@stacksjs/defaults 0.75.233 → 0.75.236

package/ai/skills/stacks-dashboard/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: stacks-dashboard
-description: Use when building or customizing the Stacks admin dashboard, including dashboard pages, model management views, analytics widgets, commerce dashboards, content management, settings panels, deployment monitoring, job/queue management, or the 412 built-in dashboard components. Covers the dashboard system at storage/framework/defaults/.
+description: Use when building or customizing the Stacks admin dashboard, including dashboard pages, model management views, analytics widgets, commerce dashboards, content management, settings panels, deployment monitoring, job/queue management, or the 414 built-in dashboard components. Covers the dashboard system at storage/framework/defaults/.
 license: MIT
 compatibility: Bun >= 1.3.0, TypeScript
 allowed-tools: Read Edit Write Bash Grep Glob
@@ -8,7 +8,7 @@ allowed-tools: Read Edit Write Bash Grep Glob
 
 # Stacks Dashboard
 
-The Stacks admin dashboard provides a full-featured admin panel with 100+ route views, 412 components, and a multi-section layout.
+The Stacks admin dashboard provides a full-featured admin panel with 100+ route views, 414 components, and a multi-section layout.
 
 ## Key Paths
 - Dashboard components: `storage/framework/defaults/resources/components/Dashboard/`

package/ai/skills/stacks-database/SKILL.md

@@ -12,7 +12,7 @@ allowed-tools: Read Edit Write Bash Grep Glob
 - Database package: `storage/framework/core/database/src/`
 - Configuration: `config/database.ts`
 - QB config: `config/query-builder.ts`
-- Migrations: `database/migrations/` (237 migration files, `.sql` format)
+- Migrations: `database/migrations/` (239 migration files, `.sql` format)
 - QB state: `.qb/`
 - ORM: `storage/framework/orm/`
 

package/ai/skills/stacks-deploy/SKILL.md

@@ -53,8 +53,9 @@ a versioned `STACKS_DEPLOY_PREVIEW_JSON=` line for API and tool consumers.
 
 Automated production deployments on GitHub Actions and ReviewOS require a full provider
 commit SHA and branch ref. Before prerequisite setup, Buddy verifies the checkout against
-that SHA, fetches the branch from `origin` (FETCH_HEAD only; a shallow checkout receives
-just the newer commits) and requires the commit to be on it. Before shipping over SSH it
+that SHA and accepts an unchanged origin head directly. If the head moved, Buddy fetches
+the branch from `origin` (FETCH_HEAD only), completes shallow history and requires the
+commit to be on it. Unavailable or still-shallow history stops deployment. Before shipping over SSH it
 reads the release each site's `current` link serves and stops only when production
 already runs a commit that landed after this one, so a deploy never goes backwards. A
 verified commit newer than production deploys even when the head has moved on: requiring

package/ai/skills/stacks-migrations/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: stacks-migrations
-description: Use when working with database migrations in a Stacks application - creating migration files, running migrations, fresh migration (drop + recreate), seeding after migration, migration file naming conventions, or the 237 built-in migration files. For the database API itself (queries, connections, SQL helpers), see stacks-database.
+description: Use when working with database migrations in a Stacks application - creating migration files, running migrations, fresh migration (drop + recreate), seeding after migration, migration file naming conventions, or the 239 built-in migration files. For the database API itself (queries, connections, SQL helpers), see stacks-database.
 license: MIT
 compatibility: Bun >= 1.3.0, TypeScript, SQLite >= 3.47.2
 allowed-tools: Read Edit Write Bash Grep Glob
@@ -203,6 +203,6 @@ lossless widenings; reports everything destructive), then
 - Do not commit a second snapshot under `.qb/`; that indicates a missing `snapshotDir` configuration
 - If a generated SQLite migration rebuilds tables, test it against a copy of the current database and run `PRAGMA integrity_check` plus `PRAGMA foreign_key_check`
 - `--seed` flag after `migrate:fresh` seeds the database with factory data
-- 237 migration files exist by default for all framework models
+- 239 migration files exist by default for all framework models
 - SQLite >= 3.47.2 is required (system requirement)
 - For the database API (queries, connections), see the `stacks-database` skill

