)]),\n        () => operation(bound),\n      );\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,4BAAY,IAAI,IAA8B;AACpD,IAAM,+BAAe,IAAI,QAAkC;AAC3D,IAAM,kBAAkB,IAAI,kBAAgD;;;;;;;AAY5E,SAAgB,mBAAmB,IAAgC;CACjE,OAAO,CAAC,mBAAmB,EAAE;AAC/B;;;;;;;;AASA,SAAgB,mBAAmB,IAAgC;CACjE,OAAO,sBAAsB,KAAK,IAAI,OAAO,EAAE;AACjD;;;;;;;;;AAUA,SAAgB,6BAA6B,IAAgC;CAC3E,MAAM,MAAM,IAAI,OAAO;CACvB,OAAO,mBAAmB,EAAE,KAAK,CAAC,4BAA4B,KAAK,GAAG;AACxE;AAEA,SAAS,SAAS,IAAwC;CACxD,OAAO,OAAO,IAAI,QAAQ,YAAY,GAAG,IAAI,SAAS,IAAI,GAAG,MAAM;AACrE;;;;;AAMA,eAAsB,uBACpB,IACA,WACA,WACY;CACZ,IAAI,CAAC,WAAW,OAAO,UAAU;CAEjC,MAAM,MAAM,SAAS,EAAE;CACvB,MAAM,SAAS,gBAAgB,SAAS;CACxC,IAAI,QAAQ,IAAI,GAAG,GAAG,OAAO,UAAU;CACvC,MAAM,YACH,OAAO,QAAQ,WAAW,UAAU,IAAI,GAAG,IAAI,aAAa,IAAI,GAAG,MACpE,QAAQ,QAAQ;CAClB,MAAM,YACJ,gBAAgB,oBAAI,IAAI,IAAI,CAAC,GAAI,UAAU,CAAC,GAAI,GAAG,CAAC,GAAG,SAAS;CAClE,MAAM,OAAO,SAAS,KAAK,KAAK,GAAG;CAGnC,MAAM,OAAO,KAAK,YAAY,KAAA,CAAS;CACvC,IAAI,OAAO,QAAQ,UAAU;EAC3B,UAAU,IAAI,KAAK,IAAI;EACvB,KAAU,cAAc;GACtB,IAAI,UAAU,IAAI,GAAG,MAAM,MAAM,UAAU,OAAO,GAAG;EACvD,CAAC;CACH,OACE,aAAa,IAAI,KAAK,IAAI;CAE5B,OAAO;AACT;;;;;;;AAQA,eAAsB,6BACpB,IACA,WACA,WACY;CACZ,MAAM,cAAc,GAAG,aAAa,KAAK,EAAE;CAC3C,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0CAA0C;CAE5D,OAAO,uBAAuB,IAAI,iBAChC,aAAa,UAAU;EACrB,IAAI,CAAC,WAAW,OAAO,UAAU,KAAK;EACtC,MAAM,SAAS,gBAAgB,SAAS;EACxC,OAAO,gBAAgB,oBACrB,IAAI,IAAI,CAAC,GAAI,UAAU,CAAC,GAAI,SAAS,KAAK,CAAC,CAAC,SACtC,UAAU,KAAK,CACvB;CACF,CAAC,CACH;AACF"}
+{"version":3,"file":"embedded-write-queue.js","names":[],"sources":["../src/embedded-write-queue.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks';\nimport type { DatabaseInterface } from '@happyvertical/sql';\n\n/**\n * In-process write serialization for embedded database engines (#2360).\n *\n * File-backed SQLite (libsql) allows one writer at a time and the SDK opens a\n * NEW connection for every null-aware upsert attempt (`transaction(\"write\")`),\n * with no busy timeout on either connection. Any other write on the root\n * connection while such a transaction is open — most commonly the change-feed\n * append that follows every model save — collides as `SQLITE_BUSY`, and under\n * sustained concurrency (a `Promise.all` of creates) the two sides livelock\n * through every retry tier. Before the tenant-led conflict target (#2360) the\n * null-aware path was rare (custom conflict keys with NULL values, #1246);\n * with `tenant_id` leading every tenant-scoped default key, EVERY NULL-tenant\n * (global) create takes it, so the collision became the steady state.\n *\n * The queue makes the process a single writer per embedded database for:\n *\n * - a `save()` whose upsert conflict values contain NULL (the only shape the\n *   SDK routes through a second-connection transaction), and\n * - the change-feed append (a root-connection write that follows every save).\n * - every model save and delete, so the embedded revision-CAS compare/upsert\n *   fallback cannot race an ordinary save, natural-key create, or delete.\n * - a complete root `SmrtObject.withTransaction()` callback, with writes on\n *   its bound handle re-entering the same hold instead of self-deadlocking.\n *\n * Ordinary save/delete holds contain database calls only — never an\n * interceptor or hook. Explicit transaction callbacks are caller-controlled,\n * so their bound model writes re-enter the existing hold. PostgreSQL is never\n * serialized here:\n * its null-aware upsert already arbitrates through advisory locks\n * server-side, and cross-process writers exist that an in-process queue could\n * not order anyway (which is also why this queue is a mitigation for embedded\n * engines' in-process writers, not a cross-process guarantee — embedded\n * engines have no cross-process writers in supported deployments).