@voltro/cli 0.30.2 → 0.32.0

package/dist/startEntry.js

@@ -1,3 +1,3 @@
-import { tt as e } from "./inspectMetrics-BM1vrsga.js";
-import { t } from "./start-CTnNvKlk.js";
+import { ct as e } from "./inspectMetrics-BqO4E9G0.js";
+import { t } from "./start-D1-8eKrO.js";
 export { e as loadDotEnv, t as runStartCommand };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/cli",
-  "version": "0.30.2",
+  "version": "0.32.0",
   "description": "The `voltro` CLI — dev server, codegen, migrations, project scaffolding, agent-docs seeding, and production serve.",
   "keywords": [
     "voltro",
@@ -55,6 +55,406 @@
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "voltro": {
+    "codemods": [
+      {
+        "version": "0.10.0",
+        "id": "0.10.0/01_render-mode-client-to-spa",
+        "title": "renderMode is a closed set — `'client'` becomes `'spa'`",
+        "kind": "transform"
+      },
+      {
+        "version": "0.10.0",
+        "id": "0.10.0/02_router-state-carries-its-path",
+        "title": "`renderRouterStateScript` now requires the `path` it rendered",
+        "kind": "manual"
+      },
+      {
+        "version": "0.10.0",
+        "id": "0.10.0/03_workflow-caller-context-resolved",
+        "title": "workflow `buildContext` receives a RESOLVED caller context",
+        "kind": "manual"
+      },
+      {
+        "version": "0.10.0",
+        "id": "0.10.0/04_seed-run-status-skipped",
+        "title": "seed run status gained `skipped`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.10.0",
+        "id": "0.10.0/05_subscription-idle-state",
+        "title": "`useSubscription` gained an idle state for `skip`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.11.0",
+        "id": "0.11.0/01_step-options-type-params",
+        "title": "`StepOptions` takes the context type first",
+        "kind": "manual"
+      },
+      {
+        "version": "0.12.0",
+        "id": "0.12.0/01_outbound-http-ssrf-guard",
+        "title": "Outbound HttpClient blocks internal targets by default (add `http.allowHosts` if you call one)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.12.0",
+        "id": "0.12.0/02_api-key-revoke-tenant-scope",
+        "title": "apiKeyService.revoke/rotate now require the caller's tenantId",
+        "kind": "manual"
+      },
+      {
+        "version": "0.12.0",
+        "id": "0.12.0/03_api-key-on-behalf-of",
+        "title": "API keys: createdBy is provenance, onBehalfOf is ownership",
+        "kind": "manual"
+      },
+      {
+        "version": "0.12.0",
+        "id": "0.12.0/04_inspect-fail-closed",
+        "title": "The inspect surface requires VOLTRO_INSPECT_TOKEN (previously open when unset)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.13.0",
+        "id": "0.13.0/01_bearer-gates-fail-closed",
+        "title": "checkBearer is fail-closed; scimPlugin refuses an empty token",
+        "kind": "manual"
+      },
+      {
+        "version": "0.13.0",
+        "id": "0.13.0/02_storage-grants-owner-only",
+        "title": "storage.share / revoke / listGrants require ownership",
+        "kind": "manual"
+      },
+      {
+        "version": "0.13.0",
+        "id": "0.13.0/03_apply-plan-convergence-proof",
+        "title": "applyPlan requires a `replan` convergence proof",
+        "kind": "manual"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/01_resolve-scopes-store",
+        "title": "auth.resolveScopes receives the app DataStore",
+        "kind": "manual"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/02_reactive-by-default",
+        "title": "Reactivity is the default; .reactive() is removed",
+        "kind": "transform"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/03_pages-suffix",
+        "title": "Pages are declared with a .page.tsx suffix",
+        "kind": "transform"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/04_file-taxonomy",
+        "title": "Web files declare their contract (*.component.tsx / *.hook.ts / *.types.ts)",
+        "kind": "transform"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/05_typed-tracking",
+        "title": "Tracking catalogues are typed against the component props",
+        "kind": "manual"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/06_voltro-test-skips-e2e",
+        "title": "`voltro test` leaves `e2e/` to `voltro e2e`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.14.0",
+        "id": "0.14.0/07_dev-remote-file-migrations",
+        "title": "voltro dev refuses unattended file migrations against a remote database",
+        "kind": "manual"
+      },
+      {
+        "version": "0.15.0",
+        "id": "0.15.0/01_undo-mistaken-taxonomy-renames",
+        "title": "Undo the two file renames 0.14.0 got wrong (framework primitives, side-effect modules)",
+        "kind": "transform"
+      },
+      {
+        "version": "0.15.0",
+        "id": "0.15.0/02_error-tag-in-protocol",
+        "title": "`errorTag` is imported from @voltro/protocol",
+        "kind": "transform"
+      },
+      {
+        "version": "0.17.0",
+        "id": "0.17.0/01_pages-are-directories",
+        "title": "A directory is a route segment; its route is page.tsx",
+        "kind": "transform"
+      },
+      {
+        "version": "0.18.0",
+        "id": "0.18.0/01_where-like-removed",
