@stacksjs/defaults 0.75.422 → 0.75.431

package/ai/skills/stacks-objects/SKILL.md

@@ -210,10 +210,15 @@ Retained evidence: `core/objects/tests/transform.test.ts`.
 - `objectPick` creates a NEW object -- original is not affected.
 - `objectMap` creates a NEW object via `Object.fromEntries`.
 - `deepMerge` does NOT deeply merge arrays -- arrays from source replace arrays in target entirely.
+- `deepMerge` merges only plain objects key by key: a Date, Map, Set or class instance from a source is assigned as
+  is, and a string, array or number in the target is replaced by a source's object.
 - `deepMerge` uses `isObject()` from `@stacksjs/validation` combined with `!Array.isArray()` to determine mergeability.
+- A `"__proto__"` key is data, never a prototype. `JSON.parse` and the router's request input keep one as an own key:
+  `deepMerge` skips it and merges only into the target's own properties, and the transform helpers keep it as an own
+  key (`Object.fromEntries`), so input that carries one cannot set a prototype.
 - `objectMap` can filter entries by returning `undefined` from the callback -- filtered via `notNullish` from `@stacksjs/utils`.
 - `objectKeys` return type uses a template literal type to handle non-string keys.
 - `clearUndefined` only removes `undefined` -- `null` values are preserved.
 - `hasOwnProperty` accepts `null`/`undefined` objects without throwing.
 - `objectPick` with `omitUndefined=false` (default) includes keys even if their values are `undefined`, as long as the key exists in the object.
-- These utilities are also re-exported through `@stacksjs/utils`.
+- `@stacksjs/utils` does not re-export these. Its `merge` / `defu` is a separate merge that builds a new object.

package/ai/skills/stacks-payments/SKILL.md

@@ -717,8 +717,10 @@ when the app declares no portal.
 
 ```typescript
 Payment.formatAmount(2999, 'usd')   // '$29.99' (uses Intl.NumberFormat)
-Payment.toCents(29.99)               // 2999
-Payment.toDollars(2999)              // 29.99
+Payment.formatAmount(1000, 'jpy')   // '¥1,000': JPY has no minor unit
+Payment.minorUnitExponent('jpy')    // 0 (Stripe's table on the Stripe driver; ISO 4217 otherwise)
+Payment.toCents(29.99)               // 2999, two-decimal currencies only
+Payment.toDollars(2999)              // 29.99, two-decimal currencies only
 ```
 
 ### Client-Side Billing (useBillable)
@@ -918,7 +920,7 @@ The instance methods are exactly the keys of `createBillableMethods` in
   its original raw payload before applying domain events.
 - Stripe API keys MUST be in `.env` as `STRIPE_SECRET_KEY` and `STRIPE_PUBLISHABLE_KEY` -- never hardcode them in config files
 - The Stripe client is created lazily, on first use: importing `@stacksjs/payments` without `STRIPE_SECRET_KEY` (or without the opt-in `stripe` package) is fine, and the first Stripe call throws naming what is missing
-- All amounts are in cents -- use `toCents()` and `toDollars()` for conversion
+- All amounts are in the currency's minor unit, and which minor unit depends on the API. A provider-neutral `Money` (the driver, the billable trait's `createPayment()`/`charge()`/`refund()`, webhook `PaymentEvent.amount`) is in ISO 4217 minor units, as commerce stores them: whole krónur for ISK, hundredths for MGA. The Stripe driver converts to Stripe's units, which differ for ISK, UGX (two decimals) and MGA (none), with `toStripeAmount()` and `fromStripeAmount()`, and refuses a fraction of an ariary. The Stripe-shaped APIs (`manageCharge`, Connect, direct debit, product setup) and `formatAmount()` take Stripe's units: cents for USD, whole yen for JPY, hundredths for ISK and UGX. `toCents()` and `toDollars()` are for two-decimal currencies; `minorUnitExponent(currency)` says how many decimals a Stripe amount has
 - `Payment.charge()` (Stripe driver) creates AND confirms the PaymentIntent in one step
 - `subscribe()` resolves the price via `lookup_key`, not a direct Stripe price ID
 - `Payment.removePaymentMethod()` and the billable instance method `removePaymentMethod()` both take the provider's id (string); `managePaymentMethod.deletePaymentMethod()` takes the local row id (number)

package/ai/skills/stacks-push/SKILL.md

@@ -42,8 +42,9 @@ Routes to the appropriate driver based on `options.driver` (default: `'expo'`).
 
