@voltro/cli 0.11.4 → 0.12.0

package/dist/{start-DyJE6w1R.js → start-DKcQd52a.js}

@@ -1,13 +1,14 @@
-import { A as e, At as t, C as n, Ct as r, Dt as i, E as a, Et as o, G as s, H as c, I as l, J as u, N as d, Nt as f, O as p, R as m, Tt as h, U as g, V as _, W as v, Z as y, _ as ee, _t as te, a as b, at as ne, b as x, c as S, f as C, g as w, gt as T, h as E, i as D, j as O, k, m as A, o as re, p as ie, q as j, r as ae, s as oe, t as se, v as M, vt as N, w as P, wt as ce, y as F } from "./inspectMetrics-D4EJ8LTi.js";
-import { t as le } from "./bootTiming-BdyP9nYw.js";
-import { dirname as ue, extname as I, join as L, resolve as R } from "node:path";
-import { fileURLToPath as de, pathToFileURL as fe } from "node:url";
-import { createLogger as z, printReadyBlock as pe } from "@voltro/logger";
-import { promises as B } from "node:fs";
+import { $ as e, A as t, C as n, E as r, G as i, H as a, I as o, J as s, N as c, O as l, Q as u, R as ee, U as d, V as f, W as p, _ as m, a as h, at as g, b as _, c as v, ct as y, et as b, f as te, g as x, h as S, i as C, j as w, k as ne, m as T, nt as re, o as ie, p as E, q as D, r as O, s as k, t as A, tt as j, v as M, w as ae, y as N } from "./inspectMetrics-uEfIS1vp.js";
+import { D as oe, E as se, T as ce, a as P, p as le, w as ue } from "./inspect-Dwx0_tUj.js";
+import { t as de } from "./bootTiming-BdyP9nYw.js";
+import { dirname as fe, extname as F, join as I, resolve as L } from "node:path";
+import { fileURLToPath as R, pathToFileURL as z } from "node:url";
+import { createLogger as B, printReadyBlock as pe } from "@voltro/logger";
+import { promises as V } from "node:fs";
 import { snapshotMetricsSync as me } from "@voltro/runtime";
 import { createServer as he } from "node:http";
 //#region src/isrCdcInvalidator.ts
-var V = z({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
+var H = B({ scope: "voltro:start:cdc" }), U = (e) => (t) => {
 	let n = 0;
 	for (let [r, i] of e.tableSubscriptionsByPattern) {
 		if (!i.includes(t)) continue;
@@ -18,23 +19,23 @@ var V = z({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 		}));
 	}
 	return n;
-}, U = () => !process.env.PG_HOST && !process.env.PG_DATABASE ? null : {
+}, W = () => !process.env.PG_HOST && !process.env.PG_DATABASE ? null : {
 	host: process.env.PG_HOST ?? "localhost",
 	port: Number(process.env.PG_PORT ?? 5432),
 	user: process.env.PG_USER ?? "app",
 	password: process.env.PG_PASSWORD ?? "app",
 	database: process.env.PG_DATABASE ?? "app"
 }, ge = (e) => {
-	let t = e.channel ?? "framework_changes", n = H(e), r = null, i = null;
+	let t = e.channel ?? "framework_changes", n = U(e), r = null, i = null;
 	return {
 		start: async () => {
-			let a = U();
+			let a = W();
 			if (!a) {
-				V.debug("skipped — no PG_* env vars set");
+				H.debug("skipped — no PG_* env vars set");
 				return;
 			}
 			if (e.tableSubscriptionsByPattern.size === 0) {
-				V.debug("skipped — no pages declare cacheInvalidatesOn");
+				H.debug("skipped — no pages declare cacheInvalidatesOn");
 				return;
 			}
 			r = new (await (import("pg"))).default.Client(a), await r.connect(), i = (e) => {
@@ -43,16 +44,16 @@ var V = z({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 				try {
 					r = JSON.parse(e.payload);
 				} catch (e) {
-					V.warn("bad CDC payload", {}, e);
+					H.warn("bad CDC payload", {}, e);
 					return;
 				}
 				let i = n(r.table);
-				i > 0 && V.info(`${r.op} on '${r.table}' → dropped ${i} cache entries`, {
+				i > 0 && H.info(`${r.op} on '${r.table}' → dropped ${i} cache entries`, {
 					op: r.op,
 					table: r.table,
 					dropped: i
 				});
-			}, r.on("notification", i), await r.query(`LISTEN ${t}`), V.info(`LISTEN ${t}`, {
+			}, r.on("notification", i), await r.query(`LISTEN ${t}`), H.info(`LISTEN ${t}`, {
 				channel: t,
 				host: a.host,
 				port: a.port,
@@ -68,7 +69,7 @@ var V = z({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 			}
 		}
 	};
-}, W = z({ scope: "voltro:start:isr-cache" }), G = "voltro_isr_cache", _e = (e) => `
+}, G = B({ scope: "voltro:start:isr-cache" }), K = "voltro_isr_cache", _e = (e) => `
 CREATE TABLE IF NOT EXISTS ${e} (
   cache_key                TEXT PRIMARY KEY,
   html                     TEXT NOT NULL,
@@ -80,7 +81,7 @@ CREATE TABLE IF NOT EXISTS ${e} (
 );
 CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 `, ve = (e) => {
-	let t = e.tableName ?? G, { client: n } = e, r = /* @__PURE__ */ new Map(), i = !1, a = (async () => {
+	let t = e.tableName ?? K, { client: n } = e, r = /* @__PURE__ */ new Map(), i = !1, a = (async () => {
 		i || (i = !0, await n.query(_e(t)));
 	})().then(async () => {
 		let e = await n.query(`SELECT * FROM ${t}`);
@@ -93,10 +94,10 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			staleWhileRevalidateMs: Number(t.stale_while_revalidate_ms)
 		});
 	}).catch((e) => {
-		W.warn("postgres bootstrap failed", {}, e);
+		G.warn("postgres bootstrap failed", {}, e);
 	}), o = (e, t) => {
 		a.then(() => n.query(e, t)).catch((e) => {
-			W.warn("postgres write failed", {}, e);
+			G.warn("postgres write failed", {}, e);
 		});
 	};
 	return {
@@ -141,14 +142,14 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			return Array.from(r.entries());
 		}
 	};
-}, K = z({ scope: "voltro:start" }), ye = await (async () => {
+}, q = B({ scope: "voltro:start" }), ye = await (async () => {
 	try {
-		let e = L(ue(de(import.meta.url)), "..", "package.json"), t = await B.readFile(e, "utf8");
+		let e = I(fe(R(import.meta.url)), "..", "package.json"), t = await V.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), q = (e) => e instanceof Error && e._voltroControl === "redirect" && typeof e.location == "string", be = (e) => e instanceof Error && e._voltroControl === "not-found", J = {
