@voltro/cli 0.50.1 → 0.52.0

package/dist/{webDev-BbdkzMbd.js → webDev-BgWL9gKV.js}

@@ -2,39 +2,40 @@ import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
 import { n as t } from "./loadEnv-D9nEOClM.js";
 import { t as n } from "./bootRefusal-pgvDxlrU.js";
 import { r } from "./appPort-B_HpJ_ck.js";
-import { A as i, _ as a, g as o, h as s, m as c, o as l } from "./fileConventions-Cof68_BL.js";
+import { A as i, _ as a, g as o, h as s, m as c, o as l } from "./fileConventions-DOqD3lPS.js";
 import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-CtL_xTbu.js";
-import { n as g } from "./agentsMd-D6yD7IQv.js";
-import { c as _, p as v, t as y } from "./renderModeScan-D7J1B7Kw.js";
-import { t as b } from "./pageConvention-cEiRxdab.js";
+import { n as g } from "./agentsMd-0l980yhL.js";
+import { c as _, p as v, t as y } from "./renderModeScan-CcH2X1_D.js";
+import { t as b } from "./pageConvention-CzUiSbtU.js";
 import { i as x, n as S, r as C, t as w } from "./runtimeRegistry-DMeKfTHP.js";
 import { n as T } from "./logFileSink-B4uP8pvf.js";
-import { basename as E, dirname as D, join as O, relative as k, resolve as A } from "node:path";
-import { existsSync as j, promises as M, readFileSync as N, readdirSync as P, statSync as F, unwatchFile as ee, watchFile as I } from "node:fs";
-import { fileURLToPath as te, pathToFileURL as L } from "node:url";
-import { addSink as R, createLogger as z, printReadyBlock as ne } from "@voltro/logger";
-import { createRequire as B } from "node:module";
-import { currentTraceContext as V, resolveSecret as re } from "@voltro/runtime";
+import { basename as E, dirname as D, join as O, relative as k, resolve as A, sep as j } from "node:path";
+import { existsSync as M, promises as N, readFileSync as P, readdirSync as F, statSync as ee, unwatchFile as te, watchFile as ne } from "node:fs";
+import { fileURLToPath as re, pathToFileURL as I } from "node:url";
+import { addSink as L, createLogger as R, printReadyBlock as z } from "@voltro/logger";
+import { createRequire as ie } from "node:module";
+import { classifyRequestOrigin as B, currentTraceContext as V, resolveOriginGuardConfig as ae, resolveSecret as oe } from "@voltro/runtime";
 import { homedir as H } from "node:os";
-import { FRAMEWORK_ENV_CATALOG as U, appEnvEntries as ie, checkEnvNaming as W, formatEnvErrors as ae, installEnvSnapshot as G, isEnvContract as oe, pluginEnvEntries as se, renderDotEnvExample as ce, resolveEnv as le } from "@voltro/env";
-import { __installPublicEnv as ue } from "@voltro/env/public";
-import { mkdir as de, writeFile as fe } from "node:fs/promises";
-import { createHash as pe } from "node:crypto";
-import { spawn as me } from "node:child_process";
+import { FRAMEWORK_ENV_CATALOG as se, appEnvEntries as U, checkEnvNaming as ce, formatEnvErrors as le, installEnvSnapshot as W, isEnvContract as ue, pluginEnvEntries as de, renderDotEnvExample as fe, resolveEnv as pe } from "@voltro/env";
+import { __installPublicEnv as me } from "@voltro/env/public";
+import { mkdir as G, writeFile as he } from "node:fs/promises";
+import { createHash as ge } from "node:crypto";
+import { spawn as _e } from "node:child_process";
 import { createConnection as K } from "node:net";
-import { PassThrough as he } from "node:stream";
+import { FORM_FLASH_SCRIPT_ID as ve, FORM_KEY_FIELD as ye, FORM_PATH_PREFIX as be, FORM_PATH_PREFIX as xe, FORM_REDIRECT_FIELD as Se, formDataToInput as Ce, validateFields as we } from "@voltro/client/form";
+import { PassThrough as Te } from "node:stream";
 //#region src/buildToolImport.ts
-var ge = (e) => {
+var Ee = (e) => {
 	let t = e;
 	return t?.code === "ERR_MODULE_NOT_FOUND" || /Cannot find (package|module)/.test(String(t?.message ?? ""));
-}, _e = async (e, t) => {
+}, De = async (e, t) => {
 	try {
 		return await t();
 	} catch (t) {
-		throw ge(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
+		throw Ee(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
 	}
-}, q = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", ve = (e, t) => t ? `${e} | undefined` : e, ye = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${ve(t.tsType, t.optional)}`).join("\n"), be = async (e, t) => {
-	let n = ye(t, () => !0), r = `${q}
+}, Oe = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", ke = (e, t) => t ? `${e} | undefined` : e, Ae = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${ke(t.tsType, t.optional)}`).join("\n"), je = async (e, t) => {
+	let n = Ae(t, () => !0), r = `${Oe}
 import '@voltro/env/server'
 
 declare module '@voltro/env/server' {
@@ -43,9 +44,9 @@ ${n.length > 0 ? n : "    // (no variables declared)"}
   }
 }
 `;
-	await fe(O(e, "env.generated.d.ts"), r, "utf8");
-}, xe = async (e, t) => {
-	let n = ye(t, (e) => e === "public"), r = `${q}
+	await he(O(e, "env.generated.d.ts"), r, "utf8");
+}, Me = async (e, t) => {
+	let n = Ae(t, (e) => e === "public"), r = `${Oe}
 import '@voltro/env/public'
 
 declare module '@voltro/env/public' {
@@ -54,9 +55,9 @@ ${n.length > 0 ? n : "    // (no public variables declared)"}
   }
 }
 `, i = O(e, "src");
-	await de(i, { recursive: !0 }), await fe(O(i, "voltro-env.d.ts"), r, "utf8");
-}, Se = async (e, t) => {
-	let n = `${q}
+	await G(i, { recursive: !0 }), await he(O(i, "voltro-env.d.ts"), r, "utf8");
+}, Ne = async (e, t) => {
+	let n = `${Oe}
 import { __installPublicEnv } from '@voltro/env/public'
 
 export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
@@ -64,14 +65,14 @@ export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
 // Set the browser/SSR-shared global the \`publicEnv\` accessor reads.
 __installPublicEnv(publicEnvValues)
 `;
-	await de(e, { recursive: !0 }), await fe(O(e, "env.public.ts"), n, "utf8");
-}, Ce = async (e) => {
-	let t = oe(e.rawEnv) ? e.rawEnv : void 0, n = await le({
+	await G(e, { recursive: !0 }), await he(O(e, "env.public.ts"), n, "utf8");
+}, Pe = async (e) => {
+	let t = ue(e.rawEnv) ? e.rawEnv : void 0, n = await pe({
 		contract: t,
-		resolveSecret: re
-	}), r = [...n.errors, ...W(t, e.appType)];
-	if (r.length > 0) throw Error(ae(r));
-	G(n.values), e.appType === "web" && ue(n.publicValues);
+		resolveSecret: oe
+	}), r = [...n.errors, ...ce(t, e.appType)];
+	if (r.length > 0) throw Error(le(r));
+	W(n.values), e.appType === "web" && me(n.publicValues);
 	let i = t ? Object.keys(t.vars).length : 0;
 	if (i > 0) {
 		let r = Object.keys(n.publicValues).length;
@@ -83,20 +84,20 @@ __installPublicEnv(publicEnvValues)
 			n.length > 0 && e.log.warn(`env: ${n.length} secret var(s) declared on a web app — secrets are reachable only from server-side render code and are NEVER bundled. Prefer declaring secrets on the api.`, { keys: n });
 		}
 	}
-	return e.generateTypes && t && (e.appType === "api" ? await be(e.root, t) : await xe(e.root, t)), {
+	return e.generateTypes && t && (e.appType === "api" ? await je(e.root, t) : await Me(e.root, t)), {
 		resolved: n,
 		contract: t
 	};
-}, we = (e) => {
-	let t = ie(e.contract), n = (e.plugins ?? []).flatMap((e) => se(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : U, i = /* @__PURE__ */ new Set(), a = [];
+}, q = (e) => {
+	let t = U(e.contract), n = (e.plugins ?? []).flatMap((e) => de(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : se, i = /* @__PURE__ */ new Set(), a = [];
 	for (let e of [
 		...t,
 		...n,
 		...r
 	]) i.has(e.key) || (i.add(e.key), a.push(e));
 	return a;
-}, Te = (e, t, n = (e) => process.env[e]) => {
-	let r = we(t).map((e) => {
+}, Fe = (e, t, n = (e) => process.env[e]) => {
+	let r = q(t).map((e) => {
 		let t = n(e.key) !== void 0;
 		return {
 			...e,
@@ -113,22 +114,22 @@ __installPublicEnv(publicEnvValues)
 			missingRequired: r.filter((e) => e.required && !e.isSet && e.default === void 0).length
 		}
 	};
-}, Ee = (e, t) => {
-	let n = we({
