@voltro/cli 0.39.0 → 0.40.0

package/dist/{webDev-CTpSY-e_.js → webDev-bybjZA0o.js}

@@ -4,19 +4,19 @@ import { t as n } from "./bootRefusal-pgvDxlrU.js";
 import { r } from "./appPort-B_HpJ_ck.js";
 import { A as i, _ as a, g as o, h as s, m as c, o as l } from "./fileConventions-Cof68_BL.js";
 import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-B7U7Cl_Z.js";
-import { n as g } from "./agentsMd-7zI2h5l9.js";
+import { n as g } from "./agentsMd-D6yD7IQv.js";
 import { c as _, p as v, t as y } from "./renderModeScan-D7J1B7Kw.js";
 import { t as b } from "./pageConvention-cEiRxdab.js";
 import { i as x, n as S, r as C, t as w } from "./runtimeRegistry-DMeKfTHP.js";
 import { n as T } from "./logFileSink-B4uP8pvf.js";
 import { basename as E, dirname as D, join as O, relative as k, resolve as A } from "node:path";
-import { existsSync as j, promises as M, readFileSync as N, readdirSync as P, statSync as F, unwatchFile as I, watchFile as L } from "node:fs";
-import { fileURLToPath as R, pathToFileURL as z } from "node:url";
-import { addSink as B, createLogger as V, printReadyBlock as ee } from "@voltro/logger";
-import { createRequire as te } from "node:module";
-import { homedir as H } from "node:os";
-import { currentTraceContext as U, resolveSecret as W } from "@voltro/runtime";
-import { FRAMEWORK_ENV_CATALOG as ne, appEnvEntries as G, checkEnvNaming as re, formatEnvErrors as ie, installEnvSnapshot as K, isEnvContract as ae, pluginEnvEntries as oe, renderDotEnvExample as se, resolveEnv as ce } from "@voltro/env";
+import { existsSync as j, promises as M, readFileSync as N, readdirSync as P, statSync as F, unwatchFile as ee, watchFile as I } from "node:fs";
+import { fileURLToPath as L, pathToFileURL as R } from "node:url";
+import { addSink as te, createLogger as z, printReadyBlock as B } from "@voltro/logger";
+import { createRequire as V } from "node:module";
+import { homedir as ne } from "node:os";
+import { currentTraceContext as H, resolveSecret as U } from "@voltro/runtime";
+import { FRAMEWORK_ENV_CATALOG as W, appEnvEntries as re, checkEnvNaming as G, formatEnvErrors as ie, installEnvSnapshot as K, isEnvContract as ae, pluginEnvEntries as oe, renderDotEnvExample as se, resolveEnv as ce } from "@voltro/env";
 import { __installPublicEnv as le } from "@voltro/env/public";
 import { mkdir as ue, writeFile as de } from "node:fs/promises";
 import { createHash as q } from "node:crypto";
@@ -68,8 +68,8 @@ __installPublicEnv(publicEnvValues)
 }, Se = async (e) => {
 	let t = ae(e.rawEnv) ? e.rawEnv : void 0, n = await ce({
 		contract: t,
-		resolveSecret: W
-	}), r = [...n.errors, ...re(t, e.appType)];
+		resolveSecret: U
+	}), r = [...n.errors, ...G(t, e.appType)];
 	if (r.length > 0) throw Error(ie(r));
 	K(n.values), e.appType === "web" && le(n.publicValues);
 	let i = t ? Object.keys(t.vars).length : 0;
@@ -88,7 +88,7 @@ __installPublicEnv(publicEnvValues)
 		contract: t
 	};
 }, Ce = (e) => {
-	let t = G(e.contract), n = (e.plugins ?? []).flatMap((e) => oe(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : ne, i = /* @__PURE__ */ new Set(), a = [];
+	let t = re(e.contract), n = (e.plugins ?? []).flatMap((e) => oe(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : W, i = /* @__PURE__ */ new Set(), a = [];
 	for (let e of [
 		...t,
 		...n,
@@ -179,14 +179,14 @@ __installPublicEnv(publicEnvValues)
 			});
 		}));
 	};
-	for (let t of e) L(t, { interval: Oe }, (e, n) => {
+	for (let t of e) I(t, { interval: Oe }, (e, n) => {
 		e.mtimeMs !== n.mtimeMs && a(t);
 	});
 	return t.info("watching .env files for changes", {
 		files: e.map(r),
 		intervalMs: Oe
 	}), () => {
-		for (let t of e) I(t);
+		for (let t of e) ee(t);
 	};
 }, Ae = [{
 	host: "127.0.0.1",
@@ -417,7 +417,7 @@ __installPublicEnv(publicEnvValues)
 		behind: n.behind.map((e) => `${e.pkg}@${e.version}`),
 		fix: "the framework ships in lockstep; bump the listed packages and reinstall"
 	});
-}, Ke = V({ scope: "vite" }), qe = /\x1b\[[0-9;]*m/g, Je = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, Ye = (e) => e.replace(qe, "").replace(Je, "").trim(), Xe = /proxy error/i, Ze = [
+}, Ke = z({ scope: "vite" }), qe = /\x1b\[[0-9;]*m/g, Je = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, Ye = (e) => e.replace(qe, "").replace(Je, "").trim(), Xe = /proxy error/i, Ze = [
 	"ECONNREFUSED",
 	"ECONNRESET",
 	"ECONNABORTED",
@@ -780,7 +780,7 @@ __installPublicEnv(publicEnvValues)
 		if (Bt(t[i], a), !r) {
 			r = !0;
 			try {
-				let t = a.length > 0 ? Lt(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = U();
+				let t = a.length > 0 ? Lt(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = H();
 				e.emit("log", {
 					level: i,
 					message: r,
@@ -807,7 +807,7 @@ __installPublicEnv(publicEnvValues)
 		}
 	};
 	console.log = i("log"), console.info = i("info"), console.warn = i("warn"), console.error = i("error"), console.debug = i("debug");
-	let a = B((t) => {
+	let a = te((t) => {
 		if (!r) {
 			r = !0;
 			try {
@@ -818,7 +818,7 @@ __installPublicEnv(publicEnvValues)
 					argsCount: 1,
 					...t.scope === void 0 ? {} : { scope: t.scope }
 				});
-				let a = U(), o = a !== void 0 && t.fields.traceId === void 0 ? {