package/ai/skills/stacks-native/CATALOG.md

@@ -35,7 +35,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/composables` | [`stacks-composables`](../stacks-composables/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/composables/src/index.ts) | 18 |
 | `@stacksjs/config` | [`stacks-config`](../stacks-config/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/config/src/index.ts) | 16 |
 | `@stacksjs/cron` | [`stacks-cron`](../stacks-cron/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/cron/src/index.ts) | 4 |
-| `@stacksjs/database` | [`stacks-database`](../stacks-database/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts) | 124 |
+| `@stacksjs/database` | [`stacks-database`](../stacks-database/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts) | 125 |
 | `@stacksjs/datetime` | [`stacks-datetime`](../stacks-datetime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/index.ts) | 13 |
 | `@stacksjs/defaults` | [`stacks-build`](../stacks-build/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/defaults/package.json) | 1 |
 | `@stacksjs/deploy` | [`stacks-deploy`](../stacks-deploy/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/deploy/package.json) | 1 |
@@ -75,7 +75,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/realtime` | [`stacks-realtime`](../stacks-realtime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/realtime/src/index.ts) | 11 |
 | `@stacksjs/registry` | [`stacks-registry`](../stacks-registry/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/registry/src/index.ts) | 1 |
 | `@stacksjs/repl` | [`stacks-repl`](../stacks-repl/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/repl/src/index.ts) | 2 |
-| `@stacksjs/router` | [`stacks-router`](../stacks-router/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts) | 90 |
+| `@stacksjs/router` | [`stacks-router`](../stacks-router/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts) | 91 |
 | `@stacksjs/scheduler` | [`stacks-scheduler`](../stacks-scheduler/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/index.ts) | 13 |
 | `@stacksjs/search-engine` | [`stacks-search-engine`](../stacks-search-engine/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/search-engine/src/index.ts) | 10 |
 | `@stacksjs/security` | [`stacks-security`](../stacks-security/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/security/src/index.ts) | 11 |
@@ -88,7 +88,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/socials` | [`stacks-socials`](../stacks-socials/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/socials/src/index.ts) | 17 |
 | `@stacksjs/storage` | [`stacks-storage`](../stacks-storage/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/storage/src/index.ts) | 42 |
 | `@stacksjs/strings` | [`stacks-strings`](../stacks-strings/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/strings/src/index.ts) | 7 |
-| `@stacksjs/testing` | [`stacks-testing`](../stacks-testing/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/index.ts) | 15 |
+| `@stacksjs/testing` | [`stacks-testing`](../stacks-testing/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/index.ts) | 16 |
 | `@stacksjs/tinker` | [`stacks-repl`](../stacks-repl/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/tinker/src/index.ts) | 1 |
 | `@stacksjs/tunnel` | [`stacks-tunnel`](../stacks-tunnel/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/tunnel/src/index.ts) | 1 |
 | `@stacksjs/types` | [`stacks-types`](../stacks-types/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/types/src/index.ts) | 2 |
@@ -351,7 +351,7 @@ Declared runtime exports: `BUN_BROKEN_MYSQL_POOL_MESSAGE`, `BUN_BROKEN_POSTGRES_
 
 Local source modules: [src/affected-rows.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/affected-rows.ts), [src/auth-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/auth-tables.ts), [src/broken-pool.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/broken-pool.ts), [src/custom/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/custom/index.ts), [src/database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/database.ts), [src/datetime-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/datetime-columns.ts), [src/ddl-constraints.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ddl-constraints.ts), [src/defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/defaults.ts), [src/dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/dialect.ts), [src/driver-config.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/driver-config.ts), [src/drivers/dynamodb.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/dynamodb.ts), [src/drivers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/index.ts), [src/ensure-database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ensure-database.ts), [src/erd.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/erd.ts), [src/fk-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/fk-audit.ts), [src/framework-renames.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/framework-renames.ts), [src/hand-written-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/hand-written-migrations.ts), [src/ignored-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ignored-migrations.ts), [src/index-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index-shape.ts), [src/managed-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/managed-columns.ts), [src/migration-dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-dialect.ts), [src/migration-ledger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-ledger.ts), [src/migration-names.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-names.ts), [src/migration-path.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-path.ts), [src/migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migrations.ts), [src/model-sources.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/model-sources.ts), [src/notification-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/notification-tables.ts), [src/package-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-migrations.ts), [src/package-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-models.ts), [src/query-logger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/query-logger.ts), [src/rbac-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/rbac-tables.ts), [src/relation-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/relation-columns.ts), [src/replicas.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/replicas.ts), [src/row-lock.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/row-lock.ts), [src/safe-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/safe-migrations.ts), [src/schema-align.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-align.ts), [src/schema-drift.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-drift.ts), [src/seeder.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/seeder.ts), [src/shadowed-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/shadowed-models.ts), [src/sql-helpers.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/sql-helpers.ts), [src/trait-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/trait-tables.ts), [src/transaction-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/transaction-context.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/types.ts), [src/unique-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/unique-audit.ts), [src/utc-defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utc-defaults.ts), [src/utils.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utils.ts), [src/uuid-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/uuid-columns.ts), [src/vschema.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/vschema.ts).
 
