@typicalday/firegraph 0.4.0 → 0.6.0

package/dist/editor/server/index.mjs

@@ -1295,8 +1295,8 @@ var require_node = __commonJS({
           }
           break;
         case "FILE":
-          var fs2 = __require("fs");
-          stream2 = new fs2.SyncWriteStream(fd2, { autoClose: false });
+          var fs3 = __require("fs");
+          stream2 = new fs3.SyncWriteStream(fd2, { autoClose: false });
           stream2._type = "fs";
           break;
         case "PIPE":
@@ -14083,11 +14083,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path4) {
-      if (!path4 || typeof path4 !== "string") {
+    function lookup(path5) {
+      if (!path5 || typeof path5 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path4).toLowerCase().substr(1);
+      var extension2 = extname("x." + path5).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -17602,7 +17602,7 @@ var require_path_to_regexp = __commonJS({
   "editor/node_modules/.pnpm/path-to-regexp@0.1.12/node_modules/path-to-regexp/index.js"(exports, module) {
     module.exports = pathToRegexp;
     var MATCHING_GROUP_REGEXP = /\\.|\((?:\?<(.*?)>)?(?!\?)/g;
-    function pathToRegexp(path4, keys, options) {
+    function pathToRegexp(path5, keys, options) {
       options = options || {};
       keys = keys || [];
       var strict = options.strict;
@@ -17616,8 +17616,8 @@ var require_path_to_regexp = __commonJS({
       var pos = 0;
       var backtrack = "";
       var m;
-      if (path4 instanceof RegExp) {
-        while (m = MATCHING_GROUP_REGEXP.exec(path4.source)) {
+      if (path5 instanceof RegExp) {
+        while (m = MATCHING_GROUP_REGEXP.exec(path5.source)) {
           if (m[0][0] === "\\") continue;
           keys.push({
             name: m[1] || name++,
@@ -17625,18 +17625,18 @@ var require_path_to_regexp = __commonJS({
             offset: m.index
           });
         }
-        return path4;
+        return path5;
       }
-      if (Array.isArray(path4)) {
-        path4 = path4.map(function(value) {
+      if (Array.isArray(path5)) {
+        path5 = path5.map(function(value) {
           return pathToRegexp(value, keys, options).source;
         });
-        return new RegExp(path4.join("|"), flags);
+        return new RegExp(path5.join("|"), flags);
       }
-      if (typeof path4 !== "string") {
+      if (typeof path5 !== "string") {
         throw new TypeError("path must be a string, array of strings, or regular expression");
       }
-      path4 = path4.replace(
+      path5 = path5.replace(
         /\\.|(\/)?(\.)?:(\w+)(\(.*?\))?(\*)?(\?)?|[.*]|\/\(/g,
         function(match, slash, format, key, capture, star, optional2, offset) {
           if (match[0] === "\\") {
@@ -17653,7 +17653,7 @@ var require_path_to_regexp = __commonJS({
           if (slash || format) {
             backtrack = "";
           } else {
-            backtrack += path4.slice(pos, offset);
+            backtrack += path5.slice(pos, offset);
           }
           pos = offset + match.length;
           if (match === "*") {
@@ -17681,7 +17681,7 @@ var require_path_to_regexp = __commonJS({
           return result;
         }
       );
-      while (m = MATCHING_GROUP_REGEXP.exec(path4)) {
+      while (m = MATCHING_GROUP_REGEXP.exec(path5)) {
         if (m[0][0] === "\\") continue;
         if (keysOffset + i === keys.length || keys[keysOffset + i].offset > m.index) {
           keys.splice(keysOffset + i, 0, {
@@ -17693,13 +17693,13 @@ var require_path_to_regexp = __commonJS({
         }
         i++;
       }
-      path4 += strict ? "" : path4[path4.length - 1] === "/" ? "?" : "/?";
+      path5 += strict ? "" : path5[path5.length - 1] === "/" ? "?" : "/?";
       if (end) {
-        path4 += "$";
-      } else if (path4[path4.length - 1] !== "/") {
-        path4 += lookahead ? "(?=/|$)" : "(?:/|$)";
+        path5 += "$";
+      } else if (path5[path5.length - 1] !== "/") {
+        path5 += lookahead ? "(?=/|$)" : "(?:/|$)";
       }
-      return new RegExp("^" + path4, flags);
+      return new RegExp("^" + path5, flags);
     }
   }
 });
@@ -17712,19 +17712,19 @@ var require_layer = __commonJS({
     var debug = require_src()("express:router:layer");
     var hasOwnProperty = Object.prototype.hasOwnProperty;
     module.exports = Layer;
-    function Layer(path4, options, fn) {
+    function Layer(path5, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path4, options, fn);
+        return new Layer(path5, options, fn);
       }
-      debug("new %o", path4);
+      debug("new %o", path5);
       var opts = options || {};
       this.handle = fn;
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.regexp = pathRegexp(path4, this.keys = [], opts);
-      this.regexp.fast_star = path4 === "*";
-      this.regexp.fast_slash = path4 === "/" && opts.end === false;
+      this.regexp = pathRegexp(path5, this.keys = [], opts);
+      this.regexp.fast_star = path5 === "*";
+      this.regexp.fast_slash = path5 === "/" && opts.end === false;
     }
     Layer.prototype.handle_error = function handle_error(error48, req, res, next) {
       var fn = this.handle;
@@ -17748,20 +17748,20 @@ var require_layer = __commonJS({
         next(err);
       }
     };
-    Layer.prototype.match = function match(path4) {
+    Layer.prototype.match = function match(path5) {
       var match2;
-      if (path4 != null) {
+      if (path5 != null) {
         if (this.regexp.fast_slash) {
           this.params = {};
           this.path = "";
           return true;
         }
         if (this.regexp.fast_star) {
-          this.params = { "0": decode_param(path4) };
-          this.path = path4;
+          this.params = { "0": decode_param(path5) };
+          this.path = path5;
           return true;
         }
-        match2 = this.regexp.exec(path4);
+        match2 = this.regexp.exec(path5);
       }
       if (!match2) {
         this.params = void 0;
@@ -17854,10 +17854,10 @@ var require_route = __commonJS({
     var slice = Array.prototype.slice;
     var toString = Object.prototype.toString;
     module.exports = Route;
-    function Route(path4) {
-      this.path = path4;
+    function Route(path5) {
+      this.path = path5;
       this.stack = [];
-      debug("new %o", path4);
+      debug("new %o", path5);
       this.methods = {};
     }
     Route.prototype._handles_method = function _handles_method(method) {
@@ -18069,8 +18069,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        var path4 = getPathname(req);
-        if (path4 == null) {
+        var path5 = getPathname(req);
+        if (path5 == null) {
           return done(layerError);
         }
         var layer;
@@ -18078,7 +18078,7 @@ var require_router = __commonJS({
         var route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path4);
+          match = matchLayer(layer, path5);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -18116,18 +18116,18 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handle_request(req, res, next);
           } else {
-            trim_prefix(layer, layerError, layerPath, path4);
+            trim_prefix(layer, layerError, layerPath, path5);
           }
           sync = 0;
         });
       }
-      function trim_prefix(layer, layerError, layerPath, path4) {
+      function trim_prefix(layer, layerError, layerPath, path5) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path4.slice(0, layerPath.length)) {
+          if (layerPath !== path5.slice(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          var c = path4[layerPath.length];
+          var c = path5[layerPath.length];
           if (c && c !== "/" && c !== ".") return next(layerError);
           debug("trim prefix (%s) from url %s", layerPath, req.url);
           removed = layerPath;
@@ -18205,7 +18205,7 @@ var require_router = __commonJS({
     };
     proto.use = function use(fn) {
       var offset = 0;
-      var path4 = "/";
+      var path5 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -18213,7 +18213,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path4 = fn;
+          path5 = fn;
         }
       }
       var callbacks = flatten(slice.call(arguments, offset));
@@ -18225,8 +18225,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("Router.use() requires a middleware function but got a " + gettype(fn));
         }
-        debug("use %o %s", path4, fn.name || "<anonymous>");
-        var layer = new Layer(path4, {
+        debug("use %o %s", path5, fn.name || "<anonymous>");
+        var layer = new Layer(path5, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -18236,9 +18236,9 @@ var require_router = __commonJS({
       }
       return this;
     };
-    proto.route = function route(path4) {
-      var route2 = new Route(path4);
-      var layer = new Layer(path4, {
+    proto.route = function route(path5) {
+      var route2 = new Route(path5);
+      var layer = new Layer(path5, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -18248,8 +18248,8 @@ var require_router = __commonJS({
       return route2;
     };
     methods.concat("all").forEach(function(method) {
-      proto[method] = function(path4) {
-        var route = this.route(path4);
+      proto[method] = function(path5) {
+        var route = this.route(path5);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -18285,9 +18285,9 @@ var require_router = __commonJS({
       }
       return toString.call(obj).replace(objectRegExp, "$1");
     }
-    function matchLayer(layer, path4) {
+    function matchLayer(layer, path5) {
       try {
-        return layer.match(path4);
+        return layer.match(path5);
       } catch (err) {
         return err;
       }
@@ -18405,13 +18405,13 @@ var require_view = __commonJS({
   "editor/node_modules/.pnpm/express@4.22.1/node_modules/express/lib/view.js"(exports, module) {
     "use strict";
     var debug = require_src()("express:view");
-    var path4 = __require("path");
-    var fs2 = __require("fs");
-    var dirname = path4.dirname;
-    var basename = path4.basename;
-    var extname = path4.extname;
-    var join3 = path4.join;
-    var resolve2 = path4.resolve;
+    var path5 = __require("path");
+    var fs3 = __require("fs");
+    var dirname = path5.dirname;
+    var basename = path5.basename;
+    var extname = path5.extname;
+    var join3 = path5.join;
+    var resolve2 = path5.resolve;
     module.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -18440,17 +18440,17 @@ var require_view = __commonJS({
       this.path = this.lookup(fileName);
     }
     View.prototype.lookup = function lookup(name) {
-      var path5;
+      var path6;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name);
-      for (var i = 0; i < roots.length && !path5; i++) {
+      for (var i = 0; i < roots.length && !path6; i++) {
         var root = roots[i];
         var loc = resolve2(root, name);
         var dir = dirname(loc);
         var file2 = basename(loc);
-        path5 = this.resolve(dir, file2);
+        path6 = this.resolve(dir, file2);
       }
-      return path5;
+      return path6;
     };
     View.prototype.render = function render(options, callback) {
       debug('render "%s"', this.path);
@@ -18458,21 +18458,21 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve3(dir, file2) {
       var ext = this.ext;
-      var path5 = join3(dir, file2);
-      var stat = tryStat(path5);
+      var path6 = join3(dir, file2);
+      var stat = tryStat(path6);
       if (stat && stat.isFile()) {
-        return path5;
+        return path6;
       }
-      path5 = join3(dir, basename(file2, ext), "index" + ext);
-      stat = tryStat(path5);
+      path6 = join3(dir, basename(file2, ext), "index" + ext);
+      stat = tryStat(path6);
       if (stat && stat.isFile()) {
-        return path5;
+        return path6;
       }
     };
-    function tryStat(path5) {
-      debug('stat "%s"', path5);
+    function tryStat(path6) {
+      debug('stat "%s"', path6);
       try {
-        return fs2.statSync(path5);
+        return fs3.statSync(path6);
       } catch (e) {
         return void 0;
       }
@@ -18826,8 +18826,8 @@ var require_types = __commonJS({
 // editor/node_modules/.pnpm/mime@1.6.0/node_modules/mime/mime.js
 var require_mime = __commonJS({
   "editor/node_modules/.pnpm/mime@1.6.0/node_modules/mime/mime.js"(exports, module) {
-    var path4 = __require("path");
-    var fs2 = __require("fs");
+    var path5 = __require("path");
+    var fs3 = __require("fs");
     function Mime() {
       this.types = /* @__PURE__ */ Object.create(null);
       this.extensions = /* @__PURE__ */ Object.create(null);
@@ -18848,7 +18848,7 @@ var require_mime = __commonJS({
     };
     Mime.prototype.load = function(file2) {
       this._loading = file2;
-      var map2 = {}, content = fs2.readFileSync(file2, "ascii"), lines = content.split(/[\r\n]+/);
+      var map2 = {}, content = fs3.readFileSync(file2, "ascii"), lines = content.split(/[\r\n]+/);
       lines.forEach(function(line) {
         var fields = line.replace(/\s*#.*|^\s*|\s*$/g, "").split(/\s+/);
         map2[fields.shift()] = fields;
@@ -18856,8 +18856,8 @@ var require_mime = __commonJS({
       this.define(map2);
       this._loading = null;
     };
-    Mime.prototype.lookup = function(path5, fallback) {
-      var ext = path5.replace(/^.*[\.\/\\]/, "").toLowerCase();
+    Mime.prototype.lookup = function(path6, fallback) {
+      var ext = path6.replace(/^.*[\.\/\\]/, "").toLowerCase();
       return this.types[ext] || fallback || this.default_type;
     };
     Mime.prototype.extension = function(mimeType) {
@@ -19086,33 +19086,33 @@ var require_send = __commonJS({
     var escapeHtml = require_escape_html();
     var etag = require_etag();
     var fresh = require_fresh();
-    var fs2 = __require("fs");
+    var fs3 = __require("fs");
     var mime = require_mime();
     var ms = require_ms2();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path4 = __require("path");
+    var path5 = __require("path");
     var statuses = require_statuses();
     var Stream = __require("stream");
     var util = __require("util");
-    var extname = path4.extname;
-    var join3 = path4.join;
-    var normalize = path4.normalize;
-    var resolve2 = path4.resolve;
-    var sep = path4.sep;
+    var extname = path5.extname;
+    var join3 = path5.join;
+    var normalize = path5.normalize;
+    var resolve2 = path5.resolve;
+    var sep = path5.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module.exports = send;
     module.exports.mime = mime;
-    function send(req, path5, options) {
-      return new SendStream(req, path5, options);
+    function send(req, path6, options) {
+      return new SendStream(req, path6, options);
     }
-    function SendStream(req, path5, options) {
+    function SendStream(req, path6, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path5;
+      this.path = path6;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -19158,8 +19158,8 @@ var require_send = __commonJS({
       this._index = index2;
       return this;
     }, "send.index: pass index as option");
-    SendStream.prototype.root = function root(path5) {
-      this._root = resolve2(String(path5));
+    SendStream.prototype.root = function root(path6) {
+      this._root = resolve2(String(path6));
       debug("root %s", this._root);
       return this;
     };
@@ -19272,10 +19272,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     };
-    SendStream.prototype.redirect = function redirect(path5) {
+    SendStream.prototype.redirect = function redirect(path6) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path5);
+        this.emit("directory", res, path6);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -19295,42 +19295,42 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = function pipe2(res) {
       var root = this._root;
       this.res = res;
-      var path5 = decode3(this.path);
-      if (path5 === -1) {
+      var path6 = decode3(this.path);
+      if (path6 === -1) {
         this.error(400);
         return res;
       }
-      if (~path5.indexOf("\0")) {
+      if (~path6.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path5) {
-          path5 = normalize("." + sep + path5);
+        if (path6) {
+          path6 = normalize("." + sep + path6);
         }
-        if (UP_PATH_REGEXP.test(path5)) {
-          debug('malicious path "%s"', path5);
+        if (UP_PATH_REGEXP.test(path6)) {
+          debug('malicious path "%s"', path6);
           this.error(403);
           return res;
         }
-        parts = path5.split(sep);
-        path5 = normalize(join3(root, path5));
+        parts = path6.split(sep);
+        path6 = normalize(join3(root, path6));
       } else {
-        if (UP_PATH_REGEXP.test(path5)) {
-          debug('malicious path "%s"', path5);
+        if (UP_PATH_REGEXP.test(path6)) {
+          debug('malicious path "%s"', path6);
           this.error(403);
           return res;
         }
-        parts = normalize(path5).split(sep);
-        path5 = resolve2(path5);
+        parts = normalize(path6).split(sep);
+        path6 = resolve2(path6);
       }
       if (containsDotFile(parts)) {
         var access = this._dotfiles;
         if (access === void 0) {
           access = parts[parts.length - 1][0] === "." ? this._hidden ? "allow" : "ignore" : "allow";
         }
-        debug('%s dotfile "%s"', access, path5);
+        debug('%s dotfile "%s"', access, path6);
         switch (access) {
           case "allow":
             break;
@@ -19344,13 +19344,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path5);
+        this.sendIndex(path6);
         return res;
       }
-      this.sendFile(path5);
+      this.sendFile(path6);
       return res;
     };
-    SendStream.prototype.send = function send2(path5, stat) {
+    SendStream.prototype.send = function send2(path6, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -19362,9 +19362,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path5);
-      this.setHeader(path5, stat);
-      this.type(path5);
+      debug('pipe "%s"', path6);
+      this.setHeader(path6, stat);
+      this.type(path6);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -19413,28 +19413,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path5, opts);
+      this.stream(path6, opts);
     };
-    SendStream.prototype.sendFile = function sendFile(path5) {
+    SendStream.prototype.sendFile = function sendFile(path6) {
       var i = 0;
       var self = this;
-      debug('stat "%s"', path5);
-      fs2.stat(path5, function onstat(err, stat) {
-        if (err && err.code === "ENOENT" && !extname(path5) && path5[path5.length - 1] !== sep) {
+      debug('stat "%s"', path6);
+      fs3.stat(path6, function onstat(err, stat) {
+        if (err && err.code === "ENOENT" && !extname(path6) && path6[path6.length - 1] !== sep) {
           return next(err);
         }
         if (err) return self.onStatError(err);
-        if (stat.isDirectory()) return self.redirect(path5);
-        self.emit("file", path5, stat);
-        self.send(path5, stat);
+        if (stat.isDirectory()) return self.redirect(path6);
+        self.emit("file", path6, stat);
+        self.send(path6, stat);
       });
       function next(err) {
         if (self._extensions.length <= i) {
           return err ? self.onStatError(err) : self.error(404);
         }
-        var p = path5 + "." + self._extensions[i++];
+        var p = path6 + "." + self._extensions[i++];
         debug('stat "%s"', p);
-        fs2.stat(p, function(err2, stat) {
+        fs3.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self.emit("file", p, stat);
@@ -19442,7 +19442,7 @@ var require_send = __commonJS({
         });
       }
     };
-    SendStream.prototype.sendIndex = function sendIndex(path5) {
+    SendStream.prototype.sendIndex = function sendIndex(path6) {
       var i = -1;
       var self = this;
       function next(err) {
@@ -19450,9 +19450,9 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join3(path5, self._index[i]);
+        var p = join3(path6, self._index[i]);
         debug('stat "%s"', p);
-        fs2.stat(p, function(err2, stat) {
+        fs3.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self.emit("file", p, stat);
@@ -19461,10 +19461,10 @@ var require_send = __commonJS({
       }
       next();
     };
-    SendStream.prototype.stream = function stream(path5, options) {
+    SendStream.prototype.stream = function stream(path6, options) {
       var self = this;
       var res = this.res;
-      var stream2 = fs2.createReadStream(path5, options);
+      var stream2 = fs3.createReadStream(path6, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup2() {
@@ -19479,10 +19479,10 @@ var require_send = __commonJS({
         self.emit("end");
       });
     };
-    SendStream.prototype.type = function type(path5) {
+    SendStream.prototype.type = function type(path6) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var type2 = mime.lookup(path5);
+      var type2 = mime.lookup(path6);
       if (!type2) {
         debug("no content-type");
         return;
@@ -19491,9 +19491,9 @@ var require_send = __commonJS({
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2 + (charset ? "; charset=" + charset : ""));
     };
-    SendStream.prototype.setHeader = function setHeader(path5, stat) {
+    SendStream.prototype.setHeader = function setHeader(path6, stat) {
       var res = this.res;
-      this.emit("headers", res, path5, stat);
+      this.emit("headers", res, path6, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -19552,9 +19552,9 @@ var require_send = __commonJS({
       }
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
-    function decode3(path5) {
+    function decode3(path6) {
       try {
-        return decodeURIComponent(path5);
+        return decodeURIComponent(path6);
       } catch (err) {
         return -1;
       }
@@ -20463,10 +20463,10 @@ var require_utils2 = __commonJS({
     var querystring = __require("querystring");
     exports.etag = createETagGenerator({ weak: false });
     exports.wetag = createETagGenerator({ weak: true });
-    exports.isAbsolute = function(path4) {
-      if ("/" === path4[0]) return true;
-      if (":" === path4[1] && ("\\" === path4[2] || "/" === path4[2])) return true;
-      if ("\\\\" === path4.substring(0, 2)) return true;
+    exports.isAbsolute = function(path5) {
+      if ("/" === path5[0]) return true;
+      if (":" === path5[1] && ("\\" === path5[2] || "/" === path5[2])) return true;
+      if ("\\\\" === path5.substring(0, 2)) return true;
     };
     exports.flatten = deprecate.function(
       flatten,
@@ -20677,7 +20677,7 @@ var require_application = __commonJS({
     };
     app2.use = function use(fn) {
       var offset = 0;
-      var path4 = "/";
+      var path5 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -20685,7 +20685,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path4 = fn;
+          path5 = fn;
         }
       }
       var fns = flatten(slice.call(arguments, offset));
@@ -20696,12 +20696,12 @@ var require_application = __commonJS({
       var router = this._router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path4, fn2);
+          return router.use(path5, fn2);
         }
-        debug(".use app under %s", path4);
-        fn2.mountpath = path4;
+        debug(".use app under %s", path5);
+        fn2.mountpath = path5;
         fn2.parent = this;
-        router.use(path4, function mounted_app(req, res, next) {
+        router.use(path5, function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             setPrototypeOf(req, orig.request);
@@ -20713,9 +20713,9 @@ var require_application = __commonJS({
       }, this);
       return this;
     };
-    app2.route = function route(path4) {
+    app2.route = function route(path5) {
       this.lazyrouter();
-      return this._router.route(path4);
+      return this._router.route(path5);
     };
     app2.engine = function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -20766,7 +20766,7 @@ var require_application = __commonJS({
       }
       return this;
     };
-    app2.path = function path4() {
+    app2.path = function path5() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     };
     app2.enabled = function enabled(setting) {
@@ -20782,19 +20782,19 @@ var require_application = __commonJS({
       return this.set(setting, false);
     };
     methods.forEach(function(method) {
-      app2[method] = function(path4) {
+      app2[method] = function(path5) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path4);
+          return this.set(path5);
         }
         this.lazyrouter();
-        var route = this._router.route(path4);
+        var route = this._router.route(path5);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app2.all = function all(path4) {
+    app2.all = function all(path5) {
       this.lazyrouter();
-      var route = this._router.route(path4);
+      var route = this._router.route(path5);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -21553,7 +21553,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP(hostname3) ? hostname3.split(".").reverse() : [hostname3];
       return subdomains2.slice(offset);
     });
-    defineGetter(req, "path", function path4() {
+    defineGetter(req, "path", function path5() {
       return parse3(this).pathname;
     });
     defineGetter(req, "hostname", function hostname3() {
@@ -21875,7 +21875,7 @@ var require_response = __commonJS({
     var http = __require("http");
     var isAbsolute = require_utils2().isAbsolute;
     var onFinished = require_on_finished();
-    var path4 = __require("path");
+    var path5 = __require("path");
     var statuses = require_statuses();
     var merge2 = require_utils_merge();
     var sign = require_cookie_signature().sign;
@@ -21884,9 +21884,9 @@ var require_response = __commonJS({
     var setCharset = require_utils2().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname = path4.extname;
+    var extname = path5.extname;
     var mime = send.mime;
-    var resolve2 = path4.resolve;
+    var resolve2 = path5.resolve;
     var vary = require_vary();
     var res = Object.create(http.ServerResponse.prototype);
     module.exports = res;
@@ -22063,26 +22063,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     };
-    res.sendFile = function sendFile(path5, options, callback) {
+    res.sendFile = function sendFile(path6, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path5) {
+      if (!path6) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path5 !== "string") {
+      if (typeof path6 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !isAbsolute(path5)) {
+      if (!opts.root && !isAbsolute(path6)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path5);
+      var pathname = encodeURI(path6);
       var file2 = send(req, pathname, opts);
       sendfile(res2, file2, opts, function(err) {
         if (done) return done(err);
@@ -22092,7 +22092,7 @@ var require_response = __commonJS({
         }
       });
     };
-    res.sendfile = function(path5, options, callback) {
+    res.sendfile = function(path6, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
@@ -22102,7 +22102,7 @@ var require_response = __commonJS({
         done = options;
         opts = {};
       }
-      var file2 = send(req, path5, opts);
+      var file2 = send(req, path6, opts);
       sendfile(res2, file2, opts, function(err) {
         if (done) return done(err);
         if (err && err.code === "EISDIR") return next();
@@ -22115,7 +22115,7 @@ var require_response = __commonJS({
       res.sendfile,
       "res.sendfile: Use res.sendFile instead"
     );
-    res.download = function download(path5, filename, options, callback) {
+    res.download = function download(path6, filename, options, callback) {
       var done = callback;
       var name = filename;
       var opts = options || null;
@@ -22132,7 +22132,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name || path5)
+        "Content-Disposition": contentDisposition(name || path6)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -22145,7 +22145,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve2(path5) : path5;
+      var fullPath = !opts.root ? resolve2(path6) : path6;
       return this.sendFile(fullPath, opts, done);
     };
     res.contentType = res.type = function contentType(type) {
@@ -22446,11 +22446,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path4 = parseUrl(req).pathname;
-        if (path4 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path4 = "";
+        var path5 = parseUrl(req).pathname;
+        if (path5 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path5 = "";
         }
-        var stream = send(req, path4, opts);
+        var stream = send(req, path5, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -26057,8 +26057,8 @@ var require_utils3 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path4) {
-      let input = path4;
+    function removeDotSegments(path5) {
+      let input = path5;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -26257,8 +26257,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path4, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path4 && path4 !== "/" ? path4 : void 0;
+        const [path5, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path5 && path5 !== "/" ? path5 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -29319,12 +29319,12 @@ var require_ajv = __commonJS({
 // editor/server/index.ts
 var import_express = __toESM(require_express2(), 1);
 var import_cors = __toESM(require_lib3(), 1);
-import path3 from "path";
+import path4 from "path";
 import { fileURLToPath } from "url";
 import { Firestore } from "@google-cloud/firestore";
 