+				let a = H(), o = a !== void 0 && t.fields.traceId === void 0 ? {
 					...t.fields,
 					traceId: a.traceId
 				} : t.fields;
@@ -845,7 +845,7 @@ __installPublicEnv(publicEnvValues)
 		case "debug": return "debug";
 		default: return "info";
 	}
-}, qt = V({ scope: "client" }), Jt = (e, t) => {
+}, qt = z({ scope: "client" }), Jt = (e, t) => {
 	let n;
 	try {
 		n = JSON.parse(e);
@@ -1016,7 +1016,7 @@ __installPublicEnv(publicEnvValues)
 	let e = {
 		warn: console.warn.bind(console),
 		error: console.error.bind(console)
-	}, t = V({ scope: "babel" }), n = !1, r = (r) => (...i) => {
+	}, t = z({ scope: "babel" }), n = !1, r = (r) => (...i) => {
 		if (!n) {
 			for (let e of cn) if (e.match(i[0])) {
 				n = !0;
@@ -1166,7 +1166,7 @@ import {
 			map: null
 		};
 	}
-}), xn = V({ scope: "voltro:dashboard" }), Sn = te(import.meta.url), Cn = 5179, wn = (e) => {
+}), xn = z({ scope: "voltro:dashboard" }), Sn = V(import.meta.url), Cn = 5179, wn = (e) => {
 	let t = process.env.VOLTRO_DASHBOARD_PATH;
 	if (t && j(O(A(t), "app.config.ts"))) return A(t);
 	try {
@@ -1190,7 +1190,7 @@ import {
 		a || (a = !0, i.destroy(), r(e));
 	};
 	i.once("connect", () => o(!0)), i.once("error", () => o(!1)), setTimeout(() => o(!1), n);
-}), Dn = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), On = () => process.env[Tn] === "1", kn = () => process.stdout.isTTY === !0, An = O(H(), ".voltro", "dashboard-launch.lock"), jn = 1e4, Mn = async () => {
+}), Dn = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), On = () => process.env[Tn] === "1", kn = () => process.stdout.isTTY === !0, An = O(ne(), ".voltro", "dashboard-launch.lock"), jn = 1e4, Mn = async () => {
 	try {
 		await M.mkdir(D(An), { recursive: !0 });
 		let e = await M.open(An, "wx");
@@ -1535,23 +1535,66 @@ import {
 	let t = [];
 	for (let n of [...e].sort()) t.push(await fr(n));
 	return q("sha1").update(t.join("\0")).digest("hex");
-}, Z = V({ scope: "voltro:dev:web" }), mr = V({ scope: "vite" }), hr = await (async () => {
+}, mr = (e) => {
+	let t = {};
+	if (!e) return t;
+	for (let n of e.split(";")) {
+		let e = n.indexOf("=");
+		if (e <= 0) continue;
+		let r = n.slice(0, e).trim();
+		if (r !== "") try {
+			t[r] = decodeURIComponent(n.slice(e + 1).trim());
+		} catch {
+			t[r] = n.slice(e + 1).trim();
+		}
+	}
+	return t;
+}, hr = (e) => {
+	let t = [`${e.name}=${encodeURIComponent(e.value)}`];
+	return t.push(`Path=${e.path ?? "/"}`), e.maxAge !== void 0 && t.push(`Max-Age=${Math.trunc(e.maxAge)}`), e.httpOnly !== !1 && t.push("HttpOnly"), e.secure === !0 && t.push("Secure"), t.push(`SameSite=${e.sameSite ?? "lax"}`), t.join("; ");
+}, gr = async (e, t = (e) => import(R(e).href)) => {
+	for (let n of ["middleware.ts", "middleware.tsx"]) try {
+		let r = (await t(O(e, n)))?.default;
+		if (typeof r == "function") return r;
+		if (r !== void 0) throw Error(`${n} must default-export a function; got ${typeof r}. It receives the request and returns \`{ headers?, setCookies? }\`.`);
+	} catch (e) {
+		let t = e?.code;
+		if (t === "ERR_MODULE_NOT_FOUND" || t === "MODULE_NOT_FOUND") continue;
+		throw e;
+	}
+}, _r = async (e, t) => {
+	if (e === void 0) return {
+		headers: t.headers,
+		setCookies: []
+	};
+	let n = await e(t);
+	return n ? {
+		headers: n.headers ? {
+			...t.headers,
+			...n.headers
+		} : t.headers,
+		setCookies: n.setCookies ?? []
+	} : {
+		headers: t.headers,
+		setCookies: []
+	};
+}, Z = z({ scope: "voltro:dev:web" }), vr = z({ scope: "vite" }), yr = await (async () => {
 	try {
-		let e = O(D(R(import.meta.url)), "..", "package.json"), t = await M.readFile(e, "utf8");
+		let e = O(D(L(import.meta.url)), "..", "package.json"), t = await M.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), gr = async () => {
+})(), br = async () => {
 	try {
-		let e = D(R(import.meta.url)), t = A(e, "..", "..", "devtools");
+		let e = D(L(import.meta.url)), t = A(e, "..", "..", "devtools");
 		if (j(O(t, "package.json"))) return t;
 		let n = A(e, "..", "..", "..", "devtools");
 		return j(O(n, "package.json")) ? n : null;
 	} catch {
 		return null;
 	}
-}, _r = (e, t) => e.disableDevtools || !t ? [] : [
+}, xr = (e, t) => e.disableDevtools || !t ? [] : [
 	"",
 	"// Dev-only in-page devtools overlay. The `import.meta.env.DEV` guard is a",
 	"// compile-time constant, so prod builds strip this whole `if` block — the",
@@ -1561,12 +1604,12 @@ import {
 	"  await import('@voltro/devtools/styles.css')",
 	"  Devtools = (await import('@voltro/devtools')).VoltroDevtools",
 	"}"
-], vr = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], yr = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], br = (e) => e.sentry ? [
+], Sr = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], Cr = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], wr = (e) => e.sentry ? [
 	"",
 	"// Browser-side Sentry (frontend half of the deep integration). Errors +",
 	"// browser rpc spans flow to Sentry, sharing the server transactions' trace.",
 	`await initSentryBrowser(${JSON.stringify(e.sentry)})`
-] : [], xr = (e) => e.env ? ["import './env.public'"] : [], Sr = (e) => {
+] : [], Tr = (e) => e.env ? ["import './env.public'"] : [], Er = (e) => {
 	let t = [], n = A(e);
 	for (;;) {