\n */\n\n/** Queue tail per database identity (URL string, or the handle itself). */\nconst urlQueues = new Map<string, Promise<unknown>>();\nconst handleQueues = new WeakMap<object, Promise<unknown>>();\nconst activeQueueKeys = new AsyncLocalStorage<ReadonlySet<string | object>>();\n\ninterface QueueableDatabase {\n  url?: string;\n}\n\n/**\n * Whether `db` is an embedded engine (SQLite/DuckDB/JSON — anything that is\n * not PostgreSQL). Handles without a URL are treated as embedded: serializing\n * them is at worst a throughput cost, while not serializing an embedded\n * handle reintroduces the livelock.\n */\nexport function isEmbeddedDatabase(db: QueueableDatabase): boolean {\n  return !isPostgresDatabase(db);\n}\n\n/**\n * Whether `db` is a PostgreSQL handle.\n *\n * The revision compare-and-swap predicate is dialect-specific (#2620): only\n * PostgreSQL needs the millisecond-truncating, timezone-tolerant guard, and\n * only PostgreSQL can evaluate `date_trunc`.\n */\nexport function isPostgresDatabase(db: QueueableDatabase): boolean {\n  return /^postgres(?:ql)?:/iu.test(db?.url ?? '');\n}\n\n/**\n * Whether revision compare-and-swap needs the process-local read/upsert path.\n *\n * DuckDB/JSON cannot express the timestamp predicate through the generic\n * update API, and local SQLite has only the process's writers in supported\n * deployments. Remote LibSQL/Turso is different: other processes may write\n * the same database, so it must use one conditional UPDATE at the server.\n */\nexport function usesEmbeddedRevisionFallback(db: QueueableDatabase): boolean {\n  const url = db?.url ?? '';\n  return isEmbeddedDatabase(db) && !/^(?:https?|libsql):\\/\\//iu.test(url);\n}\n\n/**\n * Whether `url` identifies a SQLite/DuckDB in-memory database that is\n * private to its own connection, as opposed to shared state.\n *\n * Bare `:memory:` and `file::memory:` (no query string) each mint a fresh,\n * connection-private database -- `resolveDuckDBUrl(':memory:')` returns it\n * unchanged, with no per-instance suffix -- so two independent handles that\n * both happen to carry this literal string are NOT the same database and\n * must not share a write-queue identity (#2707). A `cache=shared` query\n * parameter (e.g. `file::memory:?cache=shared`) is the opposite case: it is\n * SQLite's own mechanism for making an in-memory database genuinely shared\n * across connections in the process, so a URL carrying it must keep the\n * ordinary string-keyed (shared) behavior.\n */\nfunction isPerConnectionMemoryUrl(url: string): boolean {\n  if (url.includes('cache=shared')) return false;\n  return url === ':memory:' || url === 'file::memory:';\n}\n\nfunction queueKey(db: QueueableDatabase): string | object {\n  if (typeof db?.url !== 'string' || db.url.length === 0) return db;\n  return isPerConnectionMemoryUrl(db.url) ? db : db.url;\n}\n\n/**\n * Run `operation` after every previously queued write on the same database\n * has settled. When `serialize` is false the operation runs immediately.\n */\nexport async function withEmbeddedWriteQueue<T>(\n  db: QueueableDatabase,\n  serialize: boolean,\n  operation: () => Promise<T>,\n): Promise<T> {\n  if (!serialize) return operation();\n\n  const key = queueKey(db);\n  const active = activeQueueKeys.getStore();\n  if (active?.has(key)) return operation();\n  const previous =\n    (typeof key === 'string' ? urlQueues.get(key) : handleQueues.get(key)) ??\n    Promise.resolve();\n  const run = () =>\n    activeQueueKeys.run(new Set([...(active ?? []), key]), operation);\n  const next = previous.then(run, run);\n  // The stored tail must never reject, or one failed write would poison the\n  // queue for every later writer.