+})(), J = (e) => e instanceof Error && e._voltroControl === "redirect" && typeof e.location == "string", be = (e) => e instanceof Error && e._voltroControl === "not-found", Y = {
 	".html": "text/html; charset=utf-8",
 	".js": "application/javascript",
 	".mjs": "application/javascript",
@@ -166,13 +167,13 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 	".woff": "font/woff",
 	".woff2": "font/woff2",
 	".txt": "text/plain; charset=utf-8"
-}, xe = (e) => J[I(e).toLowerCase()] ?? "application/octet-stream", Y = (e) => e.replace(/<script\b(?=[^>]*\btype="module")(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<script\b(?=[^>]*\bsrc=)(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<link\b[^>]*\brel="modulepreload"[^>]*>/gi, ""), X = async (e) => {
+}, xe = (e) => Y[F(e).toLowerCase()] ?? "application/octet-stream", X = (e) => e.replace(/<script\b(?=[^>]*\btype="module")(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<script\b(?=[^>]*\bsrc=)(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<link\b[^>]*\brel="modulepreload"[^>]*>/gi, ""), Z = async (e) => {
 	try {
-		return await B.stat(e), !0;
+		return await V.stat(e), !0;
 	} catch {
 		return !1;
 	}
-}, Z = (e) => {
+}, Q = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -182,7 +183,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		priority: n
 	};
 }, Se = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = Z(e.pattern);
+	let { regex: t, paramNames: n, priority: r } = Q(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -204,31 +205,31 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 	}
 	return null;
 }, we = async (e) => {
-	let { provider: t, route: n, params: r, pathname: a, dirs: o, shellTemplate: s, requestHeaders: c, requestUrl: u = "", apiOrigin: d, apiName: f } = e, p = D(d, c.cookie, { apiName: f }), m = await t.getPage(n.pattern, n.file), h = l(m, n.file), g = h === "spa" && re(o, n.dirChain).some((e) => e.hasLayout);
-	if (h !== "ssr" && h !== "isr" && !g) return null;
-	let _ = re(o, n.dirChain), v = {}, y = null, te, ne = new AbortController();
+	let { provider: t, route: n, params: r, pathname: i, dirs: a, shellTemplate: s, requestHeaders: c, requestUrl: l = "", apiOrigin: u, apiName: ee } = e, d = C(u, c.cookie, { apiName: ee }), f = await t.getPage(n.pattern, n.file), p = o(f, n.file), g = p === "spa" && ie(a, n.dirChain).some((e) => e.hasLayout);
+	if (p !== "ssr" && p !== "isr" && !g) return null;
+	let v = ie(a, n.dirChain), y = {}, b = null, te, x = new AbortController();
 	try {
-		({chain: te, segmentLoaderData: v} = await b({
-			entries: _,
+		({chain: te, segmentLoaderData: y} = await h({
+			entries: v,
 			loadLayout: (e) => t.getLayout(e.dir),
 			loadError: (e) => t.getError(e.dir),
 			loadPending: (e) => t.getPending(e.dir),
 			ctx: {
 				params: r,
-				pathname: a,
-				signal: ne.signal,
+				pathname: i,
+				signal: x.signal,
 				headers: c,
-				query: p
+				query: d
 			}
-		})), typeof m.loader == "function" && !g && (y = await m.loader({
+		})), typeof f.loader == "function" && !g && (b = await f.loader({
 			params: r,
-			pathname: a,
-			signal: ne.signal,
+			pathname: i,
+			signal: x.signal,
 			headers: c,
-			query: p
+			query: d
 		}));
 	} catch (e) {
-		if (q(e)) return {
+		if (J(e)) return {
 			control: "redirect",
 			status: e.status,
 			location: e.location
@@ -236,48 +237,48 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		if (be(e)) return { control: "not-found" };
 		throw e;
 	}
-	let S = await t.getHelpers(), C = {
+	let w = await t.getHelpers(), ne = {
 		pattern: n.pattern,
-		Component: m.default,
-		meta: m.meta,
-		loader: m.loader,
-		ErrorBoundary: m.ErrorBoundary,
-		Pending: m.Pending,
-		renderMode: h,
+		Component: f.default,
+		meta: f.meta,
+		loader: f.loader,
+		ErrorBoundary: f.ErrorBoundary,
+		Pending: f.Pending,
+		renderMode: p,
 		chain: te
-	}, w = {
-		cookies: S.parseCookieHeader(c.cookie),
+	}, E = {
+		cookies: w.parseCookieHeader(c.cookie),
 		headers: c,
-		url: u
-	}, T = S.i18n?.resolve(c.cookie, c["accept-language"]), O = m.interactive ?? "full";
+		url: l
+	}, D = w.i18n?.resolve(c.cookie, c["accept-language"]), O = f.interactive ?? "full";
 	if (g) {
 		let e = M({
-			helpers: S,
+			helpers: w,
 			page: n.pattern,
 			interactive: O,
 			delivery: "stream",
 			renderInput: {
-				descriptor: C,
+				descriptor: ne,
 				params: r,
-				pathname: a,
-				segmentLoaderData: v,
-				requestContext: w,
-				...T ? {
-					outerWrap: T.outerWrap,
-					locale: T.locale
+				pathname: i,
+				segmentLoaderData: y,
+				requestContext: E,
+				...D ? {
+					outerWrap: D.outerWrap,
+					locale: D.locale
 				} : {}
 			}
-		}), t = T?.locale ?? w.cookies["voltro:lang"] ?? "en", i = (t) => x({
-			helpers: S,
+		}), t = D?.locale ?? E.cookies["voltro:lang"] ?? "en", a = (t) => _({
+			helpers: w,
 			prepared: e,
 			meta: t,
 			interactive: O
 		});
 		if (e.hasDeferred) {
-			let n = A({ shell: s });
+			let n = T({ shell: s });
 			return {
 				renderMode: "spa",
-				stream: (r) => E({
+				stream: (r) => S({
 					res: r,
 					shell: n,
 					htmlLang: t,
@@ -285,58 +286,58 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 						"content-type": "text/html; charset=utf-8",
 						"x-voltro-rendered-by": "spa"
 					},
-					headInjection: i,
-					render: (t) => S.renderPageToStream({
+					headInjection: a,
+					render: (t) => w.renderPageToStream({
 						...e.renderInput,
 						...t
 					}),
