@mulmoclaude/core 4.1.0 → 4.2.0

package/assets/helps/collection-skills.md

@@ -960,6 +960,25 @@ records through **`manageCollection`**, not raw file I/O:
   `mode: "merge"` with a partial row (`{ id, <changed fields> }`) when
   updating — the default upsert replaces the WHOLE record and would erase
   every optional field the row omits.
+- **Rows a script generated — `putItems` with `itemsFile`.** When the rows
+  already exist as data rather than in your head (a generated schedule, an
+  imported set — anything past a few dozen records), have the script write
+  them to a JSON file **under the workspace** and pass its **absolute** path as
+  `itemsFile` instead of `items`. The host reads the file, so the rows never
+  pass through your context: a 540-row batch is one short tool call, not 80 KB
+  you transcribe. The rules:
+  - `items` and `itemsFile` are mutually exclusive — passing both is refused,
+    not merged.
+  - The path must be **absolute** (the tool runs in the host's server process,
+    whose working directory is not yours) and **inside the workspace** — write
+    the generated file there rather than to a system temp dir. It must be a real
+    file, not a symlink.
+  - The file must hold a **non-empty JSON array of objects**, at most 8 MiB.
+  - One call writes at most **1000 rows** — over that it is refused whole,
+    with nothing written, so split the file and call again.
+
+  Everything else is identical: same per-row validation, same `mode`, same
+  `{ written, rejected }` result.
 - **Read / list — `getItems`.** The only way to see host-computed `derived` /
   `toggle` / `embed` values (the stored JSON never contains them). Pass `ids`
   / `fields` on large collections to keep the result small — e.g.

package/assets/helps/error-recovery.md

@@ -1008,6 +1008,69 @@ Do NOT tell the user to re-check the spelling in `.env`, add the key
 again, or move it elsewhere; the file is already correct, and it is being
 read. The conflict is the whole problem.
 
+## A `putItems` batch is too large to pass inline — use `itemsFile`, never the MCP bridge
+
+### Symptoms
+
+- You generated records with a script (a month of booking slots, an imported
+  CSV, anything past a few dozen rows) and the only way you can see to store
+  them is to write every object into `manageCollection`'s `items` argument.
+- You start looking for the collection's data directory on disk, or for a way
+  to hand the file to the tool.
+- The next step that suggests itself is spawning `server/mcp/bridge.mjs` (or
+  the host's MCP server) yourself and speaking JSON-RPC to it from a script.
+
+### Cause
+
+`items` takes the rows inline, so a 540-row batch means writing ~80 KB of JSON
+token by token — even when a script already produced exactly that JSON as a
+file. The judgement that the batch cannot go through `items` is correct; only
+the workaround is wrong.
+
+### Fix
+
+Pass the file instead. `putItems` accepts **`itemsFile`** — an absolute path to
+a JSON file holding the array of record objects, read by the host:
+
+```jsonc
+{ "action": "putItems", "slug": "slots", "mode": "create",
+  "itemsFile": "/absolute/path/to/generated-slots.json" }
+```
+
+Write the generated file **under the workspace**. Paths outside it are refused:
+the host reads this file on your behalf, so an unconstrained path would let the
+tool reach host files you cannot otherwise see. Under a sandbox your workspace
+path is translated to the host's automatically — you pass the path you wrote to.
+
+Rules that make it fail cleanly rather than silently:
+
+- **Absolute paths only.** The tool runs in the host's SERVER process, whose
+  working directory is not yours; a relative path is refused rather than
+  resolved against some unrelated directory.
+- **Inside the workspace only**, and **not a symlink** — pass the real path of a
+  regular file. Symlinks are refused rather than followed, contained or not.
+- **`items` or `itemsFile`, never both** — passing both is refused, not merged.
+- **1000 rows per call, max**, and the file itself at most 8 MiB. Over either,
+  the call is refused WHOLE with nothing written; split the file and call again,
+  so you never meet a half-filled collection.
+
+Reading the refusal you got:
+
+| Message | What it means |
+| --- | --- |
+| `must be an ABSOLUTE path` | You passed a relative path. Pass the full one. |
+| `must be inside the workspace` | The file is outside the workspace (or a symlink out of it). Regenerate it under the workspace. |
+| `is a symbolic link` | Symlinks are never followed. Pass the real path. |
+| `changed while it was being opened` | The file was replaced mid-call. Finish writing it, then call putItems. |
+| `grew while it was being read` | The file was still being written. Wait for the script to finish, then call putItems. |
+| `could not read \`itemsFile\`` | The host cannot see that path — the usual cause is a file written to a temp dir outside the mount. Write it under the workspace. |
+| `is not a regular file` | The path is a directory, device, or fifo. |
+| `could not be read as JSON` | The file exists and was read, but does not parse. This is YOUR file's shape, not a host problem — check the script that wrote it (a truncated write, a trailing comma, log output mixed into the file). |
+| `must hold a non-empty JSON array of record objects` | It parsed, but is `[]`, an object, or an array of scalars. The file must be `[{…}, {…}]` — the same row objects you would have passed as `items`. |
+
+Do NOT spawn the MCP bridge yourself. A hand-written JSON-RPC client fails
+invisibly and can leave a partially written collection that nothing reports.
+
 ## A tool your own instructions describe returns "No such tool available"
 
