@voltro/cli 0.39.0 → 0.40.0

package/dist/{doctorCommand-Bvs-BQrM.js → doctorCommand-C-8-Z9D6.js}

@@ -1,8 +1,8 @@
-import { Bt as e, Ht as t, Vt as n } from "./dev-gqpnzVhI.js";
-import { $ as r, Q as i, X as a, Z as o, s, t as c, y as l } from "./webDev-CTpSY-e_.js";
+import { Bt as e, Ht as t, Vt as n } from "./dev-Dh1NuYx1.js";
+import { et as r, nt as i, rt as a, s as o, t as s, tt as c, y as l } from "./webDev-bybjZA0o.js";
 import { w as u } from "./frameworkTableAssembly-oMPBKqlE.js";
 import { n as d } from "./pageConvention-cEiRxdab.js";
-import { r as f, u as p } from "./apiBuild-DGalUk9v.js";
+import { r as f, u as p } from "./apiBuild-C8xBEYbL.js";
 import { n as m, r as h, t as g } from "./cliOutput-D1tSBoRM.js";
 import { n as _, t as ee } from "./tsconfigPaths-BWXBWgcl.js";
 import { n as te, r as ne } from "./fileTaxonomy-CJfgOllU.js";
@@ -1120,19 +1120,19 @@ var ce = /* @__PURE__ */ new Set([
 	if (!S(t)) return [];
 	let { pages: n, dirs: r } = await l(t), i = [];
 	for (let a of n) {
-		if (!s(r, a.dirChain).some((e) => e.hasLayout)) continue;
+		if (!o(r, a.dirChain).some((e) => e.hasLayout)) continue;
 		let n;
 		try {
 			n = C(v(t, a.file), "utf8");
 		} catch {
 			continue;
 		}
-		if (c.test(n)) continue;
-		let o = kt(n);
-		o !== null && i.push({
+		if (s.test(n)) continue;
+		let c = kt(n);
+		c !== null && i.push({
 			file: y(e, v(t, a.file)),
 			pattern: a.pattern,
-			currentMode: o
+			currentMode: c
 		});
 	}
 	return i;
@@ -1249,7 +1249,7 @@ var ce = /* @__PURE__ */ new Set([
 	let t = zt.get(e);
 	if (t !== void 0) return t;
 	let n = (async () => {
-		let { walk: t, loadDiscovered: n } = await import("./dev-alhkKoEX.js"), r = await t(e);
+		let { walk: t, loadDiscovered: n } = await import("./dev-D8JSKlBM.js"), r = await t(e);
 		return {
 			files: r,
 			discovered: await n(r)
@@ -1337,7 +1337,7 @@ var ce = /* @__PURE__ */ new Set([
 	}
 }, J = async (r) => {
 	try {
-		let { loadApiConfig: i } = await import("./dev-alhkKoEX.js"), { discovered: a } = await U(r), o = n(await i(r)), s = {
+		let { loadApiConfig: i } = await import("./dev-D8JSKlBM.js"), { discovered: a } = await U(r), o = n(await i(r)), s = {
 			queries: a.queries,
 			mutations: a.mutations,
 			actions: a.actions,
@@ -1421,7 +1421,7 @@ var ce = /* @__PURE__ */ new Set([
 }, Jt = async (e) => Ye({
 	hasWorkflows: async () => (await U(e)).discovered.workflows.length > 0,
 	openStore: async () => {
-		let { loadApiConfig: t, buildStore: n } = await import("./dev-alhkKoEX.js"), r = await t(e);
+		let { loadApiConfig: t, buildStore: n } = await import("./dev-D8JSKlBM.js"), r = await t(e);
 		if (r === null) throw Error("no app.config.ts in this directory");
 		let i = await n(r, void 0);
 		return {
@@ -1501,7 +1501,7 @@ var ce = /* @__PURE__ */ new Set([
 	}
 }, en = async (e) => {
 	try {
-		let { loadApiConfig: t } = await import("./dev-alhkKoEX.js"), n = (await t(e))?.doctor?.scopeVocabulary;
+		let { loadApiConfig: t } = await import("./dev-D8JSKlBM.js"), n = (await t(e))?.doctor?.scopeVocabulary;
 		if (typeof n != "string") return [];
 		let [r, i] = n.split("#");
 		if (r === void 0 || i === void 0) return [];
@@ -1511,14 +1511,23 @@ var ce = /* @__PURE__ */ new Set([
 		return [];
 	}
 }, Q = async (e) => {
-	let t = {
+	let t = (e) => ({
 		evaluated: !1,
+		notEvaluated: e,
 		vocabularySize: 0,
 		findings: []
-	};
+	});
 	try {
-		let { offlineManifest: n, toInput: r } = await import("./checkCommand-BV56Pcc1.js"), { buildAppGraph: i, checkAppGraph: a } = await import("./appGraph-zuMGKVYX.js"), o = await n(e), s = r(o.manifest, o.tables), c = await en(e), l = [.../* @__PURE__ */ new Set([...s.scopes ?? [], ...c])];
-		if (l.length === 0) return t;