+}, Ie = (e, t) => {
+	let n = q({
 		...e,
 		includeFramework: !1
 	});
-	return ce(n, {
+	return fe(n, {
 		includeFramework: e.includeFramework !== !1,
 		...t ? { header: t } : {}
 	});
-}, J = async (e, t) => {
+}, Le = async (e, t) => {
 	let n = e;
 	for (;;) {
 		let e = O(n, "node_modules", t);
 		try {
-			if ((await M.stat(e)).isDirectory()) {
-				let t = await M.realpath(e);
+			if ((await N.stat(e)).isDirectory()) {
+				let t = await N.realpath(e);
 				return t.includes("/node_modules/") ? null : t;
 			}
 		} catch {}
@@ -136,10 +137,10 @@ __installPublicEnv(publicEnvValues)
 		if (r === n) return null;
 		n = r;
 	}
-}, De = async (e) => {
+}, Re = async (e) => {
 	let t;
 	try {
-		let n = await M.readFile(O(e, "package.json"), "utf8"), r = JSON.parse(n);
+		let n = await N.readFile(O(e, "package.json"), "utf8"), r = JSON.parse(n);
 		t = Object.keys({
 			...r.dependencies,
 			...r.devDependencies
@@ -148,11 +149,11 @@ __installPublicEnv(publicEnvValues)
 		return [];
 	}
 	return (await Promise.all(t.map(async (t) => {
-		let n = await J(e, t);
+		let n = await Le(e, t);
 		if (n === null) return null;
 		let r = O(n, "src");
 		try {
-			if (!(await M.stat(r)).isDirectory()) return null;
+			if (!(await N.stat(r)).isDirectory()) return null;
 		} catch {
 			return null;
 		}
@@ -161,11 +162,11 @@ __installPublicEnv(publicEnvValues)
 			dir: r
 		};
 	}))).filter((e) => e !== null);
-}, Oe = 500, ke = (e, t, n = {}) => {
+}, ze = 500, Be = (e, t, n = {}) => {
 	if (e.length === 0) return () => {};
 	let r = (e) => n.root ? k(n.root, e) : e, i = !1, a = (e) => {
 		i || (i = !0, t.warn(`.env changed (${r(e)}) — hard-restarting: process.env is read once at boot, a reload would keep stale values`, { file: r(e) }), Promise.resolve().then(() => n.onBeforeRestart?.()).catch((e) => t.warn(".env restart: onBeforeRestart failed (continuing)", {}, e)).finally(() => {
-			let e = me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+			let e = _e(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 				stdio: "inherit",
 				env: process.env,
 				cwd: n.cwd ?? process.cwd()
@@ -179,22 +180,22 @@ __installPublicEnv(publicEnvValues)
 			});
 		}));
 	};
-	for (let t of e) I(t, { interval: Oe }, (e, n) => {
+	for (let t of e) ne(t, { interval: ze }, (e, n) => {
 		e.mtimeMs !== n.mtimeMs && a(t);
 	});
 	return t.info("watching .env files for changes", {
 		files: e.map(r),
-		intervalMs: Oe
+		intervalMs: ze
 	}), () => {
-		for (let t of e) ee(t);
+		for (let t of e) te(t);
 	};
-}, Ae = [{
+}, Ve = [{
 	host: "127.0.0.1",
 	family: "IPv4"
 }, {
 	host: "::1",
 	family: "IPv6"
-}], je = (e, t, n) => new Promise((r) => {
+}], J = (e, t, n) => new Promise((r) => {
 	let i = !1, a = (e) => {
 		if (!i) {
 			i = !0;
@@ -208,10 +209,10 @@ __installPublicEnv(publicEnvValues)
 		port: t
 	});
 	o.once("connect", () => a(!0)), o.once("error", () => a(!1)), o.setTimeout(n, () => a(!1));
-}), Me = async (e, t = 400) => ({ families: (await Promise.all(Ae.map(async (n) => ({
+}), He = async (e, t = 400) => ({ families: (await Promise.all(Ve.map(async (n) => ({
 	family: n.family,
-	taken: await je(n.host, e, t)
-})))).filter((e) => e.taken).map((e) => e.family) }), Ne = (e, t, n) => [
+	taken: await J(n.host, e, t)
+})))).filter((e) => e.taken).map((e) => e.family) }), Ue = (e, t, n) => [
 	`${t}: port ${e} is already being served (${n.join(" + ")}).`,
 	"",
 	"  Refusing to start. This is NOT a spurious check — a second listener can",
@@ -226,26 +227,26 @@ __installPublicEnv(publicEnvValues)
 	"",
 	"  Then re-run. To use a different port instead, change `port` in",
 	"  app.config.ts."
-].join("\n"), Pe = async (e, t) => {
-	let { families: r } = await Me(e);
-	if (r.length !== 0) throw n(Ne(e, t, r));
-}, Fe = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", Y = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, Ie = (e) => {
+].join("\n"), We = async (e, t) => {
+	let { families: r } = await He(e);
+	if (r.length !== 0) throw n(Ue(e, t, r));
+}, Ge = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", Ke = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, qe = (e) => {
 	let t = [], n = e;
 	for (let e = 0; e < 12; e++) {
 		let e = O(n, "node_modules");
-		j(e) && t.push(e);
+		M(e) && t.push(e);
 		let r = D(n);
 		if (r === n) break;
 		n = r;
 	}
 	return t;
-}, Le = (e) => {
+}, Je = (e) => {
 	let t = /* @__PURE__ */ new Set([e]), n = e;
 	for (let e = 0; e < 12; e++) {
 		for (let e of ["pnpm-workspace.yaml", "pnpm-workspace.yml"]) {
 			let r;
 			try {
-				r = N(O(n, e), "utf8");
+				r = P(O(n, e), "utf8");
 			} catch {
 				continue;
 			}
@@ -256,7 +257,7 @@ __installPublicEnv(publicEnvValues)
 				if (i === "" || i.includes("*")) continue;
 				let a;
 				try {
-					a = P(O(n, i), { withFileTypes: !0 });
+					a = F(O(n, i), { withFileTypes: !0 });
 				} catch {
 					continue;
 				}
@@ -266,7 +267,7 @@ __installPublicEnv(publicEnvValues)
 		for (let e of ["packages", "apps"]) {
 			let r;
 			try {
-				r = P(O(n, e), { withFileTypes: !0 });
+				r = F(O(n, e), { withFileTypes: !0 });
 			} catch {
 				continue;
 			}
@@ -277,17 +278,17 @@ __installPublicEnv(publicEnvValues)
 		n = e;
 	}
 	return [...t];
-}, Re = (e) => {
+}, Ye = (e) => {
 	let t = [];
-	for (let n of Le(e)) {
+	for (let n of Je(e)) {
 		let e = O(n, "node_modules", "@voltro"), r;
 		try {
-			r = P(e);
+			r = F(e);
 		} catch {
 			continue;
 		}
 		for (let n of r) {
-			let r = O(e, n), i = ze(r);
+			let r = O(e, n), i = Xe(r);
 			i !== void 0 && t.push({
 				pkg: `@voltro/${n}`,
 				version: i,
@@ -296,27 +297,27 @@ __installPublicEnv(publicEnvValues)
 		}
 	}
 	return t;
-}, ze = (e) => {
+}, Xe = (e) => {
 	try {
-		let t = JSON.parse(N(O(e, "package.json"), "utf8"));
+		let t = JSON.parse(P(O(e, "package.json"), "utf8"));
 		return typeof t.version == "string" ? t.version : void 0;
 	} catch {
 		return;
 	}
-}, X = (e) => {
+}, Ze = (e) => {
 	let t = [], n;
 	try {
-		n = P(e);
+		n = F(e);
 	} catch {
 		return t;
 	}
 	for (let r of n) {
-		if (r.startsWith(".") || Y.test(r)) continue;
+		if (r.startsWith(".") || Ke.test(r)) continue;
 		let n = O(e, r);
 		if (r.startsWith("@")) {
 			let e;
 			try {
-				e = P(n);
+				e = F(n);
 			} catch {
 				continue;
 			}
@@ -327,7 +328,7 @@ __installPublicEnv(publicEnvValues)
 			continue;
 		}
 		try {
-			if (!F(n).isDirectory()) continue;
+			if (!ee(n).isDirectory()) continue;
 		} catch {
 			continue;
 		}
@@ -337,17 +338,17 @@ __installPublicEnv(publicEnvValues)
 		});
 	}
 	return t;
-}, Be = (e) => {
+}, Qe = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (e, n, r) => {
-		if (!Fe(e)) return;
+		if (!Ge(e)) return;
 		let i = t.get(e) ?? /* @__PURE__ */ new Map();
 		i.has(n) || i.set(n, r), t.set(e, i);
 	};
-	for (let t of Ie(e)) for (let { pkg: e, dir: r } of X(t)) {
-		let t = ze(r);
+	for (let t of qe(e)) for (let { pkg: e, dir: r } of Ze(t)) {
+		let t = Xe(r);
 		t !== void 0 && n(e, t, r);
 	}
-	for (let { pkg: t, version: r, dir: i } of Re(e)) n(t, r, i);
+	for (let { pkg: t, version: r, dir: i } of Ye(e)) n(t, r, i);
 	let r = [];
 	for (let [n, i] of t) i.size < 2 || r.push({
 		pkg: n,
@@ -355,7 +356,7 @@ __installPublicEnv(publicEnvValues)
 		paths: [...i.values()].map((t) => k(e, t)).sort()
 	});
 	return r.sort((e, t) => e.pkg.localeCompare(t.pkg));
-}, Ve = (e) => {
+}, $e = (e) => {
 	if (e.length !== 0) return [
 		`•  ${e.length} package(s) resolved at more than one version:`,
 		...e.flatMap((e) => [`     ${e.pkg} — ${e.versions.join(", ")}`, ...e.paths.map((e) => `       ${e}`)]),
@@ -373,11 +374,11 @@ __installPublicEnv(publicEnvValues)
 		"   instrument), then reinstall. Do not silence the generated file — it is where",
 		"   a genuine mistake in your own descriptors surfaces."