\n  const tail = next.catch(() => undefined);\n  if (typeof key === 'string') {\n    urlQueues.set(key, tail);\n    void tail.finally(() => {\n      if (urlQueues.get(key) === tail) urlQueues.delete(key);\n    });\n  } else {\n    handleQueues.set(key, tail);\n  }\n  return next;\n}\n\n/**\n * Serialize a complete embedded root transaction with ordinary model writes.\n * The transaction handle is registered as a reentrant alias so saves and\n * change-feed appends inside the callback do not queue behind their own root\n * transaction.\n */\nexport async function withEmbeddedWriteTransaction<T>(\n  db: DatabaseInterface,\n  serialize: boolean,\n  operation: (transaction: DatabaseInterface) => Promise<T>,\n): Promise<T> {\n  const transaction = db.transaction?.bind(db);\n  if (!transaction) {\n    throw new Error('Database transaction support is required');\n  }\n  return withEmbeddedWriteQueue(db, serialize, () =>\n    transaction((bound) => {\n      if (!serialize) return operation(bound);\n      const active = activeQueueKeys.getStore();\n      return activeQueueKeys.run(\n        new Set([...(active ?? []), queueKey(bound)]),\n        () => operation(bound),\n      );\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAM,4BAAY,IAAI,IAA8B;AACpD,IAAM,+BAAe,IAAI,QAAkC;AAC3D,IAAM,kBAAkB,IAAI,kBAAgD;;;;;;;AAY5E,SAAgB,mBAAmB,IAAgC;CACjE,OAAO,CAAC,mBAAmB,EAAE;AAC/B;;;;;;;;AASA,SAAgB,mBAAmB,IAAgC;CACjE,OAAO,sBAAsB,KAAK,IAAI,OAAO,EAAE;AACjD;;;;;;;;;AAUA,SAAgB,6BAA6B,IAAgC;CAC3E,MAAM,MAAM,IAAI,OAAO;CACvB,OAAO,mBAAmB,EAAE,KAAK,CAAC,4BAA4B,KAAK,GAAG;AACxE;;;;;;;;;;;;;;;AAgBA,SAAS,yBAAyB,KAAsB;CACtD,IAAI,IAAI,SAAS,cAAc,GAAG,OAAO;CACzC,OAAO,QAAQ,cAAc,QAAQ;AACvC;AAEA,SAAS,SAAS,IAAwC;CACxD,IAAI,OAAO,IAAI,QAAQ,YAAY,GAAG,IAAI,WAAW,GAAG,OAAO;CAC/D,OAAO,yBAAyB,GAAG,GAAG,IAAI,KAAK,GAAG;AACpD;;;;;AAMA,eAAsB,uBACpB,IACA,WACA,WACY;CACZ,IAAI,CAAC,WAAW,OAAO,UAAU;CAEjC,MAAM,MAAM,SAAS,EAAE;CACvB,MAAM,SAAS,gBAAgB,SAAS;CACxC,IAAI,QAAQ,IAAI,GAAG,GAAG,OAAO,UAAU;CACvC,MAAM,YACH,OAAO,QAAQ,WAAW,UAAU,IAAI,GAAG,IAAI,aAAa,IAAI,GAAG,MACpE,QAAQ,QAAQ;CAClB,MAAM,YACJ,gBAAgB,oBAAI,IAAI,IAAI,CAAC,GAAI,UAAU,CAAC,GAAI,GAAG,CAAC,GAAG,SAAS;CAClE,MAAM,OAAO,SAAS,KAAK,KAAK,GAAG;CAGnC,MAAM,OAAO,KAAK,YAAY,KAAA,CAAS;CACvC,IAAI,OAAO,QAAQ,UAAU;EAC3B,UAAU,IAAI,KAAK,IAAI;EACvB,KAAU,cAAc;GACtB,IAAI,UAAU,IAAI,GAAG,MAAM,MAAM,UAAU,OAAO,GAAG;EACvD,CAAC;CACH,OACE,aAAa,IAAI,KAAK,IAAI;CAE5B,OAAO;AACT;;;;;;;AAQA,eAAsB,6BACpB,IACA,WACA,WACY;CACZ,MAAM,cAAc,GAAG,aAAa,KAAK,EAAE;CAC3C,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0CAA0C;CAE5D,OAAO,uBAAuB,IAAI,iBAChC,aAAa,UAAU;EACrB,IAAI,CAAC,WAAW,OAAO,UAAU,KAAK;EACtC,MAAM,SAAS,gBAAgB,SAAS;EACxC,OAAO,gBAAgB,oBACrB,IAAI,IAAI,CAAC,GAAI,UAAU,CAAC,GAAI,SAAS,KAAK,CAAC,CAAC,SACtC,UAAU,KAAK,CACvB;CACF,CAAC,CACH;AACF"}

package/dist/generators/custom-action.d.ts

@@ -15,8 +15,8 @@ export type { ToolEffect } from '../registry/types.js';
  * even when a subclass declares its own override (e.g. `User.save()` at
  * `packages/users/src/models/User.ts`). An override is still the same
  * lifecycle operation, not a new one (#2638). `delete` itself is a CRUD verb
- * `CLIGenerator`/`MCPGenerator` already special-case, so it is not repeated
- * here.
+ * `packages/cli/src/cli-generator.ts`'s `CLIGenerator`/`MCPGenerator` already
+ * special-case, so it is not repeated here.
  *
  * Scope is deliberately narrower than "every public method on
  * SmrtObject/SmrtClass/SmrtCollection":
@@ -24,11 +24,13 @@ export type { ToolEffect } from '../registry/types.js';
  * - AI operations `is()`/`do()`/`describe()` are declared on `SmrtObject`
  *   but are explicitly designed to be overridden with domain-specific
  *   behavior and exposed as a distinct action -- confirmed by existing,
- *   intentional coverage (`generators/cli-commands.spec.ts`'s
- *   `describe()` custom-action fixture,
- *   `vite-plugin/generated-client-integration.test.ts`'s `ArtCollection.
