@stacksjs/defaults 0.75.445 → 0.75.447

package/ai/skills/stacks-arrays/SKILL.md

@@ -269,9 +269,11 @@ These standalone functions are also available through the root `arr` namespace:
 - `groupBy`, `keyBy`, `countBy` use selector functions and return typed records.
   Repeated keyBy keys overwrite earlier entries; groupBy accumulates them.
 - `sortBy(array, ...selectors)` copies before sorting, supports multiple keys,
-  and accepts `{ by, order: 'desc' }` selectors.
+  and accepts `{ by, order: 'desc' }` selectors. Each selector runs once per element;
+  cached keys preserve stable ties.
 - `sumBy`, `meanBy`, `minBy`, `maxBy` aggregate selected values. `meanBy` returns
   undefined on an empty input; extrema return the selected element, not its value.
+  Extrema retain infinite endpoints and ignore NaN candidates; ties keep the first.
 - `zip`, `zipWith` stop at the shorter input; `unzip` splits pairs.
 - `difference` keeps first-input duplicates that are not excluded;
   `intersection` and `union` deduplicate by Set identity.
@@ -280,6 +282,12 @@ These standalone functions are also available through the root `arr` namespace:
 - `splitAt` supports negative indexes; `splitWhen` starts the second half at
   the first match; `times` requires a non-negative integer count.
 
+`take`, `takeLast`, `drop` and `dropLast` truncate fractional counts toward zero,
+clamp negatives/NaN to zero and treat Infinity as the entire array. Population
+variance, standard deviation, covariance and z-scores use scaled centered arithmetic
+for finite inputs. Standard deviation stays finite when only its square is outside
+the number range; unrepresentable final results keep IEEE number behavior.
+
 Read `core/arrays/src/transform.ts` and `tests/transform.test.ts` for precise
 empty-input and selector behavior. These pure helpers are preferable to a new
 utility dependency for common native transformations.

package/ai/skills/stacks-datetime/SKILL.md

@@ -258,6 +258,11 @@ offset; the named IANA zone converts it into an instant. `isoInZone` retains
 that zone's offset in serialized output rather than merely displaying a date.
 `addCalendarMonths` clones and clamps the day; ordinary `DateTime.addMonths`
 preserves native Date overflow instead. Do not interchange those contracts.
+Calendar-month clamping keeps literal early years in local and UTC mode and throws
+RangeError for an out-of-range result. A zero-month shift preserves the exact instant.
+Named-zone conversion rejects impossible calendar and clock fields before applying
+DST disambiguation. Era-aware offsets support year zero and BCE instants; `isoInZone`
+retains seconds for expanded ISO years.
 
 `zonedTimeToUtc` resolves DST edges the same way in every zone (RFC 5545 and
 Temporal's `'compatible'` rule):
@@ -309,6 +314,7 @@ minutesUntil('2026-10-25', '09:00', 'Europe/Berlin', new Date('2026-10-24T22:00:
 - `minutesUntil` keeps the seconds of `now` as a fraction; round where you
   display or compare. Negative once the moment has passed.
 - `addDays` refuses a result past 9999-12-31.
+- `todayIn` returns canonical dates from 0000 through 9999 and rejects BCE or expanded-year dates.
 
 ### Reading `DATE` columns: `parseSqlDate` (`@stacksjs/database`)
 
@@ -363,6 +369,8 @@ clockMinutes, addClockMinutes and timeWindowsCover. Recurrence validation
 rejects invalid weekday entries; expansion refuses excessive ranges and
 midnight-crossing durations instead of silently truncating them. Adjacent
 windows can cover one continuous slot. ScheduleInputError carries status 422.
+Every supplied availability window is validated before checking coverage, even
+when an earlier valid window already covers the slot.
 
 localDateRange(from, to, ...zones) converts inclusive calendar days to an
 exclusive-end UTC instant range in a selected valid zone, including DST days.

