cabloy 5.1.213 → 5.1.215

package/repo-docs/backend/startup-guide.md

@@ -232,7 +232,7 @@ In the current runtime behavior:
 - in `test` and `dev`, the default instance is started eagerly
 - in production-style flows, configured static instances are started from `config.instance.instances`
 
-A practical timeline is:
+For ordinary startup without newly created development databases, a practical timeline is:
 
 1. run non-instance startups with `after !== true` during app start
 2. run non-instance startups with `after === true` during app ready
@@ -241,6 +241,21 @@ A practical timeline is:
 5. mark `appReadyInstances[instanceName] = true`
 6. run instance startups with `after === true`
 
+Explicit development preparation through `npm run db:reset` is a data-preparation flow in **Cabloy Basic and Cabloy Start**. It retains non-instance startups with `after !== true`, including database migration and database-name preparation, then completes the default instance and each newly created isolated instance:
+
+1. run the instance's startups with `after !== true`, including instance initialization
+2. for the newly created default instance (`''`) only, run module `seed()` hooks for test/dev convenience fixtures
+3. consume the instance's creation bookkeeping and mark it ready
+4. repeat for the next instance, without seeding isolated targets such as `isolateTest`
+
+Reset skips all instance and non-instance startups with `after === true` before dispatch. This excludes schedule loading, runtime JSON generation, development tips, queue-worker preloading, and HTTP listening, including their startup execution logs. Normal dev startup retains these runtime tasks and generates runtime JSON when the server starts. Skipping queue-worker preloading does not disable queues: an explicit queue push can still create a worker lazily, and fire-and-forget jobs are not automatically drained by reset.
+
+Reset-required preparation must belong to migrations, `init()`, `seed()`, or a non-after startup; do not depend on an after-startup for required data. This phase filter does not bypass independent framework monkey hooks such as `appStarted`, or application teardown.
+
+Each instance completes preparation in one queued startup task. Ordinary queued readiness requests skip reinitialization once the instance is ready, even though its after-startups were skipped. A failed default seed leaves its creation marker unconsumed and its readiness unset. There is no all-instances atomic readiness guarantee: if a later instance fails, an earlier instance may already be ready; the failure still stops preparation. Outside reset, explicitly forced startup requests retain their force behavior through instance after-startups.
+
+Test-mode default seeding retains its existing lifecycle after default instance startup. Ordinary dev startup reuses existing databases without seeding. See [Managed development database preparation](/backend/migration-and-changes#managed-development-database-preparation) for reset safety and seed ownership.
+
 This is why startup should be read together with the instance and datasource story rather than as a purely global boot topic.
 
 ## Teardown-oriented monkey examples

package/repo-docs/reference/repo-scripts.md

@@ -116,6 +116,72 @@ A legacy suite with a different WBS or progress-table layout is not chart-compat
 
 These commands do not create planning authority, implement a WBS task, execute an ATP, produce acceptance evidence, or replace traceability/status review. Confirm the active root `package.json` and script input expectations before assuming equivalent behavior in Cabloy Start or another repository.
 