 // src/client.ts
-import { FieldValue as FieldValue4 } from "@google-cloud/firestore";
+import { FieldValue as FieldValue5 } from "@google-cloud/firestore";
 
 // src/docid.ts
 import { createHash } from "node:crypto";
@@ -29434,6 +29434,12 @@ var RegistryScopeError = class extends FiregraphError {
     this.name = "RegistryScopeError";
   }
 };
+var MigrationError = class extends FiregraphError {
+  constructor(message) {
+    super(message, "MIGRATION_ERROR");
+    this.name = "MigrationError";
+  }
+};
 
 // src/query.ts
 function buildEdgeQueryPlan(params) {
@@ -29624,7 +29630,7 @@ function createPipelineQueryAdapter(db2, collectionPath) {
 }
 
 // src/transaction.ts
-import { FieldValue as FieldValue2 } from "@google-cloud/firestore";
+import { FieldValue as FieldValue3 } from "@google-cloud/firestore";
 
 // src/query-safety.ts
 var SAFE_INDEX_PATTERNS = [
@@ -29674,24 +29680,248 @@ function analyzeQuerySafety(filters) {
   };
 }
 
+// src/serialization.ts
+import { Timestamp, GeoPoint, FieldValue as FieldValue2 } from "@google-cloud/firestore";
+var SERIALIZATION_TAG = "__firegraph_ser__";
+var KNOWN_TYPES = /* @__PURE__ */ new Set(["Timestamp", "GeoPoint", "VectorValue", "DocumentReference"]);
+var _docRefWarned = false;
+function isTaggedValue(value) {
+  if (value === null || typeof value !== "object") return false;
+  const tag = value[SERIALIZATION_TAG];
+  return typeof tag === "string" && KNOWN_TYPES.has(tag);
+}
+function isTimestamp(value) {
+  return value instanceof Timestamp;
+}
+function isGeoPoint(value) {
+  return value instanceof GeoPoint;
+}
+function isDocumentReference(value) {
+  if (value === null || typeof value !== "object") return false;
+  const v = value;
+  return typeof v.path === "string" && v.firestore !== void 0 && typeof v.id === "string" && v.constructor?.name === "DocumentReference";
+}
+function isVectorValue(value) {
+  if (value === null || typeof value !== "object") return false;
+  const v = value;
+  return v.constructor?.name === "VectorValue" && Array.isArray(v._values);
+}
+function serializeFirestoreTypes(data) {
+  return serializeValue(data);
+}
+function serializeValue(value) {
+  if (value === null || value === void 0) return value;
+  if (typeof value !== "object") return value;
+  if (isTimestamp(value)) {
+    return { [SERIALIZATION_TAG]: "Timestamp", seconds: value.seconds, nanoseconds: value.nanoseconds };
+  }
+  if (isGeoPoint(value)) {
+    return { [SERIALIZATION_TAG]: "GeoPoint", latitude: value.latitude, longitude: value.longitude };
+  }
+  if (isDocumentReference(value)) {
+    return { [SERIALIZATION_TAG]: "DocumentReference", path: value.path };
+  }
+  if (isVectorValue(value)) {
+    const v = value;
+    const values = typeof v.toArray === "function" ? v.toArray() : v._values;
+    return { [SERIALIZATION_TAG]: "VectorValue", values: [...values] };
+  }
+  if (Array.isArray(value)) {
+    return value.map(serializeValue);
+  }
+  const result = {};
+  for (const key of Object.keys(value)) {
+    result[key] = serializeValue(value[key]);
+  }
+  return result;
+}
+function deserializeFirestoreTypes(data, db2) {
+  return deserializeValue(data, db2);
+}
+function deserializeValue(value, db2) {
+  if (value === null || value === void 0) return value;
+  if (typeof value !== "object") return value;
+  if (isTimestamp(value) || isGeoPoint(value) || isDocumentReference(value) || isVectorValue(value)) {
+    return value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((v) => deserializeValue(v, db2));
+  }
+  const obj = value;
+  if (isTaggedValue(obj)) {
+    const tag = obj[SERIALIZATION_TAG];
+    switch (tag) {
+      case "Timestamp":
+        if (typeof obj.seconds !== "number" || typeof obj.nanoseconds !== "number") return obj;
+        return new Timestamp(obj.seconds, obj.nanoseconds);
+      case "GeoPoint":
+        if (typeof obj.latitude !== "number" || typeof obj.longitude !== "number") return obj;
+        return new GeoPoint(obj.latitude, obj.longitude);
+      case "VectorValue":
+        if (!Array.isArray(obj.values)) return obj;
+        return FieldValue2.vector(obj.values);
+      case "DocumentReference":
+        if (typeof obj.path !== "string") return obj;
+        if (db2) {
+          return db2.doc(obj.path);
+        }
+        if (!_docRefWarned) {
+          _docRefWarned = true;
+          console.warn(
+            "[firegraph] DocumentReference encountered during migration deserialization but no Firestore instance available. The reference will remain as a tagged object with its path. Enable write-back for full reconstruction."
+          );
+        }
+        return obj;
+      default:
+        return obj;
+    }
+  }
+  const result = {};
+  for (const key of Object.keys(obj)) {
+    result[key] = deserializeValue(obj[key], db2);
+  }
+  return result;
+}
+
+// src/migration.ts
+async function applyMigrationChain(data, currentVersion, targetVersion, migrations) {
+  const sorted = [...migrations].sort((a, b) => a.fromVersion - b.fromVersion);
+  let result = { ...data };
+  let version2 = currentVersion;
+  for (const step of sorted) {
+    if (step.fromVersion === version2) {
+      try {
+        result = await step.up(result);
+      } catch (err) {
+        if (err instanceof MigrationError) throw err;
+        throw new MigrationError(
+          `Migration from v${step.fromVersion} to v${step.toVersion} failed: ${err.message}`
+        );
+      }
+      if (!result || typeof result !== "object") {
+        throw new MigrationError(
+          `Migration from v${step.fromVersion} to v${step.toVersion} returned invalid data (expected object)`
+        );
+      }
+      version2 = step.toVersion;
+    }
+  }
+  if (version2 !== targetVersion) {
+    throw new MigrationError(
+      `Incomplete migration chain: reached v${version2} but target is v${targetVersion}`
+    );
+  }
+  return result;
+}
+function validateMigrationChain(migrations, label) {
+  if (migrations.length === 0) return;
+  const seen = /* @__PURE__ */ new Set();
+  for (const step of migrations) {
+    if (step.toVersion <= step.fromVersion) {
+      throw new MigrationError(
+        `${label}: migration step has toVersion (${step.toVersion}) <= fromVersion (${step.fromVersion})`
+      );
+    }
+    if (seen.has(step.fromVersion)) {
+      throw new MigrationError(
+        `${label}: duplicate migration step for fromVersion ${step.fromVersion}`
+      );
+    }
+    seen.add(step.fromVersion);
+  }
+  const sorted = [...migrations].sort((a, b) => a.fromVersion - b.fromVersion);
+  const targetVersion = Math.max(...migrations.map((m) => m.toVersion));
+  let version2 = 0;
+  for (const step of sorted) {
+    if (step.fromVersion === version2) {
+      version2 = step.toVersion;
+    } else if (step.fromVersion > version2) {
+      throw new MigrationError(
+        `${label}: migration chain has a gap \u2014 no step covers v${version2} \u2192 v${step.fromVersion}`
+      );
+    }
+  }
+  if (version2 !== targetVersion) {
+    throw new MigrationError(
+      `${label}: migration chain does not reach v${targetVersion} (stuck at v${version2})`
+    );
+  }
+}
+async function migrateRecord(record2, registry2, globalWriteBack = "off") {
+  const entry = registry2.lookup(record2.aType, record2.axbType, record2.bType);
+  if (!entry?.migrations?.length || !entry.schemaVersion) {
+    return { record: record2, migrated: false, writeBack: "off" };
+  }
+  const currentVersion = record2.v ?? 0;
+  if (currentVersion >= entry.schemaVersion) {
+    return { record: record2, migrated: false, writeBack: "off" };
+  }
+  const migratedData = await applyMigrationChain(
+    record2.data,
+    currentVersion,
+    entry.schemaVersion,
+    entry.migrations
+  );
+  const writeBack = entry.migrationWriteBack ?? globalWriteBack ?? "off";
+  return {
+    record: { ...record2, data: migratedData, v: entry.schemaVersion },
+    migrated: true,
+    writeBack
+  };
+}
+async function migrateRecords(records, registry2, globalWriteBack = "off") {
+  return Promise.all(
+    records.map((r) => migrateRecord(r, registry2, globalWriteBack))
+  );
+}
+
 // src/transaction.ts
 var GraphTransactionImpl = class {
-  constructor(adapter, registry2, scanProtection = "error", scopePath = "") {
+  constructor(adapter, registry2, scanProtection = "error", scopePath = "", globalWriteBack = "off", db2) {
     this.adapter = adapter;
     this.registry = registry2;
     this.scanProtection = scanProtection;
     this.scopePath = scopePath;
+    this.globalWriteBack = globalWriteBack;
+    this.db = db2;
   }
   async getNode(uid) {
     const docId = computeNodeDocId(uid);
-    return this.adapter.getDoc(docId);
+    const record2 = await this.adapter.getDoc(docId);
+    if (!record2 || !this.registry) return record2;
+    const result = await migrateRecord(record2, this.registry, this.globalWriteBack);
+    if (result.migrated && result.writeBack !== "off") {
+      const update = {
+        data: deserializeFirestoreTypes(result.record.data, this.db),
+        updatedAt: FieldValue3.serverTimestamp()
+      };
+      if (result.record.v !== void 0) {
+        update.v = result.record.v;
+      }
+      this.adapter.updateDoc(docId, update);
+    }
+    return result.record;
   }
   async getEdge(aUid, axbType, bUid) {
     const docId = computeEdgeDocId(aUid, axbType, bUid);
-    return this.adapter.getDoc(docId);
+    const record2 = await this.adapter.getDoc(docId);
+    if (!record2 || !this.registry) return record2;
+    const result = await migrateRecord(record2, this.registry, this.globalWriteBack);
+    if (result.migrated && result.writeBack !== "off") {
+      const update = {
+        data: deserializeFirestoreTypes(result.record.data, this.db),
+        updatedAt: FieldValue3.serverTimestamp()
+      };
+      if (result.record.v !== void 0) {
+        update.v = result.record.v;
+      }
+      this.adapter.updateDoc(docId, update);
+    }
+    return result.record;
   }
   async edgeExists(aUid, axbType, bUid) {
-    const record2 = await this.getEdge(aUid, axbType, bUid);
+    const docId = computeEdgeDocId(aUid, axbType, bUid);
+    const record2 = await this.adapter.getDoc(docId);
     return record2 !== null;
   }
   checkQuerySafety(filters, allowCollectionScan) {
@@ -29705,21 +29935,45 @@ var GraphTransactionImpl = class {
   }
   async findEdges(params) {
     const plan = buildEdgeQueryPlan(params);
+    let records;
     if (plan.strategy === "get") {
       const record2 = await this.adapter.getDoc(plan.docId);
-      return record2 ? [record2] : [];
+      records = record2 ? [record2] : [];
+    } else {
+      this.checkQuerySafety(plan.filters, params.allowCollectionScan);
+      records = await this.adapter.query(plan.filters, plan.options);
     }
-    this.checkQuerySafety(plan.filters, params.allowCollectionScan);
-    return this.adapter.query(plan.filters, plan.options);
+    return this.applyMigrations(records);
   }
   async findNodes(params) {
     const plan = buildNodeQueryPlan(params);
+    let records;
     if (plan.strategy === "get") {
       const record2 = await this.adapter.getDoc(plan.docId);
-      return record2 ? [record2] : [];
+      records = record2 ? [record2] : [];
+    } else {
+      this.checkQuerySafety(plan.filters, params.allowCollectionScan);
+      records = await this.adapter.query(plan.filters, plan.options);
+    }
+    return this.applyMigrations(records);
+  }
+  async applyMigrations(records) {
+    if (!this.registry || records.length === 0) return records;
+    const results = await migrateRecords(records, this.registry, this.globalWriteBack);
+    for (const result of results) {
+      if (result.migrated && result.writeBack !== "off") {
+        const docId = result.record.axbType === NODE_RELATION ? computeNodeDocId(result.record.aUid) : computeEdgeDocId(result.record.aUid, result.record.axbType, result.record.bUid);
+        const update = {
+          data: deserializeFirestoreTypes(result.record.data, this.db),
+          updatedAt: FieldValue3.serverTimestamp()
+        };
+        if (result.record.v !== void 0) {
+          update.v = result.record.v;
+        }
+        this.adapter.updateDoc(docId, update);
+      }
     }
-    this.checkQuerySafety(plan.filters, params.allowCollectionScan);
-    return this.adapter.query(plan.filters, plan.options);
+    return results.map((r) => r.record);
   }
   async putNode(aType, uid, data) {
     if (this.registry) {
@@ -29727,6 +29981,12 @@ var GraphTransactionImpl = class {
     }
     const docId = computeNodeDocId(uid);
     const record2 = buildNodeRecord(aType, uid, data);
+    if (this.registry) {
+      const entry = this.registry.lookup(aType, NODE_RELATION, aType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     this.adapter.setDoc(docId, record2);
   }
   async putEdge(aType, aUid, axbType, bType, bUid, data) {
@@ -29735,13 +29995,19 @@ var GraphTransactionImpl = class {
     }
     const docId = computeEdgeDocId(aUid, axbType, bUid);
     const record2 = buildEdgeRecord(aType, aUid, axbType, bType, bUid, data);
+    if (this.registry) {
+      const entry = this.registry.lookup(aType, axbType, bType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     this.adapter.setDoc(docId, record2);
   }
   async updateNode(uid, data) {
     const docId = computeNodeDocId(uid);
     this.adapter.updateDoc(docId, {
       ...data,
-      updatedAt: FieldValue2.serverTimestamp()
+      updatedAt: FieldValue3.serverTimestamp()
     });
   }
   async removeNode(uid) {
@@ -29755,7 +30021,7 @@ var GraphTransactionImpl = class {
 };
 
 // src/batch.ts
-import { FieldValue as FieldValue3 } from "@google-cloud/firestore";
+import { FieldValue as FieldValue4 } from "@google-cloud/firestore";
 var GraphBatchImpl = class {
   constructor(adapter, registry2, scopePath = "") {
     this.adapter = adapter;
@@ -29768,6 +30034,12 @@ var GraphBatchImpl = class {
     }
     const docId = computeNodeDocId(uid);
     const record2 = buildNodeRecord(aType, uid, data);
+    if (this.registry) {
+      const entry = this.registry.lookup(aType, NODE_RELATION, aType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     this.adapter.setDoc(docId, record2);
   }
   async putEdge(aType, aUid, axbType, bType, bUid, data) {
@@ -29776,13 +30048,19 @@ var GraphBatchImpl = class {
     }
     const docId = computeEdgeDocId(aUid, axbType, bUid);
     const record2 = buildEdgeRecord(aType, aUid, axbType, bType, bUid, data);
+    if (this.registry) {
+      const entry = this.registry.lookup(aType, axbType, bType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     this.adapter.setDoc(docId, record2);
   }
   async updateNode(uid, data) {
     const docId = computeNodeDocId(uid);
     this.adapter.updateDoc(docId, {
       ...data,
-      updatedAt: FieldValue3.serverTimestamp()
+      updatedAt: FieldValue4.serverTimestamp()
     });
   }
   async removeNode(uid) {
@@ -29941,7 +30219,7 @@ async function removeNodeCascade(db2, collectionPath, reader, uid, options) {
 }
 
 // src/dynamic-registry.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 
 // src/json-schema.ts
 var import_ajv = __toESM(require_ajv(), 1);
@@ -30047,23 +30325,23 @@ function matchScopeAny(scopePath, patterns) {
   if (!patterns || patterns.length === 0) return true;
   return patterns.some((p) => matchScope(scopePath, p));
 }
-function matchSegments(path4, pi, pattern, qi) {
-  if (pi === path4.length && qi === pattern.length) return true;
+function matchSegments(path5, pi, pattern, qi) {
+  if (pi === path5.length && qi === pattern.length) return true;
   if (qi === pattern.length) return false;
   const seg = pattern[qi];
   if (seg === "**") {
     if (qi === pattern.length - 1) return true;
-    for (let skip = 0; skip <= path4.length - pi; skip++) {
-      if (matchSegments(path4, pi + skip, pattern, qi + 1)) return true;
+    for (let skip = 0; skip <= path5.length - pi; skip++) {
+      if (matchSegments(path5, pi + skip, pattern, qi + 1)) return true;
     }
     return false;
   }
-  if (pi === path4.length) return false;
+  if (pi === path5.length) return false;
   if (seg === "*") {
-    return matchSegments(path4, pi + 1, pattern, qi + 1);
+    return matchSegments(path5, pi + 1, pattern, qi + 1);
   }
-  if (path4[pi] === seg) {
-    return matchSegments(path4, pi + 1, pattern, qi + 1);
+  if (path5[pi] === seg) {
+    return matchSegments(path5, pi + 1, pattern, qi + 1);
   }
   return false;
 }
@@ -30090,6 +30368,13 @@ function createRegistry(input) {
         `Entry (${entry.aType}) -[${entry.axbType}]-> (${entry.bType}) has invalid targetGraph "${entry.targetGraph}" \u2014 must be a single segment (no "/")`
       );
     }
+    if (entry.migrations?.length) {
+      const label = `Entry (${entry.aType}) -[${entry.axbType}]-> (${entry.bType})`;
+      validateMigrationChain(entry.migrations, label);
+      entry.schemaVersion = Math.max(...entry.migrations.map((m) => m.toVersion));
+    } else {
+      entry.schemaVersion = void 0;
+    }
     const key = tripleKey(entry.aType, entry.axbType, entry.bType);
     const validator = entry.jsonSchema ? compileSchema(entry.jsonSchema, `(${entry.aType}) -[${entry.axbType}]-> (${entry.bType})`) : void 0;
     map2.set(key, { entry, validate: validator });
@@ -30191,7 +30476,9 @@ function discoveryToEntries(discovery) {
       description: entity.description,
       titleField: entity.titleField,
       subtitleField: entity.subtitleField,
-      allowedIn: entity.allowedIn
+      allowedIn: entity.allowedIn,
+      migrations: entity.migrations,
+      migrationWriteBack: entity.migrationWriteBack
     });
   }
   for (const [axbType, entity] of discovery.edges) {
@@ -30217,7 +30504,9 @@ function discoveryToEntries(discovery) {
           titleField: entity.titleField,
           subtitleField: entity.subtitleField,
           allowedIn: entity.allowedIn,
-          targetGraph: resolvedTargetGraph
+          targetGraph: resolvedTargetGraph,
+          migrations: entity.migrations,
+          migrationWriteBack: entity.migrationWriteBack
         });
       }
     }
@@ -30225,9 +30514,248 @@ function discoveryToEntries(discovery) {
   return entries;
 }
 
