@stacksjs/defaults 0.70.353 → 0.70.355

package/app/Actions/Dashboard/Kanban/CardUpdateAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { Card } from '@stacksjs/orm'
 import { modelBoolean, modelNullableString, modelNumber, modelString, modelValue, refreshModel } from './kanban-model'
@@ -11,7 +12,7 @@ interface CardInput {
 }
 
 /**
- * `PATCH /api/dashboard/kanban/cards/:id` (stacksjs/stacks#1846 Phase 2).
+ * `PATCH /api/dashboard/kanban/cards/:id`.
  *
  * Partial update for the card body: title, description, due date,
  * archive flag. `position` and `columnId` are NOT updatable here —
@@ -25,14 +26,13 @@ export default new Action({
   description: 'Partial update of a card body (title, description, due date, archive).',
   method: 'PATCH',
   apiResponse: true,
-  async handle(request) {
-    const rawId = (request as any)?.params?.id ?? (request as any)?.param?.('id') ?? null
-    const id = Number(rawId)
+  async handle(request: RequestInstance<CardInput>) {
+    const id = Number(request.getParam('id'))
     if (!Number.isFinite(id) || id <= 0) {
       return kanbanError('Invalid card id', 400)
     }
 
-    const body = (request as any).jsonBody as CardInput | undefined ?? {}
+    const body = request.all()
     const set: Record<string, unknown> = {}
 
     if (typeof body.title === 'string') {

package/app/Actions/Dashboard/Kanban/CardsReorderAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
 import { kanbanError } from './kanban-response'
@@ -31,7 +32,7 @@ interface ReorderInput {
 }
 
 /**
- * `POST /api/dashboard/kanban/cards/reorder` (stacksjs/stacks#1846 Phase 2).
+ * `POST /api/dashboard/kanban/cards/reorder`.
  *
  * The drag-and-drop hot path. Rewrites card positions and column
  * assignments across one or more columns of a single board in a single
@@ -47,8 +48,8 @@ export default new Action({
   description: 'Bulk-rewrite cards.{column_id, position} across one or more columns of the same board.',
   method: 'POST',
   apiResponse: true,
-  async handle(request) {
-    const body = (request as any).jsonBody as ReorderInput | undefined ?? {}
+  async handle(request: RequestInstance<ReorderInput>) {
+    const body = request.all()
 
     if (!Array.isArray(body.columns) || body.columns.length === 0) {
       return kanbanError('`columns` must be a non-empty array.', 400)

package/app/Actions/Dashboard/Kanban/ColumnDestroyAction.ts

@@ -1,9 +1,10 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
 import { kanbanError } from './kanban-response'
 
 /**
- * `DELETE /api/dashboard/kanban/columns/:id` (stacksjs/stacks#1846 Phase 2).
+ * `DELETE /api/dashboard/kanban/columns/:id`.
  *
  * Hard-deletes the column and cascade-cleans every card inside it
  * (plus the pivot rows referencing those cards). Same convention as
@@ -19,9 +20,8 @@ export default new Action({
   description: 'Hard-deletes a column and its cards.',
   method: 'DELETE',
   apiResponse: true,
-  async handle(request) {
-    const rawId = (request as any)?.params?.id ?? (request as any)?.param?.('id') ?? null
-    const id = Number(rawId)
+  async handle(request: RequestInstance) {
+    const id = Number(request.getParam('id'))
     if (!Number.isFinite(id) || id <= 0) {
       return kanbanError('Invalid column id', 400)
     }
@@ -37,7 +37,7 @@ export default new Action({
           'DELETE FROM card_assignees WHERE card_id IN (SELECT id FROM cards WHERE column_id = ?)',
           [id],
         ).execute()
-        // Card comments (Phase 3, stacksjs/stacks#1846).
+        // Card comments are card-scoped children.
         await qb.unsafe(
           'DELETE FROM card_comments WHERE card_id IN (SELECT id FROM cards WHERE column_id = ?)',
           [id],

package/app/Actions/Dashboard/Kanban/ColumnStoreAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
 import { Board, BoardColumn } from '@stacksjs/orm'
@@ -11,7 +12,7 @@ interface ColumnInput {
 }
 