+## Evidence path sanitization
+
+The dependency-free path tool lives in `repo-agent-governance/tools/evidence-paths/sanitize.mjs`. It sanitizes caller-supplied UTF-8 stdin, or independently checks explicitly selected files/directories without rewriting them:
+
+```bash
+npm run --silent evidence:sanitize -- --help
+npm run --silent evidence:check -- -- repo-specs/example/evidence
+# Declare another checkout or external root; use the same mappings when checking.
+npm run --silent evidence:sanitize -- --map '/synthetic/other-checkout=MAIN_CHECKOUT'
+npm run --silent evidence:check -- --map '/synthetic/other-checkout=MAIN_CHECKOUT' -- evidence.pending.txt
+```
+
+The last two commands illustrate a **synthetic** root, not a detected local location. `sanitize` waits for stdin; it does not run a producer. Use quiet npm output so npm banners are not mixed into the retained stream. Default checkout discovery comes from the tool's installed location, not the shell working directory; `--repo-root ROOT` overrides it. Repeatable `--map ROOT=ALIAS` declares additional absolute roots with stable uppercase aliases, such as `MAIN_CHECKOUT`. Longest matching roots win at path-segment boundaries. Checkout paths become repository-root-relative; explicit external mappings become `<ALIAS>/suffix`. Choose aliases that distinguish unrelated roots and review any sensitive suffixes.
+
+### Capture before retaining
+
+Combine producer stdout/stderr **before** sanitization, never `tee` or spool raw output first. Use a new output filename, check sanitizer status, and retain the actual producer result, including failures. See [Verify narrowly and retain evidence](/ai/playbook-spec-execution#verify-narrowly-and-retain-evidence) for a Bash pipeline with immediate per-stage status capture. Zsh uses `pipestatus` instead of Bash `PIPESTATUS`. `pipefail` prevents a passing sanitizer from masking an upstream failure, but it does not preserve every stage's exact code. A failed sanitizer may leave earlier sanitized lines; partial output must not be accepted as evidence. The tool does not automatically intercept terminal or agent-tool output and does not authorize capturing secret-bearing streams.
+
+### Windows and PowerShell
+
+The tool uses Node's native filesystem APIs on Windows, Linux and macOS; it requires the repository's Node.js version (`>=24.4.0`). Path-text recognition is cross-platform independently of the host OS. Native filesystem behavior is checked by the `evidence-platforms` CI matrix on Ubuntu, Windows and macOS. A configured matrix is not a successful run: inspect the actual job results before claiming all three platforms are verified.
+
+From the repository root, PowerShell can invoke the CLI directly:
+
+```powershell
+node .\repo-agent-governance\tools\evidence-paths\sanitize.mjs --help
+node .\repo-agent-governance\tools\evidence-paths\sanitize.mjs check -- '.\evidence.pending.txt'
+$checkExit = $LASTEXITCODE
+# 0 = clean, 1 = paths found, 2 = incomplete/error
+```
+
+For a **synthetic input smoke test only**, not evidence capture from a real producer:
+
+```powershell
+$previousOutputEncoding = $OutputEncoding
+try {
+  $OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+  'Unicode sample: café C:\Users\Synthetic\private\log.txt' |
+    node .\repo-agent-governance\tools\evidence-paths\sanitize.mjs sanitize
+  $sanitizeExit = $LASTEXITCODE
+  # Expected output: Unicode sample: café <PRIVATE_PATH>
+} finally {
+  $OutputEncoding = $previousOutputEncoding
+}
+```
+
+Bash `pipefail`/`PIPESTATUS` and Zsh `pipestatus` are not PowerShell syntax. `$LASTEXITCODE` after a native pipeline is not a record of every stage's status. For real producer capture, use the Bash example in a Bash environment, or orchestration that explicitly observes both native processes and supplies UTF-8 bytes without a raw spool; do not claim the synthetic example preserves a producer exit code. Never accept evidence based only on the last pipeline command succeeding.
+
+Prefer PowerShell 7.4+ for native byte-stream pipelines/redirection. Windows PowerShell 5.1 and text cmdlets can transcode output or create UTF-16 files; merely setting `$OutputEncoding` does not make all redirection byte-transparent. The sanitizer rejects invalid UTF-8/binary input rather than guessing an encoding. Avoid inserting text cmdlets into a byte-preserving capture pipeline, and preserve stderr and exit statuses deliberately. Do not change platform encoding globally.
+
+POSIX mode-bit and unusual-filename tests are explicitly platform-specific. Windows permission failures are determined by native file-open/read errors, not simulated with POSIX `chmod(0)`. Symlink tests use Windows directory junctions where possible; unavailable file-symlink privileges are reported as capability skips, not successful coverage. The scan's no-symlink, no-environment-file and stable-filesystem requirements apply on every platform.
+
+### Coverage and result boundaries
+
+Sanitization and checking share the same matcher. They recognize configured roots and bounded machine-local home/temp conventions, not every slash-prefixed path. Known private paths become `<PRIVATE_PATH>`; configured mappings take precedence so useful checkout-relative locations survive. Supported forms include POSIX home/temp paths, Windows drive/UNC paths, JSON-escaped backslashes and local `file:` URLs. Quote whitespace-containing path tokens; unquoted tokens end at whitespace or prose delimiters. Ordinary non-file URLs and generic API/container paths are not treated as filesystem paths. Other machine roots must be declared explicitly; unusual escaping, unknown filesystem locations, and sensitive relative suffixes still require manual review. This is **path-only tooling**, not a secret scanner or safe-publication certificate. Review credentials, tokens, customer data, and provider identifiers separately before retention/sharing.
+
+Input must be UTF-8 text with lines no larger than 1 MiB; checked files are limited to 8 MiB each. Streaming handles split UTF-8/path chunks, CRLF and final unterminated lines; invalid encoding, NUL/non-text controls and oversized lines fail rather than emitting raw fragments. Disable producer color/terminal controls using its supported option (for example, `NO_COLOR=1` when honored); ANSI escape sequences are not silently stripped. The checker recursively visits explicit scopes in deterministic order, including hidden entries. It does not follow symlinks (including selected-scope ancestors), open special files, or read `.env*` files/directories. Select the canonical scope path when a system temp-directory alias is itself a symlink. Keep the scope tree stable while scanning; this is not an adversarial filesystem snapshot. Encountering unsupported, excluded or unreadable inputs means incomplete coverage, not clean success. Scope checks to reviewed evidence artifacts, not an arbitrary repository root. Diagnostics identify safe relative scope labels and line numbers, never matched source text or raw absolute scan roots.
+
+| Exit | Meaning                                                                                           |
+| ---- | ------------------------------------------------------------------------------------------------- |
+| `0`  | Sanitization completed, or the complete selected check scope has no recognized paths.             |
+| `1`  | Checker detected recognized local paths.                                                          |
+| `2`  | Usage, I/O, encoding, size-limit or incomplete-scan failure; this takes precedence over findings. |
+
+A clean check proves only declared path-recognition coverage. It does not prove producer success, ATP completion, approval, or release readiness. Preserve diagnostic codes, line/column locations, failures, exit codes and source hashes. Source hashes refer to original source bytes; label historical path-redacted diffs as non-byte-exact and not apply-ready. Tests run under `npm run test:agent-governance`; `spec:check` intentionally excludes evidence and is not a privacy checker.
+
 ## Agent-governance maintenance
 