+        "title": "the `'like'` where-operator is removed — pick `contains` or `startsWith`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.19.0",
+        "id": "0.19.0/01_server-only-gates-the-boot",
+        "title": "`.serverOnly()` now FAILS the boot under `voltro serve` — it used to only warn",
+        "kind": "manual"
+      },
+      {
+        "version": "0.19.0",
+        "id": "0.19.0/02_audit-redact-input-default",
+        "title": "`auditPlugin` now redacts mutation input by default (`redactInput: 'all'`)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.20.0",
+        "id": "0.20.0/01_write-recorder-port",
+        "title": "`WriteRecorder` takes a port (`{ append, maxOf }`) instead of a bare `append`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.21.0",
+        "id": "0.21.0/01_maxlength-now-migrates",
+        "title": "`text().maxLength(n)` now migrates EXISTING columns — plan before you apply",
+        "kind": "manual"
+      },
+      {
+        "version": "0.22.0",
+        "id": "0.22.0/01_rename-index-op",
+        "title": "`MigrationOperation` gained a `rename-index` kind",
+        "kind": "manual"
+      },
+      {
+        "version": "0.22.0",
+        "id": "0.22.0/02_plugin-tables-voltro-prefixed",
+        "title": "plugin-owned tables are `_voltro_`-prefixed (the rows move themselves)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.22.0",
+        "id": "0.22.0/03_cache-scope-gained-tenant",
+        "title": "`cache.scope` gained 'tenant' — an exhaustive switch over it needs a branch",
+        "kind": "manual"
+      },
+      {
+        "version": "0.22.0",
+        "id": "0.22.0/04_inspect-write-credential",
+        "title": "Mutating `/_voltro/inspect/*` endpoints need VOLTRO_INSPECT_WRITE_TOKEN",
+        "kind": "manual"
+      },
+      {
+        "version": "0.23.0",
+        "id": "0.23.0/01_versioning-is-opt-out",
+        "title": "versioningPlugin: `tables: string[]` → opt-out by default, `include` / `exclude` by value",
+        "kind": "manual"
+      },
+      {
+        "version": "0.24.0",
+        "id": "0.24.0/01_agent-tables-voltro-prefixed",
+        "title": "the two agent tables are `_voltro_`-prefixed (the rows move themselves)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.25.0",
+        "id": "0.25.0/01_events-emit-to-publish",
+        "title": "`ctx.events.emit(name, data)` → `ctx.events.publish(descriptor, key, payload)`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.25.0",
+        "id": "0.25.0/02_outgoing-event-to-define-event",
+        "title": "`defineOutgoingEvent` → `defineEvent({ …, webhook: { … } })`",
+        "kind": "transform"
+      },
+      {
+        "version": "0.25.0",
+        "id": "0.25.0/03_broadcast-channel-to-namespace",
+        "title": "`broadcast({ channel })` → `broadcast({ namespace })`",
+        "kind": "transform"
+      },
+      {
+        "version": "0.26.0",
+        "id": "0.26.0/01_event-webhook-retry-removed",
+        "title": "`defineEvent({ webhook: { retry } })` is gone — it never did anything",
+        "kind": "manual"
+      },
+      {
+        "version": "0.26.0",
+        "id": "0.26.0/02_step-retry-enforced",
+        "title": "workflow step `retry:` is now ENFORCED (was metadata) — drop any redundant manual retry",
+        "kind": "manual"
+      },
+      {
+        "version": "0.28.0",
+        "id": "0.28.0/01_notifications-resolve-subject-id-async",
+        "title": "`makeSubjectId` returns a Promise; `resolveSubjectId` may be async",
+        "kind": "manual"
+      },
+      {
+        "version": "0.28.0",
+        "id": "0.28.0/02_plugin-ref-change-event",
+        "title": "`PluginRefChange` is removed — the change channel's `ChangeEvent` is the one shape",
+        "kind": "manual"
+      },
+      {
+        "version": "0.28.0",
+        "id": "0.28.0/03_atlassian-credentials-context",
+        "title": "`credentialsResolver` receives `{ subject, store }` instead of a bare Subject",
+        "kind": "manual"
+      },
+      {
+        "version": "0.28.0",
+        "id": "0.28.0/04_audit-redacts-subject-metadata",
+        "title": "`auditPlugin` redacts `subject.metadata` by default",
+        "kind": "manual"
+      },
+      {
+        "version": "0.29.0",
+        "id": "0.29.0/01_loader-data-absence",
+        "title": "`useLoaderData()` throws at a level that declares no `loader`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.3.0",
+        "id": "0.3.0/01_prod-serve-requires-build",
+        "title": "Production `voltro serve` requires a precompiled bundle (build before serve)",
+        "kind": "manual"
+      },
+      {
+        "version": "0.30.0",
+        "id": "0.30.0/01_locale-cookie-rename",
+        "title": "the language-preference cookie is `voltro:locale` (was `voltro:lang`)",
+        "kind": "transform"
+      },
+      {
+        "version": "0.30.0",
+        "id": "0.30.0/02_audit-purge-query-recheck",
+        "title": "re-run the credential-purge query — the 0.28.0 spelling under-reported on MySQL/MariaDB",
+        "kind": "manual"
+      },
+      {
+        "version": "0.30.0",
+        "id": "0.30.0/03_webhook-emit-durable-deferral",
+        "title": "a deferred `webhooks.emit` rides the transactional outbox; `{ immediate: true }` opts out",
+        "kind": "manual"
+      },
+      {
+        "version": "0.30.0",