 - For **Expo**: Passes the notification directly to `expo.send()` with all fields mapped.
 - For **FCM** with single token: Calls `fcm.send()` with notification mapped to `{ to, notification: { title, body }, data, priority }`.
-- For **FCM** with multiple tokens: Calls `fcm.sendMulticast()` and returns an aggregated result with success count.
-- FCM priority mapping: `'default'` is converted to `'normal'`; `'high'` and `'normal'` pass through.
+- For **FCM** with multiple tokens: Calls `fcm.sendMulticast()` and returns an aggregated result with success count, and `data: { results }`, one per token in order, so a dead token (404 `UNREGISTERED`) can be told from a transient failure.
+- FCM priority mapping: `'default'` is converted to `'normal'`; `'high'` and `'normal'` pass through. Unset means `high`, on Android and iOS alike.
+- `data` is the same for every driver. FCM takes only strings, so a non-string value is sent as its JSON text (`{ orderId: 42 }` arrives as `"42"`).
 
 ## PushNotification Interface (index.ts)
 
@@ -128,12 +129,16 @@ async function send(message: ExpoPushMessage): Promise<PushResult>
 ```
 
 - Endpoint: `https://exp.host/--/api/v2/push/send`
-- Validates tokens with `isExpoPushToken()` before sending
-- Filters out invalid tokens and warns via `log.warn()`
+- Validates tokens with `isExpoPushToken()` before sending; an invalid token
+  is warned about via `log.warn()`, not sent, and counted as a failure
 - Returns early with failure if no valid tokens remain
 - Creates one payload entry per token (fans out `to` array into individual messages)
+- Sends them in requests of at most 100, one after another: Expo refuses a
+  larger request outright, so a send to 101 devices used to reach none. A
+  refused request fails its own messages and the rest still go
 - Default `sound: 'default'`, default `priority: 'high'`
-- Returns `PushResult` with `data: { tickets }` containing the full ticket array
+- Returns `PushResult` with `data: { tickets }`: one ticket per token in `to`,
+  in the same order, so each ticket can be matched to its token
 - `success` is `true` only if zero tickets have `status: 'error'`
 - `messageId` is the first ticket's `id` (if any)
 
@@ -147,13 +152,13 @@ Validates token format: matches `Expo(nent)?PushToken[...]` pattern OR alphanume
 ```typescript
 async function getReceipts(ticketIds: string[]): Promise<Record<string, ExpoPushReceipt>>
 ```
-Endpoint: `https://exp.host/--/api/v2/push/getReceipts`. Checks delivery status for previously sent notifications.
+Endpoint: `https://exp.host/--/api/v2/push/getReceipts`. Checks delivery status for previously sent notifications, asking 1000 IDs per request (Expo's limit) and merging the answers.
 
 #### sendBatch()
 ```typescript
 async function sendBatch(messages: ExpoPushMessage[], chunkSize?: number): Promise<PushResult[]>
 ```
-Sends multiple messages in chunks (default chunk size: 100, per Expo's recommendation). Processes chunks sequentially, messages within each chunk in parallel via `Promise.all`.
+Sends several messages, `chunkSize` (default 100) at a time: chunks sequentially, messages within a chunk in parallel via `Promise.all`. Each message's own tokens are split into requests of 100 by `send()`.
 
 ### Exports
 - `send`, `sendBatch`, `getReceipts`, `isExpoPushToken` functions
@@ -192,7 +197,7 @@ interface FCMMessage {
     clickAction?: string
     tag?: string
   }
-  data?: Record<string, string>         // NOTE: values must be strings for FCM
+  data?: Record<string, unknown>        // sent as strings: a non-string value as its JSON text
   priority?: 'high' | 'normal'
   ttl?: number
   collapseKey?: string
@@ -221,7 +226,7 @@ endpoint it used to fall back to is gone.
 1. Generates JWT with RS256 signing using the service account private key
 2. Exchanges JWT for OAuth2 access token at `https://oauth2.googleapis.com/token`
 3. Sends to `https://fcm.googleapis.com/v1/projects/{projectId}/messages:send`
-4. Includes Android priority settings and APNS headers (`apns-priority: 10` for high, `5` for normal)
+4. Includes Android priority settings and APNS headers (`apns-priority: 10` for high, `5` for normal); an unset priority is high on both
 5. Supports `to` (token), `topic`, or `condition` targeting
 
 **JWT generation details:**

package/ai/skills/stacks-queue/SKILL.md

@@ -59,6 +59,13 @@ export class Job {
 ```
 