 ### Symptoms

package/dist/collection/core/calendarGrid.d.ts

@@ -43,8 +43,8 @@ export declare function parseIsoDateTime(value: unknown): {
     ymd: Ymd;
     minutes: number;
 } | null;
-/** Civil date from either a `YYYY-MM-DD` or a `YYYY-MM-DDTHH:MM` value, so the
- *  month grid buckets date-only and datetime anchors alike. */
+/** Civil date from a `YYYY-MM-DD`, a `YYYY-MM-DDTHH:MM`, or a server-stamped
+ *  instant, so the month grid buckets all three alike. */
 export declare function dateOf(value: unknown): Ymd | null;
 /** Parse a free-form time-string field into start/end minutes-of-day.
  *  Handles the common shapes in user data:

package/dist/collection/core/serverTime.d.ts

@@ -0,0 +1,93 @@
+/** What a Firestore `Timestamp` looks like once it is only data. Duck-typed on
+ *  purpose: this module is pure and imports no SDK, because it runs where the
+ *  class is already gone — a page's payload, a JSON body, a test. */
+export interface ServerTimeParts {
+    seconds: number;
+    nanoseconds: number;
+}
+/** Is this the canonical form, and a real instant?
+ *
+ *  The shape check alone is not enough, and the gap is not theoretical: with it,
+ *  `2026-02-30T00:00:00.000000000Z` passes, the record lint reports nothing, and
+ *  `Date.parse` then normalises it to March 2 — so a write/read round trip
+ *  silently moves the value. The round trip below is the check: a string is
+ *  canonical only when re-formatting what it parses to gives it back. */
+export declare const isCanonicalServerTime: (value: unknown) => value is string;
+/** The canonical string for a (seconds, nanoseconds) pair, or null when the
+ *  pair is not a real instant.
+ *
+ *  Built from the SECONDS through `Date` and the nanoseconds as text, never by
+ *  turning nanoseconds into a float — `605987654 / 1e9` cannot be represented
+ *  exactly, and a rounding error here is a rank in the wrong place. */
+export declare function serverTimeOf(parts: ServerTimeParts): string | null;
+/** A stored server time in any of the shapes it reaches us in, as the
+ *  canonical string — or null when the value is not one at all.
+ *
+ *  The three shapes are the three trips a `Timestamp` can make: still an SDK
+ *  instance (a host reading Firestore directly), structured-cloned (a page's
+ *  payload), or JSON (`Timestamp.toJSON`, which tags itself). All three carry
+ *  `seconds` and `nanoseconds`; the tag is not required, because the clone
+ *  drops it. */
+export declare function decodeServerTime(value: unknown): string | null;
+/** The inverse: the parts a canonical string stands for, or null for anything
+ *  else.
+ *
+ *  This is what closes the write-back hole. A record is read (decoded), edited,
+ *  and written back WHOLE — `putItems`' upsert replaces the document — so
+ *  without an encode the stamp would go back as a string. The rules freeze that
+ *  field by comparing `diff().affectedKeys()`, so the write is refused and the
+ *  record can never be updated again. Dropping the field instead does not help:
+ *  a removed key is an affected key too.
+ *
+ *  Deliberately narrow. Only the EXACT canonical form is encoded, and that form
+ *  is only ever produced by `decodeServerTime` — a human or an agent authoring
+ *  a `datetime` writes the civil shape, which passes through as the string it
+ *  is. So the codec is closed over its own output and cannot re-type somebody
+ *  else's data. */
+export declare function encodeServerTime(value: unknown): ServerTimeParts | null;
+/** Epoch milliseconds for a canonical instant, for the places that can only
+ *  hold a number (a sort key, a civil placement). LOSSY below the millisecond
+ *  and knowingly so: whoever needs the full order compares the strings. */
+export declare function serverTimeMillis(value: unknown): number | null;
+/** The only part of a schema this codec reads.
+ *
+ *  Structural rather than `CollectionSchema`, because the OTHER host has its own
+ *  type for the same document (mulmoserver reads these records without going
+ *  through this package's store) and neither side should have to adopt the
+ *  other's declaration to call one function. */
+export interface DeclaredFields {
+    fields: Record<string, {
+        type: string;
+    } | undefined>;
+}
+/** Every stored instant in a `datetime` field, as its canonical string; every
+ *  other value untouched. One level deep, which is where a stamped field
+ *  lives — the rules stamp a top-level key and nothing writes a server time
+ *  into a table row. */
+export declare function decodeRecordTimes(record: Record<string, unknown>, schema: DeclaredFields): Record<string, unknown>;
+/** The write half, and it encodes ONLY what was stored as an instant.
+ *
+ *  `previous` is the document as Firestore holds it right now. That is the only
+ *  honest source of provenance here: a decoded stamp is a plain string by the
+ *  time it comes back, indistinguishable from one an author typed or an import
+ *  produced, and no amount of looking at the string can tell them apart. The
+ *  declaration that pins the field lives in `app.json` under
+ *  `public.submit.<cid>`, which this package reads only for `aid`
+ *  (`../server/appManifest`, "SCOPE") — so the stored value is what is left, and
+ *  it answers exactly the right question: was this field an instant before?
+ *
+ *  What that buys, concretely: the frozen stamp goes back unchanged, so a
+ *  whole-record write survives the rules; and a `datetime` field holding a
+ *  canonical-looking string that was NEVER an instant — imported data, a value
+ *  somebody typed — stays the string it is. The format alone would have
+ *  re-typed it.
+ *
+ *  `previous` is null for a create, where nothing was stored and nothing can
+ *  therefore be preserved. That is correct rather than a gap: the rules require
+ *  a created stamp to equal `request.time`, which no client can construct, so a
+ *  create through this store never carries a valid one.
+ *
+ *  `toStored` builds whatever the backend wants for an instant — a Firestore
+ *  `Timestamp` — and is injected so this module stays free of the SDK: it also
+ *  runs in a browser, where importing that would be a bundle. */
+export declare function encodeRecordTimes(record: Record<string, unknown>, previous: Record<string, unknown> | null, toStored: (parts: ServerTimeParts) => unknown): Record<string, unknown>;

