@nextsparkjs/core 0.1.0-beta.192 → 0.1.0-beta.194

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextsparkjs/core",
-  "version": "0.1.0-beta.192",
+  "version": "0.1.0-beta.194",
   "description": "NextSpark - The complete SaaS framework for Next.js",
   "license": "MIT",
   "author": "NextSpark <hello@nextspark.dev>",
@@ -346,6 +346,10 @@
       "types": "./dist/lib/selectors/index.d.ts",
       "import": "./dist/lib/selectors/index.js"
     },
+    "./selectors/*": {
+      "types": "./dist/lib/selectors/by-domain/*.d.ts",
+      "import": "./dist/lib/selectors/by-domain/*.js"
+    },
     "./lib/selectors": {
       "types": "./dist/lib/selectors/index.d.ts",
       "import": "./dist/lib/selectors/index.js"
@@ -386,9 +390,9 @@
     "scripts"
   ],
   "peerDependencies": {
-    "next": "~16.3.5",
-    "react": ">=18.0.0",
-    "react-dom": ">=18.0.0"
+    "next": "~16.3.6",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0"
   },
   "devDependencies": {
     "@better-fetch/fetch": "1.3.1",
@@ -492,7 +496,10 @@
     "use-intl": "^4.9.1",
     "uuid": "^13.0.0",
     "zod": "^4.3.6",
-    "@nextsparkjs/ui": "0.1.0-beta.192"
+    "@nextsparkjs/ui": "0.1.0-beta.194"
+  },
+  "engines": {
+    "node": ">=22.14.0"
   },
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs || true",

package/scripts/build/auth-readiness.mjs

@@ -192,6 +192,10 @@ async function main() {
     console.log('   RESEND_API_KEY, RESEND_FROM_EMAIL; Google: GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET), or change auth.methods.')
     console.log('   Credentials injected only at runtime: declare them with NEXTSPARK_AUTH_RUNTIME_ONLY=email,google;')
     console.log('   they are validated again when the server starts and on every login request.')
+    if (result.diagnostics.some(({ code }) => code.endsWith('_PLACEHOLDER'))) {
+      console.log('   A placeholder value (re_..., your-google-client-id) is a value, not a missing one: NEXTSPARK_AUTH_RUNTIME_ONLY does not defer it.')
+      console.log('   Remove the placeholder lines from .env (and the build environment), or replace them with the real values.')
+    }
     process.exit(1)
   }
 

package/scripts/build/registry/__tests__/build-output.test.mjs

@@ -29,7 +29,7 @@ const RAW_CONTROL = /[\u0000-\u0009\u000b-\u001f\u007f-\u009f\u061c\u200e\u200f\
 async function createProject(parent = tmpdir(), name = 'nextspark-build-output-test-') {
   const root = await mkdtemp(join(parent, name))
   await writeFile(join(root, 'nextspark.config.ts'), 'export default {}\n')
-  await writeFile(join(root, 'package.json'), '{"dependencies":{"next":"16.3.5"}}')
+  await writeFile(join(root, 'package.json'), '{"dependencies":{"next":"16.3.6"}}')
   await mkdir(join(root, 'src', 'app'), { recursive: true })
   return root
 }

package/scripts/build/registry/__tests__/project-mode-root-first.test.mjs

@@ -17,7 +17,7 @@ async function project(files = {}) {
 
 test('the nearest nextspark.config.ts owns every project source path', async () => {
   const root = await project({
-    'package.json': JSON.stringify({ dependencies: { next: '16.3.5' } }),
+    'package.json': JSON.stringify({ dependencies: { next: '16.3.6' } }),
     'nextspark.config.ts': 'export default {}\n',
   })
   const nested = join(root, 'entities', 'tasks')
@@ -40,7 +40,7 @@ test('the nearest nextspark.config.ts owns every project source path', async ()
 