+        "id": "0.30.0/04_workflow-run-handle-nullable-execution",
+        "title": "`WorkflowRunHandle.executionId` is `string | null`; `status` gains queued/dropped/skipped",
+        "kind": "manual"
+      },
+      {
+        "version": "0.31.0",
+        "id": "0.31.0/01_rerun-credential-scan",
+        "title": "re-run `voltro db scan-credentials` — on 0.30.0–0.30.2 it skipped the column credentials land in",
+        "kind": "manual"
+      },
+      {
+        "version": "0.32.0",
+        "id": "0.32.0/01_audit-redacts-outcome",
+        "title": "`auditPlugin` now redacts `outcome` by default — opt out if your trail reads it",
+        "kind": "manual"
+      },
+      {
+        "version": "0.4.0",
+        "id": "0.4.0/01_rbac-forbidden-to-scopeerror",
+        "title": "@voltro/plugin-rbac: `Forbidden` → protocol `ScopeError` (one denial tag)",
+        "kind": "transform"
+      },
+      {
+        "version": "0.4.0",
+        "id": "0.4.0/02_rbac-web-to-client-permissions",
+        "title": "@voltro/plugin-rbac/web removed — the UI gate lives in @voltro/client",
+        "kind": "transform"
+      },
+      {
+        "version": "0.5.0",
+        "id": "0.5.0/01_one-terminal-exactly-one",
+        "title": ".one() now fails on MORE than one row; NoRowFound is a declarable typed error",
+        "kind": "manual"
+      },
+      {
+        "version": "0.5.0",
+        "id": "0.5.0/02_typed-store-rows",
+        "title": "store.query() now returns the row type — casts on row fields may stop compiling",
+        "kind": "manual"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/01_no-dev-session-secret",
+        "title": "The built-in dev session secret is removed; VOLTRO_SESSION_SECRET is required",
+        "kind": "manual"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/02_subscription-state-union",
+        "title": "SubscriptionState is a discriminated union — `loading` now narrows `data`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/03_billing-on-stripe-sdk",
+        "title": "Billing moved onto the Stripe SDK; proration + dunning are now Stripe’s",
+        "kind": "manual"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/04_relation-key-validation",
+        "title": "relation key options are validated at boot; `one` now fails on more than one match",
+        "kind": "manual"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/05_atlassian-avatar-mode",
+        "title": "atlassianPlugin's `avatar` config requires an explicit `mode: 'service' | 'perUser'`",
+        "kind": "transform"
+      },
+      {
+        "version": "0.6.0",
+        "id": "0.6.0/06_ui-strings-connect-account",
+        "title": "UiStrings gained a required `connectAccount` section",
+        "kind": "manual"
+      },
+      {
+        "version": "0.7.0",
+        "id": "0.7.0/01_row-filter-load-failure",
+        "title": "A row filter that fails to load now errors instead of returning zero rows",
+        "kind": "manual"
+      },
+      {
+        "version": "0.7.0",
+        "id": "0.7.0/02_testing-invoke-effect-handlers",
+        "title": "@voltro/testing: invoke() runs Effect handlers; executor types widened",
+        "kind": "manual"
+      },
+      {
+        "version": "0.8.0",
+        "id": "0.8.0/01_optional-password-hash",
+        "title": "`UserRecord.passwordHash` is optional — password-less identities are now first-class",
+        "kind": "manual"
+      },
+      {
+        "version": "0.8.0",
+        "id": "0.8.0/02_ssr-streams-and-loaderdata",
+        "title": "`ssr` pages stream; `useLoaderData<T>()` returns `LoaderData<T>`",
+        "kind": "manual"
+      },
+      {
+        "version": "0.9.0",
+        "id": "0.9.0/01_ssr-layout-shell-for-spa",
+        "title": "A `renderMode:'spa'` page under a layout now server-renders that layout",
+        "kind": "manual"
+      }
+    ]
+  },
   "engines": {
     "node": ">=24.0.0"
   },
@@ -62,22 +462,22 @@
     "@effect/platform-node": "^0.108.0",
     "@effect/sql": "^0.52.0",
     "@effect/workflow": "^0.19.0",
-    "@voltro/ai": "0.30.2",
-    "@voltro/cache": "0.30.2",
-    "@voltro/data-transfer": "0.30.2",
-    "@voltro/database": "0.30.2",
-    "@voltro/env": "0.30.2",
-    "@voltro/kv": "0.30.2",
-    "@voltro/logger": "0.30.2",
-    "@voltro/plugin-auth": "0.30.2",
-    "@voltro/plugin-broadcast": "0.30.2",
-    "@voltro/plugin-mail": "0.30.2",
-    "@voltro/plugin-storage": "0.30.2",
-    "@voltro/plugin-webhooks": "0.30.2",
-    "@voltro/protocol": "0.30.2",
-    "@voltro/runtime": "0.30.2",
-    "@voltro/serverless": "0.30.2",
-    "@voltro/workflow": "0.30.2",
+    "@voltro/ai": "0.32.0",
+    "@voltro/cache": "0.32.0",
+    "@voltro/data-transfer": "0.32.0",
+    "@voltro/database": "0.32.0",
+    "@voltro/env": "0.32.0",
+    "@voltro/kv": "0.32.0",
+    "@voltro/logger": "0.32.0",
+    "@voltro/plugin-auth": "0.32.0",
+    "@voltro/plugin-broadcast": "0.32.0",
+    "@voltro/plugin-mail": "0.32.0",
+    "@voltro/plugin-storage": "0.32.0",
+    "@voltro/plugin-webhooks": "0.32.0",
+    "@voltro/protocol": "0.32.0",
+    "@voltro/runtime": "0.32.0",
+    "@voltro/serverless": "0.32.0",
+    "@voltro/workflow": "0.32.0",
     "chokidar": "^5.0.0",
     "ioredis": "^5.11.1",
     "tinyglobby": "^0.2.17",

package/templates/AGENTS.md

@@ -652,7 +652,7 @@ each plugin's own README.
