@voltro/cli 0.39.1 → 0.41.0

package/dist/{start-ft_KzFTd.js → start-BjcuFME_.js}

@@ -1,21 +1,21 @@
 import { i as e, t } from "./nodeEnvironment-cGFAj1J8.js";
 import { r as n } from "./appPort-B_HpJ_ck.js";
-import { A as r, B as i, C as a, D as o, E as s, H as c, I as l, J as u, N as d, O as f, P as p, S as m, T as ee, U as h, V as g, a as _, b as v, d as y, f as b, i as x, j as S, k as te, n as ne, q as C, s as re, st as ie, ut as w, w as T, x as ae, y as oe, z as E } from "./webDev-CTpSY-e_.js";
-import { o as D, t as O } from "./connectionConfig-Bk9IC7D0.js";
-import { A as k, D as A, a as j, h as se, j as M, k as ce } from "./inspect-B7U7Cl_Z.js";
-import { a as le, c as N, d as ue, f as de, l as P, p as F, u as fe } from "./renderModeScan-D7J1B7Kw.js";
-import { i as pe, n as me, r as he, t as ge } from "./runtimeRegistry-DMeKfTHP.js";
-import { n as _e } from "./logFileSink-B4uP8pvf.js";
-import { t as ve } from "./inspectMetrics-CfdKLh6t.js";
-import { t as ye } from "./bootTiming-BdyP9nYw.js";
-import { dirname as be, extname as xe, join as I, resolve as L } from "node:path";
-import { promises as R } from "node:fs";
-import { fileURLToPath as z, pathToFileURL as Se } from "node:url";
-import { createLogger as B, printReadyBlock as Ce } from "@voltro/logger";
-import { snapshotMetricsSync as we } from "@voltro/runtime";
-import { createServer as Te } from "node:http";
+import { A as r, C as i, D as a, E as o, F as s, H as c, I as l, J as ee, L as u, M as d, N as f, O as te, P as p, R as m, S as h, T as ne, V as g, W as re, X as _, Y as v, Z as y, a as b, b as x, d as S, f as C, ht as w, i as ie, j as T, k as E, n as D, nt as O, q as k, s as ae, tt as A, vt as j, x as oe, y as M, z as se } from "./webDev-Dk8lFUzf.js";
+import { o as N, t as P } from "./connectionConfig-Bk9IC7D0.js";
+import { A as F, D as I, a as ce, h as le, j as ue, k as de } from "./inspect-B7U7Cl_Z.js";
+import { a as fe, c as L, d as pe, f as R, l as me, p as he, u as ge } from "./renderModeScan-D7J1B7Kw.js";
+import { i as _e, n as ve, r as ye, t as be } from "./runtimeRegistry-DMeKfTHP.js";
+import { n as xe } from "./logFileSink-B4uP8pvf.js";
+import { t as Se } from "./inspectMetrics-CfdKLh6t.js";
+import { t as Ce } from "./bootTiming-BdyP9nYw.js";
+import { dirname as we, extname as Te, join as z, resolve as Ee } from "node:path";
+import { promises as B } from "node:fs";
+import { fileURLToPath as V, pathToFileURL as H } from "node:url";
+import { createLogger as U, printReadyBlock as De } from "@voltro/logger";
+import { snapshotMetricsSync as Oe } from "@voltro/runtime";
+import { createServer as ke } from "node:http";
 //#region src/isrCdcInvalidator.ts
-var V = B({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
+var W = U({ scope: "voltro:start:cdc" }), Ae = (e) => (t) => {
 	let n = 0;
 	for (let [r, i] of e.tableSubscriptionsByPattern) {
 		if (!i.includes(t)) continue;
@@ -26,17 +26,17 @@ var V = B({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 		}));
 	}
 	return n;
-}, U = () => O() ? D() : null, Ee = (e) => {
-	let t = e.channel ?? "framework_changes", n = H(e), r = null, i = null;
+}, G = () => P() ? N() : null, je = (e) => {
+	let t = e.channel ?? "framework_changes", n = Ae(e), r = null, i = null;
 	return {
 		start: async () => {
 			if (e.tableSubscriptionsByPattern.size === 0) {
-				V.debug("skipped — no pages declare cacheInvalidatesOn");
+				W.debug("skipped — no pages declare cacheInvalidatesOn");
 				return;
 			}
-			let a = U();
+			let a = G();
 			if (!a) {
-				V.warn(`${e.tableSubscriptionsByPattern.size} route(s) declare \`cacheInvalidatesOn\` and will NOT be invalidated live — no database is configured for this web process. Set DB_URL (or DB_HOST / PG_HOST) so the CDC listener can connect; until then those routes go stale until their \`revalidate\` window expires.`, { routes: [...e.tableSubscriptionsByPattern.keys()] });
+				W.warn(`${e.tableSubscriptionsByPattern.size} route(s) declare \`cacheInvalidatesOn\` and will NOT be invalidated live — no database is configured for this web process. Set DB_URL (or DB_HOST / PG_HOST) so the CDC listener can connect; until then those routes go stale until their \`revalidate\` window expires.`, { routes: [...e.tableSubscriptionsByPattern.keys()] });
 				return;
 			}
 			r = new (await (import("pg"))).default.Client(a), await r.connect(), i = (e) => {
@@ -45,16 +45,16 @@ var V = B({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 				try {
 					r = JSON.parse(e.payload);
 				} catch (e) {
-					V.warn("bad CDC payload", {}, e);
+					W.warn("bad CDC payload", {}, e);
 					return;
 				}
 				let i = n(r.table);
-				i > 0 && V.info(`${r.op} on '${r.table}' → dropped ${i} cache entries`, {
+				i > 0 && W.info(`${r.op} on '${r.table}' → dropped ${i} cache entries`, {
 					op: r.op,
 					table: r.table,
 					dropped: i
 				});
-			}, r.on("notification", i), await r.query(`LISTEN ${t}`), V.info(`LISTEN ${t}`, {
+			}, r.on("notification", i), await r.query(`LISTEN ${t}`), W.info(`LISTEN ${t}`, {
 				channel: t,
 				..."connectionString" in a ? { target: a.connectionString.replace(/\/\/[^@/]*@/, "//") } : {
 					host: a.host,
@@ -72,7 +72,7 @@ var V = B({ scope: "voltro:start:cdc" }), H = (e) => (t) => {
 			}
 		}
 	};
-}, W = B({ scope: "voltro:start:isr-cache" }), De = "voltro_isr_cache", G = (e) => `
+}, K = U({ scope: "voltro:start:isr-cache" }), q = "voltro_isr_cache", J = (e) => `
 CREATE TABLE IF NOT EXISTS ${e} (
   cache_key                TEXT PRIMARY KEY,
   html                     TEXT NOT NULL,
@@ -83,9 +83,9 @@ CREATE TABLE IF NOT EXISTS ${e} (
   stale_while_revalidate_ms BIGINT NOT NULL DEFAULT 0
 );
 CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
-`, Oe = (e) => {
-	let t = e.tableName ?? De, { client: n } = e, r = /* @__PURE__ */ new Map(), i = !1, a = (async () => {
-		i || (i = !0, await n.query(G(t)));
+`, Me = (e) => {
+	let t = e.tableName ?? q, { client: n } = e, r = /* @__PURE__ */ new Map(), i = !1, a = (async () => {
+		i || (i = !0, await n.query(J(t)));
 	})().then(async () => {