 					onShellError: (e) => {
-						K.error("spa layout shell render failed", { pathname: a }, e), r.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), r.end("server error");
+						q.error("spa layout shell render failed", { pathname: i }, e), r.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), r.end("server error");
 					}
 				})
 			};
 		}
-		let o = F({
-			helpers: S,
+		let o = N({
+			helpers: w,
 			prepared: e
 		});
 		return {
-			html: s.replace("<div id=\"root\"></div>", `<div id="root">${o.body}</div>`).replace("</head>", `    ${i(o.meta)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${t}"`),
+			html: s.replace("<div id=\"root\"></div>", `<div id="root">${o.body}</div>`).replace("</head>", `    ${a(o.meta)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${t}"`),
 			renderMode: "spa",
 			revalidateMs: null
 		};
 	}
-	let k = ee({
-		helpers: S,
+	let k = m({
+		helpers: w,
 		page: n.pattern,
-		pathname: a,
-		renderMode: h,
+		pathname: i,
+		renderMode: p,
 		interactive: O,
-		loaderData: y,
-		segmentLoaderData: v,
-		pageLoaderRan: typeof m.loader == "function"
-	}), ie = {
-		descriptor: C,
+		loaderData: b,
+		segmentLoaderData: y,
+		pageLoaderRan: typeof f.loader == "function"
+	}), A = {
+		descriptor: ne,
 		params: r,
-		pathname: a,
+		pathname: i,
 		loaderData: k.loaderData,
 		segmentLoaderData: k.segmentLoaderData,
-		requestContext: w,
-		...T ? {
-			outerWrap: T.outerWrap,
-			locale: T.locale
+		requestContext: E,
+		...D ? {
+			outerWrap: D.outerWrap,
+			locale: D.locale
 		} : {}
 	}, j = (e) => [
-		S.renderMetaToHtml(e),
+		w.renderMetaToHtml(e),
 		`<meta name="voltro-interactive" content="${O}" />`,
-		...k.hasDeferred ? [S.renderDeferredRegistryScript()] : [],
-		S.renderRouterStateScript(k.stateInput)
+		...k.hasDeferred ? [w.renderDeferredRegistryScript()] : [],
+		w.renderRouterStateScript(k.stateInput)
 	].filter((e) => e.length > 0).join("\n    ");
-	if (h === "ssr" && O === "full" && e.buffered !== !0) {
-		let e = T?.locale ?? w.cookies["voltro:lang"] ?? "en", t = A({ shell: s });
+	if (p === "ssr" && O === "full" && e.buffered !== !0) {
+		let e = D?.locale ?? E.cookies["voltro:lang"] ?? "en", t = T({ shell: s });
 		return {
 			renderMode: "ssr",
-			stream: (n) => E({
+			stream: (n) => S({
 				res: n,
 				shell: t,
 				htmlLang: e,
@@ -345,26 +346,26 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 					"x-voltro-rendered-by": "ssr"
 				},
 				headInjection: j,
-				render: (e) => S.renderPageToStream({
-					...ie,
+				render: (e) => w.renderPageToStream({
+					...A,
 					...e
 				}),
 				onShellError: (e) => {
-					K.error("ssr shell render failed", { pathname: a }, e), n.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), n.end("server error");
+					q.error("ssr shell render failed", { pathname: i }, e), n.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), n.end("server error");
 				}
 			})
 		};
 	}
-	let { html: ae, meta: oe } = S.renderPageToHtml(ie), se = j(oe), N = T?.locale ?? w.cookies["voltro:lang"] ?? "en", P = s.replace("<div id=\"root\"></div>", `<div id="root">${ae}</div>`).replace("</head>", `    ${se}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${N}"`);
-	O === "none" && (P = Y(P));
-	let ce = h === "isr" ? i(m.revalidate) : null;
+	let { html: ae, meta: oe } = w.renderPageToHtml(A), se = j(oe), ce = D?.locale ?? E.cookies["voltro:lang"] ?? "en", P = s.replace("<div id=\"root\"></div>", `<div id="root">${ae}</div>`).replace("</head>", `    ${se}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${ce}"`);
+	O === "none" && (P = X(P));
+	let le = p === "isr" ? re(f.revalidate) : null;
 	return {
 		html: P,
-		renderMode: h,
-		revalidateMs: ce
+		renderMode: p,
+		revalidateMs: le
 	};
-}, Q = (e) => e === "" ? "/" : e, Te = async (e) => {
-	let t = await import(fe(e).href);
+}, $ = (e) => e === "" ? "/" : e, Te = async (e) => {
+	let t = await import(z(e).href);
 	return {
 		kind: "bundle",
 		getPageMeta: () => t.pageMeta,
@@ -374,18 +375,18 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			return typeof r == "function" ? await r() : r;
 		},
 		async getLayout(e) {
-			let n = t.layouts[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing layout for dir ${Q(e)}`);
+			let n = t.layouts[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing layout for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getError(e) {
-			let n = t.errors[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing error for dir ${Q(e)}`);
+			let n = t.errors[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing error for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getPending(e) {
-			let n = t.pendings[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing pending for dir ${Q(e)}`);
+			let n = t.pendings[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing pending for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getHelpers() {
@@ -394,7 +395,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		async close() {}
 	};
 }, Ee = async (e, t) => {
-	let n = await f("vite", () => import("vite")), r = (await import("@vitejs/plugin-react")).default, i = (await import("@tailwindcss/vite")).default, a = await n.createServer({
+	let n = await y("vite", () => import("vite")), r = (await import("@vitejs/plugin-react")).default, i = (await import("@tailwindcss/vite")).default, a = await n.createServer({
 		root: t,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [r(), i()],
@@ -406,121 +407,121 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		},
 		appType: "custom",
 		logLevel: "warn"