 Use these Cabloy Basic maintenance commands when changing shared agent rules, root skill bundles, or adapter tooling:
@@ -166,7 +232,9 @@ With `database.testDatabase: true`, `npm run dev` and `npm run dev:one` only reu
 - **All required databases exist:** startup reuses them without database creation, creation-time Redis cleanup, or module seeding. Ordinary startup is not a reset or a repeatable fixture-import path.
 - **Any required database is missing:** startup fails promptly with an instruction to run `npm run db:reset`. This check covers both shared and statically configured isolate database targets; the presence of the shared database alone is not sufficient. Startup does not create the missing target or clear Redis or seed as a fallback.
 
-`npm run db:reset` is the explicit, destructive preparation command. It requires `database.testDatabase: true` and a connection outside the disposable database. In a single process, it clears validated application-owned Redis state with `clearAllData()`, drops and recreates the managed disposable dev databases, then runs migrations, instance initialization, and module `seed()` hooks.
+`npm run db:reset` is the explicit, destructive preparation command. It requires `database.testDatabase: true` and a connection outside the disposable database. In a single process, it clears validated application-owned Redis state with `clearAllData()`, drops and recreates the managed disposable dev databases, then runs migrations and instance initialization. In both editions, only the default instance (`''`) runs module `seed()` hooks, supplying test/dev convenience fixtures before consuming its creation bookkeeping and marking it ready. Configured isolated targets such as `isolateTest` initialize and become ready without fixture seeding. Each instance completes preparation in sequence.
+
+Reset retains non-after startups and skips all instance and application startups with `after: true`, including schedules, runtime JSON generation, development tips, queue-worker preloading, and HTTP listening. Required data preparation must not depend on after-startups. Normal dev startup retains these runtime tasks; independent framework lifecycle hooks and application teardown still run during reset. See [Backend Startup Guide](/backend/startup-guide#app-startup-and-instance-startup-in-practice).
 
 **Stop the development server and any other processes using the same database and Redis namespace before running reset.** There is no file-based preparation lock: concurrent dev/dev and dev/reset processes against the same database and Redis namespace are unsupported. Disabling the reset command's own listener does not make reset safe alongside a live server or queue worker. Do not reset data you need to retain.
 

package/scripts/bootstrapAgentGovernance.mjs

@@ -10,6 +10,8 @@ const GOVERNANCE_SCRIPT_NAMES = [
   'spec:charts',
   'spec:charts:check',
   'spec:check',
+  'evidence:sanitize',
+  'evidence:check',
   'agent:governance:render',
   'agent:governance:check',
   'agent:governance:adopt',

package/scripts/upgrade.ts

@@ -294,6 +294,8 @@ function reconcileGovernancePackageJson(dryRun?: boolean): void {
     'test:agent-governance',
     'contract:gate',
     'spec:check',
+    'evidence:sanitize',
+    'evidence:check',
   ];
   const managedScripts = [...baselineScripts, ...governanceScripts];
   let changed = false;

package/vona/packages-vona/vona/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona",
-  "version": "5.1.108",
+  "version": "5.1.109",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "Vona is an intuitive, elegant and powerful Node.js framework for rapidly developing enterprise applications of any size",
   "keywords": [