package/dist/collection/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_dist = require("../dist-CsgSfWwR.cjs");
-const require_itemId = require("../itemId-Dzrr3vs5.cjs");
-const require_promptSafety = require("../promptSafety-CuczAN9d.cjs");
+const require_itemId = require("../itemId-CEQdK01z.cjs");
+const require_promptSafety = require("../promptSafety-C0BWDsfT.cjs");
 const require_project = require("../project-C1ep9pvo.cjs");
 //#region src/collection/core/presentCollection.ts
 var TOOL_NAME = "presentCollection";
@@ -669,12 +669,16 @@ exports.completionCoveredByFieldChip = require_promptSafety.completionCoveredByF
 exports.dateOf = require_itemId.dateOf;
 exports.dateSortValue = dateSortValue;
 exports.daySlice = require_itemId.daySlice;
+exports.decodeRecordTimes = require_itemId.decodeRecordTimes;
+exports.decodeServerTime = require_itemId.decodeServerTime;
 exports.defangForPrompt = require_promptSafety.defangForPrompt;
 exports.deriveAll = require_promptSafety.deriveAll;
 exports.derivedSortValue = derivedSortValue;
 exports.draftToRecord = draftToRecord;
 exports.embedTargetId = require_itemId.embedTargetId;
 exports.emptyRow = emptyRow;
+exports.encodeRecordTimes = require_itemId.encodeRecordTimes;
+exports.encodeServerTime = require_itemId.encodeServerTime;
 exports.enumColorClasses = enumColorClasses;
 exports.enumSortValue = enumSortValue;
 exports.enumValueIndex = enumValueIndex;
@@ -690,6 +694,7 @@ exports.firstMissingRequiredField = firstMissingRequiredField;
 exports.firstUnknownDefault = require_promptSafety.firstUnknownDefault;
 exports.flagFieldValue = require_promptSafety.flagFieldValue;
 exports.generateUniqueId = require_itemId.generateUniqueId;
+exports.isCanonicalServerTime = require_itemId.isCanonicalServerTime;
 exports.isFieldDrivenEvery = require_itemId.isFieldDrivenEvery;
 exports.isLocalCollectionKey = require_itemId.isLocalCollectionKey;
 exports.isReadOnlySchema = require_itemId.isReadOnlySchema;
@@ -729,6 +734,8 @@ exports.sameCollectionKey = require_itemId.sameCollectionKey;
 exports.scalarSortValue = scalarSortValue;
 exports.schemaDefaults = require_promptSafety.schemaDefaults;
 exports.selectDynamicRecord = require_promptSafety.selectDynamicRecord;
+exports.serverTimeMillis = require_itemId.serverTimeMillis;
+exports.serverTimeOf = require_itemId.serverTimeOf;
 exports.sharedCollectionKey = require_itemId.sharedCollectionKey;
 exports.shortHexId = require_itemId.shortHexId;
 exports.skillCommandSeed = skillCommandSeed;

package/dist/collection/index.d.ts

@@ -11,6 +11,7 @@ export * from './core/enumColors';
 export * from './core/draft';
 export * from './core/actionVisible';
 export * from './core/backlinks';
+export * from './core/serverTime';
 export * from './core/linkTargets';
 export * from './core/where';
 export * from './core/completion';