 test('a next.config file cannot select a project without nextspark.config.ts', async () => {
   const root = await project({
-    'package.json': JSON.stringify({ dependencies: { next: '16.3.5' } }),
+    'package.json': JSON.stringify({ dependencies: { next: '16.3.6' } }),
     'next.config.mjs': 'export default {}\n',
   })
   try {
@@ -66,7 +66,7 @@ test('an enabled packaged plugin resolves through the project dependency tree',
   const root = await project({
     'package.json': JSON.stringify({
       dependencies: {
-        next: '16.3.5',
+        next: '16.3.6',
         '@example/plugin-search': '1.0.0',
       },
     }),
@@ -98,7 +98,7 @@ test('an enabled packaged plugin that is not installed fails with an actionable
   const root = await project({
     'package.json': JSON.stringify({
       dependencies: {
-        next: '16.3.5',
+        next: '16.3.6',
         '@example/plugin-search': '1.0.0',
       },
     }),
@@ -119,7 +119,7 @@ test('a packaged plugin cannot use a path segment as its logical name', async ()
   const root = await project({
     'package.json': JSON.stringify({
       dependencies: {
-        next: '16.3.5',
+        next: '16.3.6',
         '@example/plugin-search': '1.0.0',
       },
     }),
@@ -146,7 +146,7 @@ test('a local plugin shadows an installed packaged plugin with the same NextSpar
   const root = await project({
     'package.json': JSON.stringify({
       dependencies: {
-        next: '16.3.5',
+        next: '16.3.6',
         '@example/plugin-search': '1.0.0',
       },
     }),

package/scripts/build/registry/__tests__/write-places.test.mjs

@@ -269,7 +269,7 @@ async function snapshot(root) {
 async function buildableProject() {
   const project = await directory()
   await writeIn(project.root, 'nextspark.config.ts', 'export default {}\n')
-  await writeIn(project.root, 'package.json', '{"dependencies":{"next":"16.3.5"}}')
+  await writeIn(project.root, 'package.json', '{"dependencies":{"next":"16.3.6"}}')
   await writeIn(project.root, 'templates/pricing/page.tsx', 'export default function Pricing() { return null }\n')
   return project
 }

package/scripts/build/registry/contracts/__tests__/contracts-wire.test.mjs

@@ -22,7 +22,7 @@ async function planFor(files) {
   const root = temp()
   try {
     write(root, 'nextspark.config.ts', 'export default { plugins: [] }\n')
-    write(root, 'package.json', JSON.stringify({ name: 'wire', dependencies: { next: '16.3.5' } }))
+    write(root, 'package.json', JSON.stringify({ name: 'wire', dependencies: { next: '16.3.6' } }))
     write(root, 'config/theme.config.ts', "export const wireThemeConfig = { name: 'wire' }\n")
     for (const [path, content] of Object.entries(files)) write(root, path, content)
     const entities = await discoverAllEntities(getConfig(root), { includeCore: false })

package/scripts/build/registry/contracts/__tests__/contracts.test.mjs

@@ -73,7 +73,7 @@ const NOTES_CONFIG = `export const noteEntityConfig = {
 function project(extra = {}) {
   const root = temp()
   write(root, 'nextspark.config.ts', 'export default { plugins: [] }\n')
-  write(root, 'package.json', JSON.stringify({ name: 'contracts-project', dependencies: { next: '16.3.5' } }))
+  write(root, 'package.json', JSON.stringify({ name: 'contracts-project', dependencies: { next: '16.3.6' } }))
   write(root, 'config/theme.config.ts', "export const contractsThemeConfig = { name: 'contracts' }\n")
   write(root, 'entities/tasks/tasks.config.ts', TASKS_CONFIG)
   write(root, 'entities/tasks/tasks.fields.ts', FIELDS)

package/scripts/build/registry/contracts/render.mjs

@@ -201,7 +201,7 @@ export function renderEntity(contract, { source, shape } = {}) {
   const lines = [CONTRACTS_HEADER]
   if (source) lines.push(`// Source: ${source}`)
   for (const warning of contract.warnings) lines.push(`// Warning: ${warning}`)
-  lines.push('', "import { z } from 'zod'", "import type { EntityConfig } from '../schema/types'", "import { generateEntitySchemas } from '../schema/schema-generator'", `import { ${usedFromShape.join(', ')} } from '../schema/response-shape'`)
+  lines.push('', "import * as z from 'zod'", "import type { EntityConfig } from '../schema/types'", "import { generateEntitySchemas } from '../schema/schema-generator'", `import { ${usedFromShape.join(', ')} } from '../schema/response-shape'`)
   if (shared.length > 0) lines.push(`import { ${shared.join(', ')} } from '../fields'`)
   lines.push('', `export const ${names.apiPath} = ${quote(`/api/v1/${contract.slug}`)}`, '')
 