package/ai/skills/stacks-native/CATALOG.md

@@ -16,7 +16,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/alias` | [`stacks-alias`](../stacks-alias/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/alias/src/index.ts) | 3 |
 | `@stacksjs/analytics` | [`stacks-analytics`](../stacks-analytics/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/analytics/src/index.ts) | 6 |
 | `@stacksjs/api` | [`stacks-api`](../stacks-api/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/api/src/index.ts) | 12 |
-| `@stacksjs/arrays` | [`stacks-arrays`](../stacks-arrays/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/src/index.ts) | 10 |
+| `@stacksjs/arrays` | [`stacks-arrays`](../stacks-arrays/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/src/index.ts) | 12 |
 | `@stacksjs/audio` | [`stacks-audio`](../stacks-audio/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/audio/src/index.ts) | 3 |
 | `@stacksjs/auth` | [`stacks-auth`](../stacks-auth/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/auth/src/index.ts) | 126 |
 | `@stacksjs/browser` | [`stacks-browser`](../stacks-browser/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/browser/src/index.ts) | 8 |
@@ -36,7 +36,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/config` | [`stacks-config`](../stacks-config/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/config/src/index.ts) | 16 |
 | `@stacksjs/cron` | [`stacks-cron`](../stacks-cron/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/cron/src/index.ts) | 6 |
 | `@stacksjs/database` | [`stacks-database`](../stacks-database/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/database/src/index.ts) | 138 |
-| `@stacksjs/datetime` | [`stacks-datetime`](../stacks-datetime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/index.ts) | 21 |
+| `@stacksjs/datetime` | [`stacks-datetime`](../stacks-datetime/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/index.ts) | 22 |
 | `@stacksjs/defaults` | [`stacks-build`](../stacks-build/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/defaults/package.json) | 2 |
 | `@stacksjs/deploy` | [`stacks-deploy`](../stacks-deploy/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/deploy/package.json) | 1 |
 | `@stacksjs/desktop-build` | [`stacks-desktop`](../stacks-desktop/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/desktop/src/index.ts) | 15 |
@@ -64,7 +64,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/model-meta` | [`stacks-models`](../stacks-models/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/model-meta/src/index.ts) | 1 |
 | `@stacksjs/newsletter` | [`stacks-newsletter`](../stacks-newsletter/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/newsletter/src/index.ts) | 7 |
 | `@stacksjs/notifications` | [`stacks-notifications`](../stacks-notifications/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/notifications/src/index.ts) | 18 |
-| `@stacksjs/objects` | [`stacks-objects`](../stacks-objects/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/src/index.ts) | 6 |
+| `@stacksjs/objects` | [`stacks-objects`](../stacks-objects/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/src/index.ts) | 8 |
 | `@stacksjs/orm` | [`stacks-orm`](../stacks-orm/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/orm/src/index.ts) | 76 |
 | `@stacksjs/pagination` | [`stacks-pagination`](../stacks-pagination/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/pagination/src/index.ts) | 0 |
 | `@stacksjs/path` | [`stacks-path`](../stacks-path/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/path/src/index.ts) | 13 |
@@ -94,7 +94,7 @@ Browser runtime bindings are documented separately in `stacks-auto-imports`.
 | `@stacksjs/types` | [`stacks-types`](../stacks-types/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/types/src/index.ts) | 2 |
 | `@stacksjs/ui` | [`stacks-ui`](../stacks-ui/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/ui/src/index.ts) | 6 |
 | `@stacksjs/utils` | [`stacks-utils`](../stacks-utils/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/utils/src/index.ts) | 15 |
-| `@stacksjs/validation` | [`stacks-validation`](../stacks-validation/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/index.ts) | 22 |
+| `@stacksjs/validation` | [`stacks-validation`](../stacks-validation/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/index.ts) | 25 |
 | `@stacksjs/video` | [`stacks-video`](../stacks-video/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/video/src/index.ts) | 3 |
 | `@stacksjs/whois` | [`stacks-whois`](../stacks-whois/SKILL.md) | [entrypoint](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/whois/src/index.ts) | 5 |
 
@@ -169,7 +169,7 @@ Declared runtime exports: `arr`.
 
 Local source modules: [src/arr.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/src/arr.ts), [src/macro.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/src/macro.ts).
 
-Evidence directory: [10 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [12 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/arrays/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/audio
 
@@ -367,7 +367,7 @@ Declared runtime exports: `DateTime`, `addCalendarMonths`, `addDays`, `dateForma
 
 Local source modules: [src/calendar.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/calendar.ts), [src/format.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/format.ts), [src/local.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/local.ts), [src/now.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/now.ts), [src/parse.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/parse.ts), [src/schedule.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/schedule.ts), [src/zone.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/src/zone.ts).
 