package/dist/collection/index.js

@@ -1,6 +1,6 @@
 import { t as errorMessage } from "../dist-D8zokgGo.js";
-import { A as isSafeSlug, B as fieldText, C as parseCollectionKeyId, D as SAFE_SLUG_PATTERN, E as SAFE_RECORD_ID_PATTERN, F as INGEST_KINDS, I as embedTargetId, L as isFieldDrivenEvery, M as AGENT_INGEST_KIND, N as COMPUTED_TYPES, O as generateUniqueId, P as FEED_SCHEDULES, R as isReadOnlySchema, S as localCollectionKeyOf, T as sharedCollectionKey, V as fieldTextOrNull, _ as collectionKeyId, a as bucketRecords, b as isSharedCollectionKey, c as dateOf, d as parseIsoDate, f as parseIsoDateTime, g as ymdKey, h as spanCoversDay, i as assignLanes, j as nextUniqueItemId, k as isSafeRecordId, l as daySlice, m as recordSpan, n as shortHexId, o as buildMonthGrid, p as parseTimeRange, r as MINUTES_PER_DAY, s as compareYmd, t as newItemId, u as monthAnchorDate, v as collectionKeyName, w as sameCollectionKey, x as isValidCollectionName, y as isLocalCollectionKey, z as storageKindFor } from "../itemId-DfTm08jm.js";
-import { C as actionVisible, D as fieldDefaultValue, E as whenMatches, O as firstUnknownDefault, S as viaMatches, T as fieldVisible, _ as uniqueRefTargets, a as evaluateDerived, b as projectBacklinkRow, c as selectDynamicRecord, d as flagFieldValue, f as itemIsDone, g as uniqueEmbedTargets, h as uniqueBacklinkSources, k as schemaDefaults, l as chipMatches, m as matchesWhere, n as deriveAll, o as firstDateField, p as toggleChecked, r as resolveRowRefs, s as resolveIcon, t as defangForPrompt, u as completionCoveredByFieldChip, v as backlinkRows, w as agentActionRunKey, x as rollupValue, y as coerceNumeric } from "../promptSafety-CJ-sC1pX.js";
+import { A as parseCollectionKeyId, B as COMPUTED_TYPES, C as serverTimeOf, D as isSharedCollectionKey, E as isLocalCollectionKey, F as generateUniqueId, G as isReadOnlySchema, H as INGEST_KINDS, I as isSafeRecordId, J as fieldTextOrNull, K as storageKindFor, L as isSafeSlug, M as sharedCollectionKey, N as SAFE_RECORD_ID_PATTERN, O as isValidCollectionName, P as SAFE_SLUG_PATTERN, R as nextUniqueItemId, S as serverTimeMillis, T as collectionKeyName, U as embedTargetId, V as FEED_SCHEDULES, W as isFieldDrivenEvery, _ as decodeRecordTimes, a as bucketRecords, b as encodeServerTime, c as dateOf, d as parseIsoDate, f as parseIsoDateTime, g as ymdKey, h as spanCoversDay, i as assignLanes, j as sameCollectionKey, k as localCollectionKeyOf, l as daySlice, m as recordSpan, n as shortHexId, o as buildMonthGrid, p as parseTimeRange, q as fieldText, r as MINUTES_PER_DAY, s as compareYmd, t as newItemId, u as monthAnchorDate, v as decodeServerTime, w as collectionKeyId, x as isCanonicalServerTime, y as encodeRecordTimes, z as AGENT_INGEST_KIND } from "../itemId-BY2YPBkT.js";
+import { C as actionVisible, D as fieldDefaultValue, E as whenMatches, O as firstUnknownDefault, S as viaMatches, T as fieldVisible, _ as uniqueRefTargets, a as evaluateDerived, b as projectBacklinkRow, c as selectDynamicRecord, d as flagFieldValue, f as itemIsDone, g as uniqueEmbedTargets, h as uniqueBacklinkSources, k as schemaDefaults, l as chipMatches, m as matchesWhere, n as deriveAll, o as firstDateField, p as toggleChecked, r as resolveRowRefs, s as resolveIcon, t as defangForPrompt, u as completionCoveredByFieldChip, v as backlinkRows, w as agentActionRunKey, x as rollupValue, y as coerceNumeric } from "../promptSafety-Bp780ezk.js";
 import { n as projectRecordFields, t as mergeIntoExisting } from "../project-B0j_Vf_Q.js";
 //#region src/collection/core/presentCollection.ts
 var TOOL_NAME = "presentCollection";
@@ -634,6 +634,6 @@ var buildOntologyGraph = (entries) => {
 	};
 };
 //#endregion
-export { AGENT_INGEST_KIND, COMPUTED_TYPES, ENUM_ALERT, ENUM_NEUTRAL, ENUM_NUDGE, FEED_SCHEDULES, INGEST_KINDS, MINUTES_PER_DAY, SAFE_RECORD_ID_PATTERN, SAFE_SLUG_PATTERN, TOOL_DEFINITION, TOOL_NAME, actionVisible, agentActionRunKey, assignLanes, backlinkRows, boolSortValue, bucketRecords, buildMonthGrid, buildOntologyGraph, buildUpdatedRecord, cellKey, chipMatches, coerceInlineValue, coerceNumeric, collectionCardKey, collectionKeyId, collectionKeyName, compareSortValues, compareYmd, completionCoveredByFieldChip, dateOf, dateSortValue, daySlice, defangForPrompt, deriveAll, derivedSortValue, draftToRecord, embedTargetId, emptyRow, enumColorClasses, enumSortValue, enumValueIndex, errorMessage, evaluateDerived, executePresentCollection, fieldDefaultValue, fieldText, fieldTextOrNull, fieldVisible, firstDateField, firstMissingRequiredField, firstUnknownDefault, flagFieldValue, generateUniqueId, isFieldDrivenEvery, isLocalCollectionKey, isReadOnlySchema, isSafeRecordId, isSafeSlug, isSharedCollectionKey, isSortableField, isValidCollectionName, itemIdOf, itemIsDone, itemLabelOf, itemMatchesQuery, labelFieldFor, localCollectionKeyOf, matchesWhere, mergeIntoExisting, monthAnchorDate, newItemId, nextSortDirection, nextUniqueItemId, numericSortValue, parseCollectionKeyId, parseIsoDate, parseIsoDateTime, parseTimeRange, projectBacklinkRow, projectRecordFields, recordSpan, resolveEnumColor, resolveIcon, resolveRowRefs, rollupValue, rowFromItem, rowIdOf, sameCollectionCard, sameCollectionKey, scalarSortValue, schemaDefaults, selectDynamicRecord, sharedCollectionKey, shortHexId, skillCommandSeed, snapshotEmptyEnums, sortItems, sortValueOf, spanCoversDay, storageKindFor, stringSortValue, toPresentCollectionData, toggleChecked, uniqueBacklinkSources, uniqueEmbedTargets, uniqueRefTargets, viaMatches, whenMatches, withCardScope, ymdKey };
+export { AGENT_INGEST_KIND, COMPUTED_TYPES, ENUM_ALERT, ENUM_NEUTRAL, ENUM_NUDGE, FEED_SCHEDULES, INGEST_KINDS, MINUTES_PER_DAY, SAFE_RECORD_ID_PATTERN, SAFE_SLUG_PATTERN, TOOL_DEFINITION, TOOL_NAME, actionVisible, agentActionRunKey, assignLanes, backlinkRows, boolSortValue, bucketRecords, buildMonthGrid, buildOntologyGraph, buildUpdatedRecord, cellKey, chipMatches, coerceInlineValue, coerceNumeric, collectionCardKey, collectionKeyId, collectionKeyName, compareSortValues, compareYmd, completionCoveredByFieldChip, dateOf, dateSortValue, daySlice, decodeRecordTimes, decodeServerTime, defangForPrompt, deriveAll, derivedSortValue, draftToRecord, embedTargetId, emptyRow, encodeRecordTimes, encodeServerTime, enumColorClasses, enumSortValue, enumValueIndex, errorMessage, evaluateDerived, executePresentCollection, fieldDefaultValue, fieldText, fieldTextOrNull, fieldVisible, firstDateField, firstMissingRequiredField, firstUnknownDefault, flagFieldValue, generateUniqueId, isCanonicalServerTime, isFieldDrivenEvery, isLocalCollectionKey, isReadOnlySchema, isSafeRecordId, isSafeSlug, isSharedCollectionKey, isSortableField, isValidCollectionName, itemIdOf, itemIsDone, itemLabelOf, itemMatchesQuery, labelFieldFor, localCollectionKeyOf, matchesWhere, mergeIntoExisting, monthAnchorDate, newItemId, nextSortDirection, nextUniqueItemId, numericSortValue, parseCollectionKeyId, parseIsoDate, parseIsoDateTime, parseTimeRange, projectBacklinkRow, projectRecordFields, recordSpan, resolveEnumColor, resolveIcon, resolveRowRefs, rollupValue, rowFromItem, rowIdOf, sameCollectionCard, sameCollectionKey, scalarSortValue, schemaDefaults, selectDynamicRecord, serverTimeMillis, serverTimeOf, sharedCollectionKey, shortHexId, skillCommandSeed, snapshotEmptyEnums, sortItems, sortValueOf, spanCoversDay, storageKindFor, stringSortValue, toPresentCollectionData, toggleChecked, uniqueBacklinkSources, uniqueEmbedTargets, uniqueRefTargets, viaMatches, whenMatches, withCardScope, ymdKey };
 
