@voltro/cli 0.4.0 → 0.6.0

package/templates/apps/frontend-spa/package.json

@@ -11,17 +11,17 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@voltro/cli": "0.4.0",
-    "@voltro/client": "0.4.0",
-    "@voltro/env": "0.4.0",
-    "@voltro/i18n": "0.4.0",
-    "@voltro/ui-shadcn": "0.4.0",
-    "@voltro/web": "0.4.0",
+    "@voltro/cli": "0.6.0",
+    "@voltro/client": "0.6.0",
+    "@voltro/env": "0.6.0",
+    "@voltro/i18n": "0.6.0",
+    "@voltro/ui-shadcn": "0.6.0",
+    "@voltro/web": "0.6.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@voltro/devtools": "0.4.0",
+    "@voltro/devtools": "0.6.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "typescript": "^5.7.0",

package/templates/apps/frontend-ssr/package.json

@@ -11,17 +11,17 @@
     "test": "voltro test"
   },
   "dependencies": {
-    "@voltro/cli": "0.4.0",
-    "@voltro/client": "0.4.0",
-    "@voltro/env": "0.4.0",
-    "@voltro/i18n": "0.4.0",
-    "@voltro/ui-shadcn": "0.4.0",
-    "@voltro/web": "0.4.0",
+    "@voltro/cli": "0.6.0",
+    "@voltro/client": "0.6.0",
+    "@voltro/env": "0.6.0",
+    "@voltro/i18n": "0.6.0",
+    "@voltro/ui-shadcn": "0.6.0",
+    "@voltro/web": "0.6.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@voltro/devtools": "0.4.0",
+    "@voltro/devtools": "0.6.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "typescript": "^5.7.0",

package/templates/apps/frontend-ssr-api/package.json

@@ -11,18 +11,18 @@
     "test": "voltro test"
   },
   "dependencies": {
-    "@{{projectName}}/api": "0.4.0",
-    "@voltro/cli": "0.4.0",
-    "@voltro/client": "0.4.0",
-    "@voltro/env": "0.4.0",
-    "@voltro/i18n": "0.4.0",
-    "@voltro/ui-shadcn": "0.4.0",
-    "@voltro/web": "0.4.0",
+    "@{{projectName}}/api": "0.6.0",
+    "@voltro/cli": "0.6.0",
+    "@voltro/client": "0.6.0",
+    "@voltro/env": "0.6.0",
+    "@voltro/i18n": "0.6.0",
+    "@voltro/ui-shadcn": "0.6.0",
+    "@voltro/web": "0.6.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@voltro/devtools": "0.4.0",
+    "@voltro/devtools": "0.6.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "typescript": "^5.7.0",

package/templates/apps/frontend-static-blog/package.json

@@ -11,16 +11,16 @@
     "test": "voltro test"
   },
   "dependencies": {
-    "@voltro/cli": "0.4.0",
-    "@voltro/client": "0.4.0",
-    "@voltro/env": "0.4.0",
-    "@voltro/i18n": "0.4.0",
-    "@voltro/web": "0.4.0",
+    "@voltro/cli": "0.6.0",
+    "@voltro/client": "0.6.0",
+    "@voltro/env": "0.6.0",
+    "@voltro/i18n": "0.6.0",
+    "@voltro/web": "0.6.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@voltro/devtools": "0.4.0",
+    "@voltro/devtools": "0.6.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "typescript": "^5.7.0",

package/templates/baselines/bare/.env.example

@@ -9,9 +9,16 @@
 # cloud provider URL).
 DB_URL=postgres://app:app@localhost:5432/{{projectName}}
 
-# Session signing secret. The plugin-auth handlers refuse to mint
-# sessions without it. Rotate before shipping.
-VOLTRO_SESSION_SECRET=dev-only-secret-please-rotate-in-prod
+# Session signing secret — NO VALUE SHIPS HERE ON PURPOSE.
+#
+# `voltro dev` mints a unique one for this project into a gitignored
+# .env.local on first boot, so local development needs nothing from you.
+# A shipped placeholder would be a signing key published to everyone who
+# downloads this template, making every session in your deployment forgeable.
+#
+# Your DEPLOYMENT needs its own — `voltro serve` refuses to start without it:
+#     voltro secret generate session
+VOLTRO_SESSION_SECRET=
 