-Evidence directory: [21 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [22 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/datetime/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/defaults
 
@@ -631,7 +631,7 @@ Declared runtime exports: `clearUndefined`, `deepMerge`, `hasOwnProperty`, `isKe
 
 Local source modules: [src/transform.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/src/transform.ts).
 
-Evidence directory: [6 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [8 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/objects/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/orm
 
@@ -919,7 +919,7 @@ Declared runtime exports: `applyConditionals`, `isArray`, `isBoolean`, `isFuncti
 
 Local source modules: [src/input.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/input.ts), [src/messages.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/messages.ts), [src/reporter.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/reporter.ts), [src/schema.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/schema.ts), [src/validator.ts](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/src/validator.ts).
 
-Evidence directory: [22 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
+Evidence directory: [25 retained tests](https://github.com/stacksjs/stacks/blob/main/storage/framework/core/validation/tests). These files are evidence pointers, not a claim that all tests were run for this catalog.
 
 ### @stacksjs/video
 

package/ai/skills/stacks-objects/SKILL.md

@@ -81,16 +81,10 @@ const result = deepMerge(target, source)
 const merged = deepMerge(defaults, userConfig, overrides)
 ```
 
-The `DeepMerge<T, S>` type (from `@stacksjs/types`) provides full type inference:
-```typescript
-type DeepMerge<F, S> = MergeInsertions<{
-  [K in keyof F | keyof S]: K extends keyof S & keyof F
-    ? DeepMerge<F[K], S[K]>
-    : K extends keyof S ? S[K]
-    : K extends keyof F ? F[K]
-    : never
-}>
-```
+The `DeepMerge<T, S>` type from `@stacksjs/types` preserves primitive, array and
+built-in instance values while merging record keys recursively. A replaced Date
+target no longer exposes Date methods. The authoritative type is in
+`core/types/src/utils.ts`; verify consumers against built declarations.
 
 ### objectPick -- Pick Properties by Key
 ```typescript
@@ -153,7 +147,7 @@ if (isKeyOf(config, key)) {
 
 ### objectKeys -- Strictly Typed Object.keys
 ```typescript
-function objectKeys<T extends object>(obj: T): Array<`${keyof T & (string | number | boolean | null | undefined)}`>
+function objectKeys<T extends object>(obj: T): Array<ObjectStringKey<T>>
 ```
 
 Returns `Object.keys(obj)` with a stricter return type than the built-in `Object.keys()` (which returns `string[]`).
@@ -166,10 +160,13 @@ const keys = objectKeys(user)
 
 ### objectEntries -- Strictly Typed Object.entries
 ```typescript
-function objectEntries<T extends object>(obj: T): Array<[keyof T, T[keyof T]]>
+function objectEntries<T extends object>(obj: T): Array<ObjectStringEntry<T>>
 ```
 
 Returns `Object.entries(obj)` with a stricter return type than the built-in `Object.entries()` (which returns `[string, any][]`).
+`ObjectStringKey<T>` stringifies numeric keys and excludes symbols;
+`ObjectStringEntry<T>` pairs those keys with the visited values. Both functions
+declare their return types explicitly so built declarations preserve the arrays.
 
 ```typescript
 const user = { name: 'John', age: 30 }
@@ -197,9 +194,14 @@ The root also exports `omit`, `pickBy`, `omitBy`, `mapValues`, `mapKeys`,
 `invert`, `isEmptyObject`, `getPath` and `setPath` from `transform.ts`.
 Use a path array such as `['items', 0, 'name']`, not an assumed dot-string
 parser. `getPath(source, path, fallback?)` reads a nested value;
+`getPath` returns `unknown` even with a fallback; narrow a present value before use.
+`mapValues` preserves optional properties and omits symbol keys in its result type,
+matching its enumerable string-key traversal. The pure `@stacksjs/objects/transform`
+entry ships both JavaScript and declarations.
 `setPath(source, path, value)` performs a persistent update by copying containers
 along the path and sharing unaffected siblings. Treat paths as application-owned
-inputs; this helper is not a path authorization boundary. Choose `objectPick` for key-based selection and
+inputs; this helper is not a path authorization boundary. Array `length` updates
+use native length semantics on the copy and reject invalid lengths. Choose `objectPick` for key-based selection and
 `pickBy` for predicate selection. Read transform signatures for callback
 argument order; `objectMap`'s `(key, value)` is not a universal convention.
 Retained evidence: `core/objects/tests/transform.test.ts`.
@@ -212,6 +214,7 @@ Retained evidence: `core/objects/tests/transform.test.ts`.
 - `deepMerge` does NOT deeply merge arrays -- arrays from source replace arrays in target entirely.
 - `deepMerge` merges only plain objects key by key: a Date, Map, Set or class instance from a source is assigned as
   is, and a string, array or number in the target is replaced by a source's object.
+  A non-plain nested target also gives way to a plain source record.
 - `deepMerge` uses `isObject()` from `@stacksjs/validation` combined with `!Array.isArray()` to determine mergeability.
 - A `"__proto__"` key is data, never a prototype. `JSON.parse` and the router's request input keep one as an own key:
   `deepMerge` skips it and merges only into the target's own properties, and the transform helpers keep it as an own

package/ai/skills/stacks-validation/SKILL.md

@@ -274,14 +274,17 @@ const result = await validateField('User', { name: 'John', email: 'john@example.
 ```
 