 ### Dispatch Routing
+
+Production defaults to the database driver. An explicit `sync` driver in production
+throws; reserved/unknown drivers also throw. `resolveQueueDriver()` shares this
+policy across both dispatch APIs and workers. For a transactional database job
+intent, `storeJob` from `@stacksjs/queue/utils` inserts immediately on the active
+transaction; its consumer is the normal database queue worker, including retries.
+
 1. Checks `isFaked()` -- if testing, dispatches to FakeQueue
 2. `sync` driver: calls `dispatchNow()` (immediate execution)
 3. `redis` driver: creates `RedisQueue`, calls `queue.add()` with bun-queue options

package/ai/skills/stacks-slug/SKILL.md

@@ -76,6 +76,8 @@ interface SlugifyOptions {
 
 ## Gotchas
 - Omitting either table or column returns the base slug with no query.
+- A title with no letters or digits at all (`!!!`, an emoji) gets a random
+  eight-character slug from `uniqueSlug()`, never `""`; `slugify()` still returns `""`.
 - The check and insert are separate: keep a UNIQUE index and handle/retry an
   insert conflict. A helper cannot reserve the returned slug against a race.
 - Collision attempts are bounded; after repeated conflicts the helper returns
@@ -84,7 +86,11 @@ interface SlugifyOptions {
 - `uniqueSlug()` is async - it queries the database
 - `slugify()` is sync - no database interaction
 - Collision detection appends `-2`, `-3`, etc. (not random suffixes)
-- Unicode characters are transliterated (u → u, e → e, etc.)
+- Unicode characters are transliterated (u → u, e → e, etc.) where ts-slug's charmap
+  romanizes the script (Latin, Greek, Cyrillic, Hebrew, Arabic, Devanagari, Georgian);
+  any other script, such as Japanese, Chinese, Korean or Thai, keeps its letters
+  (`日本語のタイトル` stays as it is; percent-encoded in a URL)
+- Any dash separates words: an em or en dash becomes a hyphen
 - For string-only slugification without DB, use `slug()` from `@stacksjs/strings` instead
 - Tags and Categories both use unique slugs by default
 - Slug columns should have a unique index in the database