+		let { offlineManifest: n, toInput: r } = await import("./checkCommand-QbHshOac.js"), { buildAppGraph: i, checkAppGraph: a } = await import("./appGraph-zuMGKVYX.js"), o = await n(e), s = r(o.manifest, o.tables), c = await en(e), l = [.../* @__PURE__ */ new Set([...s.scopes ?? [], ...c])];
+		if (l.length === 0) {
+			try {
+				let { loadAppSchemaInputs: t } = await import("./frameworkTableAssembly-DgylYh9_.js");
+				await t(e);
+			} catch {
+				return t("app-not-importable");
+			}
+			return t("no-vocabulary");
+		}
 		let u = i({
 			...s,
 			scopes: l
@@ -1534,12 +1543,16 @@ var ce = /* @__PURE__ */ new Set([
 			}))
 		};
 	} catch {
-		return t;
+		return t("app-not-importable");
 	}
 }, tn = async (e) => {
-	let { findings: t, evaluated: n } = await Q(e);
+	let { findings: t, evaluated: n, notEvaluated: r } = await Q(e);
 	if (!n) {
-		console.log(""), console.log("•  scope vocabulary: none found — the unknown-scope rule did NOT run."), console.log("   It compares each procedure's required scopes against the scopes your"), console.log("   roles actually grant, and needs somewhere to read that set from."), console.log("   `@voltro/plugin-rbac` publishes it from its `roles` map; an app doing"), console.log("   RBAC without the plugin can point at its own:"), console.log(""), console.log("     // app.config.ts"), console.log("     doctor: { scopeVocabulary: './lib/teamRoles.ts#ALL_TEAM_SCOPES' }"), console.log(""), console.log("   Until then this section is NOT a clean bill of health — a procedure"), console.log("   requiring a scope no role grants is uncallable by everyone, and"), console.log("   nothing here would have told you.");
+		if (console.log(""), r === "app-not-importable") {
+			console.log("•  scope vocabulary: NOT EVALUATED — `app.config.ts` could not be imported."), console.log("   This is not a statement about your scopes: the rule never got to read"), console.log("   them. The commonest cause is a config that demands its environment while"), console.log("   it is evaluated — an auth strategy reading a secret, say — so it imports"), console.log("   inside the container and not on a workstation."), console.log(""), console.log("   Run doctor where that environment exists, or make the config importable"), console.log("   without it. The same import failure is reported above for plugin tables;"), console.log("   both sections have this one cause.");
+			return;
+		}
+		console.log("•  scope vocabulary: none found — the unknown-scope rule did NOT run."), console.log("   It compares each procedure's required scopes against the scopes your"), console.log("   roles actually grant, and needs somewhere to read that set from."), console.log("   `@voltro/plugin-rbac` publishes it from its `roles` map; an app doing"), console.log("   RBAC without the plugin can point at its own:"), console.log(""), console.log("     // app.config.ts"), console.log("     doctor: { scopeVocabulary: './lib/teamRoles.ts#ALL_TEAM_SCOPES' }"), console.log(""), console.log("   Until then this section is NOT a clean bill of health — a procedure"), console.log("   requiring a scope no role grants is uncallable by everyone, and"), console.log("   nothing here would have told you.");
 		return;
 	}
 	if (t.length !== 0) {
@@ -1559,7 +1572,7 @@ var ce = /* @__PURE__ */ new Set([
 	if (n === void 0 || r.length === 0) return;
 	let i = [];
 	try {
-		let { loadApiConfig: t } = await import("./dev-alhkKoEX.js");
+		let { loadApiConfig: t } = await import("./dev-D8JSKlBM.js");
 		i = (await t(e))?.locales ?? [];
 	} catch {
 		return;
@@ -1575,7 +1588,7 @@ var ce = /* @__PURE__ */ new Set([
 }, rn = async (e) => {
 	let { discovered: t } = await U(e), n = [];
 	try {
-		let { loadApiConfig: t } = await import("./dev-alhkKoEX.js");