 		j(O(n, "pnpm-workspace.yaml")) && t.push(n);
@@ -1575,14 +1618,14 @@ import {
 		n = e;
 	}
 	return t;
-}, Cr = b, wr = (e) => {
+}, Dr = b, Or = (e) => {
 	if (/\/node_modules\/(?:\.pnpm\/[^/]+\/node_modules\/)?(?:react|react-dom|scheduler)\//.test(e)) return "react";
 	let t = /\/([^/]+)\.island\.tsx?$/.exec(e);
 	if (t) return `island-${t[1]}`;
-}, Tr = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Er = (e) => e.startsWith("(") && e.endsWith(")"), Dr = (e) => e.filter((e) => !Er(e)), Or = (e) => {
-	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Er(e));
+}, kr = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Ar = (e) => e.startsWith("(") && e.endsWith(")"), jr = (e) => e.filter((e) => !Ar(e)), Mr = (e) => {
+	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Ar(e));
 	return t.length === 0 ? "/" : "/" + t.join("/");
-}, kr = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, Q = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, $ = async (e) => {
+}, Nr = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, Q = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, $ = async (e) => {
 	let t = [], n = [], r = async (e, i) => {
 		let a = [];
 		try {
@@ -1590,17 +1633,17 @@ import {
 		} catch {
 			return;
 		}
-		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Cr(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
+		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Dr(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
 		if (l.some((e) => s.has(e))) {
 			let t = u.has("layout.tsx"), r = !1;
 			if (t) try {
 				let t = await M.readFile(O(e, "layout.tsx"), "utf8");
-				r = Tr.test(t);
+				r = kr.test(t);
 			} catch {}
 			n.push({
 				dir: d,
 				chain: i,
-				contributesToUrl: i.length === 0 || !Er(i[i.length - 1]),
+				contributesToUrl: i.length === 0 || !Ar(i[i.length - 1]),
 				hasLayout: t,
 				hasLayoutLoader: r,
 				hasError: u.has("error.tsx"),
@@ -1614,8 +1657,8 @@ import {
 			let n = d ? `${d}/${e}` : e;
 			t.push({
 				file: n,
-				pattern: Or(n),
-				ident: kr(n),
+				pattern: Mr(n),
+				ident: Nr(n),
 				dirChain: i
 			});
 		}
@@ -1634,14 +1677,14 @@ import {
 		dirs: a,
 		orphanedSpecials: o
 	};
-}, Ar = (e, t) => {
+}, Pr = (e, t) => {
 	let n = [];
 	for (let r = 0; r <= t.length; r++) {
 		let i = t.slice(0, r).join("/"), a = e.find((e) => e.dir === i);
 		a && n.push(a);
 	}
 	return n;
-}, jr = async (e) => {
+}, Fr = async (e) => {
 	let { entries: t, loadLayout: n, loadError: r, loadPending: i, ctx: a } = e, o = {};
 	return {
 		chain: await Promise.all(t.map(async (e, t) => {
@@ -1665,10 +1708,10 @@ import {
 		})),
 		segmentLoaderData: o
 	};
-}, Mr = (e) => {
-	let t = Dr(e);
+}, Ir = (e) => {
+	let t = jr(e);
 	return t.length === 0 ? "" : "/" + t.join("/");
-}, Nr = [
+}, Lr = [
 	"// Hot-reload bridge: keep SSR-injected <link rel=\"stylesheet\"> tags",
 	"// in sync with Vite's CSS HMR. Without this, edits to .css files",
 	"// only update the JS-injected <style> overlay; the underlying <link>",
@@ -1761,7 +1804,7 @@ import {
 	"    _vdtErrorStart('Build error')",
 	"  })",
 	"}"
-].join("\n"), Pr = (e) => {
+].join("\n"), Rr = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -1770,8 +1813,8 @@ import {
 		paramNames: t,
 		priority: n
 	};
-}, Fr = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = Pr(e.pattern);
+}, zr = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = Rr(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -1780,7 +1823,7 @@ import {
 		paramNames: n,
 		priority: r
 	};
-}).slice().sort((e, t) => e.priority - t.priority), Ir = (e, t) => {
+}).slice().sort((e, t) => e.priority - t.priority), Br = (e, t) => {
 	for (let n of t) {
 		let t = n.regex.exec(e);
 		if (!t) continue;
@@ -1792,9 +1835,9 @@ import {
 		};
 	}
 	return null;
-}, Lr = Ee, Rr = async (e) => {
+}, Vr = Ee, Hr = async (e) => {
 	try {
-		let t = await import(z(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
+		let t = await import(R(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
 			kind: "api",
 			configPort: typeof n == "number" ? n : void 0,
 			env: {}
@@ -1808,7 +1851,7 @@ import {
 		kind: "api",
 		env: {}
 	}).port };
-}, zr = (e, t) => ({
+}, Ur = (e, t) => ({
 	name: e,
 	pkg: t.package,
 	browserWsUrl: t.url,
@@ -1816,7 +1859,7 @@ import {
 	...t.serverUrl ? { serverOrigin: t.serverUrl } : {},
 	...t.headers ? { headers: t.headers } : {},
 	...t.authHeaders ? { hasAuthHeaders: !0 } : {}
-}), Br = (e, t, n) => {
+}), Wr = (e, t, n) => {
 	let r = t.transport?.wsPath ?? n.wsPath;
 	return {
 		name: e,
@@ -1828,7 +1871,7 @@ import {
 		...t.headers ? { headers: t.headers } : {},
 		...t.authHeaders ? { hasAuthHeaders: !0 } : {}
 	};
-}, Vr = (e) => {
+}, Gr = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (n.proxyTarget === void 0) continue;
@@ -1836,43 +1879,43 @@ import {
 		if (e) throw Error(`[voltro] api ${JSON.stringify(n.name)} and ${JSON.stringify(e)} both resolve the same-origin WS path ${JSON.stringify(n.browserWsUrl)}. A custom transport.wsPath must be unique per origin (one api per origin may use a fixed path). Give each a distinct wsPath, or drop the override to use the default /ws/<name>.`);
