@stacksjs/defaults 0.75.261 → 0.75.263

package/ai/skills/stacks-api/SKILL.md

@@ -800,10 +800,11 @@ Models with `traits.useApi` automatically get CRUD routes via ORM actions:
 | DELETE | `/api/{model}/{id}` | Generated destroy | 204 |
 
 Which `useApi` models get these routes is `security.api.models` in
-`config/security.ts` (`'all'` by default, `'own'`, `'none'`, or a list of model
-names that may include `'own'`), overridden by `STACKS_MODEL_APIS`. `'all'`
-includes the ~80 framework models, so an app that does not use commerce or
-CMS should set `'own'`. The OpenAPI schemas follow the same selection.
+`config/security.ts` (`'own'` by default, `'all'`, `'none'`, or a list of model
+names that may include `'own'`), overridden by `STACKS_MODEL_APIS`. The ~80
+framework models publish nothing by default (#2954); an app that uses one
+names it, `['own', 'Product']`, or sets `'all'`. The OpenAPI schemas follow
+the same selection.
 
 Generated store and update handlers accept declared `fillable` attributes and
 the foreign-key attributes derived from `belongsTo`. For example,

package/ai/skills/stacks-email/SKILL.md

@@ -47,7 +47,9 @@ so `MAIL_MAILER` must be one of `smtp`, `ses`, `sendgrid`, `mailgun`,
 ```typescript
 import { mail } from '@stacksjs/email'
 
-await mail.send({
+// Throws EmailDeliveryError when it was not delivered. The default choice:
+// a try/catch around it means what it looks like.
+await mail.sendOrFail({
   from: { name: 'App', address: 'noreply@app.com' },
   to: 'user@example.com',
   subject: 'Welcome',
@@ -55,19 +57,21 @@ await mail.send({
   text: 'Hello!'
 })
 
-// Use this when later state depends on successful provider delivery.
-await mail.sendOrFail({
-  to: 'user@example.com',
-  subject: 'Your invitation',
-  text: 'Open the invitation link.'
-})
+// send() does NOT throw on a failed delivery; it resolves with success: false.
+// For callers that aggregate outcomes, and they must check it.
+const result = await mail.send({ to: 'user@example.com', subject: 'Digest', text: '...' })
+if (!result.success)
+  failed.push(result.message)
 
 // Switch driver
 const sendgridMail = mail.use('sendgrid')
 await sendgridMail.send(message)
 ```
 
-`mail.send()` always returns an `EmailResult`. Provider rejection is represented
+`mail.send()` always returns an `EmailResult`, typed as `EmailSent | EmailFailed`,
+and `sendOrFail()` resolves with `EmailSent`. Never wrap `send()` in `try`/`catch`
+and count the absence of an exception as delivered: a newsletter was recorded as
+sent while its SMTP host was unreachable that way (#2930). Provider rejection is represented
 as `{ success: false, message, provider }`, which is useful for campaign jobs
 that aggregate individual outcomes. It may still throw for invalid framework
 configuration. `mail.sendOrFail()` returns the same successful result and throws

package/ai/skills/stacks-env/SKILL.md

@@ -224,7 +224,7 @@ const decrypted = decryptValue(encrypted, keypair.privateKey)
 
 ```bash
 buddy env:get APP_NAME                    # get single var
-buddy env:get --all --format json         # all vars as JSON
+buddy env:get --all --format json         # every var in the file as JSON (never the process env)
 buddy env:set APP_NAME "My App"           # set var
 buddy env:encrypt                          # encrypt .env file
 buddy env:decrypt                          # decrypt .env file

package/ai/skills/stacks-lint/SKILL.md

@@ -19,6 +19,15 @@ it does not wrap ESLint. ESLint-style disable comments are compatibility syntax.
 - `./buddy format`: write formatting; `./buddy format --check` checks without writing.
 - `./buddy lint --stx`: run the separate stx conformance checks from `config/lint.ts`.
 
+All four take paths and lint only what you name: `./buddy lint:fix app/Jobs/Foo.ts`
+fixes that file, `./buddy lint app/Jobs docs` covers those two directories, and
+naming none covers the project. Scope `lint:fix` this way whenever you are
+fixing something specific, because its project-wide run also applies rules you
+are not working on (class ordering across `resources/`, markdown in `docs/`),
+and those land in your diff. A path that matches nothing is an error rather
+than a silent fallback to the project, so a typo cannot widen the run.
+`--stx` grades the project against the config baselines and refuses paths.
+
 For direct CLI use, run `bunx --bun pickier .`, adding `--fix` for supported
 fixes. Re-run without `--fix` to confirm remaining findings. Only apply fixes
 that preserve the source behavior; investigate false positives at Pickier's source.

package/ai/skills/stacks-mail/SKILL.md

@@ -81,7 +81,7 @@ export async function sendSubscriptionConfirmation({ to, subscriberUuid }: Optio
     }
   })
 
-  await mail.send({
+  await mail.sendOrFail({
     from: { name: config.app.name, address: config.email.from.address },
     to,
     subject: 'Confirm your subscription',

package/ai/skills/stacks-migrations/SKILL.md

@@ -18,7 +18,9 @@ Schema change management via migration files.
 ## CLI Commands
 
 ```bash
-buddy migrate                       # run pending migrations
+buddy migrate                       # run pending migrations (and generate new ones from the models, in an interactive terminal only)
+buddy migrate --generate            # generate from the models even when not interactive
+buddy migrate --no-generate         # apply committed migrations only, even in a terminal
 buddy migrate --diff                # show SQL without running
 buddy migrate --auth                # include auth tables
 buddy migrate:fresh                 # drop ALL tables and re-migrate
@@ -26,12 +28,33 @@ buddy migrate:fresh --seed          # drop, migrate, then seed
 buddy make:migration <name>         # create new migration file
 buddy seed                          # seed database
 buddy generate:migrations           # generate migrations from model diffs
+buddy generate:migrations --dialect postgres  # into another dialect's corpus, no Postgres needed
+buddy generate:migrations --dialect all       # the connected dialect and every other corpus
 buddy migrate:regenerate <dialect>  # rebuild the whole corpus from the models
 buddy migrate:status                # corpus vs ledger vs live schema; lists hand-written files
 buddy migrate:align                 # plan repairs of a database that drifted from the models
 buddy migrate:align --apply         # rename legacy indexes, add missing indexes/FKs/columns, widen losslessly
 ```
 
+An app that develops on one dialect and deploys on another keeps a corpus per
+dialect (`database/migrations/<dialect>/`, each with its own snapshot). A plain
+`generate:migrations` moves only the connected dialect and then warns, naming
+any other corpus the models have left behind; `--dialect <name>` or `--dialect
+all` brings it up to date from the models and that dialect's snapshot, without a
+database of that dialect (#2949).
+
+`buddy migrate` never writes the committed migration files. What it adapts for
+the connected database (idempotent ALTERs on Postgres, statements SQLite cannot
+run, gated features) happens to a copy of the corpus made for that run, so a
+SQLite app's migrations stay SQLite after a migrate against Postgres (#2929).
+
+A non-interactive `buddy migrate` (CI, a deploy step) generates nothing unless
+given `--generate` (#2948). Generating there authored a migration nobody
+reviewed and applied it in the same run, and on a deploy box the file then
+vanished with the release directory. Generate locally, commit the files, and let
+the deploy apply them; add `--strict` in CI to fail when the models have drifted
+from the committed migrations.
+
 ## Creating a Schema Migration
 
 ```bash
@@ -62,6 +85,14 @@ schema and excludes framework demo tables. Set
 wants the merged registry; application models override matching framework names.
 Discovered package model roots also contribute their declared models.
 