 	].join("\n");
-}, He = (e) => {
+}, et = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	for (let n of Ie(e)) for (let { pkg: e, dir: r } of X(n)) {
+	for (let n of qe(e)) for (let { pkg: e, dir: r } of Ze(n)) {
 		if (!e.startsWith("@voltro/")) continue;
-		let n = ze(r);
+		let n = Xe(r);
 		n !== void 0 && !t.has(e) && t.set(e, n);
 	}
 	if (t.size < 2) return;
@@ -392,7 +393,7 @@ __installPublicEnv(publicEnvValues)
 			version: t
 		})).sort((e, t) => e.pkg.localeCompare(t.pkg))
 	};
-}, Ue = (e) => {
+}, tt = (e) => {
 	if (e !== void 0) return [
 		`•  ${e.behind.length} @voltro/* package(s) are not on ${e.majority}:`,
 		...e.behind.map((e) => `     ${e.pkg}  ${e.version}`),
@@ -410,59 +411,59 @@ __installPublicEnv(publicEnvValues)
 		"   its pattern: the one that produced this report was `@voltro/[a-z-]+`,",
 		"   which silently skips `@voltro/i18n` because the name contains digits."
 	].join("\n");
-}, We = (e, t) => {
-	let n = He(e);
+}, nt = (e, t) => {
+	let n = et(e);
 	n !== void 0 && t.warn?.(`@voltro/* version skew: ${n.behind.length} package(s) are not on ${n.majority}`, {
 		majority: n.majority,
 		behind: n.behind.map((e) => `${e.pkg}@${e.version}`),
 		fix: "the framework ships in lockstep; bump the listed packages and reinstall"
 	});
-}, Ge = z({ scope: "vite" }), Ke = /\x1b\[[0-9;]*m/g, qe = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, Je = (e) => e.replace(Ke, "").replace(qe, "").trim(), Ye = /proxy error/i, Xe = [
+}, rt = R({ scope: "vite" }), it = /\x1b\[[0-9;]*m/g, at = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, ot = (e) => e.replace(it, "").replace(at, "").trim(), st = /proxy error/i, ct = [
 	"ECONNREFUSED",
 	"ECONNRESET",
 	"ECONNABORTED",
 	"EPIPE",
 	"ETIMEDOUT"
-], Ze = (e, t = 0) => {
+], lt = (e, t = 0) => {
 	if (e == null || t > 5) return !1;
 	let n = e;
-	return typeof n.code == "string" && Xe.includes(n.code) || typeof n.message == "string" && Xe.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => Ze(e, t + 1)) ? !0 : Ze(n.cause, t + 1);
-}, Qe = 4e3, $e = () => {
+	return typeof n.code == "string" && ct.includes(n.code) || typeof n.message == "string" && ct.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => lt(e, t + 1)) ? !0 : lt(n.cause, t + 1);
+}, ut = 4e3, dt = () => {
 	let e = /* @__PURE__ */ new Set(), t = 0, n = {
 		hasWarned: !1,
 		info: (e) => {
-			let t = Je(e);
-			t.length !== 0 && Ge.info(t);
+			let t = ot(e);
+			t.length !== 0 && rt.info(t);
 		},
 		warn: (e) => {
 			n.hasWarned = !0;
-			let t = Je(e);
-			t.length !== 0 && Ge.warn(t);
+			let t = ot(e);
+			t.length !== 0 && rt.warn(t);
 		},
 		warnOnce: (t) => {
-			let r = Je(t);
-			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && Ge.warn(r));
+			let r = ot(t);
+			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && rt.warn(r));
 		},
 		error: (e, n) => {
-			let r = Je(e), i = n?.error;
+			let r = ot(e), i = n?.error;
 			if (r.length !== 0) {
-				if (Ye.test(r) && Ze(i)) {
+				if (st.test(r) && lt(i)) {
 					let e = Date.now();
-					e - t > Qe && (t = e, Ge.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
+					e - t > ut && (t = e, rt.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
 					return;
 				}
-				Ge.error(r, {}, i);
+				rt.error(r, {}, i);
 			}
 		},
 		clearScreen: () => {},
 		hasErrorLogged: (e) => !1
 	};
 	return n;
-}, et = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), tt = (e) => {
+}, ft = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), pt = (e) => {
 	try {
 		let t = O(e, "tsconfig.json");
-		if (!j(t)) return [];
-		let n = JSON.parse(et(N(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = A(e, i), o = [];
+		if (!M(t)) return [];
+		let n = JSON.parse(ft(P(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = A(e, i), o = [];
 		for (let [e, t] of Object.entries(r)) {
 			let n = t[0];
 			if (!n) continue;
@@ -484,12 +485,12 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return [];
 	}
-}, nt = (e = process.env) => {
+}, mt = (e = process.env) => {
 	let t = e.VOLTRO_DEV_SSR_COMPILE_CONCURRENCY;
 	if (t === void 0 || t.trim() === "") return 4;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 1 ? Math.floor(n) : 4;
-}, rt = (e) => {
+}, ht = (e) => {
 	let t = Math.max(1, Math.floor(e)), n = 0, r = [], i = () => n < t ? (n++, Promise.resolve()) : new Promise((e) => r.push(e)), a = () => {
 		let e = r.shift();
 		e ? e() : n--;
@@ -507,8 +508,8 @@ __installPublicEnv(publicEnvValues)
 			return n;
 		}
 	};
-}, it = (e) => {
-	let t = rt(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
+}, gt = (e) => {
+	let t = ht(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
 	return {
 		load: (i, a) => {
 			if (r.has(i)) return a();
@@ -538,7 +539,340 @@ __installPublicEnv(publicEnvValues)
 			return r.size;
 		}
 	};
-}, at = (e) => {
+}, _t = 1048576, vt = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;"), yt = (e) => JSON.stringify(e).replace(/</g, "\\u003c"), bt = (e, t) => {
+	let n = `<script type="application/json" id="${ve}">${yt(t)}<\/script>`;
+	return e.includes("</body>") ? e.replace("</body>", `${n}</body>`) : e + n;
+}, xt = (e) => {
+	let t = Object.entries(e.errors).map(([e, t]) => `<li><strong>${vt(e)}</strong>: ${vt(t)}</li>`).join("");
+	return `<!doctype html><html><head><meta charset="utf-8"><title>Form submission failed</title></head><body><h1>Submission failed</h1>${e.formError === void 0 ? "" : `<p>${vt(e.formError)}</p>`}<ul>${t}</ul><p><a href="javascript:history.back()">Go back</a> to correct the form.</p></body></html>`;
+}, Y = (e, t, n, r = "text/plain; charset=utf-8") => {
+	e.statusCode = t, e.setHeader("content-type", r), e.end(n);
+}, St = (e, t, n) => {
+	e.setHeader("cache-control", "no-store"), Y(e, t, n, "text/html; charset=utf-8");
+}, Ct = (e) => {
+	if (e !== void 0 && e !== "" && !(!e.startsWith("/") || e.startsWith("//") || e.includes("\\"))) return e;
+}, wt = (e) => {
+	let t = e.referer;
+	if (t !== void 0) try {
+		let e = new URL(t);
+		return e.pathname + e.search;
+	} catch {
+		return;
+	}
+}, Tt = (e) => new Promise((t) => {
+	let n = [], r = 0;
+	e.on("data", (i) => {
+		if (r += i.length, r > _t) {
+			e.removeAllListeners("data"), e.removeAllListeners("end"), t({ ok: !1 });
+			return;
+		}
+		n.push(i);
+	}), e.on("end", () => t({
+		ok: !0,
+		body: Buffer.concat(n).toString("utf8")
+	})), e.on("error", () => t({ ok: !1 }));
+}), Et = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e.headers)) typeof r == "string" ? t[n.toLowerCase()] = r : Array.isArray(r) && (t[n.toLowerCase()] = r.join(", "));
+	return t;
+}, Dt = (e) => {
+	let t = e.originGuard ?? ae(void 0, process.env);
+	return async (n, r, i) => {
+		let a = (n.url ?? "/").split("?")[0];
+		if (!a.startsWith(be)) return !1;
+		if (n.method !== "POST") return r.setHeader("allow", "POST"), Y(r, 405, "method not allowed — a /form/* endpoint accepts native form POSTs only"), !0;
+		let o = Et(n);
+		if (!B({
+			headers: o,
+			config: t
+		}).allowed) return Y(r, 403, "origin not allowed"), !0;
+		if ((o["content-type"] ?? "").includes("multipart/form-data")) return Y(r, 415, "file uploads need JavaScript — the no-JS form path accepts application/x-www-form-urlencoded only"), !0;
+		let s = await Tt(n);
+		if (!s.ok) return Y(r, 413, `form body exceeds ${_t} bytes`), !0;
+		let c = new URLSearchParams(s.body), l = decodeURIComponent(a.slice(be.length)), u = (await e.loadDescriptors())?.[l];
+		if (u === void 0 || u.kind !== "mutation") return Y(r, 404, `no mutation '${l}' — /form/* serves declared mutations only`), !0;
+		let d = c.get(ye) ?? l, f = Ct(c.get(Se) ?? void 0), p = [];
+		for (let [e, t] of c) e !== ye && e !== Se && p.push([e, t]);
+		let m = u.input;
+		if (m === void 0) return Y(r, 404, `mutation '${l}' carries no input schema — the no-JS path cannot map its POST`), !0;
+		let h = Ce(m, p), g = we(m, h), _ = async (t) => {
+			let n = wt(o);
+			if (n !== void 0) {
+				if (i !== void 0) {
+					i(n, t);
+					return;
+				}
+				let a = await e.renderErrorPage({
+					path: n,
+					headers: o,
+					flash: t
+				});
+				if (a !== void 0) {
+					St(r, 422, bt(a, t));
+					return;
+				}
+			}
+			St(r, 422, xt(t));
+		};
+		if (!g.valid) return await _({
+			formKey: d,
+			values: h,
+			errors: g.errors
+		}), !0;
+		let v = e.rpcQuery(o.cookie, o);
+		if (v === void 0) return Y(r, 503, `api '${e.apiName ?? "?"}' has no server-side origin — the no-JS form path forwards over POST /rpc; set VOLTRO_API_ORIGIN (or apis.<name>.serverUrl) as for SSR loaders`), !0;
+		try {
+			await v(l, h);
+		} catch (e) {
+			let t = e.voltroError;
+			return await _({
+				formKey: d,
+				values: h,
+				errors: {},
+				formError: t?.message ?? t?._tag ?? "The server rejected this submission. Please try again."