 		t.set(n.browserWsUrl, n.name);
 	}
-}, Hr = async (e, t) => {
+}, Kr = async (e, t) => {
 	let n = Object.entries(t.apis ?? {}), r = [];
 	for (let [t, i] of n) {
 		if (i.url) {
-			r.push(zr(t, i));
+			r.push(Ur(t, i));
 			continue;
 		}
-		let n = await Lr(e, i.package);
+		let n = await Vr(e, i.package);
 		if (!n) throw Error(`[voltro dev] api ${JSON.stringify(t)} (package ${JSON.stringify(i.package)}) is not a workspace dep and has no \`url\` set in app.config.ts. External apis need an explicit \`url\` because the framework can't discover their dev port.`);
-		r.push(Br(t, i, await Rr(n)));
+		r.push(Wr(t, i, await Hr(n)));
 	}
-	return Vr(r), r;
-}, Ur = (e) => {
+	return Gr(r), r;
+}, qr = (e) => {
 	if (!(!/^wss?:\/\//.test(e) && !/^https?:\/\//.test(e))) try {
 		let t = new URL(e);
 		return t.protocol = t.protocol === "wss:" || t.protocol === "https:" ? "https:" : "http:", `${t.protocol}//${t.host}`;
 	} catch {
 		return;
 	}
-}, Wr = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, Gr = (e) => process.env[Wr(e)] ?? process.env.VOLTRO_API_ORIGIN, Kr = (e, t) => {
+}, Jr = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, Yr = (e) => process.env[Jr(e)] ?? process.env.VOLTRO_API_ORIGIN, Xr = (e, t) => {
 	if (!e) return;
-	let n = Gr(e.name) ?? e.serverOrigin;
+	let n = Yr(e.name) ?? e.serverOrigin;
 	if (n) {
-		let e = Ur(n);
+		let e = qr(n);
 		if (e) return e;
 	}
 	if (t?.allowDevProxy && e.proxyTarget) {
-		let t = Ur(e.proxyTarget);
+		let t = qr(e.proxyTarget);
 		if (t) return t;
 	}
-	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return Ur(e.browserWsUrl);
-}, qr = (e, t, n) => {
+	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return qr(e.browserWsUrl);
+}, Zr = (e, t, n) => {
 	if (!e) {
 		if (n?.apiName === void 0) return;
 		let e = n.apiName;
 		return async () => {
-			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${Wr(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
+			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${Jr(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
 		};
 	}
 	return async (r, i) => {
@@ -1888,13 +1931,14 @@ import {
 				method: "POST",
 				headers: {
 					"content-type": "application/json",
-					...t ? { cookie: t } : {}
+					...t ? { cookie: t } : {},
+					...Object.fromEntries(Object.entries(n?.headers ?? {}).filter(([e]) => e === "authorization" || e.startsWith("x-voltro-") || e === "x-tenant"))
 				},
 				body: JSON.stringify(a)
 			});
 		} catch (t) {
 			let i = t?.cause?.code ?? String(t?.message ?? t);
-			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${Wr(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
+			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${Jr(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
 		}
 		if (!o.ok) throw Error(`[loader.query] ${r}: HTTP ${o.status} ${await o.text()}`);
 		let s = await o.json();
@@ -1924,8 +1968,8 @@ import {
 		}
 		if (u) return l;
 	};
-}, Jr = async (e, t, n, r = {}) => {
-	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = j(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await gr() !== null, s = t.theme === "system" ? [
+}, Qr = async (e, t, n, r = {}) => {
+	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = j(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await br() !== null, s = t.theme === "system" ? [
 		"    <script>",
 		"      (function () {",
 		"        var root = document.documentElement",
@@ -1979,13 +2023,13 @@ import {
 			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${Q(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${Q(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${Q(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${Q(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${Q(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
 		}
 		let i = u.map((e) => {
-			let t = Ar(d, e.dirChain).map((e) => {
+			let t = Pr(d, e.dirChain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout:  refs.layouts[${n}]`), e.hasLayoutLoader && t.push(`loader:  refs.layoutLoaders[${n}]`), e.hasError && t.push(`Error:   refs.errors[${n}]`), e.hasPending && t.push(`Pending: refs.pendings[${n}]`), `      { ${t.join(", ")} }`;
 			}).join(",\n");
 			return `    makePageRoute(${JSON.stringify(e.pattern)}, ${t.length > 0 ? `[\n${t},\n    ]` : "undefined"}),`;
 		}), a = d.filter((e) => e.hasNotFound).map((e) => {
-			let t = Mr(e.chain), n = Ar(d, e.chain).map((e) => {
+			let t = Ir(e.chain), n = Pr(d, e.chain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout: refs.layouts[${n}]`), e.hasError && t.push(`Error:  refs.errors[${n}]`), `        { ${t.join(", ")} }`;
 			}).join(",\n"), r = n.length > 0 ? `\n      chain: [\n${n},\n      ],` : "";
@@ -2241,14 +2285,14 @@ import {
 			"// resolved apis map. Side-effect only — no local component definitions —",
 			"// so downstream invalidations (user page edits) terminate at app.tsx.",
 			"",
-			...xr(t),
+			...Tr(t),
 			"import { mount } from '@voltro/web'",
 			...h,
 			"import { App } from './app'",
 			"import { preloadCurrentRoute } from './routeTable'",
-			...yr(t),
-			..._r(t, o),
-			...br(t),
+			...Cr(t),
+			...xr(t, o),
+			...wr(t),
 			"",