 /**
- * `POST /api/dashboard/kanban/columns` (stacksjs/stacks#1846 Phase 2).
+ * `POST /api/dashboard/kanban/columns`.
  *
  * Appends a new column to the end of the target board. Validates that
  * `boardId` points at a real board so a typo doesn't silently create
@@ -22,8 +23,8 @@ export default new Action({
   description: 'Creates a new column on a board.',
   method: 'POST',
   apiResponse: true,
-  async handle(request) {
-    const body = (request as any).jsonBody as ColumnInput | undefined ?? {}
+  async handle(request: RequestInstance<ColumnInput>) {
+    const body = request.all()
 
     const boardId = Number(body.boardId)
     if (!Number.isFinite(boardId) || boardId <= 0) {

package/app/Actions/Dashboard/Kanban/ColumnUpdateAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { BoardColumn } from '@stacksjs/orm'
 import { modelNullableString, modelNumber, modelString, modelValue, refreshModel } from './kanban-model'
@@ -10,7 +11,7 @@ interface ColumnInput {
 }
 
 /**
- * `PATCH /api/dashboard/kanban/columns/:id` (stacksjs/stacks#1846 Phase 2).
+ * `PATCH /api/dashboard/kanban/columns/:id`.
  *
  * Partial update for name / color / card limit. `position` and
  * `boardId` are NOT updatable here — moving a column between boards
@@ -23,14 +24,13 @@ export default new Action({
   description: 'Partial update of a board column.',
   method: 'PATCH',
   apiResponse: true,
-  async handle(request) {
-    const rawId = (request as any)?.params?.id ?? (request as any)?.param?.('id') ?? null
-    const id = Number(rawId)
+  async handle(request: RequestInstance<ColumnInput>) {
+    const id = Number(request.getParam('id'))
     if (!Number.isFinite(id) || id <= 0) {
       return kanbanError('Invalid column id', 400)
     }
 
-    const body = (request as any).jsonBody as ColumnInput | undefined ?? {}
+    const body = request.all()
     const set: Record<string, unknown> = {}
 
     if (typeof body.name === 'string') {

package/app/Actions/Dashboard/Kanban/ColumnsReorderAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
 import { kanbanError } from './kanban-response'
@@ -8,7 +9,7 @@ interface ReorderInput {
 }
 
 /**
- * `POST /api/dashboard/kanban/columns/reorder` (stacksjs/stacks#1846 Phase 2).
+ * `POST /api/dashboard/kanban/columns/reorder`.
  *
  * Bulk rewrite column positions for a board. The submitted `order`
  * is an array of column ids in their new display order; index becomes
@@ -27,8 +28,8 @@ export default new Action({
   description: 'Bulk-rewrite `position` on a board\'s columns.',
   method: 'POST',
   apiResponse: true,
-  async handle(request) {
-    const body = (request as any).jsonBody as ReorderInput | undefined ?? {}
+  async handle(request: RequestInstance<ReorderInput>) {
+    const body = request.all()
 
     const boardId = Number(body.boardId)
     if (!Number.isFinite(boardId) || boardId <= 0) {

package/app/Actions/Dashboard/Kanban/LabelDestroyAction.ts

@@ -1,9 +1,10 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
 import { kanbanError } from './kanban-response'
 
 /**
- * `DELETE /api/dashboard/kanban/labels/:id` (stacksjs/stacks#1846 Phase 3).
+ * `DELETE /api/dashboard/kanban/labels/:id`.
  *
  * Removes a label and detaches it from every card that carries it.
  * The label row goes from the `labels` table; every pivot row in
@@ -15,9 +16,8 @@ export default new Action({
   description: 'Hard-deletes a label and its card_labels pivot rows.',
   method: 'DELETE',
   apiResponse: true,
-  async handle(request) {
-    const rawId = (request as any)?.params?.id ?? (request as any)?.param?.('id') ?? null
-    const id = Number(rawId)
+  async handle(request: RequestInstance) {
+    const id = Number(request.getParam('id'))
     if (!Number.isFinite(id) || id <= 0)
       return kanbanError('Invalid label id', 400)
 

package/app/Actions/Dashboard/Kanban/LabelStoreAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { Board, Label } from '@stacksjs/orm'
 import { kanbanError } from './kanban-response'
@@ -9,7 +10,7 @@ interface LabelInput {
 }
 