 //# sourceMappingURL=index.js.map

package/dist/collection/registry/server/index.cjs

@@ -4,9 +4,9 @@ const require_dist = require("../../../dist-CsgSfWwR.cjs");
 const require_root = require("../../../root-rPH6FGDT.cjs");
 const require_relPath = require("../../../relPath-CTAjGdCL.cjs");
 const require_utils_fetch = require("../../../utils/fetch.cjs");
-const require_discovery = require("../../../discovery-B9EESjHP.cjs");
+const require_discovery = require("../../../discovery-Dl9nRa-m.cjs");
 const require_templatePath = require("../../../templatePath-27vUZowm.cjs");
-const require_server = require("../../../server-DSrRdPvf.cjs");
+const require_server = require("../../../server-DZkN0GGh.cjs");
 const require_skill_bridge_index = require("../../../skill-bridge/index.cjs");
 const require_types = require("../../../types-CNqkLT4M.cjs");
 let node_fs = require("node:fs");

package/dist/collection/registry/server/index.js

@@ -2,9 +2,9 @@ import { l as isUnknownArray, t as errorMessage } from "../../../dist-D8zokgGo.j
 import { n as writeFileAtomic } from "../../../root-BMroU_mB.js";
 import { n as toPosixRelPath } from "../../../relPath-DW8MC8VO.js";
 import { fetchWithTimeout } from "../../../utils/fetch.js";
-import { $ as collectionsRegistriesConfigPath, G as safeRecordId, ct as projectSkillsDir, mt as skillsStagingDir, nt as getWorkspaceRoot, ot as log, r as loadCollection, s as CollectionSchemaZ, t as acceptParsedSchema } from "../../../discovery-D88x2DmW.js";
+import { $ as collectionsRegistriesConfigPath, G as safeRecordId, ct as projectSkillsDir, mt as skillsStagingDir, nt as getWorkspaceRoot, ot as log, r as loadCollection, s as CollectionSchemaZ, t as acceptParsedSchema } from "../../../discovery-P64fgtuD.js";
 import { t as isSafeActionTemplatePath } from "../../../templatePath-k_WNbL_Q.js";
-import { g as ONE_SECOND_MS } from "../../../server-dijB4BYv.js";
+import { v as ONE_SECOND_MS } from "../../../server-C-Ngd3g2.js";
 import { claudeSkillDir, dataSkillDir, mirrorSkillWrite } from "../../../skill-bridge/index.js";
 import { n as parseRegistryIndex, r as isRecord, t as OFFICIAL_REGISTRY_NAME } from "../../../types-BKVZrtyc.js";
 import { readFileSync } from "node:fs";

package/dist/collection/server/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../../root-rPH6FGDT.cjs");
-const require_itemId = require("../../itemId-Dzrr3vs5.cjs");
-const require_discovery = require("../../discovery-B9EESjHP.cjs");
+const require_itemId = require("../../itemId-CEQdK01z.cjs");
+const require_discovery = require("../../discovery-Dl9nRa-m.cjs");
 const require_templatePath = require("../../templatePath-27vUZowm.cjs");
-const require_server = require("../../server-DSrRdPvf.cjs");
+const require_server = require("../../server-DZkN0GGh.cjs");
 exports.APP_MANIFEST_FILE = require_discovery.APP_MANIFEST_FILE;
 exports.BackendUnavailableError = require_discovery.BackendUnavailableError;
 exports.COLLECTION_ROOT_REQUIRED = require_discovery.COLLECTION_ROOT_REQUIRED;
@@ -12,6 +12,8 @@ exports.CollectionQueryZ = require_discovery.CollectionQueryZ;
 exports.CollectionSchemaZ = require_discovery.CollectionSchemaZ;
 exports.DEFAULT_QUERY_ROWS = require_discovery.DEFAULT_QUERY_ROWS;
 exports.MAX_CSV_ROWS = require_discovery.MAX_CSV_ROWS;
+exports.MAX_ITEMS_FILE_BYTES = require_server.MAX_ITEMS_FILE_BYTES;
+exports.MAX_PUT_ITEMS = require_server.MAX_PUT_ITEMS;
 exports.MAX_QUERY_ROWS = require_discovery.MAX_QUERY_ROWS;
 exports.MAX_RECORD_ISSUES = require_server.MAX_RECORD_ISSUES;
 exports.MAX_SCHEMA_ISSUES = require_server.MAX_SCHEMA_ISSUES;