 			"// Preload the current route's page chunk BEFORE hydration so the first",
 			"// client render matches the SSG/SSR-prerendered HTML. Without it, a lazy",
@@ -2265,10 +2309,10 @@ import {
 			"  apis: {",
 			...g,
 			"  },",
-			...vr(t, o),
+			...Sr(t, o),
 			"})",
 			"",
-			Nr
+			Lr
 		].join("\n");
 	} else _ = "", v = "", b = [
 		"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
@@ -2276,22 +2320,22 @@ import {
 		"// and calls mount(). Side-effect only, no component definitions, so the",
 		"// user's component file remains the Fast Refresh boundary.",
 		"",
-		...xr(t),
+		...Tr(t),
 		"import { mount } from '@voltro/web'",
 		...h,
 		"import App from '../src/App'",
-		...yr(t),
-		..._r(t, o),
-		...br(t),
+		...Cr(t),
+		...xr(t, o),
+		...wr(t),
 		"",
 		"mount(App, {",
 		"  apis: {",
 		...g,
 		"  },",
-		...vr(t, o),
+		...Sr(t, o),
 		"})",
 		"",
-		Nr
+		Lr
 	].join("\n");
 	let x = O(e, ".framework");
 	await M.mkdir(x, { recursive: !0 }), t.env ? await xe(x, r) : await M.rm(O(x, "env.public.ts"), { force: !0 }), await M.writeFile(O(x, "index.html"), c, "utf8"), await M.writeFile(O(x, "main.tsx"), b, "utf8"), _ ? (await M.writeFile(O(x, "app.tsx"), _, "utf8"), await M.writeFile(O(x, "routeTable.ts"), v, "utf8")) : (await M.rm(O(x, "app.tsx"), { force: !0 }), await M.rm(O(x, "routeTable.ts"), { force: !0 }));
@@ -2308,7 +2352,7 @@ import {
 			Z.warn(`could not add ${E.join(", ")} to ${S} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
 		}
 	}
-}, Yr = async (e, t) => {
+}, $r = async (e, t) => {
 	try {
 		let n = D(e), r = O(n, "project.json");
 		if (!j(r)) return;
@@ -2321,16 +2365,16 @@ import {
 			projectJson: r
 		});
 	} catch {}
-}, Xr = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), Zr = async (e, t = {}) => {
-	let n = Xr(e), r = t.preferSource !== !0 && j(n) ? n : O(e, "app.config.ts");
+}, ei = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), ti = async (e, t = {}) => {
+	let n = ei(e), r = t.preferSource !== !0 && j(n) ? n : O(e, "app.config.ts");
 	try {
-		let e = (await import(z(r).href)).default;
+		let e = (await import(R(r).href)).default;
 		return typeof e == "object" && e && "type" in e && e.type === "web" ? e : null;
 	} catch {
 		return null;
 	}
-}, Qr = async (e) => {
-	let n = await Zr(e, { preferSource: !0 });
+}, ni = async (e) => {
+	let n = await ti(e, { preferSource: !0 });
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
@@ -2338,7 +2382,7 @@ import {
 	ln();
 	let i = Ct();
 	Vt(i), Z.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), Ge(e, Z);
-	let a = await Hr(e, n);
+	let a = await Kr(e, n);
 	for (let e of a) Z.info("api wired", {
 		name: e.name,
 		pkg: e.pkg,
@@ -2357,7 +2401,7 @@ import {
 		log: Z,
 		generateTypes: !0
 	}), s = o.publicValues;
-	await Jr(e, n, a, s), Z.debug("generated framework entry files", { files: [
+	await Qr(e, n, a, s), Z.debug("generated framework entry files", { files: [
 		"index.html",
 		".framework/main.tsx",
 		...n.env ? [".framework/env.public.ts"] : []
@@ -2378,22 +2422,22 @@ import {
 		pid: process.pid,
 		status: "booting",
 		logFile: D.path
-	}).catch(() => {}), await Yr(e, l);
+	}).catch(() => {}), await $r(e, l);
 	let { pages: N, dirs: P } = await $(O(e, "src", "pages")), F = {
 		dirs: P,
-		ssrRoutes: Fr(N)
-	}, I = P.map((e) => ({
+		ssrRoutes: zr(N)
+	}, ee = P.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), L = await ht({
+	})), I = await ht({
 		appRoot: e,
 		pages: N
 	});
-	L.wrote && Z.debug("routes codegen wrote", { path: k(e, L.path) });
-	let R = await he("vite", () => import("vite")), z = (await import("@vitejs/plugin-react")).default, B = (await import("@tailwindcss/vite")).default, V = O(e, ".framework"), te = O(e, "src"), H = /* @__PURE__ */ new Set([
+	I.wrote && Z.debug("routes codegen wrote", { path: k(e, I.path) });
+	let L = await he("vite", () => import("vite")), R = (await import("@vitejs/plugin-react")).default, te = (await import("@tailwindcss/vite")).default, z = O(e, ".framework"), V = O(e, "src"), ne = /* @__PURE__ */ new Set([
 		".framework",
 		"node_modules",
 		"dist",
@@ -2401,27 +2445,27 @@ import {
 		".vite",
 		".turbo",
 		".cache"
-	]), U = {
+	]), H = {
 		name: "framework:watch-app-sources",
 		async configureServer(t) {
 			try {
-				let n = (await M.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !H.has(e.name));
+				let n = (await M.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !ne.has(e.name));
 				for (let r of n) t.watcher.add(O(e, r.name));
-				n.length === 0 && t.watcher.add(te);
+				n.length === 0 && t.watcher.add(V);
 			} catch {
-				t.watcher.add(te);
+				t.watcher.add(V);
 			}
 			for (let n of await De(e)) t.watcher.add(n.dir);
 		}
-	}, W = O(e, "src", "pages"), ne = (e) => e.endsWith(".tsx") && (e === W || e.startsWith(W + "/")), G = (e) => e === W || e.startsWith(W + "/"), re = async (t) => {
+	}, U = O(e, "src", "pages"), W = (e) => e.endsWith(".tsx") && (e === U || e.startsWith(U + "/")), re = (e) => e === U || e.startsWith(U + "/"), G = async (t) => {
 		try {
 			let r = Date.now();
-			await Jr(e, n, a, s);
-			let { pages: i, dirs: o } = await $(W);
+			await Qr(e, n, a, s);
+			let { pages: i, dirs: o } = await $(U);