package/ai/skills/stacks-strings/SKILL.md

@@ -100,9 +100,9 @@ interface TitleCaseOptions {
   locale?: string | string[]
   sentenceCase?: boolean                 // only capitalize first word + after terminators
   sentenceTerminators?: Set<string>      // default: '.', '!', '?'
-  titleTerminators?: Set<string>         // default: '.', '!', '?', ':', '"', "'", '"'
+  titleTerminators?: Set<string>         // default: '.', '!', '?', ':', '"', "'", and a closing curly quote (U+201D)
   smallWords?: Set<string>               // words not capitalized (see SMALL_WORDS)
-  wordSeparators?: Set<string>           // default: '---', '--', '-', '---', '/'
+  wordSeparators?: Set<string>           // default: em dash (U+2014), en dash (U+2013), '-', horizontal bar (U+2015), '/'
 }
 ```
 
@@ -196,6 +196,10 @@ Extensive built-in character map covering:
 - Vietnamese diacritics
 - Currency symbols ($, EUR, GBP, YEN, etc.)
 - Special characters (trademark, copyright, etc.)
+- Any dash (hyphen, en dash, em dash, figure dash) separates words, as in ts-slug
+- `slug()` keeps ASCII only, which suits identifiers such as a cloud resource name. For a
+  content URL use `slugify` or `uniqueSlug` from `@stacksjs/slug` (ts-slug), which keeps
+  the letters of a script it cannot romanize: `日本茶` stays `日本茶` there and is `""` here
 
 ### Locale Support
 Locale-specific character mappings for: `bg`, `de`, `es`, `fr`, `pt`, `uk`, `vi`, `da`, `nb`, `it`, `nl`, `sv`.
@@ -241,7 +245,7 @@ Native TypeScript implementations (no external validator dependency). All accept
 ### Core Validators
 ```typescript
 isEmail('user@example.com')               // true -- regex: /^[^\s@]+@[^\s@]+\.[^\s@]+$/
-isStrongPassword('Abc123!@#')             // true -- min 8 chars, upper, lower, digit, symbol
+isStrongPassword('Abc123!@#')             // true -- min 8 chars, upper, lower, digit, symbol (any non-letter, non-number)
 isAlphanumeric('abc123')                  // true -- /^[a-zA-Z0-9]+$/
 isAlpha('abcdef')                         // true -- /^[a-zA-Z]+$/
 isNumeric('123')                          // true -- /^[0-9]+$/ (whole numbers only)
@@ -256,16 +260,16 @@ isBase64('SGVsbG8=')                      // true -- btoa(atob(x)) === x
 isBase32('MFZWI===')                      // true -- /^[A-Z2-7]+=*$/
 isAscii('hello')                          // true -- /^[\x00-\x7F]*$/
 isJSON('{"key":"value"}')                 // true -- JSON.parse succeeds
-isHSL('hsl(0, 100%, 50%)')               // true
+isHSL('hsl(0, 100%, 50%)')               // true -- comma syntax: hsl(hue, saturation%, lightness%)
 isMimeType('text/html')                   // true -- /^[a-z]+\/[a-z0-9\-+.]+$/i
-isDataURI('data:text/plain;base64,...')   // true
+isDataURI('data:text/plain;base64,...')   // true -- RFC 2397: the media type and ;base64 are both optional
 isJWT('eyJhbGciOiJIUzI1NiJ9.e30.c2ln')   // true -- shape check only, not signature verification
 ```
 
 ### Network Validators
 ```typescript
 isIP('192.168.1.1')                       // true -- IPv4 and IPv6
-isIPRange('192.168.1.0/24')               // true -- CIDR notation (IPv4: 0-32, IPv6: 0-128)
+isIPRange('192.168.1.0/24')               // true -- CIDR notation, a whole-number prefix (IPv4: 0-32, IPv6: 0-128)
 isMACAddress('00:11:22:33:44:55')         // true -- colon or hyphen separated
 isFQDN('example.com')                     // true -- fully qualified domain name
 ```
@@ -282,7 +286,7 @@ isISSN('0378-5955')                        // true -- mod 11 check
 
 ### Geographic Validators
 ```typescript
-isLatLong('40.7128,-74.0060')             // true -- lat: -90..90, long: -180..180
+isLatLong('40.7128,-74.0060')             // true -- plain decimal numbers; lat: -90..90, long: -180..180
 isLatitude('40.7128')                     // true
 isLongitude('-74.0060')                   // true
 isPostalCode('12345')                     // true -- US, UK, Canada, generic formats
@@ -291,8 +295,8 @@ isPostalCode('12345')                     // true -- US, UK, Canada, generic for
 ### Phone, Identity, Date Validators
 ```typescript
 isMobilePhone('+1234567890')              // true -- international format, min 7 digits
-isUUID('550e8400-e29b-41d4-a716-446655440000') // true -- full value required
-isISO8601('2024-01-01T00:00:00Z')         // true -- with Date validity check
+isUUID('550e8400-e29b-41d4-a716-446655440000') // true -- versions 1-8 (RFC 9562), nil and max; full value required
+isISO8601('2024-01-01T00:00:00Z')         // true -- the day must exist in its month; any number of fraction digits
 isIdentityCard('AB123456')                // true -- generic 5-20 alphanumeric
 isISRC('USRC17607839')                    // true
 isISO31661Alpha2('US')                    // true
@@ -404,7 +408,12 @@ interface PluralizeOptions { count?, inclusive? }
 ```
 