package/dist/collection/server/index.js

@@ -1,6 +1,6 @@
 import { t as canonicalRoot } from "../../root-BMroU_mB.js";
-import { N as COMPUTED_TYPES } from "../../itemId-DfTm08jm.js";
-import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-D88x2DmW.js";
+import { B as COMPUTED_TYPES } from "../../itemId-BY2YPBkT.js";
+import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-P64fgtuD.js";
 import { i as isSafeTemplatePath, n as isSafeCustomViewI18nPath, r as isSafeCustomViewPath, t as isSafeActionTemplatePath } from "../../templatePath-k_WNbL_Q.js";
-import { A as runQueryOverRows, C as STORE_UNREADABLE, D as recordFieldProblem, E as compileRecordZ, F as readCustomViewI18n, I as readSkillTemplate, M as buildCollectionActionSeedPrompt, N as promptPathsFor, O as runCollectionQuery, P as readCustomViewHtml, S as MAX_RECORD_ISSUES, T as validateRecordObject, _ as computeCollectionIcon, a as deleteCollection, b as applyMutateAction, c as computeSuccessor, d as isTriggerDue, f as maybeSpawnSuccessor, h as successorId, i as deleteCustomView, j as buildActionSeedPrompt, k as enrichItems, l as daysInMonth, m as resolveEvery, n as MAX_UNSELECTIVE_ITEMS, o as deleteCollectionRefusalMessage, p as parseCivil, r as makeManageCollectionTool, s as advanceTriggerDate, t as MAX_SCHEMA_ISSUES, u as formatCivil, v as buildWorkspaceOntology, w as validateCollectionRecords, x as firstMutateParamProblem, y as schemaRelations } from "../../server-dijB4BYv.js";
-export { APP_MANIFEST_FILE, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appManifestReason, applyMutateAction, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseCivil, peekWorkspaceRoot, projectItemFields, promptPathsFor, publishCollectionChange, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };
+import { A as runCollectionQuery, C as firstMutateParamProblem, D as validateRecordObject, E as validateCollectionRecords, F as promptPathsFor, I as readCustomViewHtml, L as readCustomViewI18n, M as runQueryOverRows, N as buildActionSeedPrompt, O as compileRecordZ, P as buildCollectionActionSeedPrompt, R as readSkillTemplate, S as applyMutateAction, T as STORE_UNREADABLE, _ as successorId, a as makeManageCollectionTool, b as buildWorkspaceOntology, c as deleteCollectionRefusalMessage, d as daysInMonth, f as formatCivil, g as resolveEvery, h as parseCivil, i as MAX_UNSELECTIVE_ITEMS, j as enrichItems, k as recordFieldProblem, l as advanceTriggerDate, m as maybeSpawnSuccessor, n as MAX_PUT_ITEMS, o as deleteCustomView, p as isTriggerDue, r as MAX_SCHEMA_ISSUES, s as deleteCollection, t as MAX_ITEMS_FILE_BYTES, u as computeSuccessor, w as MAX_RECORD_ISSUES, x as schemaRelations, y as computeCollectionIcon } from "../../server-C-Ngd3g2.js";
+export { APP_MANIFEST_FILE, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_ITEMS_FILE_BYTES, MAX_PUT_ITEMS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appManifestReason, applyMutateAction, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseCivil, peekWorkspaceRoot, projectItemFields, promptPathsFor, publishCollectionChange, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };

package/dist/collection/server/manageTool.d.ts

@@ -5,6 +5,17 @@ import { DiscoveryOptions } from './discovery';
 export declare const MAX_UNSELECTIVE_ITEMS = 200;
 /** Cap the rejected-schema issue list so a deeply-broken schema can't flood the result. */
 export declare const MAX_SCHEMA_ISSUES = 20;
+/** Cap the rows one putItems call may write. `putOneItem` validates and
+ *  writes one record at a time, so a large `itemsFile` holds the tool call
+ *  open for minutes. Over the cap the call is refused WHOLE — a truncating
+ *  write that reported success would leave a half-filled collection nobody
+ *  knows is half-filled. */
+export declare const MAX_PUT_ITEMS = 1000;
+/** Refuse an `itemsFile` larger than this, from `stat` and before any read.
+ *  The row cap alone cannot bound the work: the file has to be read and parsed
+ *  WHOLE before there are rows to count, so a huge blob is paid for in full
+ *  first. 8 MiB is far past what 1000 records need and far short of trouble. */
+export declare const MAX_ITEMS_FILE_BYTES: number;
 /** Workspace-targeting overrides, threaded to every collections call.
  *  Production: `{}` (the configured collection host's workspace).
  *  Tests: a tmpdir + empty user skills dir. `refreshAfterWrite` is the
@@ -44,6 +55,20 @@ export type ManageCollectionDeps = DiscoveryOptions & {
      *  returning null, because the doc variant is a statement the host makes, not
      *  something the package should infer. */
     stagedSkillAuthoring?: boolean | undefined;
+    /** Where the workspace is mounted INSIDE this host's agent sandbox
+     *  (MulmoClaude's `CONTAINER_WORKSPACE_PATH`, `/home/node/mulmoclaude`).
+     *
+     *  Only `putItems`' `itemsFile` needs it, and it needs it badly: a sandboxed
+     *  agent's absolute paths are CONTAINER paths, while this tool body runs on
+     *  the host. Read verbatim, `/home/node/mulmoclaude/rows.json` is ENOENT on
+     *  every host whose workspace is not literally that directory — i.e. all of
+     *  them. Given this, the prefix is translated back to the workspace root, so
+     *  the path the agent wrote to and the file the host reads are the same bytes.
+     *
+     *  Omitted (a host with no sandbox, or one that mounts the workspace at its
+     *  real path), absolute paths are used as given. Binding it is harmless when
+     *  the sandbox is off — the prefix simply never appears. */
+    sandboxWorkspacePath?: string | undefined;
 };
 export declare function makeManageCollectionTool(deps?: ManageCollectionDeps): {
     definition: {
@@ -82,6 +107,10 @@ export declare function makeManageCollectionTool(deps?: ManageCollectionDeps): {
                     };
                     description: string;
                 };
+                itemsFile: {
+                    type: string;
+                    description: string;
+                };
                 mode: {
                     type: string;
                     enum: string[];