+			}), !0;
+		}
+		let y = f ?? wt(o) ?? "/";
+		return r.statusCode = 303, r.setHeader("location", y), r.end(), !0;
+	};
+}, Ot = /^\s*(?:import|export)\s[^;'"]*?['"]([^'"]+)['"]/gm, kt = [
+	"",
+	".tsx",
+	".ts",
+	".jsx",
+	".js",
+	"/index.tsx",
+	"/index.ts"
+], At = (e) => /\.island\.(tsx|ts|jsx|js)$/.test(e), jt = ["@voltro/web", "@voltro/i18n"], Mt = ["@voltro/client", "@voltro/ui"], Nt = (e, t) => e === t || e.startsWith(`${t}/`), Pt = (e) => e !== "@voltro/web/islands" && jt.some((t) => Nt(e, t)), Ft = (e) => {
+	let t = [];
+	for (let n of e.matchAll(Ot)) t.push(n[1]);
+	return t;
+}, It = async (e, t) => {
+	let n = A(D(e), t);
+	for (let e of kt) {
+		let t = n + e;
+		try {
+			if ((await N.stat(t)).isFile()) return t;
+		} catch {}
+	}
+}, Lt = async (e, t) => {
+	let n = O(e, "src", "pages", t), r = /* @__PURE__ */ new Set(), i = [], a = !1, o = [], s = async (t, n) => {
+		let c = `${t}\u0000${n ? "i" : "p"}`;
+		if (r.has(c)) return;
+		r.add(c);
+		let l;
+		try {
+			l = await N.readFile(t, "utf8");
+		} catch {
+			return;
+		}
+		for (let r of Ft(l)) {
+			if (n) {
+				if (Pt(r)) {
+					o.push([k(e, t).split(j).join("/"), r]);
+					continue;
+				}
+				if (Mt.some((e) => Nt(r, e))) {
+					a = !0;
+					continue;
+				}
+			}
+			if (!r.startsWith(".")) continue;
+			let c = await It(t, r);
+			if (c === void 0) continue;
+			let l = n || At(c);
+			if (!n && At(c)) {
+				let t = k(e, c).split(j).join("/");
+				i.includes(t) || i.push(t);
+			}
+			await s(c, l);
+		}
+	};
+	return await s(n, At(n)), At(n) && i.unshift(k(e, n).split(j).join("/")), {
+		islandFiles: i,
+		usesClient: a,
+		violations: o
+	};
+}, Rt = (e) => {
+	let t = /^export const interactive\s*=\s*['"](full|islands|none)['"]/m.exec(e);
+	return t === null ? void 0 : t[1];
+}, zt = (e) => {
+	let t = e.indexOf("</head>"), n = t === -1 ? e : e.slice(0, t), r = [];
+	for (let e of n.matchAll(/<script\b([^>]*)>([\s\S]*?)<\/script>/gi)) {
+		let t = e[1] ?? "";
+		/\bsrc\s*=/.test(t) || /type\s*=\s*["']module["']/.test(t) || r.push(e[0]);
+	}
+	return r.map((e) => `    ${e}`).join("\n");
+}, Bt = (e) => [...e.matchAll(/<link\b[^>]*\brel\s*=\s*["']stylesheet["'][^>]*>/gi)].map((e) => e[0]), Vt = (e, t) => {
+	let n = Bt(t).filter((t) => !e.includes(t));
+	if (n.length === 0) return e;
+	let r = n.map((e) => `    ${e}`).join("\n");
+	return e.includes("</head>") ? e.replace("</head>", `${r}\n  </head>`) : e + r;
+}, Ht = (e) => {
+	let t = e.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+	return t === "" ? "root" : t;
+}, Ut = class extends Error {
+	constructor(e, t) {
+		let n = t.map(([e, t]) => `  ${e} imports '${t}'`).join("\n");
+		super(`interactive: 'islands' page '${e}' has island code importing the framework barrel:\n${n}\n\nAn island hydrates in its own provider-less root — router hooks, <Link> and useT() throw there, and the '@voltro/web' barrel additionally pulls the Effect runtime into the slim islands entry (the bytes this mode exists to shed).\n\nFix: import island()/hydration APIs from '@voltro/web/islands' (the react-only subpath), move router/i18n-dependent UI out of the island, and keep island files to react + relative browser-safe imports. '@voltro/client' IS allowed — a useSubscription island gets the client boot automatically.`), this.name = "IslandsEntryViolation";
+	}
+}, Wt = async (e) => {
+	let t = O(e.webRoot, ".framework", "island-shells"), n = [];
+	if (e.pages.length === 0) return n;
+	await N.mkdir(t, { recursive: !0 });
+	for (let r of e.pages) {
+		let i = await Lt(e.webRoot, r.file);
+		if (i.violations.length > 0) throw new Ut(r.pattern, i.violations);
+		let a = Ht(r.pattern), o = `island-shells/${a}.tsx`, s = `island-shells/${a}.html`, c = i.islandFiles.map((e) => `import '../../${e}'`).join("\n"), l = i.usesClient ? [
+			`// GENERATED by voltro — the islands entry for '${r.pattern}' (client boot:`,
+			"// an island here imports @voltro/client, so the roots get a live runtime).",
+			...e.apiImports ?? [],
+			"import { VoltroRuntimeProvider } from '@voltro/web/runtime'",
+			"import { hydrateIslandsOnPage } from '@voltro/web/islands'",
+			c,
+			"hydrateIslandsOnPage({",
+			"  wrap: (children) => (",
+			`    <VoltroRuntimeProvider apis={${e.apiEntriesLiteral ?? "{}"}}>{children}</VoltroRuntimeProvider>`,
+			"  ),",
+			"})",
+			""
+		].join("\n") : [
+			`// GENERATED by voltro — the slim islands entry for '${r.pattern}'.`,
+			"// react + the island runtime + this page's islands; no router, no",
+			"// Effect runtime, no subscription cache.",
+			"import { hydrateIslandsOnPage } from '@voltro/web/islands'",
+			c,
+			"hydrateIslandsOnPage()",
+			""
+		].join("\n"), u = [
+			"<!doctype html>",
+			"<html lang=\"en\">",
+			"  <head>",
+			"    <meta charset=\"UTF-8\" />",
+			"    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />",
+			...e.headSnippets !== void 0 && e.headSnippets !== "" ? [e.headSnippets] : [],
+			"  </head>",
+			"  <body>",
+			"    <div id=\"root\"></div>",
+			`    <script type="module" src="/island-shells/${a}.tsx"><\/script>`,
+			"  </body>",
+			"</html>",
+			""
+		].join("\n");
+		await N.writeFile(O(t, `${a}.tsx`), l), await N.writeFile(O(t, `${a}.html`), u), n.push({
+			pattern: r.pattern,
+			name: a,
+			htmlFile: s,
+			entryFile: o,
+			usesClient: i.usesClient
+		});
+	}
+	return n;
+}, Gt = class extends Error {
+	_voltroDeferral = !0;
+	constructor(e) {
+		super(e), this.name = "DeferralNotSupportedError";
+	}
+}, Kt = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, qt = (e) => {
+	if (!(e instanceof Error)) return;
+	let t = e._voltroControl;
+	if (t === "redirect") {
+		let { location: t, status: n } = e;
+		return typeof t == "string" ? {
+			status: n === 307 || n === 308 ? n : 303,
+			headers: {
+				location: t,
+				"x-voltro-rendered-by": "loader-redirect"
+			},
+			body: ""
+		} : void 0;
+	}
+	if (t === "not-found") return {
+		status: 404,
+		headers: {
+			"content-type": "text/plain; charset=utf-8",
+			"x-voltro-rendered-by": "loader-not-found"
+		},
+		body: "not found"
+	};
+}, Jt = (e) => {
+	let { helpers: t } = e, n = t.prepareDeferredLoaderData(e.loaderData, "page"), r = {}, i = {}, a = {};
+	for (let [n, o] of Object.entries(e.segmentLoaderData)) {
+		let e = Number(n), s = t.prepareDeferredLoaderData(o, e);
+		r[e] = s.renderData, i[e] = s.stateData, s.deferredIds && (a[e] = s.deferredIds);
+	}
+	let o = n.deferredIds !== void 0 || Object.keys(a).length > 0;
+	if (o) try {
+		t.assertDeferralSupported({
+			page: e.page,
+			renderMode: e.renderMode,
+			interactive: e.interactive,
+			...e.layoutShell ? { layoutShell: e.layoutShell } : {}
+		});
+	} catch (e) {
+		throw new Gt(e instanceof Error ? e.message : String(e));
+	}
+	return {
+		loaderData: n.renderData,
+		segmentLoaderData: r,
+		hasDeferred: o,
+		stateInput: {
+			path: e.pathname,
+			loaderData: n.stateData,
+			segmentLoaderData: i,
+			pageLoaderRan: e.pageLoaderRan,
+			...e.layoutShell ? { pageClientOnly: !0 } : {},
+			...n.deferredIds ? { deferredPageIds: n.deferredIds } : {},
+			...Object.keys(a).length > 0 ? { deferredSegmentIds: a } : {}