package/vona/pnpm-lock.yaml

@@ -573,8 +573,8 @@ importers:
         specifier: npm:@cabloy/zod@4.3.8
         version: '@cabloy/zod@4.3.8'
       zova:
-        specifier: ^5.1.167
-        version: 5.1.167(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.170
+        version: 5.1.171(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
       zova-jsx:
         specifier: ^1.1.92
         version: 1.1.92(typescript@5.9.3)
@@ -591,8 +591,8 @@ importers:
         specifier: ^5.1.35
         version: 5.1.35
       zova-module-a-form:
-        specifier: ^5.1.51
-        version: 5.1.51(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.54
+        version: 5.1.54(vue@3.5.43(typescript@5.9.3))
       zova-module-a-icon:
         specifier: ^5.1.27
         version: 5.1.27
@@ -603,20 +603,20 @@ importers:
         specifier: ^5.0.3
         version: 5.0.3
       zova-module-a-model:
-        specifier: ^5.1.37
-        version: 5.1.37(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.38
+        version: 5.1.38(vue@3.5.43(typescript@5.9.3))
       zova-module-a-openapi:
-        specifier: ^5.1.55
-        version: 5.1.55
+        specifier: file:/tmp/zova-module-a-openapi-5.1.56.tgz
+        version: file:../../../../../tmp/zova-module-a-openapi-5.1.56.tgz
       zova-module-a-pay:
         specifier: ^5.0.9
         version: 5.0.9
       zova-module-a-router:
-        specifier: ^5.1.41
-        version: 5.1.41
+        specifier: ^5.1.42
+        version: 5.1.42
       zova-module-a-routertabs:
-        specifier: ^5.1.34
-        version: 5.1.34
+        specifier: ^5.1.35
+        version: 5.1.35
       zova-module-a-ssr:
         specifier: ^5.1.40
         version: 5.1.40
@@ -630,8 +630,8 @@ importers:
         specifier: ^5.0.5
         version: 5.0.5
       zova-module-rest-resource:
-        specifier: ^5.1.55
-        version: 5.1.55
+        specifier: ^5.1.56
+        version: 5.1.56
 
   .zova-rest/cabloy-basic-web:
     dependencies:
@@ -657,8 +657,8 @@ importers:
         specifier: npm:@cabloy/zod@4.3.8
         version: '@cabloy/zod@4.3.8'
       zova:
-        specifier: ^5.1.167
-        version: 5.1.167(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.168
+        version: 5.1.171(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
       zova-jsx:
         specifier: ^1.1.92
         version: 1.1.92(typescript@5.9.3)
@@ -675,8 +675,8 @@ importers:
         specifier: ^5.1.35
         version: 5.1.35
       zova-module-a-form:
-        specifier: ^5.1.51
-        version: 5.1.51(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.52
+        version: 5.1.54(vue@3.5.43(typescript@5.9.3))
       zova-module-a-icon:
         specifier: ^5.1.27
         version: 5.1.27
@@ -687,20 +687,20 @@ importers:
         specifier: ^5.0.3
         version: 5.0.3
       zova-module-a-model:
-        specifier: ^5.1.37
-        version: 5.1.37(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.38
+        version: 5.1.38(vue@3.5.43(typescript@5.9.3))
       zova-module-a-openapi:
-        specifier: ^5.1.55
-        version: 5.1.55
+        specifier: file:/tmp/zova-module-a-openapi-5.1.56.tgz
+        version: file:../../../../../tmp/zova-module-a-openapi-5.1.56.tgz
       zova-module-a-pay:
         specifier: ^5.0.9
         version: 5.0.9
       zova-module-a-router:
-        specifier: ^5.1.41
-        version: 5.1.41
+        specifier: ^5.1.42
+        version: 5.1.42
       zova-module-a-routertabs:
-        specifier: ^5.1.34
-        version: 5.1.34
+        specifier: ^5.1.35
+        version: 5.1.35
       zova-module-a-ssr:
         specifier: ^5.1.40
         version: 5.1.40
@@ -714,8 +714,8 @@ importers:
         specifier: ^5.0.5
         version: 5.0.5
       zova-module-rest-resource:
-        specifier: ^5.1.55
-        version: 5.1.55
+        specifier: ^5.1.56
+        version: 5.1.56
 
   .zova-rest/cabloy-commerce:
     dependencies:
@@ -1652,7 +1652,7 @@ importers:
         specifier: ^5.0.3
         version: link:modules/a-markdown
       vona-module-a-rbac:
-        specifier: ^5.0.10
+        specifier: ^5.0.11
         version: link:modules/a-rbac
       vona-module-a-socket:
         specifier: workspace:^
@@ -8920,6 +8920,9 @@ packages:
   zova-module-a-form@5.1.51:
     resolution: {integrity: sha512-/UlaorIX2SpN/ozGsXMaklfNuS64as322jD3+0wlfj9FVyhV1nz0wEBpYSGgsiX+KFLJicwpNqAz/kMI7WfvUw==}
 
