@stacksjs/defaults 0.75.230 → 0.75.233

package/ai/skills/stacks-dashboard/SKILL.md

@@ -652,3 +652,18 @@ or a fake success response.
 - Preserve the existing sidebar information architecture and styling when redesigning page content
 - Use `dashboard-modal-layer` for every fixed dashboard dialog or drawer
 - The live terminal component polls real deployment output and pauses while the document is hidden
+
+## Generic model exposure
+
+Set `dashboard: { access: false }` on a model to exclude it server-side from
+the generic model catalog and its totals, legacy highlighted model counts,
+User/Subscriber count Actions, global model search, and generic model-browser
+read/store/update/destroy Actions. Direct model-browser requests return 404
+before row queries. Omission preserves existing exposure.
+
+`dashboard.enabled: false` only hides a sidebar row and still permits generic
+model access. `access` does not disable direct ORM calls, named domain Actions,
+or separate routes generated by `useApi`. Configure `security.api.models` or
+`STACKS_MODEL_APIS`, middleware, ownership and policies for those APIs. The
+new boundary does not provide row ownership or permission checks for models
+that remain exposed.

package/ai/skills/stacks-models/SKILL.md

@@ -123,7 +123,12 @@ of forcing a cast. See `orm/tests/inference-attributes.test-d.ts`.
 
 Also at the top level: `indexes: [{ name, columns, unique?, where? }]` for
 composite and partial-unique indexes, and `dashboard: { highlight: true }` to
-feature the model in the admin UI.
+feature the model in the admin UI. Use `dashboard: { access: false }` to
+exclude a model from generic dashboard catalogs/counts/search and the generic
+model-browser CRUD Actions before database work. Its default is `true`;
+`dashboard.enabled: false` still only hides the sidebar row. `access` leaves
+direct ORM calls, named domain Actions and generated `useApi` routes available.
+Those APIs require their own route selection, middleware, ownership and policies.
 
 `useApi` is an API capability, not a dashboard-view generator. Its generated
 routes are registered from the merged model registry. Framework defaults are

package/ai/skills/stacks-native/CATALOG.md

@@ -11,7 +11,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | Package | Task guidance | Source entry | Retained tests |
 |---|---|---|---|
 | `@stacksjs/action-runner` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/action-runner/src/index.ts) | 1 |
-| `@stacksjs/actions` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/index.ts) | 72 |
+| `@stacksjs/actions` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/index.ts) | 73 |
 | `@stacksjs/ai` | [`stacks-ai`](../stacks-ai/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/ai/src/index.ts) | 17 |
 | `@stacksjs/alias` | [`stacks-alias`](../stacks-alias/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/alias/src/index.ts) | 1 |
 | `@stacksjs/analytics` | [`stacks-analytics`](../stacks-analytics/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/analytics/src/index.ts) | 6 |
@@ -86,9 +86,9 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/slug` | [`stacks-slug`](../stacks-slug/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/slug/src/index.ts) | 4 |
 | `@stacksjs/sms` | [`stacks-sms`](../stacks-sms/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/sms/src/index.ts) | 5 |
 | `@stacksjs/socials` | [`stacks-socials`](../stacks-socials/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/socials/src/index.ts) | 17 |
-| `@stacksjs/storage` | [`stacks-storage`](../stacks-storage/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/index.ts) | 40 |
+| `@stacksjs/storage` | [`stacks-storage`](../stacks-storage/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/index.ts) | 42 |
 | `@stacksjs/strings` | [`stacks-strings`](../stacks-strings/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/strings/src/index.ts) | 7 |
-| `@stacksjs/testing` | [`stacks-testing`](../stacks-testing/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/index.ts) | 14 |
+| `@stacksjs/testing` | [`stacks-testing`](../stacks-testing/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/index.ts) | 15 |
 | `@stacksjs/tinker` | [`stacks-repl`](../stacks-repl/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/tinker/src/index.ts) | 1 |
 | `@stacksjs/tunnel` | [`stacks-tunnel`](../stacks-tunnel/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/tunnel/src/index.ts) | 1 |
 | `@stacksjs/types` | [`stacks-types`](../stacks-types/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/types/src/index.ts) | 2 |
@@ -119,7 +119,7 @@ Declared runtime exports: `BlogAdminError`, `DEFAULT_IOS_DEPENDENCIES`, `DEFAULT
 