+The framework's default routes follow the same exclusion. At boot, a default
+route whose framework action uses an excluded model is not registered when the
+database has no table for that model, and one warning names each such route
+(#2943). Before this, those routes answered 500. If the table exists (for
+example, the app created it before the exclusion), the route registers as usual.
+Publish the model (`buddy publish model <Name>`) to serve the route from the
+app's own schema.
+
 The generator diffs the resolved registry against the committed dialect snapshot.
 An application does not need an `app/Models/` directory for fallback framework
 model migrations to be discovered. Inspect the resolved scope with verbose output

package/ai/skills/stacks-models/SKILL.md

@@ -376,6 +376,26 @@ traits: {
 },
 ```
 
+A factory receives `faker`, the attributes generated above it, and a context
+whose `pick(model, column = 'id')` resolves to a value from a row that already
+exists. Use it for a column whose valid values another row decides, such as a
+polymorphic `subject_id`, which `belongsTo` cannot express because its foreign
+key would forbid most of the values. List every model a factory picks from in
+`useSeeder.after` so it seeds first:
+
+```ts
+traits: { useSeeder: { count: 30, after: ['Issue', 'PullRequest'] } },
+attributes: {
+  subjectType: { required: true, factory: faker => faker.helpers.arrayElement(['Issue', 'PullRequest']) },
+  subjectId: { required: true, factory: (faker, { subjectType }, { pick }) => pick(subjectType) },
+},
+```
+
+A pick that cannot be satisfied (no rows yet, or the model seeds later and is
+missing from `after`) fails that model with the fix in its message, and so does
+a factory that leaves a required column `null`. Neither invents a value
+(#2951).
+
 `buddy seed` walks every model carrying the trait and fills its table from the
 attribute factories. Model fixture data needs no separate seeder or registration.
 Idempotent application bootstrap work can live in `database/seeders` as a

package/ai/skills/stacks-native/CATALOG.md

@@ -11,7 +11,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | Package | Task guidance | Source entry | Retained tests |
 |---|---|---|---|
 | `@stacksjs/action-runner` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/action-runner/src/index.ts) | 1 |
-| `@stacksjs/actions` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/index.ts) | 82 |
+| `@stacksjs/actions` | [`stacks-actions`](../stacks-actions/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/index.ts) | 84 |
 | `@stacksjs/ai` | [`stacks-ai`](../stacks-ai/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/ai/src/index.ts) | 17 |
 | `@stacksjs/alias` | [`stacks-alias`](../stacks-alias/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/alias/src/index.ts) | 1 |
 | `@stacksjs/analytics` | [`stacks-analytics`](../stacks-analytics/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/analytics/src/index.ts) | 6 |
@@ -21,7 +21,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/auth` | [`stacks-auth`](../stacks-auth/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/auth/src/index.ts) | 119 |
 | `@stacksjs/browser` | [`stacks-browser`](../stacks-browser/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/browser/src/index.ts) | 8 |
 | `@stacksjs/browser-extension` | [`stacks-browser-extension`](../stacks-browser-extension/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/browser-extension/src/index.ts) | 7 |
-| `@stacksjs/buddy` | [`stacks-buddy`](../stacks-buddy/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/buddy/src/index.ts) | 159 |
+| `@stacksjs/buddy` | [`stacks-buddy`](../stacks-buddy/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/buddy/src/index.ts) | 161 |
 | `@stacksjs/build` | [`stacks-build`](../stacks-build/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/build/src/index.ts) | 3 |
 | `@stacksjs/cache` | [`stacks-cache`](../stacks-cache/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/cache/src/index.ts) | 14 |
 | `@stacksjs/calendar-api` | [`stacks-calendar`](../stacks-calendar/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/calendar-api/src/index.ts) | 2 |
@@ -35,7 +35,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/composables` | [`stacks-composables`](../stacks-composables/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/composables/src/index.ts) | 18 |
 | `@stacksjs/config` | [`stacks-config`](../stacks-config/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/config/src/index.ts) | 16 |
 | `@stacksjs/cron` | [`stacks-cron`](../stacks-cron/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/cron/src/index.ts) | 4 |
-| `@stacksjs/database` | [`stacks-database`](../stacks-database/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts) | 126 |
+| `@stacksjs/database` | [`stacks-database`](../stacks-database/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts) | 130 |
 | `@stacksjs/datetime` | [`stacks-datetime`](../stacks-datetime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/index.ts) | 13 |
 | `@stacksjs/defaults` | [`stacks-build`](../stacks-build/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/defaults/package.json) | 2 |
 | `@stacksjs/deploy` | [`stacks-deploy`](../stacks-deploy/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/deploy/package.json) | 1 |
@@ -65,21 +65,21 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/newsletter` | [`stacks-newsletter`](../stacks-newsletter/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/newsletter/src/index.ts) | 7 |
 | `@stacksjs/notifications` | [`stacks-notifications`](../stacks-notifications/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/notifications/src/index.ts) | 16 |
 | `@stacksjs/objects` | [`stacks-objects`](../stacks-objects/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/src/index.ts) | 4 |
-| `@stacksjs/orm` | [`stacks-orm`](../stacks-orm/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/index.ts) | 69 |
+| `@stacksjs/orm` | [`stacks-orm`](../stacks-orm/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/index.ts) | 71 |
 | `@stacksjs/pagination` | [`stacks-pagination`](../stacks-pagination/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/pagination/src/index.ts) | 0 |
 | `@stacksjs/path` | [`stacks-path`](../stacks-path/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/path/src/index.ts) | 13 |
 | `@stacksjs/payments` | [`stacks-payments`](../stacks-payments/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/payments/src/index.ts) | 28 |
 | `@stacksjs/push` | [`stacks-push`](../stacks-push/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/push/src/index.ts) | 6 |
 | `@stacksjs/query-builder` | [`stacks-query-builder`](../stacks-query-builder/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/query-builder/src/index.ts) | 6 |
-| `@stacksjs/queue` | [`stacks-queue`](../stacks-queue/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/index.ts) | 48 |
+| `@stacksjs/queue` | [`stacks-queue`](../stacks-queue/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/index.ts) | 49 |
 | `@stacksjs/realtime` | [`stacks-realtime`](../stacks-realtime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/realtime/src/index.ts) | 12 |
 | `@stacksjs/registry` | [`stacks-registry`](../stacks-registry/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/registry/src/index.ts) | 1 |
 | `@stacksjs/repl` | [`stacks-repl`](../stacks-repl/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/repl/src/index.ts) | 2 |
-| `@stacksjs/router` | [`stacks-router`](../stacks-router/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts) | 94 |
-| `@stacksjs/scheduler` | [`stacks-scheduler`](../stacks-scheduler/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/index.ts) | 13 |
+| `@stacksjs/router` | [`stacks-router`](../stacks-router/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts) | 96 |
+| `@stacksjs/scheduler` | [`stacks-scheduler`](../stacks-scheduler/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/index.ts) | 14 |
 | `@stacksjs/search-engine` | [`stacks-search-engine`](../stacks-search-engine/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/search-engine/src/index.ts) | 10 |
 | `@stacksjs/security` | [`stacks-security`](../stacks-security/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/security/src/index.ts) | 11 |
-| `@stacksjs/server` | [`stacks-server`](../stacks-server/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/index.ts) | 24 |
+| `@stacksjs/server` | [`stacks-server`](../stacks-server/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/index.ts) | 25 |
 | `@stacksjs/shell` | [`stacks-shell`](../stacks-shell/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/shell/src/index.ts) | 1 |
 | `@stacksjs/sites` | [`stacks-sites`](../stacks-sites/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/sites/src/index.ts) | 3 |
 | `@stacksjs/skills` | [`stacks-skills`](../stacks-skills/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/skills/src/index.ts) | 1 |
@@ -119,7 +119,7 @@ Declared runtime exports: `BlogAdminError`, `DEFAULT_IOS_DEPENDENCIES`, `DEFAULT
 