+ *   intentional coverage
+ *   (`vite-plugin/generated-client-integration.test.ts`'s `ArtCollection.
  *   describe(tone)` with its own declared API route). Excluding them here
- *   would regress real, working behavior.
+ *   would regress real, working behavior. (The sibling
+ *   `generators/cli-commands.spec.ts` fixture that used to cover the same
+ *   `describe()` custom action was retired with core's `CLIGenerator`,
+ *   #2664; this remaining fixture still exercises the behavior.)
  * - Relationship loading (`loadRelated`/`loadRelatedMany`/`getRelated`/
  *   `isRelatedLoaded`), memory (`remember`/`recall`/`recallAll`/`forget`/
  *   `forgetScope`), embeddings (`generateEmbeddings`/`getEmbedding`/
@@ -89,29 +91,28 @@ export interface ResolvableMethod {
  * for an object, given its transport config's `include`/`exclude` and its
  * method map: every public method, minus CRUD verbs, minus framework
  * lifecycle methods, restricted to `include` when present and always minus
- * `exclude`. Reused by three callers, so they agree with each other and
- * with what `listCommands()` advertises:
+ * `exclude`. Its sole caller as of #2664 (`CLIGenerator` and the
+ * `generateCLIModule()` virtual module were retired):
  *
- * - `CLIGenerator.listCommands()` (over the live `ObjectRegistry`).
  * - `findCliApiCoherenceViolations`'s bare-`cli: true`/`cli: {}` branch
  *   (over the static manifest, no explicit `include`) -- see
  *   `resolveCliActionSet` in `vite-plugin/sveltekit-generator.ts`.
- * - `generateCLIModule()` in `vite-plugin/index.ts`, which generates the
- *   `smrt:cli` virtual module's static command metadata. It layers one
- *   additional filter on top of this function's result: a leading `_` on
- *   the method name, because the manifest's `isPublic` is unreliable there
- *   (see that call site's own comment) and this function has no other
- *   signal to exclude an internal-by-convention method.
  *
  * NOT the one universal resolution, and deliberately not reused by every
  * caller that resolves a CLI command set:
  *
- * - `CLIGenerator.assertCommandExposed()` does not call this for its custom-
- *   method branch — it checks `isFrameworkLifecycleMethod()` directly plus
- *   its own inline public/include/exclude logic, so it can give a distinct
- *   error message per failure reason (unknown vs. not public vs. not
- *   enabled vs. lifecycle method) rather than a single boolean membership
- *   test.
+ * - Core's now-retired `CLIGenerator.assertCommandExposed()` (#2664) did not
+ *   call this for its custom-method branch — it checked
+ *   `isFrameworkLifecycleMethod()` directly plus its own inline
+ *   public/include/exclude logic, so it could give a distinct error message
+ *   per failure reason (unknown vs. not public vs. not enabled vs. lifecycle
+ *   method) rather than a single boolean membership test. The shipped local
+ *   CLI's `generateObjectCommands()` (`packages/cli/src/cli-generator.ts`)
+ *   has no equivalent of that gate at all today — it filters on reserved-CRUD
+ *   name collision, `isPublic`, and `exclude`/`include`, but never
+ *   `isFrameworkLifecycleMethod()`, so a locally overridden lifecycle method
+ *   IS a reachable command there (see `knowledge.ts`'s `configuredOperations()`
+ *   docblock for the same caveat).
  * - `findCliApiCoherenceViolations`'s EXPLICIT-`cli.include` branch
  *   deliberately bypasses this function too: an `include` entry naming a
  *   typo, a getter, or a private/protected method must still surface as
@@ -121,12 +122,15 @@ export interface ResolvableMethod {
  *   `resolveCliActionSet` in `vite-plugin/sveltekit-generator.ts` for the
  *   full rationale; do not "simplify" that branch onto this function.
  *
- * `crudActionNames` stays a parameter because the callers do not agree on one
- * list. `CLIGenerator` now passes {@link CRUD_OPERATIONS}, which #2646 moved
- * into this module — so for that caller the argument is a round trip and could
- * be defaulted. The SvelteKit generator still passes its own
- * `STANDARD_API_ACTIONS` and `vite-plugin/index.ts` an inline literal, so the
- * parameter cannot be removed until those copies are retired (#2665).
+ * `crudActionNames` stays a parameter even though every caller now passes
+ * {@link CRUD_OPERATIONS} (#2665 retired the last of the inline copies at
+ * `vite-plugin/sveltekit-generator.ts`, following `CLIGenerator`'s #2646
+ * switch; `vite-plugin/index.ts`'s copy backed the `generateCLIModule()`
+ * emitter #2664 later retired, so `index.ts` no longer calls this function
+ * or imports `CRUD_OPERATIONS` at all). Removing the parameter is a separate,
+ * unevidenced call this fix does not make -- it would foreclose a caller
+ * that legitimately needs a different verb set, and no such need has been
+ * demonstrated either way.