 Behavior:
-1. Finds the model file by name in user models or framework defaults
+1. Finds exact model filenames or qualified paths recursively, preferring app overrides
 2. Extracts validation rules from model attributes
-3. Converts attribute names to snake_case for validation
-4. Sets custom error messages via `MessageProvider`
-5. Validates using `schema.object(ruleObject).validate(params)`
+3. Accepts attribute and snake-case column names, preferring the attribute spelling when both are supplied
+4. Applies custom messages to reported failures without executing predicates again or replacing the shared provider
+5. Validates through the context-aware object schema
 6. Throws `HttpError(422)` with error JSON on validation failure
 7. Throws `HttpError(404)` if model not found
-8. Skips validation for attributes with default values unless `isRequired` is true
+8. An optional default excuses absence, never a supplied invalid value
+
+Ambiguous bare model names require a qualified path. Declared fields and conditional
+siblings use own properties; inherited values never count as submitted input.
 
 ### `customValidate(attributes, params)`
 
@@ -314,13 +317,17 @@ isObjectNotEmpty(undefined)     // false
 
 ## Error Reporter (`reporter.ts`)
 
-Process-local latest-error reporter for validation:
+Validation operations start an async-local latest-error scope before their first await.
+Successful operations clear prior failures; `getErrors()` returns an independent snapshot.
+Standalone adapters that report directly create a scope with `withValidationContext()`:
 
 ```typescript
-import { reportError, getErrors } from '@stacksjs/validation'
+import { reportError, getErrors, withValidationContext } from '@stacksjs/validation'
 
-reportError([{ message: 'Invalid', value: '', field: 'email' }])
-const errors = getErrors()   // returns the latest MessageObject[]; reportError replaces it
+withValidationContext(() => {
+  reportError([{ message: 'Invalid', value: '', field: 'email' }])
+  const errors = getErrors() // this scope's latest MessageObject[]
+})
 ```
 
 Interface: `{ message: string, value: string, field: string }`
@@ -388,7 +395,7 @@ type ValidationString = ValidationRule
 - Numeric classification functions (`isEvenOrOdd`, etc.) return string defaults for non-numbers rather than throwing
 - Schema validators map to database column types -- `schema.integer()` creates an integer column, `schema.string()` creates a varchar, etc.
 - `validateField` converts attribute names to snake_case using `snakeCase()` from `@stacksjs/strings`
-- `validateField` skips attributes with default values unless `isRequired` is explicitly set
+- `validateField` validates supplied values even when their attributes declare defaults
 - Validation error messages are customizable per-rule in model definitions via the `message` object
 - The schema export is Stacks' proxy over the underlying validation instance, with typed object/array/enum inference, file validation and conditionals; it is not the same object as the upstream v export
 - Custom validators can be added with `schema.custom<T>(fn, message)` for types not covered by built-in validators
@@ -397,16 +404,23 @@ type ValidationString = ValidationRule
 
 ## Request, conditional and file validation
 
-The root validate(requestOrRecord, rules) is async, returns the validated payload
+The root validate(requestOrRecord, rules, options?) is async, returns the validated payload
 and throws HttpError(422) with normalized field errors on failure. Rules are
-validators or { rule, message? }; enhanced request.all supplies native input,
-otherwise query/body/route data are merged by request-validator.ts. Do not
-substitute a boolean check or ignore the returned validated data at a boundary.
+validators or { rule, message? }. Plain records are application data, including URL,
+query and params fields. Native Request bodies and enhanced request.all() are read
+directly; jsonBody/formBody adapters remain supported. URL/query/params-only adapters
+select { source: 'request' }; { source: 'data' } forces data interpretation.
+Returned values contain declared supplied fields, recursively through object shapes
+and array.each() elements. Opaque validators retain their accepted values. Use the
+returned cleaned payload at the boundary, including action getValidated()/safe().
 