 Local source modules: [src/action.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/action.ts), [src/add.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/add.ts), [src/blog-admin.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/blog-admin.ts), [src/build/ios-toolchain.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/build/ios-toolchain.ts), [src/commit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/commit.ts), [src/dev/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/dev/index.ts), [src/discover-packages.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/discover-packages.ts), [src/generate/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/generate/index.ts), [src/github-release.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/github-release.ts), [src/helpers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/helpers/index.ts), [src/library/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/library/index.ts), [src/lint/lint.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/lint/lint.ts), [src/lint/stx-gate.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/lint/stx-gate.ts), [src/make-command.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-command.ts), [src/make-job.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-job.ts), [src/make-policy.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-policy.ts), [src/make-resource.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-resource.ts), [src/make.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make.ts), [src/scaffold-crud.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/scaffold-crud.ts), [src/setup/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/setup/index.ts), [src/stacks.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/stacks.ts), [src/upgrade/package-project.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/upgrade/package-project.ts), [src/upgrade/route-actions.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/upgrade/route-actions.ts).
 
-Evidence directory: [72 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [73 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/ai
 
@@ -831,7 +831,7 @@ Declared runtime exports: `PathSanitizeError`, `Storage`, `StorageManager`, `Upl
 
 Local source modules: [src/adapters/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/adapters/index.ts), [src/bounded-text-file.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/bounded-text-file.ts), [src/completed-artifact-directory.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/completed-artifact-directory.ts), [src/copy.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/copy.ts), [src/delete.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/delete.ts), [src/drivers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/drivers/index.ts), [src/facade.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/facade.ts), [src/file-info.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/file-info.ts), [src/files.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/files.ts), [src/folders.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/folders.ts), [src/fs.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/fs.ts), [src/glob.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/glob.ts), [src/hash.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/hash.ts), [src/helpers.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/helpers.ts), [src/mime-verify.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/mime-verify.ts), [src/path-sanitize.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/path-sanitize.ts), [src/provision.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/provision.ts), [src/s3-presigned-post.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/s3-presigned-post.ts), [src/signed-url.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/signed-url.ts), [src/static-serve.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/static-serve.ts), [src/storage.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/storage.ts), [src/temporary-workspaces.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/temporary-workspaces.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/types.ts), [src/types/filesystem.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/types/filesystem.ts), [src/uploaded-file.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/uploaded-file.ts), [src/zip.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/zip.ts).
 
-Evidence directory: [40 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [42 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/strings
 
@@ -851,7 +851,7 @@ Read the entrypoint and package export map for re-exported or type-only surfaces
 
 Local source modules: [src/console.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/console.ts), [src/disposable-database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/disposable-database.ts), [src/events.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/events.ts), [src/feature.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/feature.ts), [src/isolated.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/isolated.ts), [src/mail.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/mail.ts), [src/time.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/time.ts).
 
-Evidence directory: [14 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [15 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/tinker
 

package/ai/skills/stacks-storage/SKILL.md

@@ -85,6 +85,36 @@ parent-directory authorization and domain validation. This is a local hard-link
 and directory-fsync protocol, not a cloud-adapter transaction or tested hardware
 power-loss guarantee.
 
+For a durable ownership checkpoint before private bytes, use
+`prepareCompletedArtifactDirectorySync(directory, entries, manifestJson, options)`
+from the same subpath or package root. Its deeply frozen handle contains only
+`receipt` and single-use `publishSync()`. Preparation exclusively creates and
+syncs a private empty tree, then closes every descriptor. Persist the receipt
+before calling the same live handle's publication method. The receipt records
+canonical parent/tree/file identities and planned lengths/SHA-256; observed
+file lengths are zero and `manifest.json` is absent. Planned metadata is not
+completed content or a deletion receipt.
+
+Pass plain data records/lists and unshared Uint8Array/Buffer views. Record/list
+validation refuses proxies, getters, holes and hidden/symbol aliases without
+executing caller code; byte views use intrinsic offsets rather than overrides.
+Publication rechecks the empty tree and identities, writes/syncs
+detached bytes, verifies readback hashes and exclusively links the registered
+pending-manifest inode to completion. Every attempt consumes the handle, even
+on error. Errors preserve state; JSON cannot rehydrate a writer. There is no
+overwrite, arbitrary existing-directory writer or implicit cleanup.
+
+Read the storage README's prepared-artifact section before integrating an
+ownership ledger. It defines decimal-string identities, planned byte semantics,
+birth-time availability, prepublication-only change time and legitimate link
+transitions. Parent paths must already exist, belong to the operator and remain
+controlled. Canonical ancestor aliases are allowed; final targets are exclusive.
+Both calls block the isolate, including while holding any caller transaction.
+Caps bound bytes/files rather than I/O duration; database contention and SQL/FS
+atomicity remain caller concerns. The existing async writer keeps asynchronous
+filesystem execution. Real process-interruption tests do not establish hardware
+power-loss, hostile same-user race, deletion or media-erasure guarantees.
+
 ### Recoverable temporary workspaces
 
