@happyvertical/smrt-core 0.45.3 → 0.47.0

package/dist/vite-plugin/sveltekit-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sveltekit-generator.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/sveltekit-generator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAYvE,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAEV,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAa1B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACrC;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,EAAE;QACZ,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACxC;AAYD,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAqxBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD;AA+BD,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,EACjC,SAAS,EAAE,OAAO,EAClB,YAAY,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,EAC5C,YAAY,GAAE,MAAM,GAAG,YAEb,GACT,4BAA4B,CAwB9B;AAiUD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAqGf;AAy0BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,GAAG,CAAC,MAAM,CAAC,CA6Cb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAuDD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,mBAAmB,GAC5B,wBAAwB,EAAE,CAsB5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,mBAAmB,GAC5B,IAAI,CA2BN"}
+{"version":3,"file":"sveltekit-generator.d.ts","sourceRoot":"","sources":["../../src/vite-plugin/sveltekit-generator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EACL,KAAK,iBAAiB,EAWtB,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,KAAK,EAEV,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAa1B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACrC;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,EAAE;QACZ,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACxC;AAWD,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAqxBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD;AA+BD,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC5E,SAAS,EAAE,OAAO,EAClB,YAAY,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,EAC5C,YAAY,GAAE,MAAM,GAAG,YAEb,GACT,4BAA4B,CA6B9B;AAmVD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAqGf;AAozBD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,qBAAqB,EAChC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,EACzC,uBAAuB,EAAE,OAAO,EAChC,WAAW,GAAE,kBAAuB,GACnC;IACD,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC3C,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;CAC9C,CA6BA;AA6DD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,QAAQ,CAAC,EAAE,mBAAmB,EAC9B,WAAW,GAAE,kBAAuB,GACnC,GAAG,CAAC,MAAM,CAAC,CAqBb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AA6DD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,mBAAmB,GAC5B,wBAAwB,EAAE,CA4B5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,mBAAmB,GAC5B,IAAI,CAiCN"}

package/dist/vite-plugin/sveltekit-generator.js

@@ -1,5 +1,5 @@
 import { MAX_LIST_LIMIT, buildDefaultListOrderBy } from "../query-bounds.js";
-import { resolveCustomActionMetadata, resolveCustomActionNames } from "../generators/custom-action.js";
+import { CRUD_OPERATIONS, createManifestClassNamePredicate, declaredTypeAcceptsDate, isCrudOperation, queryStringDecoderFor, resolveApiMethodExposure, resolveCustomActionMetadata, resolveCustomActionNames, resolveDeclaredScopeMismatch, resolveEffectiveActionMetadata } from "../generators/custom-action.js";
 import { isFrameworkBaseClass } from "../registry/framework-base-classes.js";
 import { generateConditionalGetRouteHelper } from "../generators/conditional-get.js";
 import { AUTO_GENERATED_ROUTE_HEADER } from "./route-header.js";
@@ -16,13 +16,6 @@ import { isAbsolute, join, relative, sep } from "node:path";
 * Generates real TypeScript files in src/routes/api/ based on discovered SMRT objects
 */
 var BIOME_LINE_WIDTH = 80;
-var STANDARD_API_ACTIONS = [
-	"list",
-	"get",
-	"create",
-	"update",
-	"delete"
-];
 var GITIGNORE_MANAGED_BLOCK_START = "# BEGIN SMRT auto-generated routes (Vite plugin)";