 /**
- * `POST /api/dashboard/kanban/labels` (stacksjs/stacks#1846 Phase 3).
+ * `POST /api/dashboard/kanban/labels`.
  *
  * Creates a label scoped to a board. Labels are unique per
  * `(board_id, name)` — the migration enforces this via a unique
@@ -21,8 +22,8 @@ export default new Action({
   description: 'Creates a label on a board.',
   method: 'POST',
   apiResponse: true,
-  async handle(request) {
-    const body = (request as any).jsonBody as LabelInput | undefined ?? {}
+  async handle(request: RequestInstance<LabelInput>) {
+    const body = request.all()
 
     const boardId = Number(body.boardId)
     if (!Number.isFinite(boardId) || boardId <= 0) {

package/app/Actions/Dashboard/Kanban/LabelUpdateAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { Label } from '@stacksjs/orm'
 import { modelNumber, modelString, refreshModel } from './kanban-model'
@@ -9,7 +10,7 @@ interface LabelInput {
 }
 
 /**
- * `PATCH /api/dashboard/kanban/labels/:id` (stacksjs/stacks#1846 Phase 3).
+ * `PATCH /api/dashboard/kanban/labels/:id`.
  *
  * Partial update for label name + color. `board_id` is not movable —
  * a label on board A renaming to "Bug" must not collide with a
@@ -21,14 +22,13 @@ export default new Action({
   description: 'Partial update of a label name / color.',
   method: 'PATCH',
   apiResponse: true,
-  async handle(request) {
-    const rawId = (request as any)?.params?.id ?? (request as any)?.param?.('id') ?? null
-    const id = Number(rawId)
+  async handle(request: RequestInstance<LabelInput>) {
+    const id = Number(request.getParam('id'))
     if (!Number.isFinite(id) || id <= 0) {
       return kanbanError('Invalid label id', 400)
     }
 
-    const body = (request as any).jsonBody as LabelInput | undefined ?? {}
+    const body = request.all()
     const set: Record<string, unknown> = {}
     let renamingTo: string | null = null
 

package/app/Actions/Dashboard/Kanban/UsersListAction.ts

@@ -3,7 +3,7 @@ import { db } from '@stacksjs/database'
 import { kanbanError } from './kanban-response'
 
 /**
- * `GET /api/dashboard/kanban/users` (stacksjs/stacks#1846 Phase 3).
+ * `GET /api/dashboard/kanban/users`.
  *
  * Lightweight user list for the assignee picker on the card detail
  * modal. Returns `{ id, name, email }` only — no roles, no profile,

package/app/Actions/Dashboard/Kanban/kanban-comment.ts

@@ -0,0 +1,14 @@
+import { modelNullableNumber, modelNullableString, modelNumber, modelString } from './kanban-model'
+
+export function cardCommentResponse(record: object, author?: object | null) {
+  return {
+    id: modelNumber(record, 'id'),
+    uuid: modelNullableString(record, 'uuid'),
+    userId: modelNullableNumber(record, 'userId', 'user_id'),
+    body: modelString(record, 'body'),
+    authorName: author ? modelNullableString(author, 'name') : null,
+    authorEmail: author ? modelNullableString(author, 'email') : null,
+    createdAt: modelNullableString(record, 'createdAt', 'created_at'),
+    updatedAt: modelNullableString(record, 'updatedAt', 'updated_at'),
+  }
+}

package/app/Actions/Dashboard/Kanban/kanban-model.test.ts

@@ -1,6 +1,8 @@
 import { describe, expect, test } from 'bun:test'
+import { cardCommentResponse } from './kanban-comment'
 import {
   modelBoolean,
+  modelNullableNumber,
   modelNullableString,
   modelNumber,
   modelString,
@@ -31,12 +33,26 @@ describe('kanban model response values', () => {
   })
 
   test('normalizes nullable strings and persisted booleans', () => {
+    expect(modelNullableNumber(record({ value: null }), 'value')).toBeNull()
+    expect(modelNullableNumber(record({ value: '42' }), 'value')).toBe(42)
     expect(modelNullableString(record({ value: null }), 'value')).toBeNull()
     expect(modelBoolean(record({ enabled: 1 }), 'enabled')).toBe(true)
     expect(modelBoolean(record({ enabled: 'true' }), 'enabled')).toBe(true)
     expect(modelBoolean(record({ enabled: 0 }), 'enabled')).toBe(false)
   })
 