 		let e = await n.query(`SELECT * FROM ${t}`);
 		for (let t of e.rows) r.set(t.cache_key, {
@@ -97,10 +97,10 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			staleWhileRevalidateMs: Number(t.stale_while_revalidate_ms)
 		});
 	}).catch((e) => {
-		W.warn("postgres bootstrap failed", {}, e);
+		K.warn("postgres bootstrap failed", {}, e);
 	}), o = (e, t) => {
 		a.then(() => n.query(e, t)).catch((e) => {
-			W.warn("postgres write failed", {}, e);
+			K.warn("postgres write failed", {}, e);
 		});
 	};
 	return {
@@ -145,14 +145,14 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			return Array.from(r.entries());
 		}
 	};
-}, K = B({ scope: "voltro:start" }), ke = await (async () => {
+}, Y = U({ scope: "voltro:start" }), Ne = await (async () => {
 	try {
-		let e = I(be(z(import.meta.url)), "..", "package.json"), t = await R.readFile(e, "utf8");
+		let e = z(we(V(import.meta.url)), "..", "package.json"), t = await B.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), Ae = (e) => e instanceof Error && e._voltroControl === "redirect" && typeof e.location == "string", q = (e) => e instanceof Error && e._voltroControl === "not-found", J = {
+})(), Pe = (e) => e instanceof Error && e._voltroControl === "redirect" && typeof e.location == "string", X = (e) => e instanceof Error && e._voltroControl === "not-found", Fe = {
 	".html": "text/html; charset=utf-8",
 	".js": "application/javascript",
 	".mjs": "application/javascript",
@@ -170,13 +170,13 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 	".woff": "font/woff",
 	".woff2": "font/woff2",
 	".txt": "text/plain; charset=utf-8"
-}, je = (e) => J[xe(e).toLowerCase()] ?? "application/octet-stream", Y = (e) => e.replace(/<script\b(?=[^>]*\btype="module")(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<script\b(?=[^>]*\bsrc=)(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<link\b[^>]*\brel="modulepreload"[^>]*>/gi, ""), X = async (e) => {
+}, Ie = (e) => Fe[Te(e).toLowerCase()] ?? "application/octet-stream", Z = (e) => e.replace(/<script\b(?=[^>]*\btype="module")(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<script\b(?=[^>]*\bsrc=)(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<link\b[^>]*\brel="modulepreload"[^>]*>/gi, ""), Q = async (e) => {
 	try {
-		return await R.stat(e), !0;
+		return await B.stat(e), !0;
 	} catch {
 		return !1;
 	}
-}, Me = (e) => {
+}, Le = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -185,8 +185,8 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		paramNames: t,
 		priority: n
 	};
-}, Ne = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = Me(e.pattern);
+}, Re = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = Le(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -195,7 +195,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		paramNames: n,
 		priority: r
 	};
-}).slice().sort((e, t) => e.priority - t.priority), Z = (e, t) => {
+}).slice().sort((e, t) => e.priority - t.priority), ze = (e, t) => {
 	for (let n of t) {
 		let t = n.regex.exec(e);
 		if (!t) continue;
@@ -207,188 +207,210 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		};
 	}
 	return null;
-}, Pe = async (e) => {
-	let { provider: t, route: n, params: i, pathname: c, dirs: l, shellTemplate: u, requestHeaders: d, requestUrl: p = "", apiOrigin: ee, apiName: h } = e, { search: g } = r(p), v = x(ee, d.cookie, { apiName: h }), y = await t.getPage(n.pattern, n.file), b = N(y, n.file), S = b === "spa" && re(l, n.dirChain).some((e) => e.hasLayout);
-	if (b !== "ssr" && b !== "isr" && !S) return null;
-	let ne = re(l, n.dirChain), C = {}, ie = null, w, oe = new AbortController();
+}, Be = async (e) => {
+	let { provider: t, route: n, params: i, pathname: c, dirs: ee, shellTemplate: f, requestHeaders: te, requestUrl: g = "", apiOrigin: re, apiName: _ } = e, { search: v } = m(g), y = await o(a(e.middlewares ?? [], {
+		route: n.pattern,
+		pathname: c
+	}), {
+		pathname: c,
+		search: v,
+		headers: te,
+		cookies: ne(te.cookie),
+		route: n.pattern
+	}, e.onCookieWarning), x = y.headers, S = ie(re, x.cookie, {
+		apiName: _,
+		headers: x
+	}), C = await t.getPage(n.pattern, n.file), w = L(C, n.file), D = w === "spa" && ae(ee, n.dirChain).some((e) => e.hasLayout);
+	if (w !== "ssr" && w !== "isr" && !D) return null;
+	let O = ae(ee, n.dirChain), k = {}, A = null, j, oe = new AbortController();
 	try {
-		(await t.getHelpers()).beginStoreSeeds(), {chain: w, segmentLoaderData: C} = await _({
-			entries: ne,
+		(await t.getHelpers()).beginStoreSeeds(), {chain: j, segmentLoaderData: k} = await b({
+			entries: O,
 			loadLayout: (e) => t.getLayout(e.dir),
 			loadError: (e) => t.getError(e.dir),
 			loadPending: (e) => t.getPending(e.dir),
 			ctx: {
 				params: i,
 				pathname: c,
-				search: g,
+				search: v,
 				signal: oe.signal,
-				headers: d,
-				query: v,
+				headers: x,
+				query: S,
 				isServer: !0
 			}
-		}), typeof y.loader == "function" && !S && (ie = await y.loader({
+		}), typeof C.loader == "function" && !D && (A = await C.loader({
 			params: i,
 			pathname: c,
-			search: g,
+			search: v,
 			signal: oe.signal,
-			headers: d,
-			query: v,
+			headers: x,
+			query: S,
 			isServer: !0
 		}));
 	} catch (e) {
-		if (Ae(e)) return {
+		if (Pe(e)) return {
 			control: "redirect",
 			status: e.status,
-			location: e.location
+			location: e.location,
+			setCookies: y.setCookies
+		};
+		if (X(e)) return {
+			control: "not-found",
+			setCookies: y.setCookies
 		};
-		if (q(e)) return { control: "not-found" };
 		throw e;
 	}
-	let E = await t.getHelpers();
-	S || await ae({
-		pageMod: y,
+	let M = await t.getHelpers();
+	D || await E({
+		pageMod: C,
 		params: i,
-		query: v,
-		apiName: h,
-		seed: E.seedPreloadedSubscription,
-		seedFailure: E.seedPreloadedSubscriptionFailure,
-		onError: ({ tag: e, apiName: t }, n) => K.warn("preload seed failed", {
+		query: S,
+		apiName: _,
+		seed: M.seedPreloadedSubscription,
+		seedFailure: M.seedPreloadedSubscriptionFailure,
+		onError: ({ tag: e, apiName: t }, n) => Y.warn("preload seed failed", {
 			tag: e,
 			apiName: t,