-	}), o = L(e, "src", "pages"), s = (e) => e === "" ? o : L(o, e), c = j({ limit: u() }), l = (e) => c.load(e, async () => await a.ssrLoadModule(e));
+	}), o = I(e, "src", "pages"), c = (e) => e === "" ? o : I(o, e), l = D({ limit: s() }), u = (e) => l.load(e, async () => await a.ssrLoadModule(e));
 	return {
 		kind: "middleware",
 		async getPage(e, t) {
-			return l(L(o, t));
+			return u(I(o, t));
 		},
 		async getLayout(e) {
-			return l(L(s(e), "layout.tsx"));
+			return u(I(c(e), "layout.tsx"));
 		},
 		async getError(e) {
-			return l(L(s(e), "error.tsx"));
+			return u(I(c(e), "error.tsx"));
 		},
 		async getPending(e) {
-			return l(L(s(e), "loading.tsx"));
+			return u(I(c(e), "loading.tsx"));
 		},
 		async getHelpers() {
-			return await l("@voltro/web/ssr");
+			return await u("@voltro/web/ssr");
 		},
 		async close() {
 			await a.close();
 		}
 	};
-}, De = async (i) => {
-	let l = le(), u = await oe(i);
-	if (!u) return {
+}, De = async (o) => {
+	let s = de(), m = await k(o);
+	if (!m) return {
 		ran: !1,
 		exitCode: 0
 	};
-	if (u.type !== "web") return K.error("only web apps are supported by `voltro start`"), {
+	if (m.type !== "web") return q.error("only web apps are supported by `voltro start`"), {
 		ran: !0,
 		exitCode: 1
 	};
-	let { resolved: f } = await t({
-		rawEnv: u.env,
+	let { resolved: h } = await g({
+		rawEnv: m.env,
 		appType: "web",
-		root: i,
-		log: K,
+		root: o,
+		log: q,
 		generateTypes: !1
-	}), ee = f.publicValues;
-	l.mark("config");
-	let b = v();
-	_(b), K.info("booting voltro start", { app: u.name ?? "(unnamed)" });
-	let x = (() => {
+	}), _ = h.publicValues;
+	s.mark("config");
+	let y = p();
+	f(y), q.info("booting voltro start", { app: m.name ?? "(unnamed)" });
+	let S = (() => {
 		if (process.env.VOLTRO_IS_DASHBOARD === "1" && process.env.VOLTRO_DASHBOARD_PORT) return Number(process.env.VOLTRO_DASHBOARD_PORT);
 		if (process.env.PORT) {
 			let e = Number(process.env.PORT);
 			if (Number.isFinite(e) && e > 0) return e;
 		}
-		return u.port ?? 5173;
-	})(), E = L(i, ".framework"), D = L(E, "dist"), A = L(D, "index.html");
-	if (!await X(A)) return K.error("no built dist found — run `voltro build` first", { distDir: D }), {
+		return m.port ?? 5173;
+	})(), C = I(o, ".framework"), T = I(C, "dist"), re = I(T, "index.html");
+	if (!await Z(re)) return q.error("no built dist found — run `voltro build` first", { distDir: T }), {
 		ran: !0,
 		exitCode: 1
 	};
-	let j = u.name ?? "unnamed", M = p("web", j, x), F = a(j);
-	await O({
+	let D = m.name ?? "unnamed", M = l("web", D, S), N = r(D);
+	await w({
 		id: M,
-		name: j,
+		name: D,
 		kind: "web",
-		url: `http://localhost:${x}`,
+		url: `http://localhost:${S}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: F.path
+		logFile: N.path
 	}).catch(() => {});
-	let ue = L(D, "_voltro", "shell.html"), I = await X(ue) ? await B.readFile(ue, "utf8") : await B.readFile(A, "utf8"), R = await S(i, u), de = ae(R[0]), fe = R[0]?.name, z, V = null;
-	process.env.SSR_CACHE === "postgres" && process.env.PG_HOST ? (V = new (await (import("pg"))).default.Client({
+	let fe = I(T, "_voltro", "shell.html"), F = await Z(fe) ? await V.readFile(fe, "utf8") : await V.readFile(re, "utf8"), L = await v(o, m), R = O(L[0]), z = L[0]?.name, B, H = null;
+	process.env.SSR_CACHE === "postgres" && process.env.PG_HOST ? (H = new (await (import("pg"))).default.Client({
 		host: process.env.PG_HOST,
 		port: Number(process.env.PG_PORT ?? 5432),
 		user: process.env.PG_USER ?? "app",
 		password: process.env.PG_PASSWORD ?? "app",
 		database: process.env.PG_DATABASE ?? "app"
-	}), await V.connect(), z = ve({ client: V }), K.info("isr cache backend: postgres", { table: "voltro_isr_cache" })) : (z = o(), K.info("isr cache backend: memory (per-process)", { hint: "set SSR_CACHE=postgres for persistent storage" })), await ie(i, u, R, ee);
-	let { pages: H, dirs: U } = await C(L(i, "src", "pages")), W = Se(H);
-	l.mark("scan");
-	let G = L(D, "server", "ssrEntry.js"), _e = await X(G);
-	if (!_e && process.env.NODE_ENV === "production") throw K.fatal(`production \`voltro start\` requires a precompiled SSR bundle at ${G} but it is missing. Run \`voltro build\` before serving — production renders from the bundle and never compiles on demand.`), Error(`[voltro start] missing SSR bundle at ${G}`);
-	let q = _e ? await Te(G) : await Ee(i, E);
-	K.info(`ssr loader: ${q.kind}`, {
-		kind: q.kind,
-		...q.kind === "middleware" ? { hint: "no pre-built SSR bundle found; run `voltro build` to enable bundle mode" } : {}
-	}), l.mark("provider");
-	let be = q.getPageMeta?.(), J = /* @__PURE__ */ new Map(), Y = 0;
-	for (let e of H) {
+	}), await H.connect(), B = ve({ client: H }), q.info("isr cache backend: postgres", { table: "voltro_isr_cache" })) : (B = j(), q.info("isr cache backend: memory (per-process)", { hint: "set SSR_CACHE=postgres for persistent storage" })), await E(o, m, L, _);
+	let { pages: U, dirs: W } = await te(I(o, "src", "pages")), G = Se(U);
+	s.mark("scan");
+	let K = I(T, "server", "ssrEntry.js"), _e = await Z(K);
+	if (!_e && process.env.NODE_ENV === "production") throw q.fatal(`production \`voltro start\` requires a precompiled SSR bundle at ${K} but it is missing. Run \`voltro build\` before serving — production renders from the bundle and never compiles on demand.`), Error(`[voltro start] missing SSR bundle at ${K}`);
+	let J = _e ? await Te(K) : await Ee(o, C);
+	q.info(`ssr loader: ${J.kind}`, {
+		kind: J.kind,
+		...J.kind === "middleware" ? { hint: "no pre-built SSR bundle found; run `voltro build` to enable bundle mode" } : {}
+	}), s.mark("provider");