@@ -246,7 +246,7 @@ export function renderEntity(contract, { source, shape } = {}) {
 export function renderEnvelope() {
   return `${CONTRACTS_HEADER}
 
-import { z } from 'zod'
+import * as z from 'zod'
 
 /** \`info\` of every response: the timestamp, plus whatever the endpoint adds (pagination, \`created\`). */
 export const apiInfoSchema = z.looseObject({ timestamp: z.string() })
@@ -307,7 +307,7 @@ export const apiErrorResponseSchema = z.object({
 export function renderFields() {
   return `${CONTRACTS_HEADER}
 
-import { z } from 'zod'
+import * as z from 'zod'
 import { addressSchema, fileObjectSchema } from './schema/schema-generator'
 import { mediaRefSchema } from './schema/media-ref'
 

package/scripts/build/registry/host/README.md

@@ -28,7 +28,7 @@ const { target, content } = await emitFacade({
 Every problem is a `FacadeEmitError` carrying all diagnostics (`code`, `file`, `line`, `exportName`,
 `message`); nothing is dropped silently.
 
-## Export table (Next.js 16.3.5)
+## Export table (Next.js 16.3.6)
 
 Source of truth: `next-route-exports.json`. The tests fail when the installed Next.js version differs,
 when Next's `AppSegmentConfigSchemaKeys` or `HTTP_METHODS` change, and when this rendering is stale.
@@ -71,7 +71,7 @@ export { listSlugs as generateStaticParams }
 Metadata image kinds accept Next's one-digit variants (`icon1`, `apple-icon9`, `opengraph-image2`,
 `twitter-image3`), mapped to the base kind.
 
-The emitter resolves `next/package.json` once (project first, then core) and accepts only `~16.3.5`: the table's
+The emitter resolves `next/package.json` once (project first, then core) and accepts only `~16.3.6`: the table's
 `next` is the verified baseline, and any stable 16.3.x patch at or above it is accepted, while other minors/majors,
 lower patches and prereleases are refused (`NS_HOST_UNSUPPORTED_NEXT_VERSION`). It loads Next's segment config
 schema from that same package root.

package/scripts/build/registry/host/__tests__/facade-emitter.test.mjs

@@ -595,14 +595,14 @@ test('an aliased magic export is forwarded under its source local name', async (
   assert.match(content, /^export \{ listSlugs as generateStaticParams \}$/m)
 })
 
-// --- fix round 3: ~16.3.5 version range --------------------------------------
+// --- fix round 3: ~baseline version range (baseline 16.3.6 since 0.1.0-beta.194) ---
 
 test('isSupportedNextVersion accepts ~baseline: same minor, stable patch >= baseline', () => {
-  assert.equal(ROUTE_EXPORT_TABLE.next, '16.3.5')
-  for (const version of ['16.3.5', '16.3.6', '16.3.9', '16.3.10', '16.3.123', '16.3.5+build.1', '16.3.7+sha.abc-1']) assert.equal(isSupportedNextVersion(version), true, version)
+  assert.equal(ROUTE_EXPORT_TABLE.next, '16.3.6')
+  for (const version of ['16.3.6', '16.3.7', '16.3.9', '16.3.10', '16.3.123', '16.3.6+build.1', '16.3.7+sha.abc-1']) assert.equal(isSupportedNextVersion(version), true, version)
   for (const version of [
-    '16.3.4', '16.3.0', '16.4.0', '16.2.9', '17.0.0', '15.3.5', '16.3.6-canary.0', '16.3.5-rc.1', '16.3.6-canary.0+build.1',
-    '16.3.4+build.1', '16.3.5+', '16.3.5+bad..meta', '16.3', 'latest', '', undefined,
+    '16.3.5', '16.3.4', '16.3.0', '16.4.0', '16.2.9', '17.0.0', '15.3.6', '16.3.7-canary.0', '16.3.6-rc.1', '16.3.7-canary.0+build.1',
+    '16.3.5+build.1', '16.3.6+', '16.3.6+bad..meta', '16.3', 'latest', '', undefined,
   ]) {
     assert.equal(isSupportedNextVersion(version), false, String(version))
   }
@@ -625,7 +625,7 @@ test('a later 16.3 patch is accepted and its own schema internal is used', async
   }
 })
 