 			pathname: c
 		}, n)
 	});
-	let D = {
+	let se = {
 		pattern: n.pattern,
-		Component: y.default,
-		meta: y.meta,
-		loader: y.loader,
-		ErrorBoundary: y.ErrorBoundary,
-		Pending: y.Pending,
-		renderMode: b,
-		chain: w
-	}, O = {
-		cookies: E.parseCookieHeader(d.cookie),
-		headers: d,
-		url: p
-	}, k = E.i18n?.resolve(d.cookie, d["accept-language"]), A = y.interactive ?? "full";
-	if (S) {
-		let e = o({
-			helpers: E,
+		Component: C.default,
+		meta: C.meta,
+		loader: C.loader,
+		ErrorBoundary: C.ErrorBoundary,
+		Pending: C.Pending,
+		renderMode: w,
+		chain: j
+	}, N = {
+		cookies: y.cookies,
+		headers: x,
+		url: g
+	}, P = M.i18n?.resolve(x.cookie, x["accept-language"]), F = C.interactive ?? "full";
+	if (D) {
+		let e = s({
+			helpers: M,
 			page: n.pattern,
-			interactive: A,
+			interactive: F,
 			delivery: "stream",
 			renderInput: {
-				descriptor: D,
+				descriptor: se,
 				params: i,
 				pathname: c,
-				search: g,
-				segmentLoaderData: C,
-				requestContext: O,
-				...k ? {
-					outerWrap: k.outerWrap,
-					locale: k.locale
+				search: v,
+				segmentLoaderData: k,
+				requestContext: N,
+				...P ? {
+					outerWrap: P.outerWrap,
+					locale: P.locale
 				} : {}
 			}
-		}), t = k?.locale ?? O.cookies["voltro:locale"] ?? "en", r = (t) => te({
-			helpers: E,
+		}), t = P?.locale ?? N.cookies["voltro:locale"] ?? "en", a = (t) => u({
+			helpers: M,
 			prepared: e,
 			meta: t,
-			interactive: A
+			interactive: F
 		});
 		if (e.hasDeferred) {
-			let n = a({ shell: u });
+			let n = T({ shell: f });
 			return {
 				renderMode: "spa",
-				stream: (i) => T({
-					res: i,
+				setCookies: y.setCookies,
+				stream: (r) => d({
+					res: r,
 					shell: n,
 					htmlLang: t,
 					headers: {
 						"content-type": "text/html; charset=utf-8",
-						"x-voltro-rendered-by": "spa"
+						"x-voltro-rendered-by": "spa",
+						...h(y.setCookies)
 					},
-					headInjection: r,
-					render: (t) => E.renderPageToStream({
+					headInjection: a,
+					render: (t) => M.renderPageToStream({
 						...e.renderInput,
 						...t
 					}),
 					onShellError: (e) => {
-						K.error("spa layout shell render failed", { pathname: c }, e), i.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), i.end("server error");
+						Y.error("spa layout shell render failed", { pathname: c }, e), r.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), r.end("server error");
 					}
 				})
 			};
 		}
-		let s = f({
-			helpers: E,
+		let o = l({
+			helpers: M,
 			prepared: e
 		});
 		return {
-			html: m(u.replace("<div id=\"root\"></div>", `<div id="root">${s.body}</div>`), r(s.meta)).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${t}"`),
+			html: r(f.replace("<div id=\"root\"></div>", `<div id="root">${o.body}</div>`), a(o.meta)).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${t}"`),
 			renderMode: "spa",
-			revalidateMs: null
+			revalidateMs: null,
+			setCookies: y.setCookies
 		};
 	}
-	let j = s({
-		helpers: E,
+	let I = p({
+		helpers: M,
 		page: n.pattern,
 		pathname: c,
-		renderMode: b,
-		interactive: A,
-		loaderData: ie,
-		segmentLoaderData: C,
-		pageLoaderRan: typeof y.loader == "function"
-	}), se = {
-		descriptor: D,
+		renderMode: w,
+		interactive: F,
+		loaderData: A,
+		segmentLoaderData: k,
+		pageLoaderRan: typeof C.loader == "function"
+	}), ce = {
+		descriptor: se,
 		params: i,
 		pathname: c,
-		search: g,
-		loaderData: j.loaderData,
-		segmentLoaderData: j.segmentLoaderData,
-		requestContext: O,
-		...k ? {
-			outerWrap: k.outerWrap,
-			locale: k.locale
+		search: v,
+		loaderData: I.loaderData,
+		segmentLoaderData: I.segmentLoaderData,
+		requestContext: N,
+		...P ? {
+			outerWrap: P.outerWrap,
+			locale: P.locale
 		} : {}
-	}, M = (e) => [
-		E.renderMetaToHtml(e),
-		`<meta name="voltro-interactive" content="${A}" />`,
-		...j.hasDeferred ? [E.renderDeferredRegistryScript()] : [],
-		E.renderRouterStateScript(j.stateInput)
+	}, le = (e) => [
+		M.renderMetaToHtml(e),
+		`<meta name="voltro-interactive" content="${F}" />`,
+		...I.hasDeferred ? [M.renderDeferredRegistryScript()] : [],
+		M.renderRouterStateScript(I.stateInput)
 	].filter((e) => e.length > 0).join("\n    ");
-	if (b === "ssr" && A === "full" && e.buffered !== !0) {
-		let e = k?.locale ?? O.cookies["voltro:locale"] ?? "en", t = a({ shell: u });
+	if (w === "ssr" && F === "full" && e.buffered !== !0) {
+		let e = P?.locale ?? N.cookies["voltro:locale"] ?? "en", t = T({ shell: f });
 		return {
 			renderMode: "ssr",
-			stream: (n) => T({
+			setCookies: y.setCookies,
+			stream: (n) => d({
 				res: n,
 				shell: t,
 				htmlLang: e,
 				headers: {
 					"content-type": "text/html; charset=utf-8",
-					"x-voltro-rendered-by": "ssr"
+					"x-voltro-rendered-by": "ssr",
+					...h(y.setCookies)
 				},
-				headInjection: M,
-				render: (e) => E.renderPageToStream({
-					...se,
+				headInjection: le,
+				render: (e) => M.renderPageToStream({
+					...ce,
 					...e
 				}),
 				onShellError: (e) => {
-					K.error("ssr shell render failed", { pathname: c }, e), n.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), n.end("server error");
+					Y.error("ssr shell render failed", { pathname: c }, e), n.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), n.end("server error");
 				}
 			})
 		};
 	}
-	let { html: ce, meta: le } = E.renderPageToHtml(se), ue = M(le), de = k?.locale ?? O.cookies["voltro:locale"] ?? "en", P = m(u.replace("<div id=\"root\"></div>", `<div id="root">${ce}</div>`), ue).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${de}"`);
-	A === "none" && (P = Y(P));
-	let fe = b === "isr" ? F(y.revalidate) : null;
+	let { html: ue, meta: de } = M.renderPageToHtml(ce), fe = le(de), pe = P?.locale ?? N.cookies["voltro:locale"] ?? "en", R = r(f.replace("<div id=\"root\"></div>", `<div id="root">${ue}</div>`), fe).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${pe}"`);
+	F === "none" && (R = Z(R));
+	let me = w === "isr" ? he(C.revalidate) : null;
 	return {
-		html: P,
-		renderMode: b,
-		revalidateMs: fe