+// src/sandbox.ts
+import { Worker } from "node:worker_threads";
+import { createHash as createHash2 } from "node:crypto";
+var _worker = null;
+var _requestId = 0;
+var _pending = /* @__PURE__ */ new Map();
+var WORKER_SOURCE = [
+  `'use strict';`,
+  `var _wt = require('node:worker_threads');`,
+  `var _mod = require('node:module');`,
+  `var _crypto = require('node:crypto');`,
+  `var parentPort = _wt.parentPort;`,
+  `var workerData = _wt.workerData;`,
+  ``,
+  `// Load SES using the parent module's resolution context`,
+  `var esmRequire = _mod.createRequire(workerData.parentUrl);`,
+  `esmRequire('ses');`,
+  ``,
+  `lockdown({`,
+  `  errorTaming: 'unsafe',`,
+  `  consoleTaming: 'unsafe',`,
+  `  evalTaming: 'safe-eval',`,
+  `  overrideTaming: 'moderate',`,
+  `  stackFiltering: 'verbose'`,
+  `});`,
+  ``,
+  `// Defense-in-depth: verify lockdown() actually hardened JSON.`,
+  `if (!Object.isFrozen(JSON)) {`,
+  `  throw new Error('SES lockdown failed: JSON is not frozen');`,
+  `}`,
+  ``,
+  `var cache = new Map();`,
+  ``,
+  `function hashSource(s) {`,
+  `  return _crypto.createHash('sha256').update(s).digest('hex');`,
+  `}`,
+  ``,
+  `function buildWrapper(source) {`,
+  `  return '(function() {' +`,
+  `    '  var fn = (' + source + ');\\n' +`,
+  `    '  if (typeof fn !== "function") return null;\\n' +`,
+  `    '  return function(jsonIn) {\\n' +`,
+  `    '    var data = JSON.parse(jsonIn);\\n' +`,
+  `    '    var result = fn(data);\\n' +`,
+  `    '    if (result !== null && typeof result === "object" && typeof result.then === "function") {\\n' +`,
+  `    '      return result.then(function(r) { return JSON.stringify(r); });\\n' +`,
+  `    '    }\\n' +`,
+  `    '    return JSON.stringify(result);\\n' +`,
+  `    '  };\\n' +`,
+  `    '})()';`,
+  `}`,
+  ``,
+  `function compileSource(source) {`,
+  `  var key = hashSource(source);`,
+  `  var cached = cache.get(key);`,
+  `  if (cached) return cached;`,
+  ``,
+  `  var compartmentFn;`,
+  `  try {`,
+  `    var c = new Compartment({ JSON: JSON });`,
+  `    compartmentFn = c.evaluate(buildWrapper(source));`,
+  `  } catch (err) {`,
+  `    throw new Error('Failed to compile migration source: ' + (err.message || String(err)));`,
+  `  }`,
+  ``,
+  `  if (typeof compartmentFn !== 'function') {`,
+  `    throw new Error('Migration source did not produce a function: ' + source.slice(0, 80));`,
+  `  }`,
+  ``,
+  `  cache.set(key, compartmentFn);`,
+  `  return compartmentFn;`,
+  `}`,
+  ``,
+  `parentPort.on('message', function(msg) {`,
+  `  var id = msg.id;`,
+  `  try {`,
+  `    if (msg.type === 'compile') {`,
+  `      compileSource(msg.source);`,
+  `      parentPort.postMessage({ id: id, type: 'compiled' });`,
+  `      return;`,
+  `    }`,
+  `    if (msg.type === 'execute') {`,
+  `      var fn = compileSource(msg.source);`,
+  `      var raw;`,
+  `      try {`,
+  `        raw = fn(msg.jsonData);`,
+  `      } catch (err) {`,
+  `        parentPort.postMessage({ id: id, type: 'error', message: 'Migration function threw: ' + (err.message || String(err)) });`,
+  `        return;`,
+  `      }`,
+  `      if (raw !== null && typeof raw === 'object' && typeof raw.then === 'function') {`,
+  `        raw.then(`,
+  `          function(jsonResult) {`,
+  `            if (jsonResult === undefined || jsonResult === null) {`,
+  `              parentPort.postMessage({ id: id, type: 'error', message: 'Migration returned a non-JSON-serializable value' });`,
+  `            } else {`,
+  `              parentPort.postMessage({ id: id, type: 'result', jsonResult: jsonResult });`,
+  `            }`,
+  `          },`,
+  `          function(err) {`,
+  `            parentPort.postMessage({ id: id, type: 'error', message: 'Async migration function threw: ' + (err.message || String(err)) });`,
+  `          }`,
+  `        );`,
+  `        return;`,
+  `      }`,
+  `      if (raw === undefined || raw === null) {`,
+  `        parentPort.postMessage({ id: id, type: 'error', message: 'Migration returned a non-JSON-serializable value' });`,
+  `      } else {`,
+  `        parentPort.postMessage({ id: id, type: 'result', jsonResult: raw });`,
+  `      }`,
+  `    }`,
+  `  } catch (err) {`,
+  `    parentPort.postMessage({ id: id, type: 'error', message: err.message || String(err) });`,
+  `  }`,
+  `});`
+].join("\n");
+function ensureWorker() {
+  if (_worker) return _worker;
+  _worker = new Worker(WORKER_SOURCE, {
+    eval: true,
+    workerData: { parentUrl: import.meta.url }
+  });
+  _worker.unref();
+  _worker.on("message", (msg) => {
+    if (msg.id === void 0) return;
+    const pending = _pending.get(msg.id);
+    if (!pending) return;
+    _pending.delete(msg.id);
+    if (msg.type === "error") {
+      pending.reject(new MigrationError(msg.message ?? "Unknown sandbox error"));
+    } else {
+      pending.resolve(msg);
+    }
+  });
+  _worker.on("error", (err) => {
+    for (const [, p] of _pending) {
+      p.reject(new MigrationError(`Sandbox worker error: ${err.message}`));
+    }
+    _pending.clear();
+    _worker = null;
+  });
+  _worker.on("exit", (code) => {
+    if (_pending.size > 0) {
+      for (const [, p] of _pending) {
+        p.reject(new MigrationError(`Sandbox worker exited with code ${code}`));
+      }
+      _pending.clear();
+    }
+    _worker = null;
+  });
+  return _worker;
+}
+function sendToWorker(msg) {
+  const worker = ensureWorker();
+  if (_requestId >= Number.MAX_SAFE_INTEGER) _requestId = 0;
+  const id = ++_requestId;
+  return new Promise((resolve2, reject) => {
+    _pending.set(id, { resolve: resolve2, reject });
+    worker.postMessage({ ...msg, id });
+  });
+}
+var compiledCache = /* @__PURE__ */ new WeakMap();
+function getExecutorCache(executor) {
+  let cache = compiledCache.get(executor);
+  if (!cache) {
+    cache = /* @__PURE__ */ new Map();
+    compiledCache.set(executor, cache);
+  }
+  return cache;
+}
+function hashSource(source) {
+  return createHash2("sha256").update(source).digest("hex");
+}
+function defaultExecutor(source) {
+  ensureWorker();
+  return (data) => {
+    const jsonData = JSON.stringify(serializeFirestoreTypes(data));
+    return sendToWorker({ type: "execute", source, jsonData }).then(
+      (response) => {
+        if (response.jsonResult === void 0 || response.jsonResult === null) {
+          throw new MigrationError("Migration returned a non-JSON-serializable value");
+        }
+        try {
+          return deserializeFirestoreTypes(JSON.parse(response.jsonResult));
+        } catch {
+          throw new MigrationError("Migration returned a non-JSON-serializable value");
+        }
+      }
+    );
+  };
+}
+async function precompileSource(source, executor) {
+  if (executor && executor !== defaultExecutor) {
+    try {
+      executor(source);
+    } catch (err) {
+      if (err instanceof MigrationError) throw err;
+      throw new MigrationError(
+        `Failed to compile migration source: ${err.message}`
+      );
+    }
+    return;
+  }
+  await sendToWorker({ type: "compile", source });
+}
+function compileMigrationFn(source, executor = defaultExecutor) {
+  const cache = getExecutorCache(executor);
+  const key = hashSource(source);
+  const cached2 = cache.get(key);
+  if (cached2) return cached2;
+  try {
+    const fn = executor(source);
+    cache.set(key, fn);
+    return fn;
+  } catch (err) {
+    if (err instanceof MigrationError) throw err;
+    throw new MigrationError(
+      `Failed to compile migration source: ${err.message}`
+    );
+  }
+}
+function compileMigrations(stored, executor) {
+  return stored.map((step) => ({
+    fromVersion: step.fromVersion,
+    toVersion: step.toVersion,
+    up: compileMigrationFn(step.up, executor)
+  }));
+}
+
 // src/dynamic-registry.ts
 var META_NODE_TYPE = "nodeType";
 var META_EDGE_TYPE = "edgeType";
+var STORED_MIGRATION_STEP_SCHEMA = {
+  type: "object",
+  required: ["fromVersion", "toVersion", "up"],
+  properties: {
+    fromVersion: { type: "integer", minimum: 0 },
+    toVersion: { type: "integer", minimum: 1 },
+    up: { type: "string", minLength: 1 }
+  },
+  additionalProperties: false
+};
 var NODE_TYPE_SCHEMA = {
   type: "object",
   required: ["name", "jsonSchema"],
@@ -30239,7 +30767,10 @@ var NODE_TYPE_SCHEMA = {
     subtitleField: { type: "string" },
     viewTemplate: { type: "string" },
     viewCss: { type: "string" },
-    allowedIn: { type: "array", items: { type: "string", minLength: 1 } }
+    allowedIn: { type: "array", items: { type: "string", minLength: 1 } },
+    schemaVersion: { type: "integer", minimum: 0 },
+    migrations: { type: "array", items: STORED_MIGRATION_STEP_SCHEMA },
+    migrationWriteBack: { type: "string", enum: ["off", "eager", "background"] }
   },
   additionalProperties: false
 };
@@ -30268,7 +30799,10 @@ var EDGE_TYPE_SCHEMA = {
     viewTemplate: { type: "string" },
     viewCss: { type: "string" },
     allowedIn: { type: "array", items: { type: "string", minLength: 1 } },
-    targetGraph: { type: "string", minLength: 1, pattern: "^[^/]+$" }
+    targetGraph: { type: "string", minLength: 1, pattern: "^[^/]+$" },
+    schemaVersion: { type: "integer", minimum: 0 },
+    migrations: { type: "array", items: STORED_MIGRATION_STEP_SCHEMA },
+    migrationWriteBack: { type: "string", enum: ["off", "eager", "background"] }
   },
   additionalProperties: false
 };
@@ -30292,15 +30826,33 @@ function createBootstrapRegistry() {
   return createRegistry([...BOOTSTRAP_ENTRIES]);
 }
 function generateDeterministicUid(metaType, name) {
-  const hash2 = createHash2("sha256").update(`${metaType}:${name}`).digest("base64url");
+  const hash2 = createHash3("sha256").update(`${metaType}:${name}`).digest("base64url");
   return hash2.slice(0, 21);
 }
-async function createRegistryFromGraph(reader) {
+async function createRegistryFromGraph(reader, executor) {
   const [nodeTypes, edgeTypes] = await Promise.all([
     reader.findNodes({ aType: META_NODE_TYPE }),
     reader.findNodes({ aType: META_EDGE_TYPE })
   ]);
   const entries = [...BOOTSTRAP_ENTRIES];
+  const prevalidations = [];
+  for (const record2 of nodeTypes) {
+    const data = record2.data;
+    if (data.migrations) {
+      for (const m of data.migrations) {
+        prevalidations.push(precompileSource(m.up, executor));
+      }
+    }
+  }
+  for (const record2 of edgeTypes) {
+    const data = record2.data;
+    if (data.migrations) {
+      for (const m of data.migrations) {
+        prevalidations.push(precompileSource(m.up, executor));
+      }
+    }
+  }
+  await Promise.all(prevalidations);
   for (const record2 of nodeTypes) {
     const data = record2.data;
     entries.push({
@@ -30311,13 +30863,16 @@ async function createRegistryFromGraph(reader) {
       description: data.description,
       titleField: data.titleField,
       subtitleField: data.subtitleField,
-      allowedIn: data.allowedIn
+      allowedIn: data.allowedIn,
+      migrations: data.migrations ? compileMigrations(data.migrations, executor) : void 0,
+      migrationWriteBack: data.migrationWriteBack
     });
   }
   for (const record2 of edgeTypes) {
     const data = record2.data;
     const fromTypes = Array.isArray(data.from) ? data.from : [data.from];
     const toTypes = Array.isArray(data.to) ? data.to : [data.to];
+    const compiledMigrations = data.migrations ? compileMigrations(data.migrations, executor) : void 0;
     for (const aType of fromTypes) {
       for (const bType of toTypes) {
         entries.push({
@@ -30330,7 +30885,9 @@ async function createRegistryFromGraph(reader) {
           titleField: data.titleField,
           subtitleField: data.subtitleField,
           allowedIn: data.allowedIn,
-          targetGraph: data.targetGraph
+          targetGraph: data.targetGraph,
+          migrations: compiledMigrations,
+          migrationWriteBack: data.migrationWriteBack
         });
       }
     }
@@ -30346,6 +30903,8 @@ var GraphClientImpl = class _GraphClientImpl {
     this.db = db2;
     this.scopePath = scopePath;
     this.adapter = createFirestoreAdapter(db2, collectionPath);
+    this.globalWriteBack = options?.migrationWriteBack ?? "off";
+    this.migrationSandbox = options?.migrationSandbox;
     if (options?.registryMode) {
       this.dynamicConfig = options.registryMode;
       this.bootstrapRegistry = createBootstrapRegistry();
@@ -30397,6 +30956,9 @@ var GraphClientImpl = class _GraphClientImpl {
   metaPipelineAdapter;
   // Subgraph scope tracking
   scopePath;
+  // Migration settings
+  globalWriteBack;
+  migrationSandbox;
   // ---------------------------------------------------------------------------
   // Registry routing
   // ---------------------------------------------------------------------------
@@ -30466,37 +31028,114 @@ var GraphClientImpl = class _GraphClientImpl {
     console.warn(`[firegraph] Query safety warning: ${result.reason}`);
   }
   // ---------------------------------------------------------------------------
+  // Migration helpers