+  zova-module-a-form@5.1.54:
+    resolution: {integrity: sha512-WChgaslejoVIV3PLODWMY4LB1CdSZe3c/3Z+NV5ibzF+FqeZ4AVvpX/viPcAnptb7i4m3M29BTKbZFOF/x6zAw==}
+
   zova-module-a-icon@5.1.27:
     resolution: {integrity: sha512-KAvHkK6YsN2H5iQgl2IBQHIvvFDnfzPCxDzuQyTnAiCgSczD/UFO6bLZqWVT2m/qfsmJXMzWAWHPdU02J3ANZQ==}
 
@@ -8938,21 +8941,37 @@ packages:
   zova-module-a-model@5.1.37:
     resolution: {integrity: sha512-Ipas8Lpsi9Jcgu3AbzajgqcBffmg1GeIBOu4UtOyR5fbRDvlxYWXx45rA52oB/zgoC+QvhUVzY36fnNfTJiywg==}
 
+  zova-module-a-model@5.1.38:
+    resolution: {integrity: sha512-F0ugy8raH2J8G7Y/YUM9J2xj/J6IXnDO+sT0nN0GVCaX+DmXkxf/cTK9XnXlfuuJnWKRUgQj9ZmkVW7q4i9mnQ==}
+
   zova-module-a-openapi@5.1.55:
     resolution: {integrity: sha512-jdbUN4QEAQZvx+EmwaDfIa0Xy5MoNOVYLdLnEl+LbANc6COxkGGSyroFBRXG5S/Av0YWIBUbgahuEpFdL+RYjw==}
 
+  zova-module-a-openapi@5.1.57:
+    resolution: {integrity: sha512-U6gKdYXNlD4wn1zgNUC+P3pg6lq23GZNESLipzVe7Zb7buqCXuEBjGdPa2NPrOuLxwWlZNg7Z4Q+GerBEF2geQ==}
+
+  zova-module-a-openapi@file:../../../../../tmp/zova-module-a-openapi-5.1.56.tgz:
+    resolution: {integrity: sha512-UbcakzhP7T+MT7A41Uxly3NMHSuEyOtTS6tnen+TKgUXCY3Ls6zaOhBsowMEtBHGoJ+YMsATJXPgh5836bmQMQ==, tarball: file:../../../../../tmp/zova-module-a-openapi-5.1.56.tgz}
+    version: 5.1.56
+
   zova-module-a-pay@5.0.9:
     resolution: {integrity: sha512-Chl6EKp30HBOGFCJXbla2/lS19WhzQyTZwgYmsL3nnG9Vt2TeUlb82vsYCVuDcy0cgmxVaWjPF7dzKL/r3Pfng==}
 
   zova-module-a-router@5.1.41:
     resolution: {integrity: sha512-oSv4S+9bAx79X8oUBARFKs4n56FNG/bbqdyxP10CXxlVue8WU7CmNKN4ckzLJ2mleVIezijZk/1aHS1Fl5rk+g==}
 
+  zova-module-a-router@5.1.42:
+    resolution: {integrity: sha512-/kpRuFC1V14zVx7KLtYZJTqhPgSpn3kyhJ/iqbKSjEUu1oTCu9nE0KzF+/RV8AigeZu+GgJSRR9ngl8efSlxXA==}
+
   zova-module-a-routerstack@5.1.29:
     resolution: {integrity: sha512-5gvGVPGETeTGhX+Hpj7GPV/HSqeL0EAKalXVdwvZu1fMUX/dBT0UI51QYIKcnmlvPwPX3PgiiDE0bJnVJhBo0A==}
 
   zova-module-a-routertabs@5.1.34:
     resolution: {integrity: sha512-j8QS0bxpfQJidh/wUsA1N2FXhckoi5qq01nm2uKCY1CHLEFA19sccP41v6JjrN5N3sw90a3YTaMjbezO5bS9Lg==}
 
+  zova-module-a-routertabs@5.1.35:
+    resolution: {integrity: sha512-OIdrdHEoxtK76m2gMw9xJjwJBWDLkRuLlP+dSiCGACm5X90oCLikQYPBAynms8hxBC4pKpSSby7jmjhi+C98WQ==}
+
   zova-module-a-ssr@5.1.40:
     resolution: {integrity: sha512-K73SxTzEXKLqoXaZ5Jh1DDUOOvvGpvv8FsEDDDEjK9c0E00Y+j8v7Z/X+IALOU1WHA6FNpdwpqXTWjcpwkE9DA==}
 