+		html: R,
+		renderMode: w,
+		revalidateMs: me,
+		setCookies: y.setCookies
 	};
-}, Q = (e) => e === "" ? "/" : e, Fe = async (e) => {
-	let t = await import(Se(e).href);
+}, $ = (e) => e === "" ? "/" : e, Ve = async (e) => {
+	let t = await import(H(e).href);
 	return {
 		kind: "bundle",
 		getPageMeta: () => t.pageMeta,
@@ -398,18 +420,18 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			return typeof r == "function" ? await r() : r;
 		},
 		async getLayout(e) {
-			let n = t.layouts[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing layout for dir ${Q(e)}`);
+			let n = t.layouts[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing layout for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getError(e) {
-			let n = t.errors[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing error for dir ${Q(e)}`);
+			let n = t.errors[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing error for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getPending(e) {
-			let n = t.pendings[Q(e)];
-			if (!n) throw Error(`[voltro start] ssr bundle missing pending for dir ${Q(e)}`);
+			let n = t.pendings[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing pending for dir ${$(e)}`);
 			return typeof n == "function" ? await n() : n;
 		},
 		async getHelpers() {
@@ -417,8 +439,8 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		},
 		async close() {}
 	};
-}, Ie = async (e, t) => {
-	let n = await w("vite", () => import("vite")), r = (await import("@vitejs/plugin-react")).default, i = (await import("@tailwindcss/vite")).default, a = await n.createServer({
+}, He = async (e, t) => {
+	let n = await j("vite", () => import("vite")), r = (await import("@vitejs/plugin-react")).default, i = (await import("@tailwindcss/vite")).default, a = await n.createServer({
 		root: t,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [r(), i()],
@@ -435,10 +457,10 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 		},
 		appType: "custom",
 		logLevel: "warn"
-	}), o = I(e, "src", "pages"), s = (e) => e === "" ? o : I(o, e), c = C({
-		limit: u(),
-		onColdStart: (e) => K.debug("ssr cold-compile start", { id: e }),
-		onColdEnd: (e, { durationMs: t, failed: n }) => K.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
+	}), o = z(e, "src", "pages"), s = (e) => e === "" ? o : z(o, e), c = A({
+		limit: O(),
+		onColdStart: (e) => Y.debug("ssr cold-compile start", { id: e }),
+		onColdEnd: (e, { durationMs: t, failed: n }) => Y.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
 			id: e,
 			ms: t,
 			...n ? { failed: !0 } : {}
@@ -447,16 +469,16 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 	return {
 		kind: "middleware",
 		async getPage(e, t) {
-			return l(I(o, t));
+			return l(z(o, t));
 		},
 		async getLayout(e) {
-			return l(I(s(e), "layout.tsx"));
+			return l(z(s(e), "layout.tsx"));
 		},
 		async getError(e) {
-			return l(I(s(e), "error.tsx"));
+			return l(z(s(e), "error.tsx"));
 		},
 		async getPending(e) {
-			return l(I(s(e), "loading.tsx"));
+			return l(z(s(e), "loading.tsx"));
 		},
 		async getHelpers() {
 			return await l("@voltro/web/ssr");
@@ -465,99 +487,106 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			await a.close();
 		}
 	};
-}, $ = async (t) => {
-	let r = ye(), a = await y(t);
-	if (!a) return {
+}, Ue = async (t) => {
+	let r = Ce(), s = await S(t);
+	if (!s) return {
 		ran: !1,
 		exitCode: 0
 	};
-	if (a.type !== "web") return K.error("only web apps are supported by `voltro start`"), {
+	if (s.type !== "web") return Y.error("only web apps are supported by `voltro start`"), {
 		ran: !0,
 		exitCode: 1
 	};
-	let { resolved: o } = await ie({
-		rawEnv: a.env,
+	let { resolved: l } = await w({
+		rawEnv: s.env,
 		appType: "web",
 		root: t,
-		log: K,
+		log: Y,
 		generateTypes: !1
-	}), s = o.publicValues;
+	}), u = l.publicValues;
 	r.mark("config");
-	let u = c();
-	E(u), K.info("booting voltro start", { app: a.name ?? "(unnamed)" });
-	let f = n({
+	let d = _();
+	k(d), Y.info("booting voltro start", { app: s.name ?? "(unnamed)" });
+	let p = n({
 		kind: "web",
-		configPort: a.port,
+		configPort: s.port,
 		env: process.env,
-		dashboardPin: process.env[S] === "1"
+		dashboardPin: process.env[se] === "1"
 	});
-	for (let e of f.warnings) K.warn(e);
-	let m = f.port, _ = I(t, ".framework"), x = I(_, "dist"), te = I(x, "index.html");
-	if (!await X(te)) return K.error("no built dist found — run `voltro build` first", { distDir: x }), {
+	for (let e of p.warnings) Y.warn(e);
+	let m = p.port, h = z(t, ".framework"), b = z(h, "dist"), ie = z(b, "index.html");
+	if (!await Q(ie)) return Y.error("no built dist found — run `voltro build` first", { distDir: b }), {
 		ran: !0,
 		exitCode: 1
 	};
-	let C = a.name ?? "unnamed", w = ge("web", C, m), T = _e(C);
-	await pe({
-		id: w,
-		name: C,
+	let T = s.name ?? "unnamed", E = be("web", T, m), O = xe(T);
+	await _e({
+		id: E,
+		name: T,
 		kind: "web",
 		url: `http://localhost:${m}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: T.path
+		logFile: O.path
 	}).catch(() => {});
-	let ae = I(x, "_voltro", "shell.html"), N = await X(ae) ? await R.readFile(ae, "utf8") : await R.readFile(te, "utf8"), F = await b(t, a), be = ne(F[0]), xe = F[0]?.name, L, z = null, Se = process.env.SSR_CACHE === "postgres";
-	if (Se && O()) z = new (await (import("pg"))).default.Client(D()), await z.connect(), L = Oe({ client: z }), K.info("isr cache backend: postgres", { table: "voltro_isr_cache" });
-	else if (Se) {
+	let A = z(b, "_voltro", "shell.html"), j = await Q(A) ? await B.readFile(A, "utf8") : await B.readFile(ie, "utf8"), L = await C(t, s), he = D(L[0]), we = L[0]?.name, Te = /* @__PURE__ */ new Set(), Ee = (e) => {
+		Te.has(e.name) || (Te.add(e.name), Y.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
+			cookie: e.name,
+			hint: "If your IdP client reads this from `document.cookie` (Supabase's `createBrowserClient` does), pass `httpOnly: false`. Otherwise the SSR render succeeds and the user is signed out at the first client-side call. Set `httpOnly: true` explicitly to silence this."