+		let { loadApiConfig: t } = await import("./dev-D8JSKlBM.js");
 		n = ((await t(e))?.plugins ?? []).map((e) => {
 			let t = (e.extendSchema?.tables ?? []).map((e) => {
 				let t = e;
@@ -1720,30 +1733,30 @@ var ce = /* @__PURE__ */ new Set([
 	return n.unchecked.length > $ && console.log(`  … and ${n.unchecked.length - $} more — \`voltro doctor --json\` prints every one (\`authz.unchecked\`).`), i === void 0 ? (console.log(`\nNo ${X} yet, so this run is advisory. To start the ratchet:`), console.log("\n    voltro doctor --write-authz-allowlist\n"), console.log("That records today's unchecked handlers as DEBT and fails every run after on"), console.log("anything NEW. Fix a handler and its line stops mattering — the scan reports it as"), console.log("guarded whether or not the line is still there."), !1) : (console.log(`\n${n.unchecked.length} executor(s) with no access check are not in ${X}.`), console.log("Add a guard, or add the tag to that file if it is genuinely open."), console.log("\nBefore hand-rolling another check: `guards: [{ action, resourceType, resource }]`"), console.log("answers \"may this subject act on THIS row\" declaratively, and an app whose"), console.log("relationships live in its own tables registers its own tuple source rather than"), console.log("copying data into a framework table. See the authorization docs."), !0);
 }, un = async (e) => {
 	if (e.includes("--help") || e.includes("-h")) return console.log(Rt), 0;
-	let t = e.includes("--strict"), n = e.find((e) => !e.startsWith("-")), s = b(n ?? process.cwd());
+	let t = e.includes("--strict"), n = e.find((e) => !e.startsWith("-")), o = b(n ?? process.cwd());
 	if (h(e)) return g(), m({
-		...z(s),
-		spaCandidates: await B(s),
-		pageConvention: V(s),
-		fileTaxonomy: ne(s).findings,
-		junctionFks: (await W(s))?.issues ?? [],
-		eventDelivery: await G(s),
-		duplicateInstances: a(s),
-		versionSkew: o(s) ?? null,
-		serverOnly: (await q(s)).status,
-		accessDecisions: await J(s),
-		webhookVerification: await Y(s),
-		authz: await sn(s),
-		ungrantedScopes: await Q(s),
-		neverEmittedEvents: await Z(s),
-		stalledRuns: await Jt(s)
+		...z(o),
+		spaCandidates: await B(o),
+		pageConvention: V(o),
+		fileTaxonomy: ne(o).findings,
+		junctionFks: (await W(o))?.issues ?? [],
+		eventDelivery: await G(o),
+		duplicateInstances: r(o),
+		versionSkew: c(o) ?? null,
+		serverOnly: (await q(o)).status,
+		accessDecisions: await J(o),
+		webhookVerification: await Y(o),
+		authz: await sn(o),
+		ungrantedScopes: await Q(o),
+		neverEmittedEvents: await Z(o),
+		stalledRuns: await Jt(o)
 	}), 0;
-	let c = tt(s, t);
-	Tt(s), wt(s), Lt(s), te(s), await jt(s), await Xt(s), await Yt(s), await Bt(s), await Ht(s), await Ut(s), await rn(s), await tn(s), await $t(s), await nn(s);
-	let l = await qt(s), u = await ln(s, e.includes("--write-authz-allowlist")), d = await Wt(s), f = await Kt(s), p = r(o(s));
+	let s = tt(o, t);
+	Tt(o), wt(o), Lt(o), te(o), await jt(o), await Xt(o), await Yt(o), await Bt(o), await Ht(o), await Ut(o), await rn(o), await tn(o), await $t(o), await nn(o);
+	let l = await qt(o), u = await ln(o, e.includes("--write-authz-allowlist")), d = await Wt(o), f = await Kt(o), p = a(c(o));
 	p !== void 0 && (console.log(""), console.log(p));
-	let _ = i(a(s));
-	return _ !== void 0 && console.log(`\n${_}`), l || u || d || f ? Math.max(c, 1) : c;
+	let _ = i(r(o));
+	return _ !== void 0 && console.log(`\n${_}`), l || u || d || f ? Math.max(s, 1) : s;
 };
 //#endregion
 export { q as C, B as S, Y as T, jt as _, sn as a, yt as b, G as c, vt as d, $e as f, Lt as g, Tt as h, J as i, Zt as l, wt as m, et as n, Z as o, W as p, Et as r, Qt as s, Rt as t, z as u, un as v, Q as w, V as x, tt as y };