 			await ht({
 				appRoot: e,
 				pages: i
-			}), F.dirs = o, F.ssrRoutes = Fr(i), Z.info("page tree regenerated", {
+			}), F.dirs = o, F.ssrRoutes = zr(i), Z.info("page tree regenerated", {
 				reason: t,
 				ms: Date.now() - r,
 				routes: F.ssrRoutes.length
@@ -2436,17 +2480,17 @@ import {
 				r.push(e), n && clearTimeout(n), n = setTimeout(() => {
 					n = null;
 					let e = r.length === 1 ? r[0] : `${r.length} events (${r[0]}, …)`;
-					r.length = 0, re(e);
+					r.length = 0, G(e);
 				}, 50);
 			};
 			t.watcher.on("add", (t) => {
-				ne(t) && i(`add ${k(e, t)}`);
+				W(t) && i(`add ${k(e, t)}`);
 			}), t.watcher.on("unlink", (t) => {
-				ne(t) && i(`unlink ${k(e, t)}`);
+				W(t) && i(`unlink ${k(e, t)}`);
 			}), t.watcher.on("addDir", (t) => {
-				G(t) && i(`addDir ${k(e, t)}`);
+				re(t) && i(`addDir ${k(e, t)}`);
 			}), t.watcher.on("unlinkDir", (t) => {
-				G(t) && i(`unlinkDir ${k(e, t)}`);
+				re(t) && i(`unlinkDir ${k(e, t)}`);
 			});
 		}
 	}, K = O(e, "app.config.ts"), oe = (e) => {
@@ -2511,7 +2555,7 @@ import {
 				}
 				try {
 					let r = Date.now();
-					await Jr(e, t, await Hr(e, t)), ce = t, n.ws && n.ws.send({
+					await Qr(e, t, await Kr(e, t)), ce = t, n.ws && n.ws.send({
 						type: "full-reload",
 						path: "*"
 					}), Z.info("app.config.ts soft-regen", {
@@ -2550,7 +2594,7 @@ import {
 		async configureServer(t) {
 			let n = [];
 			for (let r of a) {
-				let i = await Lr(e, r.pkg);
+				let i = await Vr(e, r.pkg);
 				if (i) {
 					n.push(i);
 					try {
@@ -2568,7 +2612,7 @@ import {
 				if (e !== void 0 && e !== r) {
 					r = e, o = !0, Z.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
 					try {
-						await M.rm(O(V, ".vite", "deps"), {
+						await M.rm(O(z, ".vite", "deps"), {
 							recursive: !0,
 							force: !0
 						}), await t.restart(!0);
@@ -2830,7 +2874,7 @@ import {
 						kind: "web",
 						meta: {
 							name: n.name ?? "(unnamed)",
-							voltroVersion: hr,
+							voltroVersion: yr,
 							port: l,
 							mode: "dev",
 							apis: Object.entries(n.apis ?? {}).map(([e, t]) => {
@@ -2842,7 +2886,7 @@ import {
 							})
 						},
 						routes: await a(),
-						dirs: I,
+						dirs: ee,
 						cache: () => ({
 							backend: "memory",
 							size: 0,
@@ -2938,7 +2982,7 @@ import {
 				u.indexOf("?");
 				let { pathname: d, search: f } = Hn(u);
 				if (d.startsWith("/@") || d.startsWith("/node_modules/") || d.startsWith("/.framework/") || d.startsWith("/_voltro/") || d === "/main.tsx" || d === "/index.html" || d === "/sw.js" || d === "/favicon.ico" || d === "/robots.txt" || /\.[a-z0-9]+$/i.test(d)) return l();
-				let p = Ir(d, F.ssrRoutes);
+				let p = Br(d, F.ssrRoutes);
 				if (!p) return l();
 				let m = !ye.has(p.route.pattern), h = Date.now();
 				m && Z.info(`ssr compiling ${p.route.pattern}`, {
@@ -2960,15 +3004,25 @@ import {
 					}
 				}, b = !1;
 				try {
-					let x = await v("loadPage", async () => await r(O(e, "src", "pages", p.route.file))), S = _(x, O("src", "pages", p.route.file)), C = Ar(F.dirs, p.route.dirChain), w = S === "spa" && C.some((e) => e.hasLayout);
+					let x = await v("loadPage", async () => await r(O(e, "src", "pages", p.route.file))), S = _(x, O("src", "pages", p.route.file)), C = Pr(F.dirs, p.route.dirChain), w = S === "spa" && C.some((e) => e.hasLayout);
 					if (S !== "ssr" && S !== "isr" && !w) return l();
 					let T = {};
 					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? T[e] = t : Array.isArray(t) && (T[e] = t.join(", "));
-					let E = qr(Kr(a[0], { allowDevProxy: !0 }), T.cookie, { apiName: a[0]?.name }), D = new AbortController(), k = () => D.abort();
-					c.once("close", k);
-					let A = null, j = [], M = {};
+					let E = await _r(Le, {
+						pathname: d,
+						search: f,
+						headers: T,
+						cookies: mr(T.cookie)
+					});
+					for (let e of E.setCookies) c.appendHeader?.("set-cookie", hr(e));
+					let D = Zr(Xr(a[0], { allowDevProxy: !0 }), E.headers.cookie, {
+						apiName: a[0]?.name,
+						headers: E.headers
+					}), k = new AbortController(), A = () => k.abort();
+					c.once("close", A);
+					let j = null, M = [], N = {};
 					try {
-						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: j, segmentLoaderData: M} = await v("loadChain", () => jr({
+						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: M, segmentLoaderData: N} = await v("loadChain", () => Fr({
 							entries: C,
 							loadLayout: (t) => r(O(e, "src", "pages", t.dir, "layout.tsx")),
 							loadError: (t) => r(O(e, "src", "pages", t.dir, "error.tsx")),
@@ -2977,40 +3031,40 @@ import {
 								params: p.params,
 								pathname: d,
 								search: f,
-								signal: D.signal,
+								signal: k.signal,
 								headers: T,
-								query: E,
+								query: D,
 								isServer: !0
 							}
 						}));
 						let t = x.loader;
-						typeof t == "function" && !w && (A = await v("loader", () => t({
+						typeof t == "function" && !w && (j = await v("loader", () => t({
 							params: p.params,
 							pathname: d,
 							search: f,
-							signal: D.signal,
+							signal: k.signal,
 							headers: T,
-							query: E,
+							query: D,