-Evidence directory: [124 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [125 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/datetime
 
@@ -719,11 +719,11 @@ Evidence directory: [2 retained tests](https://github.com/stacksjs/stacks/blob/m
 
 Guidance: [`stacks-router`](../stacks-router/SKILL.md). Source: [storage/framework/core/router/src/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts).
 
-Declared runtime exports: `DASHBOARD_ROUTE_GROUPS`, `DEFAULT_ROUTE_BUNDLE_FEATURES`, `DEFAULT_ROUTE_REGISTRY`, `DatabaseSessionStore`, `EncryptedSessionStore`, `FileSessionStore`, `JSON_CONTENT_TYPE`, `MemorySessionStore`, `Middleware`, `PathParamError`, `RedisSessionStore`, `RequestBodyError`, `appRouteRegistry`, `assertRouteMiddlewareResolvable`, `bundleMounts`, `cacheRedisConnection`, `cacheRequestQuery`, `checkApplicationHealth`, `clearCsrfModuleCache`, `clearCurrentRequest`, `clearMiddlewareCache`, `clearRateLimit`, `clearRouteModelBindings`, `clearTrackedQueries`, `clientAddress`, `configureViewDirectories`, `createErrorResponse`, `createMiddlewareErrorResponse`, `createNotFoundResponse`, `createSessionStore`, `createStacksRouter`, `createStacksSessionStore`, `createTypedRouter`, `createValidationErrorResponse`, `dashboardGroupMiddleware`, `defineMiddleware`, `defineRouteModelBinding`, `describeUnknownDashboardGroups`, `disableViewRouting`, `enhanceRequest`, `fallbackStorage`, `findUnresolvableRouteMiddleware`, `getCurrentRequest`, `getQueryShapeCounts`, `getTraceId`, `installMiddlewareHotReload`, `isApiRequest`, `isRouterAction`, `listNamedRoutes`, `listRegisteredRoutes`, `listRootMountedAppRoutes`, `loadMiddlewareHandlers`, `loadRoutes`, `mountedDefaultRouteBundles`, `rateLimit`, `rateLimitScale`, `rateLimitStatus`, `readJsonBody`, `readTextBody`, `request`, `resetBootHooks`, `resetRateLimiters`, `resetSharedRateLimitStorage`, `resolveDashboardAccess`, `resolveRouteModel`, `route`, `routeModelBindings`, `routeParams`, `runBootHooks`, `runHealthProbes`, `runWithRequest`, `safePathParam`, `sanitizePathParam`, `scaledLimit`, `serve`, `serverResponse`, `setCurrentRequest`, `setRouteModelFallback`, `sharedRateLimitStorage`, `signUrl`, `signedUrl`, `stream`, `trackQuery`, `trustedProxies`, `url`, `useRateLimitStorage`, `verifySignedUrl`, `verifySignedUrlMiddleware`, `warnOnMultipleRouterInstances`, `withTraceId`, `wrapAction`.
+Declared runtime exports: `DASHBOARD_ROUTE_GROUPS`, `DEFAULT_ROUTE_BUNDLE_FEATURES`, `DEFAULT_ROUTE_REGISTRY`, `DatabaseSessionStore`, `EncryptedSessionStore`, `FileSessionStore`, `JSON_CONTENT_TYPE`, `MemorySessionStore`, `Middleware`, `PathParamError`, `RedisSessionStore`, `RequestBodyError`, `appRouteRegistry`, `assertRouteMiddlewareResolvable`, `bundleMounts`, `cacheRedisConnection`, `cacheRequestQuery`, `checkApplicationHealth`, `clearCsrfModuleCache`, `clearCurrentRequest`, `clearMiddlewareCache`, `clearRateLimit`, `clearRouteModelBindings`, `clearTrackedQueries`, `clientAddress`, `configureViewDirectories`, `createErrorResponse`, `createMiddlewareErrorResponse`, `createNotFoundResponse`, `createSessionStore`, `createStacksRouter`, `createStacksSessionStore`, `createTypedRouter`, `createValidationErrorResponse`, `dashboardGroupMiddleware`, `defineMiddleware`, `defineRouteModelBinding`, `describeUnknownDashboardGroups`, `disableViewRouting`, `enhanceRequest`, `fallbackStorage`, `findUnresolvableRouteMiddleware`, `getCurrentRequest`, `getQueryShapeCounts`, `getTraceId`, `installMiddlewareHotReload`, `isApiRequest`, `isRouterAction`, `listNamedRoutes`, `listRegisteredRoutes`, `listRootMountedAppRoutes`, `loadMiddlewareHandlers`, `loadRoutes`, `mountedDefaultRouteBundles`, `parseJsonText`, `rateLimit`, `rateLimitScale`, `rateLimitStatus`, `readJsonBody`, `readTextBody`, `request`, `resetBootHooks`, `resetRateLimiters`, `resetSharedRateLimitStorage`, `resolveDashboardAccess`, `resolveRouteModel`, `route`, `routeModelBindings`, `routeParams`, `runBootHooks`, `runHealthProbes`, `runWithRequest`, `safePathParam`, `sanitizePathParam`, `scaledLimit`, `serve`, `serverResponse`, `setCurrentRequest`, `setRouteModelFallback`, `sharedRateLimitStorage`, `signUrl`, `signedUrl`, `stream`, `trackQuery`, `trustedProxies`, `url`, `useRateLimitStorage`, `verifySignedUrl`, `verifySignedUrlMiddleware`, `warnOnMultipleRouterInstances`, `withTraceId`, `wrapAction`.
 