+		}
+	};
+}, Yt = (e) => {
+	let { helpers: t, renderInput: n } = e, r = Jt({
+		helpers: t,
+		page: e.page,
+		pathname: n.pathname,
+		renderMode: "spa",
+		interactive: e.interactive,
+		loaderData: null,
+		segmentLoaderData: n.segmentLoaderData ?? {},
+		pageLoaderRan: !1,
+		layoutShell: e.delivery
+	});
+	return {
+		renderInput: {
+			...n,
+			pageSlot: !0,
+			loaderData: null,
+			segmentLoaderData: r.segmentLoaderData
+		},
+		stateScript: t.renderRouterStateScript(r.stateInput),
+		hasDeferred: r.hasDeferred
+	};
+}, Xt = (e) => {
+	let { html: t, meta: n } = e.helpers.renderPageToHtml(e.prepared.renderInput);
+	return {
+		body: t,
+		meta: n
+	};
+}, Zt = (e) => [
+	...e.extra ?? [],
+	e.helpers.renderMetaToHtml(e.meta),
+	`<meta name="voltro-interactive" content="${e.interactive}" />`,
+	...e.prepared.hasDeferred ? [e.helpers.renderDeferredRegistryScript()] : [],
+	e.prepared.stateScript
+].filter((e) => e.length > 0).join("\n    "), Qt = (e, t) => {
+	let n = t.replace(/[^A-Za-z0-9+/=_-]/g, "");
+	return e.replace(/<script(?![^>]*\bnonce=)/gi, `<script nonce="${n}"`);
+}, $t = (e) => {
+	let t = e.indexOf("?");
+	return t === -1 ? {
+		pathname: e || "/",
+		search: ""
+	} : {
+		pathname: e.slice(0, t) || "/",
+		search: e.slice(t)
+	};
+}, en = (e) => {
 	let t = [];
 	for (let n of e.split("/").filter(Boolean)) n.startsWith("[[...") && n.endsWith("]]") ? t.push({
 		name: n.slice(5, -2),
@@ -554,12 +888,12 @@ __installPublicEnv(publicEnvValues)
 		optional: !1
 	});
 	return t;
-}, ot = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), st = async (e) => {
+}, tn = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), nn = async (e) => {
 	let t = A(e);
 	for (let e = 0; e < 4; e++) {
 		let e = O(t, "project.json");
-		if (j(e)) try {
-			let n = await M.readFile(e, "utf8");
+		if (M(e)) try {
+			let n = await N.readFile(e, "utf8");
 			return {
 				projectDir: t,
 				manifest: JSON.parse(n)
@@ -572,33 +906,33 @@ __installPublicEnv(publicEnvValues)
 		t = n;
 	}
 	return null;
-}, ct = async (e) => {
-	let t = await st(e);
+}, rn = async (e) => {
+	let t = await nn(e);
 	if (!t) return [];
 	let { projectDir: n, manifest: r } = t, i = E(e), a = r.apps ?? {}, o = [];
 	for (let [e, t] of Object.entries(a)) {
 		if (e === i || t.kind !== "web" || typeof t.port != "number") continue;
 		let r = O(n, t.path ?? e), a = O(r, "src", "pages");
-		if (!j(a)) continue;
+		if (!M(a)) continue;
 		let s;
 		try {
-			let { pages: e } = await Jr(a);
+			let { pages: e } = await $(a);
 			s = e.map((e) => ({
 				pattern: e.pattern,
-				params: at(e.pattern)
+				params: en(e.pattern)
 			}));
 		} catch {
 			continue;
 		}
 		o.push({
-			key: ot(e),
+			key: tn(e),
 			origin: `http://localhost:${t.port}`,
 			...typeof t.origin == "string" && t.origin.length > 0 ? { prodOrigin: t.origin } : {},
 			routes: s
 		});
 	}
 	return o;
-}, lt = (e) => {
+}, an = (e) => {
 	if (e.params.length === 0) return `'${e.pattern}'`;
 	let t = e.pattern;
 	for (let n of e.params) {
@@ -606,73 +940,91 @@ __installPublicEnv(publicEnvValues)
 		t = t.replace(e, r);
 	}
 	return "`" + t + "`";
-}, ut = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
+}, on = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
 	let t = "string";
 	return e.optional ? `readonly ${e.name}?: ${t}` : `readonly ${e.name}: ${t}`;
-}).join("; ")} }`, dt = (e, t, n) => {
-	let r = ut(e), i = lt(e), a = t ? "VoltroExternalUrl" : "VoltroRouteUrl", o = t && n ? `${n} + ` : "";
+}).join("; ")} }`, sn = (e, t, n) => {
+	let r = on(e), i = an(e), a = t ? "VoltroExternalUrl" : e.search === void 0 ? "VoltroRouteUrl" : `VoltroRouteUrl<Schema.Schema.Type<typeof ${e.search.alias}>>`, o = t && n ? `${n} + ` : "";
 	return e.params.length === 0 ? `() => (${o}${i}) as ${a}` : `({ ${e.params.map((e) => e.name).join(", ")} }: ${r}) => (${o}${i}) as ${a}`;
-}, ft = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${dt(e, !1)},`).join("\n")}\n}`, pt = (e, t) => {
+}, cn = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${sn(e, !1)},`).join("\n")}\n}`, ln = (e, t) => {
 	if (e.routes.length === 0) return `  ${e.key}: {} as Record<string, never>,`;
-	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${dt(e, !0, i)},`);
+	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${sn(e, !0, i)},`);
 	return `  ${e.key}: {\n${a.join("\n")}\n  },`;
-}, mt = async (e) => {
-	let t = e.pages.map((e) => ({
-		pattern: e.pattern,
-		params: at(e.pattern)
-	})), n = await ct(e.appRoot), r = [
+}, un = async (e) => {
+	let t = await Promise.all(e.pages.map(async (t) => {
+		let n;
+		try {
+			let r = await N.readFile(O(e.appRoot, "src", "pages", t.file), "utf8");
+			/^export const searchParams\b/m.test(r) && (n = {
+				alias: `SP_${t.ident}`,
+				specifier: `../src/pages/${t.file.replace(/\.tsx?$/, "")}`
+			});
+		} catch {}
+		return {
+			pattern: t.pattern,
+			params: en(t.pattern),
+			...n === void 0 ? {} : { search: n }
+		};
+	})), n = await rn(e.appRoot), r = t.filter((e) => e.search !== void 0).sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `import type { searchParams as ${e.search.alias} } from '${e.search.specifier}'`), i = [
 		"// THIS FILE IS GENERATED — DO NOT EDIT BY HAND.",
 		"// Re-emitted by `voltro dev` whenever `src/pages/**` changes.",
 		"// Type-safe route builders consumed by <Link to={...}>.",
 		"",
 		"import type { VoltroRouteUrl, VoltroExternalUrl } from '@voltro/web'",
+		...r.length > 0 ? [
+			"// Type-ONLY page imports: they brand each schema-carrying route's URL with",
+			"// its searchParams shape and are erased at compile time — no page enters",
+			"// this module's value graph (plans/parity/05, the code-splitting decision).",
+			"import type { Schema } from 'effect'",
+			...r
+		] : [],
 		"",
 		"type EmptyParams = Record<string, never>",
 		""
-	].join("\n"), i = e.mode ?? "dev", a = `${r}\n${`export const routes = ${ft(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => pt(e, i)).join("\n")}\n} as const\n`}`, o = O(e.appRoot, ".framework", "routes.generated.ts");
-	await M.mkdir(D(o), { recursive: !0 });
-	let s = null;
+	].join("\n"), a = e.mode ?? "dev", o = `${i}\n${`export const routes = ${cn(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => ln(e, a)).join("\n")}\n} as const\n`}`, s = O(e.appRoot, ".framework", "routes.generated.ts");
+	await N.mkdir(D(s), { recursive: !0 });
+	let c = null;
 	try {
-		s = await M.readFile(o, "utf8");
+		c = await N.readFile(s, "utf8");
 	} catch {}
-	return s === a ? {
-		path: o,
+	return c === o ? {
+		path: s,
 		wrote: !1
-	} : (await M.writeFile(o, a, "utf8"), {
-		path: o,
+	} : (await N.writeFile(s, o, "utf8"), {
+		path: s,
 		wrote: !0
 	});
-}, ht = (e) => {
+}, dn = (e) => {
 	if (e === "" || e === "/") return "/";
 	let t = e.startsWith("/") ? e : `/${e}`;
 	return t.endsWith("/") ? t.slice(0, -1) : t;
-}, gt = (e, t) => {
-	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = ht(t);
+}, fn = (e, t) => {
+	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = dn(t);
 	return r === "/" ? `${n}/` : `${n}${r}`;
-}, _t = (e, t, n) => {