  */
 export declare function resolveCustomActionNames(methods: Iterable<[string, ResolvableMethod]>, config: {
     include?: string[];
@@ -144,11 +148,25 @@ export declare function resolveCustomActionNames(methods: Iterable<[string, Reso
  * What a collision means differs by EMITTER, so consult the one you are
  * changing rather than assuming a single rule. The reservation lives at each
  * emission site, not here, and several emitters still keep their own inline
- * verb array — find them with:
+ * verb array — find them with a multi-line-tolerant search (#2665 turned the
+ * single-line form of this grep blind to a wrapped literal like
+ * `templates/default-ui.ts`'s `CRUD_OPERATIONS_FOR_BROWSER_TEMPLATE`):
  *
- *     grep -rn "'update', 'delete'" packages --include='*.ts' | grep -v include:
+ *     rg -U "'list',\s*'get',\s*'create',\s*'update',\s*'delete'" packages --type ts | grep -v include:
  *
- * (the `include:` filter drops decorator config, which names the same verbs)
+ * This is a STARTING POINT, not a closed inventory: the `include:` filter
+ * only drops a single-line `include: [...]` block, so a wrapped one (e.g.
+ * `packages/content/src/content.ts`) still surfaces, and the pattern also
+ * matches non-decorator uses of the same five-word literal that have nothing
+ * to do with this collision rule (e.g. `packages/smrt-workbench/src/
+ * discovery.ts`'s `CRUD_ACTIONS`, `packages/smrt-dev-mcp/.../
+ * introspect-project.ts`'s `DEFAULT_MCP_OPERATIONS`). Triage each hit rather
+ * than trusting the raw list. Within `packages/core/src/vite-plugin/`
+ * specifically, the emitter-relevant survivors as of #2665 are
+ * `generated-client.ts` and `templates/default-ui.ts` (the latter
+ * deliberate, value-pinned by `issue-2665-crud-verb-consolidation.spec.ts`);
+ * `scanner/manifest-generator.ts` and `packages/users/src/sveltekit/
+ * resource-list-handler.ts` are outside this PR's scope.
  *
  * The sites this rule was audited against (#2646), NOT an exhaustive
  * inventory:
@@ -158,10 +176,6 @@ export declare function resolveCustomActionNames(methods: Iterable<[string, Reso
  *   built-in list whichever branch emitted it: the class's method could never
  *   run, and emitting one would hand the caller an operation `include` never
  *   named.
- * - `generators/cli.ts` (`CLIGenerator`) — unconditional, exact.
- *   `assertCommandExposed` returns inside its `isCrud` branch, so a CRUD-named
- *   action never reaches custom-method resolution, and `listCommands` skips
- *   those names outright.
  * - `packages/cli/src/cli-generator.ts`, behind the shipped `smrt` object
  *   commands — reserves only where the CRUD command is actually emitted, and
  *   reserves the command NAMES AND THEIR ALIASES (`ls`, `show`, `new`, `edit`,
@@ -170,8 +184,9 @@ export declare function resolveCustomActionNames(methods: Iterable<[string, Reso
  *   command carries its own handler invoking the class's method, so with
  *   `cli: { include: ['list', 'get'] }` neither a public `create()` nor an
  *   `edit()` collides with anything and both stay reachable.
- * - `vite-plugin/sveltekit-generator.ts` — unconditional, exact, from its own
- *   `STANDARD_API_ACTIONS` copy.
+ * - `vite-plugin/sveltekit-generator.ts` — unconditional, exact, via
+ *   {@link isCrudOperation} (#2665; previously its own `STANDARD_API_ACTIONS`
+ *   copy).
  * - `vite-plugin/web-collections.ts` + `tool-schema.ts` — case-folded (ids are
  *   lowercased whole like MCP's), CONDITIONAL, and scoped PER COLLECTION.
  *   Applied in both of `selectWebMcpToolEntries`' loops and at the shared
@@ -194,9 +209,26 @@ export declare function resolveCustomActionNames(methods: Iterable<[string, Reso
  *   `resolveApiActionSet` stays exact-match: REST routes keep declared casing,
  *   so `/products/List` is genuinely distinct from `/products`.
  *
- * Still carrying their own verb copies, tracked on #2665:
- * `vite-plugin/api-client-entries.ts`, `vite-plugin/index.ts` and
- * `vite-plugin/templates/default-ui.ts`.
+ * `vite-plugin/api-client-entries.ts` and `vite-plugin/sveltekit-generator.ts`
+ * now import {@link CRUD_OPERATIONS} (or {@link isCrudOperation} where a bare
+ * `.includes()` on the readonly tuple failed the stricter
+ * `tsconfig.typecheck.json`) rather than keeping their own verb copies
+ * (#2665). `vite-plugin/index.ts`'s copy backed `generateCLIModule()`, which
+ * #2664 retired along with the rest of the unused `smrt-virt-cli` module, so
+ * `index.ts` no longer imports anything from this module at all.