-for (const version of ['16.3.4', '16.4.0', '17.0.0', '16.3.6-canary.0']) {
+for (const version of ['16.3.5', '16.4.0', '17.0.0', '16.3.6-canary.0']) {
   test(`${DIAGNOSTICS.UNSUPPORTED_NEXT_VERSION}: next@${version} is refused`, async () => {
     const dir = await fakeNextProject(version, "exports.AppSegmentConfigSchemaKeys = []\nexports.parseAppSegmentConfig = () => ({})\n")
     try {
@@ -634,7 +634,7 @@ for (const version of ['16.3.4', '16.4.0', '17.0.0', '16.3.6-canary.0']) {
         error => {
           assert.deepEqual(error.diagnostics.map(d => d.code), [DIAGNOSTICS.UNSUPPORTED_NEXT_VERSION])
           assert.match(error.message, new RegExp(`next@${version.replace(/\./g, '\\.')}`))
-          assert.match(error.message, /next@~16\.3\.5/)
+          assert.match(error.message, /next@~16\.3\.6/)
           return true
         }
       )
@@ -646,9 +646,9 @@ for (const version of ['16.3.4', '16.4.0', '17.0.0', '16.3.6-canary.0']) {
 
 // --- fix round 4: build metadata ----------------------------------------------
 
-test('a Next.js version with build metadata (16.3.5+build.1) is accepted end to end', async () => {
+test('a Next.js version with build metadata (16.3.6+build.1) is accepted end to end', async () => {
   const marker = "exports.AppSegmentConfigSchemaKeys = []\nexports.parseAppSegmentConfig = () => ({})\n"
-  const dir = await fakeNextProject('16.3.5+build.1', marker)
+  const dir = await fakeNextProject('16.3.6+build.1', marker)
   try {
     assert.equal(loadNextSegmentConfig(dir).error, undefined)
     const { content } = await emitFacade({ kind: 'page', target: 'a/page.tsx', specifier: '@/a', file: FILE, source: PAGE_WITH_CONFIG, projectRoot: dir })

package/scripts/build/registry/host/__tests__/host-mode.test.mjs

@@ -17,7 +17,7 @@ const PREPARE_CLI = join(CORE_ROOT, 'scripts/build/registry/host/prepare-cli.mjs
 function project({ legacyApp = false } = {}) {
   const root = mkdtempSync(join(tmpdir(), 'nextspark-host-mode-'))
   write(root, 'nextspark.config.ts', 'export default { plugins: [] }\n')
-  write(root, 'package.json', JSON.stringify({ name: 'host-mode', dependencies: { next: '16.3.5' } }))
+  write(root, 'package.json', JSON.stringify({ name: 'host-mode', dependencies: { next: '16.3.6' } }))
   write(root, 'templates/pricing/page.tsx', PAGE('Pricing'))
   if (legacyApp) write(root, 'src/app/layout.tsx', 'export default function Layout({ children }) { return children }\n')
   return { root, cleanup: () => rmSync(root, { recursive: true, force: true }) }

package/scripts/build/registry/host/__tests__/host-project-composition.test.mjs

@@ -36,7 +36,7 @@ const LAYOUT = 'export default function Layout({ children }: { children: React.R
 function project(extra = {}) {
   const root = mkdtempSync(join(tmpdir(), 'nextspark-host-composition-'))
   write(root, 'nextspark.config.ts', "export default { plugins: [], billing: { webhookExtensions: { stripe: './lib/billing/stripe-webhook-extensions' } } }\n")
-  write(root, 'package.json', JSON.stringify({ name: 'composition', dependencies: { next: '16.3.5' } }))
+  write(root, 'package.json', JSON.stringify({ name: 'composition', dependencies: { next: '16.3.6' } }))
   write(root, 'config/theme.config.ts', "export const compositionThemeConfig = { name: 'composition' }\n")
   write(root, 'styles/globals.css', '@import "tailwindcss";\n')
   write(root, 'lib/billing/stripe-webhook-extensions.ts', 'export const stripeWebhookExtensions = {}\n')