 ## Gotchas
-- Case conversion uses Unicode-aware word boundary detection (`\p{Ll}`, `\p{Lu}`) -- handles international characters
+- Case conversion uses Unicode-aware word boundary detection (`\p{Ll}`, `\p{Lu}`) -- handles international characters.
+  Combining marks stay with their letter and digits from any script are kept, so `kebabCase('नमस्ते दुनिया')`
+  is `'नमस्ते-दुनिया'`
+- `truncate(str, length, end)` never returns more than `length` characters, `end` included; with a `length`
+  shorter than `end` it returns as much of `end` as fits. It and `mask` count code points, so an emoji is one
+  character and is never cut in half
 - `slug()` calls `slugify()` under the hood but defaults to `{ lower: true, strict: true }`; `slugify()` defaults to `{ lower: false, strict: false }`
 - `pascalCase` and `camelCase` accept `PascalCaseOptions` with `mergeAmbiguousCharacters` to control number-prefixed word handling
 - All case functions support `prefixCharacters`/`suffixCharacters` to preserve leading/trailing non-word characters

package/ai/skills/stacks-testing/SKILL.md

@@ -182,7 +182,11 @@ module for the rest of that run, so a mock in one file leaks into the next. A
 framework booted against one database also stays booted. When a test needs a
 clean process, run it in a child (`src/isolated.ts`); when it needs real rows,
 give it a database nobody else uses (`src/disposable-database.ts`). Both are on
-the root, with no framework import.
+the root, with no framework import. For direct PostgreSQL queries, use
+`new SQL(database.sqlOptions!)`: Bun can let an inherited `PGDATABASE` override
+a URL's database name. The helper's explicit SQL options select its owned
+database. Pass `database.env` last to isolated children; it supplies matching
+`DB_*`, `PG_*`, `POSTGRES_URL` and `DATABASE_URL` values.
 
 ```ts
 import { assertIsolatedOk, disposablePostgresUrl, runIsolated, test, withDisposableDatabase } from '@stacksjs/testing'

package/ai/skills/stacks-utils/SKILL.md

@@ -45,7 +45,7 @@ export { clamp, notNullish, retry, useOnline } from '@stacksjs/browser'
 
 ## Deep Merge (`merge.ts`)
 
-Replacement for `defu`. Arrays are concatenated, objects are recursively merged, special objects (Date, RegExp, Error, Promise, Map, Set, WeakMap, WeakSet, ArrayBuffer views) are NOT deeply merged.
+Replacement for `defu`. Arrays are concatenated, objects are recursively merged, special objects (Date, RegExp, Error, Promise, Map, Set, WeakMap, WeakSet, ArrayBuffer views) are NOT deeply merged. A `"__proto__"` key is skipped, as defu skips it, so a parsed request body cannot set the result's prototype.
 
 ```typescript
 import { merge, mergeDefaults, createMerger, defu } from '@stacksjs/utils'

