@svgrid/enterprise 3.1.4 → 3.1.5

package/dist/node/studio.js

@@ -2027,6 +2027,181 @@ function scaffoldApp(schemas, options = {}) {
 	return { files };
 }
 //#endregion
+//#region src/studio/sveltekit3.ts
+/** Toolchain SvelteKit 3 requires. Minimums are from the v3 migration guide. */
+var SVELTEKIT_3_DEV_DEPENDENCIES = {
+	"@sveltejs/kit": "^3.0.0",
+	"@sveltejs/vite-plugin-svelte": "^7.0.0",
+	svelte: "^5.57.1",
+	"svelte-check": "^4.7.5",
+	typescript: "^6.0.0",
+	vite: "^8.0.12"
+};
+/**
+* The first major of each adapter whose peerDependency is `@sveltejs/kit ^3`,
+* read from npm on 2026-10-08. None of the v3 adapter behaviour changes (node's
+* ORIGIN, vercel's edge runtime, cloudflare's platform APIs) reach Studio
+* output, so this is a version bump only.
+*/
+var SVELTEKIT_3_ADAPTERS = {
+	"@sveltejs/adapter-auto": "^8.0.0",
+	"@sveltejs/adapter-node": "^6.0.0",
+	"@sveltejs/adapter-vercel": "^7.0.0",
+	"@sveltejs/adapter-netlify": "^7.0.1",
+	"@sveltejs/adapter-cloudflare": "^8.0.0"
+};
+var SOURCE = /\.(ts|js|svelte)$/;
+function toSvelteKit3(files) {
+	const paths = new Set(files.map((f) => f.path));
+	const adapter = adapterOf(files);
+	const envNames = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const file of files) {
+		if (file.path === "svelte.config.js") continue;
+		if (file.path === "package.json") {
+			out.push({
+				...file,
+				contents: packageJson3(file.contents)
+			});
+			continue;
+		}
+		if (file.path === "vite.config.ts") {
+			out.push({
+				...file,
+				description: `Vite config, including SvelteKit (${adapter}).`,
+				contents: viteConfig3(file.contents, adapter)
+			});
+			continue;
+		}
+		if (file.path === "tsconfig.json") {
+			out.push({
+				...file,
+				contents: TSCONFIG_3
+			});
+			continue;
+		}
+		if (SOURCE.test(file.path) && file.path !== "drizzle.config.ts") {
+			const contents = rewriteSource(file.contents, paths, envNames);
+			out.push(contents === file.contents ? file : {
+				...file,
+				contents
+			});
+			continue;
+		}
+		out.push(file);
+	}
+	if (envNames.size) out.push(envModule([...envNames].sort()));
+	return out;
+}
+function adapterOf(files) {
+	const pkg = files.find((f) => f.path === "package.json");
+	if (!pkg) return "@sveltejs/adapter-auto";
+	const dev = JSON.parse(pkg.contents).devDependencies ?? {};
+	return Object.keys(dev).find((k) => k.startsWith("@sveltejs/adapter-")) ?? "@sveltejs/adapter-auto";
+}
+function packageJson3(contents) {
+	const pkg = JSON.parse(contents);
+	const dev = { ...pkg.devDependencies ?? {} };
+	for (const [name, range] of Object.entries(SVELTEKIT_3_DEV_DEPENDENCIES)) dev[name] = range;
+	for (const name of Object.keys(dev)) if (SVELTEKIT_3_ADAPTERS[name]) dev[name] = SVELTEKIT_3_ADAPTERS[name];
+	pkg.devDependencies = dev;
+	pkg.imports = {
+		"#lib": "./src/lib/index.js",
+		"#lib/*": "./src/lib/*"
+	};
+	return JSON.stringify(pkg, null, 2) + "\n";
+}
+/**
+* The v2 vite.config.ts with SvelteKit's config folded into the plugin call.
+* Everything else in the file (the dev-server watch exclusions) is kept.
+*/
+function viteConfig3(v2, adapter) {
+	const imports = `import adapter from '${adapter}'\nimport { vitePreprocess } from '@sveltejs/vite-plugin-svelte'\n`;
+	const withPlugin = v2.replace("sveltekit()", "sveltekit({ preprocess: vitePreprocess(), adapter: adapter() })");
+	if (withPlugin === v2) throw new Error("toSvelteKit3: vite.config.ts has no sveltekit() call to configure");
+	return imports + withPlugin;
+}
+var TSCONFIG_3 = `{
+  "extends": "$app/tsconfig",
+  "compilerOptions": {
+    "sourceMap": true,
+    "strict": true
+  },
+  "include": ["src", "vite.config.ts"]
+}
+`;
+function rewriteSource(src, paths, envNames) {
+	let s = src;
+	s = rewriteLibImports(s, paths);
+	s = rewriteEnv(s, envNames);
+	s = rewriteKitImports(s);
+	s = s.replace(/\{\s*keepFocus:\s*true,\s*noScroll:\s*true\s*\}/g, "{ reset: false }");
+	s = s.replace(/new URLSearchParams\(page\.url\.searchParams\)/g, "new URLSearchParams(page.url.search)");
+	return s;
+}
+/**
+* `$lib/x` -> `#lib/x.js`. Subpath imports need a real extension, and the right
+* one depends on what the file actually is, so each specifier is resolved
+* against the generated paths rather than guessed: `x.ts` and `x.svelte.ts`
+* are imported as `.js` (TypeScript maps it back), anything already carrying
+* its extension (`.svelte`, `.js`) is left as it is, and a directory resolves
+* to its index.
+*/
+function rewriteLibImports(src, paths) {
+	return src.replace(/(['"`])\$lib\/([^'"`]+)\1/g, (whole, q, spec) => {
+		const base = `src/lib/${spec}`;
+		if (paths.has(base)) return `${q}#lib/${spec}${q}`;
+		if (paths.has(`${base}.ts`) || paths.has(`${base}.js`)) return `${q}#lib/${spec}.js${q}`;
+		if (paths.has(`${base}/index.ts`) || paths.has(`${base}/index.js`)) return `${q}#lib/${spec}/index.js${q}`;
+		return `${q}#lib/${spec}.js${q}`;
+	});
+}
+/**
+* `import { env } from '$env/dynamic/private'` + `env.X`
+*   -> `import { X } from '$app/env/private'` + `X`
+* Every name read is collected so src/env.ts can declare it, which v3 requires.
+*/
+function rewriteEnv(src, envNames) {
+	if (!/from\s+['"]\$env\/dynamic\/private['"]/.test(src)) return src;
+	const used = /* @__PURE__ */ new Set();
+	const body = src.replace(/(?<![.\w])env\.([A-Z_][A-Z0-9_]*)/g, (_m, name) => {
+		used.add(name);
+		return name;
+	});
+	for (const n of used) envNames.add(n);
+	const names = [...used].sort();
+	return body.replace(/import\s*\{\s*env\s*\}\s*from\s*(['"])\$env\/dynamic\/private\1/, names.length ? `import { ${names.join(", ")} } from '$app/env/private'` : "");
+}
+/**
+* Types that moved out of `@sveltejs/kit`, and the deprecated `json` helper.
+* `fail`, `redirect` and `error` stay where they are.
+*/
+function rewriteKitImports(src) {
+	let s = src;
+	s = s.replace(/import\s+type\s*\{\s*Handle\s*\}\s*from\s*(['"])@sveltejs\/kit\1/g, `import type { Handle } from '@sveltejs/kit/hooks'`);
+	s = s.replace(/import\s+type\s*\{\s*SubmitFunction\s*\}\s*from\s*(['"])@sveltejs\/kit\1/g, `import type { SubmitFunction } from '$app/forms'`);
+	const kitImport = /import\s*\{([^}]*)\}\s*from\s*(['"])@sveltejs\/kit\2/;
+	const names = (s.match(kitImport)?.[1] ?? "").split(",").map((x) => x.trim());
+	if (names.includes("json")) {
+		s = s.replace(/(?<![.\w])json\(/g, "Response.json(");
+		const rest = names.filter((x) => x && x !== "json");
+		s = s.replace(kitImport, rest.length ? `import { ${rest.join(", ")} } from '@sveltejs/kit'` : "");
+	}
+	return s;
+}
+function envModule(names) {
+	return {
+		path: "src/env.ts",
+		description: "Environment variables the app reads (SvelteKit 3 requires declaring them).",
+		contents: `import { defineEnvVars } from '@sveltejs/kit/env'
+
+// SvelteKit 3 reads only the variables declared here. A missing one comes
+// through as '' - every read in this app already falls back on that
+// (a dev default, '?? ""', or an if), so that is the intended behaviour.