+  // ---------------------------------------------------------------------------
+  /**
+   * Apply migration to a single record. Returns the (possibly migrated)
+   * record and triggers write-back if applicable.
+   */
+  async applyMigration(record2, docId) {
+    const registry2 = this.getCombinedRegistry();
+    if (!registry2) return record2;
+    const result = await migrateRecord(record2, registry2, this.globalWriteBack);
+    if (result.migrated) {
+      this.handleWriteBack(result, docId);
+    }
+    return result.record;
+  }
+  /**
+   * Apply migrations to an array of records. Returns all records
+   * (migrated where applicable) and triggers write-backs.
+   */
+  async applyMigrations(records) {
+    const registry2 = this.getCombinedRegistry();
+    if (!registry2 || records.length === 0) return records;
+    const results = await migrateRecords(records, registry2, this.globalWriteBack);
+    for (const result of results) {
+      if (result.migrated) {
+        const docId = result.record.axbType === NODE_RELATION ? computeNodeDocId(result.record.aUid) : computeEdgeDocId(result.record.aUid, result.record.axbType, result.record.bUid);
+        this.handleWriteBack(result, docId);
+      }
+    }
+    return results.map((r) => r.record);
+  }
+  /**
+   * Handle write-back for a migrated record based on the resolved mode.
+   *
+   * Both `'eager'` and `'background'` are fire-and-forget (not awaited by
+   * the caller). The difference is logging level on failure:
+   * - `eager`: logs an error via `console.error`
+   * - `background`: logs a warning via `console.warn`
+   *
+   * For truly synchronous write-back guarantees, use transactions — the
+   * `GraphTransactionImpl` performs write-back inline within the transaction.
+   */
+  handleWriteBack(result, docId) {
+    if (result.writeBack === "off") return;
+    const doWriteBack = async () => {
+      try {
+        const update = {
+          data: deserializeFirestoreTypes(result.record.data, this.db),
+          updatedAt: FieldValue5.serverTimestamp()
+        };
+        if (result.record.v !== void 0) {
+          update.v = result.record.v;
+        }
+        await this.adapter.updateDoc(docId, update);
+      } catch (err) {
+        const msg = `[firegraph] Migration write-back failed for ${docId}: ${err.message}`;
+        if (result.writeBack === "eager") {
+          console.error(msg);
+        } else {
+          console.warn(msg);
+        }
+      }
+    };
+    void doWriteBack();
+  }
+  // ---------------------------------------------------------------------------
   // GraphReader
   // ---------------------------------------------------------------------------
   async getNode(uid) {
     const docId = computeNodeDocId(uid);
-    return this.adapter.getDoc(docId);
+    const record2 = await this.adapter.getDoc(docId);
+    if (!record2) return null;
+    return this.applyMigration(record2, docId);
   }
   async getEdge(aUid, axbType, bUid) {
     const docId = computeEdgeDocId(aUid, axbType, bUid);
-    return this.adapter.getDoc(docId);
+    const record2 = await this.adapter.getDoc(docId);
+    if (!record2) return null;
+    return this.applyMigration(record2, docId);
   }
   async edgeExists(aUid, axbType, bUid) {
-    const record2 = await this.getEdge(aUid, axbType, bUid);
+    const docId = computeEdgeDocId(aUid, axbType, bUid);
+    const record2 = await this.adapter.getDoc(docId);
     return record2 !== null;
   }
   async findEdges(params) {
     const plan = buildEdgeQueryPlan(params);
+    let records;
     if (plan.strategy === "get") {
       const record2 = await this.adapter.getDoc(plan.docId);
-      return record2 ? [record2] : [];
+      records = record2 ? [record2] : [];
+    } else {
+      this.checkQuerySafety(plan.filters, params.allowCollectionScan);
+      records = await this.executeQuery(plan.filters, plan.options);
     }
-    this.checkQuerySafety(plan.filters, params.allowCollectionScan);
-    return this.executeQuery(plan.filters, plan.options);
+    return this.applyMigrations(records);
   }
   async findNodes(params) {
     const plan = buildNodeQueryPlan(params);
+    let records;
     if (plan.strategy === "get") {
       const record2 = await this.adapter.getDoc(plan.docId);
-      return record2 ? [record2] : [];
+      records = record2 ? [record2] : [];
+    } else {
+      this.checkQuerySafety(plan.filters, params.allowCollectionScan);
+      records = await this.executeQuery(plan.filters, plan.options);
     }
-    this.checkQuerySafety(plan.filters, params.allowCollectionScan);
-    return this.executeQuery(plan.filters, plan.options);
+    return this.applyMigrations(records);
   }
   // ---------------------------------------------------------------------------
   // GraphWriter
@@ -30509,6 +31148,12 @@ var GraphClientImpl = class _GraphClientImpl {
     const adapter = this.getAdapterForType(aType);
     const docId = computeNodeDocId(uid);
     const record2 = buildNodeRecord(aType, uid, data);
+    if (registry2) {
+      const entry = registry2.lookup(aType, NODE_RELATION, aType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     await adapter.setDoc(docId, record2);
   }
   async putEdge(aType, aUid, axbType, bType, bUid, data) {
@@ -30519,13 +31164,19 @@ var GraphClientImpl = class _GraphClientImpl {
     const adapter = this.getAdapterForType(aType);
     const docId = computeEdgeDocId(aUid, axbType, bUid);
     const record2 = buildEdgeRecord(aType, aUid, axbType, bType, bUid, data);
+    if (registry2) {
+      const entry = registry2.lookup(aType, axbType, bType);
+      if (entry?.schemaVersion && entry.schemaVersion > 0) {
+        record2.v = entry.schemaVersion;
+      }
+    }
     await adapter.setDoc(docId, record2);
   }
   async updateNode(uid, data) {
     const docId = computeNodeDocId(uid);
     await this.adapter.updateDoc(docId, {
       ...data,
-      updatedAt: FieldValue4.serverTimestamp()
+      updatedAt: FieldValue5.serverTimestamp()
     });
   }
   async removeNode(uid) {
@@ -30546,7 +31197,7 @@ var GraphClientImpl = class _GraphClientImpl {
         this.adapter.collectionPath,
         firestoreTx
       );
-      const graphTx = new GraphTransactionImpl(adapter, this.getCombinedRegistry(), this.scanProtection, this.scopePath);
+      const graphTx = new GraphTransactionImpl(adapter, this.getCombinedRegistry(), this.scanProtection, this.scopePath, this.globalWriteBack, this.db);
       return fn(graphTx);
     });
   }
@@ -30578,7 +31229,9 @@ var GraphClientImpl = class _GraphClientImpl {
       {
         registry: this.getCombinedRegistry(),
         queryMode: this.queryMode === "pipeline" ? "pipeline" : "standard",
-        scanProtection: this.scanProtection
+        scanProtection: this.scanProtection,
+        migrationWriteBack: this.globalWriteBack,
+        migrationSandbox: this.migrationSandbox
       },
       newScopePath
     );
@@ -30608,7 +31261,8 @@ var GraphClientImpl = class _GraphClientImpl {
       q = q.limit(plan.options.limit);
     }
     const snap = await q.get();
-    return snap.docs.map((doc) => doc.data());
+    const records = snap.docs.map((doc) => doc.data());
+    return this.applyMigrations(records);
   }
   // ---------------------------------------------------------------------------
   // Bulk operations
@@ -30646,6 +31300,10 @@ var GraphClientImpl = class _GraphClientImpl {
     if (options?.viewTemplate !== void 0) data.viewTemplate = options.viewTemplate;
     if (options?.viewCss !== void 0) data.viewCss = options.viewCss;
     if (options?.allowedIn !== void 0) data.allowedIn = options.allowedIn;
+    if (options?.migrationWriteBack !== void 0) data.migrationWriteBack = options.migrationWriteBack;
+    if (options?.migrations !== void 0) {
+      data.migrations = await this.serializeMigrations(options.migrations);
+    }
     await this.putNode(META_NODE_TYPE, uid, data);
   }
   async defineEdgeType(name, topology, jsonSchema, description, options) {
@@ -30687,6 +31345,10 @@ var GraphClientImpl = class _GraphClientImpl {
     if (options?.viewTemplate !== void 0) data.viewTemplate = options.viewTemplate;
     if (options?.viewCss !== void 0) data.viewCss = options.viewCss;
     if (options?.allowedIn !== void 0) data.allowedIn = options.allowedIn;
+    if (options?.migrationWriteBack !== void 0) data.migrationWriteBack = options.migrationWriteBack;
+    if (options?.migrations !== void 0) {
+      data.migrations = await this.serializeMigrations(options.migrations);
+    }
     await this.putNode(META_EDGE_TYPE, uid, data);
   }
   async reloadRegistry() {
@@ -30696,13 +31358,28 @@ var GraphClientImpl = class _GraphClientImpl {
       );
     }
     const reader = this.createMetaReader();
-    const dynamicOnly = await createRegistryFromGraph(reader);
+    const dynamicOnly = await createRegistryFromGraph(reader, this.migrationSandbox);
     if (this.staticRegistry) {
       this.dynamicRegistry = createMergedRegistry(this.staticRegistry, dynamicOnly);
     } else {
       this.dynamicRegistry = dynamicOnly;
     }
   }
+  /**
+   * Serialize migration steps for storage in Firestore.
+   * Function objects are converted via `.toString()`; strings are stored as-is.
+   * Each migration is validated at define-time by pre-compiling in the sandbox.
+   */
+  async serializeMigrations(migrations) {
+    const result = migrations.map((m) => {
+      const source = typeof m.up === "function" ? m.up.toString() : m.up;
+      return { fromVersion: m.fromVersion, toVersion: m.toVersion, up: source };
+    });
+    await Promise.all(
+      result.map((m) => precompileSource(m.up, this.migrationSandbox))
+    );
+    return result;
+  }
   /**
    * Create a GraphReader for the meta-collection.
    * If meta-collection is the same as main collection, returns `this`.
@@ -30860,11 +31537,39 @@ function findViewsFile(dir) {
   }
   return void 0;
 }
+var MIGRATION_EXTENSIONS = [".ts", ".js", ".mts", ".mjs"];
+function findMigrationsFile(dir) {
+  for (const ext of MIGRATION_EXTENSIONS) {
+    const candidate = join(dir, `migrations${ext}`);
+    if (existsSync(candidate)) return candidate;
+  }
+  return void 0;
+}
+function loadMigrations(filePath, entityLabel) {
+  try {
+    const jiti2 = getJiti();
+    const mod = jiti2(filePath);
+    const migrations = mod && typeof mod === "object" && "default" in mod ? mod.default : mod;
+    if (!Array.isArray(migrations)) {
+      throw new DiscoveryError(
+        `Migrations file ${filePath} for ${entityLabel} must default-export an array of MigrationStep.`
+      );
+    }
+    return migrations;
+  } catch (err) {
+    if (err instanceof DiscoveryError) throw err;
+    throw new DiscoveryError(
+      `Failed to load migrations ${filePath} for ${entityLabel}: ${err.message}`
+    );
+  }
+}
 function loadNodeEntity(dir, name) {
   const schema = loadSchema(dir, `node type "${name}"`);
   const meta3 = readJsonIfExists(join(dir, "meta.json"));
   const sampleData = readJsonIfExists(join(dir, "sample.json"));
   const viewsPath = findViewsFile(dir);
+  const migrationsPath = findMigrationsFile(dir);
+  const migrations = migrationsPath ? loadMigrations(migrationsPath, `node type "${name}"`) : void 0;
   return {
     kind: "node",
     name,
@@ -30875,7 +31580,9 @@ function loadNodeEntity(dir, name) {
     viewDefaults: meta3?.viewDefaults,
     viewsPath,
     sampleData,
-    allowedIn: meta3?.allowedIn
+    allowedIn: meta3?.allowedIn,
+    migrations,
+    migrationWriteBack: meta3?.migrationWriteBack
   };
 }
 function loadEdgeEntity(dir, name) {
@@ -30900,6 +31607,8 @@ function loadEdgeEntity(dir, name) {
   const meta3 = readJsonIfExists(join(dir, "meta.json"));
   const sampleData = readJsonIfExists(join(dir, "sample.json"));
   const viewsPath = findViewsFile(dir);
+  const migrationsPath = findMigrationsFile(dir);
+  const migrations = migrationsPath ? loadMigrations(migrationsPath, `edge type "${name}"`) : void 0;
   return {
     kind: "edge",
     name,
@@ -30912,7 +31621,9 @@ function loadEdgeEntity(dir, name) {
     viewsPath,
     sampleData,
     allowedIn: meta3?.allowedIn,
-    targetGraph: topology.targetGraph ?? meta3?.targetGraph
+    targetGraph: topology.targetGraph ?? meta3?.targetGraph,
+    migrations,
+    migrationWriteBack: meta3?.migrationWriteBack
   };
 }
 function getSubdirectories(dir) {
@@ -30975,7 +31686,9 @@ function introspectRegistry(registry2, dynamicNames) {
       hasDataSchema: !!entry.jsonSchema,
       fields,
       isNodeEntry: isNode,
-      isDynamic
+      isDynamic,
+      targetGraph: entry.targetGraph,
+      allowedIn: entry.allowedIn
     };
     if (meta3.isNodeEntry) {
       nodeTypes.push(meta3);
@@ -31056,6 +31769,7 @@ function resilientView(ViewClass, tagName) {
 export function defineViews(input) {
   const nodes = {};
   const edges = {};
+  const collections = {};
   const registry = (typeof customElements !== 'undefined' && typeof customElements.define === 'function')
     ? customElements : null;
 