 
 | Topic | Open | Summary |
 |---|---|---|
-| **What's new in 0.30.2** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
+| **What's new in 0.32.0** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
 | AI | `node_modules/@voltro/cli/templates/agent-docs/ai.md` | How Voltro treats AI — agents, tools, streaming, RAG — all primitives over the same WebSocket as the rest of the framework. |
 | Authentication | `node_modules/@voltro/cli/templates/agent-docs/authentication.md` | How @voltro/plugin-auth wires password + session-cookie auth across api + web, plus the pluggable identity-strategy protocol. |
 | Caching | `node_modules/@voltro/cli/templates/agent-docs/caching.md` | Voltro's caching layer (@voltro/cache) — an always-on memory default, swappable Redis-compatible backends, a low-level wrap primitive, and automatic query-result invalidation. |
@@ -695,48 +695,48 @@ each plugin's own README.
 
 | Plugin | Open | Summary |
 |---|---|---|
-| ai-flows | `node_modules/@voltro/plugin-ai-flows/README.md` | Durable multi-step AI pipelines — deterministic or agentic, with human-in-the-loop, chaining, and cadence. Author flows in code (defineFlow) or as data (visual-editor rows); one engine runs both. |
-| analytics-postgres | `node_modules/@voltro/plugin-analytics-postgres/README.md` | First-party lite AnalyticsSink — stores events in the main DataStore, cross-dialect, zero external infra. ~10M events/day ceiling. |
-| atlassian | `node_modules/@voltro/plugin-atlassian/README.md` | JiraService + ConfluenceService over the Atlassian REST / Greenhopper / Agile APIs, with a per-subject PAT resolver, transient retry, SSRF guard, an avatar proxy, and per-tenant caching. |
-| audit | `node_modules/@voltro/plugin-audit/README.md` | Mutation audit log — sinks (console/memory/custom), include/exclude filters, the audit() mixin, testing with the memory buffer. |
-| auth | `node_modules/@voltro/plugin-auth/README.md` | Password + session-cookie auth — overview. Full docs in the Authentication section. |
-| auth-auth0 | `node_modules/@voltro/plugin-auth-auth0/README.md` | Auth0 AuthStrategy — verifies Auth0-issued JWTs via the tenant's JWKS (no client secret) and maps a namespaced custom claim → tenantId. |
-| auth-clerk | `node_modules/@voltro/plugin-auth-clerk/README.md` | Clerk AuthStrategy — verifies Clerk-issued __session JWTs via the Frontend API JWKS (no secret key) and maps org_id → tenantId. |
-| auth-kinde | `node_modules/@voltro/plugin-auth-kinde/README.md` | Kinde AuthStrategy — verifies Kinde-issued JWTs via JWKS at the configured issuer (no client secret) and maps org_code → tenantId. |
-| auth-oidc | `node_modules/@voltro/plugin-auth-oidc/README.md` | Generic OIDC AuthStrategy — verifies any OpenID-Connect IdP's JWTs via JWKS (Okta, Keycloak, Cognito, Azure AD, Google Workspace). Discovery or explicit JWKS URL; maps a claim → tenantId. |
-| auth-supabase | `node_modules/@voltro/plugin-auth-supabase/README.md` | Supabase Auth (GoTrue) AuthStrategy — verifies Supabase-issued JWTs via the project's JWKS and maps app_metadata.tenant_id → tenantId. |
-| auth-workos | `node_modules/@voltro/plugin-auth-workos/README.md` | WorkOS AuthStrategy — verifies WorkOS AuthKit / SSO JWTs via JWKS (no API key) and maps org_id → tenantId. |
-| billing | `node_modules/@voltro/plugin-billing/README.md` | Subscriptions, plans, entitlements, and usage metering over a pluggable provider (Stripe + mock). Money is integer minor units. |
-| broadcast | `node_modules/@voltro/plugin-broadcast/README.md` | Cross-replica reactivity over a pub/sub bus (Redis / NATS) for non-postgres dialects — closes the single-instance gap so a write on one pod surfaces on another. |
-| cdc-out | `node_modules/@voltro/plugin-cdc-out/README.md` | Declaratively mirror table changes outward to external sinks (webhook / Kafka / Snowflake / BigQuery) through a durable outbox — ordered per pipe, at-least-once from enqueue, retried with backoff, dead-lettered. |
-| clickhouse | `node_modules/@voltro/plugin-clickhouse/README.md` | Production-grade OLAP AnalyticsSink over ClickHouse — self-hosted or ClickHouse Cloud — for billions of events with millisecond aggregates. |
-| datadog | `node_modules/@voltro/plugin-datadog/README.md` | Agentless Datadog metrics exporter — pushes the unified Metrics-API to Datadog's /api/v2/series HTTP intake. |
-| deactivation | `node_modules/@voltro/plugin-deactivation/README.md` | A schema mixin that marks a subject as deactivated (can't log in) while keeping its data fully visible — the deliberate opposite of soft-delete. |