@@ -8980,12 +8999,21 @@ packages:
   zova-module-rest-resource@5.1.55:
     resolution: {integrity: sha512-Kk3oJIcxM5EbeTLl+ucJSeI2kT0We8YilXBaX8Z7QWCbZ0fHoQDy/Ac4YsVSWIXUrC2SQ267+nMl3sHXnE9G0Q==}
 
+  zova-module-rest-resource@5.1.56:
+    resolution: {integrity: sha512-JJ25Z6I3KixofC2wn3VKi7sQmjbwayE1wqD+Y18rOW1XeYRPh+WfPHnqAwvBcA7YQ1tw1oCzQVN3s/58zSOLEA==}
+
   zova-suite-a-zova@5.1.166:
     resolution: {integrity: sha512-2mmuMDS4uEvq4x9p/StuBb8E+9Czg7G/S6E9IF2SdwBGmXB6dtcog1rNquvUyNLOujw2UNn2uUyuIY0WPRUc0g==}
 
+  zova-suite-a-zova@5.1.170:
+    resolution: {integrity: sha512-Fi2uWD8waUkRsp6thq3lU2i2eByE/8e/VUe8mUDclco+FhRoVjIvCSqetLipX/PsbXNHu+WIJY5Dz6BgGyIkFg==}
+
   zova@5.1.167:
     resolution: {integrity: sha512-A0vfiT2eXuKbKW1GxlZNnsZPuPvS/mAHfoaiBsN5Pf4GYOKE/7R9fJIbl9YQzNWkV3LP3vECygqBHg9q2qr9Bw==}
 
+  zova@5.1.171:
+    resolution: {integrity: sha512-aXywbs8vYGc/qarxWg/ukqnBGkYidVqwEUWj7CuaFqCrPD9l3MEllSlW6qhN1Bem2TDCIFc6L7bBjS0m6XCFZw==}
+
   zwitch@1.0.5:
     resolution: {integrity: sha512-V50KMwwzqJV0NpZIZFwfOD5/lyny3WlSzRiXgA0G7VUnRlqttta1L6UQIHzd6EuBY/cHGfwTIck7w1yH6Q5zUw==}
 
@@ -15134,6 +15162,14 @@ snapshots:
       - '@vue/composition-api'
       - vue
 
+  zova-module-a-form@5.1.54(vue@3.5.43(typescript@5.9.3)):
+    dependencies:
+      '@tanstack/vue-form': 1.33.5(vue@3.5.43(typescript@5.9.3))
+      '@tanstack/vue-store': 0.11.1(vue@3.5.43(typescript@5.9.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
   zova-module-a-icon@5.1.27: {}
 
   zova-module-a-interceptor@5.1.31: {}
@@ -15158,20 +15194,48 @@ snapshots:
       - '@vue/composition-api'
       - vue
 
+  zova-module-a-model@5.1.38(vue@3.5.43(typescript@5.9.3)):
+    dependencies:
+      '@tanstack/query-core': 5.103.1
+      '@tanstack/query-persist-client-core': 5.103.1
+      '@tanstack/vue-query': 5.103.1(vue@3.5.43(typescript@5.9.3))
+      localforage: 1.10.0
+      mutate-on-copy: 1.1.13
+      table-identity: link:packages-utils/table-identity
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
   zova-module-a-openapi@5.1.55:
     dependencies:
       '@cabloy/json-schema-to-zod': 2.6.5
       openapi3-ts: 4.6.1
       typestyle: 2.4.0
 
+  zova-module-a-openapi@5.1.57:
+    dependencies:
+      '@cabloy/json-schema-to-zod': 2.6.5
+      openapi3-ts: 4.6.1
+      typestyle: 2.4.0
+
+  zova-module-a-openapi@file:../../../../../tmp/zova-module-a-openapi-5.1.56.tgz:
+    dependencies:
+      '@cabloy/json-schema-to-zod': 2.6.5
+      openapi3-ts: 4.6.1
+      typestyle: 2.4.0
+
   zova-module-a-pay@5.0.9: {}
 
   zova-module-a-router@5.1.41: {}
 
+  zova-module-a-router@5.1.42: {}
+
   zova-module-a-routerstack@5.1.29: {}
 
   zova-module-a-routertabs@5.1.34: {}
 
+  zova-module-a-routertabs@5.1.35: {}
+
   zova-module-a-ssr@5.1.40:
     dependencies:
       devalue: 5.9.4
@@ -15225,6 +15289,8 @@ snapshots:
 
   zova-module-rest-resource@5.1.55: {}
 
+  zova-module-rest-resource@5.1.56: {}
+
   zova-suite-a-zova@5.1.166(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
     dependencies:
       zova-module-a-api: 5.1.22
@@ -15258,6 +15324,39 @@ snapshots:
       - typescript
       - vue
 