+	let be = J.getPageMeta?.(), Y = /* @__PURE__ */ new Map(), X = 0;
+	for (let e of U) {
 		let t = be?.[e.pattern];
 		if (t) {
-			J.set(e.pattern, t);
+			Y.set(e.pattern, t);
 			continue;
 		}
 		try {
-			let t = await q.getPage(e.pattern, e.file);
-			J.set(e.pattern, d(t, e.file)), Y++;
+			let t = await J.getPage(e.pattern, e.file);
+			Y.set(e.pattern, c(t, e.file)), X++;
 		} catch (t) {
-			K.warn("failed to load page metadata", { pattern: e.pattern }, t);
+			q.warn("failed to load page metadata", { pattern: e.pattern }, t);
 		}
 	}
-	K.info(`registered ${J.size} route(s)`, {
-		count: J.size,
-		fromManifest: J.size - Y,
-		fromModules: Y
-	}), l.mark("routes");
-	let Z = /* @__PURE__ */ new Set();
-	for (let e of W) J.get(e.pattern)?.renderMode === "spa" && re(U, e.dirChain).some((e) => e.hasLayout) && Z.add(e.pattern);
-	Z.size > 0 && K.info(`${Z.size} spa route(s) render an SSR layout shell`, { patterns: [...Z] });
-	let Q = /* @__PURE__ */ new Map();
-	for (let [e, t] of J) t.cacheInvalidatesOn.length > 0 && Q.set(e, t.cacheInvalidatesOn);
+	q.info(`registered ${Y.size} route(s)`, {
+		count: Y.size,
+		fromManifest: Y.size - X,
+		fromModules: X
+	}), s.mark("routes");
+	let Q = /* @__PURE__ */ new Set();
+	for (let e of G) Y.get(e.pattern)?.renderMode === "spa" && ie(W, e.dirChain).some((e) => e.hasLayout) && Q.add(e.pattern);
+	Q.size > 0 && q.info(`${Q.size} spa route(s) render an SSR layout shell`, { patterns: [...Q] });
+	let $ = /* @__PURE__ */ new Map();
+	for (let [e, t] of Y) t.cacheInvalidatesOn.length > 0 && $.set(e, t.cacheInvalidatesOn);
 	let De = /* @__PURE__ */ new Map();
-	for (let e of W) De.set(e.pattern, e.regex);
+	for (let e of G) De.set(e.pattern, e.regex);
 	let Oe = ge({
-		cache: z,
-		tableSubscriptionsByPattern: Q,
+		cache: B,
+		tableSubscriptionsByPattern: $,
 		regexByPattern: De
 	});
-	await Oe.start(), l.mark("cdc");
-	let ke = se(), Ae = H.map((e) => {
-		let t = J.get(e.pattern);
+	await Oe.start(), s.mark("cdc");
+	let ke = A(), Ae = U.map((e) => {
+		let t = Y.get(e.pattern);
 		return {
 			pattern: e.pattern,
 			file: e.file,
@@ -535,20 +536,20 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			hasMeta: t?.hasMeta ?? !1,
 			hasGetStaticPaths: t?.hasGetStaticPaths ?? !1
 		};
-	}), je = U.map((e) => ({
+	}), je = W.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), Me = V ? "postgres" : "memory", Ne = {
+	})), Me = H ? "postgres" : "memory", Ne = {
 		kind: "web",
 		meta: {
-			name: u.name ?? "(unnamed)",
+			name: m.name ?? "(unnamed)",
 			voltroVersion: ye,
-			port: x,
+			port: S,
 			mode: "start",
-			apis: Object.entries(u.apis ?? {}).map(([e, t]) => {
+			apis: Object.entries(m.apis ?? {}).map(([e, t]) => {
 				let n = {
 					name: e,
 					package: t.package
@@ -559,7 +560,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		routes: Ae,
 		dirs: je,
 		cache: () => {
-			let e = Date.now(), t = z.snapshot().map(([t, n]) => ({
+			let e = Date.now(), t = B.snapshot().map(([t, n]) => ({
 				key: t,
 				renderedAt: n.renderedAt,
 				expiresAt: n.expiresAt,
@@ -571,15 +572,15 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}));
 			return {
 				backend: Me,
-				size: z.size(),
+				size: B.size(),
 				entries: t
 			};
 		},
 		metrics: () => me()
-	}, Pe = async (e, t) => {
-		let n = e.split("?")[0] ?? "/";
-		if (u.name === "voltroDashboard" && n === "/api/dashboard/registry") try {
-			let e = await k();
+	}, Pe = async (t, n) => {
+		let r = t.split("?")[0] ?? "/";
+		if (m.name === "voltroDashboard" && r === "/api/dashboard/registry") try {
+			let e = await ne();
 			return {
 				status: 200,
 				headers: { "content-type": "application/json; charset=utf-8" },
@@ -592,7 +593,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				body: `registry read error: ${e.message}`
 			};
 		}
-		if (u.name === "voltroDashboard" && n === "/api/dashboard/config") {
+		if (m.name === "voltroDashboard" && r === "/api/dashboard/config") {
 			let e = process.env.VOLTRO_DASHBOARD_APPS, t = [];
 			if (e && e.trim().length > 0) {
 				let n;
@@ -621,38 +622,38 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				body: JSON.stringify({ apps: t })
 			};
 		}
-		if (n === "/_voltro/inspect/logs") {
-			let n = m(e, c(), t);
+		if (r === "/_voltro/inspect/logs") {
+			let e = ee(t, a(), n);
 			return {
-				status: n.status,
+				status: e.status,
 				headers: {
-					"content-type": n.contentType,
-					...T(t.origin)
+					"content-type": e.contentType,
+					...ue(n.origin)
 				},
-				body: n.body
+				body: e.body
 			};
 		}
-		if (n !== "/_voltro/inspect/stream") {
-			let n = ne(e, Ne, t);
-			if (n !== null) return {
-				status: n.status,
+		if (r !== "/_voltro/inspect/stream") {
+			let e = le(t, Ne, n);
+			if (e !== null) return {
+				status: e.status,
 				headers: {
-					"content-type": n.contentType,
-					...n.headers ?? {}
+					"content-type": e.contentType,
+					...e.headers ?? {}
 				},
-				body: n.body
+				body: e.body
 			};
 		}
-		let a = Ce(n, W), o = a ? J.get(a.route.pattern)?.renderMode : void 0, s = o === "ssr" || o === "isr" || (a ? Z.has(a.route.pattern) : !1), l = n === "/" ? L(D, "index.html") : L(D, n.replace(/^\//, ""), "index.html");
-		if (!s && await X(l)) return {
+		let i = Ce(r, G), s = i ? Y.get(i.route.pattern)?.renderMode : void 0, c = s === "ssr" || s === "isr" || (i ? Q.has(i.route.pattern) : !1), l = r === "/" ? I(T, "index.html") : I(T, r.replace(/^\//, ""), "index.html");
+		if (!c && await Z(l)) return {
 			status: 200,
 			headers: { "content-type": "text/html; charset=utf-8" },
-			body: await B.readFile(l)