+		}));
+	}, V = await i(t);
+	V.length > 0 && Y.info(`middleware.ts loaded — ${V.length} middleware(s): ` + V.map((e) => e.exportName).join(", "));
+	let H, U = null, W = process.env.SSR_CACHE === "postgres";
+	if (W && P()) U = new (await (import("pg"))).default.Client(N()), await U.connect(), H = Me({ client: U }), Y.info("isr cache backend: postgres", { table: "voltro_isr_cache" });
+	else if (W) {
 		let t = "SSR_CACHE=postgres, but nothing in the environment names a database (looked for DB_URL, DB_PRIMARY_URL, DB_DIRECT_URL, DB_MIGRATE_URL, DB_HOST, PG_HOST).";
-		if (e()) throw K.fatal(`${t} Refusing to fall back to the per-process memory cache: it is not shared between instances and does not survive a restart, so the pages this process serves would differ from its replicas' with nothing to indicate it.`), Error("[voltro start] SSR_CACHE=postgres with no database configured");
-		L = de(), K.warn(`${t} Falling back to the per-process memory cache — this would be a hard failure in production.`);
-	} else L = de(), K.info("isr cache backend: memory (per-process)", { hint: "set SSR_CACHE=postgres for persistent storage" });
-	await v(t, a, F, s);
-	let B = I(t, "src", "pages"), { pages: V, dirs: H } = await oe(B), U = Ne(V);
-	r.mark("scan");
-	let W = I(x, "server", "ssrEntry.js"), De = await X(W);
-	if (!De && process.env.NODE_ENV === "production") throw K.fatal(`production \`voltro start\` requires a precompiled SSR bundle at ${W} but it is missing. Run \`voltro build\` before serving — production renders from the bundle and never compiles on demand.`), Error(`[voltro start] missing SSR bundle at ${W}`);
-	let G = De ? await Fe(W) : await Ie(t, _);
-	K.info(`ssr loader: ${G.kind}`, {
-		kind: G.kind,
-		...G.kind === "middleware" ? { hint: "no pre-built SSR bundle found; run `voltro build` to enable bundle mode" } : {}
+		if (e()) throw Y.fatal(`${t} Refusing to fall back to the per-process memory cache: it is not shared between instances and does not survive a restart, so the pages this process serves would differ from its replicas' with nothing to indicate it.`), Error("[voltro start] SSR_CACHE=postgres with no database configured");
+		H = R(), Y.warn(`${t} Falling back to the per-process memory cache — this would be a hard failure in production.`);
+	} else H = R(), Y.info("isr cache backend: memory (per-process)", { hint: "set SSR_CACHE=postgres for persistent storage" });
+	await x(t, s, L, u);
+	let Ae = z(t, "src", "pages"), { pages: G, dirs: K } = await M(Ae), q = Re(G);
+	oe(V, q.map((e) => e.pattern)), r.mark("scan");
+	let J = z(b, "server", "ssrEntry.js"), Pe = await Q(J);
+	if (!Pe && process.env.NODE_ENV === "production") throw Y.fatal(`production \`voltro start\` requires a precompiled SSR bundle at ${J} but it is missing. Run \`voltro build\` before serving — production renders from the bundle and never compiles on demand.`), Error(`[voltro start] missing SSR bundle at ${J}`);
+	let X = Pe ? await Ve(J) : await He(t, h);
+	Y.info(`ssr loader: ${X.kind}`, {
+		kind: X.kind,
+		...X.kind === "middleware" ? { hint: "no pre-built SSR bundle found; run `voltro build` to enable bundle mode" } : {}
 	}), r.mark("provider");
-	let Ae = G.getPageMeta?.(), q = /* @__PURE__ */ new Map(), J = 0;
-	for (let e of V) {
-		let t = Ae?.[e.pattern];
+	let Fe = X.getPageMeta?.(), Z = /* @__PURE__ */ new Map(), Le = 0;
+	for (let e of G) {
+		let t = Fe?.[e.pattern];
 		if (t) {
-			q.set(e.pattern, t);
+			Z.set(e.pattern, t);
 			continue;
 		}
 		try {
-			let t = await G.getPage(e.pattern, e.file);
-			q.set(e.pattern, le(t, e.file)), J++;
+			let t = await X.getPage(e.pattern, e.file);
+			Z.set(e.pattern, fe(t, e.file)), Le++;
 		} catch (t) {
-			K.warn("failed to load page metadata", { pattern: e.pattern }, t);
+			Y.warn("failed to load page metadata", { pattern: e.pattern }, t);
 		}
 	}
-	K.info(`registered ${q.size} route(s)`, {
-		count: q.size,
-		fromManifest: q.size - J,
-		fromModules: J
+	Y.info(`registered ${Z.size} route(s)`, {
+		count: Z.size,
+		fromManifest: Z.size - Le,
+		fromModules: Le
 	}), r.mark("routes");
-	let Y = /* @__PURE__ */ new Set();
-	for (let e of U) q.get(e.pattern)?.renderMode === "spa" && re(H, e.dirChain).some((e) => e.hasLayout) && Y.add(e.pattern);
-	Y.size > 0 && K.info(`${Y.size} spa route(s) render an SSR layout shell`, { patterns: [...Y] });
-	let Me = /* @__PURE__ */ new Map();
-	for (let [e, t] of q) t.cacheInvalidatesOn.length > 0 && Me.set(e, t.cacheInvalidatesOn);
-	let Q = /* @__PURE__ */ new Map();
-	for (let e of U) Q.set(e.pattern, e.regex);
-	let $ = Ee({
-		cache: L,
-		tableSubscriptionsByPattern: Me,
-		regexByPattern: Q
+	let $ = /* @__PURE__ */ new Set();
+	for (let e of q) Z.get(e.pattern)?.renderMode === "spa" && ae(K, e.dirChain).some((e) => e.hasLayout) && $.add(e.pattern);
+	$.size > 0 && Y.info(`${$.size} spa route(s) render an SSR layout shell`, { patterns: [...$] });
+	let Ue = /* @__PURE__ */ new Map();
+	for (let [e, t] of Z) t.cacheInvalidatesOn.length > 0 && Ue.set(e, t.cacheInvalidatesOn);
+	let We = /* @__PURE__ */ new Map();
+	for (let e of q) We.set(e.pattern, e.regex);
+	let Ge = je({
+		cache: H,
+		tableSubscriptionsByPattern: Ue,
+		regexByPattern: We
 	});
-	await $.start(), r.mark("cdc");
-	let Le = ve(), Re = V.map((e) => {
-		let t = q.get(e.pattern);
+	await Ge.start(), r.mark("cdc");
+	let Ke = Se(), qe = G.map((e) => {
+		let t = Z.get(e.pattern);
 		return {
 			pattern: e.pattern,
 			file: e.file,
@@ -572,20 +601,20 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			hasMeta: t?.hasMeta ?? !1,
 			hasGetStaticPaths: t?.hasGetStaticPaths ?? !1
 		};
-	}), ze = H.map((e) => ({
+	}), Je = K.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), Be = z ? "postgres" : "memory", Ve = {
+	})), Ye = U ? "postgres" : "memory", Xe = {
 		kind: "web",
 		meta: {
-			name: a.name ?? "(unnamed)",
-			voltroVersion: ke,
+			name: s.name ?? "(unnamed)",
+			voltroVersion: Ne,
 			port: m,
 			mode: "start",
-			apis: Object.entries(a.apis ?? {}).map(([e, t]) => {
+			apis: Object.entries(s.apis ?? {}).map(([e, t]) => {
 				let n = {
 					name: e,
 					package: t.package
@@ -593,10 +622,10 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				return t.url !== void 0 && (n.url = t.url), n;
 			})
 		},
-		routes: Re,