-	let r = ht(e);
+}, pn = (e, t, n) => {
+	let r = dn(e);
 	return t === n ? r : r === "/" ? `/${t}` : `/${t}${r}`;
-}, vt = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), yt = (e) => {
+}, mn = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), hn = (e) => {
 	let { siteUrl: t, entries: n } = e, r = e.locales && e.locales.length > 1 ? e.locales : void 0, i = e.defaultLocale ?? r?.[0] ?? "en", a = r !== void 0, o = /* @__PURE__ */ new Map(), s = (e) => {
 		if (!r) return "";
-		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${vt(n)}" href="${vt(gt(t, _t(e, n, i)))}" />`);
-		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${vt(gt(t, _t(e, i, i)))}" />`), `\n${n.join("\n")}`;
+		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${mn(n)}" href="${mn(fn(t, pn(e, n, i)))}" />`);
+		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${mn(fn(t, pn(e, i, i)))}" />`), `\n${n.join("\n")}`;
 	};
 	for (let e of n) {
 		let n = r ?? [i];
 		for (let r of n) {
-			let n = gt(t, _t(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${vt(e.lastmod)}</lastmod>` : "";
-			o.set(n, `  <url>\n    <loc>${vt(n)}</loc>${a}${s(e.path)}\n  </url>`);
+			let n = fn(t, pn(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${mn(e.lastmod)}</lastmod>` : "";
+			o.set(n, `  <url>\n    <loc>${mn(n)}</loc>${a}${s(e.path)}\n  </url>`);
 		}
 	}
 	let c = [...o.keys()].sort().map((e) => o.get(e)).join("\n");
 	return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset${a ? " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\"" : " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\""}>\n${c}\n</urlset>\n`;
-}, bt = (e) => {
+}, gn = (e) => {
 	if (!e.indexable) return "User-agent: *\nDisallow: /\n";
 	let t = ["User-agent: *", "Allow: /"];
-	for (let n of e.disallow ?? []) t.push(`Disallow: ${ht(n)}`);
+	for (let n of e.disallow ?? []) t.push(`Disallow: ${dn(n)}`);
 	return e.sitemapUrl && t.push("", `Sitemap: ${e.sitemapUrl}`), `${t.join("\n")}\n`;
-}, xt = 256, St = (e = xt) => {
+}, _n = 256, vn = (e = _n) => {
 	let t = [], n = /* @__PURE__ */ new Set();
 	return {
 		emit(r, i) {
@@ -695,18 +1047,18 @@ __installPublicEnv(publicEnvValues)
 			return t.slice();
 		}
 	};
-}, Ct = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, wt = () => `: keep-alive ${Date.now()}\n\n`, Tt = 8e3, Et = (e, t = Tt) => {
-	let n = Ot(e);
+}, yn = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, bn = () => `: keep-alive ${Date.now()}\n\n`, xn = 8e3, Sn = (e, t = xn) => {
+	let n = wn(e);
 	return n.length <= t ? n : `${n.slice(0, t)}\n… [voltro] truncated at ${t} chars (${n.length} total)`;
-}, Dt = 4, Ot = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
+}, Cn = 4, wn = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
 	if (e instanceof Error) {
 		let r = e.stack ?? `${e.name}: ${e.message}`;
 		if (n.has(e)) return `${r}\n  [cycle]`;
 		n.add(e);
 		let i = [];
-		if (t < Dt) {
-			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${kt(Ot(a, t + 1, n))}`);
-			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${kt(Ot(e.cause, t + 1, n))}`);
+		if (t < Cn) {
+			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${Tn(wn(a, t + 1, n))}`);
+			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${Tn(wn(e.cause, t + 1, n))}`);
 		}
 		return r + i.join("");
 	}
@@ -715,30 +1067,30 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return "[unstringifiable thrown value]";
 	}
-}, kt = (e) => {
+}, Tn = (e) => {
 	let t = e.split("\n");
 	return t.length <= 3 ? e : `${t.slice(0, 3).join("\n")}\n  …`;
-}, At = {
+}, En = {
 	trace: 0,
 	debug: 1,
 	info: 2,
 	warn: 3,
 	error: 4,
 	fatal: 5
-}, jt = 2e3, Mt = 200, Nt = class {
+}, Dn = 2e3, On = 200, kn = class {
 	capacity;
 	buffer = [];
-	constructor(e = jt) {
+	constructor(e = Dn) {
 		this.capacity = e;
 	}
 	append(e) {
 		this.buffer.push(e), this.buffer.length > this.capacity && this.buffer.shift();
 	}
 	query(e = {}) {
-		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? Mt, this.capacity), i = e.minLevel === void 0 ? At.trace : At[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
+		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? On, this.capacity), i = e.minLevel === void 0 ? En.trace : En[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
 		for (let e = this.buffer.length - 1; e >= 0 && l.length < r; e--) {
 			let r = this.buffer[e];
-			r.ts < t || r.ts > n || At[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
+			r.ts < t || r.ts > n || En[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
 		}
 		return l.reverse();
 	}
@@ -751,7 +1103,7 @@ __installPublicEnv(publicEnvValues)
 	clear() {
 		this.buffer = [];
 	}
-}, Pt = null, Ft = () => (Pt === null && (Pt = new Nt()), Pt), It = (e) => {
+}, An = null, jn = () => (An === null && (An = new kn()), An), Mn = (e) => {
 	if (typeof e == "string") return e;
 	if (e instanceof Error) return e.message;
 	try {
@@ -759,28 +1111,28 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return String(e);
 	}
-}, Lt = 8e3, Rt = (e) => typeof e == "string" ? e.length <= Lt ? e : `${e.slice(0, Lt)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Et(e, Lt), zt = (e, t) => {
+}, Nn = 8e3, Pn = (e) => typeof e == "string" ? e.length <= Nn ? e : `${e.slice(0, Nn)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Sn(e, Nn), Fn = (e, t) => {
 	try {
 		e(...t);
 	} catch (n) {
 		try {
-			e(...t.map(Rt)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Lt} chars per argument.`);
+			e(...t.map(Pn)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Nn} chars per argument.`);
 		} catch {
 			e(`[voltro] a console.error argument could not be formatted at all (${t.length} arg(s)).`);
 		}
 	}
-}, Bt = (e) => {
+}, In = (e) => {
 	let t = {
 		log: console.log.bind(console),
 		info: console.info.bind(console),
 		warn: console.warn.bind(console),
 		error: console.error.bind(console),
 		debug: console.debug.bind(console)
-	}, n = Ft(), r = !1, i = (i) => (...a) => {
-		if (zt(t[i], a), !r) {
+	}, n = jn(), r = !1, i = (i) => (...a) => {
+		if (Fn(t[i], a), !r) {
 			r = !0;
 			try {
-				let t = a.length > 0 ? It(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = V();
+				let t = a.length > 0 ? Mn(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = V();
 				e.emit("log", {
 					level: i,
 					message: r,
@@ -807,7 +1159,7 @@ __installPublicEnv(publicEnvValues)
 		}
 	};
 	console.log = i("log"), console.info = i("info"), console.warn = i("warn"), console.error = i("error"), console.debug = i("debug");
-	let a = R((t) => {
+	let a = L((t) => {
 		if (!r) {
 			r = !0;
 			try {
@@ -838,24 +1190,24 @@ __installPublicEnv(publicEnvValues)
 	return () => {
 		console.log = t.log, console.info = t.info, console.warn = t.warn, console.error = t.error, console.debug = t.debug, a();
 	};
-}, Vt = 2e3, Ht = 8, Ut = 1e3, Wt = 200, Gt = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Kt = (e) => {
+}, Ln = 2e3, Rn = 8, zn = 1e3, Bn = 200, Vn = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Hn = (e) => {
 	switch (e) {
 		case "error": return "error";