 var GITIGNORE_MANAGED_BLOCK_END = "# END SMRT auto-generated routes (Vite plugin)";
 var LEGACY_GITIGNORE_HEADER = "# SMRT auto-generated routes (from Vite plugin)";
@@ -603,8 +596,12 @@ function extractRoutePathParamNames(pathSegments) {
 	return pathSegments.filter((segment) => /^\[[^\]]+\]$/.test(segment)).map((segment) => segment.slice(1, -1)).filter(Boolean);
 }
 function resolveApiActionRouteConfig(actionName, actionDef, apiConfig, routeOptions = {}, defaultScope = actionDef.isStatic ? "collection" : "item") {
-	const routeConfig = getApiConfigObject(apiConfig)?.routes?.[actionName];
-	const pathSegments = normalizeCustomRoutePath(actionName, routeConfig?.path, routeOptions);
+	const effective = resolveEffectiveActionMetadata({
+		actionName,
+		method: actionDef,
+		apiConfig
+	});
+	const pathSegments = normalizeCustomRoutePath(actionName, effective.path, routeOptions);
 	return {
 		scope: resolveCustomActionMetadata({
 			actionName,
@@ -612,7 +609,7 @@ function resolveApiActionRouteConfig(actionName, actionDef, apiConfig, routeOpti
 			apiConfig,
 			defaultScope
 		}).scope,
-		method: normalizeApiHttpMethod(routeConfig?.method),
+		method: normalizeApiHttpMethod(effective.httpMethod),
 		pathSegments,
 		pathParamNames: extractRoutePathParamNames(pathSegments)
 	};
@@ -633,11 +630,15 @@ function hasSingleOptionsParameter(actionDef) {
 	const parameters = Array.isArray(actionDef.parameters) ? actionDef.parameters : [];
 	return parameters.length === 1 && parameters[0]?.name === "options";
 }
-function buildActionInvocationArgs(actionDef, optionsIdentifier = "options") {
+function buildActionInvocationArgs(actionDef, optionsIdentifier = "options", httpMethod) {
 	const parameters = Array.isArray(actionDef.parameters) ? actionDef.parameters : [];
 	if (parameters.length === 0) return [];
 	if (hasSingleOptionsParameter(actionDef)) return [optionsIdentifier];
-	return parameters.map((parameter) => buildOptionsPropertyAccess(parameter.name));
+	return parameters.map((parameter, index) => {
+		const access = buildOptionsPropertyAccess(parameter.name);
+		const decoder = httpMethod === "GET" ? queryStringDecoderFor(parameter.type) : declaredTypeAcceptsDate(parameter.type) ? "toCustomActionDate" : void 0;
+		return decoder ? `${decoder}(${access}) as ActionArgs[${index}]` : access;
+	});
 }
 function buildObjectTypeProperty(propertyName) {
 	if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(propertyName)) return propertyName;
@@ -1169,14 +1170,12 @@ async function generateRoutesForObject(projectRoot, className, objectDef, manife
 		const itemRoute = generateItemRouteTemplate(projectRoot, className, objectDef, manifest, includedActions, options, join(routeDir, "[id]"));
 		generatedRoutePaths.push(writeRoute(join(routeDir, "[id]"), "+server.ts", itemRoute));
 	}
-	const customActions = Object.entries(objectDef.methods).filter(([name, method]) => !STANDARD_API_ACTIONS.includes(name) && method.isPublic && shouldIncludeInApi(name, apiConfig));
+	const { exposed: customActions, rejected } = resolveApiCustomActions(objectDef, manifest, false);
+	warnUnhostedActions(className, rejected);
 	const actionSpecs = [];
 	for (const [actionName, actionDef] of customActions) {
 		const routeConfig = resolveApiActionRouteConfig(actionName, actionDef, apiConfig, { kebabRoutes: options.kebabRoutes });
-		if (routeConfig.scope === "collection" && !actionDef.isStatic) {
-			console.warn(`[smrt] Skipping ${className}.${actionName} - collection API routes require a static method`);
-			continue;
-		}
+		warnDeclaredScopeMismatch(className, actionName, actionDef, apiConfig, routeConfig.scope);
 		const actionBaseDir = routeConfig.scope === "collection" ? routeDir : join(routeDir, "[id]");
 		actionSpecs.push({
 			routeDir: join(actionBaseDir, ...routeConfig.pathSegments),
@@ -1207,15 +1206,13 @@ async function generateCollectionRoutesForObject(projectRoot, className, objectD