+  test('reads raw query rows as well as ORM model records', () => {
+    const row = {
+      board_id: 4,
+      archived: 1,
+      created_at: '2026-08-10 12:00:00',
+    }
+
+    expect(modelNumber(row, 'boardId', 'board_id')).toBe(4)
+    expect(modelBoolean(row, 'archived')).toBe(true)
+    expect(modelString(row, 'createdAt', 'created_at')).toBe('2026-08-10 12:00:00')
+  })
+
   test('refreshes generated database values after a write', async () => {
     const stale = {
       ...record({ updated_at: null }),
@@ -46,4 +62,24 @@ describe('kanban model response values', () => {
     const refreshed = await refreshModel(stale)
     expect(modelString(refreshed, 'updatedAt', 'updated_at')).toBe('2026-07-31 04:00:00')
   })
+
+  test('serializes model-backed comments with their author', () => {
+    expect(cardCommentResponse(record({
+      id: 7,
+      uuid: 'comment-uuid',
+      userId: 3,
+      body: 'Updated note',
+      createdAt: '2026-08-10 20:00:00',
+      updatedAt: '2026-08-10 21:00:00',
+    }), record({ name: 'Chris', email: 'chris@example.com' }))).toEqual({
+      id: 7,
+      uuid: 'comment-uuid',
+      userId: 3,
+      body: 'Updated note',
+      authorName: 'Chris',
+      authorEmail: 'chris@example.com',
+      createdAt: '2026-08-10 20:00:00',
+      updatedAt: '2026-08-10 21:00:00',
+    })
+  })
 })

package/app/Actions/Dashboard/Kanban/kanban-model.ts

@@ -10,28 +10,35 @@ export async function refreshModel(record: RefreshableKanbanModelRecord): Promis
   return await record.fresh() ?? record
 }
 
-export function modelValue(record: KanbanModelRecord, camelKey: string, snakeKey = camelKey): unknown {
-  const camelValue = record.get(camelKey)
+export function modelValue(record: object, camelKey: string, snakeKey = camelKey): unknown {
+  const model = record as Partial<KanbanModelRecord>
+  const row = record as Record<string, unknown>
+  const camelValue = typeof model.get === 'function' ? model.get(camelKey) : row[camelKey]
   if (camelValue !== undefined)
     return camelValue
-  return record.get(snakeKey)
+  return typeof model.get === 'function' ? model.get(snakeKey) : row[snakeKey]
 }
 
-export function modelNumber(record: KanbanModelRecord, camelKey: string, snakeKey = camelKey): number {
+export function modelNumber(record: object, camelKey: string, snakeKey = camelKey): number {
   return Number(modelValue(record, camelKey, snakeKey))
 }
 
-export function modelString(record: KanbanModelRecord, camelKey: string, snakeKey = camelKey): string {
+export function modelNullableNumber(record: object, camelKey: string, snakeKey = camelKey): number | null {
+  const value = modelValue(record, camelKey, snakeKey)
+  return value === undefined || value === null ? null : Number(value)
+}
+
+export function modelString(record: object, camelKey: string, snakeKey = camelKey): string {
   const value = modelValue(record, camelKey, snakeKey)
   return value === undefined || value === null ? '' : String(value)
 }
 
-export function modelNullableString(record: KanbanModelRecord, camelKey: string, snakeKey = camelKey): string | null {
+export function modelNullableString(record: object, camelKey: string, snakeKey = camelKey): string | null {
   const value = modelValue(record, camelKey, snakeKey)
   return value === undefined || value === null ? null : String(value)
 }
 
-export function modelBoolean(record: KanbanModelRecord, camelKey: string, snakeKey = camelKey): boolean {
+export function modelBoolean(record: object, camelKey: string, snakeKey = camelKey): boolean {
   const value = modelValue(record, camelKey, snakeKey)
   return value === true || value === 1 || value === '1' || value === 'true'
 }

package/app/Actions/Dashboard/Models/ModelDestroyAction.ts

@@ -1,3 +1,4 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { parseRowId, resolveWritableModel } from './model-write'
 