+export const variables = defineEnvVars({\n${names.map((n) => `  ${n}: { schema: (input) => input ?? '' },`).join("\n")}\n})\n`
+	};
+}
+//#endregion
 //#region src/expressions/parse.ts
 /** Every column id referenced anywhere in a predicate (deduped, in order). */
 function collectColumnRefs(expr) {
@@ -8888,14 +9063,14 @@ var GENERATED_UI_SURFACE = {
 				"key": "columnVirtualization",
 				"label": "Column Virtualization",
 				"type": "boolean",
-				"description": "Render only the columns in view, the horizontal counterpart of `virtualization`. **On by default**, which is what makes a 100-column grid scroll smoothly. It recycles column DOM nodes, so it cannot coexist with sticky pinned columns - turn it off if you need pinning to survive horizontal scrolling.",
+				"description": "Render only the columns in view, the horizontal counterpart of `virtualization`. **On by default**, which is what makes a 100-column grid scroll smoothly. Pinned columns stay rendered while it is on: the pinned-left and pinned-right columns are drawn as their own runs either side of the virtual window, so a wide grid with pinned edges still renders only the columns in view plus the pinned ones.",
 				"group": "common"
 			},
 			{
 				"key": "columnOverscan",
 				"label": "Column Overscan",
 				"type": "number",
-				"description": "Extra columns rendered either side of the viewport when `columnVirtualization` is on. Defaults to 3.",
+				"description": "Columns kept rendered beyond the viewport when `columnVirtualization` is on: this many ahead of a horizontal scroll at all times, one behind it. The rendered columns move three at a time, so right after a move up to `columnOverscan + 2` are rendered ahead. Defaults to 3.",
 				"group": "common"
 			},
 			{
@@ -8909,7 +9084,7 @@ var GENERATED_UI_SURFACE = {
 				"key": "initialColumnPinning",
 				"label": "Initial Column Pinning",
 				"type": "json",
-				"description": "Columns pinned to the left/right edge on mount. Each entry is a column id (matches `ColumnDef.field` when no explicit id is set). The internal pinning state is seeded once at mount; user-driven pinning via the column menu still works and overrides this default. Requires `columnVirtualization={false}` to be visible in the menu UI (sticky positioning can't co-exist with column virtualization since the virtualizer recycles DOM nodes).",
+				"description": "Columns pinned to the left/right edge on mount. Each entry is a column id (matches `ColumnDef.field` when no explicit id is set). The internal pinning state is seeded once at mount; user-driven pinning via the column menu still works and overrides this default. Works with column virtualization on (the default).",
 				"group": "common"
 			},
 			{
@@ -9187,7 +9362,7 @@ var GENERATED_UI_SURFACE = {
 				"key": "conditionalFormats",
 				"label": "Conditional Formats",
 				"type": "json",
-				"description": "Excel-style conditional formatting. A list of value-driven rules that color cells: `colorScale` (gradient across the column range), `dataBar` (in-cell proportional bar), `iconSet` (arrows / traffic / triangles by threshold), and `rule` (apply a style when a predicate matches). Scope a format to specific columns with `columns: [...]`, or omit it to apply to every column. Later entries win on conflict.",
+				"description": "Excel-style conditional formatting. A list of value-driven rules that color cells: `colorScale` (gradient across the column range), `dataBar` (in-cell proportional bar), `iconSet` (arrows / traffic / triangles by threshold), and `rule` (apply a style when a predicate matches). Scope a format to specific columns with `columns: [...]`, or omit it to apply to every column. Later entries win on conflict. `colorScale` and `dataBar` apply to data rows only: group, footer and grand-total rows carry subtotals on a different scale, so they keep the `rule` and `iconSet` formats and drop the scaled ones. On a server row model, give scaled formats `minValue` / `maxValue`; the grid does not scan rows it has not loaded for a range.",
 				"group": "common"
 			},
 			{
@@ -9311,6 +9486,14 @@ var GENERATED_UI_SURFACE = {
 				"description": "Merged cells: rectangles drawn as one cell, a spreadsheet's Merge & Center. Each entry is the top-left cell (display indices) and how many rows and columns it covers. The origin's td takes the span and shows the origin's value; the covered cells are not drawn, a selection grows to whole merges, the active cell inside a merge is its origin, and the arrow keys step over a merge as one cell. A merge that crosses the frozen boundary or the rendered window is drawn in parts, one per band. The grid does not write into covered cells on its own; a consumer that merges cells keeps them empty or marks them read-only through the column's `editable`.",
 				"group": "common"
 			},
+			{
+				"key": "rowLayout",
+				"label": "Row Layout",
+				"type": "select",
+				"options": ["flex", "table"],
+				"description": "How rows are laid out. `'flex'` (the default) draws each row as a line of fixed-width cells, so adding or removing cells in one row - what a horizontal scroll does every frame - lays out that row only. `'table'` uses the HTML table algorithm, which re-lays every row on such a change but can draw a merged cell spanning rows; the grid switches to it on its own when `mergedCells` has one.",
+				"group": "common"
+			},
 			{
 				"key": "pinnedBottomRows",
 				"label": "Pinned Bottom Rows",
@@ -12115,13 +12298,14 @@ function ssrScreenShape(project, screen) {
 function ssrEligible(project, screen) {
 	return ssrScreenShape(project, screen) !== null;
 }
-/** Set a screen's render mode ('spa' clears back to the default). */
+/** Set a screen's render mode. Both modes are stored: a screen switched to
+*  'spa' stays client-rendered even where `withSsrDefaults` would turn it on. */
 function setScreenRenderMode(project, screenId, mode) {
 	return {
 		...project,
 		screens: project.screens.map((s) => s.id === screenId ? {
 			...s,
-			renderMode: mode === "ssr" ? "ssr" : void 0
+			renderMode: mode
 		} : s)
 	};
 }
@@ -12130,19 +12314,23 @@ function isSsrScreen(project, screen) {
 	return screenRenderMode(project, screen) === "ssr" && ssrEligible(project, screen);
 }
 /**
-* Turn server rendering on for every screen that can support it, for entities
-* backed by a real database. Applied when a project is first generated, so a new
-* app reads as idiomatic SvelteKit (a `load` and form `actions`) rather than a
-* client SPA. Screens that already state a mode are left alone, so this never
-* overrides a choice somebody made.
+* Turn server rendering on for every screen that can support it. Applied when a
+* project is first generated, so a new app reads as idiomatic SvelteKit (a
+* `load` and form `actions`) rather than a client SPA. Screens that already
+* state a mode are left alone, so this never overrides a choice somebody made.
 *
-* Deliberately limited to sources that hold one copy of the data. In-memory and
-* PGlite sources are module singletons, so an SSR screen would read and write the
-* *server's* copy of the rows while the app's remaining SPA screens read the
-* browser's - create a row on one and the other never sees it. SQL and REST have
-* no such split: every path goes to the same database or the same remote API.
+* Limited to sources that hold one copy of the data. SQL and REST always did:
+* every path goes to the same database or the same remote API. In-memory rows
+* are held once on the server ($lib/server/store) and every screen reaches them
+* through the entity's /api route, so an SSR screen and an SPA screen see the
+* same rows. PGlite lives in the browser's IndexedDB, which the server cannot
+* read, so it stays client-rendered.