-		dirs: ze,
+		routes: qe,
+		dirs: Je,
 		cache: () => {
-			let e = Date.now(), t = L.snapshot().map(([t, n]) => ({
+			let e = Date.now(), t = H.snapshot().map(([t, n]) => ({
 				key: t,
 				renderedAt: n.renderedAt,
 				expiresAt: n.expiresAt,
@@ -607,16 +636,16 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				staleWhileRevalidateMs: n.staleWhileRevalidateMs
 			}));
 			return {
-				backend: Be,
-				size: L.size(),
+				backend: Ye,
+				size: H.size(),
 				entries: t
 			};
 		},
-		metrics: () => we()
-	}, He = async (e, n) => {
+		metrics: () => Oe()
+	}, Ze = async (e, n) => {
 		let r = e.split("?")[0] ?? "/";
-		if (a.name === "voltroDashboard" && r === "/api/dashboard/registry") try {
-			let e = await me();
+		if (s.name === "voltroDashboard" && r === "/api/dashboard/registry") try {
+			let e = await ve();
 			return {
 				status: 200,
 				headers: { "content-type": "application/json; charset=utf-8" },
@@ -629,7 +658,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				body: `registry read error: ${e.message}`
 			};
 		}
-		if (a.name === "voltroDashboard" && r === "/api/dashboard/config") {
+		if (s.name === "voltroDashboard" && r === "/api/dashboard/config") {
 			let e = process.env.VOLTRO_DASHBOARD_APPS, t = [];
 			if (e && e.trim().length > 0) {
 				let n;
@@ -659,18 +688,18 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			};
 		}
 		if (r === "/_voltro/inspect/logs") {
-			let t = l(e, i(), n);
+			let t = re(e, ee(), n);
 			return {
 				status: t.status,
 				headers: {
 					"content-type": t.contentType,
-					...A(n.origin)
+					...I(n.origin)
 				},
 				body: t.body
 			};
 		}
 		if (r !== "/_voltro/inspect/stream") {
-			let t = se(e, Ve, n);
+			let t = le(e, Xe, n);
 			if (t !== null) return {
 				status: t.status,
 				headers: {
@@ -680,71 +709,96 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				body: t.body
 			};
 		}
-		let o = Z(r, U), s = o ? q.get(o.route.pattern)?.renderMode : void 0, c = s === "ssr" || s === "isr" || (o ? Y.has(o.route.pattern) : !1), d = r === "/" ? I(x, "index.html") : I(x, r.replace(/^\//, ""), "index.html");
-		if (!c && await X(d)) return {
-			status: 200,
-			headers: { "content-type": "text/html; charset=utf-8" },
-			body: await R.readFile(d)
-		};
+		let i = ze(r, q), c = i ? Z.get(i.route.pattern)?.renderMode : void 0, l = c === "ssr" || c === "isr" || (i ? $.has(i.route.pattern) : !1), u = [];
+		if (!l && V.length > 0) {
+			let t = a(V, {
+				route: void 0,
+				pathname: r
+			});
+			if (t !== void 0) {
+				let i = await o(t, {
+					pathname: r,
+					search: e.slice(r.length),
+					headers: n,
+					cookies: ne(n.cookie),
+					route: void 0
+				});
+				u.push(...i.setCookies);
+			}
+		}
+		let p = (e) => u.length === 0 ? e : {
+			...e,
+			"set-cookie": u.map(te)
+		}, m = r === "/" ? z(b, "index.html") : z(b, r.replace(/^\//, ""), "index.html");
+		if (!l && await Q(m)) {
+			let e = await B.readFile(m);
+			return {
+				status: 200,
+				headers: p({ "content-type": "text/html; charset=utf-8" }),
+				body: e
+			};
+		}
 		if (/\.[a-z0-9]+$/i.test(r)) {
-			let e = I(x, r.replace(/^\//, ""));
-			if (await X(e)) {
-				let t = await R.readFile(e);
+			let e = z(b, r.replace(/^\//, ""));
+			if (await Q(e)) {
+				let t = await B.readFile(e);
 				return {
 					status: 200,
-					headers: { "content-type": je(e) },
+					headers: p({ "content-type": Ie(e) }),
 					body: t
 				};
 			}
 		}
-		let f = Z(r, U);
-		if (!f) return {
+		let h = ze(r, q);
+		if (!h) return {
 			status: 404,
-			headers: { "content-type": "text/plain" },
+			headers: p({ "content-type": "text/plain" }),
 			body: "not found"
 		};
-		let p = q.get(f.route.pattern), m = n["x-tenant"] ?? "anonymous", h = (await G.getHelpers()).i18n?.resolve(n.cookie, n["accept-language"])?.locale, g = P(r, {
-			...p?.tenantAware ? { tenant: m } : {},
-			...h ? { locale: h } : {}
-		}), _ = L.get(g), v = Date.now();
-		if (_ && fe(_, v)) return u.emit("cache", {
+		let g = Z.get(h.route.pattern), _ = n["x-tenant"] ?? "anonymous", v = (await X.getHelpers()).i18n?.resolve(n.cookie, n["accept-language"])?.locale, y = me(r, {
+			...g?.tenantAware ? { tenant: _ } : {},
+			...v ? { locale: v } : {}
+		}), x = H.get(y), S = Date.now();
+		if (x && ge(x, S)) return d.emit("cache", {
 			kind: "HIT",
-			key: g,
-			ageMs: v - _.renderedAt
+			key: y,
+			ageMs: S - x.renderedAt
 		}), {
 			status: 200,
 			headers: {
 				"content-type": "text/html; charset=utf-8",
 				"x-voltro-rendered-by": "isr",
 				"x-voltro-cache": "HIT",
-				"x-voltro-cache-key": g,
-				"x-voltro-cache-age-ms": String(v - _.renderedAt)
+				"x-voltro-cache-key": y,
+				"x-voltro-cache-age-ms": String(S - x.renderedAt)
 			},
-			body: _.html
+			body: x.html
 		};
-		if (_ && ue(_, v)) return u.emit("cache", {
+		if (x && pe(x, S)) return d.emit("cache", {
 			kind: "STALE",
-			key: g,
-			ageMs: v - _.renderedAt
+			key: y,
+			ageMs: S - x.renderedAt
 		}), (async () => {
 			try {
-				let i = await Pe({
-					provider: G,
+				let i = await Be({
+					provider: X,
 					root: t,
-					route: f.route,
-					params: f.params,
+					route: h.route,
+					params: h.params,
 					pathname: r,
-					dirs: H,
-					shellTemplate: N,
+					dirs: K,
+					shellTemplate: j,
 					requestHeaders: n,
-					apiOrigin: be,
-					apiName: xe,
+					apiOrigin: he,
+					apiName: we,
+					middlewares: V,
+					onCookieWarning: Ee,
 					requestUrl: e,
 					buffered: !0
 				});
 				if (i && "html" in i && i.renderMode === "isr" && i.revalidateMs !== null) {
-					let e = q.get(f.route.pattern)?.staleWhileRevalidateMs ?? 0, t = Date.now();
-					L.set(g, {
+					let e = Z.get(h.route.pattern)?.staleWhileRevalidateMs ?? 0, t = Date.now();
+					H.set(y, {
 						html: i.html,
 						renderedAt: t,
 						expiresAt: t + i.revalidateMs,
@@ -754,7 +808,7 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 					});
 				}
 			} catch (e) {
-				K.warn("background SWR refresh failed", { url: r }, e);
+				Y.warn("background SWR refresh failed", { url: r }, e);
 			}
 		})(), {
 			status: 200,
@@ -762,23 +816,25 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				"content-type": "text/html; charset=utf-8",
 				"x-voltro-rendered-by": "isr",