 Use `TemporaryWorkspaceJournal` for workers that recover temporary directories after a process interruption. Keep its private journal outside job-controlled checkouts and separate it by stable worker and controller identity. `create(key)` returns a frozen live ownership handle; stop its resources, then call `complete(handle)` for normal disposal. A restarted instance cannot forge this capability from a listed record.
@@ -106,6 +136,19 @@ await journal.retire(recovered.id, record => controllerConfirmsFinished(record.k
 
 The `Storage` singleton is a pre-instantiated `StorageManager`. It lazily builds its config from `@stacksjs/config` (which reads `config/filesystems.ts` and env vars).
 
+### Directory mounts without retirement
+
+Use `inspectDirectoryMounts(canonicalDirectory)` for read-only current-namespace
+mount checks where legitimate readers may stay open. Supply an existing,
+checked canonical directory. An unmounted result means only that the native
+mount table did not reference that directory or a descendant. Unavailable,
+unsupported, aliased or missing paths never return `unmounted: true`.
+
+Keep `inspectTemporaryWorkspace` and journal retirement for deletion: they also
+check process references and inspection permissions. Mount inspection alone
+grants no ownership, quiescence or retirement authority and does not inspect
+other namespaces or prevent later host changes.
+
 ### Basic Operations
 
 ```typescript

package/ai/skills/stacks-testing/SKILL.md

@@ -169,7 +169,8 @@ expect(result.exitCode).toBe(0)
 
 Retained implementation evidence lives under `core/testing/tests/`:
 `http-client`, `acting-as`, `database-assertions`, `events`, `mail`, `time`,
-`console`, `isolated`, `disposable-database` and `browser` test files. Fixture mechanics live in `core/testing/src/`;
+`console`, `isolated`, `disposable-database`, `browser` and `declarations` (what dtsx
+publishes for `browser.ts` / `isolated.ts`: no `unknown` fields) test files. Fixture mechanics live in `core/testing/src/`;
 `package.json` declares the root and database/DynamoDB/browser export boundaries.
 
 ## Isolated processes and disposable databases
@@ -191,7 +192,7 @@ for (const dialect of ['sqlite', 'postgres'] as const) {
         env: { APP_ENV: 'test', ...database.env },
         timeoutMs: 45_000,
         envFile: false,      // --no-env-file
-        preload: [],         // replace bunfig preloads (none)
+        preload: [],         // replace bunfig preloads (none); or bunfig: 'tests/isolated/bunfig.toml'
       })
       assertIsolatedOk(result, 'checkout flow OK') // throws with stdout + stderr otherwise
     })
@@ -199,10 +200,14 @@ for (const dialect of ['sqlite', 'postgres'] as const) {
 }
 ```
 