 Local source modules: [src/action.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/action.ts), [src/add.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/add.ts), [src/blog-admin.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/blog-admin.ts), [src/build/ios-toolchain.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/build/ios-toolchain.ts), [src/commit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/commit.ts), [src/dev/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/dev/index.ts), [src/discover-packages.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/discover-packages.ts), [src/generate/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/generate/index.ts), [src/github-release.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/github-release.ts), [src/helpers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/helpers/index.ts), [src/library/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/library/index.ts), [src/lint/lint.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/lint/lint.ts), [src/lint/stx-gate.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/lint/stx-gate.ts), [src/make-command.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-command.ts), [src/make-job.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-job.ts), [src/make-policy.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-policy.ts), [src/make-resource.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make-resource.ts), [src/make.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/make.ts), [src/publication-preflight.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/publication-preflight.ts), [src/release-evidence.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/release-evidence.ts), [src/scaffold-crud.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/scaffold-crud.ts), [src/setup/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/setup/index.ts), [src/stacks.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/stacks.ts), [src/stx-source.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/stx-source.ts), [src/upgrade/package-project.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/upgrade/package-project.ts), [src/upgrade/route-actions.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/src/upgrade/route-actions.ts).
 
-Evidence directory: [82 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [84 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/actions/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/ai
 
@@ -215,7 +215,7 @@ Read the entrypoint and package export map for re-exported or type-only surfaces
 
 Local source modules: [src/commands/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/buddy/src/commands/index.ts).
 
-Evidence directory: [159 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/buddy/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [161 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/buddy/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/build
 
@@ -347,11 +347,11 @@ Evidence directory: [4 retained tests](https://github.com/stacksjs/stacks/blob/m
 
 Guidance: [`stacks-database`](../stacks-database/SKILL.md). Source: [storage/framework/core/database/src/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts).
 
-Declared runtime exports: `BUN_BROKEN_MYSQL_POOL_MESSAGE`, `BUN_BROKEN_POSTGRES_POOL_MESSAGE`, `Database`, `EntityQueryBuilder`, `__flushAfterCommitNow`, `__pendingAfterCommitCount`, `addColumnSafely`, `auditForeignKeys`, `auditSchemaDrift`, `auditUniqueIndexes`, `backfillInBatches`, `buildKey`, `classifyDeclaredFKs`, `comparableIndexKey`, `createDatabase`, `createDynamo`, `createMysqlDatabase`, `createPostgresDatabase`, `createQueryBuilder`, `createSqliteDatabase`, `createTursoDatabase`, `describeIgnoreRule`, `detectDriver`, `driverDefaults`, `dynamo`, `enqueueAfterCommit`, `ensureNotificationForeignKeys`, `findFkOrphans`, `findIgnoredMigrations`, `fkKey`, `formatIgnoredMigrations`, `formatSchemaDrift`, `generateKeyPattern`, `getBrokenDatabasePools`, `getConfigFromEnv`, `getConnectionString`, `getDeclaredFKs`, `getDeclaredUniques`, `getLiveFKs`, `getLiveTables`, `getLiveUniqueIndexes`, `isBrokenBunPoolError`, `isInTransaction`, `logQuery`, `marshall`, `matchedRows`, `mergeWithDefaults`, `migrateNotificationTables`, `migrateRbacTables`, `mutationCount`, `parseKeyPattern`, `postgresIndexStatement`, `renameColumnSafely`, `runInTransactionScope`, `setConfig`, `setQueryTracker`, `trackIgnoredGeneratedMigrations`, `unmarshall`, `validateDriverConfig`.
+Declared runtime exports: `BUN_BROKEN_MYSQL_POOL_MESSAGE`, `BUN_BROKEN_POSTGRES_POOL_MESSAGE`, `Database`, `EntityQueryBuilder`, `__flushAfterCommitNow`, `__pendingAfterCommitCount`, `addColumnSafely`, `auditForeignKeys`, `auditSchemaDrift`, `auditUniqueIndexes`, `backfillInBatches`, `buildKey`, `classifyDeclaredFKs`, `comparableIndexKey`, `createDatabase`, `createDynamo`, `createMysqlDatabase`, `createPostgresDatabase`, `createQueryBuilder`, `createSqliteDatabase`, `createTursoDatabase`, `describeIgnoreRule`, `detectDriver`, `driverDefaults`, `dynamo`, `enqueueAfterCommit`, `ensureNotificationForeignKeys`, `findFkOrphans`, `findIgnoredMigrations`, `fkKey`, `formatIgnoredMigrations`, `formatSchemaDrift`, `frameworkRouteAdmission`, `generateKeyPattern`, `getBrokenDatabasePools`, `getConfigFromEnv`, `getConnectionString`, `getDeclaredFKs`, `getDeclaredUniques`, `getLiveFKs`, `getLiveTables`, `getLiveUniqueIndexes`, `isBrokenBunPoolError`, `isInTransaction`, `logQuery`, `marshall`, `matchedRows`, `mergeWithDefaults`, `migrateNotificationTables`, `migrateRbacTables`, `mutationCount`, `parseKeyPattern`, `postgresIndexStatement`, `renameColumnSafely`, `runInTransactionScope`, `setConfig`, `setQueryTracker`, `trackIgnoredGeneratedMigrations`, `unmarshall`, `validateDriverConfig`.
 
-Local source modules: [src/affected-rows.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/affected-rows.ts), [src/auth-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/auth-tables.ts), [src/broken-pool.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/broken-pool.ts), [src/custom/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/custom/index.ts), [src/database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/database.ts), [src/datetime-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/datetime-columns.ts), [src/ddl-constraints.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ddl-constraints.ts), [src/defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/defaults.ts), [src/dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/dialect.ts), [src/driver-config.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/driver-config.ts), [src/drivers/dynamodb.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/dynamodb.ts), [src/drivers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/index.ts), [src/ensure-database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ensure-database.ts), [src/erd.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/erd.ts), [src/fk-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/fk-audit.ts), [src/framework-renames.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/framework-renames.ts), [src/hand-written-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/hand-written-migrations.ts), [src/ignored-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ignored-migrations.ts), [src/index-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index-shape.ts), [src/managed-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/managed-columns.ts), [src/migration-dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-dialect.ts), [src/migration-ledger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-ledger.ts), [src/migration-names.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-names.ts), [src/migration-path.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-path.ts), [src/migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migrations.ts), [src/model-sources.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/model-sources.ts), [src/notification-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/notification-tables.ts), [src/package-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-migrations.ts), [src/package-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-models.ts), [src/query-logger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/query-logger.ts), [src/rbac-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/rbac-tables.ts), [src/relation-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/relation-columns.ts), [src/replicas.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/replicas.ts), [src/row-lock.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/row-lock.ts), [src/safe-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/safe-migrations.ts), [src/schema-align.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-align.ts), [src/schema-drift.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-drift.ts), [src/seeder.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/seeder.ts), [src/shadowed-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/shadowed-models.ts), [src/sql-helpers.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/sql-helpers.ts), [src/trait-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/trait-tables.ts), [src/transaction-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/transaction-context.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/types.ts), [src/unique-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/unique-audit.ts), [src/utc-defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utc-defaults.ts), [src/utils.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utils.ts), [src/uuid-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/uuid-columns.ts), [src/vschema.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/vschema.ts).