package/scripts/build/registry/host/__tests__/host-project.test.mjs

@@ -16,7 +16,7 @@ const PREPARE_CLI = join(CORE_ROOT, 'scripts/build/registry/host/prepare-cli.mjs
 function project() {
   const root = mkdtempSync(join(tmpdir(), 'nextspark-host-project-'))
   write(root, 'nextspark.config.ts', 'export default { plugins: [] }\n')
-  write(root, 'package.json', JSON.stringify({ name: 'host-project', dependencies: { next: '16.3.5' } }))
+  write(root, 'package.json', JSON.stringify({ name: 'host-project', dependencies: { next: '16.3.6' } }))
   write(root, 'templates/pricing/page.tsx', PAGE('Pricing'))
   write(root, 'api/ping/route.ts', ROUTE)
   return { root, cleanup: () => rmSync(root, { recursive: true, force: true }) }
@@ -41,7 +41,7 @@ test('a real project: the registry build is staged and published with the host,
 
     const record = readGeneration(root)
     assert.equal(Object.keys(record.files).length, first.files.length)
-    assert.ok(record.versions.core && record.versions.next === '16.3.5')
+    assert.ok(record.versions.core && record.versions.next === '16.3.6')
     assert.ok(record.inputs.files['nextspark.config.ts'] && record.inputs.files['templates/pricing/page.tsx'])
     assert.deepEqual(await checkHost(config), { ok: true, problems: [] })
 

package/scripts/build/registry/host/__tests__/host-robustness.test.mjs

@@ -1,7 +1,7 @@
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
 import { spawn } from 'node:child_process'
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import { hostname, tmpdir } from 'node:os'
 import { join } from 'node:path'
 
@@ -139,6 +139,69 @@ test('crash mid-publish (SIGKILL): --check reports the host as not fresh, and th
   }
 })
 
+test('what a killed writer leaves (temporary files, a staging directory) is swept by the next prepare instead of blocking it or piling up', async () => {
+  const host = tempHost({ 'templates/about/page.tsx': PAGE('About') })
+  try {
+    const config = hostConfig(host.root)
+    await prepareHost(config, { mode: 'production' })
+    const leftovers = [
+      'src/app/(public)/.page.tsx.4242.0a1b2c3d.nextspark-tmp',
+      '.nextspark/registries/.example.ts.4242.0a1b2c3d.nextspark-tmp',
+      '.nextspark/contracts/index.ts.nextspark-tmp',
+      '.nextspark/staging-AbC123/registries/example.ts',
+    ]
+    const kept = ['.nextspark/my-notes.txt', '.nextspark/staging-notes/keep.txt']
+    for (const path of [...leftovers, ...kept]) write(host.hostRoot, path, 'x\n')
+
+    // A temporary file in src/app used to read as "a file NextSpark did not generate": prepare refused to run
+    const published = await prepareHost(config, { mode: 'production' })
+    assert.deepEqual(published.written, [])
+    for (const path of leftovers) assert.equal(existsSync(join(host.hostRoot, path)), false, `${path} is swept`)
+    assert.equal(existsSync(join(host.hostRoot, '.nextspark/staging-AbC123')), false)
+    // Only the writers' own names go: anything else is the user's
+    for (const path of kept) assert.equal(existsSync(join(host.hostRoot, path)), true, `${path} stays`)