 	const routeDir = join(projectRoot, options.routesDir, objectDef.collection);
 	const lookupClassName = findItemClassRegistryKey(className, objectDef, manifest);
 	const lookupObjectDef = findObjectDefByRegistryKey(manifest, lookupClassName);
-	const customActions = Object.entries(objectDef.methods).filter(([name, method]) => !STANDARD_API_ACTIONS.includes(name) && method.isPublic && shouldIncludeInApi(name, apiConfig));
+	const { exposed: customActions, rejected } = resolveApiCustomActions(objectDef, manifest, true);
+	warnUnhostedActions(className, rejected);
 	if (customActions.length === 0) return generatedRoutePaths;
 	const actionSpecs = [];
 	for (const [actionName, actionDef] of customActions) {
 		const routeConfig = resolveApiActionRouteConfig(actionName, actionDef, apiConfig, { kebabRoutes: options.kebabRoutes }, "collection");
-		if (routeConfig.scope !== "collection") {
-			console.warn(`[smrt] Skipping ${className}.${actionName} - collection class methods only support collection-scoped API routes`);
-			continue;
-		}
+		warnDeclaredScopeMismatch(className, actionName, actionDef, apiConfig, routeConfig.scope);
 		actionSpecs.push({
 			routeDir: join(routeDir, ...routeConfig.pathSegments),
 			spec: {
@@ -1242,10 +1239,10 @@ async function generateCollectionRoutesForObject(projectRoot, className, objectD
 */
 function resolveStandardCrudActions(apiConfig) {
 	if (apiConfig === false) return [];
-	if (apiConfig === true || apiConfig === void 0) return [...STANDARD_API_ACTIONS];
-	if (typeof apiConfig !== "object") return [...STANDARD_API_ACTIONS];
+	if (apiConfig === true || apiConfig === void 0) return [...CRUD_OPERATIONS];
+	if (typeof apiConfig !== "object" || apiConfig === null) return [...CRUD_OPERATIONS];
 	const config = apiConfig;
-	let crud = config.include ? config.include.filter((a) => STANDARD_API_ACTIONS.includes(a)) : [...STANDARD_API_ACTIONS];
+	let crud = Array.isArray(config.include) ? config.include.filter((a) => isCrudOperation(a)) : [...CRUD_OPERATIONS];
 	if (Array.isArray(config.exclude)) {
 		const exclude = config.exclude;
 		crud = crud.filter((a) => !exclude.includes(a));
@@ -1253,49 +1250,103 @@ function resolveStandardCrudActions(apiConfig) {
 	return crud;
 }
 /**
-* Check if a custom action should be included in API.
+* Partition an object's custom (non-CRUD) methods into the ones the API
+* exposes and the ones it withholds, with a reason for each rejection.
+*
+* The ONE place route generation, `resolveApiActionSet`, and the knowledge
+* artifact's API projection agree, by all three reading
+* {@link resolveApiMethodExposure}. Before #2686 each re-derived a subset and
+* could disagree — most damagingly, a gate applied only to the coherence
+* resolver would report a method unreachable while the emitter next door still
+* wrote its route file.
+*/
+function resolveApiCustomActions(objectDef, manifest, objectIsCollectionClass, wireability = {}) {
+	const apiConfig = objectDef.decoratorConfig?.api;
+	const isModelClassName = wireability.isModelClassName ?? createManifestClassNamePredicate(manifest);
+	const exposed = [];
+	const rejected = [];
+	for (const [name, method] of Object.entries(objectDef.methods || {})) {
+		const decision = resolveApiMethodExposure({
+			actionName: name,
+			method,
+			apiConfig,
+			isCollectionClass: objectIsCollectionClass,
+			...isModelClassName ? { isModelClassName } : {}
+		});
+		if (decision.exposed) {
+			exposed.push([name, method]);
+			continue;
+		}
+		if (decision.code === "crud-reserved" || decision.code === "not-public") continue;
+		rejected.push([name, decision]);
+	}
+	return {
+		exposed,
+		rejected
+	};
+}
+/**
+* Warn about the one rejection class that would be a structural failure rather
+* than a configuration choice: an action whose declared scope has no receiver
+* to bind. Both emitters carried this warning before #2686 moved the check into
+* the shared resolver, and the message text is preserved.