+Local source modules: [src/affected-rows.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/affected-rows.ts), [src/auth-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/auth-tables.ts), [src/broken-pool.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/broken-pool.ts), [src/custom/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/custom/index.ts), [src/database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/database.ts), [src/datetime-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/datetime-columns.ts), [src/ddl-constraints.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ddl-constraints.ts), [src/defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/defaults.ts), [src/dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/dialect.ts), [src/driver-config.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/driver-config.ts), [src/drivers/dynamodb.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/dynamodb.ts), [src/drivers/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/drivers/index.ts), [src/ensure-database.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ensure-database.ts), [src/erd.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/erd.ts), [src/fk-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/fk-audit.ts), [src/framework-renames.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/framework-renames.ts), [src/framework-route-admission.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/framework-route-admission.ts), [src/hand-written-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/hand-written-migrations.ts), [src/ignored-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/ignored-migrations.ts), [src/index-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index-shape.ts), [src/managed-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/managed-columns.ts), [src/migration-dialect.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-dialect.ts), [src/migration-ledger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-ledger.ts), [src/migration-names.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-names.ts), [src/migration-path.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migration-path.ts), [src/migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/migrations.ts), [src/model-sources.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/model-sources.ts), [src/notification-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/notification-tables.ts), [src/package-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-migrations.ts), [src/package-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/package-models.ts), [src/query-logger.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/query-logger.ts), [src/rbac-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/rbac-tables.ts), [src/relation-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/relation-columns.ts), [src/replicas.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/replicas.ts), [src/row-lock.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/row-lock.ts), [src/safe-migrations.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/safe-migrations.ts), [src/schema-align.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-align.ts), [src/schema-drift.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/schema-drift.ts), [src/seeder.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/seeder.ts), [src/shadowed-models.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/shadowed-models.ts), [src/sql-helpers.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/sql-helpers.ts), [src/trait-tables.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/trait-tables.ts), [src/transaction-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/transaction-context.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/types.ts), [src/unique-audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/unique-audit.ts), [src/utc-defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utc-defaults.ts), [src/utils.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/utils.ts), [src/uuid-columns.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/uuid-columns.ts), [src/vschema.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/vschema.ts).
 
-Evidence directory: [126 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [130 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/datetime
 
@@ -633,7 +633,7 @@ Declared runtime exports: `Activity`, `AnalyticsEvent`, `Auction`, `AuctionItem`
 
 Local source modules: [src/auto-crud.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/auto-crud.ts), [src/batch-loader.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/batch-loader.ts), [src/db.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/db.ts), [src/define-model.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/define-model.ts), [src/extend-model.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/extend-model.ts), [src/gdpr/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/gdpr/index.ts), [src/generate-database-schema.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/generate-database-schema.ts), [src/locked-row.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/locked-row.ts), [src/messaging.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/messaging.ts), [src/model-types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/model-types.ts), [src/ownership.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/ownership.ts), [src/paginator-request.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/paginator-request.ts), [src/row-token.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/row-token.ts), [src/subquery.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/subquery.ts), [src/traits/audit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/audit.ts), [src/traits/billable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/billable.ts), [src/traits/categorizable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/categorizable.ts), [src/traits/commentable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/commentable.ts), [src/traits/likeable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/likeable.ts), [src/traits/taggable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/traits/taggable.ts), [src/transaction.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/transaction.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/types.ts), [src/utils/encrypted.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/utils/encrypted.ts), [src/utils/prunable.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/utils/prunable.ts).
 
-Evidence directory: [69 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [71 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/pagination
 
@@ -687,7 +687,7 @@ Declared runtime exports: `Batch`, `DispatchedBatch`, `FailedJobNotifier`, `JOB_
 
 Local source modules: [src/action-runner.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/action-runner.ts), [src/action.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/action.ts), [src/batch.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/batch.ts), [src/bun-queue.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/bun-queue.ts), [src/circuit-breaker.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/circuit-breaker.ts), [src/dead-letter.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/dead-letter.ts), [src/discovery.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/discovery.ts), [src/drivers/redis.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/drivers/redis.ts), [src/envelope.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/envelope.ts), [src/events.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/events.ts), [src/health.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/health.ts), [src/idempotency.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/idempotency.ts), [src/job-progress.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/job-progress.ts), [src/job.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/job.ts), [src/notifications.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/notifications.ts), [src/poison.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/poison.ts), [src/scheduler.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/scheduler.ts), [src/testing.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/testing.ts), [src/worker.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/src/worker.ts).
 
-Evidence directory: [48 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [49 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/queue/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/realtime
 