package/dist/collection-watchers/index.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../root-rPH6FGDT.cjs");
-const require_itemId = require("../itemId-Dzrr3vs5.cjs");
-const require_promptSafety = require("../promptSafety-CuczAN9d.cjs");
+const require_itemId = require("../itemId-CEQdK01z.cjs");
+const require_promptSafety = require("../promptSafety-C0BWDsfT.cjs");
 require("../collection/index.cjs");
-const require_discovery = require("../discovery-B9EESjHP.cjs");
-const require_server = require("../server-DSrRdPvf.cjs");
+const require_discovery = require("../discovery-Dl9nRa-m.cjs");
+const require_server = require("../server-DZkN0GGh.cjs");
 const require_notifier = require("../notifier-DZJj0sOh.cjs");
 let node_fs_promises = require("node:fs/promises");
 //#region src/collection-watchers/config.ts

package/dist/collection-watchers/index.js

@@ -1,9 +1,9 @@
 import { t as canonicalRoot } from "../root-BMroU_mB.js";
-import { B as fieldText, x as isValidCollectionName } from "../itemId-DfTm08jm.js";
-import { E as whenMatches, f as itemIsDone } from "../promptSafety-CJ-sC1pX.js";
+import { O as isValidCollectionName, q as fieldText } from "../itemId-BY2YPBkT.js";
+import { E as whenMatches, f as itemIsDone } from "../promptSafety-Bp780ezk.js";
 import "../collection/index.js";
-import { H as itemFilePath, Q as collectionChangePayload, d as storeFor, lt as publishCollectionChange, n as discoverCollections, pt as sharedCollectionChangePayload, r as loadCollection, st as peekWorkspaceRoot, tt as firestoreHandle } from "../discovery-D88x2DmW.js";
-import { d as isTriggerDue, f as maybeSpawnSuccessor } from "../server-dijB4BYv.js";
+import { H as itemFilePath, Q as collectionChangePayload, d as storeFor, lt as publishCollectionChange, n as discoverCollections, pt as sharedCollectionChangePayload, r as loadCollection, st as peekWorkspaceRoot, tt as firestoreHandle } from "../discovery-P64fgtuD.js";
+import { m as maybeSpawnSuccessor, p as isTriggerDue } from "../server-C-Ngd3g2.js";
 import { d as publish, m as updateForPlugin, n as clear, s as listAll } from "../notifier-DhnwR82U.js";
 import { access } from "node:fs/promises";
 //#region src/collection-watchers/config.ts