+  zova-suite-a-zova@5.1.170(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
+    dependencies:
+      zova-module-a-api: 5.1.22
+      zova-module-a-app: 5.1.26
+      zova-module-a-bean: 5.1.36
+      zova-module-a-behavior: 5.1.26
+      zova-module-a-behaviors: 5.1.22
+      zova-module-a-command: 5.1.35
+      zova-module-a-fetch: 5.1.25
+      zova-module-a-form: 5.1.54(vue@3.5.43(typescript@5.9.3))
+      zova-module-a-icon: 5.1.27
+      zova-module-a-interceptor: 5.1.31
+      zova-module-a-logger: 5.1.28
+      zova-module-a-meta: 5.1.22
+      zova-module-a-model: 5.1.38(vue@3.5.43(typescript@5.9.3))
+      zova-module-a-openapi: 5.1.57
+      zova-module-a-router: 5.1.42
+      zova-module-a-routerstack: 5.1.29
+      zova-module-a-routertabs: 5.1.35
+      zova-module-a-ssr: 5.1.40
+      zova-module-a-ssrhmr: 5.1.23
+      zova-module-a-ssrserver: 5.1.26
+      zova-module-a-style: 5.1.35
+      zova-module-a-table: 5.1.44(vue@3.5.43(typescript@5.9.3))
+      zova-module-a-zod: 5.1.37
+      zova-module-a-zova: 5.1.108(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - debug
+      - supports-color
+      - typescript
+      - vue
+
   zova@5.1.167(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
     dependencies:
       zova-core: 5.1.92(patch_hash=144450bd7a567a6067e5857c0cf4c780981b7e90bc48745c09e1696a9b6f1b97)(typescript@5.9.3)
@@ -15269,6 +15368,17 @@ snapshots:
       - typescript
       - vue
 
+  zova@5.1.171(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
+    dependencies:
+      zova-core: 5.1.92(patch_hash=144450bd7a567a6067e5857c0cf4c780981b7e90bc48745c09e1696a9b6f1b97)(typescript@5.9.3)
+      zova-suite-a-zova: 5.1.170(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - debug
+      - supports-color
+      - typescript
+      - vue
+
   zwitch@1.0.5: {}
 
   zwitch@2.0.4: {}

package/vona/src/suite-vendor/a-vona/modules/a-printtip/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-a-printtip",
-  "version": "5.1.13",
+  "version": "5.1.14",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "keywords": [

package/vona/src/suite-vendor/a-vona/modules/a-printtip/src/bean/startup.printTip.ts

@@ -18,7 +18,7 @@ const __tipEnd = '=================== tip: end =====================';
 })
 export class StartupPrintTip extends BeanBase implements IStartupExecute {
   async execute() {
-    if (this.app.meta.env.LOGGER_DUMMY === 'true') return;
+    if (process.env.VONA_DB_RESET === 'true' || this.app.meta.env.LOGGER_DUMMY === 'true') return;
     setTimeout(async () => {
       await this._print();
     }, this.scope.config.delay);

package/vona/src/suite-vendor/a-vona/modules/a-printtip/test/printTip.test.ts

@@ -0,0 +1,46 @@
+import assert from 'node:assert/strict';
+import { describe, it } from 'node:test';
+
+import { StartupPrintTip } from '../src/bean/startup.printTip.ts';
+
+describe('development startup tips', { concurrency: false }, () => {
+  for (const { name, reset, dummy, expected } of [
+    { name: 'skips tips during db:reset', reset: 'true', dummy: undefined, expected: 0 },
+    {
+      name: 'prints tips during ordinary dev startup',
+      reset: undefined,
+      dummy: undefined,
+      expected: 1,
+    },
+    {
+      name: 'prints tips when reset is explicitly disabled',
+      reset: 'false',
+      dummy: undefined,
+      expected: 1,
+    },
+    { name: 'keeps dummy logger suppression', reset: undefined, dummy: 'true', expected: 0 },
+  ]) {
+    it(name, async t => {
+      const previousReset = process.env.VONA_DB_RESET;
+      t.mock.timers.enable({ apis: ['setTimeout'] });
+      try {
+        if (reset === undefined) delete process.env.VONA_DB_RESET;
+        else process.env.VONA_DB_RESET = reset;
+        const startup = Object.create(StartupPrintTip.prototype) as StartupPrintTip;
+        const print = t.mock.fn(async () => {});
+        Object.defineProperties(startup, {
+          app: { value: { meta: { env: { LOGGER_DUMMY: dummy } } } },
+          scope: { value: { config: { delay: 0 } } },
+          _print: { value: print },
+        });
+        await startup.execute();
+        assert.equal(print.mock.callCount(), 0);
+        t.mock.timers.runAll();
+        assert.equal(print.mock.callCount(), expected);
+      } finally {
+        if (previousReset === undefined) delete process.env.VONA_DB_RESET;
+        else process.env.VONA_DB_RESET = previousReset;
+      }
+    });
+  }
+});