-| duckdb | `node_modules/@voltro/plugin-duckdb/README.md` | Embedded DuckDB AnalyticsSink — real column-store OLAP in-process, no external service to run. |
-| flags | `node_modules/@voltro/plugin-flags/README.md` | Feature flags — per-subject / per-tenant targeting, deterministic % rollouts, kill-switch, declarative rpc gating + client UI gating. |
-| governance | `node_modules/@voltro/plugin-governance/README.md` | Data governance — retention TTL sweep, GDPR export + erasure, consent ledger, and field-level encryption for .encrypted() columns. Builds on audit + soft-delete. |
-| licensing | `node_modules/@voltro/plugin-licensing/README.md` | Offline-verified EdDSA license keys + cloud-issued entitlement snapshots that feed plugin-billing; pricing decided server-side, never baked into a published version. |
-| logship | `node_modules/@voltro/plugin-logship/README.md` | Ship structured logs to Better Stack / Axiom / Loki / any HTTP sink — batched, redacted, fail-soft. Rides the framework log-sink hook. |
-| mail | `node_modules/@voltro/plugin-mail/README.md` | Transactional email — Resend / Postmark / SendGrid / SMTP, React-Email templates with auto-discovery, per-tenant suppression, bounce/complaint handling, durable delivery via workflows. |
-| moderation | `node_modules/@voltro/plugin-moderation/README.md` | Moderate user content before it commits — keyword denylist or AI provider, block or flag via rpc interceptor, plus an in-handler redact helper. |
-| multitenancy | `node_modules/@voltro/plugin-multitenancy/README.md` | The tenant() schema mixin (auto-scope reads + auto-fill writes), the assertOwnTenant write-guard, and the typed TenantMismatch error. |
-| notifications | `node_modules/@voltro/plugin-notifications/README.md` | Unified notifications — one send API across email / Slack / SMS / push / in-app, with per-user channel preferences, an in-app inbox, and delivery records. |
-| openapi | `node_modules/@voltro/plugin-openapi/README.md` | Generate an OpenAPI 3.1 spec + Swagger-UI docs from your defineRestRoute descriptors and (opt-in) your rpc procedures. Your routes ARE the API docs — nothing hand-maintained. |
-| postgis | `node_modules/@voltro/plugin-postgis/README.md` | Postgres-native geography / geometry columns, geometry constructors (point/line/polygon/multi/GeoJSON), spatial predicates (ST_DWithin, ST_Within, ST_Contains, ST_Intersects, ST_Buffer, bbox &&), ST_Distance projection + <-> KNN ordering, and GiST indexes via expressionIndex. Postgres-only by design. |
-| posthog | `node_modules/@voltro/plugin-posthog/README.md` | Track-only AnalyticsSink that forwards events to PostHog's /capture endpoint — compose it with a second sink that owns reads. |
-| presence | `node_modules/@voltro/plugin-presence/README.md` | Ephemeral realtime presence — who's online in a channel, with heartbeat, live roster, and per-member metadata (status, cursor). Works cross-instance. |
-| prometheus | `node_modules/@voltro/plugin-prometheus/README.md` | Prometheus exporter — scrapes the unified Metrics-API at GET /metrics in text exposition format. |
-| ratelimit | `node_modules/@voltro/plugin-ratelimit/README.md` | Per-endpoint, per-subject and per-tenant request limits via the rpc interceptors. Sliding-window / fixed-window / token-bucket, memory / postgres / redis stores. |
-| rbac | `node_modules/@voltro/plugin-rbac/README.md` | Roles + permissions + the permission() handler guard. Roles compile to scopes. |
-| scim | `node_modules/@voltro/plugin-scim/README.md` | SCIM 2.0 provisioning — Users + Groups REST endpoints so an enterprise IdP (Okta, Entra, OneLogin) can create / update / deactivate users in your app. |
-| search | `node_modules/@voltro/plugin-search/README.md` | Keep an external search index (Typesense / Meilisearch / Algolia) in sync with your tables via the ChangeEvent tap, query it tenant-scoped through a typed action + hook. |
-| sentry | `node_modules/@voltro/plugin-sentry/README.md` | Deep Sentry integration — errors correlated to the distributed trace, breadcrumbs from the log sink, and opt-in performance traces. |
-| soft-delete | `node_modules/@voltro/plugin-soft-delete/README.md` | The softDelete() schema mixin — deletedAt / deletedBy columns, delete() redirected to an UPDATE, default reads filtered, hardDelete() bypass. |