-Local source modules: [src/api-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/api-shape.ts), [src/body.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/body.ts), [src/dashboard-access.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/dashboard-access.ts), [src/encrypted-session-store.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/encrypted-session-store.ts), [src/error-handler.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/error-handler.ts), [src/health.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/health.ts), [src/middleware.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/middleware.ts), [src/path-sanitize.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/path-sanitize.ts), [src/rate-limit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/rate-limit.ts), [src/request-augmentation.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-augmentation.ts), [src/request-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-context.ts), [src/route-loader.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-loader.ts), [src/route-model-binding.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-model-binding.ts), [src/security-settings.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/security-settings.ts), [src/session-factory.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/session-factory.ts), [src/signed-url.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/signed-url.ts), [src/stacks-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/stacks-router.ts), [src/typed-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/typed-router.ts).
+Local source modules: [src/api-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/api-shape.ts), [src/body.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/body.ts), [src/dashboard-access.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/dashboard-access.ts), [src/encrypted-session-store.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/encrypted-session-store.ts), [src/error-handler.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/error-handler.ts), [src/health.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/health.ts), [src/json.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/json.ts), [src/middleware.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/middleware.ts), [src/path-sanitize.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/path-sanitize.ts), [src/rate-limit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/rate-limit.ts), [src/request-augmentation.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-augmentation.ts), [src/request-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-context.ts), [src/route-loader.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-loader.ts), [src/route-model-binding.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-model-binding.ts), [src/security-settings.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/security-settings.ts), [src/session-factory.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/session-factory.ts), [src/signed-url.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/signed-url.ts), [src/stacks-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/stacks-router.ts), [src/typed-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/typed-router.ts).
 
-Evidence directory: [90 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [91 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/scheduler
 
@@ -851,7 +851,7 @@ Read the entrypoint and package export map for re-exported or type-only surfaces
 
 Local source modules: [src/console.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/console.ts), [src/disposable-database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/disposable-database.ts), [src/events.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/events.ts), [src/feature.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/feature.ts), [src/isolated.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/isolated.ts), [src/mail.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/mail.ts), [src/time.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/src/time.ts).
 
-Evidence directory: [15 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [16 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/testing/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/tinker
 

package/ai/skills/stacks-realtime/SKILL.md

@@ -385,8 +385,10 @@ single-process HTTP transport; it does not initialize Redis or a cluster.
 
 `createBroadcastResponse({ channels, authorize, signal })` returns an SSE Response.
 Select channel names on the server. Authorization is mandatory and runs before
-subscription, before each event, and at every heartbeat. Pass the request's abort
-signal. Cancellation, failed authorization and slow consumers remove the hook.
+subscription, before each event, and at every heartbeat. The callback retains the
+subscriber's async context even when another request broadcasts. It must still
+resolve current credentials, grants and expiry on every call; context binding
+does not freeze authorization facts. Pass the request's abort signal. Cancellation, failed authorization and slow consumers remove the hook.
 Streams bound both queued events and pending authorization work (64 by default).
 