@@ -31079,7 +31793,17 @@ export function defineViews(input) {
     edges[axbType] = { views: viewMetas, sampleData: config.sampleData };
   }
 
-  return { nodes, edges };
+  for (const [colName, config] of Object.entries(input.collections ?? {})) {
+    const viewMetas = [];
+    for (const ViewClass of config.views) {
+      const tagName = 'fg-col-' + sanitizeTagPart(colName) + '-' + sanitizeTagPart(ViewClass.viewName);
+      viewMetas.push({ tagName, viewName: ViewClass.viewName, description: ViewClass.description });
+      if (registry && !registry.get(tagName)) registry.define(tagName, resilientView(ViewClass, tagName));
+    }
+    collections[colName] = { views: viewMetas, sampleData: config.sampleData };
+  }
+
+  return { nodes, edges, collections };
 }
 `;
 var REACT_ADAPTER_SHIM = `
@@ -31171,9 +31895,10 @@ async function loadSveltePlugin() {
     return null;
   }
 }
-async function bundleEntityViews(discovery) {
+async function bundleEntityViews(discovery, collectionViewPaths) {
   const nodeViews = [];
   const edgeViews = [];
+  const colViews = collectionViewPaths ?? [];
   for (const [name, entity] of discovery.nodes) {
     if (entity.viewsPath) {
       nodeViews.push({ name, absPath: path.resolve(entity.viewsPath) });
@@ -31184,10 +31909,11 @@ async function bundleEntityViews(discovery) {
       edgeViews.push({ name, absPath: path.resolve(entity.viewsPath) });
     }
   }
-  if (nodeViews.length === 0 && edgeViews.length === 0) return null;
+  if (nodeViews.length === 0 && edgeViews.length === 0 && colViews.length === 0) return null;
   const imports = [];
   const nodeEntries = [];
   const edgeEntries = [];
+  const colEntries = [];
   nodeViews.forEach(({ name, absPath }, i) => {
     const varName = `nodeViews_${i}`;
     imports.push(`import ${varName} from '${absPath.replace(/\\/g, "/")}';`);
@@ -31198,6 +31924,11 @@ async function bundleEntityViews(discovery) {
     imports.push(`import ${varName} from '${absPath.replace(/\\/g, "/")}';`);
     edgeEntries.push(`    '${name}': { views: Array.isArray(${varName}) ? ${varName} : ${varName}.default || [] }`);
   });
+  colViews.forEach(({ name, absPath }, i) => {
+    const varName = `colViews_${i}`;
+    imports.push(`import ${varName} from '${absPath.replace(/\\/g, "/")}';`);
+    colEntries.push(`    '${name}': { views: Array.isArray(${varName}) ? ${varName} : ${varName}.default || [] }`);
+  });
   const syntheticEntry = `
 ${imports.join("\n")}
 import { defineViews } from 'firegraph';
@@ -31208,6 +31939,9 @@ ${nodeEntries.join(",\n")}
   },
   edges: {
 ${edgeEntries.join(",\n")}
+  },
+  collections: {
+${colEntries.join(",\n")}
   }
 });
 `;
@@ -31508,6 +32242,113 @@ function mergeViewDefaults(discovery, configDefaults) {
   return { nodes, edges };
 }
 
