@stacksjs/defaults 0.71.10 → 0.72.1

package/ai/skills/stacks-database/SKILL.md

@@ -177,6 +177,8 @@ Before running migrations on SQLite, `preprocessSqliteMigrations()`:
 - `seedModel$(modelName, options?): Promise<SeedResult>` -- seed one model by name
 - `freshSeed(config?): Promise<SeedSummary>` -- calls `seed({ ...config, fresh: true })` (truncates before seeding)
 - `listSeedableModels(): Promise<Array<{ name, table, count, source: 'default' | 'user' }>>` -- list without seeding
+- `runApplicationSeeders(config?): Promise<ApplicationSeederSummary>` -- runs `database/seeders` classes in deterministic relative-path order
+- `Seeder` -- abstract base class for idempotent application bootstrap seeders
 
 ### SeederConfig
 ```typescript
@@ -198,6 +200,20 @@ interface SeederConfig {
 - Records inserted in batches of 100
 - Models sorted by dependency: User (0), Team (1), Project (2), everything else (10)
 - Missing tables are skipped gracefully
+- `buddy seed` and `buddy migrate:fresh --seed` also run application seeders after model factories
+- Application seeder modules must default-export a class extending `Seeder` and implement `run()`
+- Application seeders are for idempotent bootstrap work that does not belong in model factories, such as an initial workspace or role assignment
+
+```typescript
+// database/seeders/OwnerSeeder.ts
+import { Seeder } from '@stacksjs/database'
+
+export default class OwnerSeeder extends Seeder {
+  async run(): Promise<void> {
+    // Resolve existing records first, then create only what is missing.
+  }
+}
+```
 
 ### SeedResult / SeedSummary
 ```typescript

package/ai/skills/stacks-models/SKILL.md

@@ -244,7 +244,10 @@ traits: {
 ```
 
 `buddy seed` walks every model carrying the trait and fills its table from the
-attribute factories. Nothing else is needed - no seeder files, no registration.
+attribute factories. Model fixture data needs no separate seeder or registration.
+Idempotent application bootstrap work can live in `database/seeders` as a
+default-exported class extending `Seeder` from `@stacksjs/database`. Buddy runs
+those application seeders after the model factories.
 
 ```bash
 buddy seed                       # every model with a useSeeder trait

package/app/Models/Automation.ts

@@ -9,7 +9,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'automations', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth'] },
+    useApi: { uri: 'automations', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth', 'team'] },
     observe: true,
   },
   attributes: {

package/app/Models/AutomationRun.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'automation-runs', routes: ['index', 'show'], middleware: ['auth'] },
+    useApi: { uri: 'automation-runs', routes: ['index', 'show'], middleware: ['auth', 'team'] },
   },
   indexes: [{ name: 'automation_runs_idempotency_unique', columns: ['idempotency_key'], unique: true }],
   attributes: {

package/app/Models/Campaign.ts

@@ -18,7 +18,7 @@ export default defineModel({
     useApi: {
       uri: 'campaigns',
       routes: ['index', 'store', 'show', 'update', 'destroy'],
-      middleware: ['auth'],
+      middleware: ['auth', 'team'],
     },
     useSearch: {
       displayable: ['id', 'name', 'type', 'status', 'subject', 'scheduledAt', 'sentAt'],

package/app/Models/CampaignSend.ts

@@ -25,7 +25,7 @@ export default defineModel({
       // Per-recipient send records carry email + delivery status. Treat
       // as PII and require auth on all read paths. The transactional
       // owner-only views in the dashboard are gated separately.
-      middleware: ['auth'],
+      middleware: ['auth', 'team'],
     },
   },
 

package/app/Models/CampaignVariant.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'campaign-variants', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth'] },
+    useApi: { uri: 'campaign-variants', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth', 'team'] },
   },
   indexes: [{ name: 'campaign_variants_name_unique', columns: ['campaign_id', 'name'], unique: true }],
   attributes: {

package/app/Models/CommunicationSuppression.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'communication-suppressions', routes: ['index', 'store', 'show', 'destroy'], middleware: ['auth'] },
+    useApi: { uri: 'communication-suppressions', routes: ['index', 'store', 'show', 'destroy'], middleware: ['auth', 'team'] },
   },
   indexes: [{ name: 'communication_suppressions_unique', columns: ['team_id', 'channel', 'recipient'], unique: true }],
   attributes: {

package/app/Models/ConsentEvent.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'consent-events', routes: ['index', 'show'], middleware: ['auth'] },
+    useApi: { uri: 'consent-events', routes: ['index', 'show'], middleware: ['auth', 'team'] },
   },
   indexes: [{ name: 'consent_events_lookup', columns: ['team_id', 'channel', 'recipient', 'occurred_at'] }],
   attributes: {

package/app/Models/SenderDomain.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'sender-domains', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth'] },
+    useApi: { uri: 'sender-domains', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth', 'team'] },
   },
   indexes: [{ name: 'sender_domains_domain_unique', columns: ['domain'], unique: true }],
   attributes: {

package/app/Models/Site.ts

@@ -29,7 +29,7 @@ export default defineModel({
     useApi: {
       uri: 'sites',
       routes: ['index', 'store', 'show', 'update', 'destroy'],
-      middleware: ['auth'],
+      middleware: ['auth', 'team'],
     },
 
     useSearch: {

package/app/Models/TeamInvitation.ts

@@ -46,7 +46,7 @@ export default defineModel({
     useApi: {
       uri: 'team-invitations',
       routes: ['index', 'show', 'destroy'],
-      middleware: ['auth'],
+      middleware: ['auth', 'team'],
     },
   },
 

package/app/Models/TeamMember.ts

@@ -42,7 +42,7 @@ export default defineModel({
     useApi: {
       uri: 'team-members',
       routes: ['index', 'store', 'show', 'update', 'destroy'],
-      middleware: ['auth'],
+      middleware: ['auth', 'team'],
     },
   },
 

package/app/Models/UsageEvent.ts

@@ -8,7 +8,7 @@ export default defineModel({
   traits: {
     useUuid: true,
     useTimestamps: true,
-    useApi: { uri: 'usage-events', routes: ['index', 'show'], middleware: ['auth'] },
+    useApi: { uri: 'usage-events', routes: ['index', 'show'], middleware: ['auth', 'team'] },
   },
   indexes: [
     { name: 'usage_events_idempotency_unique', columns: ['idempotency_key'], unique: true },

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.71.10",
+  "version": "0.72.1",
   "description": "A modern Stacks development environment.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.71.10",
+  "version": "0.72.1",
   "description": "The complete managed Stacks application scaffold, including runtime defaults, AI guidance, editor metadata, and npm-backed project support files.",
   "author": "Chris Breuer",
   "license": "MIT",
@@ -46,7 +46,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.27",
-    "@stacksjs/mobile": "^0.71.10",
+    "@stacksjs/mobile": "^0.72.1",
     "@stacksjs/sanitizer": "^0.2.113"
   },
   "scripts": {