+    write(host.hostRoot, 'src/app/(public)/page.tsx.nextspark-tmp', 'x\n')
+    await assert.rejects(() => prepareHost(config, { mode: 'production' }), error => error instanceof PrepareError && codes(error).includes(GENERATION_DIAGNOSTICS.FOREIGN))
+    assert.equal(existsSync(join(host.hostRoot, 'src/app/(public)/page.tsx.nextspark-tmp')), true)
+  } finally {
+    host.cleanup()
+  }
+})
+
+test('a scratch registry file a killed writer left is swept and the next prepare completes', async () => {
+  const host = tempHost({ 'templates/about/page.tsx': PAGE('About') })
+  try {
+    const config = hostConfig(host.root, { registries: manyRegistries(20, 'old') })
+    await prepareHost(config, { mode: 'production' })
+    const scratch = '.nextspark/registries/.r00003.ts.4242.0a1b2c3d.nextspark-tmp'
+    write(host.hostRoot, scratch, 'half written')
+    const fresh = hostConfig(host.root, { registries: manyRegistries(20, 'new') })
+    await prepareHost(fresh, { mode: 'production' })
+    assert.equal(existsSync(join(host.hostRoot, scratch)), false)
+    assert.deepEqual(await checkHost(fresh), { ok: true, problems: [] })
+  } finally {
+    host.cleanup()
+  }
+})
+
+test('the sweep never enters backups or migrate-rollback, and an unreadable directory under .nextspark does not crash prepare', async () => {
+  const host = tempHost({ 'templates/about/page.tsx': PAGE('About') })
+  const locked = join(host.hostRoot, '.nextspark/unreadable')
+  try {
+    const config = hostConfig(host.root)
+    await prepareHost(config, { mode: 'production' })
+    const kept = ['.nextspark/backups/20260101/src/app/.page.tsx.1.0a1b2c3d.nextspark-tmp', '.nextspark/backups/20260101/x.nextspark-tmp', '.nextspark/migrate-rollback/y.nextspark-tmp']
+    for (const path of kept) write(host.hostRoot, path, 'x\n')
+    write(host.hostRoot, '.nextspark/unreadable/z.nextspark-tmp', 'x\n')
+    if (process.getuid?.() !== 0) chmodSync(locked, 0)
+    await prepareHost(config, { mode: 'production' })
+    for (const path of kept) assert.equal(existsSync(join(host.hostRoot, path)), true, `${path} stays`)
+  } finally {
+    try { chmodSync(locked, 0o755) } catch {}
+    host.cleanup()
+  }
+})
+
 test('registries: a file in place of a generated registry is adopted only when a NextSpark registry build wrote it', async () => {
   const cases = [
     ['byte-identical', REGISTRY, 'adopted'],
@@ -251,7 +314,7 @@ test('an npm-installed core ships only dist/: the manifest, variants and route m
 test('the project config is read again for every generation: enabling a plugin in nextspark.config.ts adds its routes', async () => {
   const root = mkdtempSync(join(tmpdir(), 'nextspark-config-reload-'))
   try {
-    write(root, 'package.json', JSON.stringify({ name: 'reload', dependencies: { next: '16.3.5' } }))
+    write(root, 'package.json', JSON.stringify({ name: 'reload', dependencies: { next: '16.3.6' } }))
     write(root, 'nextspark.config.ts', 'export default { plugins: [] }\n')
     write(root, 'plugins/search/plugin.config.ts', 'export const searchPluginConfig = {}\n')
     write(root, 'plugins/search/templates/search/page.tsx', PAGE('Search'))