+// editor/server/collections-loader.ts
+import path3 from "path";
+import fs2 from "fs";
+function extractPathParams(pathTemplate) {
+  const params = [];
+  const re = /\{([^}]+)\}/g;
+  let m;
+  while ((m = re.exec(pathTemplate)) !== null) {
+    params.push(m[1]);
+  }
+  return params;
+}
+function discoverCollections(entitiesDir) {
+  const collectionsDir = path3.join(entitiesDir, "collections");
+  if (!fs2.existsSync(collectionsDir)) return [];
+  let entries;
+  try {
+    entries = fs2.readdirSync(collectionsDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const results = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const name = entry.name;
+    const dir = path3.join(collectionsDir, name);
+    const collectionJsonPath = path3.join(dir, "collection.json");
+    if (!fs2.existsSync(collectionJsonPath)) continue;
+    let collectionJson;
+    try {
+      const raw = fs2.readFileSync(collectionJsonPath, "utf-8");
+      collectionJson = JSON.parse(raw);
+    } catch (err) {
+      console.warn(`[firegraph] Skipping collection "${name}": invalid collection.json \u2014 ${err.message}`);
+      continue;
+    }
+    if (!collectionJson.path || typeof collectionJson.path !== "string") continue;
+    let fields = [];
+    let hasSchema = false;
+    const schemaJsonPath = path3.join(dir, "schema.json");
+    if (fs2.existsSync(schemaJsonPath)) {
+      try {
+        const raw = fs2.readFileSync(schemaJsonPath, "utf-8");
+        const schema = JSON.parse(raw);
+        fields = jsonSchemaToFieldMeta(schema);
+        hasSchema = true;
+      } catch {
+      }
+    }
+    const pathParams = extractPathParams(collectionJson.path);
+    const defaultOrderBy = collectionJson.orderBy ? {
+      field: collectionJson.orderBy.field,
+      direction: collectionJson.orderBy.direction ?? "asc"
+    } : void 0;
+    let viewsPath;
+    for (const ext of ["ts", "js", "mts", "mjs"]) {
+      const candidate = path3.join(dir, `views.${ext}`);
+      if (fs2.existsSync(candidate)) {
+        viewsPath = candidate;
+        break;
+      }
+    }
+    let sampleData;
+    const sampleJsonPath = path3.join(dir, "sample.json");
+    if (fs2.existsSync(sampleJsonPath)) {
+      try {
+        sampleData = JSON.parse(fs2.readFileSync(sampleJsonPath, "utf-8"));
+      } catch {
+      }
+    }
+    results.push({
+      name,
+      path: collectionJson.path,
+      description: collectionJson.description,
+      typeField: collectionJson.typeField,
+      typeValue: collectionJson.typeValue,
+      parentNodeType: collectionJson.parentNodeType,
+      fields,
+      hasSchema,
+      pathParams,
+      defaultOrderBy,
+      viewsPath,
+      sampleData
+    });
+  }
+  return results;
+}
+async function buildCollectionViewRegistry(collections) {
+  const result = {};
+  for (const col of collections) {
+    if (!col.viewsPath) continue;
+    try {
+      const viewClasses = await loadViewClasses(col.viewsPath);
+      if (viewClasses.length === 0) continue;
+      const views = viewClasses.map((vc) => ({
+        tagName: `fg-col-${sanitizeTagPart(col.name)}-${sanitizeTagPart(vc.viewName)}`,
+        viewName: vc.viewName,
+        description: vc.description
+      }));
+      result[col.name] = { views, sampleData: col.sampleData };
+    } catch (err) {
+      console.warn(`[firegraph] Failed to load views for collection "${col.name}": ${err.message}`);
+    }
+  }
+  return result;
+}
+
 // editor/node_modules/.pnpm/@trpc+server@11.10.0_typescript@5.9.3/node_modules/@trpc/server/dist/codes-DagpWZLc.mjs
 function mergeWithoutOverrides(obj1, ...objs) {
   const newObj = Object.assign(emptyObject(), obj1);
@@ -31628,27 +32469,27 @@ var noop = () => {
 var freezeIfAvailable = (obj) => {
   if (Object.freeze) Object.freeze(obj);
 };
-function createInnerProxy(callback, path4, memo2) {
+function createInnerProxy(callback, path5, memo2) {
   var _memo$cacheKey;
-  const cacheKey = path4.join(".");
+  const cacheKey = path5.join(".");
   (_memo$cacheKey = memo2[cacheKey]) !== null && _memo$cacheKey !== void 0 || (memo2[cacheKey] = new Proxy(noop, {
     get(_obj, key) {
       if (typeof key !== "string" || key === "then") return void 0;
-      return createInnerProxy(callback, [...path4, key], memo2);
+      return createInnerProxy(callback, [...path5, key], memo2);
     },
     apply(_1, _2, args) {
-      const lastOfPath = path4[path4.length - 1];
+      const lastOfPath = path5[path5.length - 1];
       let opts = {
         args,
-        path: path4
+        path: path5
       };
       if (lastOfPath === "call") opts = {
         args: args.length >= 2 ? [args[1]] : [],
-        path: path4.slice(0, -1)
+        path: path5.slice(0, -1)
       };
       else if (lastOfPath === "apply") opts = {
         args: args.length >= 2 ? args[1] : [],
-        path: path4.slice(0, -1)
+        path: path5.slice(0, -1)
       };
       freezeIfAvailable(opts.args);
       freezeIfAvailable(opts.path);
@@ -31776,7 +32617,7 @@ var require_objectSpread2 = __commonJS2({ "../../node_modules/.pnpm/@oxc-project
 } });
 var import_objectSpread2 = __toESM2(require_objectSpread2(), 1);
 function getErrorShape(opts) {
-  const { path: path4, error: error48, config: config2 } = opts;
+  const { path: path5, error: error48, config: config2 } = opts;
   const { code } = opts.error;
   const shape = {
     message: error48.message,
@@ -31787,7 +32628,7 @@ function getErrorShape(opts) {
     }
   };
   if (config2.isDev && typeof opts.error.stack === "string") shape.data.stack = opts.error.stack;
-  if (typeof path4 === "string") shape.data.path = path4;
+  if (typeof path5 === "string") shape.data.path = path5;
   return config2.errorFormatter((0, import_objectSpread2.default)((0, import_objectSpread2.default)({}, opts), {}, { shape }));
 }
 
@@ -31913,12 +32754,12 @@ function createRouterFactory(config2) {
         })
       };
     }
-    function step(from, path4 = []) {
+    function step(from, path5 = []) {
       const aggregate = emptyObject();
       for (const [key, item] of Object.entries(from !== null && from !== void 0 ? from : {})) {
         if (isLazy(item)) {
-          lazy$1[[...path4, key].join(".")] = createLazyLoader({
-            path: path4,
+          lazy$1[[...path5, key].join(".")] = createLazyLoader({
+            path: path5,
             ref: item,
             key,
             aggregate
@@ -31926,14 +32767,14 @@ function createRouterFactory(config2) {
           continue;
         }
         if (isRouter(item)) {
-          aggregate[key] = step(item._def.record, [...path4, key]);
+          aggregate[key] = step(item._def.record, [...path5, key]);
           continue;
         }
         if (!isProcedure(item)) {
-          aggregate[key] = step(item, [...path4, key]);
+          aggregate[key] = step(item, [...path5, key]);
           continue;
         }
-        const newPath = [...path4, key].join(".");
+        const newPath = [...path5, key].join(".");
         if (procedures[newPath]) throw new Error(`Duplicate key: ${newPath}`);
         procedures[newPath] = item;
         aggregate[key] = item;
@@ -31958,15 +32799,15 @@ function createRouterFactory(config2) {
 function isProcedure(procedureOrRouter) {
   return typeof procedureOrRouter === "function";
 }
-async function getProcedureAtPath(router, path4) {
+async function getProcedureAtPath(router, path5) {
   const { _def } = router;
-  let procedure = _def.procedures[path4];
+  let procedure = _def.procedures[path5];
   while (!procedure) {
-    const key = Object.keys(_def.lazy).find((key$1) => path4.startsWith(key$1));
+    const key = Object.keys(_def.lazy).find((key$1) => path5.startsWith(key$1));
     if (!key) return null;
     const lazyRouter = _def.lazy[key];
     await lazyRouter.load();
-    procedure = _def.procedures[path4];
+    procedure = _def.procedures[path5];
   }
   return procedure;
 }
@@ -31975,15 +32816,15 @@ function createCallerFactory() {
     const { _def } = router;
     return function createCaller(ctxOrCallback, opts) {
       return createRecursiveProxy(async (innerOpts) => {
-        const { path: path4, args } = innerOpts;
-        const fullPath = path4.join(".");
-        if (path4.length === 1 && path4[0] === "_def") return _def;
+        const { path: path5, args } = innerOpts;
+        const fullPath = path5.join(".");
+        if (path5.length === 1 && path5[0] === "_def") return _def;
         const procedure = await getProcedureAtPath(router, fullPath);
         let ctx = void 0;
         try {
           if (!procedure) throw new TRPCError({
             code: "NOT_FOUND",
-            message: `No procedure found on path "${path4}"`
+            message: `No procedure found on path "${path5}"`
           });
           ctx = isFunction(ctxOrCallback) ? await Promise.resolve(ctxOrCallback()) : ctxOrCallback;
           return await procedure({
@@ -32199,11 +33040,11 @@ var jsonContentTypeHandler = {
       }
       return acc;
     });
-    const calls = await Promise.all(paths.map(async (path4, index) => {
-      const procedure = await getProcedureAtPath(opts.router, path4);
+    const calls = await Promise.all(paths.map(async (path5, index) => {
+      const procedure = await getProcedureAtPath(opts.router, path5);
       return {
         batchIndex: index,
-        path: path4,
+        path: path5,
         procedure,
         getRawInput: async () => {
           const inputs = await getInputs.read();
@@ -33011,9 +33852,9 @@ function isPromise(value) {
   return (isObject(value) || isFunction(value)) && typeof (value === null || value === void 0 ? void 0 : value["then"]) === "function" && typeof (value === null || value === void 0 ? void 0 : value["catch"]) === "function";
 }
 var MaxDepthError = class extends Error {
-  constructor(path4) {
-    super("Max depth reached at path: " + path4.join("."));
-    this.path = path4;
+  constructor(path5) {
+    super("Max depth reached at path: " + path5.join("."));
+    this.path = path5;
   }
 };
 function createBatchStreamProducer(_x3) {
@@ -33031,16 +33872,16 @@ function _createBatchStreamProducer() {
       mergedIterables.add(iterable$1);
       return idx;
     }
-    function encodePromise(promise2, path4) {
+    function encodePromise(promise2, path5) {
       return registerAsync(/* @__PURE__ */ function() {
         var _ref = (0, import_wrapAsyncGenerator$2.default)(function* (idx) {
-          const error48 = checkMaxDepth(path4);
+          const error48 = checkMaxDepth(path5);
           if (error48) {
             promise2.catch((cause) => {
               var _opts$onError;
               (_opts$onError = opts.onError) === null || _opts$onError === void 0 || _opts$onError.call(opts, {
                 error: cause,
-                path: path4
+                path: path5
               });
             });
             promise2 = Promise.reject(error48);
@@ -33050,20 +33891,20 @@ function _createBatchStreamProducer() {
             yield [
               idx,
               PROMISE_STATUS_FULFILLED,
-              encode3(next, path4)
+              encode3(next, path5)
             ];
           } catch (cause) {
             var _opts$onError2, _opts$formatError;
             (_opts$onError2 = opts.onError) === null || _opts$onError2 === void 0 || _opts$onError2.call(opts, {
               error: cause,
-              path: path4
+              path: path5
             });
             yield [
               idx,
               PROMISE_STATUS_REJECTED,
               (_opts$formatError = opts.formatError) === null || _opts$formatError === void 0 ? void 0 : _opts$formatError.call(opts, {
                 error: cause,
-                path: path4
+                path: path5
               })
             ];
           }
@@ -33073,12 +33914,12 @@ function _createBatchStreamProducer() {
         };
       }());
     }
-    function encodeAsyncIterable(iterable$1, path4) {
+    function encodeAsyncIterable(iterable$1, path5) {
       return registerAsync(/* @__PURE__ */ function() {
         var _ref2 = (0, import_wrapAsyncGenerator$2.default)(function* (idx) {
           try {
             var _usingCtx$1 = (0, import_usingCtx$1.default)();
-            const error48 = checkMaxDepth(path4);
+            const error48 = checkMaxDepth(path5);
             if (error48) throw error48;
             const iterator = _usingCtx$1.a(iteratorResource(iterable$1));
             try {
@@ -33088,28 +33929,28 @@ function _createBatchStreamProducer() {
                   yield [
                     idx,
                     ASYNC_ITERABLE_STATUS_RETURN,
-                    encode3(next.value, path4)
+                    encode3(next.value, path5)
                   ];
                   break;
                 }
                 yield [
                   idx,
                   ASYNC_ITERABLE_STATUS_YIELD,
-                  encode3(next.value, path4)
+                  encode3(next.value, path5)
                 ];
               }
             } catch (cause) {
               var _opts$onError3, _opts$formatError2;
               (_opts$onError3 = opts.onError) === null || _opts$onError3 === void 0 || _opts$onError3.call(opts, {
                 error: cause,
-                path: path4
+                path: path5
               });
               yield [
                 idx,
                 ASYNC_ITERABLE_STATUS_ERROR,
                 (_opts$formatError2 = opts.formatError) === null || _opts$formatError2 === void 0 ? void 0 : _opts$formatError2.call(opts, {
                   error: cause,
-                  path: path4
+                  path: path5
                 })
               ];
             }
@@ -33124,27 +33965,27 @@ function _createBatchStreamProducer() {
         };
       }());
     }
-    function checkMaxDepth(path4) {
-      if (opts.maxDepth && path4.length > opts.maxDepth) return new MaxDepthError(path4);
+    function checkMaxDepth(path5) {
+      if (opts.maxDepth && path5.length > opts.maxDepth) return new MaxDepthError(path5);
       return null;
     }
-    function encodeAsync3(value, path4) {
-      if (isPromise(value)) return [CHUNK_VALUE_TYPE_PROMISE, encodePromise(value, path4)];
+    function encodeAsync3(value, path5) {
+      if (isPromise(value)) return [CHUNK_VALUE_TYPE_PROMISE, encodePromise(value, path5)];
       if (isAsyncIterable(value)) {
-        if (opts.maxDepth && path4.length >= opts.maxDepth) throw new Error("Max depth reached");
-        return [CHUNK_VALUE_TYPE_ASYNC_ITERABLE, encodeAsyncIterable(value, path4)];
+        if (opts.maxDepth && path5.length >= opts.maxDepth) throw new Error("Max depth reached");
+        return [CHUNK_VALUE_TYPE_ASYNC_ITERABLE, encodeAsyncIterable(value, path5)];
       }
       return null;
     }
-    function encode3(value, path4) {
+    function encode3(value, path5) {
       if (value === void 0) return [[]];
-      const reg = encodeAsync3(value, path4);
+      const reg = encodeAsync3(value, path5);
       if (reg) return [[placeholder], [null, ...reg]];
       if (!isPlainObject(value)) return [[value]];
       const newObj = emptyObject();
       const asyncValues = [];
       for (const [key, item] of Object.entries(value)) {
-        const transformed = encodeAsync3(item, [...path4, key]);
+        const transformed = encodeAsync3(item, [...path5, key]);
         if (!transformed) {
           newObj[key] = item;
           continue;
@@ -33584,11 +34425,11 @@ async function resolveResponse(opts) {
               var _call$procedure$_def$2, _call$procedure3, _opts$onError2;
               const error$1 = getTRPCErrorFromUnknown(errorOpts.error);
               const input = call === null || call === void 0 ? void 0 : call.result();
-              const path4 = call === null || call === void 0 ? void 0 : call.path;
+              const path5 = call === null || call === void 0 ? void 0 : call.path;
               const type = (_call$procedure$_def$2 = call === null || call === void 0 || (_call$procedure3 = call.procedure) === null || _call$procedure3 === void 0 ? void 0 : _call$procedure3._def.type) !== null && _call$procedure$_def$2 !== void 0 ? _call$procedure$_def$2 : "unknown";
               (_opts$onError2 = opts.onError) === null || _opts$onError2 === void 0 || _opts$onError2.call(opts, {
                 error: error$1,
-                path: path4,
+                path: path5,
                 input,
                 ctx: ctxManager.valueOrUndefined(),
                 req: opts.req,
@@ -33599,7 +34440,7 @@ async function resolveResponse(opts) {
                 ctx: ctxManager.valueOrUndefined(),
                 error: error$1,
                 input,
-                path: path4,
+                path: path5,
                 type
               });
               return shape;
@@ -33668,14 +34509,14 @@ async function resolveResponse(opts) {
           const call = info === null || info === void 0 ? void 0 : info.calls[errorOpts.path[0]];
           const error48 = getTRPCErrorFromUnknown(errorOpts.error);
           const input = call === null || call === void 0 ? void 0 : call.result();
-          const path4 = call === null || call === void 0 ? void 0 : call.path;
+          const path5 = call === null || call === void 0 ? void 0 : call.path;
           const type = (_call$procedure$_def$3 = call === null || call === void 0 || (_call$procedure4 = call.procedure) === null || _call$procedure4 === void 0 ? void 0 : _call$procedure4._def.type) !== null && _call$procedure$_def$3 !== void 0 ? _call$procedure$_def$3 : "unknown";
           const shape = getErrorShape({
             config: config2,
             ctx: ctxManager.valueOrUndefined(),
             error: error48,
             input,
-            path: path4,
+            path: path5,
             type
           });
           return shape;
@@ -34254,24 +35095,24 @@ async function nodeHTTPRequestHandler(opts) {
 var import_objectSpread26 = __toESM2(require_objectSpread2(), 1);
 function createExpressMiddleware(opts) {
   return (req, res) => {
-    let path4 = "";
+    let path5 = "";
     run(async () => {
-      path4 = req.path.slice(req.path.lastIndexOf("/") + 1);
+      path5 = req.path.slice(req.path.lastIndexOf("/") + 1);
       await nodeHTTPRequestHandler((0, import_objectSpread26.default)((0, import_objectSpread26.default)({}, opts), {}, {
         req,
         res,
-        path: path4
+        path: path5
       }));
     }).catch(internal_exceptionHandler((0, import_objectSpread26.default)({
       req,
       res,
-      path: path4
+      path: path5
     }, opts)));
   };
 }
 