-| sso-saml | `node_modules/@voltro/plugin-sso-saml/README.md` | Enterprise SAML 2.0 SSO — SP-initiated login, ACS assertion consumer, SP metadata. Signature verification via @node-saml/node-saml; framework session minting built in. |
-| storage | `node_modules/@voltro/plugin-storage/README.md` | File storage behind one StorageService — public objects served direct from the bucket/CDN, private objects gated by an access policy + per-object grants. S3 / R2 / GCS / MinIO / filesystem / memory providers, presigned URLs, a dashboard browser. |
-| tinybird | `node_modules/@voltro/plugin-tinybird/README.md` | Hosted-ClickHouse AnalyticsSink over Tinybird's Events API + Pipes — pay-as-you-go OLAP without operating a cluster. |
-| versioning | `node_modules/@voltro/plugin-versioning/README.md` | Full row history + time-travel. audit() records who/when; versioning records what-changed-to-what — a value snapshot of every row on every write, with as-of queries. |
-| webhooks | `node_modules/@voltro/plugin-webhooks/README.md` | First-class outgoing + incoming webhooks — declared events with a webhook: block, defineIncomingWebhook in *.webhook.tsx files, runtime subscriptions, durable delivery via @effect/workflow, HMAC signing, provider presets, and idempotency. |
+| ai-flows | `node_modules/@voltro/cli/templates/agent-docs/plugins/ai-flows.md` (or `node_modules/@voltro/plugin-ai-flows/README.md`) | Durable multi-step AI pipelines — deterministic or agentic, with human-in-the-loop, chaining, and cadence. Author flows in code (defineFlow) or as data (visual-editor rows); one engine runs both. |
+| analytics-postgres | `node_modules/@voltro/cli/templates/agent-docs/plugins/analytics-postgres.md` (or `node_modules/@voltro/plugin-analytics-postgres/README.md`) | First-party lite AnalyticsSink — stores events in the main DataStore, cross-dialect, zero external infra. ~10M events/day ceiling. |
+| atlassian | `node_modules/@voltro/cli/templates/agent-docs/plugins/atlassian.md` (or `node_modules/@voltro/plugin-atlassian/README.md`) | JiraService + ConfluenceService over the Atlassian REST / Greenhopper / Agile APIs, with a per-subject PAT resolver, transient retry, SSRF guard, an avatar proxy, and per-tenant caching. |
+| audit | `node_modules/@voltro/cli/templates/agent-docs/plugins/audit.md` (or `node_modules/@voltro/plugin-audit/README.md`) | Mutation audit log — sinks (console/memory/custom), include/exclude filters, the audit() mixin, testing with the memory buffer. |
+| auth | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth.md` (or `node_modules/@voltro/plugin-auth/README.md`) | Password + session-cookie auth — overview. Full docs in the Authentication section. |
+| auth-auth0 | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-auth0.md` (or `node_modules/@voltro/plugin-auth-auth0/README.md`) | Auth0 AuthStrategy — verifies Auth0-issued JWTs via the tenant's JWKS (no client secret) and maps a namespaced custom claim → tenantId. |
+| auth-clerk | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-clerk.md` (or `node_modules/@voltro/plugin-auth-clerk/README.md`) | Clerk AuthStrategy — verifies Clerk-issued __session JWTs via the Frontend API JWKS (no secret key) and maps org_id → tenantId. |
+| auth-kinde | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-kinde.md` (or `node_modules/@voltro/plugin-auth-kinde/README.md`) | Kinde AuthStrategy — verifies Kinde-issued JWTs via JWKS at the configured issuer (no client secret) and maps org_code → tenantId. |
+| auth-oidc | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-oidc.md` (or `node_modules/@voltro/plugin-auth-oidc/README.md`) | Generic OIDC AuthStrategy — verifies any OpenID-Connect IdP's JWTs via JWKS (Okta, Keycloak, Cognito, Azure AD, Google Workspace). Discovery or explicit JWKS URL; maps a claim → tenantId. |
+| auth-supabase | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-supabase.md` (or `node_modules/@voltro/plugin-auth-supabase/README.md`) | Supabase Auth (GoTrue) AuthStrategy — verifies Supabase-issued JWTs via the project's JWKS and maps app_metadata.tenant_id → tenantId. |
+| auth-workos | `node_modules/@voltro/cli/templates/agent-docs/plugins/auth-workos.md` (or `node_modules/@voltro/plugin-auth-workos/README.md`) | WorkOS AuthStrategy — verifies WorkOS AuthKit / SSO JWTs via JWKS (no API key) and maps org_id → tenantId. |
+| billing | `node_modules/@voltro/cli/templates/agent-docs/plugins/billing.md` (or `node_modules/@voltro/plugin-billing/README.md`) | Subscriptions, plans, entitlements, and usage metering over a pluggable provider (Stripe + mock). Money is integer minor units. |