+ * `vite-plugin/templates/default-ui.ts` keeps its
+ * verb list as a local literal deliberately: `src/vite-plugin/templates/**`
+ * is excluded from both tsconfigs and the vite-dts build graph, and the
+ * package build copies that directory to `dist/` verbatim rather than
+ * compiling it -- see the module's own comment. Its `.ts` source is never
+ * resolved or bundled by anything in this package, so a static import of the
+ * Node-side `isCrudOperation`/`CRUD_OPERATIONS` (which pull in
+ * `tools/tool-generator.js`) would never be satisfied there. The
+ * consolidation test instead asserts the literal's *value* matches
+ * {@link CRUD_OPERATIONS} rather than assuming it imports it. Consolidating
+ * the lists did not change any of the
+ * per-emitter RULES documented above -- each site still decides case-folding
+ * and conditionality for itself.
  *
  * Read the list through {@link isCrudOperation} or {@link isCrudToolAction}
  * rather than re-declaring it; the two differ only in case folding, because the

package/dist/generators/custom-action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-action.d.ts","sourceRoot":"","sources":["../../src/generators/custom-action.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,CAAC;AACtD,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,MAAM,CAuB/D,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAC7C,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,EAC9D,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,GAAG,CAAC,MAAM,CAAC,CAab;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,eAAO,MAAM,eAAe,wDAMlB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,iBAAiB,CAAC;IACzB,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,gEAAgE;IAChE,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,+EAA+E;AAC/E,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,GAC7D,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EACnD,aAAa,EAAE,MAAM,GACpB,MAAM,CAER;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;KAC7C,CAAC;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExC;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,4BAA4B,CAmC9B;AAED,oEAAoE;AACpE,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,oBAAoB,GAC7B,UAAU,CAuDZ;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,EAAE,QAAQ,GACb,OAAO,EAAE,CAwBX;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,eAAO,MAAM,qCAAqC,0BAA0B,CAAC;AAE7E;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,mBAAmB,GAAG,SAAS,CA6BjC"}
+{"version":3,"file":"custom-action.d.ts","sourceRoot":"","sources":["../../src/generators/custom-action.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,CAAC;AACtD,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,MAAM,CAuB/D,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAC7C,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,EAC9D,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,GAAG,CAAC,MAAM,CAAC,CAab;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiGG;AACH,eAAO,MAAM,eAAe,wDAMlB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,iBAAiB,CAAC;IACzB,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,gEAAgE;IAChE,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,+EAA+E;AAC/E,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,GAC7D,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EACnD,aAAa,EAAE,MAAM,GACpB,MAAM,CAER;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;KAC7C,CAAC;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExC;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,4BAA4B,CAmC9B;AAED,oEAAoE;AACpE,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,oBAAoB,GAC7B,UAAU,CAuDZ;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,EAAE,QAAQ,GACb,OAAO,EAAE,CAwBX;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,eAAO,MAAM,qCAAqC,0BAA0B,CAAC;AAE7E;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,mBAAmB,GAAG,SAAS,CA6BjC"}

package/dist/generators/custom-action.js

@@ -13,8 +13,8 @@ import { convertTypeToJsonSchema } from "../tools/tool-generator.js";
 * even when a subclass declares its own override (e.g. `User.save()` at
 * `packages/users/src/models/User.ts`). An override is still the same
 * lifecycle operation, not a new one (#2638). `delete` itself is a CRUD verb
-* `CLIGenerator`/`MCPGenerator` already special-case, so it is not repeated
-* here.
+* `packages/cli/src/cli-generator.ts`'s `CLIGenerator`/`MCPGenerator` already
+* special-case, so it is not repeated here.
 *
 * Scope is deliberately narrower than "every public method on
 * SmrtObject/SmrtClass/SmrtCollection":
@@ -22,11 +22,13 @@ import { convertTypeToJsonSchema } from "../tools/tool-generator.js";
 * - AI operations `is()`/`do()`/`describe()` are declared on `SmrtObject`
 *   but are explicitly designed to be overridden with domain-specific
 *   behavior and exposed as a distinct action -- confirmed by existing,
-*   intentional coverage (`generators/cli-commands.spec.ts`'s
-*   `describe()` custom-action fixture,
-*   `vite-plugin/generated-client-integration.test.ts`'s `ArtCollection.
+*   intentional coverage
+*   (`vite-plugin/generated-client-integration.test.ts`'s `ArtCollection.
 *   describe(tone)` with its own declared API route). Excluding them here
-*   would regress real, working behavior.
+*   would regress real, working behavior. (The sibling
+*   `generators/cli-commands.spec.ts` fixture that used to cover the same
+*   `describe()` custom action was retired with core's `CLIGenerator`,
+*   #2664; this remaining fixture still exercises the behavior.)