 # ─── Optional backends — ALL OFF by default; uncomment to activate ───────────
 # The cache and the durable KV each run on a zero-infra default (in-process

package/templates/baselines/compose/.env.example

@@ -12,8 +12,16 @@
 # the host is `localhost` and port stays 5433.
 DB_URL=postgres://app:app@localhost:5433/{{projectName}}
 
-# Used by prod:up — required, no dev fallback.
-VOLTRO_SESSION_SECRET=dev-only-secret-please-rotate-in-prod
+# Session signing secret — NO VALUE SHIPS HERE ON PURPOSE.
+#
+# `voltro dev` mints a unique one for this project into a gitignored
+# .env.local on first boot, so local development needs nothing from you.
+# A shipped placeholder would be a signing key published to everyone who
+# downloads this template, making every session in your deployment forgeable.
+#
+# Your DEPLOYMENT needs its own — `voltro serve` refuses to start without it:
+#     voltro secret generate session
+VOLTRO_SESSION_SECRET=
 
 # Used by docker-compose.prod.yml — the prod postgres uses a
 # different password from dev (intentional: avoid `db:reset` blowing

package/templates/baselines/compose-mariadb/.env.example

@@ -24,8 +24,16 @@ S3_ACCESS_KEY_ID=minioadmin
 S3_SECRET_ACCESS_KEY=minioadmin
 S3_FORCE_PATH_STYLE=1
 
-# HMAC key for signed sessions — REQUIRED by prod:up (no dev fallback).
-VOLTRO_SESSION_SECRET=dev-only-secret-please-rotate-in-prod
+# Session signing secret — NO VALUE SHIPS HERE ON PURPOSE.
+#
+# `voltro dev` mints a unique one for this project into a gitignored
+# .env.local on first boot, so local development needs nothing from you.
+# A shipped placeholder would be a signing key published to everyone who
+# downloads this template, making every session in your deployment forgeable.
+#
+# Your DEPLOYMENT needs its own — `voltro serve` refuses to start without it:
+#     voltro secret generate session
+VOLTRO_SESSION_SECRET=
 
 # Used by docker-compose.prod.yml — the prod DB uses a different root
 # password from dev (avoids `db:reset` blowing away a prod-shape dataset).

package/templates/baselines/helm/.env.example

@@ -10,9 +10,16 @@
 # managed instance you can reach from your laptop).
 DB_URL=postgres://app:app@localhost:5432/{{projectName}}
 
-# Local session signing secret. The chart's Secret is the source of
-# truth in the cluster.
-VOLTRO_SESSION_SECRET=dev-only-secret-please-rotate-in-prod
+# Session signing secret — NO VALUE SHIPS HERE ON PURPOSE.
+#
+# `voltro dev` mints a unique one for this project into a gitignored
+# .env.local on first boot, so local development needs nothing from you.
+# A shipped placeholder would be a signing key published to everyone who
+# downloads this template, making every session in your deployment forgeable.
+#
+# Your DEPLOYMENT needs its own — `voltro serve` refuses to start without it:
+#     voltro secret generate session
+VOLTRO_SESSION_SECRET=
 
 # ─── Optional backends — ALL OFF by default; uncomment to activate ───────────
 # The cache and the durable KV each run on a zero-infra default (in-process

package/dist/apiBuild-DQBNqNZ8.js

@@ -1,2 +0,0 @@
-import { i as e, r as t } from "./apiBuild-CvtQeBMs.js";
-export { t as runApiBuild, e as runServeBundleBuild };

package/dist/dev-DYjGqPGD.js

@@ -1,2 +0,0 @@
-import { o as e } from "./dev-CQxbrpDz.js";
-export { e as loadApiConfig };