package/dist/{discovery-B9EESjHP.cjs → discovery-Dl9nRa-m.cjs}

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_dist = require("./dist-CsgSfWwR.cjs");
 const require_root = require("./root-rPH6FGDT.cjs");
-const require_itemId = require("./itemId-Dzrr3vs5.cjs");
+const require_itemId = require("./itemId-CEQdK01z.cjs");
 const require_project = require("./project-C1ep9pvo.cjs");
 const require_listen = require("./listen-UZA68Upt.cjs");
 const require_templatePath = require("./templatePath-27vUZowm.cjs");
@@ -10,6 +10,7 @@ let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
+let firebase_firestore = require("firebase/firestore");
 let node_os = require("node:os");
 let iconv_lite = require("iconv-lite");
 iconv_lite = require_rolldown_runtime.__toESM(iconv_lite, 1);
@@ -476,10 +477,10 @@ async function guarded(key, email, run) {
 *  It also removes the reason a submit path would have had to accept the
 *  primary key as a `createField` at all — a submission that cannot name its
 *  own id is exactly right when the id is the thing being assigned. */
-function toItem(data, docId, primaryKey) {
+function toItem(data, docId, schema) {
 	return require_dist.isRecord(data) ? {
-		...data,
-		[primaryKey]: docId
+		...require_itemId.decodeRecordTimes(data, schema),
+		[schema.primaryKey]: docId
 	} : null;
 }
 /** Record ids are validated with the SAME helper every other backend uses.
@@ -491,26 +492,26 @@ function withSafeId(itemId, onInvalid, run) {
 	if (safeId === null) return onInvalid();
 	return run(safeId, requireHandle());
 }
-async function firestoreList(key, primaryKey) {
+async function firestoreList(key, schema) {
 	const { docs, email } = requireHandle();
-	return (await guarded(key, email, () => docs.list(sharedItemsPath(key)))).map((entry) => toItem(entry.data, entry.id, primaryKey)).filter((item) => item !== null);
+	return (await guarded(key, email, () => docs.list(sharedItemsPath(key)))).map((entry) => toItem(entry.data, entry.id, schema)).filter((item) => item !== null);
 }
 /** Paging is emulated over a full ordered read rather than pushed into
 *  Firestore: `offset` has no server-side form there (the cursor API needs the
 *  preceding document, which a stateless offset/limit call doesn't have), and
 *  `total` needs the full count anyway. Hence `nativePaging: false` — the
 *  capability is honest about the cost. */
-async function firestorePage(key, primaryKey, opts) {
-	const items = await firestoreList(key, primaryKey);
+async function firestorePage(key, schema, opts) {
+	const items = await firestoreList(key, schema);
 	const offset = Math.max(0, opts.offset ?? 0);
 	return {
-		items: projectItemFields(opts.limit === void 0 ? items.slice(offset) : items.slice(offset, offset + Math.max(0, opts.limit)), opts.fields, primaryKey),
+		items: projectItemFields(opts.limit === void 0 ? items.slice(offset) : items.slice(offset, offset + Math.max(0, opts.limit)), opts.fields, schema.primaryKey),
 		total: items.length,
 		truncated: false
 	};
 }
-async function firestoreRead(key, itemId, primaryKey) {
-	return withSafeId(itemId, () => Promise.resolve(null), async (safeId, { docs, email }) => toItem(await guarded(key, email, () => docs.get(sharedItemsPath(key), safeId)), safeId, primaryKey));
+async function firestoreRead(key, itemId, schema) {
+	return withSafeId(itemId, () => Promise.resolve(null), async (safeId, { docs, email }) => toItem(await guarded(key, email, () => docs.get(sharedItemsPath(key), safeId)), safeId, schema));
 }
 /** Publish the "records changed" ping for a shared collection.
 *
@@ -525,18 +526,35 @@ function publishShared(key, ids, operation) {
 		op: operation
 	}, key.aid));
 }
-async function firestoreWrite(key, itemId, item, opts) {
+/** The write half of the decode above, and it is not optional.
+*
+*  A record is read, edited and written back WHOLE — `putItems`' upsert
+*  replaces the document — so a decoded stamp would return to Firestore as a
+*  string. The rules freeze that field by comparing `diff().affectedKeys()`, so
+*  that write is refused and so is every later one: the record becomes
+*  permanently unupdatable. Dropping the key instead does not help, because a
+*  removed key is an affected key too.
+*
+*  Only a `datetime` field carrying the exact canonical form is converted, and
+*  that form is only ever produced by the decode — so the pair is closed over
+*  its own output and cannot re-type a value somebody else wrote. */
+async function firestoreWrite(key, itemId, item, schema, opts) {
 	return withSafeId(itemId, () => Promise.resolve({
 		kind: "invalid-id",
 		itemId
 	}), async (safeId, { docs, email }) => {
 		const collectionPath = sharedItemsPath(key);
+		const asTimestamp = (parts) => new firebase_firestore.Timestamp(parts.seconds, parts.nanoseconds);
 		if (opts.refuseOverwrite) {
-			if (!await guarded(key, email, () => docs.create(collectionPath, safeId, item))) return {
+			if (!await guarded(key, email, () => docs.create(collectionPath, safeId, require_itemId.encodeRecordTimes(item, null, asTimestamp)))) return {
 				kind: "conflict",
 				itemId: safeId
 			};
-		} else await guarded(key, email, () => docs.set(collectionPath, safeId, item));
+		} else {
+			const previous = await guarded(key, email, () => docs.get(collectionPath, safeId));
+			const stored = require_itemId.encodeRecordTimes(item, require_dist.isRecord(previous) ? previous : null, asTimestamp);
+			await guarded(key, email, () => docs.set(collectionPath, safeId, stored));
+		}
 		if (opts.slug) publishShared(key, [safeId], "upsert");
 		return {
 			kind: "ok",
@@ -669,7 +687,7 @@ function armSharedWatch(key, onChange) {
 /** The store factory registered for `storage.type === "firestore"`.
 *  Synchronous and connection-agnostic by contract — see the header. */
 function firestoreStoreFor(collection, opts) {
-	const { primaryKey } = collection.schema;
+	const { schema } = collection;
 	const ioOpts = {
 		...opts,
 		slug: opts.slug ?? collection.slug
@@ -680,10 +698,10 @@ function firestoreStoreFor(collection, opts) {
 			nativeQuery: false,
 			nativePaging: false
 		},
-		list: async () => firestoreList(keyOf(collection), primaryKey),
-		page: async (pageOpts = {}) => firestorePage(keyOf(collection), primaryKey, pageOpts),
-		read: async (itemId) => firestoreRead(keyOf(collection), itemId, primaryKey),
-		write: async (itemId, item, writeOpts = {}) => firestoreWrite(keyOf(collection), itemId, item, {
+		list: async () => firestoreList(keyOf(collection), schema),
+		page: async (pageOpts = {}) => firestorePage(keyOf(collection), schema, pageOpts),
+		read: async (itemId) => firestoreRead(keyOf(collection), itemId, schema),
+		write: async (itemId, item, writeOpts = {}) => firestoreWrite(keyOf(collection), itemId, item, schema, {
 			...ioOpts,
 			refuseOverwrite: writeOpts.refuseOverwrite
 		}),
@@ -3743,4 +3761,4 @@ Object.defineProperty(exports, "writeItem", {
 	}
 });
 
-//# sourceMappingURL=discovery-B9EESjHP.cjs.map
+//# sourceMappingURL=discovery-Dl9nRa-m.cjs.map