package/dist/doctorCommand-FhQ7EVYL.js

@@ -0,0 +1,2 @@
+import { v as e, y as t } from "./doctorCommand-C-8-Z9D6.js";
+export { e as runDoctorCommand, t as runServePreflight };

package/dist/{dormancyCommand-B-PPHc9Q.js → dormancyCommand-A79Odglm.js}

@@ -1,4 +1,4 @@
-import { c as e, i as t } from "./dev-gqpnzVhI.js";
+import { c as e, i as t } from "./dev-Dh1NuYx1.js";
 import { n, t as r } from "./cliArgs-D4p8n7EE.js";
 import { r as i } from "./appPort-B_HpJ_ck.js";
 import { resolve as a } from "node:path";

package/dist/{embeddingsCommand-OKY6XjUf.js → embeddingsCommand-CoiyHfkY.js}

@@ -1,4 +1,4 @@
-import { c as e, i as t } from "./dev-gqpnzVhI.js";
+import { c as e, i as t } from "./dev-Dh1NuYx1.js";
 import { Effect as n } from "effect";
 import { embedMany as r } from "@voltro/ai";
 //#region src/embeddingsBackfill.ts

package/dist/{envCommand-B1-Zm85H.js → envCommand-B6d0s-jZ.js}

@@ -1,5 +1,5 @@
-import { c as e } from "./dev-gqpnzVhI.js";
-import { at as t, ct as n, lt as r, ot as i } from "./webDev-CTpSY-e_.js";
+import { c as e } from "./dev-Dh1NuYx1.js";
+import { ft as t, lt as n, pt as r, ut as i } from "./webDev-bybjZA0o.js";
 import { join as a } from "node:path";
 import { promises as o } from "node:fs";
 import { createLogger as s } from "@voltro/logger";
@@ -19,9 +19,9 @@ var u = s({ scope: "voltro:env" }), d = "# Environment for this app", f = async
 }, p = (e, t) => e.length >= t ? e : e + " ".repeat(t - e.length), m = (e) => {
 	process.stdout.write(`${e}\n`);
 }, h = async (e) => {
-	let n = await f(e);
-	if (!n) return u.error("no app.config.ts found in the current directory"), 1;
-	let r = t(n.name, n.input), i = `${p("KEY", 32)} ${p("OWNER", 16)} ${p("ACCESS", 8)} ${p("REQ", 4)} SET`;
+	let t = await f(e);
+	if (!t) return u.error("no app.config.ts found in the current directory"), 1;
+	let r = n(t.name, t.input), i = `${p("KEY", 32)} ${p("OWNER", 16)} ${p("ACCESS", 8)} ${p("REQ", 4)} SET`;
 	u.info(`env manifest — ${r.app} (${r.summary.total} vars, ${r.summary.set} set)`), m(i);
 	for (let e of r.entries) {
 		let t = e.isSet ? "✓" : e.satisfied ? "·" : "✗";
@@ -37,11 +37,11 @@ var u = s({ scope: "voltro:env" }), d = "# Environment for this app", f = async
 		return await o.writeFile(t, r, "utf8"), u.warn(".env.example exists and is not framework-generated — wrote .env.example.generated instead", { hint: "merge it by hand, or pass --force to overwrite .env.example" }), 0;