 		case "warn": return "warn";
 		case "debug": return "debug";
 		default: return "info";
 	}
-}, qt = z({ scope: "client" }), Jt = (e, t) => {
+}, Un = R({ scope: "client" }), Wn = (e, t) => {
 	let n;
 	try {
 		n = JSON.parse(e);
 	} catch {
-		return Yt(400, { error: "invalid JSON body" });
+		return Gn(400, { error: "invalid JSON body" });
 	}
-	if (typeof n != "object" || !n) return Yt(400, { error: "body must be a JSON object" });
+	if (typeof n != "object" || !n) return Gn(400, { error: "body must be a JSON object" });
 	let r = n;
-	if (!Array.isArray(r.entries)) return Yt(400, { error: "entries must be an array" });
-	let i = typeof r.app == "string" ? Gt(r.app, 120) : void 0, a = typeof r.page == "string" ? Gt(r.page, 200) : void 0, o = typeof r.ua == "string" ? Gt(r.ua, 200) : void 0, s = r.entries.slice(0, Wt), c = 0;
+	if (!Array.isArray(r.entries)) return Gn(400, { error: "entries must be an array" });
+	let i = typeof r.app == "string" ? Vn(r.app, 120) : void 0, a = typeof r.page == "string" ? Vn(r.page, 200) : void 0, o = typeof r.ua == "string" ? Vn(r.ua, 200) : void 0, s = r.entries.slice(0, Bn), c = 0;
 	for (let e of s) {
 		if (typeof e != "object" || !e) continue;
 		let n = e;
@@ -866,7 +1218,7 @@ __installPublicEnv(publicEnvValues)
 			"warn",
 			"error",
 			"debug"
-		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Gt(n.message, Vt), u = Array.isArray(n.args) ? n.args.slice(0, Ht).filter((e) => typeof e == "string").map((e) => Gt(e, Ut)) : void 0, d = typeof n.stack == "string" ? Gt(n.stack, Vt) : void 0;
+		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Vn(n.message, Ln), u = Array.isArray(n.args) ? n.args.slice(0, Rn).filter((e) => typeof e == "string").map((e) => Vn(e, zn)) : void 0, d = typeof n.stack == "string" ? Vn(n.stack, Ln) : void 0;
 		t.emit("clientLog", {
 			ts: s,
 			level: r,
@@ -881,35 +1233,35 @@ __installPublicEnv(publicEnvValues)
 			...i === void 0 ? {} : { app: i },
 			...a === void 0 ? {} : { page: a },
 			...u !== void 0 && u.length > 0 ? { args: u } : {}
-		}, p = Kt(r);
-		(p === "error" || p === "warn") && d !== void 0 ? qt[p](l, f, { stack: d }) : qt[p](l, {
+		}, p = Hn(r);
+		(p === "error" || p === "warn") && d !== void 0 ? Un[p](l, f, { stack: d }) : Un[p](l, {
 			...f,
 			...d === void 0 ? {} : { stack: d }
 		}), c++;
 	}
-	return Yt(202, {
+	return Gn(202, {
 		accepted: c,
 		dropped: r.entries.length - c
 	});
-}, Yt = (e, t) => ({
+}, Gn = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Xt = "/_voltro/inspect/clientLog", Zt = [
+}), Kn = "/_voltro/inspect/clientLog", qn = [
 	"trace",
 	"debug",
 	"info",
 	"warn",
 	"error",
 	"fatal"
-], Qt = {
+], Jn = {
 	trace: "TRACE",
 	debug: "DEBUG",
 	info: "INFO ",
 	warn: "WARN ",
 	error: "ERROR",
 	fatal: "FATAL"
-}, $t = (e) => Zt.includes(e), en = (e, t, n = {}) => {
+}, Yn = (e) => qn.includes(e), Xn = (e, t, n = {}) => {
 	if (u()) return {
 		status: 503,
 		contentType: "application/json",
@@ -940,7 +1292,7 @@ __installPublicEnv(publicEnvValues)
 		Number.isFinite(e) && e > 0 && (o.max = Math.floor(e));
 	}
 	let d = a.get("level");
-	d !== null && $t(d) && (o.minLevel = d);
+	d !== null && Yn(d) && (o.minLevel = d);
 	let p = a.get("source");
 	(p === "server" || p === "client") && (o.source = p);
 	let m = a.get("scope");
@@ -953,7 +1305,7 @@ __installPublicEnv(publicEnvValues)
 	if ((a.get("format") ?? "json") === "text") return {
 		status: 200,
 		contentType: "text/plain; charset=utf-8",
-		body: _.map(tn).join("\n") + (_.length > 0 ? "\n" : "")
+		body: _.map(Zn).join("\n") + (_.length > 0 ? "\n" : "")
 	};
 	let v = {
 		capturedAt: Date.now(),
@@ -967,40 +1319,40 @@ __installPublicEnv(publicEnvValues)
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(v)
 	};
-}, tn = (e) => {
-	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = rn(e.fields);
-	return `${n}:${r}:${i}.${a} ${Qt[e.level]} ${o} ${e.message}${s}`;
-}, nn = 80, rn = (e) => {
+}, Zn = (e) => {
+	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = $n(e.fields);
+	return `${n}:${r}:${i}.${a} ${Jn[e.level]} ${o} ${e.message}${s}`;
+}, Qn = 80, $n = (e) => {
 	let t = Object.entries(e);
 	if (t.length === 0) return "";
 	let n = [];
 	for (let [e, r] of t) {
 		if (r === void 0) continue;
-		let t = an(r);
+		let t = er(r);
 		n.push(`${e}=${t}`);
 	}
 	return n.length > 0 ? "  " + n.join(" ") : "";
-}, an = (e) => {
+}, er = (e) => {
 	if (typeof e == "string") {
-		let t = e.length > nn ? e.slice(0, nn) + "…" : e;
+		let t = e.length > Qn ? e.slice(0, Qn) + "…" : e;
 		return /[\s=]/.test(t) ? `"${t.replace(/"/g, "\\\"")}"` : t;
 	}
 	if (e === null) return "null";
 	if (typeof e == "number" || typeof e == "boolean") return String(e);
 	try {
 		let t = JSON.stringify(e);
-		return t.length > nn ? t.slice(0, nn) + "…" : t;
+		return t.length > Qn ? t.slice(0, Qn) + "…" : t;
 	} catch {
 		return "[unserialisable]";
 	}
-}, on = "/_voltro/inspect/logs", sn = (e, t, n) => {
+}, tr = "/_voltro/inspect/logs", nr = (e, t, n) => {
 	if (t.headers.authorization !== void 0) return !1;
 	let { token: r } = n;
 	if (r === void 0 || r === "" || !n.isLoopback(n.target)) return !1;
 	e.setHeader("authorization", `Bearer ${r}`);
 	let i = n.writeToken;
 	return i !== void 0 && i !== "" && t.headers["x-voltro-inspect-write"] === void 0 && e.setHeader("x-voltro-inspect-write", i), !0;
-}, cn = [{
+}, rr = [{
 	match: (e) => typeof e == "string" && e.startsWith("[BABEL] Note: The code generator has deoptimised"),
 	handle: (e, t) => {
 		let n = e[0], r = n.match(/deoptimised the styling of (.+?) as it exceeds the max of (\d+\w*B)\.?/);
@@ -1012,13 +1364,13 @@ __installPublicEnv(publicEnvValues)
 			});
 		} else t.info(n);
 	}
-}], ln = () => {
+}], ir = () => {
 	let e = {
 		warn: console.warn.bind(console),
 		error: console.error.bind(console)
-	}, t = z({ scope: "babel" }), n = !1, r = (r) => (...i) => {
+	}, t = R({ scope: "babel" }), n = !1, r = (r) => (...i) => {
 		if (!n) {
-			for (let e of cn) if (e.match(i[0])) {
+			for (let e of rr) if (e.match(i[0])) {
 				n = !0;
 				try {
 					e.handle(i, t);
@@ -1033,7 +1385,7 @@ __installPublicEnv(publicEnvValues)
 	return console.warn = r("warn"), console.error = r("error"), () => {
 		console.warn = e.warn, console.error = e.error;
 	};
-}, un = {
+}, ar = {
 	loader: "it runs on the server, and the router caches its result per route + params",
 	renderMode: "it picks the server render strategy",
 	dynamic: "it picks the server render strategy",
@@ -1044,7 +1396,7 @@ __installPublicEnv(publicEnvValues)
 	cacheInvalidatesOn: "it wires this page into the ISR cache invalidator",
 	interactive: "it decides how much client JS the server ships",
 	tenantAware: "it is part of the server-side cache key"
-}, dn = Object.keys(un), fn = "virtual:voltro-route-refresh", pn = `\0${fn}`, mn = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, hn = () => `
+}, or = Object.keys(ar), sr = "virtual:voltro-route-refresh", cr = `\0${sr}`, lr = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, ur = () => `
 // GENERATED by @voltro/cli — the \`voltro dev\` route Fast Refresh runtime.