@@ -13,12 +14,12 @@ export default new Action({
   description: 'Deletes one row of a model from the dashboard model browser.',
   method: 'DELETE',
   apiResponse: true,
-  async handle(req: { getParam?: (name: string) => unknown, route?: { params?: { slug?: string, id?: string } } }) {
-    const resolved = await resolveWritableModel(String(req?.getParam?.('slug') ?? req?.route?.params?.slug ?? ''), 'destroy')
+  async handle(request: RequestInstance) {
+    const resolved = await resolveWritableModel(request.getParam('slug'), 'destroy')
     if ('error' in resolved)
       return { ok: false, error: resolved.error }
 
-    const id = parseRowId(req?.getParam?.('id') ?? req?.route?.params?.id)
+    const id = parseRowId(request.getParam('id'))
     if (id === null)
       return { ok: false, error: 'A numeric row id is required.' }
 

package/app/Actions/Dashboard/Models/ModelShowAction.ts

@@ -1,6 +1,7 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { env } from '@stacksjs/env'
-import { request, response as routerResponse } from '@stacksjs/router'
+import { response as routerResponse } from '@stacksjs/router'
 import { loadModelIfExists, safeGet } from '../../../../resources/functions/dashboard/data'
 import { isValidModelSlug, type ModelCreateField, type ModelWriteCapabilities, modelCreateFields, modelSchemaColumns, modelWriteCapabilities, slugToPascal } from './model-write'
 
@@ -108,14 +109,11 @@ function typeForColumn(column: string, values: unknown[]): ColumnMeta['type'] {
   return inferType(values)
 }
 
-function queryParams(): URLSearchParams {
-  const query = ((request as any).query || {}) as Record<string, string | string[] | undefined>
-  const params = new URLSearchParams()
-  for (const [key, value] of Object.entries(query)) {
-    if (value === undefined) continue
-    params.set(key, Array.isArray(value) ? String(value[0]) : String(value))
-  }
-  return params
+function queryValue(request: RequestInstance, key: string, fallback = ''): string {
+  const value = request.get<unknown>(key, fallback)
+  if (Array.isArray(value))
+    return value.length > 0 ? String(value[0]) : fallback
+  return value == null ? fallback : String(value)
 }
 
 /** `filters` arrives as a JSON object so column names stay unambiguous. */
@@ -176,23 +174,22 @@ export default new Action({
   description: 'Queries a single model by URL slug with paging, sorting, search and column filters.',
   method: 'GET',
   apiResponse: true,
-  async handle(req: { getParam?: (name: string) => unknown, route?: { params?: { slug?: string } } }) {
-    const slug = String(req?.getParam?.('slug') ?? req?.route?.params?.slug ?? '')
+  async handle(request: RequestInstance) {
+    const slug = request.getParam('slug')
     if (!isValidModelSlug(slug))
       return routerResponse.json({ message: 'Model slug must be lowercase kebab-case.' }, 400)
 
     const modelName = slugToPascal(slug)
     const tableName = pluralize(pascalToSnake(modelName))
 
-    const params = queryParams()
-    const page = Math.max(1, Number.parseInt(params.get('page') || '1', 10) || 1)
-    const perPage = Math.min(MAX_PER_PAGE, Math.max(1, Number.parseInt(params.get('per_page') || String(DEFAULT_PER_PAGE), 10) || DEFAULT_PER_PAGE))
-    const requestedSort = (params.get('sort') || '').trim()
-    const dir: 'asc' | 'desc' = params.get('dir') === 'asc' ? 'asc' : 'desc'
-    const q = (params.get('q') || '').trim()
+    const page = Math.max(1, Number.parseInt(queryValue(request, 'page', '1'), 10) || 1)
+    const perPage = Math.min(MAX_PER_PAGE, Math.max(1, Number.parseInt(queryValue(request, 'per_page', String(DEFAULT_PER_PAGE)), 10) || DEFAULT_PER_PAGE))
+    const requestedSort = queryValue(request, 'sort').trim()
+    const dir: 'asc' | 'desc' = queryValue(request, 'dir') === 'asc' ? 'asc' : 'desc'
+    const q = queryValue(request, 'q').trim()
     let filters: Record<string, string>
     try {
-      filters = parseFilters(params.get('filters'))
+      filters = parseFilters(queryValue(request, 'filters') || null)
     }
     catch (error) {
       return routerResponse.json({