-- `runIsolated(file, { env, timeoutMs = 60_000, args, cwd, mode, preload, envFile, inheritEnv, stdin })`
+- `runIsolated(file, { env, timeoutMs = 60_000, args, cwd, mode, preload, bunfig, envFile, inheritEnv, stdin })`
   resolves `{ code, signal, stdout, stderr, timedOut, durationMs, command }`. `mode: 'auto'` runs
   `*.test.*` / `*.spec.*` with `bun test`, anything else as a script; `env` values of `undefined`
   remove a variable. The watchdog sends SIGTERM at the timeout and SIGKILL 2 s later.
+- `bunfig: 'path/bunfig.toml'` runs the child with that config (`--config=`), resolved against
+  `cwd`; it must exist. `preload` instead generates a config holding only those preloads. They are
+  exclusive (a TypeError): list the preloads in your bunfig. Bun resolves a bunfig's relative
+  `preload` paths against the child's cwd, not the bunfig's directory.
 - `withDisposableDatabase(dialect, fn, { url?, prefix? })`: SQLite is a file in a fresh temp
   directory; Postgres is `CREATE DATABASE` on `url` or `STACKS_TEST_POSTGRES_URL`, dropped with
   `DROP DATABASE ... WITH (FORCE)` after `fn`, even when it throws (the test's error wins over a
@@ -236,18 +241,41 @@ expect(pageAuditClean(report)).toBe(true) // no duplicate /api/ requests, failed
 ```
 
 - `Cdp`: `send`, `evaluate`, `on(method, fn)` (any number of listeners per method; returns an
-  unsubscribe), `off`, `once(method, match?, timeoutMs?)`, `errors`, `inFlight` (event streams
-  leave it when their response starts, so a page with live updates can still settle), `closed`
-  (every pending command fails at once when Chrome goes away).
+  unsubscribe), `off`, `once(method, match?, timeoutMs?)`, `intercept(patterns, handler)`,
+  `errors`, `inFlight: Map<requestId, 'METHOD url'>` (event streams leave it when their response
+  starts, so a page with live updates can still settle), `closed` (every pending command fails at
+  once when Chrome goes away).
 - `launch(options)` enables Page/Runtime/Network/Log, sets a 1440x1000 viewport, answers stx's
   live-reload stream (`*/_stx/hmr*`) with a day-long retry so a save mid-run cannot reload the
   page, accepts JavaScript dialogs and records them in `errors`, removes "HeadlessChrome" from the
   user agent, and passes `--use-mock-keychain`. `profile` keeps one profile across relaunches.
+- **Pausing requests next to live reload.** Chrome keeps one `Fetch.enable` pattern set per
+  session (a second call replaces it, `Fetch.disable` drops all) and sends every paused request to
+  every listener, so the session layers them. `await cdp.intercept([{ urlPattern: '*/api/slow*' }],
+  (paused, cdp) => ...)` hands a handler only what its own patterns match and resolves with an
+  async remover; `quietLiveReload(cdp, patterns?)` is one (what `launch()` runs). Your own
+  `cdp.send('Fetch.enable' | 'Fetch.disable')` sets one more layer and the session enables the
+  union, so a journey that holds its own request needs no `quietLiveReload: false`.
+  `on('Fetch.requestPaused')` listeners see the requests your patterns match, not the live-reload
+  stream. The first answer wins: a second `continueRequest`/`fulfillRequest`/`failRequest` for one
+  pause resolves without reaching Chrome. A pause nobody could answer is continued; one your own
+  pattern holds with no listener stays held (a hanging request on purpose).
+  `matchesUrlPattern(pattern, url)` and `pausedRequestMatches(pattern, paused)` are Chrome's
+  matching rules (`*`, `?`, `\` escape; stage and resource type).
 - `settle(cdp, { quietMs, timeoutMs })` resolves false (not throws) when a page never goes quiet.
-- `auditPage(url, { cdp?, launch?, viewport?, isApiRequest?, beforeNavigate?, quietMs, timeoutMs })`
-  returns `{ apiRequests, duplicates, failed, errors, settled, durationMs }` and never throws for a
-  page problem. `beforeNavigate` is where to seed a token (`Page.addScriptToEvaluateOnNewDocument`).
-  `formatPageAudit(report)` prints one line.
+- `auditPage(url, { cdp?, launch?, viewport?, isApiRequest?, beforeNavigate?, pageLoads?, quietMs, timeoutMs })`
+  returns `{ url, finalUrl, apiRequests, duplicates, loads, failed, errors, settled, durationMs }`
+  and never throws for a page problem. `beforeNavigate` is where to seed a token
+  (`Page.addScriptToEvaluateOnNewDocument`). `formatPageAudit(report)` prints one line, with
+  `/today -> /home` when the page landed elsewhere.
+- Duplicates are counted **per page load**: a page that sends you on (`/today` replacing itself with
+  `/home`) is two loads, so `/api/me` once in each is not a duplicate. A load starts with each new
+  main-frame document after the first and each same-document (history API) navigation to a