package/ai/skills/stacks-validation/SKILL.md

@@ -249,6 +249,17 @@ export default defineModel({
 })
 ```
 
+### Custom messages
+
+A rule's `message` is one string for any failure of the field, or an object keyed
+by rule name: `min`, `max`, `email`, `enum`, `required` and so on. `messageKeys(rule)`
+lists the keys a validator takes; `timestamp()` and `date()` take `timestamp` and
+`date`. A key named after the field covers failures no rule key matched, unless the
+validator has a rule of that name (`email: { email: ... }` is the email rule's).
+Action `validations`, `request.validate()`, `validateField()` and model writes all
+apply them through `fieldErrorMessages()` from `@stacksjs/validation/messages`, after
+validation; none of them sets ts-validation's process-wide message provider.
+
 ## Model Validation (`validator.ts`)
 
 ### `validateField(modelFile, params)`
@@ -402,6 +413,8 @@ they are. Inferred object shapes are native, not a hand-written request interfac
 schema.file().required().image().mimeTypes([...]).maxBytes(n).minBytes(n).
 extensions([...]).custom(fn) provides FileLike validation. Client MIME/extension
 checks do not prove the bytes; use stacks-storage's MIME verification where needed.
+An upload is a class instance (the router's `UploadedFile`); a plain object, which
+is what a JSON body gives for the same field name, is refused.
 
 registerRule/getCustomRule, unique(table,column,exceptId?), exists(table,column)
 and validateFieldAsync support application async validation. Current unique/exists
@@ -437,9 +450,11 @@ validateModelInput(MyModel, { title })
 
 Failures throw `InputValidationError` with `status: 422`. JSON must be an object;
 text never coerces objects or silently truncates; numeric input rejects booleans,
-non-finite values and unsafe whole numbers. Optional text/number input returns
+non-finite values, unsafe whole numbers and anything but decimal notation (`0x10`
+is not 16), and an identifier is decimal digits only. Optional text/number input returns
 null, and absent boolean input returns undefined. Boolean input accepts JSON
-booleans and the explicit form values `true`, `false`, `1`, `0` and their strings.
+booleans and the explicit form values `true`, `false`, `1`, `0` and their strings,
+and a checkbox's `on` and `off`.
 
 `validateModelInput` checks only supplied fields using `getDefinition()` rules.
 The action still selects writable fields, requires creation fields and validates
@@ -449,9 +464,10 @@ Root and narrow input imports share the same error constructor.
 ## Reusable boundary and stored-value rules
 
 `parseTextInput(value, field, required?, maxLength?)` rejects overlong text
-rather than truncating it. `parseEnumInput(value, field, choices)` requires
+rather than truncating it; `maxLength` counts characters, as a database column
+does, not UTF-16 units. `parseEnumInput(value, field, choices)` requires
 exact string membership; it never stringifies an object or boolean.
-`storedBoolean(value, fallback)` decodes SQL/form 0/1 and false/true; the
+`storedBoolean(value, fallback)` decodes SQL/form 0/1, false/true and on/off; the
 caller explicitly chooses the fallback for missing or corrupt stored data.
 Partial model validation accepts attribute names and their snake-case column
 spelling, including camel-case definitions.

package/ai/skills/stacks-whois/SKILL.md

@@ -133,11 +133,12 @@ When `outputData` is `null`, `parseData()` uses this default template:
 }
 ```
 
-The parser iterates character by character through raw WHOIS text:
-- Keys are identified when a line matches a key in `outputData`
-- Values follow after `": "` separator
+The parser reads raw WHOIS text a line at a time:
+- A line's field is everything before its first colon; it counts when it is a key in `outputData`
+- The value is everything after that colon, as written, so `2024-08-14T07:01:34Z` and `https://...` keep their colons
+- A field with nothing after its colon takes the next non-empty line as its value (registries that print `Registrar:` with the name below)
 - Array-typed fields (like `Domain Status`) accumulate multiple values
-- Parsing stops at `"Record maintained by"` or `">>>"` markers
+- Parsing stops at a line starting with `"Record maintained by"` or `">>>"`
 
 Custom parse templates: pass an object with the field names you want extracted. Use empty string `''` for single values, use `[]` for fields with multiple values.
 

package/app/Actions/Dashboard/Content/post-input.ts

@@ -59,7 +59,7 @@ function optionalId(value: unknown): number | null {
 }
 
 function booleanValue(value: unknown): boolean {
-  return storedBoolean(value === 'on' ? true : value, false)
+  return storedBoolean(value, false)
 }
 
 export function invalidPostContent(payload: PostPayload): string | null {

package/app/Actions/InstallAction.ts

@@ -33,7 +33,7 @@ export default new Action({
       git clone https://github.com/stacksjs/stacks.git $1
       cd $1
       # Run the pantry-install script
-      "./storage/framework/scripts/pantry-install"
+      "./storage/framework/scripts/pantry-install" || exit $?
 
       echo "Project $1 has been created. Please open a new terminal, run 'bun run dev' to start the server."
 
@@ -58,10 +58,10 @@ fi
 cd $PROJECT_ROOT
 # Run the pantry-install script
 if [[ $* == *--verbose* ]]; then
-  "$SCRIPT_PATH"
+  "$SCRIPT_PATH" || exit $?
   # bun ./storage/framework/core/buddy/src/cli.ts setup --verbose
 else
-  "$SCRIPT_PATH" > /dev/null 2>&1
+  "$SCRIPT_PATH" > /dev/null || exit $?
   # bun ./storage/framework/core/buddy/src/cli.ts setup
 fi
 