 	}
 	return await o.writeFile(s, r, "utf8"), u.info("wrote .env.example", { app: n.name }), 0;
-}, _ = async (t) => {
-	let i = await e(t).catch(() => null);
+}, _ = async (n) => {
+	let i = await e(n).catch(() => null);
 	if (!i) return u.error("no app.config.ts found in the current directory"), 1;
 	let a = l(i.env) ? i.env : void 0;
-	return a ? (i.type === "web" ? (await n(t, a), u.info("wrote src/voltro-env.d.ts (publicEnv augmentation)", { app: i.name ?? "app" })) : (await r(t, a), u.info("wrote env.generated.d.ts (serverEnv augmentation)", { app: i.name ?? "app" })), 0) : (u.warn("no `defineEnv` declared in app.config.ts — nothing to generate", { hint: "add `env: defineEnv({ ... })` to app.config.ts (see @voltro/env)" }), 0);
+	return a ? (i.type === "web" ? (await t(n, a), u.info("wrote src/voltro-env.d.ts (publicEnv augmentation)", { app: i.name ?? "app" })) : (await r(n, a), u.info("wrote env.generated.d.ts (serverEnv augmentation)", { app: i.name ?? "app" })), 0) : (u.warn("no `defineEnv` declared in app.config.ts — nothing to generate", { hint: "add `env: defineEnv({ ... })` to app.config.ts (see @voltro/env)" }), 0);
 }, v = () => {
 	let e = c();
 	return u.info(`${e.length} framework env vars for turbo.json globalPassThroughEnv:`), m(JSON.stringify([...e].sort(), null, 2)), u.info("merge these into the workspace turbo.json `globalPassThroughEnv` array (+ your own app vars)."), 0;

package/dist/{evolveCommand-C4-NlFbd.js → evolveCommand-BC5a9lxX.js}

@@ -1,6 +1,6 @@
 import { n as e } from "./cliOutput-D1tSBoRM.js";
-import { t } from "./checkCommand-CBtynBKW.js";
-import { i as n, n as r } from "./codemodRunner-D-jTyvWo.js";
+import { t } from "./checkCommand-BcXJa2IS.js";
+import { i as n, n as r } from "./codemodRunner-BcOvi4A2.js";
 import { basename as i, join as a, resolve as o } from "node:path";
 import { branchNamespaceName as s, planBranchProvision as c } from "@voltro/database";
 import { readFile as l } from "node:fs/promises";

package/dist/frameworkTableAssembly-DgylYh9_.js

@@ -0,0 +1,2 @@
+import { c as e, n as t } from "./frameworkTableAssembly-oMPBKqlE.js";
+export { t as assembleFrameworkTables, e as loadAppSchemaInputs };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-BD9eBRY3.js";
+import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-7Z7-HOE3.js";
 import { r as o } from "./templates-BR-fb4SP.js";
 //#region src/index.ts
 var s = "framework";