 							isServer: !0
 						})));
 					} finally {
-						c.off("close", k);
+						c.off("close", A);
 					}
-					let N = await v("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
+					let P = await v("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
 					w || await cr({
 						pageMod: x,
 						params: p.params,
-						query: E,
+						query: D,
 						apiName: a[0]?.name,
-						seed: N.seedPreloadedSubscription,
-						seedFailure: N.seedPreloadedSubscriptionFailure,
+						seed: P.seedPreloadedSubscription,
+						seedFailure: P.seedPreloadedSubscriptionFailure,
 						onError: ({ tag: e, apiName: t }, n) => Z.warn("preload seed failed", {
 							tag: e,
 							apiName: t,
 							pathname: d
 						}, n)
 					});
-					let P = {
+					let ee = {
 						pattern: p.route.pattern,
 						Component: x.default,
 						meta: x.meta,
@@ -3018,40 +3072,40 @@ import {
 						ErrorBoundary: x.ErrorBoundary,
 						Pending: x.Pending,
 						renderMode: S,
-						chain: j
+						chain: M
 					}, I = {
-						cookies: N.parseCookieHeader(T.cookie),
+						cookies: P.parseCookieHeader(T.cookie),
 						headers: T,
 						url: u
 					}, L = x.interactive ?? "full", R = (await s())(T.cookie, T["accept-language"]);
 					b = R !== void 0 && o;
-					let z = R ? {
+					let te = R ? {
 						outerWrap: R.outerWrap,
 						locale: R.locale
-					} : {}, B = w ? zn({
-						helpers: N,
+					} : {}, z = w ? zn({
+						helpers: P,
 						page: `src/pages/${p.route.file}`,
 						interactive: L,
 						delivery: "stream",
 						renderInput: {
-							descriptor: P,
+							descriptor: ee,
 							params: p.params,
 							pathname: d,
 							search: f,
-							segmentLoaderData: M,
+							segmentLoaderData: N,
 							requestContext: I,
-							...z
+							...te
 						}
-					}) : null, V = w ? null : Rn({
-						helpers: N,
+					}) : null, B = w ? null : Rn({
+						helpers: P,
 						page: `src/pages/${p.route.file}`,
 						pathname: d,
 						renderMode: S,
 						interactive: L,
-						loaderData: A,
-						segmentLoaderData: M,
+						loaderData: j,
+						segmentLoaderData: N,
 						pageLoaderRan: typeof x.loader == "function"
-					}), ee = [];
+					}), V = [];
 					await v("collectCss", async () => {
 						let t = /* @__PURE__ */ new Set(), n = [
 							O(e, "src", "pages", p.route.file),
@@ -3062,18 +3116,18 @@ import {
 							]),
 							O(e, ".framework", "main.tsx")
 						];
-						for (let e of n) await y(e, t, ee);
+						for (let e of n) await y(e, t, V);
 					});
-					let te = await v("readShell", Ee), H = await v("transformShell", () => t.transformIndexHtml(u, te)), U = ee.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), W = R?.locale ?? I.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", ne = Date.now();
-					if (B) {
+					let ne = await v("readShell", Ee), H = await v("transformShell", () => t.transformIndexHtml(u, ne)), U = V.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), W = R?.locale ?? I.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", re = Date.now();
+					if (z) {
 						let e = (e) => Vn({
-							helpers: N,
-							prepared: B,
+							helpers: P,
+							prepared: z,
 							meta: e,
 							interactive: L,
 							extra: [U]
 						});
-						if (B.hasDeferred) ar({
+						if (z.hasDeferred) ar({
 							res: c,
 							shell: nr({
 								shell: H,
@@ -3085,8 +3139,8 @@ import {
 								"x-voltro-rendered-by": "spa-shell-dev"
 							},
 							headInjection: e,
-							render: (e) => N.renderPageToStream({
-								...B.renderInput,
+							render: (e) => P.renderPageToStream({
+								...z.renderInput,
 								...e
 							}),
 							onShellError: (e) => {
@@ -3095,27 +3149,27 @@ import {
 						});
 						else {
 							let t = Bn({
-								helpers: N,
-								prepared: B
+								helpers: P,
+								prepared: z
 							}), n = H.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${W}"`);
 							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "spa-shell-dev"), c.end(n);
 						}
-					} else if (V) {
+					} else if (B) {
 						let e = (e) => [
 							U,
-							N.renderMetaToHtml(e),
+							P.renderMetaToHtml(e),
 							`<meta name="voltro-interactive" content="${L}" />`,
-							...V.hasDeferred ? [N.renderDeferredRegistryScript()] : [],
-							N.renderRouterStateScript(V.stateInput)
+							...B.hasDeferred ? [P.renderDeferredRegistryScript()] : [],
+							P.renderRouterStateScript(B.stateInput)
 						].filter((e) => e.length > 0).join("\n    "), t = {
-							descriptor: P,
+							descriptor: ee,
 							params: p.params,
 							pathname: d,
 							search: f,
-							loaderData: V.loaderData,
-							segmentLoaderData: V.segmentLoaderData,
+							loaderData: B.loaderData,
+							segmentLoaderData: B.segmentLoaderData,
 							requestContext: I,
-							...z
+							...te
 						};
 						if (S === "ssr" && L === "full") ar({
 							res: c,
@@ -3129,7 +3183,7 @@ import {
 								"x-voltro-rendered-by": "ssr-dev"
 							},
 							headInjection: e,
-							render: (e) => N.renderPageToStream({
+							render: (e) => P.renderPageToStream({
 								...t,
 								...e
 							}),
@@ -3138,11 +3192,11 @@ import {
 							}
 						});