+			body: await V.readFile(l)
 		};
-		if (/\.[a-z0-9]+$/i.test(n)) {
-			let e = L(D, n.replace(/^\//, ""));
-			if (await X(e)) {
-				let t = await B.readFile(e);
+		if (/\.[a-z0-9]+$/i.test(r)) {
+			let e = I(T, r.replace(/^\//, ""));
+			if (await Z(e)) {
+				let t = await V.readFile(e);
 				return {
 					status: 200,
 					headers: { "content-type": xe(e) },
@@ -660,64 +661,64 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				};
 			}
 		}
-		let d = Ce(n, W);
+		let d = Ce(r, G);
 		if (!d) return {
 			status: 404,
 			headers: { "content-type": "text/plain" },
 			body: "not found"
 		};
-		let f = J.get(d.route.pattern), p = t["x-tenant"] ?? "anonymous", g = (await q.getHelpers()).i18n?.resolve(t.cookie, t["accept-language"])?.locale, _ = r(n, {
+		let f = Y.get(d.route.pattern), p = n["x-tenant"] ?? "anonymous", h = (await J.getHelpers()).i18n?.resolve(n.cookie, n["accept-language"])?.locale, g = u(r, {
 			...f?.tenantAware ? { tenant: p } : {},
-			...g ? { locale: g } : {}
-		}), v = z.get(_), y = Date.now();
-		if (v && ce(v, y)) return b.emit("cache", {
+			...h ? { locale: h } : {}
+		}), _ = B.get(g), v = Date.now();
+		if (_ && e(_, v)) return y.emit("cache", {
 			kind: "HIT",
-			key: _,
-			ageMs: y - v.renderedAt
+			key: g,
+			ageMs: v - _.renderedAt
 		}), {
 			status: 200,
 			headers: {
 				"content-type": "text/html; charset=utf-8",
 				"x-voltro-rendered-by": "isr",
 				"x-voltro-cache": "HIT",
-				"x-voltro-cache-key": _,
-				"x-voltro-cache-age-ms": String(y - v.renderedAt)
+				"x-voltro-cache-key": g,
+				"x-voltro-cache-age-ms": String(v - _.renderedAt)
 			},
-			body: v.html
+			body: _.html
 		};
-		if (v && h(v, y)) return b.emit("cache", {
+		if (_ && b(_, v)) return y.emit("cache", {
 			kind: "STALE",
-			key: _,
-			ageMs: y - v.renderedAt
+			key: g,
+			ageMs: v - _.renderedAt
 		}), (async () => {
 			try {
-				let r = await we({
-					provider: q,
-					root: i,
+				let e = await we({
+					provider: J,
+					root: o,
 					route: d.route,
 					params: d.params,
-					pathname: n,
-					dirs: U,
-					shellTemplate: I,
-					requestHeaders: t,
-					apiOrigin: de,
-					apiName: fe,
-					requestUrl: e,
+					pathname: r,
+					dirs: W,
+					shellTemplate: F,
+					requestHeaders: n,
+					apiOrigin: R,
+					apiName: z,
+					requestUrl: t,
 					buffered: !0
 				});
-				if (r && "html" in r && r.renderMode === "isr" && r.revalidateMs !== null) {
-					let e = J.get(d.route.pattern)?.staleWhileRevalidateMs ?? 0, t = Date.now();
-					z.set(_, {
-						html: r.html,
-						renderedAt: t,
-						expiresAt: t + r.revalidateMs,
-						servableUntil: t + r.revalidateMs + e,
-						revalidateMs: r.revalidateMs,
-						staleWhileRevalidateMs: e
+				if (e && "html" in e && e.renderMode === "isr" && e.revalidateMs !== null) {
+					let t = Y.get(d.route.pattern)?.staleWhileRevalidateMs ?? 0, n = Date.now();
+					B.set(g, {
+						html: e.html,
+						renderedAt: n,
+						expiresAt: n + e.revalidateMs,
+						servableUntil: n + e.revalidateMs + t,
+						revalidateMs: e.revalidateMs,
+						staleWhileRevalidateMs: t
 					});
 				}
 			} catch (e) {
-				K.warn("background SWR refresh failed", { url: n }, e);
+				q.warn("background SWR refresh failed", { url: r }, e);
 			}
 		})(), {
 			status: 200,
@@ -725,43 +726,43 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				"content-type": "text/html; charset=utf-8",
 				"x-voltro-rendered-by": "isr",
 				"x-voltro-cache": "STALE",
-				"x-voltro-cache-key": _,
-				"x-voltro-cache-age-ms": String(y - v.renderedAt)
+				"x-voltro-cache-key": g,
+				"x-voltro-cache-age-ms": String(v - _.renderedAt)
 			},
-			body: v.html
+			body: _.html
 		};
 		try {
-			let r = await we({
-				provider: q,
-				root: i,
+			let e = await we({
+				provider: J,
+				root: o,
 				route: d.route,
 				params: d.params,
-				pathname: n,
-				dirs: U,
-				shellTemplate: I,
-				requestHeaders: t,
-				apiOrigin: de,
-				apiName: fe,
-				requestUrl: e
+				pathname: r,
+				dirs: W,
+				shellTemplate: F,
+				requestHeaders: n,
+				apiOrigin: R,
+				apiName: z,
+				requestUrl: t
 			});
-			if (!r) return {
+			if (!e) return {
 				status: 200,
 				headers: {
 					"content-type": "text/html; charset=utf-8",
 					"x-voltro-rendered-by": "spa-fallback"
 				},
-				body: I
+				body: F
 			};
-			if ("stream" in r) return {
+			if ("stream" in e) return {
 				status: 200,
-				headers: { "x-voltro-rendered-by": r.renderMode },
+				headers: { "x-voltro-rendered-by": e.renderMode },
 				body: "",
-				stream: r.stream
+				stream: e.stream
 			};
-			if ("control" in r) return r.control === "redirect" ? {
-				status: r.status,
+			if ("control" in e) return e.control === "redirect" ? {
+				status: e.status,
 				headers: {
-					location: r.location,
+					location: e.location,
 					"x-voltro-rendered-by": "loader-redirect"
 				},
 				body: ""
@@ -773,36 +774,36 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				},
 				body: "not found"
 			};
-			let a = {
+			let i = {
 				"content-type": "text/html; charset=utf-8",
-				"x-voltro-rendered-by": r.renderMode
+				"x-voltro-rendered-by": e.renderMode
 			};
-			if (r.renderMode === "isr" && r.revalidateMs !== null) {
-				let e = Date.now(), t = J.get(d.route.pattern)?.staleWhileRevalidateMs ?? 0;
-				z.set(_, {
-					html: r.html,
-					renderedAt: e,
-					expiresAt: e + r.revalidateMs,
-					servableUntil: e + r.revalidateMs + t,
-					revalidateMs: r.revalidateMs,
-					staleWhileRevalidateMs: t