@@ -719,11 +719,11 @@ Evidence directory: [2 retained tests](https://github.com/stacksjs/stacks/blob/m
 
 Guidance: [`stacks-router`](../stacks-router/SKILL.md). Source: [storage/framework/core/router/src/index.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/index.ts).
 
-Declared runtime exports: `DASHBOARD_ROUTE_GROUPS`, `DEFAULT_ROUTE_BUNDLE_FEATURES`, `DEFAULT_ROUTE_REGISTRY`, `DatabaseSessionStore`, `EncryptedSessionStore`, `FileSessionStore`, `JSON_CONTENT_TYPE`, `MemorySessionStore`, `Middleware`, `PathParamError`, `RedisSessionStore`, `RequestBodyError`, `appRouteRegistry`, `assertRouteMiddlewareResolvable`, `bundleMounts`, `cacheRedisConnection`, `cacheRequestQuery`, `checkApplicationHealth`, `clearCsrfModuleCache`, `clearCurrentRequest`, `clearMiddlewareCache`, `clearRateLimit`, `clearRouteModelBindings`, `clearTrackedQueries`, `clientAddress`, `configureViewDirectories`, `createErrorResponse`, `createMiddlewareErrorResponse`, `createNotFoundResponse`, `createSessionStore`, `createStacksRouter`, `createStacksSessionStore`, `createTypedRouter`, `createValidationErrorResponse`, `dashboardGroupMiddleware`, `defineMiddleware`, `defineRouteModelBinding`, `describeUnknownDashboardGroups`, `disableViewRouting`, `enhanceRequest`, `fallbackStorage`, `findUnresolvableRouteMiddleware`, `getCurrentRequest`, `getQueryShapeCounts`, `getTraceId`, `installMiddlewareHotReload`, `isApiRequest`, `isRouterAction`, `listNamedRoutes`, `listRedirectRoutes`, `listRegisteredRoutes`, `listRootMountedAppRoutes`, `loadMiddlewareHandlers`, `loadRoutes`, `mountedDefaultRouteBundles`, `parseJsonText`, `rateLimit`, `rateLimitScale`, `rateLimitStatus`, `readJsonBody`, `readTextBody`, `request`, `resetBootHooks`, `resetRateLimiters`, `resetSharedRateLimitStorage`, `resolveDashboardAccess`, `resolveRouteModel`, `route`, `routeModelBindings`, `routeParams`, `runBootHooks`, `runHealthProbes`, `runWithRequest`, `safePathParam`, `sanitizePathParam`, `scaledLimit`, `serve`, `serverResponse`, `setCurrentRequest`, `setRouteModelFallback`, `sharedRateLimitStorage`, `signUrl`, `signedUrl`, `stream`, `trackQuery`, `trustedProxies`, `url`, `useRateLimitStorage`, `verifySignedUrl`, `verifySignedUrlMiddleware`, `warnOnMultipleRouterInstances`, `withTraceId`, `wrapAction`.
+Declared runtime exports: `DASHBOARD_ROUTE_GROUPS`, `DEFAULT_ROUTE_BUNDLE_FEATURES`, `DEFAULT_ROUTE_REGISTRY`, `DatabaseSessionStore`, `EncryptedSessionStore`, `FileSessionStore`, `JSON_CONTENT_TYPE`, `MemorySessionStore`, `Middleware`, `PathParamError`, `RedisSessionStore`, `RequestBodyError`, `appRouteRegistry`, `assertRouteMiddlewareResolvable`, `bundleMounts`, `cacheRedisConnection`, `cacheRequestQuery`, `checkApplicationHealth`, `clearCsrfModuleCache`, `clearCurrentRequest`, `clearMiddlewareCache`, `clearRateLimit`, `clearRouteModelBindings`, `clearTrackedQueries`, `clientAddress`, `configureViewDirectories`, `createErrorResponse`, `createMiddlewareErrorResponse`, `createNotFoundResponse`, `createSessionStore`, `createStacksRouter`, `createStacksSessionStore`, `createTypedRouter`, `createValidationErrorResponse`, `dashboardGroupMiddleware`, `defineMiddleware`, `defineRouteModelBinding`, `describeUnknownDashboardGroups`, `disableViewRouting`, `enhanceRequest`, `fallbackStorage`, `findUnresolvableRouteMiddleware`, `getCurrentRequest`, `getQueryShapeCounts`, `getTraceId`, `installMiddlewareHotReload`, `isApiRequest`, `isRouterAction`, `listNamedRoutes`, `listRedirectRoutes`, `listRegisteredRoutes`, `listRootMountedAppRoutes`, `loadMiddlewareHandlers`, `loadRoutes`, `mountedDefaultRouteBundles`, `parseJsonText`, `rateLimit`, `rateLimitScale`, `rateLimitStatus`, `readJsonBody`, `readTextBody`, `request`, `resetBootHooks`, `resetRateLimiters`, `resetSharedRateLimitStorage`, `resolveDashboardAccess`, `resolveRouteModel`, `route`, `routeModelBindings`, `routeParams`, `runBootHooks`, `runHealthProbes`, `runWithRequest`, `safePathParam`, `sanitizePathParam`, `scaledLimit`, `serve`, `serverResponse`, `setCurrentRequest`, `setRouteModelFallback`, `sharedRateLimitStorage`, `signUrl`, `signedUrl`, `stream`, `trackQuery`, `trustedProxies`, `url`, `useRateLimitStorage`, `verifySignedUrl`, `verifySignedUrlMiddleware`, `warnOnMultipleRouterInstances`, `withRouteAdmission`, `withTraceId`, `wrapAction`.
 
 Local source modules: [src/api-shape.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/api-shape.ts), [src/body.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/body.ts), [src/dashboard-access.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/dashboard-access.ts), [src/encrypted-session-store.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/encrypted-session-store.ts), [src/error-handler.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/error-handler.ts), [src/health.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/health.ts), [src/json.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/json.ts), [src/middleware.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/middleware.ts), [src/path-sanitize.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/path-sanitize.ts), [src/rate-limit.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/rate-limit.ts), [src/request-augmentation.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-augmentation.ts), [src/request-context.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/request-context.ts), [src/route-loader.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-loader.ts), [src/route-model-binding.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/route-model-binding.ts), [src/security-settings.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/security-settings.ts), [src/session-factory.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/session-factory.ts), [src/signed-url.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/signed-url.ts), [src/stacks-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/stacks-router.ts), [src/typed-router.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/src/typed-router.ts).
 
-Evidence directory: [94 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [96 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/router/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/scheduler
 
@@ -733,7 +733,7 @@ Read the entrypoint and package export map for re-exported or type-only surfaces
 
 Local source modules: [src/run.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/run.ts), [src/schedule.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/schedule.ts), [src/types.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/src/types.ts).
 
-Evidence directory: [13 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [14 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/scheduler/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/search-engine
 
@@ -763,7 +763,7 @@ Declared runtime exports: `server`.
 
 Local source modules: [src/config.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/config.ts), [src/controllers/base.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/controllers/base.ts), [src/imports.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/imports.ts), [src/maintenance.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/maintenance.ts), [src/proxy.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/proxy.ts), [src/redirects.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/redirects.ts), [src/rewrites.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/rewrites.ts), [src/security-headers.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/security-headers.ts), [src/shadowed-defaults.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/src/shadowed-defaults.ts).
 
-Evidence directory: [24 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [25 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/server/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/shell
 

package/ai/skills/stacks-scheduler/SKILL.md

@@ -81,9 +81,20 @@ Each sets an internal cron pattern. Once a timing method is called, the schedule
 | `weekly()`             | `0 0 * * 0`        | Sunday at midnight          |
 | `monthly()`            | `0 0 1 * *`        | 1st of month at midnight    |
 | `yearly()` / `annually()` | `0 0 1 1 *`    | Jan 1 at midnight           |
+| `weekdays()`           | `0 0 * * 1-5`      | Monday to Friday            |
 | `onDays(days: number[])` | `0 0 * * {days}` | e.g. `onDays([1,3,5])` => `0 0 * * 1,3,5` |
 | `at(time: string)`      | `{min} {hr} * * *` | e.g. `at('14:30')` => `30 14 * * *` |
 
+The patterns above are what each method answers on its own. Chained, they
+compose on two independent axes and the order does not matter: the time of day
+(`at`, `hourly`, `every*Minutes`) and the days it runs on (`daily`, `weekly`,
+`monthly`, `yearly`, `weekdays`, `onDays`). Each method writes its own axis and
+keeps the other, so `.at('09:00').onDays([2])` and `.onDays([2]).at('09:00')`
+are both `0 9 * * 2`. Two calls on the same axis means the last one wins, so
+`.monthly().weekly()` is weekly. A `cron()` expression replaces both axes, and
+`everySecond()` leaves cron entirely (any cadence method after it returns to a
+cron pattern).
+
 ### Configuration Methods (chainable, returns `this`)
 