package/vona/src/suite-vendor/a-vona/modules/a-startup/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-a-startup",
-  "version": "5.1.19",
+  "version": "5.1.20",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "keywords": [

package/vona/src/suite-vendor/a-vona/modules/a-startup/src/service/startup.ts

@@ -63,27 +63,24 @@ export class ServiceStartup extends BeanBase {
     const createdInstances = this.$scope.version.service.database.createdInstanceNames;
     const preparingDev = this.app.meta.isDev && createdInstances.length > 0;
     if (preparingDev) {
-      // Initialize and seed fresh instances before listeners or queue workers start.
+      // Prepare each fresh instance before application-level after-startups.
       const instanceNames = [
         '',
         ...createdInstances.filter(name => name !== ''),
       ] as (keyof IInstanceRecord)[];
       for (const instanceName of instanceNames) {
-        await this._appReadyInstanceStartup(instanceName, true, true);
-      }
-      for (const instanceName of instanceNames) {
-        await this.bean.executor.newCtx(() => this.runStartupInstanceAfter(instanceName), {
-          dbInfo: { level: 1 },
-          instanceName,
-        });
+        await this._appReadyInstanceStartup(instanceName, true);
       }
     }
 
-    // run startups: after
-    for (const startup of this._startups) {
-      const startupOptions = startup.beanOptions.options;
-      if (!startupOptions?.instance && startupOptions?.after === true) {
-        await this.runStartup(startup.name, null);
+    // db:reset prepares data without starting runtime services.
+    if (!(this.app.meta.isDev && process.env.VONA_DB_RESET === 'true')) {
+      // run startups: after
+      for (const startup of this._startups) {
+        const startupOptions = startup.beanOptions.options;
+        if (!startupOptions?.instance && startupOptions?.after === true) {
+          await this.runStartup(startup.name, null);
+        }
       }
     }
 
@@ -118,17 +115,12 @@ export class ServiceStartup extends BeanBase {
     );
   }
 
-  private async _appReadyInstanceStartup(
-    instanceName: keyof IInstanceRecord,
-    wait: boolean,
-    deferAfter?: boolean,
-  ) {
+  private async _appReadyInstanceStartup(instanceName: keyof IInstanceRecord, wait: boolean) {
     const res = this.$scope.instance.service.instance.instanceStartupIsolate(instanceName, {
       force:
         this.app.meta.isDev &&
         (process.env.VONA_DB_RESET === 'true' ||
           this.$scope.version.service.database.createdInstanceNames.includes(instanceName)),
-      deferAfter,
     });
     if (wait) {
       await res;
@@ -218,10 +210,11 @@ export class ServiceStartup extends BeanBase {
       this.app.meta.isDev &&
       this.$scope.version.service.database.createdInstanceNames.includes(instanceName)
     ) {
-      await this.$scope.version.service.version.__instanceSeed(instanceName);
+      if (instanceName === '') {
+        await this.$scope.version.service.version.__instanceSeed(instanceName);
+      }
       this.$scope.version.service.database.consumeCreatedInstance(instanceName);
     }
-    if (options?.deferAfter) return;
     await this.runStartupInstanceAfter(instanceName, options);
   }
 
@@ -231,6 +224,8 @@ export class ServiceStartup extends BeanBase {
   ) {
     // set flag
     this.app.meta.appReadyInstances[instanceName] = true;
+    // Keep readiness checks from reentering initialization even when runtime startups are skipped.
+    if (this.app.meta.isDev && process.env.VONA_DB_RESET === 'true') return;
     // run startups: after
     for (const startup of this._startups) {
       const startupOptions = startup.beanOptions.options;

package/vona/src/suite-vendor/a-vona/modules/a-startup/src/types/startup.ts

@@ -22,7 +22,6 @@ export interface IDecoratorStartupOptions
 
 export interface IInstanceStartupOptions {
   force?: boolean;
-  deferAfter?: boolean;
   configInstanceBase?: ConfigInstanceBase;
 }