package/scripts/build/registry/host/facade-emitter.mjs

@@ -284,8 +284,8 @@ export function resolveNextPackage(projectRoot = process.cwd()) {
 /**
  * Whether `version` is a Next.js the table applies to: the table's `next` is the verified
  * baseline, and core pins `next` to `~<baseline>`, so any stable patch of the same minor at or
- * above the baseline is accepted (16.3.5, 16.3.9, 16.3.5+build.1), while other minors/majors, lower
- * patches and prereleases (16.3.6-canary.0) are refused.
+ * above the baseline is accepted (16.3.6, 16.3.9, 16.3.6+build.1), while other minors/majors, lower
+ * patches and prereleases (16.3.7-canary.0) are refused.
  */
 export function isSupportedNextVersion(version, baseline = ROUTE_EXPORT_TABLE.next) {
   // Stable versions only; build metadata (`+build.1`) is allowed, as npm's `~` range allows it.

package/scripts/build/registry/host/generation.mjs

@@ -438,6 +438,60 @@ export function acquireLock(hostRoot, { staleAfterMs = DEFAULT_STALE_LOCK_MS, at
   throw lockedError(path)
 }
 
+// ---------------------------------------------------------------------------
+// What a killed writer leaves behind
+// ---------------------------------------------------------------------------
+
+// The names of the scratch files and directories the writers create: `writeAtomically` (below),
+// the contracts publisher (`<file>.nextspark-tmp`) and the registry build's staging directory
+// (`fs.mkdtempSync('.nextspark/staging-')`).
+const TEMPORARY_FILE = /^\..+\.\d+\.[0-9a-f]{8}\.nextspark-tmp$/
+const CONTRACTS_TEMPORARY_FILE = /\.nextspark-tmp$/
+const STAGING_DIR = /^staging-[A-Za-z0-9]{6}$/
+
+/**
+ * Remove what a writer that was killed (SIGKILL, power loss) between creating a scratch file and
+ * renaming it leaves behind: its temporary files under `src/app` and `.nextspark`, and a registry
+ * build's staging directory. Call it with the lock held, when no live writer can own one of them.
+ * Without it a temporary file in `src/app` is a file "NextSpark did not generate", so the next
+ * prepare refuses to run until someone deletes it by hand, and the others stay forever.
+ * Only names the writers use are touched, never through a symlink; returns the paths removed.
+ */
+export function sweepInterruptedWrites(hostRoot, { app = true } = {}) {
+  const fs = projectFiles(hostRoot)
+  const removed = []
+  const entries = dir => {
+    try {
+      return lstatOrNull(join(hostRoot, dir))?.isDirectory() ? readdirSync(join(hostRoot, dir), { withFileTypes: true }) : []
+    } catch {
+      return [] // an unreadable directory is skipped: the build reports it
+    }
+  }
+  const visit = (dir, isTemporary, recursive) => {
+    for (const entry of entries(dir)) {
+      const path = `${dir}/${entry.name}`
+      if (entry.isDirectory()) {
+        if (recursive) visit(path, isTemporary, true)
+      } else if (entry.isFile() && isTemporary.test(entry.name)) {
+        fs.unlinkSync(join(hostRoot, path))
+        removed.push(path)
+      }
+    }
+  }
+  // Only the places the writers use; never `.nextspark/backups` or `.nextspark/migrate-rollback`.
+  // src/app belongs to the host only when it generates it (prepareContractsOnly leaves it alone).
+  if (app) visit(APP_DIR, TEMPORARY_FILE, true)
+  visit('.nextspark', TEMPORARY_FILE, false)
+  visit(REGISTRIES_DIR, TEMPORARY_FILE, true)
+  visit('.nextspark/contracts', CONTRACTS_TEMPORARY_FILE, true)
+  for (const entry of entries('.nextspark')) {
+    if (!entry.isDirectory() || !STAGING_DIR.test(entry.name)) continue
+    fs.rmSync(join(hostRoot, '.nextspark', entry.name), { recursive: true, force: true })
+    removed.push(`.nextspark/${entry.name}`)
+  }
+  return removed
+}
+
 // ---------------------------------------------------------------------------
 // Publication
 // ---------------------------------------------------------------------------

package/scripts/build/registry/host/next-route-exports.json

@@ -1,7 +1,7 @@
 {
   "$comment": "Route file kinds x exports x emitted facade form, for the generated host (#203). Source of truth for host/facade-emitter.mjs; README.md renders it. Verified against the installed Next.js source listed in verifiedAgainst and by the probe builds recorded in README.md. Re-verify and bump `next` when upgrading Next.js: host/__tests__/facade-emitter.test.mjs fails when the installed version differs.",
-  "next": "16.3.5",
-  "supportedNext": "~16.3.5 (same major.minor, stable patch >= the verified baseline in \"next\"; enforced by isSupportedNextVersion)",
+  "next": "16.3.6",
+  "supportedNext": "~16.3.6 (same major.minor, stable patch >= the verified baseline in \"next\"; enforced by isSupportedNextVersion)",
   "verifiedAgainst": [
     "next/dist/build/segment-config/app/app-segment-config.js (AppSegmentConfigSchemaKeys, parseAppSegmentConfig)",
     "next/dist/build/analysis/get-page-static-info.js (checkExports, getAppPageStaticInfo)",

package/scripts/build/registry/host/prepare.mjs

@@ -58,6 +58,7 @@ import {
   preflight,
   publishGeneration,
   readGeneration,
+  sweepInterruptedWrites,
   validateFiles,
   writeOwnedFile,
 } from './generation.mjs'
@@ -209,6 +210,7 @@ export async function predictHost(config, { devStatus = false } = {}) {
 export async function prepareHost(config, { mode = 'development', devStatus = false, cache, staleAfterMs, reportFailure = false, changed = [] } = {}) {
   const release = acquireLock(config.hostRoot, { staleAfterMs })
   try {
+    sweepInterruptedWrites(config.hostRoot)
     return await generateAndPublish(config, { mode, devStatus, cache })
   } catch (error) {
     // `nextspark dev`: the failure goes to the browser under the same lock, so no other writer's
@@ -283,6 +285,7 @@ export async function prepareContractsOnly(config, { staleAfterMs } = {}) {
   if (!config.contracts) throw new PrepareError([{ code: 'NS_CONTRACTS_UNAVAILABLE', message: 'this project has no contracts step' }])
   const release = acquireLock(config.hostRoot, { staleAfterMs })
   try {
+    sweepInterruptedWrites(config.hostRoot, { app: false })
     const contracts = await planContractsStep(config)
     return publishContractsStep(config, contracts)
   } catch (error) {