package/app/Actions/Dashboard/Models/ModelStoreAction.ts

@@ -1,23 +1,23 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { toSnakeCaseKeys } from '@stacksjs/orm'
-import { request } from '@stacksjs/router'
 import { prepareModelFields, resolveWritableModel } from './model-write'
 
+interface ModelWriteInput {
+  fields?: unknown
+}
+
 export default new Action({
   name: 'Dashboard Model Store',
   description: 'Creates one row through a model declared useApi store contract.',
   method: 'POST',
   apiResponse: true,
-  async handle(req: {
-    getParam?: (name: string) => unknown
-    all?: () => Record<string, unknown>
-    route?: { params?: { slug?: string } }
-  }) {
-    const resolved = await resolveWritableModel(String(req?.getParam?.('slug') ?? req?.route?.params?.slug ?? ''), 'store')
+  async handle(request: RequestInstance<ModelWriteInput>) {
+    const resolved = await resolveWritableModel(request.getParam('slug'), 'store')
     if ('error' in resolved)
       return { ok: false, error: resolved.error }
 
-    const input = (req.all?.() ?? (request as any).all?.() ?? {}) as Record<string, unknown>
+    const input = request.all()
     const raw = input.fields
     const body = (raw && typeof raw === 'object' && !Array.isArray(raw)) ? raw as Record<string, unknown> : {}
     const { data, errors } = prepareModelFields(resolved.Model, body)

package/app/Actions/Dashboard/Models/ModelUpdateAction.ts

@@ -1,8 +1,12 @@
+import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { toSnakeCaseKeys } from '@stacksjs/orm'
-import { request } from '@stacksjs/router'
 import { parseRowId, prepareModelFields, resolveWritableModel } from './model-write'
 
+interface ModelWriteInput {
+  fields?: unknown
+}
+
 /**
  * `PATCH /api/dashboard/models/{slug}/{id}`.
  *
@@ -16,16 +20,12 @@ export default new Action({
   description: 'Updates one row of a model from the dashboard model browser.',
   method: 'PATCH',
   apiResponse: true,
-  async handle(req: {
-    getParam?: (name: string) => unknown
-    all?: () => Record<string, unknown>
-    route?: { params?: { slug?: string, id?: string } }
-  }) {
-    const resolved = await resolveWritableModel(String(req?.getParam?.('slug') ?? req?.route?.params?.slug ?? ''), 'update')
+  async handle(request: RequestInstance<ModelWriteInput>) {
+    const resolved = await resolveWritableModel(request.getParam('slug'), 'update')
     if ('error' in resolved)
       return { ok: false, error: resolved.error }
 
-    const id = parseRowId(req?.getParam?.('id') ?? req?.route?.params?.id)
+    const id = parseRowId(request.getParam('id'))
     if (id === null)
       return { ok: false, error: 'A numeric row id is required.' }
 
@@ -35,7 +35,7 @@ export default new Action({
     // columns — and `slug` is a real column on plenty of models, so it
     // cannot simply be blocklisted. One level of nesting keeps the two
     // namespaces apart.
-    const input = (req.all?.() ?? (request as any).all?.() ?? {}) as Record<string, unknown>
+    const input = request.all()
     const raw = input.fields
     const body = (raw && typeof raw === 'object' && !Array.isArray(raw)) ? raw as Record<string, unknown> : {}
     const prepared = prepareModelFields(resolved.Model, body, true)

package/app/Actions/Dashboard/Models/ModelsIndexAction.ts

@@ -3,6 +3,7 @@ import { existsSync, readdirSync } from 'node:fs'
 import { join } from 'node:path'
 import process from 'node:process'
 import { countRows } from '../../../../resources/functions/dashboard/data'
+import { modelApiConfiguration } from './model-api'
 