 ```typescript

package/ai/skills/stacks-testing/SKILL.md

@@ -297,6 +297,8 @@ expect(pageAuditClean(report)).toBe(true) // no duplicate /api/ requests, failed
 buddy test                    # run all tests
 buddy test --unit             # unit tests only
 buddy test --feature          # feature tests only
+buddy test tests/unit/auth.test.ts                      # just that file
+buddy test storage/framework/core/scheduler/tests       # just that directory
 bun run test                  # via npm script
 bun run test:ui               # UI tests
 bun run test:coverage         # with coverage
@@ -305,6 +307,18 @@ buddy test:page-audit --url /,/dashboard --base http://localhost:3000  # duplica
 buddy test:page-audit --url http://localhost:3000/pricing --mobile --json
 ```
 
+Name a path to run only what is under it, file or directory, anywhere in the
+repo. A path matching no test file is an error rather than a fallback to the
+whole suite, which matters because the fallback used to report `0 fail` and
+exit 0 for a file it never opened. `test:unit` and `test:feature` narrow a
+named path to their own suite and say so when it holds none of their tests.
+
+Running `bun test` directly needs the `./` prefix: bunfig sets
+`[test] root = "tests"`, so `bun test storage/.../foo.test.ts` from the repo
+root matches nothing and reports a clean run over no files, while
+`bun test ./storage/.../foo.test.ts` works. `buddy test` adds the prefix for
+you, so prefer it.
+
 `test:page-audit` exits 1 when any page has duplicates, failed same-origin requests or errors, or
 never settles.
 

package/app/Models/Content/Author.ts

@@ -23,9 +23,9 @@ export default defineModel({
     useUuid: true,
     useTimestamps: true, // defaults to true, `timestampable` used as an alias
     useSearch: {
-      displayable: ['id', 'name', 'email'], // the fields to become d (defaults to all fields)
-      searchable: ['name', 'email'], // the fields to become searchable (defaults to all fields)
-      sortable: ['created_at', 'updated_at'], // the fields to become sortable (defaults to all fields)
+      displayable: ['id', 'name', 'email'], // the fields a hit returns
+      searchable: ['name', 'email'], // the fields a query matches against
+      sortable: ['created_at', 'updated_at'], // the fields results can be ordered by
       filterable: [],
     },
 

package/app/Models/User.ts

@@ -41,10 +41,10 @@ export default defineModel({
     useTimestamps: true, // defaults to true, `timestampable` used as an alias
     useSocials: ['github'],
     useSearch: {
-      displayable: ['id', 'name', 'email'], // the fields to become d (defaults to all fields)
-      searchable: ['name', 'email'], // the fields to become searchable (defaults to all fields)
-      sortable: ['created_at', 'updated_at'], // the fields to become sortable (defaults to all fields)
-      filterable: [], // the fields to become filterable (defaults to all fields)
+      displayable: ['id', 'name', 'email'], // the fields a hit returns
+      searchable: ['name', 'email'], // the fields a query matches against
+      sortable: ['created_at', 'updated_at'], // the fields results can be ordered by
+      filterable: [], // the fields results can be narrowed by
       // options: {}, // you may pass options to the search engine
     },
 

package/bootstrap.ts

@@ -23,7 +23,8 @@
 
 import { config, feature } from '@stacksjs/config'
 import { frameworkPath } from '@stacksjs/path'
-import { bundleMounts, DEFAULT_ROUTE_BUNDLE_FEATURES, route } from '@stacksjs/router'
+import { log } from '@stacksjs/logging/runtime'
+import { bundleMounts, DEFAULT_ROUTE_BUNDLE_FEATURES, route, withRouteAdmission } from '@stacksjs/router'
 import MaintenanceMiddleware from './app/Middleware/Maintenance'
 
 // Global maintenance / coming-soon gate. Registered first so the
@@ -71,116 +72,135 @@ function mounts(bundle: keyof typeof DEFAULT_ROUTE_BUNDLE_FEATURES): boolean {
   return bundleMounts(selection, bundle, feature(DEFAULT_ROUTE_BUNDLE_FEATURES[bundle]))
 }
 
-// Auth: login, registration, logout, refresh/revoke, passkeys, TOTP 2FA and
-// password reset. Split out of dashboard.ts so it can be mounted on its own
-// (stacksjs/stacks#2229) — previously the only way to get `/login` was to
-// activate `dashboard` and take the storefront, reviews, AI and voice surface
-// with it.
-//
-// Registered BEFORE dashboard.ts, which is where these lived, so the
-// first-registration-wins order among framework routes is unchanged.
-//
-// Deliberately NOT gated on `feature('auth')`, despite the issue asking for
-// it: `config/auth.ts` ships in every app with `enabled: true`, so that gate
-// is true everywhere and would mount the auth surface — including
-// `/generate-two-factor-secret`, `/logout-all` and `/auth/tokens` — in apps
-// currently running with `dashboard` off. Widening an app's public surface on
-// upgrade is not something a refactor gets to do silently.
-if (mounts('auth'))
-  await route.register(frameworkPath('defaults/routes/auth.ts'))
-
-// The rest of dashboard.ts: email subscribe, storefront cart/checkout,
-// reviews, sitemap, AI, voice, and the admin dashboard's REST surface. Still
-// one file and still one gate — splitting auth out was the case with a
-// reporter behind it; marketing.ts / commerce.ts / monitoring.ts remain the
-// obvious next cuts.
-//
-// Apps that need only a slice can also define the routes they want directly
-// in `routes/api.ts` — first-registration-wins means the user version takes
-// priority.
-if (mounts('dashboard')) {
-  await route.register(frameworkPath('defaults/routes/dashboard.ts'))
-  // JSON endpoints for the dev dashboard UI. Kept separate from the view
-  // routes above so the data layer is one obvious file to grep.
-  await route.register(frameworkPath('defaults/routes/dashboard-api.ts'))
-  // The dev dashboard boots through this file rather than the application
-  // router's importRoutes() path, so load model-declared useApi routes here too.