+  different path; a query or hash change stays in the load. `loads` lists them
+  (`{ url, apiRequests, duplicates }`), `duplicates` is the highest count any one load reached,
+  `finalUrl` is `location.href` once settled. `pageLoads: 'visit'` counts the whole visit as one
+  load (the old behaviour). `splitPageLoads(url, events, mode)` and `loadDuplicates(loads)` are the
+  pure logic. `finalUrl` and `loads` are optional on the type, so hand-built reports still compile.
 - **macOS: the installed Chrome quits about 30 s in.** GoogleUpdater SIGTERMs every process with
   Chrome's bundle id while an update is pending; to a test that looks like a hung page. When
   `CHROME_PATH` is not set, `launch()` runs `prepareMacChrome()`: a `cp -cR` clone in the temp

package/app/Actions/Dashboard/Models/GetModels.ts

@@ -3,6 +3,7 @@ import { Glob } from 'bun'
 import { Action } from '@stacksjs/actions/runtime'
 import { path } from '@stacksjs/path'
 import { countRows } from '../../../../resources/functions/dashboard/data'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalError } from '../dashboard-response'
 
 export default new Action({
@@ -16,23 +17,27 @@ export default new Action({
       const scanOptions = { cwd: path.userModelsPath(), onlyFiles: true }
       const displayModels: Model[] = []
 
-    for await (const file of glob.scan(scanOptions)) {
-      const model = (await import(path.userModelsPath(file))).default as Model
-      if (model.dashboard?.highlight !== undefined && model.dashboard?.highlight !== false)
-        displayModels.push(model)
-    }
-
-    if (!displayModels.length) {
-      // If no models should be highlighted, we can just return up to 8 models in alphabetical order
       for await (const file of glob.scan(scanOptions)) {
-        const model = (await import(path.userModelsPath(file))).default as Model
-        displayModels.push(model)
+        const candidate = (await import(path.userModelsPath(file))).default as Model
+        const model = await resolveDashboardModel(candidate.name || '', candidate)
+        if (!model) continue
+        if (model.dashboard?.highlight !== undefined && model.dashboard?.highlight !== false)
+          displayModels.push(model)
+      }
+
+      if (!displayModels.length) {
+        // If no models should be highlighted, return up to 8 accessible models.
+        for await (const file of glob.scan(scanOptions)) {
+          const candidate = (await import(path.userModelsPath(file))).default as Model
+          const model = await resolveDashboardModel(candidate.name || '', candidate)
+          if (!model) continue
+          displayModels.push(model)
+        }
       }
-    }
 
-    if (displayModels.length > 8)
-      displayModels.length = 8
-    displayModels.sort((a, b) => (a.name || '').localeCompare(b.name || ''))
+      if (displayModels.length > 8)
+        displayModels.length = 8
+      displayModels.sort((a, b) => (a.name || '').localeCompare(b.name || ''))
 
       return await Promise.all(displayModels.map(async model => ({
         model: model.name,

package/app/Actions/Dashboard/Models/GetSubscriberCount.ts

@@ -1,5 +1,6 @@
 import { Action } from '@stacksjs/actions/runtime'
-import { Subscriber } from '@stacksjs/orm'
+import { response } from '@stacksjs/router'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalError } from '../dashboard-response'
 
 export default new Action({
@@ -10,7 +11,9 @@ export default new Action({
 
   async handle() {
     try {
-      return await Subscriber.count()
+      const Model = await resolveDashboardModel('Subscriber')
+      if (!Model) return response.json({ message: 'Model not found.' }, 404)
+      return await Model.count()
     }
     catch (error) {
       return dashboardOperationalError(error, 'Subscriber total could not be loaded.', 'GetSubscriberCount')

package/app/Actions/Dashboard/Models/GetUserCount.ts

@@ -1,5 +1,6 @@
 import { Action } from '@stacksjs/actions/runtime'
-import { User } from '@stacksjs/orm'
+import { response } from '@stacksjs/router'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalError } from '../dashboard-response'
 
 export default new Action({
@@ -10,7 +11,9 @@ export default new Action({
 
   async handle() {
     try {
-      return await User.count()
+      const Model = await resolveDashboardModel('User')
+      if (!Model) return response.json({ message: 'Model not found.' }, 404)
+      return await Model.count()
     }
     catch (error) {
       return dashboardOperationalError(error, 'User total could not be loaded.', 'GetUserCount')

package/app/Actions/Dashboard/Models/ModelShowAction.ts