 // editor/server/trpc.ts
-import { Timestamp } from "@google-cloud/firestore";
+import { Timestamp as Timestamp2, FieldPath } from "@google-cloud/firestore";
 
 // editor/node_modules/.pnpm/zod@4.3.6/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -35040,10 +35881,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path4) {
-  if (!path4)
+function getElementAtPath(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -35426,11 +36267,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path4, issues) {
+function prefixIssues(path5, issues) {
   return issues.map((iss) => {
     var _a2;
     (_a2 = iss).path ?? (_a2.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -35613,7 +36454,7 @@ function formatError(error48, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error48, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error49, path4 = []) => {
+  const processError = (error49, path5 = []) => {
     var _a2, _b;
     for (const issue2 of error49.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -35623,7 +36464,7 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -35655,8 +36496,8 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path4) {
+  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -47633,13 +48474,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path4 = ref.slice(1).split("/").filter(Boolean);
-  if (path4.length === 0) {
+  const path5 = ref.slice(1).split("/").filter(Boolean);
+  if (path5.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path4[0] === defsKey) {
-    const key = path4[1];
+  if (path5[0] === defsKey) {
+    const key = path5[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -48067,16 +48908,16 @@ var writeProcedure = t.procedure.use(async ({ ctx, next }) => {
   return next();
 });
 var NODE_RELATION2 = "is";
+function serializeValue2(value) {
+  if (value instanceof Timestamp2) return value.toDate().toISOString();
+  if (Array.isArray(value)) return value.map(serializeValue2);
+  if (value && typeof value === "object") return serializeRecord(value);
+  return value;
+}
 function serializeRecord(doc) {
   const result = {};
   for (const [key, value] of Object.entries(doc)) {
-    if (value instanceof Timestamp) {
-      result[key] = value.toDate().toISOString();
-    } else if (value && typeof value === "object" && !Array.isArray(value)) {
-      result[key] = serializeRecord(value);
-    } else {
-      result[key] = value;
-    }
+    result[key] = serializeValue2(value);
   }
   return result;
 }
@@ -48089,6 +48930,55 @@ function stripTypePrefix(raw) {
   }
   return raw;
 }
+function resolveCollectionPath(rootCollection, scope) {
+  if (!scope) return rootCollection;
+  const segments = scope.split("/");
+  if (segments.length % 2 !== 0) {
+    throw new TRPCError({
+      code: "BAD_REQUEST",
+      message: `Invalid scope path: "${scope}". Must be pairs of parentUid/subgraphName.`
+    });
+  }
+  return `${rootCollection}/${scope}`;
+}
+function getScopedClient(rootClient, scope) {
+  if (!scope) return rootClient;
+  const segments = scope.split("/");
+  if (segments.length % 2 !== 0) {
+    throw new TRPCError({
+      code: "BAD_REQUEST",
+      message: `Invalid scope path: "${scope}". Must be pairs of parentUid/subgraphName.`
+    });
+  }
+  let client = rootClient;
+  for (let i = 0; i < segments.length; i += 2) {
+    client = client.subgraph(segments[i], segments[i + 1]);
+  }
+  return client;
+}
+var scopeSchema = external_exports.string().optional();
+function substitutePathTemplate(template, params = {}) {
+  return template.replace(/\{([^}]+)\}/g, (_, key) => {
+    if (!(key in params)) {
+      throw new TRPCError({ code: "BAD_REQUEST", message: `Missing required path parameter: "${key}"` });
+    }
+    const val = params[key];
+    if (!val) {
+      throw new TRPCError({ code: "BAD_REQUEST", message: `Path parameter "${key}" must not be empty` });
+    }
+    if (val.includes("/")) {
+      throw new TRPCError({ code: "BAD_REQUEST", message: `Path parameter "${key}" must not contain "/"` });
+    }
+    return val;
+  });
+}
+function getCollectionDef(ctx, name) {
+  const def = ctx.collectionDefs.find((c) => c.name === name);
+  if (!def) {
+    throw new TRPCError({ code: "NOT_FOUND", message: `Collection "${name}" not found.` });
+  }
+  return def;
+}
 var appRouter = t.router({
   // --- Config ---
   getConfig: publicProcedure.query(({ ctx }) => ({
@@ -48116,7 +49006,8 @@ var appRouter = t.router({
       inverseLabel: e.inverseLabel,
       titleField: e.titleField,
       subtitleField: e.subtitleField,
-      isDynamic: e.isDynamic
+      isDynamic: e.isDynamic,
+      targetGraph: e.targetGraph
     }));
     return {
       nodeTypes,
@@ -48124,13 +49015,26 @@ var appRouter = t.router({
       readonly: ctx.readonly,
       nodeSchemas: ctx.schemaMetadata.nodeTypes,
       edgeSchemas: ctx.schemaMetadata.edgeTypes,
-      dynamicMode: ctx.reloadFn !== null
+      dynamicMode: ctx.reloadFn !== null,
+      collections: ctx.collectionDefs.map((c) => ({
+        name: c.name,
+        path: c.path,
+        description: c.description,
+        typeField: c.typeField,
+        typeValue: c.typeValue,
+        parentNodeType: c.parentNodeType,
+        fields: c.fields,
+        hasSchema: c.hasSchema,
+        pathParams: c.pathParams,
+        defaultOrderBy: c.defaultOrderBy
+      }))
     };
   }),
   // --- Views ---
   getViews: publicProcedure.query(({ ctx }) => {
     const nodes = ctx.viewRegistry?.nodes ? { ...ctx.viewRegistry.nodes } : {};
     const edges = ctx.viewRegistry?.edges ? { ...ctx.viewRegistry.edges } : {};
+    const collections = { ...ctx.collectionViewRegistry };
     if (ctx.dynamicTypeMeta) {
       for (const [name, meta3] of Object.entries(ctx.dynamicTypeMeta.nodes)) {
         if (!meta3.viewTemplate) continue;
@@ -48155,8 +49059,8 @@ var appRouter = t.router({
         }
       }
     }
-    const hasViews = Object.keys(nodes).length > 0 || Object.keys(edges).length > 0;
-    return { nodes, edges, hasViews };
+    const hasViews = Object.keys(nodes).length > 0 || Object.keys(edges).length > 0 || Object.keys(collections).length > 0;
+    return { nodes, edges, collections, hasViews };
   }),
   // --- Reload Schema (dynamic registry) ---
   reloadSchema: writeProcedure.mutation(async ({ ctx }) => {
@@ -48175,6 +49079,7 @@ var appRouter = t.router({
   })),
   // --- Browse Nodes ---
   getNodes: publicProcedure.input(external_exports.object({
+    scope: scopeSchema,
     type: external_exports.string().optional(),
     limit: external_exports.number().min(1).max(200).default(25),
     startAfter: external_exports.string().optional(),
@@ -48191,7 +49096,7 @@ var appRouter = t.router({
       value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])
     })).optional()
   })).query(async ({ ctx, input }) => {
-    const col = ctx.db.collection(ctx.collection);
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     const builtinSortFields = ["aUid", "createdAt", "updatedAt"];
     let effectiveSortBy;
     if (builtinSortFields.includes(input.sortBy)) {
@@ -48234,13 +49139,13 @@ var appRouter = t.router({
     if (hasMore && docs.length > 0) {
       const lastDoc = docs[docs.length - 1].data();
       const cursorValue = lastDoc[effectiveSortBy];
-      nextCursor = cursorValue instanceof Timestamp ? cursorValue.toDate().toISOString() : String(cursorValue);
+      nextCursor = cursorValue instanceof Timestamp2 ? cursorValue.toDate().toISOString() : String(cursorValue);
     }
     return { nodes, hasMore, nextCursor };
   }),
   // --- Get Single Node ---
-  getNodeDetail: publicProcedure.input(external_exports.object({ uid: external_exports.string() })).query(async ({ ctx, input }) => {
-    const col = ctx.db.collection(ctx.collection);
+  getNodeDetail: publicProcedure.input(external_exports.object({ scope: scopeSchema, uid: external_exports.string() })).query(async ({ ctx, input }) => {
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     const edgeLimit = 50;
     const uid = stripTypePrefix(input.uid);
     const nodeDoc = await col.doc(uid).get();
@@ -48252,8 +49157,8 @@ var appRouter = t.router({
     return { node, outEdges, inEdges };
   }),
   // --- Batch Get Nodes ---
-  getNodesBatch: publicProcedure.input(external_exports.object({ uids: external_exports.array(external_exports.string()).min(1).max(100) })).query(async ({ ctx, input }) => {
-    const col = ctx.db.collection(ctx.collection);
+  getNodesBatch: publicProcedure.input(external_exports.object({ scope: scopeSchema, uids: external_exports.array(external_exports.string()).min(1).max(100) })).query(async ({ ctx, input }) => {
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     const cleanUids = input.uids.map(stripTypePrefix);
     const refs = cleanUids.map((uid) => col.doc(uid));
     const snapshots = await ctx.db.getAll(...refs);
@@ -48265,6 +49170,7 @@ var appRouter = t.router({
   }),
   // --- Query Edges ---
   getEdges: publicProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aType: external_exports.string().optional(),
     aUid: external_exports.string().optional(),
     axbType: external_exports.string().optional(),
@@ -48280,7 +49186,7 @@ var appRouter = t.router({
       value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])
     })).optional()
   })).query(async ({ ctx, input }) => {
-    const col = ctx.db.collection(ctx.collection);
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     let query = col;
     if (input.aType) query = query.where("aType", "==", input.aType);
     if (input.aUid) query = query.where("aUid", "==", input.aUid);
@@ -48320,12 +49226,13 @@ var appRouter = t.router({
     if (hasMore && docs.length > 0) {
       const lastDoc = docs[docs.length - 1].data();
       const cursorValue = effectiveSortBy.startsWith("data.") ? effectiveSortBy.split(".").reduce((obj, key) => obj?.[key], lastDoc) : lastDoc[effectiveSortBy];
-      nextCursor = cursorValue instanceof Timestamp ? cursorValue.toDate().toISOString() : String(cursorValue);
+      nextCursor = cursorValue instanceof Timestamp2 ? cursorValue.toDate().toISOString() : String(cursorValue);
     }
     return { edges, hasMore, nextCursor };
   }),
   // --- Traversal ---
   traverse: publicProcedure.input(external_exports.object({
+    scope: scopeSchema,
     startUid: external_exports.string().min(1),
     hops: external_exports.array(external_exports.object({
       axbType: external_exports.string(),
@@ -48346,7 +49253,7 @@ var appRouter = t.router({
     maxReads: external_exports.number().default(100),
     concurrency: external_exports.number().default(5)
   })).mutation(async ({ ctx, input }) => {
-    const col = ctx.db.collection(ctx.collection);
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     let totalReads = 0;
     let truncated = false;
     let sourceUids = [input.startUid];
@@ -48433,12 +49340,13 @@ var appRouter = t.router({
   }),
   // --- Search ---
   search: publicProcedure.input(external_exports.object({
+    scope: scopeSchema,
     q: external_exports.string(),
     limit: external_exports.number().min(1).max(50).default(20)
   })).query(async ({ ctx, input }) => {
     const q = input.q.trim();
     if (!q) return { results: [] };
-    const col = ctx.db.collection(ctx.collection);
+    const col = ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope));
     const strippedQ = stripTypePrefix(q);
     const nodeDoc = await col.doc(strippedQ).get();
     const results = [];
@@ -48462,8 +49370,8 @@ var appRouter = t.router({
     return { results: results.slice(0, input.limit) };
   }),
   // --- Check Node Exists ---
-  checkNode: publicProcedure.input(external_exports.object({ uid: external_exports.string().min(1) })).query(async ({ ctx, input }) => {
-    const doc = await ctx.db.collection(ctx.collection).doc(stripTypePrefix(input.uid)).get();
+  checkNode: publicProcedure.input(external_exports.object({ scope: scopeSchema, uid: external_exports.string().min(1) })).query(async ({ ctx, input }) => {
+    const doc = await ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope)).doc(stripTypePrefix(input.uid)).get();
     if (!doc.exists) return { exists: false, node: null };
     const data = serializeRecord(doc.data());
     return {
@@ -48473,23 +49381,26 @@ var appRouter = t.router({
   }),
   // --- Check Edge Exists ---
   checkEdge: publicProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aUid: external_exports.string().min(1),
     axbType: external_exports.string().min(1),
     bUid: external_exports.string().min(1)
   })).query(async ({ ctx, input }) => {
     const docId = computeEdgeDocId(input.aUid, input.axbType, input.bUid);
-    const doc = await ctx.db.collection(ctx.collection).doc(docId).get();
+    const doc = await ctx.db.collection(resolveCollectionPath(ctx.collection, input.scope)).doc(docId).get();
     return { exists: doc.exists };
   }),
   // --- Write: Create Node ---
   createNode: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aType: external_exports.string(),
     uid: external_exports.string().optional(),
     data: external_exports.record(external_exports.string(), external_exports.unknown())
   })).mutation(async ({ ctx, input }) => {
     try {
+      const client = getScopedClient(ctx.graphClient, input.scope);
       const nodeUid = input.uid || generateId();
-      await ctx.graphClient.putNode(input.aType, nodeUid, input.data);
+      await client.putNode(input.aType, nodeUid, input.data);
       return { success: true, uid: nodeUid };
     } catch (err) {
       if (err instanceof ValidationError || err instanceof RegistryViolationError) {
@@ -48500,15 +49411,17 @@ var appRouter = t.router({
   }),
   // --- Write: Update Node ---
   updateNode: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     uid: external_exports.string(),
     data: external_exports.record(external_exports.string(), external_exports.unknown())
   })).mutation(async ({ ctx, input }) => {
     try {
-      const existing = await ctx.graphClient.getNode(input.uid);
+      const client = getScopedClient(ctx.graphClient, input.scope);
+      const existing = await client.getNode(input.uid);
       if (!existing) {
         throw new TRPCError({ code: "NOT_FOUND", message: "Node not found" });
       }
-      await ctx.graphClient.putNode(existing.aType, input.uid, input.data);
+      await client.putNode(existing.aType, input.uid, input.data);
       return { success: true };
     } catch (err) {
       if (err instanceof TRPCError) throw err;
@@ -48519,13 +49432,15 @@ var appRouter = t.router({
     }
   }),
   // --- Write: Delete Node ---
-  deleteNode: writeProcedure.input(external_exports.object({ uid: external_exports.string() })).mutation(async ({ ctx, input }) => {
-    await ctx.graphClient.removeNode(input.uid);
+  deleteNode: writeProcedure.input(external_exports.object({ scope: scopeSchema, uid: external_exports.string() })).mutation(async ({ ctx, input }) => {
+    const client = getScopedClient(ctx.graphClient, input.scope);
+    await client.removeNode(input.uid);
     return { success: true };
   }),
   // --- Write: Delete Node + Cascade (all edges) ---
-  deleteNodeCascade: writeProcedure.input(external_exports.object({ uid: external_exports.string() })).mutation(async ({ ctx, input }) => {
-    const result = await ctx.graphClient.removeNodeCascade(input.uid);
+  deleteNodeCascade: writeProcedure.input(external_exports.object({ scope: scopeSchema, uid: external_exports.string() })).mutation(async ({ ctx, input }) => {
+    const client = getScopedClient(ctx.graphClient, input.scope);
+    const result = await client.removeNodeCascade(input.uid);
     return {
       success: result.nodeDeleted,
       edgesDeleted: result.edgesDeleted,
@@ -48539,6 +49454,7 @@ var appRouter = t.router({
   }),
   // --- Write: Create Edge ---
   createEdge: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aType: external_exports.string(),
     aUid: external_exports.string(),
     axbType: external_exports.string(),
@@ -48547,7 +49463,8 @@ var appRouter = t.router({
     data: external_exports.record(external_exports.string(), external_exports.unknown())
   })).mutation(async ({ ctx, input }) => {
     try {
-      await ctx.graphClient.putEdge(
+      const client = getScopedClient(ctx.graphClient, input.scope);
+      await client.putEdge(
         input.aType,
         input.aUid,
         input.axbType,
@@ -48565,6 +49482,7 @@ var appRouter = t.router({
   }),
   // --- Write: Create Edge + Target Node atomically ---
   createEdgeWithNode: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aType: external_exports.string(),
     axbType: external_exports.string(),
     bType: external_exports.string(),
@@ -48578,13 +49496,14 @@ var appRouter = t.router({
     nodeData: external_exports.record(external_exports.string(), external_exports.unknown())
   })).mutation(async ({ ctx, input }) => {
     try {
+      const client = getScopedClient(ctx.graphClient, input.scope);
       const newUid = input.newNodeUid || generateId();
       const newNodeType = input.newNodeSide === "b" ? input.bType : input.aType;
       const aUid = input.newNodeSide === "a" ? newUid : input.existingUid;
       const bUid = input.newNodeSide === "b" ? newUid : input.existingUid;
       const [existingNode, existingEdge] = await Promise.all([
-        ctx.graphClient.getNode(newUid),
-        ctx.graphClient.getEdge(aUid, input.axbType, bUid)
+        client.getNode(newUid),
+        client.getEdge(aUid, input.axbType, bUid)
       ]);
       if (existingNode && existingEdge) {
         throw new TRPCError({
@@ -48592,7 +49511,7 @@ var appRouter = t.router({
           message: `Both node "${newUid}" and edge ${aUid} \u2014[${input.axbType}]\u2192 ${bUid} already exist.`
         });
       }
-      await ctx.graphClient.runTransaction(async (tx) => {
+      await client.runTransaction(async (tx) => {
         if (!existingNode) {
           await tx.putNode(newNodeType, newUid, input.nodeData);
         }
@@ -48616,15 +49535,18 @@ var appRouter = t.router({
   }),
   // --- Write: Delete Edge ---
   deleteEdge: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aUid: external_exports.string(),
     axbType: external_exports.string(),
     bUid: external_exports.string()
   })).mutation(async ({ ctx, input }) => {
-    await ctx.graphClient.removeEdge(input.aUid, input.axbType, input.bUid);
+    const client = getScopedClient(ctx.graphClient, input.scope);
+    await client.removeEdge(input.aUid, input.axbType, input.bUid);
     return { success: true };
   }),
   // --- Write: Bulk Delete Edges (by query) ---
   bulkDeleteEdges: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     aUid: external_exports.string().optional(),
     axbType: external_exports.string().optional(),
     bUid: external_exports.string().optional(),
@@ -48636,12 +49558,13 @@ var appRouter = t.router({
       value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])
     })).optional()
   })).mutation(async ({ ctx, input }) => {
-    const { where: whereClauses, ...params } = input;
+    const client = getScopedClient(ctx.graphClient, input.scope);
+    const { where: whereClauses, scope: _scope, ...params } = input;
     const findParams = { ...params };
     if (whereClauses && whereClauses.length > 0) {
       findParams.where = whereClauses;
     }
-    const result = await ctx.graphClient.bulkRemoveEdges(findParams);
+    const result = await client.bulkRemoveEdges(findParams);
     return {
       success: true,
       deleted: result.deleted,
@@ -48655,18 +49578,132 @@ var appRouter = t.router({
   }),
   // --- Write: Delete specific edges by ID ---
   deleteEdgesBatch: writeProcedure.input(external_exports.object({
+    scope: scopeSchema,
     edges: external_exports.array(external_exports.object({
       aUid: external_exports.string(),
       axbType: external_exports.string(),
       bUid: external_exports.string()
     })).min(1).max(500)
   })).mutation(async ({ ctx, input }) => {
-    const batch = ctx.graphClient.batch();
+    const client = getScopedClient(ctx.graphClient, input.scope);
+    const batch = client.batch();
     for (const e of input.edges) {
       await batch.removeEdge(e.aUid, e.axbType, e.bUid);
     }
     await batch.commit();
     return { success: true, deleted: input.edges.length };
+  }),
+  // --- Plain Collection Procedures ---
+  getCollectionDocs: publicProcedure.input(external_exports.object({
+    collectionName: external_exports.string(),
+    params: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    cursor: external_exports.string().optional(),
+    limit: external_exports.number().int().min(1).max(100).default(50)
+  })).query(async ({ ctx, input }) => {
+    const def = getCollectionDef(ctx, input.collectionName);
+    const colPath = substitutePathTemplate(def.path, input.params ?? {});
+    const col = ctx.db.collection(colPath);
+    let query = col;
+    if (def.typeField && def.typeValue !== void 0) {
+      query = query.where(def.typeField, "==", def.typeValue);
+    }
+    if (def.defaultOrderBy) {
+      query = query.orderBy(def.defaultOrderBy.field, def.defaultOrderBy.direction);
+    } else {
+      query = query.orderBy(FieldPath.documentId());
+    }
+    query = query.limit(input.limit + 1);
+    if (input.cursor) {
+      const cursorSnap = await col.doc(input.cursor).get();
+      if (!cursorSnap.exists) {
+        throw new TRPCError({
+          code: "NOT_FOUND",
+          message: `Cursor document "${input.cursor}" no longer exists. Refresh to start from the first page.`
+        });
+      }
+      query = query.startAfter(cursorSnap);
+    }
+    const snapshot = await query.get();
+    const docs = snapshot.docs.slice(0, input.limit);
+    const hasMore = snapshot.docs.length > input.limit;
+    const documents = docs.map((doc) => ({
+      id: doc.id,
+      data: serializeRecord(doc.data())
+    }));
+    const nextCursor = hasMore && docs.length > 0 ? docs[docs.length - 1].id : null;
+    return {
+      documents,
+      hasMore,
+      nextCursor
+    };
+  }),
+  getCollectionDoc: publicProcedure.input(external_exports.object({
+    collectionName: external_exports.string(),
+    params: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    docId: external_exports.string()
+  })).query(async ({ ctx, input }) => {
+    const def = getCollectionDef(ctx, input.collectionName);
+    const colPath = substitutePathTemplate(def.path, input.params ?? {});
+    const snap = await ctx.db.collection(colPath).doc(input.docId).get();
+    if (!snap.exists) {
+      throw new TRPCError({ code: "NOT_FOUND", message: `Document "${input.docId}" not found.` });
+    }
+    const docData = snap.data();
+    if (def.typeField && def.typeValue !== void 0 && docData[def.typeField] !== def.typeValue) {
+      throw new TRPCError({ code: "NOT_FOUND", message: `Document "${input.docId}" not found.` });
+    }
+    return { id: snap.id, data: serializeRecord(docData) };
+  }),
+  createCollectionDoc: writeProcedure.input(external_exports.object({
+    collectionName: external_exports.string(),
+    params: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    data: external_exports.record(external_exports.string(), external_exports.unknown())
+  })).mutation(async ({ ctx, input }) => {
+    const def = getCollectionDef(ctx, input.collectionName);
+    const colPath = substitutePathTemplate(def.path, input.params ?? {});
+    const docData = { ...input.data };
+    if (def.typeField && def.typeValue !== void 0) {
+      docData[def.typeField] = def.typeValue;
+    }
+    const docRef = await ctx.db.collection(colPath).add(docData);
+    return { success: true, id: docRef.id };
+  }),
+  updateCollectionDoc: writeProcedure.input(external_exports.object({
+    collectionName: external_exports.string(),
+    params: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    docId: external_exports.string(),
+    data: external_exports.record(external_exports.string(), external_exports.unknown())
+  })).mutation(async ({ ctx, input }) => {
+    const def = getCollectionDef(ctx, input.collectionName);
+    const colPath = substitutePathTemplate(def.path, input.params ?? {});
+    if (def.typeField && def.typeValue !== void 0) {
+      const snap = await ctx.db.collection(colPath).doc(input.docId).get();
+      if (!snap.exists || snap.data()[def.typeField] !== def.typeValue) {
+        throw new TRPCError({ code: "NOT_FOUND", message: `Document "${input.docId}" not found.` });
+      }
+    }
+    const docData = { ...input.data };
+    if (def.typeField && def.typeValue !== void 0) {
+      docData[def.typeField] = def.typeValue;
+    }
+    await ctx.db.collection(colPath).doc(input.docId).set(docData, { merge: true });
+    return { success: true };
+  }),
+  deleteCollectionDoc: writeProcedure.input(external_exports.object({
+    collectionName: external_exports.string(),
+    params: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    docId: external_exports.string()
+  })).mutation(async ({ ctx, input }) => {
+    const def = getCollectionDef(ctx, input.collectionName);
+    const colPath = substitutePathTemplate(def.path, input.params ?? {});
+    if (def.typeField && def.typeValue !== void 0) {
+      const snap = await ctx.db.collection(colPath).doc(input.docId).get();
+      if (!snap.exists || snap.data()[def.typeField] !== def.typeValue) {
+        throw new TRPCError({ code: "NOT_FOUND", message: `Document "${input.docId}" not found.` });
+      }
+    }
+    await ctx.db.collection(colPath).doc(input.docId).delete();
+    return { success: true };
   })
 });
 