 */
-var SSR_DEFAULT_KINDS = /* @__PURE__ */ new Set(["sql", "rest"]);
+var SSR_DEFAULT_KINDS = /* @__PURE__ */ new Set([
+	"sql",
+	"rest",
+	"memory"
+]);
 function withSsrDefaults(project) {
 	return {
 		...project,
@@ -14170,6 +14358,18 @@ function setDataSource(project, dataSource) {
 	};
 }
 /** Set the deploy target (SvelteKit adapter + provider config the bundle emits). */
+/** Target a SvelteKit major. 2 is the default and is stored as the field's
+*  absence, the same way `deploy: 'auto'` is. */
+function setKitVersion(project, kit) {
+	if (kit === 2) {
+		const { kit: _drop, ...rest } = project;
+		return rest;
+	}
+	return {
+		...project,
+		kit: 3
+	};
+}
 function setDeployTarget(project, deploy) {
 	if (deploy === "auto") {
 		const { deploy: _drop, ...rest } = project;
@@ -14458,6 +14658,7 @@ function parseProject(json) {
 		...typeof p.audit === "boolean" ? { audit: p.audit } : {},
 		...p.i18n && typeof p.i18n === "object" ? { i18n: p.i18n } : {},
 		...typeof p.deploy === "string" && p.deploy !== "auto" ? { deploy: p.deploy } : {},
+		...p.kit === 3 ? { kit: 3 } : {},
 		...p.triggers && typeof p.triggers === "object" ? { triggers: p.triggers } : {}
 	});
 }
@@ -15287,35 +15488,18 @@ var SQL_DRIVERS = {
 		exec: `const rs = await client.execute({ sql: text, args: params })\n    return rs.rows as unknown as Record<string, unknown>[]`
 	}
 };
-/** A fully-connected SvelteKit API route for a SQL-bound entity. When RBAC is on,
-*  the route imports the shared access policy and rejects unauthorized writes -
-*  server-enforced, so a tampered client can't bypass it. When audit is on, every
-*  successful write is recorded. */
 function sqlRouteFile(schema, table, dialect, feat = {}) {
 	const n = namesFor(schema);
 	const driver = SQL_DRIVERS[dialect === "supabase" ? "postgres" : dialect ?? "postgres"];
 	const dialectLiteral = sqlDialectExpr(dialect);
-	const accessImport = feat.access ? `\nimport { authorizeAction, getServerRole } from '$lib/access'` : "";
-	const auditImport = feat.audit ? `\nimport { recordAudit } from '$lib/audit'` : "";
-	const tenantImport = feat.tenantField ? `\nimport { requireTenant } from '$lib/server/tenant'` : "";
-	const opts = [
-		`schema: ${n.schemaVar}`,
-		`source`,
-		`validate: true`
-	];
-	if (feat.access) opts.push(`// Server-enforced RBAC: the caller's role comes from the session (event.locals). Reads\n  // are allowed only if the role can open one of this entity's own screens.\n  authorize: ({ action, event }) => authorizeAction(getServerRole(event), action, ${JSON.stringify(feat.screenIds ?? [])})`);
-	if (feat.tenantField) opts.push(`// Multi-tenancy, enforced server-side: reads are filtered to the caller's tenant,\n  // creates are stamped with it, and update/delete re-read the target under the\n  // scope first - so a guessed id cannot reach another tenant's row.\n  scope: ({ event }) => ({ field: ${JSON.stringify(feat.tenantField)}, value: requireTenant(event) })`);
-	if (feat.audit) opts.push(`// Record every successful write to the audit trail.\n  audit: (e) => recordAudit({ entity: ${JSON.stringify(schema.name)}, action: e.action, recordId: e.id, values: e.values as Record<string, unknown> | undefined, actor: String(e.event.locals?.role ?? e.event.locals?.user ?? 'system') })`);
-	const hooks = triggerHooksOpt(feat.triggers);
-	if (hooks) opts.push(`// Business rules, enforced server-side (a client that skips them still can't write bad data).\n  ${hooks}`);
-	const handlers = `export const { POST } = createKitHandlers({\n  ${opts.join(",\n  ")},\n})`;
+	const { imports, handlers } = kitHandlersBlock(schema, feat);
 	return {
 		path: `src/routes/api/${n.route}/+server.ts`,
 		description: `Connected API route for ${n.label} (SQL via DATABASE_URL). Runs server-side.`,
 		contents: `${driver.imports}
 import { env } from '$env/dynamic/private'
 import { createKitHandlers, createSqlDataSource } from '@svgrid/enterprise'
-import { ${n.schemaVar}, type ${n.type} } from '$lib/schemas'${accessImport}${auditImport}${tenantImport}
+import { ${n.schemaVar}, type ${n.type} } from '$lib/schemas'${imports}
 
 ${driver.setup}
 
@@ -15331,6 +15515,99 @@ ${handlers}
 `
 	};
 }
+/**
+* The API route for an in-memory entity. Same handlers as a SQL route
+* (validation, RBAC, triggers, audit), over the one server-held copy of the
+* rows in `$lib/server/store`. Routing memory through the server like this is
+* what lets its screens render on the server: before, the rows were a module
+* singleton, so a server-rendered screen and a browser-rendered one each held
+* their own copy and never saw each other's writes.
+*/
+function memoryRouteFile(schema, feat = {}) {
+	const n = namesFor(schema);
+	const { imports, handlers } = kitHandlersBlock(schema, feat);
+	return {
+		path: `src/routes/api/${n.route}/+server.ts`,
+		description: `API route for ${n.label} (in-memory rows held on the server). Runs server-side.`,
+		contents: `import { createKitHandlers } from '@svgrid/enterprise'
+import { ${n.schemaVar} } from '$lib/schemas'
+import { ${storeVar(schema)} as source } from '$lib/server/store'${imports}
+
+${handlers}
+`
+	};
+}
+/**
+* `$lib/server/store.ts`: the seeded rows of every in-memory entity, held once
+* per server process. Only server code imports it (the API routes, scheduled
+* jobs), so the seed data stays out of the browser bundle.
+*
+* The server owns new ids. A browser's `nextId()` counter only knows its own
+* tab, so two tabs (or two people) would hand out the same id; a create whose
+* id is missing or already taken gets the next free one here instead.
+*/
+function serverStoreFile(entries) {
+	return {
+		path: "src/lib/server/store.ts",
+		description: "In-memory rows, held once on the server (seeded on start, reset on restart).",
+		contents: `/**
+ * The app's in-memory data, held once per server process and reached from the
+ * browser through each entity's /api route. Seeded on start, reset on restart:
+ * bind an entity to SQL in the Studio to keep its rows.
+ */
+import { createInMemoryDataSource } from '@svgrid/enterprise'
+import type { EntitySchema } from '@svgrid/enterprise'
+import { ${entries.map((e) => namesFor(e.schema).schemaVar).join(", ")}, ${entries.map((e) => `type ${namesFor(e.schema).type}`).join(", ")} } from '$lib/schemas'
+
+/** An in-memory source that assigns a free id when a create brings none, or a
+ *  taken one. \`prefix\` null means the id is numeric (max + 1). */
+function serverHeld<T extends Record<string, unknown>>(rows: T[], schema: EntitySchema<T>, idField: string, prefix: string | null) {
+  const source = createInMemoryDataSource<T>(rows, schema)
+  let seq = rows.length
+  const freeId = (wanted: unknown): string | number => {
+    const taken = new Set(source.rows().map((r) => String(r[idField])))
+    if (wanted != null && wanted !== '' && !taken.has(String(wanted))) return wanted as string | number
+    if (prefix === null) return Math.max(0, ...source.rows().map((r) => Number(r[idField]) || 0)) + 1
+    let id = prefix + ++seq
+    while (taken.has(id)) id = prefix + ++seq
+    return id
+  }
+  return {
+    ...source,
+    createRow: (input: Partial<T>) => source.createRow({ ...input, [idField]: freeId(input[idField]) } as Partial<T>),
+  }
+}
+
+${entries.map(({ schema, rows }) => {
+			const n = namesFor(schema);
+			const idField = resolveIdField(schema);
+			const numeric = schema.fields.find((f) => f.field === idField)?.type === "number";
+			return `export const ${storeVar(schema)} = serverHeld<${n.type}>(${JSON.stringify(rows)}, ${n.schemaVar}, ${JSON.stringify(idField)}, ${numeric ? "null" : JSON.stringify(n.idPrefix)})`;
+		}).join("\n")}
+`
+	};
+}
+/** The `createKitHandlers` call every entity route shares, plus the imports it needs. */
+function kitHandlersBlock(schema, feat) {
+	const accessImport = feat.access ? `\nimport { authorizeAction, getServerRole } from '$lib/access'` : "";
+	const auditImport = feat.audit ? `\nimport { recordAudit } from '$lib/audit'` : "";