@@ -1,7 +1,8 @@
 import type { RequestInstance } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions/runtime'
 import { response as routerResponse } from '@stacksjs/router'
-import { loadModelIfExists, safeGet } from '../../../../resources/functions/dashboard/data'
+import { safeGet } from '../../../../resources/functions/dashboard/data'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalError } from '../dashboard-response'
 import { isValidModelSlug, type ModelCreateField, type ModelWriteCapabilities, modelCreateFields, modelSchemaColumns, modelWritableColumns, modelWriteCapabilities, slugToPascal } from './model-write'
 
@@ -159,15 +160,6 @@ export function parseFilters(raw: string | null): Record<string, string> {
   return out
 }
 
-function resolveOrmModel(modelName: string): any {
-  const injected = (globalThis as Record<string, any>)[modelName]
-  // The ORM injects Proxies that answer `undefined` for every property
-  // until their deferred load lands, so probe for a real query method
-  // rather than trusting the name to be bound.
-  if (injected && typeof injected.where === 'function') return injected
-  return null
-}
-
 export default new Action({
   name: 'Dashboard Model Show',
   description: 'Queries a single model by URL slug with paging, sorting, search and column filters.',
@@ -221,7 +213,7 @@ export default new Action({
 
     let Model: any
     try {
-      Model = resolveOrmModel(modelName) ?? await loadModelIfExists(modelName)
+      Model = await resolveDashboardModel(modelName)
     }
     catch (error) {
       return dashboardOperationalError(error, `${modelName} could not be loaded.`, 'ModelShowAction.resolve')

package/app/Actions/Dashboard/Models/ModelsIndexAction.ts

@@ -4,6 +4,7 @@ import { join } from 'node:path'
 import process from 'node:process'
 import { countRows } from '../../../../resources/functions/dashboard/data'
 import { dashboardOperationalError, dashboardOperationalIssue } from '../dashboard-response'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { modelApiConfiguration } from './model-api'
 
 /**
@@ -127,7 +128,7 @@ export default new Action({
     let userland: Array<Omit<DiscoveredModel, 'source'>>
     let defaults: Array<Omit<DiscoveredModel, 'source'>>
     try {
-      userland = walkModels(userlandDir, false)
+      userland = walkModels(userlandDir, true)
       defaults = walkModels(defaultsDir, true)
     }
     catch (error) {
@@ -144,11 +145,12 @@ export default new Action({
       }
     }
 
-    const enriched = await Promise.all(merged.map(async (m): Promise<ModelRow> => {
+    const candidates = await Promise.all(merged.map(async (m): Promise<ModelRow | null> => {
       let Model: any
       try {
         const module = await import(m.file)
-        Model = module.default ?? module
+        Model = await resolveDashboardModel(m.name, module.default ?? module)
+        if (!Model) return null
       }
       catch (error) {
         return unavailableModelRow(
@@ -190,6 +192,7 @@ export default new Action({
       }
     }))
 
+    const enriched = candidates.filter((model): model is ModelRow => model !== null)
     enriched.sort((a, b) => a.name.localeCompare(b.name))
 
     const totalModels = enriched.length

package/app/Actions/Dashboard/Models/model-write.ts

@@ -6,7 +6,7 @@
  * casts and no observers; writing to it from a generic admin screen would
  * bypass every guarantee the ORM makes. Those rows stay read-only.
  */
-import { loadModelIfExists } from '../../../../resources/functions/dashboard/data'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalIssue } from '../dashboard-response'
 import { modelApiConfiguration } from './model-api'
 
@@ -301,10 +301,9 @@ export async function resolveWritableModel(slug: string, operation?: ModelWriteO
     return { error: 'Model slug must be lowercase kebab-case.', status: 400 }
 
   const modelName = slugToPascal(slug)
-  const injected = (globalThis as Record<string, any>)[modelName]
   let Model: any
   try {
-    Model = (injected && typeof injected.where === 'function') ? injected : await loadModelIfExists(modelName)
+    Model = await resolveDashboardModel(modelName)
   }
   catch (error) {
     return {

package/app/Actions/Dashboard/Search/GlobalSearchAction.ts

@@ -4,6 +4,7 @@ import { env } from '@stacksjs/env'
 import { readdirSync } from 'node:fs'
 import { basename, extname, join } from 'node:path'
 import process from 'node:process'
+import { resolveDashboardModel } from '../../../../resources/functions/dashboard/model-access'
 import { dashboardOperationalError } from '../dashboard-response'
 
 interface SearchableModel {