 STX's `useBroadcastStream({ request, endpoint, onMessage, onConnected })` makes

package/app/Actions/Monitoring/error-provider.ts

@@ -20,16 +20,78 @@ import { HQ_READ_UNAVAILABLE, readThroughProvider, resolveDashboardDriver } from
  */
 
 /**
- * The record shapes the error store deals in.
+ * The shapes the Errors section renders.
  *
- * Derived from the store's own functions rather than imported, because
- * `@stacksjs/commerce` exposes its errors module as a value and keeps these
- * interfaces inside it. Deriving them means the provider contract follows the
- * store automatically, and it keeps this refactor out of the commerce package.
+ * These used to be derived from the local store:
+ *
+ *     export type DashboardErrorRecord = NonNullable<Awaited<ReturnType<typeof errors.fetchById>>>
+ *
+ * which made the contract whatever `@stacksjs/commerce`'s ORM row happened to
+ * be. That is fine while the only provider IS the commerce store, and wrong
+ * the moment a second one exists: a remote provider has to be told what to
+ * serve, and "whatever a shopping package's table looks like this week" is
+ * not something anyone can be told (stacksjs/stacks#2921).
+ *
+ * Declared here instead, so the section's contract is a decision rather than
+ * a consequence. Field names are deliberately the ones already on the wire -
+ * these actions serialize straight to JSON and the dashboard reads
+ * `first_seen`, `last_seen` and `last_24h` today, so renaming them to
+ * camelCase would be a breaking change to a shipped response rather than the
+ * decoupling this is for.
  */
-export type DashboardErrorRecord = NonNullable<Awaited<ReturnType<typeof errors.fetchById>>>
-export type DashboardGroupedError = Awaited<ReturnType<typeof errors.fetchGrouped>>[number]
-export type DashboardErrorStats = Awaited<ReturnType<typeof errors.fetchStats>>
+
+/** Where a grouped error sits in the triage workflow. */
+export type DashboardErrorStatus = 'unresolved' | 'resolved' | 'ignored'
+
+export interface DashboardErrorRecord {
+  /**
+   * Opaque. A number from the local store's autoincrement, a string from a
+   * hosted one - bughq's issue ids are varchar (stacksjs/stacks#2915).
+   * Compare with `String(a.id) === String(b.id)` rather than `===`.
+   */
+  id: string | number
+  type: string
+  message: string
+  stack: string | null
+  /**
+   * The HTTP status the error reported, and only that.
+   *
+   * It used to be overloaded: `resolveError` and `ignoreError` wrote 1 and 2
+   * into this column to mean resolved and ignored, which destroyed the status
+   * and meant a seeded error could never read as resolved. Split in
+   * stacksjs/stacks#2923; triage is `resolution` below.
+   */
+  status: number | null
+  /** Where this error sits in triage. */
+  resolution: DashboardErrorStatus
+  /** Free text. Nothing in the dashboard reads it; it is carried, not shown. */
+  additional_info: string | null
+  created_at: string
+  updated_at: string | null
+}
+
+export interface DashboardGroupedError {
+  /** Opaque, as on {@link DashboardErrorRecord}. */
+  id: string | number
+  type: string
+  message: string
+  stack: string | null
+  /** The triage state, unlike `status` on a single record. See above. */
+  status: DashboardErrorStatus
+  count: number
+  first_seen: string
+  last_seen: string
+  error_ids: number[]
+}
+
+export interface DashboardErrorStats {
+  total: number
+  unresolved: number
+  resolved: number
+  ignored: number
+  last_24h: number
+  trend: number
+}
 
 export interface DashboardErrorTimelinePoint {
   hour: string
@@ -41,7 +103,7 @@ export interface DashboardErrorsProvider {
   stats: () => Promise<DashboardErrorStats>
   timeline: () => Promise<DashboardErrorTimelinePoint[]>
   byGroup: (type: string, message: string) => Promise<DashboardErrorRecord[]>
-  byId: (id: number) => Promise<DashboardErrorRecord | undefined>
+  byId: (id: string | number) => Promise<DashboardErrorRecord | undefined>
 }
 