 						else {
-							let { html: n, meta: r } = N.renderPageToHtml(t), i = H.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${W}"`);
+							let { html: n, meta: r } = P.renderPageToHtml(t), i = H.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${W}"`);
 							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "ssr-dev"), c.end(i);
 						}
 					}
-					g.render = Date.now() - ne;
+					g.render = Date.now() - re;
 					let G = Date.now() - h;
 					m ? (ye.add(p.route.pattern), Z.info(`ssr compiled ${p.route.pattern} in ${G}ms`, {
 						pattern: p.route.pattern,
@@ -3176,15 +3230,15 @@ import {
 				}
 			});
 		}
-	}, Ae = Date.now(), je = R.version ?? "?", Me = await gr(), Ne = O(e, "node_modules", "@voltro", "ui-shadcn"), Y = j(O(Ne, "package.json")) ? Ne : null, Fe = [], Ie = await (async () => {
+	}, Ae = Date.now(), je = L.version ?? "?", Me = await br(), Ne = O(e, "node_modules", "@voltro", "ui-shadcn"), Y = j(O(Ne, "package.json")) ? Ne : null, Fe = [], Ie = await (async () => {
 		let t = [];
 		for (let n of a) {
-			let r = await Lr(e, n.pkg);
+			let r = await Vr(e, n.pkg);
 			r && t.push(r);
 		}
 		let n = await pr(t);
 		if (n === void 0) return !1;
-		let r = O(V, ".voltro-rpcgroup-optimize"), i = "";
+		let r = O(z, ".voltro-rpcgroup-optimize"), i = "";
 		try {
 			i = (await M.readFile(r, "utf8")).trim();
 		} catch {}
@@ -3193,15 +3247,15 @@ import {
 			await M.writeFile(r, n);
 		} catch {}
 		return !0;
-	})();
-	Ie && Z.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
+	})(), Le = await gr(e);
+	Le !== void 0 && Z.info("middleware.ts loaded — renews credentials before each SSR render"), Ie && Z.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
 	try {
 		await Pe(l, "voltro dev (web)");
 	} catch (e) {
 		Z.error(String(e.message ?? e)), process.exit(1);
 	}
-	await (await R.createServer({
-		root: V,
+	await (await L.createServer({
+		root: z,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		ssr: { noExternal: ["react-intl", "@voltro/i18n"] },
 		resolve: {
@@ -3247,9 +3301,9 @@ import {
 		customLogger: et(),
 		plugins: [
 			bn(O(e, "src", "pages")),
-			z(),
-			B(),
-			U,
+			R(),
+			te(),
+			H,
 			ie,
 			ue,
 			pe,
@@ -3264,12 +3318,12 @@ import {
 			host: !0,
 			allowedHosts: n.allowedHosts === !0 || [...n.allowedHosts ?? []],
 			proxy: J,
-			fs: { allow: [e, ...Sr(e)] }
+			fs: { allow: [e, ...Er(e)] }
 		},
 		appType: "spa",
-		cacheDir: O(V, ".vite"),
+		cacheDir: O(z, ".vite"),
 		publicDir: O(e, "public")
-	})).listen(), mr.info(`v${je} ready in ${Date.now() - Ae}ms`, {
+	})).listen(), vr.info(`v${je} ready in ${Date.now() - Ae}ms`, {
 		version: je,
 		bootMs: Date.now() - Ae
 	}), Z.info(`listening on http://localhost:${l}`, {
@@ -3313,27 +3367,27 @@ import {
 	} catch (e) {
 		Z.warn("runtime-registry write failed", {}, e);
 	}
-	return ee({
+	return B({
 		app: n.name ?? "unnamed",
 		kind: "web",
 		url: `http://localhost:${l}`,
 		bootMs: Date.now() - Ae
 	}), new Promise(() => {});
-}, $r = async (t) => {
+}, ri = async (t) => {
 	e("serve");
-	let n = await Zr(t);
+	let n = await ti(t);
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
 	let i = Date.now(), a = Z.child("serve");
 	a.info("booting voltro serve (preview)", { app: n.name ?? "(unnamed)" });
-	let o = await Hr(t, n);
+	let o = await Kr(t, n);
 	for (let e of o) a.info("api wired", {
 		name: e.name,
 		pkg: e.pkg
 	});
-	await Jr(t, n, o);
+	await Qr(t, n, o);
 	{
 		let { pages: e } = await $(O(t, "src", "pages"));
 		await ht({
@@ -3359,7 +3413,7 @@ import {
 		] },
 		build: {
 			outDir: "dist",
-			rollupOptions: { output: { manualChunks: wr } }
+			rollupOptions: { output: { manualChunks: Or } }
 		},
 		publicDir: O(t, "public")
 	});
@@ -3372,7 +3426,7 @@ import {
 		label: "Local",
 		url: e
 	})) ?? [];
-	return ee({
+	return B({
 		app: n.name ?? "unnamed",
 		kind: "preview",
 		url: f,
@@ -3381,4 +3435,4 @@ import {
 	}), new Promise(() => {});
 };
 //#endregion
-export { We as $, Hn as A, It as B, nr as C, zn as D, Rn as E, on as F, bt as G, Ct as H, en as I, rt as J, ht as K, Xt as L, Cn as M, Pn as N, Bn as O, wn as P, He as Q, Jt as R, rr as S, In as T, Tt as U, wt as V, xt as W, Ve as X, nt as Y, Ue as Z, $r as _, jr as a, we as at, Jr as b, Or as c, be as ct, Zr as d, Ge as et, Hr as f, Qr as g, Wr as h, qr as i, De as it, Tn as j, Vn as k, Q as l, ye as lt, Br as m, Kr as n, ke as nt, Xr as o, Te as ot, zr as p, at as q, Vr as r, Ee as rt, Ar as s, Se as st, Tr as t, Pe as tt, kr as u, he as ut, wr as v, ar as w, cr as x, $ as y, Vt as z };
+export { nt as $, Rn as A, en as B, _r as C, nr as D, rr as E, Tn as F, wt as G, Jt as H, Cn as I, xt as J, Ct as K, Pn as L, Bn as M, Vn as N, ar as O, Hn as P, rt as Q, wn as R, mr as S, cr as T, Vt as U, Xt as V, It as W, ht as X, bt as Y, at as Z, ri as _, Fr as a, Pe as at, Qr as b, Mr as c, De as ct, ti as d, Se as dt, Ve as et, Kr as f, be as ft, ni as g, Jr as h, Zr as i, Ge as it, zn as j, In as k, Q as l, we as lt, Wr as m, he as mt, Xr as n, He as nt, ei as o, ke as ot, Ur as p, ye as pt, Tt as q, Gr as r, We as rt, Pr as s, Ee as st, kr as t, Ue as tt, Nr as u, Te as ut, Or as v, hr as w, gr as x, $ as y, on as z };