+| broadcast | `node_modules/@voltro/cli/templates/agent-docs/plugins/broadcast.md` (or `node_modules/@voltro/plugin-broadcast/README.md`) | Cross-replica reactivity over a pub/sub bus (Redis / NATS) for non-postgres dialects — closes the single-instance gap so a write on one pod surfaces on another. |
+| cdc-out | `node_modules/@voltro/cli/templates/agent-docs/plugins/cdc-out.md` (or `node_modules/@voltro/plugin-cdc-out/README.md`) | Declaratively mirror table changes outward to external sinks (webhook / Kafka / Snowflake / BigQuery) through a durable outbox — ordered per pipe, at-least-once from enqueue, retried with backoff, dead-lettered. |
+| clickhouse | `node_modules/@voltro/cli/templates/agent-docs/plugins/clickhouse.md` (or `node_modules/@voltro/plugin-clickhouse/README.md`) | Production-grade OLAP AnalyticsSink over ClickHouse — self-hosted or ClickHouse Cloud — for billions of events with millisecond aggregates. |
+| datadog | `node_modules/@voltro/cli/templates/agent-docs/plugins/datadog.md` (or `node_modules/@voltro/plugin-datadog/README.md`) | Agentless Datadog metrics exporter — pushes the unified Metrics-API to Datadog's /api/v2/series HTTP intake. |
+| deactivation | `node_modules/@voltro/cli/templates/agent-docs/plugins/deactivation.md` (or `node_modules/@voltro/plugin-deactivation/README.md`) | A schema mixin that marks a subject as deactivated (can't log in) while keeping its data fully visible — the deliberate opposite of soft-delete. |
+| duckdb | `node_modules/@voltro/cli/templates/agent-docs/plugins/duckdb.md` (or `node_modules/@voltro/plugin-duckdb/README.md`) | Embedded DuckDB AnalyticsSink — real column-store OLAP in-process, no external service to run. |
+| flags | `node_modules/@voltro/cli/templates/agent-docs/plugins/flags.md` (or `node_modules/@voltro/plugin-flags/README.md`) | Feature flags — per-subject / per-tenant targeting, deterministic % rollouts, kill-switch, declarative rpc gating + client UI gating. |
+| governance | `node_modules/@voltro/cli/templates/agent-docs/plugins/governance.md` (or `node_modules/@voltro/plugin-governance/README.md`) | Data governance — retention TTL sweep, GDPR export + erasure, consent ledger, and field-level encryption for .encrypted() columns. Builds on audit + soft-delete. |
+| licensing | `node_modules/@voltro/cli/templates/agent-docs/plugins/licensing.md` (or `node_modules/@voltro/plugin-licensing/README.md`) | Offline-verified EdDSA license keys + cloud-issued entitlement snapshots that feed plugin-billing; pricing decided server-side, never baked into a published version. |
+| logship | `node_modules/@voltro/cli/templates/agent-docs/plugins/logship.md` (or `node_modules/@voltro/plugin-logship/README.md`) | Ship structured logs to Better Stack / Axiom / Loki / any HTTP sink — batched, redacted, fail-soft. Rides the framework log-sink hook. |
+| mail | `node_modules/@voltro/cli/templates/agent-docs/plugins/mail.md` (or `node_modules/@voltro/plugin-mail/README.md`) | Transactional email — Resend / Postmark / SendGrid / SMTP, React-Email templates with auto-discovery, per-tenant suppression, bounce/complaint handling, durable delivery via workflows. |
+| moderation | `node_modules/@voltro/cli/templates/agent-docs/plugins/moderation.md` (or `node_modules/@voltro/plugin-moderation/README.md`) | Moderate user content before it commits — keyword denylist or AI provider, block or flag via rpc interceptor, plus an in-handler redact helper. |
+| multitenancy | `node_modules/@voltro/cli/templates/agent-docs/plugins/multitenancy.md` (or `node_modules/@voltro/plugin-multitenancy/README.md`) | The tenant() schema mixin (auto-scope reads + auto-fill writes), the assertOwnTenant write-guard, and the typed TenantMismatch error. |
+| notifications | `node_modules/@voltro/cli/templates/agent-docs/plugins/notifications.md` (or `node_modules/@voltro/plugin-notifications/README.md`) | Unified notifications — one send API across email / Slack / SMS / push / in-app, with per-user channel preferences, an in-app inbox, and delivery records. |
+| openapi | `node_modules/@voltro/cli/templates/agent-docs/plugins/openapi.md` (or `node_modules/@voltro/plugin-openapi/README.md`) | Generate an OpenAPI 3.1 spec + Swagger-UI docs from your defineRestRoute descriptors and (opt-in) your rpc procedures. Your routes ARE the API docs — nothing hand-maintained. |