 /** Wraps a payload with the reason its section is empty. */
@@ -54,12 +116,67 @@ export type DashboardErrorsEnvelope<T> = { data: T } & Partial<DashboardProvider
  * adding one here would convert today's error response into a misleading empty
  * list, which is a behaviour change rather than the refactor this is meant to be.
  */
+const ERROR_STATUSES: readonly DashboardErrorStatus[] = ['unresolved', 'resolved', 'ignored']
+
+/**
+ * Narrow the store's `status` onto the three states the section renders.
+ *
+ * `fetchGrouped` types this as `string` while deriving it from exactly those
+ * three labels, so the widening is incidental. An unknown value reads as
+ * unresolved, which is the store's own default for a status it cannot
+ * interpret, and is the safe direction: an error wrongly shown as needing
+ * attention is noticed, one wrongly shown as handled is not.
+ */
+function toErrorStatus(value: string): DashboardErrorStatus {
+  return ERROR_STATUSES.includes(value as DashboardErrorStatus)
+    ? value as DashboardErrorStatus
+    : 'unresolved'
+}
+
+/**
+ * The commerce row, as the section's contract.
+ *
+ * Written out rather than passed through. Every field here is currently an
+ * identity, and saying so explicitly is the point: when the store's shape
+ * next moves, this file stops compiling instead of quietly changing what a
+ * remote provider is required to match.
+ */
+function toGroupedError(row: Awaited<ReturnType<typeof errors.fetchGrouped>>[number]): DashboardGroupedError {
+  return {
+    id: row.id,
+    type: row.type,
+    message: row.message,
+    stack: row.stack,
+    status: toErrorStatus(row.status),
+    count: row.count,
+    first_seen: row.first_seen,
+    last_seen: row.last_seen,
+    error_ids: row.error_ids,
+  }
+}
+
+/**
+ * The local store's id for a requested one, or undefined when it cannot have it.
+ *
+ * Its ids are an autoincrement, so a non-integer id is not one of its rows
+ * rather than a bad request, and the caller answers 404. Route params arrive
+ * as strings even when the id is a number, which is why a numeric string is
+ * accepted (stacksjs/stacks#2915).
+ */
+export function localErrorId(id: string | number): number | undefined {
+  const numeric = typeof id === 'number' ? id : Number.parseInt(String(id), 10)
+  return Number.isInteger(numeric) ? numeric : undefined
+}
+
 export const localErrorsProvider: DashboardErrorsProvider = {
-  grouped: () => errors.fetchGrouped(),
+  grouped: async () => (await errors.fetchGrouped()).map(toGroupedError),
   stats: () => errors.fetchStats(),
   timeline: () => errors.fetchTimeline(),
   byGroup: (type, message) => errors.fetchByGroup(type, message),
-  byId: id => errors.fetchById(id),
+  byId: async (id) => {
+    const numeric = localErrorId(id)
+    return numeric === undefined ? undefined : errors.fetchById(numeric)
+  },
 }
 
 /**
@@ -125,6 +242,6 @@ export function readErrorsByGroup(type: string, message: string): Promise<Dashbo
   return readErrors([], provider => provider.byGroup(type, message), Array.isArray)
 }
 
-export function readErrorById(id: number): Promise<DashboardErrorsEnvelope<DashboardErrorRecord | undefined>> {
+export function readErrorById(id: string | number): Promise<DashboardErrorsEnvelope<DashboardErrorRecord | undefined>> {
   return readErrors<DashboardErrorRecord | undefined>(undefined, provider => provider.byId(id), () => true)
 }

package/app/Models/Error.ts

@@ -52,6 +52,16 @@ export default defineModel({
       factory: faker => faker.system.filePath(),
     },
 
+    /**
+     * The HTTP status the error carried, and only that.
+     *
+     * It used to mean two things: the factory seeds an HTTP status while
+     * `resolveGroup` wrote 1 and `ignoreGroup` wrote 2 into the same column
+     * to mean resolved and ignored. So resolving an error destroyed its
+     * status, and a seeded error could never read as resolved because no
+     * factory row is ever 1 (stacksjs/stacks#2923). Triage now lives in
+     * `resolution`.
+     */
     status: {
       fillable: true,
       validation: {
@@ -63,6 +73,17 @@ export default defineModel({
       factory: faker => faker.number.int({ min: 400, max: 500 }),
     },
 
+    /** Where this error sits in triage. Separate from `status`, see above. */
+    resolution: {
+      required: true,
+      fillable: true,
+      default: 'unresolved',
+      validation: {
+        rule: schema.enum(['unresolved', 'resolved', 'ignored']),
+      },
+      factory: () => 'unresolved',
+    },
+
     additional_info: {
       fillable: true,
       validation: {