+*
+* It cannot currently fire — `resolveCustomActionMetadata` collapses a
+* contradicting scope back to the receiver-derived one, as it did before this
+* change; see `resolveActionReceiver` in `generators/custom-action.ts`. The
+* warning a developer actually sees for a contradicting declaration is
+* `warnDeclaredScopeMismatch` below.
 *
-* Mirrors the CRUD inclusion path: intersect with `include` (when set), then
-* subtract `exclude`. Both filters apply together, matching principle of least
-* surprise for users supplying both lists.
+* Every other rejection is silent here and reported with its reason through
+* the knowledge artifact instead, so a normal build is not buried in output
+* for the 2% of methods the heuristic legitimately withholds.
 */
-function shouldIncludeInApi(actionName, apiConfig) {
-	if (apiConfig === false) return false;
-	if (apiConfig === true || apiConfig === void 0) return true;
-	if (typeof apiConfig === "object" && apiConfig !== null) {
-		const config = apiConfig;
-		const included = Array.isArray(config.include) ? config.include.includes(actionName) : true;
-		const excluded = Array.isArray(config.exclude) ? config.exclude.includes(actionName) : false;
-		return included && !excluded;
+function warnUnhostedActions(className, rejected) {
+	for (const [actionName, decision] of rejected) {
+		if (decision.code !== "no-receiver") continue;
+		console.warn(`[smrt] Skipping ${className}.${actionName} - ${decision.reason}`);
 	}
-	return true;
+}
+/**
+* Report a declared `scope` that contradicts the method's actual receiver.
+*
+* The declaration is honored only where it AGREES; nothing in config can move
+* an instance method onto the class. Warning is the whole remedy — the route
+* is still emitted at the receiver-derived URL, so an author who expected the
+* other one learns why it is missing instead of silently getting nothing at
+* either address (#2686).
+*/
+function warnDeclaredScopeMismatch(className, actionName, actionDef, apiConfig, effectiveScope) {
+	const declared = resolveDeclaredScopeMismatch({
+		actionName,
+		method: actionDef,
+		apiConfig,
+		effectiveScope
+	});
+	if (!declared) return;
+	console.warn(`[smrt] ${className}.${actionName} declares scope '${declared}' but its receiver is ${effectiveScope}-scoped, so the declared scope is ignored. A scope describes where a method already lives; it cannot move it. Make ${actionName} static to reach it on the collection, or drop the scope option.`);
 }
 /**
 * Compute the set of action names (standard CRUD + custom methods) that the
 * API exposes for a given object definition. This is the same resolution used
 * to drive route generation, exposed so coherence checks (e.g. CLI vs API)
 * can ask "what does the API expose?" without re-implementing the logic.
+*
+* Pass a class inventory: without one the wire-ability heuristic cannot tell a
+* model class from an options interface and therefore accepts both, so the
+* caller silently disagrees with the emitters on the LARGEST group of withheld
+* methods (see `WireabilityOptions.isModelClassName`). Supply either
+* `manifest`, or `wireability.isModelClassName` when the caller's inventory is
+* the live registry rather than a manifest — `@happyvertical/smrt-users`' CLI
+* resource listing is the second kind. Both stay optional only because this is
+* public API.