+	const tenantImport = feat.tenantField ? `\nimport { requireTenant } from '$lib/server/tenant'` : "";
+	const opts = [
+		`schema: ${namesFor(schema).schemaVar}`,
+		`source`,
+		`validate: true`
+	];
+	if (feat.access) opts.push(`// Server-enforced RBAC: the caller's role comes from the session (event.locals). Reads\n  // are allowed only if the role can open one of this entity's own screens.\n  authorize: ({ action, event }) => authorizeAction(getServerRole(event), action, ${JSON.stringify(feat.screenIds ?? [])})`);
+	if (feat.tenantField) opts.push(`// Multi-tenancy, enforced server-side: reads are filtered to the caller's tenant,\n  // creates are stamped with it, and update/delete re-read the target under the\n  // scope first - so a guessed id cannot reach another tenant's row.\n  scope: ({ event }) => ({ field: ${JSON.stringify(feat.tenantField)}, value: requireTenant(event) })`);
+	if (feat.audit) opts.push(`// Record every successful write to the audit trail.\n  audit: (e) => recordAudit({ entity: ${JSON.stringify(schema.name)}, action: e.action, recordId: e.id, values: e.values as Record<string, unknown> | undefined, actor: String(e.event.locals?.role ?? e.event.locals?.user ?? 'system') })`);
+	const hooks = triggerHooksOpt(feat.triggers);
+	if (hooks) opts.push(`// Business rules, enforced server-side (a client that skips them still can't write bad data).\n  ${hooks}`);
+	const handlers = `export const { POST } = createKitHandlers({\n  ${opts.join(",\n  ")},\n})`;
+	return {
+		imports: `${accessImport}${auditImport}${tenantImport}`,
+		handlers
+	};
+}
 /** Map an EntityField type to a Postgres column type for PGlite DDL. */
 var PG_COL_TYPE = {
 	number: "double precision",
@@ -15469,7 +15746,7 @@ function sqlDdlFiles(schemas, sources) {
 		contents: header("Sample seed rows (optional)") + inserts.join("\n\n") + "\n"
 	}] : []];
 }
-function dataModule(entries, seed, sources, supabaseConn) {
+function dataModule(entries, seed, sources, supabaseConn, serverMemory = false) {
 	const schemas = entries.map((e) => e.schema);
 	const typeImports = schemas.map((s) => `type ${pascal(s.name)}`).join(", ");
 	const schemaImports = schemas.map((s) => namesFor(s).schemaVar).join(", ");
@@ -15477,7 +15754,8 @@ function dataModule(entries, seed, sources, supabaseConn) {
 	const entImports = /* @__PURE__ */ new Set();
 	const needs = {
 		supabase: false,
-		sqlRoutes: []
+		sqlRoutes: [],
+		memoryRoutes: []
 	};
 	const stores = entries.map((e) => {
 		const T = pascal(e.schema.name);
@@ -15517,9 +15795,17 @@ function dataModule(entries, seed, sources, supabaseConn) {
 				});
 				return `const ${store} = createSqlDataSource<${T}>({ schema: ${sv}, table: ${sq(src.table)}, dialect: { placeholders: '$', ilike: true }, execute: async (text, params) => { await pgReady; return (await pg.query(text, params)).rows as Record<string, unknown>[] } })`;
 			default: {
+				const rowList = (src.kind === "memory" ? src.seed : void 0) ?? seed.get(e.schema.name) ?? [];
+				if (serverMemory) {
+					entImports.add("createKitDataSource");
+					needs.memoryRoutes.push({
+						schema: e.schema,
+						rows: rowList
+					});
+					return `const ${store} = createKitDataSource<${T}>({ endpoint: '/api/${namesFor(e.schema).route}' })`;
+				}
 				entImports.add("createInMemoryDataSource");
-				const curated = src.kind === "memory" ? src.seed : void 0;
-				return `const ${store} = createInMemoryDataSource<${T}>(${JSON.stringify(curated ?? seed.get(e.schema.name) ?? [])}, ${sv})`;
+				return `const ${store} = createInMemoryDataSource<${T}>(${JSON.stringify(rowList)}, ${sv})`;
 			}
 		}
 	}).join("\n");
@@ -15983,7 +16269,7 @@ function prepareEntities(schemas) {
 /** Emit the shared entity modules: `src/lib/schemas.ts` + `src/lib/data.ts` (+ `connections.ts`). */
 function emitEntityModules(schemas, opts = {}) {
 	const { entries, seed } = prepareEntities(schemas);
-	const { file: data, needs } = dataModule(entries, seed, opts.sources, opts.supabaseConn);
+	const { file: data, needs } = dataModule(entries, seed, opts.sources, opts.supabaseConn, opts.serverMemory);
 	const files = [schemasModule(entries), data];
 	if ((needs.supabase || opts.supabaseAuth) && !needs.supabaseUrl && (opts.supabaseConn?.url || opts.supabaseConn?.key)) {
 		needs.supabaseUrl = opts.supabaseConn.url;
@@ -15998,6 +16284,16 @@ function emitEntityModules(schemas, opts = {}) {
 		dbSchema: r.dbSchema,
 		tenantField: opts.tenantField && opts.tenantScoped?.(r.schema.name) !== false ? opts.tenantField : void 0
 	}));
+	if (needs.memoryRoutes.length) {
+		files.push(serverStoreFile(needs.memoryRoutes));
+		for (const r of needs.memoryRoutes) files.push(memoryRouteFile(r.schema, {
+			access: opts.accessEnabled,
+			audit: opts.auditEnabled,
+			screenIds: opts.screensByEntity?.get(r.schema.name) ?? [],
+			triggers: opts.triggers?.[r.schema.name],
+			tenantField: opts.tenantField && opts.tenantScoped?.(r.schema.name) !== false ? opts.tenantField : void 0
+		}));
+	}
 	return {
 		files,
 		prepared: entries.map((e) => e.schema)
@@ -16045,7 +16341,7 @@ function hasFieldConditions(schema) {
 *
 * `version.test.ts` asserts this matches `package.json`, so the two cannot drift.
 */
-var SVGRID_VERSION = "3.1.4";
+var SVGRID_VERSION = "3.1.5";
 /**
 * The version of `@svgrid/grid`, which releases on its own line: enterprise is
 * on 3.1.x while the grid is on 3.0.x.
@@ -16058,7 +16354,7 @@ var SVGRID_VERSION = "3.1.4";
 *
 * `version.test.ts` asserts this matches packages/grid/package.json.
 */
-var GRID_VERSION = "3.0.8";
+var GRID_VERSION = "3.0.9";
 //#endregion
 //#region src/studio/emit-project.ts
 var has = (blocks, kind) => blocks.some((b) => b.config.kind === kind);
@@ -18048,27 +18344,28 @@ function screenChildEntities(blocks, resolve) {
 	}
 	return [...out.values()];
 }
-function ssrReadServerFile(schema, screen, sourceKind, accessEnabled, screenIds, resolve) {
-	const n = namesFor(schema);
-	const isSql = sourceKind === "sql";
+function ssrReadServerFile(schema, screen, routed, accessEnabled, screenIds, resolve) {
 	const children = screenChildEntities(screen.blocks, resolve);
-	const rbac = accessEnabled && !isSql;
-	const srcExpr = (s) => isSql ? `createKitDataSource<Record<string, unknown>>({ endpoint: ${jsStr("/api/" + namesFor(s).route)}, fetch })` : namesFor(s).sourceVar;
-	const memImports = isSql ? [] : [.../* @__PURE__ */ new Set([n.sourceVar, ...children.map((c) => namesFor(c).sourceVar)])];
+	const viaRoute = routed(schema.name);
+	const rbac = accessEnabled && !viaRoute;
+	const srcExpr = (s) => routed(s.name) ? `createKitDataSource<Record<string, unknown>>({ endpoint: ${jsStr("/api/" + namesFor(s).route)}, fetch })` : namesFor(s).sourceVar;
+	const all = [schema, ...children];
+	const anyRouted = all.some((s) => routed(s.name));
+	const dataImports = [...new Set(all.filter((s) => !routed(s.name)).map((s) => namesFor(s).sourceVar))];
 	const childLoads = children.map((c) => `  const ${mdChildVar(c.name)} = (await ${srcExpr(c)}.getRows(PAGE)).rows`).join("\n");
 	return {
 		path: `src/routes/${screen.route}/+page.server.ts`,
 		description: `${screen.title} - SSR load (full dataset${children.length ? " + child collections" : ""}).`,
 		contents: `import type { PageServerLoad } from './$types'
 import type { ServerRequest } from '@svgrid/grid'
-${isSql ? "import { createKitDataSource } from '@svgrid/enterprise'\n" : ""}${rbac ? "import { error } from '@sveltejs/kit'\nimport { authorizeAction, getServerRole } from '$lib/access'\n" : ""}${memImports.length ? `import { ${memImports.join(", ")} } from '$lib/data'\n` : ""}
+${anyRouted ? "import { createKitDataSource } from '@svgrid/enterprise'\n" : ""}${rbac ? "import { error } from '@sveltejs/kit'\nimport { authorizeAction, getServerRole } from '$lib/access'\n" : ""}${dataImports.length ? `import { ${dataImports.join(", ")} } from '$lib/data'\n` : ""}
 // This screen renders on the server: real SSR HTML, not just a server-side
 // load. Stated explicitly so it holds whichever way the root layout is set.