package/app/Models/Content/Post.ts

@@ -216,7 +216,7 @@ export default defineModel({
       validation: {
         rule: schema.enum(['published', 'draft', 'archived']),
         message: {
-          oneOf: 'Status must be either published, draft, or archived',
+          enum: 'Status must be either published, draft, or archived',
         },
       },
       factory: faker => faker.helpers.arrayElement(['published', 'draft', 'archived']),

package/app/Models/Error.ts

@@ -71,7 +71,7 @@ export default defineModel({
       validation: {
         rule: schema.number(),
         message: {
-          string: 'status must be a number',
+          number: 'status must be a number',
         },
       },
       factory: faker => faker.number.int({ min: 400, max: 500 }),

package/app/Models/Log.ts

@@ -53,7 +53,7 @@ export default defineModel({
         // (stacksjs/stacks#2996).
         rule: schema.unix().required(),
         message: {
-          date: 'Timestamp must be a valid date',
+          unix: 'Timestamp must be a valid Unix timestamp',
         },
       },
       factory: faker => faker.date.recent().getTime(),

package/app/Models/PaymentMethod.ts

@@ -50,7 +50,7 @@ export default defineModel({
       validation: {
         rule: schema.string().required().max(50),
         message: {
-          number: 'brand must be a number',
+          string: 'brand must be a string',
           required: 'brand is required',
         },
       },
@@ -63,7 +63,7 @@ export default defineModel({
       validation: {
         rule: schema.number().required(),
         message: {
-          string: 'exp_month must be a number',
+          number: 'exp_month must be a number',
           required: 'exp_month is required',
         },
       },
@@ -76,7 +76,7 @@ export default defineModel({
       validation: {
         rule: schema.number().required(),
         message: {
-          string: 'exp_year must be a number',
+          number: 'exp_year must be a number',
           required: 'exp_year is required',
         },
       },

package/app/Models/PaymentProduct.ts

@@ -55,7 +55,7 @@ export default defineModel({
       validation: {
         rule: schema.number().required(),
         message: {
-          string: 'expires must be a string',
+          number: 'unit_price must be a number',
           required: 'expires is required',
         },
       },

package/app/Models/Subscription.ts

@@ -70,7 +70,7 @@ export default defineModel({
       validation: {
         rule: schema.number().required(),
         message: {
-          string: 'unit_price must be a number',
+          number: 'unit_price must be a number',
           required: 'unit_price is required',
         },
       },

package/app/Models/commerce/PrintDevice.ts

@@ -100,7 +100,7 @@ export default defineModel({
       validation: {
         rule: schema.unix(),
         message: {
-          invalid: 'Invalid timestamp format',
+          unix: 'Invalid timestamp format',
         },
       },
       factory: faker => faker.date.recent().getTime(),

package/app/Models/commerce/Receipt.ts

@@ -79,7 +79,7 @@ export default defineModel({
       validation: {
         rule: schema.timestampTz().required(),
         message: {
-          invalid: 'Invalid date format',
+          timestampTz: 'Invalid date format',
         },
       },
       factory: faker => faker.date.recent().toISOString(),

package/app/Models/realtime/Websocket.ts

@@ -33,7 +33,7 @@ export default defineModel({
       validation: {
         rule: schema.enum(['disconnection', 'error', 'success']),
         message: {
-          in: 'Type must be one of: disconnection, error, success',
+          enum: 'Type must be one of: disconnection, error, success',
         },
       },
       factory: faker => faker.helpers.arrayElement(['success', 'success', 'success', 'disconnection', 'error']),
@@ -77,7 +77,7 @@ export default defineModel({
         // and MySQL (stacksjs/stacks#2996).
         rule: schema.unix(),
         message: {
-          date: 'Time must be a valid timestamp',
+          unix: 'Time must be a valid timestamp',
         },
       },
       factory: faker => faker.date.recent().getTime(),

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.422",
+  "version": "0.75.431",
   "description": "Stacks, built into VS Code: stx templates, pickier linting and formatting, encrypted env files, the dev server preview and every buddy command. No other extensions required.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.422",
+  "version": "0.75.431",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -45,7 +45,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.35",
-    "@stacksjs/mobile": "0.75.422",
+    "@stacksjs/mobile": "0.75.431",
     "@stacksjs/sanitizer": "0.2.784",
     "@stacksjs/stx": "0.2.784",
     "@xterm/addon-fit": "^0.11.0",