@@ -49158,7 +50195,7 @@ ${elements.join("\n")}`;
 }
 
 // editor/server/index.ts
-var __dirname = path3.dirname(fileURLToPath(import.meta.url));
+var __dirname = path4.dirname(fileURLToPath(import.meta.url));
 function parseArgs() {
   const args = process.argv.slice(2);
   let configPath;
@@ -49218,6 +50255,8 @@ var resolvedChatEnabled = false;
 var resolvedChatModel = "sonnet";
 var resolvedChatMaxConcurrency = 2;
 var viewDefaultsData = null;
+var resolvedCollectionDefs = [];
+var collectionViewRegistry = {};
 var resolvedRegistryMode;
 var db;
 var state = {
@@ -49240,7 +50279,7 @@ async function init() {
   const fileConfig = loaded?.config ?? {};
   if (loaded) {
     resolvedConfigPath = loaded.configPath;
-    console.log(`  Config loaded from ${path3.relative(process.cwd(), loaded.configPath)}`);
+    console.log(`  Config loaded from ${path4.relative(process.cwd(), loaded.configPath)}`);
   }
   resolvedProject = cliArgs.project ?? fileConfig.project;
   resolvedCollection = cliArgs.collection ?? fileConfig.collection ?? "graph";
@@ -49363,6 +50402,11 @@ async function reloadDynamicSchema() {
 async function initEntitiesMode(fileConfig) {
   console.log(`  Discovering entities from ${resolvedEntitiesPath}...`);
   const { result: discovery, warnings } = discoverEntities(resolvedEntitiesPath);
+  resolvedCollectionDefs = discoverCollections(resolvedEntitiesPath);
+  if (resolvedCollectionDefs.length > 0) {
+    console.log(`  Collections loaded: ${resolvedCollectionDefs.length} collection(s)`);
+  }
+  collectionViewRegistry = await buildCollectionViewRegistry(resolvedCollectionDefs);
   if (warnings.length > 0) {
     for (const w of warnings) {
       console.log(`    [warn] ${w.message}`);
@@ -49386,8 +50430,11 @@ async function initEntitiesMode(fileConfig) {
     const nodeViewCount = Object.values(state.viewRegistry.nodes).reduce((sum, m) => sum + m.views.length, 0);
     const edgeViewCount = Object.values(state.viewRegistry.edges).reduce((sum, m) => sum + m.views.length, 0);
     console.log(`  Views loaded: ${nodeViewCount} node views, ${edgeViewCount} edge views`);
+  }
+  const colViewPaths = resolvedCollectionDefs.filter((c) => c.viewsPath).map((c) => ({ name: c.name, absPath: path4.resolve(c.viewsPath) }));
+  if (state.viewRegistry || colViewPaths.length > 0) {
     console.log(`  Bundling views for browser...`);
-    state.viewBundle = await bundleEntityViews(discovery);
+    state.viewBundle = await bundleEntityViews(discovery, colViewPaths);
     if (state.viewBundle) {
       console.log(`  Views bundled (${(state.viewBundle.code.length / 1024).toFixed(1)} KB)`);
     }
@@ -49448,7 +50495,9 @@ async function start() {
           projectId: resolvedProject,
           viewDefaults: viewDefaultsData,
           chatEnabled: resolvedChatEnabled,
-          chatModel: resolvedChatModel
+          chatModel: resolvedChatModel,
+          collectionDefs: resolvedCollectionDefs,
+          collectionViewRegistry
         },
         state,
         resolvedRegistryMode ? reloadDynamicSchema : void 0
@@ -49464,17 +50513,17 @@ async function start() {
   }
   const isProduction = process.env.NODE_ENV === "production";
   if (isProduction) {
-    const clientDir = path3.join(__dirname, "..", "client");
+    const clientDir = path4.join(__dirname, "..", "client");
     app.use(import_express.default.static(clientDir));
     app.get("*", (_req, res) => {
-      res.sendFile(path3.join(clientDir, "index.html"));
+      res.sendFile(path4.join(clientDir, "index.html"));
     });
   }
   const server = app.listen(resolvedPort, () => {
     console.log("");
     console.log("  Firegraph Editor");
     if (resolvedConfigPath) {
-      console.log(`  Config:     ${path3.relative(process.cwd(), resolvedConfigPath)}`);
+      console.log(`  Config:     ${path4.relative(process.cwd(), resolvedConfigPath)}`);
     }
     console.log(`  Project:    ${resolvedProject || "(auto-detected via ADC)"}`);
     console.log(`  Collection: ${resolvedCollection}`);