 Schema declarations can use the narrow `@stacksjs/validation/runtime` entry.
 The schema proxy adds typed object/array/enum inference and conditional rules:
 when(sibling, literalOrPredicate, refine) applies cross-field refinements through
-objectWithContext; sometimes has the underlying optional/empty-value semantics.
+objectWithContext, action validations, model writes and validateModelInput.
+Model contexts recognize attribute/column aliases. Creates include declared defaults;
+partial updates validate supplied fields and siblings without loading stored values.
+Refinements preserve reusable schemas. sometimes has the underlying optional/empty-value semantics.
 Read object-with-context.ts before treating presence-only rules as stricter than
 they are. Inferred object shapes are native, not a hand-written request interface.
 
@@ -417,19 +431,17 @@ An upload is a class instance (the router's `UploadedFile`); a plain object, whi
 is what a JSON body gives for the same field name, is refused.
 
 registerRule/getCustomRule, unique(table,column,exceptId?), exists(table,column)
-and validateFieldAsync support application async validation. Current unique/exists
-helpers return allowed when the database cannot be queried, so they are advisory
-validation, not authorization or a replacement for database constraints. Validate
+and validateFieldAsync support application async validation. These helpers propagate query failures
+instead of approving unchecked values. Keep operational failures separate from invalid input. Validate
 uniqueness at the durable write boundary and handle a uniqueness violation there.
 
-The latest-error reporter is shared process state; do not use getErrors as
-request-local concurrent state. Read errors on the returned/raised validation
-result instead. Local is.ts helpers and legacy rules/type declarations are not
+Local is.ts helpers and legacy rules/type declarations are not
 automatically all public exports from the root.
 
 Source: `storage/framework/core/validation/src/index.ts`, runtime.ts,
 schema.ts, request-validator.ts, conditional.ts, file-validator.ts and validator.ts.
-Tests: conditional.test.ts, file-validator.test.ts, async-rules.test.ts,
+Tests: conditional.test.ts, conditional-boundaries.test.ts, input-contracts.test.ts,
+boundary-e2e.test.ts, file-validator.test.ts, async-rules.test.ts,
 runtime-entry.test.ts and type-inference.test-d.ts under core/validation/tests.
 
 ## Custom action input
@@ -456,6 +468,11 @@ null, and absent boolean input returns undefined. Boolean input accepts JSON
 booleans and the explicit form values `true`, `false`, `1`, `0` and their strings,
 and a checkbox's `on` and `off`.
 
+Numeric bounds reject NaN and inverted intervals; -Infinity and Infinity explicitly
+mean an unbounded lower/upper endpoint. Text maxLength requires a nonnegative safe
+integer. Invalid configuration throws RangeError even for absent optional input.
+Unsafe whole numbers are rejected whether or not integer-only input was requested.
+
 `validateModelInput` checks only supplied fields using `getDefinition()` rules.
 The action still selects writable fields, requires creation fields and validates
 relationships. Use the transaction callback executor for all atomic persistence.

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.445",
+  "version": "0.75.447",
   "description": "Stacks, built into VS Code: stx templates, pickier linting and formatting, encrypted env files, the dev server preview and every buddy command. No other extensions required.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.445",
+  "version": "0.75.447",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -45,7 +45,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.35",
-    "@stacksjs/mobile": "0.75.445",
+    "@stacksjs/mobile": "0.75.447",
     "@stacksjs/sanitizer": "0.2.789",
     "@stacksjs/stx": "0.2.789",
     "@xterm/addon-fit": "^0.11.0",

package/resources/components/Dashboard/UI/Avatar.stx

@@ -3,12 +3,13 @@ interface AvatarProps {
   src?: string
   alt?: string
   name?: string
+  initials?: string
   size?: 'xs' | 'sm' | 'md' | 'lg' | 'xl' | '2xl'
   rounded?: 'sm' | 'md' | 'lg' | 'full'
   status?: 'online' | 'offline' | 'away' | 'busy'
 }
 