+/**
+ * Every default bundle this app mounts, registered in one place so the
+ * admission check below covers all of them.
+ */
+async function registerDefaultBundles(): Promise<void> {
+  // Auth: login, registration, logout, refresh/revoke, passkeys, TOTP 2FA and
+  // password reset. Split out of dashboard.ts so it can be mounted on its own
+  // (stacksjs/stacks#2229) — previously the only way to get `/login` was to
+  // activate `dashboard` and take the storefront, reviews, AI and voice surface
+  // with it.
+  //
+  // Registered BEFORE dashboard.ts, which is where these lived, so the
+  // first-registration-wins order among framework routes is unchanged.
   //
-  // Package first, vendored second, matching importRoutes() and start.ts. This
-  // line used to import the vendored copy only, and nothing re-vendors that
-  // file: `@stacksjs/orm` publishes `dist/routes.js` and no `routes.ts`, so an
-  // app kept whatever generator its copy froze at however often it upgraded.
-  // An old enough copy compares route paths literally, so a generated
-  // `PATCH /api/sites/{id}` does not recognise a hand-written
-  // `/api/sites/{siteId}` as the same endpoint and registers alongside it,
-  // and the hand-written handler's authorization check stops running
-  // (stacksjs/stacks#2364).
+  // Deliberately NOT gated on `feature('auth')`, despite the issue asking for
+  // it: `config/auth.ts` ships in every app with `enabled: true`, so that gate
+  // is true everywhere and would mount the auth surface — including
+  // `/generate-two-factor-secret`, `/logout-all` and `/auth/tokens` — in apps
+  // currently running with `dashboard` off. Widening an app's public surface on
+  // upgrade is not something a refactor gets to do silently.
+  if (mounts('auth'))
+    await route.register(frameworkPath('defaults/routes/auth.ts'))
+
+  // The rest of dashboard.ts: email subscribe, storefront cart/checkout,
+  // reviews, sitemap, AI, voice, and the admin dashboard's REST surface. Still
+  // one file and still one gate — splitting auth out was the case with a
+  // reporter behind it; marketing.ts / commerce.ts / monitoring.ts remain the
+  // obvious next cuts.
   //
-  // Held in a variable so the specifier resolves at runtime rather than while
-  // transpiling, where an unresolvable literal would fail this module instead
-  // of throwing where it can be caught.
-  const ormRoutesPackage = '@stacksjs/orm/routes'
-  try {
-    await import(ormRoutesPackage)
+  // Apps that need only a slice can also define the routes they want directly
+  // in `routes/api.ts` — first-registration-wins means the user version takes
+  // priority.
+  if (mounts('dashboard')) {
+    await route.register(frameworkPath('defaults/routes/dashboard.ts'))
+    // JSON endpoints for the dev dashboard UI. Kept separate from the view
+    // routes above so the data layer is one obvious file to grep.
+    await route.register(frameworkPath('defaults/routes/dashboard-api.ts'))
+    // The dev dashboard boots through this file rather than the application
+    // router's importRoutes() path, so load model-declared useApi routes here too.
+    //
+    // Package first, vendored second, matching importRoutes() and start.ts. This
+    // line used to import the vendored copy only, and nothing re-vendors that
+    // file: `@stacksjs/orm` publishes `dist/routes.js` and no `routes.ts`, so an
+    // app kept whatever generator its copy froze at however often it upgraded.
+    // An old enough copy compares route paths literally, so a generated
+    // `PATCH /api/sites/{id}` does not recognise a hand-written
+    // `/api/sites/{siteId}` as the same endpoint and registers alongside it,
+    // and the hand-written handler's authorization check stops running
+    // (stacksjs/stacks#2364).
+    //
+    // Held in a variable so the specifier resolves at runtime rather than while
+    // transpiling, where an unresolvable literal would fail this module instead
+    // of throwing where it can be caught.
+    const ormRoutesPackage = '@stacksjs/orm/routes'
+    try {
+      await import(ormRoutesPackage)
+    }
+    catch {
+      await import(frameworkPath('orm/routes.ts'))
+    }
   }
-  catch {
-    await import(frameworkPath('orm/routes.ts'))
+
+  // Email webhook + unsubscribe routes (stacksjs/stacks#1881, #1880).
+  // Always mounted when the `email` feature is on — the underlying
+  // handlers self-disable when their provider credentials aren't
+  // configured (they 401 rather than processing). Apps that need a
+  // non-default mount path register their own routes in `routes/api.ts`
+  // and the framework's mount silently no-ops since user routes
+  // register first.
+  if (mounts('email')) {
+    await route.register(frameworkPath('defaults/routes/email.ts'))
   }
-}
 
-// Email webhook + unsubscribe routes (stacksjs/stacks#1881, #1880).
-// Always mounted when the `email` feature is on — the underlying
-// handlers self-disable when their provider credentials aren't
-// configured (they 401 rather than processing). Apps that need a
-// non-default mount path register their own routes in `routes/api.ts`
-// and the framework's mount silently no-ops since user routes
-// register first.
-if (mounts('email')) {
-  await route.register(frameworkPath('defaults/routes/email.ts'))
-}
+  // Form-builder public endpoints (`@stacksjs/forms`). Gated on the `forms`
+  // feature, which defaults OFF - an app opts in with config/forms.ts
+  // (`buddy forms:install`) and only then do the public submit routes exist.
+  if (mounts('forms')) {
+    await route.register(frameworkPath('defaults/routes/forms.ts'))
+  }
 
-// Form-builder public endpoints (`@stacksjs/forms`). Gated on the `forms`
-// feature, which defaults OFF - an app opts in with config/forms.ts
-// (`buddy forms:install`) and only then do the public submit routes exist.
-if (mounts('forms')) {
-  await route.register(frameworkPath('defaults/routes/forms.ts'))
-}