 				"x-voltro-cache": "STALE",
-				"x-voltro-cache-key": g,
-				"x-voltro-cache-age-ms": String(v - _.renderedAt)
+				"x-voltro-cache-key": y,
+				"x-voltro-cache-age-ms": String(S - x.renderedAt)
 			},
-			body: _.html
+			body: x.html
 		};
 		try {
-			let i = await Pe({
-				provider: G,
+			let i = await Be({
+				provider: X,
 				root: t,
-				route: f.route,
-				params: f.params,
+				route: h.route,
+				params: h.params,
 				pathname: r,
-				dirs: H,
-				shellTemplate: N,
+				dirs: K,
+				shellTemplate: j,
 				requestHeaders: n,
-				apiOrigin: be,
-				apiName: xe,
+				apiOrigin: he,
+				apiName: we,
+				middlewares: V,
+				onCookieWarning: Ee,
 				requestUrl: e
 			});
 			if (!i) return {
@@ -787,7 +843,11 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 					"content-type": "text/html; charset=utf-8",
 					"x-voltro-rendered-by": "spa-fallback"
 				},
-				body: N
+				body: j
+			};
+			let a = i.setCookies ?? [], o = (e) => a.length === 0 ? e : {
+				...e,
+				"set-cookie": a.map(te)
 			};
 			if ("stream" in i) return {
 				status: 200,
@@ -797,49 +857,49 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			};
 			if ("control" in i) return i.control === "redirect" ? {
 				status: i.status,
-				headers: {
+				headers: o({
 					location: i.location,
 					"x-voltro-rendered-by": "loader-redirect"
-				},
+				}),
 				body: ""
 			} : {
 				status: 404,
-				headers: {
+				headers: o({
 					"content-type": "text/plain; charset=utf-8",
 					"x-voltro-rendered-by": "loader-not-found"
-				},
+				}),
 				body: "not found"
 			};
-			let a = {
+			let s = o({
 				"content-type": "text/html; charset=utf-8",
 				"x-voltro-rendered-by": i.renderMode
-			};
+			});
 			if (i.renderMode === "isr" && i.revalidateMs !== null) {
-				let e = Date.now(), t = q.get(f.route.pattern)?.staleWhileRevalidateMs ?? 0;
-				L.set(g, {
+				let e = Date.now(), t = Z.get(h.route.pattern)?.staleWhileRevalidateMs ?? 0;
+				H.set(y, {
 					html: i.html,
 					renderedAt: e,
 					expiresAt: e + i.revalidateMs,
 					servableUntil: e + i.revalidateMs + t,
 					revalidateMs: i.revalidateMs,
 					staleWhileRevalidateMs: t
-				}), a["x-voltro-cache"] = "MISS", a["x-voltro-cache-key"] = g, a["x-voltro-cache-revalidate-ms"] = String(i.revalidateMs), t > 0 && (a["x-voltro-cache-swr-ms"] = String(t)), u.emit("cache", {
+				}), s["x-voltro-cache"] = "MISS", s["x-voltro-cache-key"] = y, s["x-voltro-cache-revalidate-ms"] = String(i.revalidateMs), t > 0 && (s["x-voltro-cache-swr-ms"] = String(t)), d.emit("cache", {
 					kind: "MISS",
-					key: g,
+					key: y,
 					revalidateMs: i.revalidateMs,
 					swrMs: t
 				});
-			} else i.renderMode === "isr" && (a["x-voltro-cache"] = "BYPASS", u.emit("cache", {
+			} else i.renderMode === "isr" && (s["x-voltro-cache"] = "BYPASS", d.emit("cache", {
 				kind: "BYPASS",
-				key: g
+				key: y
 			}));
 			return {
 				status: 200,
-				headers: a,
+				headers: s,
 				body: i.html
 			};
 		} catch (e) {
-			return K.error("render error", { url: r }, e), ee(e) ? {
+			return Y.error("render error", { url: r }, e), f(e) ? {
 				status: 500,
 				headers: {
 					"content-type": "text/plain; charset=utf-8",
@@ -852,56 +912,56 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				body: "server error"
 			};
 		}
-	}, Ue = !1, We = Te(async (e, t) => {
+	}, Qe = !1, $e = ke(async (e, t) => {
 		let n = e.url ?? "/", r = Date.now(), i = {};
 		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (i[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
-		let o = n.split("?")[0] ?? "/", s = (e.method ?? "GET").toUpperCase();
-		if (o === "/internal/liveness") {
+		let a = n.split("?")[0] ?? "/", o = (e.method ?? "GET").toUpperCase();
+		if (a === "/internal/liveness") {
 			t.writeHead(200, {
 				"content-type": "text/plain",
 				"cache-control": "no-store"
 			}), t.end("ok");
 			return;
 		}
-		if (o === "/internal/readiness") {
-			let e = Ue ? 200 : 503;
+		if (a === "/internal/readiness") {
+			let e = Qe ? 200 : 503;
 			t.writeHead(e, {
 				"content-type": "text/plain",
 				"cache-control": "no-store"
-			}), t.end(Ue ? "ready" : "not-ready");
+			}), t.end(Qe ? "ready" : "not-ready");
 			return;
 		}
-		if (s === "OPTIONS" && o.startsWith("/_voltro/inspect")) {
-			let e = A(i.origin);
+		if (o === "OPTIONS" && a.startsWith("/_voltro/inspect")) {
+			let e = I(i.origin);
 			t.writeHead(204, e), t.end();
 			return;
 		}
-		if (a.name === "voltroDashboard" && o === "/api/dashboard/proxy") {
+		if (s.name === "voltroDashboard" && a === "/api/dashboard/proxy") {
 			let r = new URL(n, "http://x").searchParams.get("target");
 			if (!r) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
 				return;
 			}
-			if (!ce(r)) {
+			if (!de(r)) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
 				return;
 			}
 			try {
 				let n = { accept: i.accept ?? "application/json" }, a = i.authorization;
-				a ? n.authorization = Array.isArray(a) ? a[0] : a : M(r) && process.env.VOLTRO_INSPECT_TOKEN && (n.authorization = `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}`);
-				let o;
-				if (s && s !== "GET" && s !== "HEAD") {
+				a ? n.authorization = Array.isArray(a) ? a[0] : a : ue(r) && process.env.VOLTRO_INSPECT_TOKEN && (n.authorization = `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}`);
+				let s;
+				if (o && o !== "GET" && o !== "HEAD") {
 					let t = [];
 					for await (let n of e) t.push(n);
-					o = Buffer.concat(t);
+					s = Buffer.concat(t);
 					let r = i["content-type"];
 					r && (n["content-type"] = Array.isArray(r) ? r[0] : r);
 				}
 				let c = await fetch(r, {
 					redirect: "manual",
-					method: s,
+					method: o,
 					headers: n,
-					...o ? { body: new Uint8Array(o.buffer, o.byteOffset, o.byteLength) } : {}
+					...s ? { body: new Uint8Array(s.buffer, s.byteOffset, s.byteLength) } : {}
 				}), l = Buffer.from(await c.arrayBuffer());
 				t.writeHead(c.status, {
 					"content-type": c.headers.get("content-type") ?? "application/octet-stream",
@@ -912,20 +972,20 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}
 			return;
 		}
-		if (a.name === "voltroDashboard" && o === "/api/dashboard/proxy/stream") {
+		if (s.name === "voltroDashboard" && a === "/api/dashboard/proxy/stream") {