-const { src = '', alt = '', name = '', size = 'md', rounded = 'full', status = '' } = defineProps<AvatarProps>()
+const { src = '', alt = '', name = '', initials: suppliedInitials = '', size = 'md', rounded = 'full', status = '' } = defineProps<AvatarProps>()
 
 const sizeClasses = {
   xs: 'h-5 w-5 text-[10px]',
@@ -50,10 +51,10 @@ function getInitials(fullName: string) {
   return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()
 }
 
-const initials = getInitials(name)
+const initials = suppliedInitials || getInitials(name)
 
 // Background colors for initials (consistent based on name)
-const bgColors = [
+export const bgColors = [
   'bg-red-500/15 text-red-600 dark:bg-red-400/20 dark:text-red-400',
   'bg-orange-500/15 text-orange-600 dark:bg-orange-400/20 dark:text-orange-400',
   'bg-yellow-500/15 text-yellow-600 dark:bg-yellow-400/20 dark:text-yellow-400',
@@ -66,33 +67,42 @@ const bgColors = [
   'bg-pink-500/15 text-pink-600 dark:bg-pink-400/20 dark:text-pink-400'
 ]
 
-function getBgColorIndex(fullName: string) {
-  if (!fullName) return 0
+defineClientPayload({ bgColors })
+</script>
+<script client>
+const avatarSrc = useReactiveProp('src', {{ src }})
+const avatarAlt = useReactiveProp('alt', {{ alt }})
+const avatarName = useReactiveProp('name', {{ name }})
+const avatarInitials = useReactiveProp('initials', {{ suppliedInitials }})
+const avatarDescription = derived(() => avatarAlt() || avatarName() || 'Avatar')
+const avatarFallback = derived(() => {
+  if (avatarInitials()) return avatarInitials()
+  const parts = String(avatarName() || '').trim().split(/\s+/).filter(Boolean)
+  if (!parts.length) return ''
+  return (parts.length === 1 ? parts[0].slice(0, 2) : parts[0][0] + parts[parts.length - 1][0]).toUpperCase()
+})
+const avatarColor = derived(() => {
+  const name = String(avatarName() || '')
+  if (!name) return 'bg-black/[0.06] text-neutral-500 dark:bg-white/10 dark:text-neutral-400'
   let hash = 0
-  for (let i = 0; i < fullName.length; i++) {
-    hash = fullName.charCodeAt(i) + ((hash << 5) - hash)
-  }
-  return Math.abs(hash) % bgColors.length
-}
-
-const bgColor = name ? bgColors[getBgColorIndex(name)] : 'bg-black/[0.06] text-neutral-500 dark:bg-white/10 dark:text-neutral-400'
+  for (let i = 0; i < name.length; i++) hash = name.charCodeAt(i) + ((hash << 5) - hash)
+  const colors = bgColors
+  return colors[Math.abs(hash) % colors.length]
+})
 </script>
 <div class="inline-flex relative flex-shrink-0">
-    @if(src)
       <img
+        :if="avatarSrc"
         src="{{ src }}"
+        :src="avatarSrc"
         alt="{{ alt || name || 'Avatar' }}"
+        :alt="avatarDescription"
         class="object-cover {{ sizeClasses[size] }} {{ radiusClasses[rounded] }}"
       >
-    @else
-      <div class="inline-flex items-center justify-center font-medium {{ sizeClasses[size] }} {{ radiusClasses[rounded] }} {{ bgColor }}">
-        @if(initials)
-          <span>{{ initials }}</span>
-        @else
-          <span aria-hidden="true" class="h-1/2 w-1/2 text-neutral-400 i-hugeicons-user"></span>
-        @endif
+      <div :if="!avatarSrc" :class="avatarColor" class="inline-flex items-center justify-center font-medium {{ sizeClasses[size] }} {{ radiusClasses[rounded] }}">
+          <span :if="avatarFallback" :text="avatarFallback">{{ initials }}</span>
+          <span :if="!avatarFallback" aria-hidden="true" class="h-1/2 w-1/2 text-neutral-400 i-hugeicons-user"></span>
       </div>
-    @endif
 
     @if(status)
       <span class="absolute bottom-0 right-0 rounded-full ring-2 ring-white dark:ring-neutral-900 {{ statusColors[status] }} {{ statusSizes[size] }}"></span>