 * - Relationship loading (`loadRelated`/`loadRelatedMany`/`getRelated`/
 *   `isRelatedLoaded`), memory (`remember`/`recall`/`recallAll`/`forget`/
 *   `forgetScope`), embeddings (`generateEmbeddings`/`getEmbedding`/
@@ -106,29 +108,28 @@ function isFrameworkLifecycleMethod(methodName) {
 * for an object, given its transport config's `include`/`exclude` and its
 * method map: every public method, minus CRUD verbs, minus framework
 * lifecycle methods, restricted to `include` when present and always minus
-* `exclude`. Reused by three callers, so they agree with each other and
-* with what `listCommands()` advertises:
+* `exclude`. Its sole caller as of #2664 (`CLIGenerator` and the
+* `generateCLIModule()` virtual module were retired):
 *
-* - `CLIGenerator.listCommands()` (over the live `ObjectRegistry`).
 * - `findCliApiCoherenceViolations`'s bare-`cli: true`/`cli: {}` branch
 *   (over the static manifest, no explicit `include`) -- see
 *   `resolveCliActionSet` in `vite-plugin/sveltekit-generator.ts`.
-* - `generateCLIModule()` in `vite-plugin/index.ts`, which generates the
-*   `smrt:cli` virtual module's static command metadata. It layers one
-*   additional filter on top of this function's result: a leading `_` on
-*   the method name, because the manifest's `isPublic` is unreliable there
-*   (see that call site's own comment) and this function has no other
-*   signal to exclude an internal-by-convention method.
 *
 * NOT the one universal resolution, and deliberately not reused by every
 * caller that resolves a CLI command set:
 *
-* - `CLIGenerator.assertCommandExposed()` does not call this for its custom-
-*   method branch — it checks `isFrameworkLifecycleMethod()` directly plus
-*   its own inline public/include/exclude logic, so it can give a distinct
-*   error message per failure reason (unknown vs. not public vs. not
-*   enabled vs. lifecycle method) rather than a single boolean membership
-*   test.
+* - Core's now-retired `CLIGenerator.assertCommandExposed()` (#2664) did not
+*   call this for its custom-method branch — it checked
+*   `isFrameworkLifecycleMethod()` directly plus its own inline
+*   public/include/exclude logic, so it could give a distinct error message
+*   per failure reason (unknown vs. not public vs. not enabled vs. lifecycle
+*   method) rather than a single boolean membership test. The shipped local
+*   CLI's `generateObjectCommands()` (`packages/cli/src/cli-generator.ts`)
+*   has no equivalent of that gate at all today — it filters on reserved-CRUD
+*   name collision, `isPublic`, and `exclude`/`include`, but never
+*   `isFrameworkLifecycleMethod()`, so a locally overridden lifecycle method
+*   IS a reachable command there (see `knowledge.ts`'s `configuredOperations()`
+*   docblock for the same caveat).
 * - `findCliApiCoherenceViolations`'s EXPLICIT-`cli.include` branch
 *   deliberately bypasses this function too: an `include` entry naming a
 *   typo, a getter, or a private/protected method must still surface as
@@ -138,12 +139,15 @@ function isFrameworkLifecycleMethod(methodName) {
 *   `resolveCliActionSet` in `vite-plugin/sveltekit-generator.ts` for the
 *   full rationale; do not "simplify" that branch onto this function.
 *
-* `crudActionNames` stays a parameter because the callers do not agree on one
-* list. `CLIGenerator` now passes {@link CRUD_OPERATIONS}, which #2646 moved
-* into this module — so for that caller the argument is a round trip and could
-* be defaulted. The SvelteKit generator still passes its own
-* `STANDARD_API_ACTIONS` and `vite-plugin/index.ts` an inline literal, so the
-* parameter cannot be removed until those copies are retired (#2665).
+* `crudActionNames` stays a parameter even though every caller now passes
+* {@link CRUD_OPERATIONS} (#2665 retired the last of the inline copies at
+* `vite-plugin/sveltekit-generator.ts`, following `CLIGenerator`'s #2646
+* switch; `vite-plugin/index.ts`'s copy backed the `generateCLIModule()`
+* emitter #2664 later retired, so `index.ts` no longer calls this function
+* or imports `CRUD_OPERATIONS` at all). Removing the parameter is a separate,
+* unevidenced call this fix does not make -- it would foreclose a caller
+* that legitimately needs a different verb set, and no such need has been
+* demonstrated either way.
 */
 function resolveCustomActionNames(methods, config, crudActionNames) {
 	const included = config?.include;
@@ -171,11 +175,25 @@ function resolveCustomActionNames(methods, config, crudActionNames) {
 * What a collision means differs by EMITTER, so consult the one you are
 * changing rather than assuming a single rule. The reservation lives at each
 * emission site, not here, and several emitters still keep their own inline
-* verb array — find them with:
+* verb array — find them with a multi-line-tolerant search (#2665 turned the
+* single-line form of this grep blind to a wrapped literal like
+* `templates/default-ui.ts`'s `CRUD_OPERATIONS_FOR_BROWSER_TEMPLATE`):
 *
-*     grep -rn "'update', 'delete'" packages --include='*.ts' | grep -v include:
+*     rg -U "'list',\s*'get',\s*'create',\s*'update',\s*'delete'" packages --type ts | grep -v include:
 *
-* (the `include:` filter drops decorator config, which names the same verbs)
+* This is a STARTING POINT, not a closed inventory: the `include:` filter
+* only drops a single-line `include: [...]` block, so a wrapped one (e.g.