 */
-function resolveApiActionSet(objectDef, manifest) {
+function resolveApiActionSet(objectDef, manifest, wireability = {}) {
 	const apiConfig = objectDef.decoratorConfig?.api;
 	if (apiConfig === false) return /* @__PURE__ */ new Set();
 	const objectIsCollectionClass = manifest ? isCollectionManifestClass(manifest, objectDef) : isCollectionClass(objectDef);
 	const actions = objectIsCollectionClass ? /* @__PURE__ */ new Set() : new Set(resolveStandardCrudActions(apiConfig));
-	for (const [name, method] of Object.entries(objectDef.methods || {})) {
-		if (STANDARD_API_ACTIONS.includes(name)) continue;
-		if (!method.isPublic) continue;
-		if (!shouldIncludeInApi(name, apiConfig)) continue;
-		const scope = resolveCustomActionMetadata({
-			actionName: name,
-			method,
-			apiConfig,
-			defaultScope: objectIsCollectionClass ? "collection" : method.isStatic ? "collection" : "item"
-		}).scope;
-		if (objectIsCollectionClass) {
-			if (scope !== "collection") continue;
-		} else if (scope === "collection" && !method.isStatic) continue;
-		actions.add(name);
-	}
+	for (const [name] of resolveApiCustomActions(objectDef, manifest, objectIsCollectionClass, wireability).exposed) actions.add(name);
 	return actions;
 }
 /**
@@ -1317,9 +1368,11 @@ function resolveApiActionSet(objectDef, manifest) {
 *
 * **Bare `cli: true`/`cli: {}`** (#2638, the new case this lint now
 * inspects): every public custom method minus exclude, exactly the "every
-* public method minus exclude" resolution `CLIGenerator.listCommands()`
-* already applies (via `resolveCustomActionNames`, reused not
-* reimplemented) -- lifecycle methods excluded, same as everywhere else.
+* public method minus exclude" resolution this function shares with
+* `packages/core/src/generators/custom-action.ts`'s `resolveCustomActionNames`
+* -- lifecycle methods excluded, same as everywhere else. (Pre-#2664, core's
+* now-retired `CLIGenerator.listCommands()` applied the same resolution via
+* that helper too.)
 * CRUD verbs are NOT checked in this branch: a class that closes its API
 * entirely (`api: false`) while keeping a default-open, CLI/MCP-only admin
 * surface (`cli: true`/omitted) is a common, intentional combination (see
@@ -1332,13 +1385,13 @@ function resolveApiActionSet(objectDef, manifest) {
 function resolveCliActionSet(objectDef) {
 	const cliConfig = objectDef.decoratorConfig?.cli;
 	if (cliConfig === false) return /* @__PURE__ */ new Set();
-	const included = typeof cliConfig === "object" ? cliConfig.include : void 0;
-	const excluded = typeof cliConfig === "object" && Array.isArray(cliConfig.exclude) ? cliConfig.exclude : [];
+	const included = typeof cliConfig === "object" && cliConfig !== null ? cliConfig.include : void 0;
+	const excluded = typeof cliConfig === "object" && cliConfig !== null && Array.isArray(cliConfig.exclude) ? cliConfig.exclude : [];
 	if (included) return new Set(included.filter((cmd) => !excluded.includes(cmd)));
 	return resolveCustomActionNames(Object.entries(objectDef.methods || {}), {
 		include: void 0,
 		exclude: excluded
-	}, STANDARD_API_ACTIONS);
+	}, CRUD_OPERATIONS);
 }
 /**
 * Inspect a manifest and return classes whose effective CLI command set —
@@ -1356,7 +1409,7 @@ function findCliApiCoherenceViolations(manifest) {
 	for (const [className, objectDef] of Object.entries(manifest.objects)) {
 		const cliConfig = objectDef.decoratorConfig?.cli;
 		if (cliConfig === false) continue;
-		if (typeof cliConfig === "object" && cliConfig.skipApiCheck) continue;
+		if (typeof cliConfig === "object" && cliConfig !== null && cliConfig.skipApiCheck) continue;
 		const effectiveCliCommands = resolveCliActionSet(objectDef);
 		if (effectiveCliCommands.size === 0) continue;
 		const apiActionSet = resolveApiActionSet(objectDef, manifest);
@@ -1377,8 +1430,9 @@ function findCliApiCoherenceViolations(manifest) {
 * This is deliberately narrower than `findCliApiCoherenceViolations` above.