package/dist/{infoCommand-CTo8Jnhq.js → infoCommand-ZqSVzJZ4.js}

@@ -1,5 +1,5 @@
 import { n as e, r as t, t as n } from "./cliOutput-D1tSBoRM.js";
-import { o as r } from "./updateCommand-CHBmCB17.js";
+import { o as r } from "./updateCommand-eoGpZr3E.js";
 import { join as i, resolve as a } from "node:path";
 import { readFileSync as o, readdirSync as s, statSync as c } from "node:fs";
 //#region src/infoCommand.ts

package/dist/{metaCommands-DUYR--Ts.js → metaCommands-CfRLra0s.js}

@@ -1,7 +1,7 @@
 import { i as e, n as t, r as n } from "./cliArgs-D4p8n7EE.js";
 import { t as r } from "./cliRuntime-Dh7UDinH.js";
 import { n as i } from "./renderProfile-1OWWAAtx.js";
-import { a, i as o } from "./projectScaffold-BvhLOrLq.js";
+import { a, i as o } from "./projectScaffold-mIX_DpSe.js";
 import { t as s } from "./discover-C9XKJDco.js";
 import { basename as c, join as l, relative as u, resolve as d } from "node:path";
 import { createLogger as f } from "@voltro/logger";

package/dist/{projectScaffold-BEhhHjPr.js → projectScaffold-BIl97_E6.js}

@@ -1,2 +1,2 @@
-import { c as e, l as t, s as n } from "./projectScaffold-BvhLOrLq.js";
+import { c as e, l as t, s as n } from "./projectScaffold-mIX_DpSe.js";
 export { n as runAddApp, e as runCreateProject, t as runListTemplates };

package/dist/{projectScaffold-BvhLOrLq.js → projectScaffold-mIX_DpSe.js}

@@ -1,7 +1,7 @@
 import { a as e, i as t, n, r, t as i } from "./templates-BR-fb4SP.js";
 import { i as a, n as o, t as s } from "./cloudClient-DWL-Hw_T.js";
 import { t as c } from "./cliRuntime-Dh7UDinH.js";
-import { n as l } from "./agentsMd-7zI2h5l9.js";
+import { n as l } from "./agentsMd-D6yD7IQv.js";
 import { n as u } from "./addCommand-C05L9tZh.js";
 import { a as d, n as f, r as p } from "./baselineCommand-Ck2Xm8M7.js";
 import { basename as m, dirname as h, join as g, resolve as _ } from "node:path";

package/dist/{runtimeTrace-DzZOCd94.js → runtimeTrace-BslKJjDY.js}

@@ -1,4 +1,4 @@
-import { n as e } from "./apiBuild-DGalUk9v.js";
+import { n as e } from "./apiBuild-C8xBEYbL.js";
 import { join as t, resolve as n, sep as r } from "node:path";
 import { existsSync as i, promises as a } from "node:fs";
 import { createLogger as o } from "@voltro/logger";

package/dist/{sdkgen-C4roLErM.js → sdkgen-DQ8uEmmn.js}

@@ -422,7 +422,7 @@ let package = Package(
 		await l.mkdir(o(e), { recursive: !0 }), await l.writeFile(e, n.content, "utf8");
 	}
 }, X = async (e) => {
-	let { offlineManifest: t } = await import("./checkCommand-BV56Pcc1.js"), { manifest: n } = await t(e);
+	let { offlineManifest: t } = await import("./checkCommand-QbHshOac.js"), { manifest: n } = await t(e);
 	return n;
 }, Z = async (e) => {
 	let t = J(await (e.manifestProvider ?? X)(e.root), {

package/dist/serveCommand-BmvEQCMS.js

@@ -0,0 +1,2 @@
+import { n as e } from "./serveCommand-Dqb9Ku1-.js";
+export { e as runServeDispatch };