 export const ssr = true
 ${rbac ? `\nconst SCREEN_IDS = ${JSON.stringify(screenIds)}\n` : ""}
 const PAGE: ServerRequest = { startRow: 0, endRow: 1000, pageIndex: 0, pageSize: 1000, sortModel: [], filterModel: {} }
 
-export const load: PageServerLoad = async (${isSql || rbac ? `{ ${[isSql ? "fetch" : "", rbac ? "locals" : ""].filter(Boolean).join(", ")} }` : ""}) => {
+export const load: PageServerLoad = async (${anyRouted || rbac ? `{ ${[anyRouted ? "fetch" : "", rbac ? "locals" : ""].filter(Boolean).join(", ")} }` : ""}) => {
 ${rbac ? `  if (!authorizeAction(getServerRole({ locals }), 'read', SCREEN_IDS)) throw error(403, 'Not allowed')\n` : ""}  const rows = (await ${srcExpr(schema)}.getRows(PAGE)).rows
 ${childLoads ? childLoads + "\n" : ""}  return { rows${children.map((c) => `, ${mdChildVar(c.name)}`).join("")} }
 }
@@ -18135,10 +18432,9 @@ function attrs(f) {
 	return out.length ? " " + out.join(" ") : "";
 }
 /** The `+page.server.ts` + SSR `+page.svelte` for a single-grid CRUD screen. */
-function emitSsrGridScreen(schema, screen, sourceKind, accessEnabled, screenIds, byName) {
+function emitSsrGridScreen(schema, screen, routed, accessEnabled, screenIds, byName) {
 	const n = namesFor(schema);
-	const isSql = sourceKind === "sql";
-	const isRest = sourceKind === "rest";
+	const isSql = routed(schema.name);
 	const relSchemaOf = (f) => byName.get(f.relation.entity);
 	const relIdOf = (rs) => rs.idField ?? rs.fields.find((x) => x.primaryKey)?.field ?? "id";
 	const grid = screen.blocks.find((b) => b.config.kind === "grid").config;
@@ -18153,30 +18449,32 @@ function emitSsrGridScreen(schema, screen, sourceKind, accessEnabled, screenIds,
 	const fieldTypesLit = `{ ${formFields.map((f) => `${jsStr(f.field)}: ${jsStr(normType(f.type))}`).join(", ")} }`;
 	const isRel = (f) => f.type === "relation" && !!f.relation && byName.has(f.relation.entity);
 	const relFields = formFields.filter(isRel);
-	const relSourceVars = isSql ? [] : [...new Set(relFields.map((f) => namesFor(relSchemaOf(f)).sourceVar))];
+	const relRouted = relFields.some((f) => routed(relSchemaOf(f).name));
+	const relSourceVars = [...new Set(relFields.filter((f) => !routed(relSchemaOf(f).name)).map((f) => namesFor(relSchemaOf(f)).sourceVar))];
 	const relPrefetch = relFields.map((f) => {
 		const rs = relSchemaOf(f);
 		const rel = namesFor(rs);
 		const relId = relIdOf(rs);
 		const labelF = f.relation.labelField ?? relId;
-		const relSource = isSql ? `createKitDataSource<Record<string, unknown>>({ endpoint: ${jsStr("/api/" + rel.route)}, fetch })` : rel.sourceVar;
+		const relSource = routed(rs.name) ? `createKitDataSource<Record<string, unknown>>({ endpoint: ${jsStr("/api/" + rel.route)}, fetch })` : rel.sourceVar;
 		return `  const ${f.field}Options = (await ${relSource}.getRows({ startRow: 0, endRow: 100, pageIndex: 0, pageSize: 100, sortModel: [], filterModel: {} })).rows.map((r: Record<string, unknown>) => ({ value: String(r[${jsStr(relId)}] ?? ''), label: String(r[${jsStr(labelF)}] ?? '') }))`;
 	}).join("\n");
 	const relReturn = relFields.map((f) => `, ${f.field}Options`).join("");
 	const src = isSql ? "source(fetch)" : n.sourceVar;
 	const fetchArg = isSql ? ", fetch" : "";
+	const loadFetchArg = isSql || relRouted ? ", fetch" : "";
 	const conditional = hasFieldConditions(schema);
 	const readValues = (fd) => conditional ? `stripHiddenValues(${n.schemaVar}, formToValues(${fd}))` : `formToValues(${fd})`;
 	const enterpriseImports = [
 		"validateAll",
 		...conditional ? ["stripHiddenValues"] : [],
-		...isSql ? ["createKitDataSource"] : []
+		...isSql || relRouted ? ["createKitDataSource"] : []
 	].join(", ");
-	const sourceImport = isSql ? "" : `import { ${[.../* @__PURE__ */ new Set([n.sourceVar, ...relSourceVars]), ...isRest ? [] : ["nextId"]].join(", ")} } from '$lib/data'\n`;
+	const dataImports = [.../* @__PURE__ */ new Set([...isSql ? [] : [n.sourceVar], ...relSourceVars])];
+	const sourceImport = dataImports.length ? `import { ${dataImports.join(", ")} } from '$lib/data'\n` : "";
 	const schemaImport = `import { ${n.schemaVar}${isSql ? `, type ${n.type}` : ""} } from '$lib/schemas'`;
-	const idConst = isSql || isRest ? "" : `\nconst ID_FIELD = ${jsStr(idField)}`;
 	const srcHelper = isSql ? `\n// Same-origin client over the connected /api/${n.route} route (that route runs\n// validation, RBAC, triggers + audit via createKitHandlers).\nconst source = (fetch: typeof globalThis.fetch) => createKitDataSource<${n.type}>({ endpoint: ${jsStr("/api/" + n.route)}, fetch })\n` : "";
-	const createCall = isSql || isRest ? `await ${src}.createRow(values)` : `await ${n.sourceVar}.createRow({ [ID_FIELD]: nextId(${jsStr(n.idPrefix)}), ...values })`;
+	const createCall = `await ${src}.createRow(values)`;
 	const rbac = accessEnabled && !isSql;
 	const localsArg = rbac ? ", locals" : "";
 	const readGuard = rbac ? `    if (!authorizeAction(getServerRole({ locals }), 'read', SCREEN_IDS)) throw error(403, 'Not allowed')\n` : "";
@@ -18190,7 +18488,7 @@ import { planFromSearchParams } from '$lib/server/query'
 // This screen renders on the server: real SSR HTML, not just a server-side
 // load. Stated explicitly so it holds whichever way the root layout is set.
 export const ssr = true
-${idConst}${rbac ? `\nconst SCREEN_IDS = ${JSON.stringify(screenIds)}` : ""}
+${rbac ? `\nconst SCREEN_IDS = ${JSON.stringify(screenIds)}` : ""}
 const FIELD_TYPES: Record<string, 'text' | 'number' | 'boolean'> = ${fieldTypesLit}
 ${srcHelper}
 /** Read a submitted form into a typed partial row. Booleans come from checkbox
@@ -18206,7 +18504,7 @@ function formToValues(fd: FormData): Record<string, unknown> {
   return values
 }
 
-export const load: PageServerLoad = async ({ url${fetchArg}${localsArg} }) => {
+export const load: PageServerLoad = async ({ url${loadFetchArg}${localsArg} }) => {
 ${readGuard}  const plan = planFromSearchParams(url, ${pageSize})
   const { rows, rowCount } = await ${src}.getRows(plan)
 ${relPrefetch ? relPrefetch + "\n" : ""}  return { rows, total: rowCount, page: plan.pageIndex, size: plan.pageSize, sort: plan.sortModel${relReturn} }
@@ -18390,14 +18688,26 @@ ${g.title ? `          <legend>${htmlEsc(g.title)}</legend>\n` : ""}${inner}
     const q = sp.toString()
     void goto(q ? \`?\${q}\` : page.url.pathname, { keepFocus: true, noScroll: true })
   }
+
+  // Only a sort the URL does not already hold navigates. Grid releases before
+  // the mount-report fix also reported the starting sort when they mounted,
+  // and acting on that would drop ?page on every load.