 * That function is now fully correct for the broader `cli: true`/`cli: {}`
 * default surface too (#2638: same "every public method minus exclude"
-* resolution `listCommands()` uses, so a bare `cli: true` is inspected the
-* same as an explicit `include`). But `smrtPlugin()`'s default
+* resolution core's now-retired `CLIGenerator.listCommands()` used (#2664),
+* so a bare `cli: true` is inspected the same as an explicit `include`).
+* But `smrtPlugin()`'s default
 * `validateCliApiCoherence: true` calls this THROWING gate unconditionally
 * from every consuming package's own build (`configResolved`,
 * `vite-plugin/index.ts`) -- and a full-monorepo build during #2638
@@ -1400,10 +1454,10 @@ function findCliApiCoherenceViolations(manifest) {
 function validateCliIncludeAgainstApi(manifest) {
 	const violations = findCliApiCoherenceViolations(manifest).filter(({ className }) => {
 		const cliConfig = manifest.objects[className]?.decoratorConfig?.cli;
-		return typeof cliConfig === "object" && Array.isArray(cliConfig.include) && cliConfig.include.length > 0;
+		return typeof cliConfig === "object" && cliConfig !== null && Array.isArray(cliConfig.include) && cliConfig.include.length > 0;
 	});
 	if (violations.length === 0) return;
-	const messages = violations.flatMap(({ className, unreachable }) => unreachable.map((action) => `[smrt] ${className}.${action} is exposed as a CLI command but is not exposed via the api.\n  Either:\n    - Add '${action}' to api.include, or\n    - Remove '${action}' from cli.include / add it to cli.exclude.\n  The CLI invokes methods over HTTP; methods without API routes are unreachable.\n  If this CLI is intentionally invoked in-process (no HTTP), set\n  \`cli: { skipApiCheck: true }\` on the @smrt() decorator to acknowledge.`));
+	const messages = violations.flatMap(({ className, unreachable }) => unreachable.map((action) => `[smrt] ${className}.${action} is exposed as a CLI command but is not exposed via the api.\n  Either:\n    - Decorate '${action}' with @method({ expose: true }) to route it, or\n    - Add '${action}' to api.include, or\n    - Remove '${action}' from cli.include / add it to cli.exclude.\n  The CLI invokes methods over HTTP; methods without API routes are unreachable.\n  A public method is routed by default only when every parameter can be\n  built from JSON; @method({ expose: true }) overrides that for one method\n  without widening api.include. See withheldSurfaces in the knowledge\n  artifact for the reason this one was withheld (#2686).\n  If this CLI is intentionally invoked in-process (no HTTP), set\n  \`cli: { skipApiCheck: true }\` on the @smrt() decorator to acknowledge.`));
 	throw new Error(messages.join("\n\n"));
 }
 /**
@@ -1691,9 +1745,21 @@ function generateActionRouteTemplate(projectRoot, routeDir, routeSpecs, objectDe
 	const hostModelType = resolveObjectTypeReference(projectRoot, firstSpec.hostClassName, objectDef, options, routeDir);
 	const typeImports = mergeImportStatements([lookupModelType.importStatement, hostModelType.importStatement]);
 	if (routeSpecs.some((spec) => spec.hostType !== hostType || spec.lookupClassName !== lookupClassName || spec.routeConfig.scope !== routeConfig.scope)) throw new Error(`Cannot generate mixed custom route handlers for ${lookupClassName}. All handlers sharing a route path must target the same host type and scope.`);
+	const decoderImports = /* @__PURE__ */ new Set();
+	for (const spec of routeSpecs) {
+		if (hasSingleOptionsParameter(spec.actionDef)) continue;