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.233",
+  "version": "0.75.236",
   "description": "Stacks, built into VS Code: stx templates, pickier linting and formatting, encrypted env files, the dev server preview and every buddy command. No other extensions required.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.233",
+  "version": "0.75.236",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -44,7 +44,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.35",
-    "@stacksjs/mobile": "0.75.233",
+    "@stacksjs/mobile": "0.75.236",
     "@stacksjs/sanitizer": "^0.2.534",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",

package/resources/components/Dashboard/Auth/AuthCard.stx

@@ -0,0 +1,29 @@
+<script client>
+/**
+ * The centred card the signed-out auth pages sit in.
+ *
+ * Login, Register, ForgotPassword and ResetPassword each carried this
+ * markup (stacksjs/stacks#2917): the same full-height centring, the same
+ * 24rem column, the same logo tile, and the same heading pair. They differ
+ * only in what goes below it, which is the slot.
+ *
+ * Four pages the user moves between in one flow is the worst place for a
+ * shell to drift, because the drift is visible as a jump between steps.
+ */
+const title = useReactiveProp('title', '')
+const subtitle = useReactiveProp('subtitle', '')
+</script>
+
+<div class="flex items-center justify-center px-4 py-12 min-h-screen">
+  <div class="max-w-sm w-full">
+    <div class="mb-8 text-center">
+      <div class="inline-flex items-center justify-center mb-4 h-12 w-12 bg-gradient-to-br from-blue-500 to-blue-600 rounded-xl shadow-blue-500/25 shadow-lg">
+        <span class="h-7 w-7 text-white i-hugeicons-cube"></span>
+      </div>
+      <h1 class="font-semibold text-2xl text-neutral-900 dark:text-white">{{ title() }}</h1>
+      <p class="mt-2 text-neutral-500 text-sm dark:text-neutral-400">{{ subtitle() }}</p>
+    </div>
+
+    <slot />
+  </div>
+</div>

package/resources/components/Dashboard/Auth/ForgotPassword.stx

@@ -19,91 +19,77 @@ function retry(): void {
   emit('retry')
 }
 </script>
-<div class="flex items-center justify-center px-4 py-12 min-h-screen">
-  <div class="max-w-sm w-full">
-    <!-- Logo/Brand -->
-    <div class="mb-8 text-center">
-      <div class="inline-flex items-center justify-center mb-4 h-12 w-12 bg-gradient-to-br from-blue-500 to-blue-600 rounded-xl shadow-blue-500/25 shadow-lg">
-        <span class="h-7 w-7 text-white i-hugeicons-cube"></span>
-      </div>
-      <h1 class="font-semibold text-2xl text-neutral-900 dark:text-white">
-        {{ title() }}
-      </h1>
-      <p class="mt-2 text-neutral-500 text-sm dark:text-neutral-400">
-        {{ subtitle() }}
-      </p>
-    </div>
+<AuthCard :title="title()" :subtitle="subtitle()">
 