+  function onSort(s: Array<{ id: string; desc: boolean }>) {
+    const sort = s.map((x) => \`\${x.id}:\${x.desc ? 'desc' : 'asc'}\`).join(',')
+    if (sort !== (page.url.searchParams.get('sort') ?? '')) setParams({ sort: sort || null, page: null })
+  }
 ${wantsFilter ? `
   // Filter via the URL (q = global search, f_<col> = per-column). The server's
   // planFromSearchParams reads these, so load() re-filters; reset to the first page.
   function applyFilters(f: { global: string; columns: Array<{ id: string; value: string }> }) {
     const sp = new URLSearchParams(page.url.searchParams)
+    const filterParams = (p: URLSearchParams) => [...p].filter(([k]) => k === 'q' || k.startsWith('f_')).sort().join('&')
+    const before = filterParams(sp)
     for (const k of [...sp.keys()]) if (k === 'q' || k.startsWith('f_')) sp.delete(k)
     if (f.global) sp.set('q', f.global)
     for (const c of f.columns) if (c.value) sp.set('f_' + c.id, c.value)
+    // Nothing changed (older grid releases report the starting filters on mount).
+    if (filterParams(sp) === before) return
     sp.delete('page')
     const q = sp.toString()
     void goto(q ? \`?\${q}\` : page.url.pathname, { keepFocus: true, noScroll: true })
@@ -18431,12 +18741,13 @@ ${facetForm}
   {columns}
   externalSort
   initialSorting={data.sort}
+  showPagination
   externalPagination${wantsFilter ? "\n  filterable\n  externalFilter\n  onFiltersChange={applyFilters}" : ""}
   rowCount={data.total}
   pageIndex={data.page}
   pageSize={data.size}
-  onSortingChange={(s) => setParams({ sort: s.map((x) => \`\${x.id}:\${x.desc ? 'desc' : 'asc'}\`).join(',') || null, page: null })}
-  onPaginationChange={(p) => setParams({ page: String(p.pageIndex), size: String(p.pageSize) })}
+  onSortingChange={onSort}
+  onPaginationChange={(p) => { if (p.pageIndex !== data.page || p.pageSize !== data.size) setParams({ page: String(p.pageIndex), size: String(p.pageSize) }) }}
 />
 
 {#if editing}
@@ -18502,7 +18813,8 @@ function emitStudioProject(project) {
 	const sources = Object.fromEntries(project.entities.map((e) => [e.name, entityDataSource(project, e.name)]));
 	const accessEnabled = project.access?.enabled === true && (project.access?.roles.length ?? 0) > 0;
 	const authEnabled = project.auth?.enabled === true;
-	const auditEnabled = project.audit === true && Object.values(sources).some((s) => s.kind === "sql");
+	const routed = (entity) => sources[entity]?.kind === "sql" || sources[entity]?.kind === "memory";
+	const auditEnabled = project.audit === true && project.entities.some((e) => routed(e.name));
 	const i18nEnabled = project.i18n?.enabled === true && (project.i18n?.locales.length ?? 0) > 0;
 	const screensByEntity = /* @__PURE__ */ new Map();
 	for (const s of project.screens) {
@@ -18519,7 +18831,8 @@ function emitStudioProject(project) {
 		supabaseConn: project.supabase,
 		supabaseAuth: project.auth?.enabled === true && project.auth.provider === "supabase",
 		tenantField: tenantCol,
-		tenantScoped: (name) => isTenantScoped(project, name)
+		tenantScoped: (name) => isTenantScoped(project, name),
+		serverMemory: true
 	});
 	const byName = new Map(prepared.map((s) => [s.name, s]));
 	const rawByName = new Map(project.entities.map((e) => [e.name, e]));
@@ -18549,10 +18862,8 @@ function emitStudioProject(project) {
 		const schema = byName.get(screen.entity);
 		if (!schema) throw new Error(`emitStudioProject: screen "${screen.title}" references missing entity "${screen.entity}"`);
 		if (isSsrScreen(project, screen)) {
-			const kind = sources[screen.entity]?.kind;
-			const srcKind = kind === "sql" ? "sql" : kind === "rest" ? "rest" : "memory";
-			if (ssrScreenShape(project, screen) === "grid") pages.push(...emitSsrGridScreen(schema, screen, srcKind, accessEnabled, screensByEntity.get(screen.entity) ?? [], byName));
-			else pages.push(ssrReadServerFile(schema, screen, srcKind, accessEnabled, screensByEntity.get(screen.entity) ?? [], resolve), screenPage(schema, rawByName.get(screen.entity) ?? schema, screen, resolve, (name) => rawByName.get(name), accessEnabled, i18nEnabled, routeById, drillEnabled, true));
+			if (ssrScreenShape(project, screen) === "grid") pages.push(...emitSsrGridScreen(schema, screen, routed, accessEnabled, screensByEntity.get(screen.entity) ?? [], byName));
+			else pages.push(ssrReadServerFile(schema, screen, routed, accessEnabled, screensByEntity.get(screen.entity) ?? [], resolve), screenPage(schema, rawByName.get(screen.entity) ?? schema, screen, resolve, (name) => rawByName.get(name), accessEnabled, i18nEnabled, routeById, drillEnabled, true));
 			continue;
 		}
 		pages.push(screenPage(schema, rawByName.get(screen.entity) ?? schema, screen, resolve, (name) => rawByName.get(name), accessEnabled, i18nEnabled, routeById, drillEnabled, false, sources[screen.entity]));
@@ -18912,6 +19223,8 @@ export function requireTenant(event: TenantEvent): string {
 * route checks `CRON_SECRET` and runs the due handlers.
 */
 function jobsFiles(project, jobs, emailAvailable) {
+	const isServerHeld = (ent) => entityDataSource(project, ent.name).kind === "memory";
+	const jobSourceVar = (ent) => isServerHeld(ent) ? storeVar(ent) : namesFor(ent).sourceVar;
 	const handler = (j) => {
 		const label = jsStr(j.name);
 		if (j.kind === "email") {
@@ -18922,9 +19235,8 @@ function jobsFiles(project, jobs, emailAvailable) {
 				const why = !emailAvailable ? "email is not enabled on this project" : !j.to ? "no recipient set" : `unknown entity ${j.entity}`;
 				return `  ${JSON.stringify(j.id)}: async () => {\n    // ${label}: cannot send - ${why}.\n    console.warn('cron ${j.id}: skipped (${why})')\n  },`;
 			}
-			const n = namesFor(ent);
 			return `  ${JSON.stringify(j.id)}: async () => {
-    const { rows, rowCount } = await ${n.sourceVar}.getRows({ startRow: 0, endRow: 10, sortModel: [], filterModel: {} })
+    const { rows, rowCount } = await ${jobSourceVar(ent)}.getRows({ startRow: 0, endRow: 10, sortModel: [], filterModel: {} })
     const items = rows.map((r) => '<li>' + Object.values(r).slice(0, 3).map(String).join(' &middot; ') + '</li>').join('')
     await sendEmail(${to}, ${subject}, '<p>' + rowCount + ' ${ent.name} total. Most recent:</p><ul>' + items + '</ul>')
   },`;
@@ -18933,19 +19245,26 @@ function jobsFiles(project, jobs, emailAvailable) {
 		return `  ${JSON.stringify(j.id)}: async () => {\n${body.split("\n").map((l) => "    " + l).join("\n")}\n  },`;
 	};
 	const entityImports = /* @__PURE__ */ new Set();
+	const storeImports = /* @__PURE__ */ new Set();
 	for (const j of jobs) {
 		if (j.kind !== "email") continue;
 		const ent = project.entities.find((e) => e.name === j.entity);
-		if (ent && emailAvailable && j.to) entityImports.add(namesFor(ent).sourceVar);
+		if (!ent || !emailAvailable || !j.to) continue;
+		if (isServerHeld(ent)) storeImports.add(jobSourceVar(ent));
+		else entityImports.add(jobSourceVar(ent));
 	}
-	const imports = [...entityImports.size ? [`import { ${[...entityImports].sort().join(", ")} } from '$lib/data'`] : [], ...jobs.some((j) => j.kind === "email") && emailAvailable ? [`import { sendEmail } from '$lib/server/email'`] : []];
+	const imports = [
+		...entityImports.size ? [`import { ${[...entityImports].sort().join(", ")} } from '$lib/data'`] : [],
+		...storeImports.size ? [`import { ${[...storeImports].sort().join(", ")} } from '$lib/server/store'`] : [],
+		...jobs.some((j) => j.kind === "email") && emailAvailable ? [`import { sendEmail } from '$lib/server/email'`] : []
+	];
 	return [{
 		path: "src/lib/server/jobs.ts",
 		description: "Scheduled job handlers, keyed by job id.",
 		contents: `// Regenerated by SvGrid Studio. Scheduled job handlers.