-				}), a["x-voltro-cache"] = "MISS", a["x-voltro-cache-key"] = _, a["x-voltro-cache-revalidate-ms"] = String(r.revalidateMs), t > 0 && (a["x-voltro-cache-swr-ms"] = String(t)), b.emit("cache", {
+			if (e.renderMode === "isr" && e.revalidateMs !== null) {
+				let t = Date.now(), n = Y.get(d.route.pattern)?.staleWhileRevalidateMs ?? 0;
+				B.set(g, {
+					html: e.html,
+					renderedAt: t,
+					expiresAt: t + e.revalidateMs,
+					servableUntil: t + e.revalidateMs + n,
+					revalidateMs: e.revalidateMs,
+					staleWhileRevalidateMs: n
+				}), i["x-voltro-cache"] = "MISS", i["x-voltro-cache-key"] = g, i["x-voltro-cache-revalidate-ms"] = String(e.revalidateMs), n > 0 && (i["x-voltro-cache-swr-ms"] = String(n)), y.emit("cache", {
 					kind: "MISS",
-					key: _,
-					revalidateMs: r.revalidateMs,
-					swrMs: t
+					key: g,
+					revalidateMs: e.revalidateMs,
+					swrMs: n
 				});
-			} else r.renderMode === "isr" && (a["x-voltro-cache"] = "BYPASS", b.emit("cache", {
+			} else e.renderMode === "isr" && (i["x-voltro-cache"] = "BYPASS", y.emit("cache", {
 				kind: "BYPASS",
-				key: _
+				key: g
 			}));
 			return {
 				status: 200,
-				headers: a,
-				body: r.html
+				headers: i,
+				body: e.html
 			};
 		} catch (e) {
-			return K.error("render error", { url: n }, e), w(e) ? {
+			return q.error("render error", { url: r }, e), x(e) ? {
 				status: 500,
 				headers: {
 					"content-type": "text/plain; charset=utf-8",
@@ -816,17 +817,17 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			};
 		}
 	}, Fe = !1, Ie = he(async (e, t) => {
-		let n = e.url ?? "/", r = Date.now(), i = {};
-		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (i[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
-		let a = n.split("?")[0] ?? "/", o = (e.method ?? "GET").toUpperCase();
-		if (a === "/internal/liveness") {
+		let n = e.url ?? "/", r = Date.now(), a = {};
+		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (a[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
+		let o = n.split("?")[0] ?? "/", s = (e.method ?? "GET").toUpperCase();
+		if (o === "/internal/liveness") {
 			t.writeHead(200, {
 				"content-type": "text/plain",
 				"cache-control": "no-store"
 			}), t.end("ok");
 			return;
 		}
-		if (a === "/internal/readiness") {
+		if (o === "/internal/readiness") {
 			let e = Fe ? 200 : 503;
 			t.writeHead(e, {
 				"content-type": "text/plain",
@@ -834,36 +835,37 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}), t.end(Fe ? "ready" : "not-ready");
 			return;
 		}
-		if (o === "OPTIONS" && a.startsWith("/_voltro/inspect")) {
-			let e = T(i.origin);
+		if (s === "OPTIONS" && o.startsWith("/_voltro/inspect")) {
+			let e = ue(a.origin);
 			t.writeHead(204, e), t.end();
 			return;
 		}
-		if (u.name === "voltroDashboard" && a === "/api/dashboard/proxy") {
+		if (m.name === "voltroDashboard" && o === "/api/dashboard/proxy") {
 			let r = new URL(n, "http://x").searchParams.get("target");
 			if (!r) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
 				return;
 			}
-			if (!N(r)) {
-				t.writeHead(400, { "content-type": "text/plain" }), t.end("target must be a loopback address");
+			if (!ce(r)) {
+				t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
 				return;
 			}
 			try {
-				let n = { accept: i.accept ?? "application/json" }, a = i.authorization;
-				a && (n.authorization = Array.isArray(a) ? a[0] : a);
-				let s;
-				if (o && o !== "GET" && o !== "HEAD") {
+				let n = { accept: a.accept ?? "application/json" }, i = a.authorization;
+				i ? n.authorization = Array.isArray(i) ? i[0] : i : oe(r) && process.env.VOLTRO_INSPECT_TOKEN && (n.authorization = `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}`);
+				let o;
+				if (s && s !== "GET" && s !== "HEAD") {
 					let t = [];
 					for await (let n of e) t.push(n);
-					s = Buffer.concat(t);
-					let r = i["content-type"];
+					o = Buffer.concat(t);
+					let r = a["content-type"];
 					r && (n["content-type"] = Array.isArray(r) ? r[0] : r);
 				}
 				let c = await fetch(r, {
-					method: o,
+					redirect: "manual",
+					method: s,
 					headers: n,
-					...s ? { body: new Uint8Array(s.buffer, s.byteOffset, s.byteLength) } : {}
+					...o ? { body: new Uint8Array(o.buffer, o.byteOffset, o.byteLength) } : {}
 				}), l = Buffer.from(await c.arrayBuffer());
 				t.writeHead(c.status, {
 					"content-type": c.headers.get("content-type") ?? "application/octet-stream",
@@ -874,26 +876,27 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}
 			return;
 		}
-		if (u.name === "voltroDashboard" && a === "/api/dashboard/proxy/stream") {
+		if (m.name === "voltroDashboard" && o === "/api/dashboard/proxy/stream") {
 			let r = new URL(n, "http://x").searchParams.get("target");
 			if (!r) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
 				return;
 			}
-			if (!N(r)) {
-				t.writeHead(400, { "content-type": "text/plain" }), t.end("target must be a loopback address");
+			if (!ce(r)) {
+				t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
 				return;
 			}
-			let a = new AbortController();
-			e.on("close", () => a.abort()), t.on("close", () => a.abort());
+			let i = new AbortController();
+			e.on("close", () => i.abort()), t.on("close", () => i.abort());
 			try {
-				let e = i.authorization, n = await fetch(r, {
+				let e = a.authorization ?? (oe(r) && process.env.VOLTRO_INSPECT_TOKEN ? `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}` : void 0), n = await fetch(r, {
+					redirect: "manual",
 					method: "GET",
 					headers: {
 						accept: "text/event-stream",
 						...e ? { authorization: Array.isArray(e) ? e[0] : e } : {}
 					},
-					signal: a.signal