+| postgis | `node_modules/@voltro/cli/templates/agent-docs/plugins/postgis.md` (or `node_modules/@voltro/plugin-postgis/README.md`) | Postgres-native geography / geometry columns, geometry constructors (point/line/polygon/multi/GeoJSON), spatial predicates (ST_DWithin, ST_Within, ST_Contains, ST_Intersects, ST_Buffer, bbox &&), ST_Distance projection + <-> KNN ordering, and GiST indexes via expressionIndex. Postgres-only by design. |
+| posthog | `node_modules/@voltro/cli/templates/agent-docs/plugins/posthog.md` (or `node_modules/@voltro/plugin-posthog/README.md`) | Track-only AnalyticsSink that forwards events to PostHog's /capture endpoint — compose it with a second sink that owns reads. |
+| presence | `node_modules/@voltro/cli/templates/agent-docs/plugins/presence.md` (or `node_modules/@voltro/plugin-presence/README.md`) | Ephemeral realtime presence — who's online in a channel, with heartbeat, live roster, and per-member metadata (status, cursor). Works cross-instance. |
+| prometheus | `node_modules/@voltro/cli/templates/agent-docs/plugins/prometheus.md` (or `node_modules/@voltro/plugin-prometheus/README.md`) | Prometheus exporter — scrapes the unified Metrics-API at GET /metrics in text exposition format. |
+| ratelimit | `node_modules/@voltro/cli/templates/agent-docs/plugins/ratelimit.md` (or `node_modules/@voltro/plugin-ratelimit/README.md`) | Per-endpoint, per-subject and per-tenant request limits via the rpc interceptors. Sliding-window / fixed-window / token-bucket, memory / postgres / redis stores. |
+| rbac | `node_modules/@voltro/cli/templates/agent-docs/plugins/rbac.md` (or `node_modules/@voltro/plugin-rbac/README.md`) | Roles + permissions + the permission() handler guard. Roles compile to scopes. |
+| scim | `node_modules/@voltro/cli/templates/agent-docs/plugins/scim.md` (or `node_modules/@voltro/plugin-scim/README.md`) | SCIM 2.0 provisioning — Users + Groups REST endpoints so an enterprise IdP (Okta, Entra, OneLogin) can create / update / deactivate users in your app. |
+| search | `node_modules/@voltro/cli/templates/agent-docs/plugins/search.md` (or `node_modules/@voltro/plugin-search/README.md`) | Keep an external search index (Typesense / Meilisearch / Algolia) in sync with your tables via the ChangeEvent tap, query it tenant-scoped through a typed action + hook. |
+| sentry | `node_modules/@voltro/cli/templates/agent-docs/plugins/sentry.md` (or `node_modules/@voltro/plugin-sentry/README.md`) | Deep Sentry integration — errors correlated to the distributed trace, breadcrumbs from the log sink, and opt-in performance traces. |
+| soft-delete | `node_modules/@voltro/cli/templates/agent-docs/plugins/soft-delete.md` (or `node_modules/@voltro/plugin-soft-delete/README.md`) | The softDelete() schema mixin — deletedAt / deletedBy columns, delete() redirected to an UPDATE, default reads filtered, hardDelete() bypass. |
+| sso-saml | `node_modules/@voltro/cli/templates/agent-docs/plugins/sso-saml.md` (or `node_modules/@voltro/plugin-sso-saml/README.md`) | Enterprise SAML 2.0 SSO — SP-initiated login, ACS assertion consumer, SP metadata. Signature verification via @node-saml/node-saml; framework session minting built in. |
+| storage | `node_modules/@voltro/cli/templates/agent-docs/plugins/storage.md` (or `node_modules/@voltro/plugin-storage/README.md`) | File storage behind one StorageService — public objects served direct from the bucket/CDN, private objects gated by an access policy + per-object grants. S3 / R2 / GCS / MinIO / filesystem / memory providers, presigned URLs, a dashboard browser. |
+| tinybird | `node_modules/@voltro/cli/templates/agent-docs/plugins/tinybird.md` (or `node_modules/@voltro/plugin-tinybird/README.md`) | Hosted-ClickHouse AnalyticsSink over Tinybird's Events API + Pipes — pay-as-you-go OLAP without operating a cluster. |
+| versioning | `node_modules/@voltro/cli/templates/agent-docs/plugins/versioning.md` (or `node_modules/@voltro/plugin-versioning/README.md`) | Full row history + time-travel. audit() records who/when; versioning records what-changed-to-what — a value snapshot of every row on every write, with as-of queries. |
+| webhooks | `node_modules/@voltro/cli/templates/agent-docs/plugins/webhooks.md` (or `node_modules/@voltro/plugin-webhooks/README.md`) | First-class outgoing + incoming webhooks — declared events with a webhook: block, defineIncomingWebhook in *.webhook.tsx files, runtime subscriptions, durable delivery via @effect/workflow, HMAC signing, provider presets, and idempotency. |
 
 
 ---