+		for (const parameter of spec.actionDef.parameters ?? []) {
+			const decoder = spec.routeConfig?.method === "GET" ? queryStringDecoderFor(parameter.type) : declaredTypeAcceptsDate(parameter.type) ? "toCustomActionDate" : void 0;
+			if (decoder) decoderImports.add(decoder);
+		}
+	}
 	const importBlock = [
 		"import { error, json } from '@sveltejs/kit';",
-		"import { normalizeCustomActionFailure, normalizeTypedHttpError } from '@happyvertical/smrt-core';",
+		`import { ${[
+			"normalizeCustomActionFailure",
+			"normalizeTypedHttpError",
+			...[...decoderImports].sort()
+		].join(", ")} } from '@happyvertical/smrt-core';`,
 		hostType === "collection" || routeConfig.scope !== "collection" ? "import { getCollection } from '$lib/server/smrt';" : "import { ObjectRegistry } from '@happyvertical/smrt-core';",
 		typeImports,
 		"import type { RequestHandler } from './$types';"
@@ -1723,7 +1789,7 @@ function generateActionRouteHandler(lookupClassName, actionName, actionDef, rout
 		const receiverExpression = actionDef.isStatic ? "CollectionClass" : "typedCollection";
 		const staticTargetLoad = actionDef.isStatic ? `  const CollectionClass = typedCollection.constructor as typeof ${hostTypeName};\n` : "";
 		const scopedOptions = buildScopedOptionsForTenantRead(actionDef, routeConfig, tenantScoped);
-		const invocationArgs = buildActionInvocationArgs(actionDef, scopedOptions.optionsIdentifier);
+		const invocationArgs = buildActionInvocationArgs(actionDef, scopedOptions.optionsIdentifier, routeConfig.method);
 		return `// Custom collection method: ${actionName}
 export const ${handlerName}: RequestHandler = async (${collectionHandlerArgs}) => {
 ${authGuardLine}
@@ -1755,7 +1821,7 @@ ${optionsLoad}${scopedOptions.source}  let result: unknown;
 	if (routeConfig.scope === "collection") {
 		const optionsLoad = buildActionOptionsLoad(actionName, actionDef, routeConfig, hostTypeName, true);
 		const scopedOptions = buildScopedOptionsForTenantRead(actionDef, routeConfig, tenantScoped);
-		const invocationArgs = buildActionInvocationArgs(actionDef, scopedOptions.optionsIdentifier);
+		const invocationArgs = buildActionInvocationArgs(actionDef, scopedOptions.optionsIdentifier, routeConfig.method);
 		return `// Custom collection action: ${actionName}
 export const ${handlerName}: RequestHandler = async (${collectionHandlerArgs}) => {
 ${authGuardLine}
@@ -1788,7 +1854,7 @@ ${optionsLoad}${scopedOptions.source}  const ClassRef = registered.constructor a
   const item = await collection.get(
     readScope ? { id: params.id, ...readScope } : params.id,
   );` : "  const item = await collection.get(params.id);";
-	const invocationArgs = buildActionInvocationArgs(actionDef);
+	const invocationArgs = buildActionInvocationArgs(actionDef, "options", routeConfig.method);
 	return `// Custom action: ${actionName}
 export const ${handlerName}: RequestHandler = async (${itemHandlerArgs}) => {
 ${authGuardLine}
@@ -1996,6 +2062,6 @@ function updateGeneratedRouteIgnoreBlock(gitignoreContent, generatedPaths) {
 	return `${updatedContent}${managedBlock.join("\n")}\n`;
 }
 //#endregion
-export { findCliApiCoherenceViolations, generateSvelteKitRoutes, methodNameToKebab, resolveApiActionRouteConfig, resolveApiActionSet, validateCliIncludeAgainstApi };
+export { findCliApiCoherenceViolations, generateSvelteKitRoutes, methodNameToKebab, resolveApiActionRouteConfig, resolveApiActionSet, resolveApiCustomActions, validateCliIncludeAgainstApi };
 
 //# sourceMappingURL=sveltekit-generator.js.map