+* `packages/content/src/content.ts`) still surfaces, and the pattern also
+* matches non-decorator uses of the same five-word literal that have nothing
+* to do with this collision rule (e.g. `packages/smrt-workbench/src/
+* discovery.ts`'s `CRUD_ACTIONS`, `packages/smrt-dev-mcp/.../
+* introspect-project.ts`'s `DEFAULT_MCP_OPERATIONS`). Triage each hit rather
+* than trusting the raw list. Within `packages/core/src/vite-plugin/`
+* specifically, the emitter-relevant survivors as of #2665 are
+* `generated-client.ts` and `templates/default-ui.ts` (the latter
+* deliberate, value-pinned by `issue-2665-crud-verb-consolidation.spec.ts`);
+* `scanner/manifest-generator.ts` and `packages/users/src/sveltekit/
+* resource-list-handler.ts` are outside this PR's scope.
 *
 * The sites this rule was audited against (#2646), NOT an exhaustive
 * inventory:
@@ -185,10 +203,6 @@ function resolveCustomActionNames(methods, config, crudActionNames) {
 *   built-in list whichever branch emitted it: the class's method could never
 *   run, and emitting one would hand the caller an operation `include` never
 *   named.
-* - `generators/cli.ts` (`CLIGenerator`) — unconditional, exact.
-*   `assertCommandExposed` returns inside its `isCrud` branch, so a CRUD-named
-*   action never reaches custom-method resolution, and `listCommands` skips
-*   those names outright.
 * - `packages/cli/src/cli-generator.ts`, behind the shipped `smrt` object
 *   commands — reserves only where the CRUD command is actually emitted, and
 *   reserves the command NAMES AND THEIR ALIASES (`ls`, `show`, `new`, `edit`,
@@ -197,8 +211,9 @@ function resolveCustomActionNames(methods, config, crudActionNames) {
 *   command carries its own handler invoking the class's method, so with
 *   `cli: { include: ['list', 'get'] }` neither a public `create()` nor an
 *   `edit()` collides with anything and both stay reachable.
-* - `vite-plugin/sveltekit-generator.ts` — unconditional, exact, from its own
-*   `STANDARD_API_ACTIONS` copy.
+* - `vite-plugin/sveltekit-generator.ts` — unconditional, exact, via
+*   {@link isCrudOperation} (#2665; previously its own `STANDARD_API_ACTIONS`
+*   copy).
 * - `vite-plugin/web-collections.ts` + `tool-schema.ts` — case-folded (ids are
 *   lowercased whole like MCP's), CONDITIONAL, and scoped PER COLLECTION.
 *   Applied in both of `selectWebMcpToolEntries`' loops and at the shared
@@ -221,9 +236,26 @@ function resolveCustomActionNames(methods, config, crudActionNames) {
 *   `resolveApiActionSet` stays exact-match: REST routes keep declared casing,
 *   so `/products/List` is genuinely distinct from `/products`.
 *
-* Still carrying their own verb copies, tracked on #2665:
-* `vite-plugin/api-client-entries.ts`, `vite-plugin/index.ts` and
-* `vite-plugin/templates/default-ui.ts`.
+* `vite-plugin/api-client-entries.ts` and `vite-plugin/sveltekit-generator.ts`
+* now import {@link CRUD_OPERATIONS} (or {@link isCrudOperation} where a bare
+* `.includes()` on the readonly tuple failed the stricter
+* `tsconfig.typecheck.json`) rather than keeping their own verb copies
+* (#2665). `vite-plugin/index.ts`'s copy backed `generateCLIModule()`, which
+* #2664 retired along with the rest of the unused `smrt-virt-cli` module, so
+* `index.ts` no longer imports anything from this module at all.
+* `vite-plugin/templates/default-ui.ts` keeps its
+* verb list as a local literal deliberately: `src/vite-plugin/templates/**`
+* is excluded from both tsconfigs and the vite-dts build graph, and the
+* package build copies that directory to `dist/` verbatim rather than
+* compiling it -- see the module's own comment. Its `.ts` source is never
+* resolved or bundled by anything in this package, so a static import of the
+* Node-side `isCrudOperation`/`CRUD_OPERATIONS` (which pull in
+* `tools/tool-generator.js`) would never be satisfied there. The
+* consolidation test instead asserts the literal's *value* matches
+* {@link CRUD_OPERATIONS} rather than assuming it imports it. Consolidating
+* the lists did not change any of the
+* per-emitter RULES documented above -- each site still decides case-folding
+* and conditionality for itself.
 *
 * Read the list through {@link isCrudOperation} or {@link isCrudToolAction}
 * rather than re-declaring it; the two differ only in case folding, because the