 			let r = new URL(n, "http://x").searchParams.get("target");
 			if (!r) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
 				return;
 			}
-			if (!ce(r)) {
+			if (!de(r)) {
 				t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
 				return;
 			}
 			let a = new AbortController();
 			e.on("close", () => a.abort()), t.on("close", () => a.abort());
 			try {
-				let e = i.authorization ?? (M(r) && process.env.VOLTRO_INSPECT_TOKEN ? `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}` : void 0), n = await fetch(r, {
+				let e = i.authorization ?? (ue(r) && process.env.VOLTRO_INSPECT_TOKEN ? `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}` : void 0), n = await fetch(r, {
 					redirect: "manual",
 					method: "GET",
 					headers: {
@@ -959,16 +1019,16 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			}
 			return;
 		}
-		if (o === "/_voltro/inspect/stream") {
-			let n = A(i.origin);
-			if (k()) {
+		if (a === "/_voltro/inspect/stream") {
+			let n = I(i.origin);
+			if (F()) {
 				t.writeHead(503, {
 					"content-type": "application/json",
 					...n
 				}), t.end(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }));
 				return;
 			}
-			let r = j(i, "GET");
+			let r = ce(i, "GET");
 			if (!r.ok) {
 				t.writeHead(401, {
 					"content-type": "application/json",
@@ -986,11 +1046,11 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 				"x-accel-buffering": "no",
 				...n
 			}), t.flushHeaders(), t.write("retry: 5000\n\n");
-			for (let e of u.buffered()) t.write(g(e));
-			let a = u.subscribe((e) => {
-				t.write(g(e));
+			for (let e of d.buffered()) t.write(v(e));
+			let a = d.subscribe((e) => {
+				t.write(v(e));
 			}), o = setInterval(() => {
-				t.write(h());
+				t.write(y());
 			}, 15e3), s = () => {
 				clearInterval(o), a();
 			};
@@ -998,18 +1058,18 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			return;
 		}
 		try {
-			let e = await He(n, i);
-			if (e.stream ? e.stream(t) : (t.writeHead(e.status, e.headers), t.end(e.body)), !o.startsWith("/_voltro/inspect")) {
+			let e = await Ze(n, i);
+			if (e.stream ? e.stream(t) : (t.writeHead(e.status, e.headers), t.end(e.body)), !a.startsWith("/_voltro/inspect")) {
 				let t = Date.now() - r;
-				u.emit("request", {
-					url: o,
+				d.emit("request", {
+					url: a,
 					status: e.status,
 					durationMs: t,
 					renderedBy: e.headers["x-voltro-rendered-by"],
 					cache: e.headers["x-voltro-cache"]
 				});
-				let n = Z(o, U)?.route.pattern ?? (e.status === 404 ? "<unmatched>" : "<asset>");
-				Le.record({
+				let n = ze(a, q)?.route.pattern ?? (e.status === 404 ? "<unmatched>" : "<asset>");
+				Ke.record({
 					kind: "request",
 					tag: n,
 					durationMs: t,
@@ -1020,71 +1080,71 @@ CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
 			t.writeHead(500, { "content-type": "text/plain" }), t.end(`internal error: ${e.message}`);
 		}
 	});
-	await new Promise((e) => We.listen(m, "::", e)), Ue = !0, r.mark("ready"), K.info(`listening on http://localhost:${m}`, {
+	await new Promise((e) => $e.listen(m, "::", e)), Qe = !0, r.mark("ready"), Y.info(`listening on http://localhost:${m}`, {
 		port: m,
-		distDir: x
-	}), K.debug("dynamic + ssr/isr routes resolve via SSR loader");
+		distDir: b
+	}), Y.debug("dynamic + ssr/isr routes resolve via SSR loader");
 	try {
-		await pe({
-			id: w,
-			name: C,
+		await _e({
+			id: E,
+			name: T,
 			kind: "web",
 			url: `http://localhost:${m}`,
 			pid: process.pid,
 			status: "live",
-			logFile: T.path
+			logFile: O.path
 		});
-		let e = p(t);
+		let e = c(t);
 		if (e) {
-			let t = await d({ dashboardAppPath: e });
-			t.status === "launched" ? K.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && K.debug(`dashboard already running on :${t.port}`, { port: t.port });
+			let t = await g({ dashboardAppPath: e });
+			t.status === "launched" ? Y.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && Y.debug(`dashboard already running on :${t.port}`, { port: t.port });
 		}
 		setInterval(() => {
-			pe({
-				id: w,
-				name: C,
+			_e({
+				id: E,
+				name: T,
 				kind: "web",
 				url: `http://localhost:${m}`,
 				pid: process.pid,
 				status: "live",
-				logFile: T.path
+				logFile: O.path
 			}).catch(() => {});
 		}, 1e4).unref();
 	} catch (e) {
-		K.warn("runtime-registry write failed", {}, e);
+		Y.warn("runtime-registry write failed", {}, e);
 	}
-	Ce({
-		app: a.name ?? "unnamed",
+	De({
+		app: s.name ?? "unnamed",
 		kind: "web",
 		url: `http://localhost:${m}`,
 		bootMs: r.total()
 	});
-	let Ge = r.phaseBreakdown();
-	K.info(`start: ready in ${r.total()}ms`, {
+	let et = r.phaseBreakdown();
+	Y.info(`start: ready in ${r.total()}ms`, {
 		bootMs: r.total(),
-		...Ge ? { phases: Ge } : {}
+		...et ? { phases: et } : {}
 	});
-	let Ke = !1, qe = (e) => async () => {
-		if (!Ke) {
-			if (Ke = !0, K.info(`received ${e}, shutting down`, { signal: e }), We.close(), await $.stop(), z) try {
-				await z.end();
+	let tt = !1, nt = (e) => async () => {
+		if (!tt) {
+			if (tt = !0, Y.info(`received ${e}, shutting down`, { signal: e }), $e.close(), await Ge.stop(), U) try {
+				await U.end();
 			} catch {}
-			await G.close(), await he(w), await T.dispose(), process.exit(0);
+			await X.close(), await ye(E), await O.dispose(), process.exit(0);
 		}
 	};
-	process.on("SIGINT", qe("SIGINT")), process.on("SIGTERM", qe("SIGTERM"));
-	let Je = process.ppid;
-	if (Je > 1) {
+	process.on("SIGINT", nt("SIGINT")), process.on("SIGTERM", nt("SIGTERM"));
+	let rt = process.ppid;
+	if (rt > 1) {
 		let e = setInterval(() => {
-			(process.ppid !== Je || process.ppid === 1) && (clearInterval(e), qe("SIGTERM")());
+			(process.ppid !== rt || process.ppid === 1) && (clearInterval(e), nt("SIGTERM")());
 		}, 2e3);
 		e.unref();
 	}
 	return new Promise(() => {});
-}, Le = async (e) => {
+}, We = async (e) => {
 	t("start");
-	let n = e.find((e) => !e.startsWith("-")) ?? process.cwd(), r = await $(L(n));
-	return r.ran ? r.exitCode : (K.error("no web app found at this path"), 1);
+	let n = e.find((e) => !e.startsWith("-")) ?? process.cwd(), r = await Ue(Ee(n));
+	return r.ran ? r.exitCode : (Y.error("no web app found at this path"), 1);
 };
 //#endregion
-export { $ as n, Le as t };
+export { Ue as n, We as t };