+					signal: i.signal
 				});
 				if (!n.ok || !n.body) {
 					t.writeHead(n.status, { "content-type": "text/plain" }), t.end(`upstream ${n.status}`);
@@ -920,16 +923,16 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}
 			return;
 		}
-		if (a === "/_voltro/inspect/stream") {
-			let n = T(i.origin);
-			if (te()) {
+		if (o === "/_voltro/inspect/stream") {
+			let n = ue(a.origin);
+			if (se()) {
 				t.writeHead(503, {
 					"content-type": "application/json",
 					...n
 				}), t.end(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }));
 				return;
 			}
-			let r = y(i);
+			let r = P(a);
 			if (!r.ok) {
 				t.writeHead(401, {
 					"content-type": "application/json",
@@ -947,29 +950,29 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				"x-accel-buffering": "no",
 				...n
 			}), t.flushHeaders(), t.write("retry: 5000\n\n");
-			for (let e of b.buffered()) t.write(g(e));
-			let a = b.subscribe((e) => {
-				t.write(g(e));
-			}), o = setInterval(() => {
-				t.write(s());
+			for (let e of y.buffered()) t.write(d(e));
+			let o = y.subscribe((e) => {
+				t.write(d(e));
+			}), s = setInterval(() => {
+				t.write(i());
 			}, 15e3), c = () => {
-				clearInterval(o), a();
+				clearInterval(s), o();
 			};
 			e.on("close", c), t.on("close", c);
 			return;
 		}
 		try {
-			let e = await Pe(n, i);
-			if (e.stream ? e.stream(t) : (t.writeHead(e.status, e.headers), t.end(e.body)), !a.startsWith("/_voltro/inspect")) {
+			let e = await Pe(n, a);
+			if (e.stream ? e.stream(t) : (t.writeHead(e.status, e.headers), t.end(e.body)), !o.startsWith("/_voltro/inspect")) {
 				let t = Date.now() - r;
-				b.emit("request", {
-					url: a,
+				y.emit("request", {
+					url: o,
 					status: e.status,
 					durationMs: t,
 					renderedBy: e.headers["x-voltro-rendered-by"],
 					cache: e.headers["x-voltro-cache"]
 				});
-				let n = Ce(a, W)?.route.pattern ?? (e.status === 404 ? "<unmatched>" : "<asset>");
+				let n = Ce(o, G)?.route.pattern ?? (e.status === 404 ? "<unmatched>" : "<asset>");
 				ke.record({
 					kind: "request",
 					tag: n,
@@ -981,71 +984,71 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			t.writeHead(500, { "content-type": "text/plain" }), t.end(`internal error: ${e.message}`);
 		}
 	});
-	await new Promise((e) => Ie.listen(x, "::", e)), Fe = !0, l.mark("ready"), K.info(`listening on http://localhost:${x}`, {
-		port: x,
-		distDir: D
-	}), K.debug("dynamic + ssr/isr routes resolve via SSR loader");
+	await new Promise((e) => Ie.listen(S, "::", e)), Fe = !0, s.mark("ready"), q.info(`listening on http://localhost:${S}`, {
+		port: S,
+		distDir: T
+	}), q.debug("dynamic + ssr/isr routes resolve via SSR loader");
 	try {
-		await O({
+		await w({
 			id: M,
-			name: j,
+			name: D,
 			kind: "web",
-			url: `http://localhost:${x}`,
+			url: `http://localhost:${S}`,
 			pid: process.pid,
 			status: "live",
-			logFile: F.path
+			logFile: N.path
 		});
-		let e = P(i);
+		let e = ae(o);
 		if (e) {
 			let t = await n({ dashboardAppPath: e });
-			t.status === "launched" ? K.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && K.debug(`dashboard already running on :${t.port}`, { port: t.port });
+			t.status === "launched" ? q.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && q.debug(`dashboard already running on :${t.port}`, { port: t.port });
 		}
 		setInterval(() => {
-			O({
+			w({
 				id: M,
-				name: j,
+				name: D,
 				kind: "web",
-				url: `http://localhost:${x}`,
+				url: `http://localhost:${S}`,
 				pid: process.pid,
 				status: "live",
-				logFile: F.path
+				logFile: N.path
 			}).catch(() => {});
 		}, 1e4).unref();
 	} catch (e) {
-		K.warn("runtime-registry write failed", {}, e);
+		q.warn("runtime-registry write failed", {}, e);
 	}
 	pe({
-		app: u.name ?? "unnamed",
+		app: m.name ?? "unnamed",
 		kind: "web",
-		url: `http://localhost:${x}`,
-		bootMs: l.total()
+		url: `http://localhost:${S}`,
+		bootMs: s.total()
 	});
-	let Le = l.phaseBreakdown();
-	K.info(`start: ready in ${l.total()}ms`, {
-		bootMs: l.total(),
+	let Le = s.phaseBreakdown();
+	q.info(`start: ready in ${s.total()}ms`, {
+		bootMs: s.total(),
 		...Le ? { phases: Le } : {}
 	});
-	let Re = !1, $ = (t) => async () => {
+	let Re = !1, ze = (e) => async () => {
 		if (!Re) {
-			if (Re = !0, K.info(`received ${t}, shutting down`, { signal: t }), Ie.close(), await Oe.stop(), V) try {
-				await V.end();
+			if (Re = !0, q.info(`received ${e}, shutting down`, { signal: e }), Ie.close(), await Oe.stop(), H) try {
+				await H.end();
 			} catch {}
-			await q.close(), await e(M), await F.dispose(), process.exit(0);
+			await J.close(), await t(M), await N.dispose(), process.exit(0);
 		}
 	};
-	process.on("SIGINT", $("SIGINT")), process.on("SIGTERM", $("SIGTERM"));
-	let ze = process.ppid;
-	if (ze > 1) {
+	process.on("SIGINT", ze("SIGINT")), process.on("SIGTERM", ze("SIGTERM"));
+	let Be = process.ppid;
+	if (Be > 1) {
 		let e = setInterval(() => {
-			(process.ppid !== ze || process.ppid === 1) && (clearInterval(e), $("SIGTERM")());
+			(process.ppid !== Be || process.ppid === 1) && (clearInterval(e), ze("SIGTERM")());
 		}, 2e3);
 		e.unref();
 	}
 	return new Promise(() => {});
 }, Oe = async (e) => {
 	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
-	let t = await De(R(e.find((e) => !e.startsWith("-")) ?? process.cwd()));
-	return t.ran ? t.exitCode : (K.error("no web app found at this path"), 1);
+	let t = await De(L(e.find((e) => !e.startsWith("-")) ?? process.cwd()));
+	return t.ran ? t.exitCode : (q.error("no web app found at this path"), 1);
 };
 //#endregion
 export { Oe as t };