+  // Courier delivery endpoints: position ingest and the stop/route lifecycle a
+  // courier's device drives. Gated with the rest of the commerce surface, since
+  // they are meaningless without the delivery models behind them.
+  if (mounts('delivery')) {
+    await route.register(frameworkPath('defaults/routes/delivery.ts'))
+  }
 
-// Courier delivery endpoints: position ingest and the stop/route lifecycle a
-// courier's device drives. Gated with the rest of the commerce surface, since
-// they are meaningless without the delivery models behind them.
-if (mounts('delivery')) {
-  await route.register(frameworkPath('defaults/routes/delivery.ts'))
-}
+  // The payment provider's webhook, which applies payments and refunds to
+  // orders. Gated with the commerce surface; it answers 401 until the driver's
+  // webhook secret is configured.
+  if (mounts('payments')) {
+    await route.register(frameworkPath('defaults/routes/payments.ts'))
+  }
 
-// The payment provider's webhook, which applies payments and refunds to
-// orders. Gated with the commerce surface; it answers 401 until the driver's
-// webhook secret is configured.
-if (mounts('payments')) {
-  await route.register(frameworkPath('defaults/routes/payments.ts'))
-}
+  // The page a Paddle payment link opens: Paddle has no hosted checkout, so
+  // its default payment link has to point at a page of the app's that loads
+  // Paddle.js. Mounted while the app pays through Paddle, as part of the
+  // `payments` bundle when the app names its bundles.
+  const paymentDriverName = (config as { payment?: { driver?: string } }).payment?.driver
+  if (paymentDriverName === 'paddle' && (selection?.explicit ? selection.bundles.has('payments') : true)) {
+    await route.register(frameworkPath('defaults/routes/paddle.ts'))
+  }
 
-// The page a Paddle payment link opens: Paddle has no hosted checkout, so
-// its default payment link has to point at a page of the app's that loads
-// Paddle.js. Mounted while the app pays through Paddle, as part of the
-// `payments` bundle when the app names its bundles.
-const paymentDriverName = (config as { payment?: { driver?: string } }).payment?.driver
-if (paymentDriverName === 'paddle' && (selection?.explicit ? selection.bundles.has('payments') : true)) {
-  await route.register(frameworkPath('defaults/routes/paddle.ts'))
+  // Social sign-in: `/auth/{provider}` + `/auth/{provider}/callback`
+  // (stacksjs/stacks#2276). An opt-in bundle, NOT part of the implicit default
+  // set or `all` — OAuth callback URLs in an app that configured no provider
+  // are surface for nothing. So `mounts()` does not apply here: an app that
+  // NAMED its bundles decides outright (`social` listed → on, absent → off),
+  // and an app that said nothing gets it exactly when a provider is actually
+  // configured in config/services.ts — configuring GitHub and finding
+  // /auth/github dead would be the puzzle, not the mount.
+  const { configuredSocialProviders } = await import('@stacksjs/socials')
+  const mountSocial = selection?.explicit
+    ? selection.bundles.has('social')
+    : configuredSocialProviders().length > 0
+  if (mountSocial) {
+    await route.register(frameworkPath('defaults/routes/socials.ts'))
+  }
 }
 
-// Social sign-in: `/auth/{provider}` + `/auth/{provider}/callback`
-// (stacksjs/stacks#2276). An opt-in bundle, NOT part of the implicit default
-// set or `all` — OAuth callback URLs in an app that configured no provider
-// are surface for nothing. So `mounts()` does not apply here: an app that
-// NAMED its bundles decides outright (`social` listed → on, absent → off),
-// and an app that said nothing gets it exactly when a provider is actually
-// configured in config/services.ts — configuring GitHub and finding
-// /auth/github dead would be the puzzle, not the mount.
-const { configuredSocialProviders } = await import('@stacksjs/socials')
-const mountSocial = selection?.explicit
-  ? selection.bundles.has('social')
-  : configuredSocialProviders().length > 0
-if (mountSocial) {
-  await route.register(frameworkPath('defaults/routes/socials.ts'))
+// Register the bundles, withholding any route whose framework action depends
+// on a model this app excluded from its schema and whose table its database
+// does not have. Those routes could only answer 500 (stacksjs/stacks#2943); now
+// they are absent, and boot says which and why. When the table list cannot be
+// read, nothing is withheld.
+const { frameworkRouteAdmission } = await import('@stacksjs/database')
+const withheld = await withRouteAdmission(await frameworkRouteAdmission(), registerDefaultBundles)
+if (withheld.length > 0) {
+  const shown = withheld.slice(0, 5).map(r => `${r.method} ${r.path} -> ${r.handler} needs ${r.reason}`)
+  const more = withheld.length > shown.length ? `\n  ... and ${withheld.length - shown.length} more` : ''
+  log.warn(`[Routes] Not registering ${withheld.length} framework route(s) whose models are not in this app's schema (database.models.includeFrameworkDefaults is false) and whose tables do not exist:\n  ${shown.join('\n  ')}${more}\nPublish a model with \`buddy publish model <Name>\` or set includeFrameworkDefaults to serve them.`)
 }

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.261",
+  "version": "0.75.263",
   "description": "Stacks, built into VS Code: stx templates, pickier linting and formatting, encrypted env files, the dev server preview and every buddy command. No other extensions required.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.261",
+  "version": "0.75.263",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -45,9 +45,9 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.35",
-    "@stacksjs/mobile": "0.75.261",
-    "@stacksjs/sanitizer": "0.2.656",
-    "@stacksjs/stx": "0.2.656",
+    "@stacksjs/mobile": "0.75.263",
+    "@stacksjs/sanitizer": "0.2.661",
+    "@stacksjs/stx": "0.2.661",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
     "ts-qr-codes": "^0.1.8"