 /**
  * `GET /api/dashboard/models` (stacksjs/stacks#1838).
@@ -135,7 +136,7 @@ export default new Action({
         }
       }
 
-      const api = Model.traits?.useApi
+      const api = modelApiConfiguration(Model)
       let count: number | null = null
       let error: string | null = null
       try {
@@ -153,8 +154,8 @@ export default new Action({
         attributeCount: Object.keys(Model.attributes || {}).length,
         category: categorize(m),
         source: m.source,
-        apiUri: typeof api === 'object' && typeof api.uri === 'string' ? `/api/${api.uri}` : '',
-        apiRoutes: typeof api === 'object' && Array.isArray(api.routes) ? api.routes.map(String) : [],
+        apiUri: api.uri ? `/api/${api.uri}` : '',
+        apiRoutes: api.routes,
         error,
       }
     }))

package/app/Actions/Dashboard/Models/model-api.ts

@@ -0,0 +1,27 @@
+export const DEFAULT_MODEL_API_ROUTES = ['index', 'show', 'store', 'update', 'destroy'] as const
+
+export interface ModelApiConfiguration {
+  uri: string
+  routes: string[]
+}
+
+/**
+ * Normalize a model's useApi trait exactly as the ORM route generator does.
+ * An enabled trait without explicit routes receives the complete REST set,
+ * while an explicit empty routes array remains intentionally empty.
+ */
+export function modelApiConfiguration(Model: any): ModelApiConfiguration {
+  const useApi = Model?.traits?.useApi
+  if (!useApi)
+    return { uri: '', routes: [] }
+
+  const config = typeof useApi === 'object' ? useApi : {}
+  const fallbackUri = String(Model?.table || `${String(Model?.name || '').toLowerCase()}s`)
+
+  return {
+    uri: String(config.uri || fallbackUri),
+    routes: Array.isArray(config.routes)
+      ? config.routes.map(String)
+      : [...DEFAULT_MODEL_API_ROUTES],
+  }
+}

package/app/Actions/Dashboard/Models/model-write.ts

@@ -7,6 +7,7 @@
  * bypass every guarantee the ORM makes. Those rows stay read-only.
  */
 import { loadModelIfExists } from '../../../../resources/functions/dashboard/data'
+import { modelApiConfiguration } from './model-api'
 
 /** Never writable from a generic admin table, whatever the model declares. */
 export const PROTECTED_COLUMNS: ReadonlySet<string> = new Set([
@@ -121,17 +122,8 @@ function isProtectedField(name: string): boolean {
   return PROTECTED_COLUMNS.has(name) || PROTECTED_COLUMNS.has(column)
 }
 
-function useApiRoutes(Model: any): string[] {
-  const useApi = Model?.traits?.useApi
-  if (!useApi)
-    return []
-  if (typeof useApi === 'object' && Array.isArray(useApi.routes))
-    return useApi.routes.map(String)
-  return ['index', 'store', 'show', 'update', 'destroy']
-}
-
 export function modelWriteCapabilities(Model: any): ModelWriteCapabilities {
-  const routes = useApiRoutes(Model)
+  const routes = modelApiConfiguration(Model).routes
   return {
     create: routes.includes('store'),
     update: routes.includes('update'),

package/app/Actions/Dashboard/Notifications/NotificationDeliveryHistoryAction.ts

@@ -1,7 +1,8 @@
 import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { db } from '@stacksjs/database'
-import { request as routerRequest, response } from '@stacksjs/router'
+import { response } from '@stacksjs/router'
+import { dashboardRequestValue } from '../dashboard-request'
 import {
   type NotificationDeliveryRow,
   serializeNotificationDelivery,
@@ -16,9 +17,7 @@ type DeliveryStatus = typeof STATUSES[number]
 type DeliverySort = typeof SORTS[number]
 
 function queryValue(request: RequestInstance, key: string): string {
-  const query = ((routerRequest as any).query || {}) as Record<string, string | string[] | undefined>
-  const value = query[key]
-  return String((Array.isArray(value) ? value[0] : value) || request.get(key) || '').trim()
+  return dashboardRequestValue(request, key)
 }
 
 function allowedValue<T extends string>(value: string, values: readonly T[]): T | null {