 //
 // Schedule (UTC):
-${jobs.map((j) => ` *   ${j.id.padEnd(20)} ${j.cron.padEnd(16)} ${j.name}`).join("\n")}
+${jobs.map((j) => `//   ${j.id.padEnd(20)} ${j.cron.padEnd(16)} ${j.name}`).join("\n")}
 //
 // Runs on the server, triggered by /api/cron - NOT in the browser. Edit a
 // handler body freely; the registry keys are what /api/cron dispatches on.
@@ -20548,8 +20867,8 @@ function rootLayoutModule(project) {
 	const anySsr = project.screens.some((s) => isSsrScreen(project, s));
 	return {
 		path: "src/routes/+layout.ts",
-		description: anySsr ? "Root layout options (SSR on; client-only screens opt out per page)." : "Client SPA (in-memory sources persist across navigation).",
-		contents: anySsr ? `// Server rendering stays on (SvelteKit's default). Screens that have to run in\n// the browser - anything on an in-memory source, or a shape that can't render on\n// the server - opt out in their own +page.ts.\nexport const prerender = false\n` : `// In-memory sources are module singletons, so render as a client SPA. Move an\n// entity to SQL / Supabase and its /api route still runs server-side.\nexport const ssr = false\nexport const prerender = false\n`
+		description: anySsr ? "Root layout options (SSR on; client-only screens opt out per page)." : "Client SPA (no screen renders on the server).",
+		contents: anySsr ? `// Server rendering stays on (SvelteKit's default). Screens that have to run in\n// the browser - a shape that can't render on the server, or a source the server\n// can't reach - opt out in their own +page.ts.\nexport const prerender = false\n` : `// No screen here renders on the server, so the app runs as a client SPA.\nexport const ssr = false\nexport const prerender = false\n`
 	};
 }
 /** The static SvelteKit + Vite scaffolding around the generated screens. */
@@ -21099,7 +21418,7 @@ function emitStudioAppBundle(project) {
 	const plan = deployPlan(project);
 	const deploySteps = plan.dashboard ? `1. Push this folder to a Git repo (GitHub / GitLab / Bitbucket).\n2. Import it at <${plan.dashboard}> - build settings are detected automatically.\n\nOr deploy straight from your machine with the CLI:\n\n\`\`\`bash\n${plan.cli}\n\`\`\`` : `Build and run the server:\n\n\`\`\`bash\n${plan.cli}\n\`\`\``;
 	const readme = `# ${project.title}\n\nGenerated with SvGrid Studio.\n\n\`\`\`bash\nnpm install\nnpm run dev\n\`\`\`\n\nSQL / Supabase entities read their connection from \`.env\` (\`DATABASE_URL\`) or\n\`src/lib/connections.ts\`. Everything else runs on seeded in-memory data.\n\n## Deploy (${plan.label})\n\nThis app is configured for **${plan.label}** (SvelteKit \`${plan.adapterModule}\`).\n\n${deploySteps}\n\nTo target a different host, pick another **Deploy target** in the designer and\nre-generate, or swap the adapter in \`svelte.config.js\`. Entities on **Local\ndatabase** (PGlite) or **In-memory** need no server env; SQL / Supabase entities\nneed their connection set in the host's environment variables.\n\n## Round-tripping back into the designer\n\nThis app ships its own design model in \`studio.config.json\`. To keep editing\nvisually, open the SvGrid Studio designer and **Load** that file - your entities,\nscreens, blocks, theme, RBAC, i18n, etc. come back exactly as generated, and you\ncan re-generate from there.\n\nThe designer regenerates the files under \`src/routes\` and \`src/lib\` from the\nmodel, so **keep your own custom code in new files/modules and import it**, rather\nthan editing the generated screens in place - that way a re-generate never\nclobbers your work. (The CLI workflow, \`npx @svgrid/studio add\`, is the\nalternative: it wraps generated code in \`svgrid:managed\` markers and preserves\nanything you write outside them.)\n`;
-	return [...[
+	const bundle = [...[
 		{
 			path: "package.json",
 			description: "Dependencies + scripts (npm install, npm run dev).",
@@ -21173,6 +21492,7 @@ function emitStudioAppBundle(project) {
 			})
 		}
 	], ...generated];
+	return project.kit === 3 ? toSvelteKit3(bundle) : bundle;
 }
 /**
 * Emit ONLY the app content (`src/routes` + `src/lib` + `db`) to drop into an
@@ -33241,7 +33561,7 @@ var restaurant = {
 					order: 2
 				}, {
 					startField: "reservationTime",
-					titleField: "name",
+					titleField: "customerPhone",
 					colorField: "status",
 					resourceField: "tableId",
 					initialView: "day"
@@ -41501,7 +41821,7 @@ async function runStudioInit(flags, prompts, db, io, fetchText = null) {
 	const title = flags.yes || flags.title ? defaultTitle : (await prompts.ask("\nApp name:", defaultTitle)).trim() || defaultTitle;
 	const outDir = flags.out ?? (flags.yes ? "." : (await prompts.ask("Write it where?", ".")).trim() || ".");
 	await confirmTargetFolder(outDir, flags, prompts, io, outDir === candidateDir ? markersBefore : null);
-	const project = crudAppFromSchemas(data.schemas, {
+	const built = crudAppFromSchemas(data.schemas, {
 		title,
 		dataSource: data.kind,
 		sources: data.sources,
@@ -41510,6 +41830,7 @@ async function runStudioInit(flags, prompts, db, io, fetchText = null) {
 		overviewDashboard: true,
 		...theme ? { theme } : {}
 	});
+	const project = flags.kit === 3 ? setKitVersion(built, 3) : built;
 	const written = await writeAll(emitStudioAppBundle(project), outDir, io);
 	const configPath = inDir(outDir, "studio.config.json");
 	await io.writeFile(configPath, serializeProject(project));
@@ -41967,4 +42288,4 @@ function checkLicenseKey(key, now = /* @__PURE__ */ new Date()) {
 	};
 }
 //#endregion
-export { CANVAS_COLS, CANVAS_GAP_PX, CANVAS_ROW_PX, CONTAINER_CHILD_KINDS, CONTAINER_DISPLAY_KINDS, CRUD_ACTIONS, DEFAULT_PORT, DRIVER_PACKAGE, FORM_SUBMIT, GRID_API_MEMBERS, GRID_CURATED_PROPS, GRID_EVENTS, GRID_PRESETS, MANAGED_END, MANAGED_START, ON_LOAD, PANE_LAYOUTS, STANDARD_UI_EVENTS, TAB_CHILD_KINDS, TRIGGER_EVENTS, UI_COMPONENT_REGISTRY, UserError, addAccordionBlock, addAccordionComponent, addAccordionSection, addBlock, addBlockAt, addComponentBlock, addCrudSuite, addEntity, addFormSection, addFreestandingScreen, addHandlerStep, addScreen, addScreenAction, addScreenFromTemplate, addStateVar, addTab, addTabBlock, addTabComponent, applyGridPreset, blockClassName, blockColumns, blockPalette, blockStyleCss, buildCanvasLayout, buildConnectionString, buildCopilotMessages, buildDockLayout, buildStudioBugReport, canvasOpts, canvasRectOf, changeSlot, checkLicenseKey, clickSlot, compileCondition, compileHandlerSteps, compileStep, compileTriggerStep, compileTriggerSteps, compileValue, componentHandleMembers, componentHandleName, componentHasBindings, countTableRows, createProject, crudAppFromSchemas, crudSuiteScreens, csvToEntity, ctxAmbientDts, ctxCompletions, dashScreen, defaultBlockConfig, defaultEntitySource, defaultScreenFor, defaultStudioTheme, deployCommands, detailScreen, detectDelimiter, disableScreenCode, dockOpts, dockPaneIds, dockPaneTitleOf, duplicateBlock, duplicateScreen, emitEntityModules, emitStudioApp, emitStudioAppBundle, emitStudioFragment, emitStudioProject, enableScreenCode, entityDataSource, entityOf, entityScreenPage, eventSlot, flattenBlocks, formControlSettings, formControlsFor, formPlan, formScreen, generateRows, generateValue, getLiveDataSample, getSampleApp, getStarterDataset, getStudioTheme, gridApiSettableProps, gridColumns, gridConfig, gridIconGroups, gridOpts, gridPresetLabel, gridPropSurface, inferType, insertBlock, introspectDatabase, introspectDrizzle, introspectDrizzleAll, introspectJson, introspectOpenApi, introspectPrisma, introspectPrismaAll, isDarkTheme, isFieldHidden, isFileDialect, isPaneLayout, isProjectValid, isTenantScoped, isUserError, linkRelationLabels, listDatabaseTables, listScreen, liveDataSamples, mapSqlType, mergeBlockStyle, mergeManaged, missingEnvKeys, moveBlock, moveFormField, moveFormFields, moveFormSection, moveHandlerStep, parseConnectionString, parseCsv, parseProject, parseSelection, pickLabelField, prepareEntities, probeConnection, projectFromModelText, reconcileDock, redactConnectionString, refineField, refineFields, removeAccordionBlock, removeAccordionSection, removeBlock, removeEntity, removeFormSection, removeScreen, removeScreenAction, removeStateVar, removeTab, removeTabBlock, renameAccordionSection, renameTab, reorderBlock, reorderScreen, reseedScreenDock, resolveDeployTarget, resolveIdField, resolveSchema, resolveSchemas, resolveThemeTokens, resolveThemeTokensFor, roleCanAction, roleCanScreen, rowSelectSlot, runStudioAdd, runStudioAddApp, runStudioInit, runtimeDeps, sampleApps, sanitizeClassName, sanitizeProject, sanitizeStudioProject, scaffold, scaffoldApp, schemaToColumns, schemaToFormFields, screenDataset, screenFromTemplate, screenHandles, screenLayoutOf, seedUsers, serializeProject, setAccordionMultiple, setAuth, setCanvasRect, setComponentBinding, setComponentName, setDataLayer, setDataSource, setDeployTarget, setDockPaneTitle, setEntityDataSource, setEntityForm, setFieldConditions, setFieldHidden, setFieldInput, setFormColumns, setHandlerBody, setHandlerSteps, setJob, setLayoutOpts, setScreenDock, setScreenHandlersSource, setScreenLayout, setScreenRenderGrid, setScreenRenderMode, setShell, setTenancy, setTheme, setThemePreset, setTrigger, skipUserOwned, splitOpts, ssrEligible, ssrScreenShape, stackOpts, starterDatasets, starterProject, stateInitExpr, stateTsType, statusPills, stepsToCode, studioDeployInfo, studioThemes, suggestFormSections, summarizeVerify, syncDockPanes, tenantField, themeStyleString, triggersOf, uiComponentSpec, updateBlock, updateEntity, updateEntityField, updateFormSection, updateHandlerStep, updateScreen, updateStateVar, validateProject, verifyScaffold, withSsrDefaults };
+export { CANVAS_COLS, CANVAS_GAP_PX, CANVAS_ROW_PX, CONTAINER_CHILD_KINDS, CONTAINER_DISPLAY_KINDS, CRUD_ACTIONS, DEFAULT_PORT, DRIVER_PACKAGE, FORM_SUBMIT, GRID_API_MEMBERS, GRID_CURATED_PROPS, GRID_EVENTS, GRID_PRESETS, MANAGED_END, MANAGED_START, ON_LOAD, PANE_LAYOUTS, STANDARD_UI_EVENTS, SVELTEKIT_3_ADAPTERS, SVELTEKIT_3_DEV_DEPENDENCIES, TAB_CHILD_KINDS, TRIGGER_EVENTS, UI_COMPONENT_REGISTRY, UserError, addAccordionBlock, addAccordionComponent, addAccordionSection, addBlock, addBlockAt, addComponentBlock, addCrudSuite, addEntity, addFormSection, addFreestandingScreen, addHandlerStep, addScreen, addScreenAction, addScreenFromTemplate, addStateVar, addTab, addTabBlock, addTabComponent, applyGridPreset, blockClassName, blockColumns, blockPalette, blockStyleCss, buildCanvasLayout, buildConnectionString, buildCopilotMessages, buildDockLayout, buildStudioBugReport, canvasOpts, canvasRectOf, changeSlot, checkLicenseKey, clickSlot, compileCondition, compileHandlerSteps, compileStep, compileTriggerStep, compileTriggerSteps, compileValue, componentHandleMembers, componentHandleName, componentHasBindings, countTableRows, createProject, crudAppFromSchemas, crudSuiteScreens, csvToEntity, ctxAmbientDts, ctxCompletions, dashScreen, defaultBlockConfig, defaultEntitySource, defaultScreenFor, defaultStudioTheme, deployCommands, detailScreen, detectDelimiter, disableScreenCode, dockOpts, dockPaneIds, dockPaneTitleOf, duplicateBlock, duplicateScreen, emitEntityModules, emitStudioApp, emitStudioAppBundle, emitStudioFragment, emitStudioProject, enableScreenCode, entityDataSource, entityOf, entityScreenPage, eventSlot, flattenBlocks, formControlSettings, formControlsFor, formPlan, formScreen, generateRows, generateValue, getLiveDataSample, getSampleApp, getStarterDataset, getStudioTheme, gridApiSettableProps, gridColumns, gridConfig, gridIconGroups, gridOpts, gridPresetLabel, gridPropSurface, inferType, insertBlock, introspectDatabase, introspectDrizzle, introspectDrizzleAll, introspectJson, introspectOpenApi, introspectPrisma, introspectPrismaAll, isDarkTheme, isFieldHidden, isFileDialect, isPaneLayout, isProjectValid, isTenantScoped, isUserError, linkRelationLabels, listDatabaseTables, listScreen, liveDataSamples, mapSqlType, mergeBlockStyle, mergeManaged, missingEnvKeys, moveBlock, moveFormField, moveFormFields, moveFormSection, moveHandlerStep, parseConnectionString, parseCsv, parseProject, parseSelection, pickLabelField, prepareEntities, probeConnection, projectFromModelText, reconcileDock, redactConnectionString, refineField, refineFields, removeAccordionBlock, removeAccordionSection, removeBlock, removeEntity, removeFormSection, removeScreen, removeScreenAction, removeStateVar, removeTab, removeTabBlock, renameAccordionSection, renameTab, reorderBlock, reorderScreen, reseedScreenDock, resolveDeployTarget, resolveIdField, resolveSchema, resolveSchemas, resolveThemeTokens, resolveThemeTokensFor, roleCanAction, roleCanScreen, rowSelectSlot, runStudioAdd, runStudioAddApp, runStudioInit, runtimeDeps, sampleApps, sanitizeClassName, sanitizeProject, sanitizeStudioProject, scaffold, scaffoldApp, schemaToColumns, schemaToFormFields, screenDataset, screenFromTemplate, screenHandles, screenLayoutOf, seedUsers, serializeProject, setAccordionMultiple, setAuth, setCanvasRect, setComponentBinding, setComponentName, setDataLayer, setDataSource, setDeployTarget, setDockPaneTitle, setEntityDataSource, setEntityForm, setFieldConditions, setFieldHidden, setFieldInput, setFormColumns, setHandlerBody, setHandlerSteps, setJob, setKitVersion, setLayoutOpts, setScreenDock, setScreenHandlersSource, setScreenLayout, setScreenRenderGrid, setScreenRenderMode, setShell, setTenancy, setTheme, setThemePreset, setTrigger, skipUserOwned, splitOpts, ssrEligible, ssrScreenShape, stackOpts, starterDatasets, starterProject, stateInitExpr, stateTsType, statusPills, stepsToCode, studioDeployInfo, studioThemes, suggestFormSections, summarizeVerify, syncDockPanes, tenantField, themeStyleString, toSvelteKit3, triggersOf, uiComponentSpec, updateBlock, updateEntity, updateEntityField, updateFormSection, updateHandlerStep, updateScreen, updateStateVar, validateProject, verifyScaffold, withSsrDefaults };