-    <!-- Form Card -->
-    <div class="p-6 bg-white dark:bg-neutral-900 border border-neutral-200/60 rounded-2xl dark:border-neutral-800 shadow-black/5 shadow-xl dark:shadow-black/20">
-      <div :if="success()">
-        <!-- Success Message -->
-        <div class="py-4 text-center">
-          <div class="inline-flex items-center justify-center mb-4 h-12 w-12 bg-green-100 dark:bg-green-900/30 rounded-full">
-            <div class="h-6 w-6 text-green-600 dark:text-green-400 i-hugeicons-checkmark-circle-02"></div>
-          </div>
-          <h2 class="mb-2 font-medium text-lg text-neutral-900 dark:text-white">
-            Check your email
-          </h2>
-          <p class="mb-6 text-neutral-500 text-sm dark:text-neutral-400">
-            We've sent a password reset link to <strong class="text-neutral-700 dark:text-neutral-200">{{ email() }}</strong>
-          </p>
-          <p class="text-neutral-400 text-xs dark:text-neutral-500">
-            Didn't receive the email? Check your spam folder or
-            <Button
-              type="button"
-              variant="ghost"
-              size="xs"
-              @click="retry"
-            >
-              try again
-            </Button>
-          </p>
+  <!-- Form Card -->
+  <div class="p-6 bg-white dark:bg-neutral-900 border border-neutral-200/60 rounded-2xl dark:border-neutral-800 shadow-black/5 shadow-xl dark:shadow-black/20">
+    <div :if="success()">
+      <!-- Success Message -->
+      <div class="py-4 text-center">
+        <div class="inline-flex items-center justify-center mb-4 h-12 w-12 bg-green-100 dark:bg-green-900/30 rounded-full">
+          <div class="h-6 w-6 text-green-600 dark:text-green-400 i-hugeicons-checkmark-circle-02"></div>
         </div>
-      </div>
-      <div :if="!success()">
-        <!-- Error Message -->
-          <div :if="error()" role="alert" class="mb-4 p-3 bg-red-50 dark:bg-red-900/20 border border-red-200 rounded-lg dark:border-red-800">
-            <div class="flex gap-2 items-center">
-              <div class="h-4 w-4 text-red-600 dark:text-red-400 i-hugeicons-alert-circle"></div>
-              <p class="text-red-600 text-sm dark:text-red-400">{{ error() }}</p>
-            </div>
-          </div>
-        <form @submit.prevent="handleSubmit">
-          <!-- Email Field -->
-          <div class="mb-6">
-            <Input
-              type="email"
-              label="Email address"
-              placeholder="you@example.com"
-              v-model:value="email"
-              required
-              :disabled="isLoading()"
-            />
-          </div>
-
-          <!-- Submit Button -->
+        <h2 class="mb-2 font-medium text-lg text-neutral-900 dark:text-white">
+          Check your email
+        </h2>
+        <p class="mb-6 text-neutral-500 text-sm dark:text-neutral-400">
+          We've sent a password reset link to <strong class="text-neutral-700 dark:text-neutral-200">{{ email() }}</strong>
+        </p>
+        <p class="text-neutral-400 text-xs dark:text-neutral-500">
+          Didn't receive the email? Check your spam folder or
           <Button
-            type="submit"
-            variant="primary"
-            size="lg"
-            fullWidth
-            :loading="isLoading()"
-            :disabled="isLoading() || !email().trim()"
+            type="button"
+            variant="ghost"
+            size="xs"
+            @click="retry"
           >
-            <span :if="isLoading()">Sending...</span>
-            <span :if="!isLoading()">Send reset link</span>
+            try again
           </Button>
-        </form>
+        </p>
       </div>
     </div>
+    <div :if="!success()">
+      <!-- Error Message -->
+        <div :if="error()" role="alert" class="mb-4 p-3 bg-red-50 dark:bg-red-900/20 border border-red-200 rounded-lg dark:border-red-800">
+          <div class="flex gap-2 items-center">
+            <div class="h-4 w-4 text-red-600 dark:text-red-400 i-hugeicons-alert-circle"></div>
+            <p class="text-red-600 text-sm dark:text-red-400">{{ error() }}</p>
+          </div>
+        </div>
+      <form @submit.prevent="handleSubmit">
+        <!-- Email Field -->
+        <div class="mb-6">
+          <Input
+            type="email"
+            label="Email address"
+            placeholder="you@example.com"
+            v-model:value="email"
+            required
+            :disabled="isLoading()"
+          />
+        </div>
 
-    <!-- Back to Login -->
-    <p class="mt-6 text-center text-neutral-500 text-sm dark:text-neutral-400">
-      <a href="/login" class="inline-flex gap-1 items-center font-medium text-blue-600 dark:text-blue-400 hover:text-blue-500 dark:hover:text-blue-300">
-        <div class="h-4 w-4 i-hugeicons-arrow-left-01"></div>
-        Back to sign in
-      </a>
-    </p>
+        <!-- Submit Button -->
+        <Button
+          type="submit"
+          variant="primary"
+          size="lg"
+          fullWidth
+          :loading="isLoading()"
+          :disabled="isLoading() || !email().trim()"
+        >
+          <span :if="isLoading()">Sending...</span>
+          <span :if="!isLoading()">Send reset link</span>
+        </Button>
+      </form>
+    </div>
   </div>
-</div>
+
+  <!-- Back to Login -->
+  <p class="mt-6 text-center text-neutral-500 text-sm dark:text-neutral-400">
+    <a href="/login" class="inline-flex gap-1 items-center font-medium text-blue-600 dark:text-blue-400 hover:text-blue-500 dark:hover:text-blue-300">
+      <div class="h-4 w-4 i-hugeicons-arrow-left-01"></div>
+      Back to sign in
+    </a>
+  </p>
+</AuthCard>