@@ -126,7 +127,8 @@ async function loadSearchableModels(): Promise<SearchableModel[]> {
   for (const [fallbackName, file] of merged) {
     try {
       const module = await import(file)
-      const definition = module.default ?? module
+      const definition = await resolveDashboardModel(fallbackName, module.default ?? module)
+      if (!definition) continue
       const name = String(definition.name || fallbackName)
       const search = definition.traits?.useSearch
       if (!search || typeof search !== 'object' || !Array.isArray(search.searchable)) continue
@@ -197,13 +199,15 @@ export default new Action({
     if (!q) return { results: {} }
 
     try {
+      const models = await catalog()
+      if (models.length === 0) return { results: {}, unavailable: [] }
       const { Database } = await import('bun:sqlite')
       const db = new Database(env.DB_DATABASE_PATH || 'database/stacks.sqlite', { readonly: true })
       const results: Record<string, SearchResult[]> = {}
       const unavailable: SearchUnavailable[] = []
 
       try {
-        for (const model of await catalog()) {
+        for (const model of models) {
           if (Object.keys(results).length >= MAX_GROUPS) break
 
           const columns = db.query(`PRAGMA table_info(${model.table})`).all() as Array<{ name: string }>

package/functions/dashboard-form.test.ts

@@ -0,0 +1,41 @@
+import { describe, expect, it } from 'bun:test'
+import { formErrorMessages } from './dashboard-form'
+
+/**
+ * stacksjs/stacks#2918 — this was duplicated across fourteen dialogs. The
+ * cases below are the formatting those copies encoded; they are pinned here
+ * so the single definition cannot quietly change what a user reads.
+ */
+describe('formErrorMessages', () => {
+  it('turns a snake_case field into a sentence-case label', () => {
+    expect(formErrorMessages({ first_name: 'is required' })).toEqual(['First name: is required'])
+  })
+
+  it('splits camelCase, but not to the same result', () => {
+    // Pinning a wart, not endorsing it. The split inserts a space without
+    // lowering the second word, so `firstName` and `first_name` do not read
+    // alike. Changing that is a product call; this test exists so the change
+    // is deliberate when it happens.
+    expect(formErrorMessages({ firstName: 'is required' })).toEqual(['First Name: is required'])
+  })
+
+  it('splits every word, not just the first', () => {
+    expect(formErrorMessages({ shipping_zone_name: 'is taken' })).toEqual(['Shipping zone name: is taken'])
+    expect(formErrorMessages({ taxRateCode: 'is invalid' })).toEqual(['Tax Rate Code: is invalid'])
+  })
+
+  it('keeps one line per field, in the order given', () => {
+    expect(formErrorMessages({ name: 'is required', code: 'is taken' })).toEqual([
+      'Name: is required',
+      'Code: is taken',
+    ])
+  })
+
+  it('has nothing to say about an empty map', () => {
+    expect(formErrorMessages({})).toEqual([])
+  })
+
+  it('leaves an already-capitalised single word alone', () => {
+    expect(formErrorMessages({ Name: 'is required' })).toEqual(['Name: is required'])
+  })
+})

package/functions/dashboard-form.ts

@@ -0,0 +1,30 @@
+/**
+ * Form helpers shared by the dashboard's editor dialogs.
+ *
+ * `formErrorMessages` was copied verbatim into fourteen Commerce dialogs
+ * (stacksjs/stacks#2918). It is a pure function of a validation-error map with
+ * no reactive dependency and no markup, so a component was the wrong home for
+ * it: the label formatting it encodes had fourteen definitions, and a change
+ * to how a field name becomes a label had to be made in all of them or drift.
+ */
+
+/**
+ * Turn a map of field errors into lines a person can read.
+ *
+ * Behaviour is the fourteen copies' behaviour, unchanged, including one wart
+ * worth naming rather than silently fixing: the two spellings do not read
+ * alike. `first_name` becomes "First name", while `firstName` becomes
+ * "First Name", because the split inserts a space without lowering the second
+ * word. A server reporting snake_case and a client reporting camelCase
+ * therefore render differently for the same field.
+ *
+ * Left as-is here because extracting and changing at once makes a regression
+ * impossible to attribute. Fixing it is a one-line change in one place now,
+ * which is the point of the extraction.
+ */
+export function formErrorMessages(errors: Record<string, string>): string[] {
+  return Object.entries(errors).map(([field, message]) => {
+    const label = field.replace(/([a-z])([A-Z])/g, '$1 $2').replaceAll('_', ' ')
+    return `${label.charAt(0).toUpperCase()}${label.slice(1)}: ${message}`
+  })
+}