 
 /** Mirrors react-refresh's own \`isLikelyComponentType\` closely enough for the
@@ -1073,11 +1425,11 @@ const stableForm = (value) => {
  *  readers (\`build.ts\` prerender, \`webDev.ts\` dev SSR, \`start.ts\`). A change to
  *  one of THESE cannot be hot-applied: the server already ran with the old
  *  value. Everything else a page exports is plain client-side data. */
-const serverRelevantExports = ${JSON.stringify(dn)}
+const serverRelevantExports = ${JSON.stringify(or)}
 
 /** Name → the server step that already consumed it, so the reload message can
  *  say WHY rather than just WHAT. Injected from the same single source. */
-const serverExportEffect = ${JSON.stringify(un)}
+const serverExportEffect = ${JSON.stringify(ar)}
 
 /** The reason \`name\` forces a reload, for the console line. */
 export const serverEffectOf = (name) =>
@@ -1120,7 +1472,7 @@ export const routeUpdateNeedsReload = (prevExports, nextExports) => {
 const previousHook = globalThis.__getReactRefreshIgnoredExports
 globalThis.__getReactRefreshIgnoredExports = (args) =>
   ignoredExports.get(args.id) ?? previousHook?.(args) ?? []
-`, gn = (e) => `
+`, dr = (e) => `
 if (import.meta.hot) {
   // Self-import to read our OWN exports, the same technique the react plugin
   // uses; the namespace is only complete after evaluation, hence the promise.
@@ -1147,42 +1499,42 @@ import {
   registerRouteModule as __voltro_registerRouteModule,
   routeUpdateNeedsReload as __voltro_routeUpdateNeedsReload,
   serverEffectOf as __voltro_serverEffect,
-} from '${fn}'
-`, _n = (e) => e.replace(/\\/g, "/"), vn = (e, t) => {
-	let [n = "", r] = _n(e).split("?");
-	if (!n.endsWith(".tsx") || r !== void 0 && mn.test(r)) return !1;
-	let i = _n(t).replace(/\/$/, "");
+} from '${sr}'
+`, fr = (e) => e.replace(/\\/g, "/"), pr = (e, t) => {
+	let [n = "", r] = fr(e).split("?");
+	if (!n.endsWith(".tsx") || r !== void 0 && lr.test(r)) return !1;
+	let i = fr(t).replace(/\/$/, "");
 	return n.startsWith(`${i}/`) ? c.test(n) || s.has(n.slice(n.lastIndexOf("/") + 1)) : !1;
-}, yn = (e, t, n) => vn(t, n) ? `${e}${gn(_n(t).split("?")[0] ?? t)}` : null, bn = (e) => ({
+}, mr = (e, t, n) => pr(t, n) ? `${e}${dr(fr(t).split("?")[0] ?? t)}` : null, hr = (e) => ({
 	name: "voltro:route-fast-refresh",
 	enforce: "pre",
-	resolveId: (e) => e === "virtual:voltro-route-refresh" ? pn : void 0,
-	load: (e) => e === pn ? hn() : void 0,
+	resolveId: (e) => e === "virtual:voltro-route-refresh" ? cr : void 0,
+	load: (e) => e === cr ? ur() : void 0,
 	transform: (t, n, r) => {
 		if (r?.ssr === !0) return null;
-		let i = yn(t, n, e);
+		let i = mr(t, n, e);
 		return i === null ? null : {
 			code: i,
 			map: null
 		};
 	}
-}), xn = z({ scope: "voltro:dashboard" }), Sn = B(import.meta.url), Cn = 5179, wn = (e) => {
+}), gr = R({ scope: "voltro:dashboard" }), _r = ie(import.meta.url), vr = 5179, yr = (e) => {
 	let t = process.env.VOLTRO_DASHBOARD_PATH;
-	if (t && j(O(A(t), "app.config.ts"))) return A(t);
+	if (t && M(O(A(t), "app.config.ts"))) return A(t);
 	try {
-		let e = D(Sn.resolve("@voltro/dashboard/package.json"));
-		if (j(O(e, "app.config.ts"))) return e;
+		let e = D(_r.resolve("@voltro/dashboard/package.json"));
+		if (M(O(e, "app.config.ts"))) return e;
 	} catch {}
 	let n = O("voltro-devtools", "apps", "dashboard"), r = A(e);
 	for (let e = 0; e < 10; e++) {
 		let e = O(r, n);
-		if (j(O(e, "app.config.ts"))) return e;
+		if (M(O(e, "app.config.ts"))) return e;
 		let t = D(r);
 		if (t === r) break;
 		r = t;
 	}
 	return null;
-}, Tn = "VOLTRO_IS_DASHBOARD", En = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
+}, br = "VOLTRO_IS_DASHBOARD", xr = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
 	let i = K({
 		port: e,
 		host: t
@@ -1190,45 +1542,45 @@ import {
 		a || (a = !0, i.destroy(), r(e));
 	};
 	i.once("connect", () => o(!0)), i.once("error", () => o(!1)), setTimeout(() => o(!1), n);
-}), Dn = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), On = () => process.env[Tn] === "1", kn = () => process.stdout.isTTY === !0, An = O(H(), ".voltro", "dashboard-launch.lock"), jn = 1e4, Mn = async () => {
+}), Sr = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), Cr = () => process.env[br] === "1", wr = () => process.stdout.isTTY === !0, Tr = O(H(), ".voltro", "dashboard-launch.lock"), Er = 1e4, Dr = async () => {
 	try {
-		await M.mkdir(D(An), { recursive: !0 });
-		let e = await M.open(An, "wx");
+		await N.mkdir(D(Tr), { recursive: !0 });
+		let e = await N.open(Tr, "wx");
 		return await e.write(`${process.pid}\n${Date.now()}\n`), await e.close(), !0;
 	} catch {
 		try {
-			let e = await M.stat(An);
-			if (Date.now() - e.mtimeMs > jn) return await M.unlink(An).catch(() => void 0), Mn();
+			let e = await N.stat(Tr);
+			if (Date.now() - e.mtimeMs > Er) return await N.unlink(Tr).catch(() => void 0), Dr();
 		} catch {}
 		return !1;
 	}
-}, Nn = async () => {
+}, Or = async () => {
 	try {
-		await M.unlink(An);
+		await N.unlink(Tr);
 	} catch {}
-}, Pn = async (e) => {
+}, kr = async (e) => {
 	let t = e.port ?? 5179;
-	if (Dn()) return {
+	if (Sr()) return {
 		status: "skipped",
 		reason: "disabled by flag/env",
 		port: t
 	};
-	if (On()) return {
+	if (Cr()) return {
 		status: "skipped",
 		reason: "this process IS the dashboard",
 		port: t
 	};
-	if (!kn()) return {
+	if (!wr()) return {
 		status: "skipped",
 		reason: "stdout is not a TTY (CI/smoke)",
 		port: t
 	};
-	if (!await Mn()) return {
+	if (!await Dr()) return {
 		status: "skipped",
 		reason: "another voltro process is currently launching the dashboard",
 		port: t
 	};
-	if (await En(t)) return await Nn(), {
+	if (await xr(t)) return await Or(), {
 		status: "already-running",
 		port: t
 	};
@@ -1237,7 +1589,7 @@ import {
 		let e = process.argv[1];
 		n = e && e.endsWith("/src/bin.ts") ? O(D(e), "..", "bin", "voltro.mjs") : e ?? "voltro";
 	}
-	let r = O(e.dashboardAppPath, ".framework", "dist", "index.html"), i = j(r), a = i ? "start" : "dev", o = me(process.execPath, [
+	let r = O(e.dashboardAppPath, ".framework", "dist", "index.html"), i = M(r), a = i ? "start" : "dev", o = _e(process.execPath, [
 		n,
 		a,
 		e.dashboardAppPath
@@ -1245,7 +1597,7 @@ import {
 		stdio: "ignore",
 		env: {
 			...process.env,
-			[Tn]: "1",
+			[br]: "1",
 			VOLTRO_DASHBOARD_PORT: String(t)
 		}
 	});
@@ -1253,120 +1605,19 @@ import {
 		if (o.exitCode === null && o.signalCode === null) try {
 			o.kill("SIGTERM");
 		} catch {}
-	}), xn.info(`auto-launching dashboard at http://localhost:${t}`, {
+	}), gr.info(`auto-launching dashboard at http://localhost:${t}`, {
 		port: t,
 		mode: a,
 		prebuilt: i
-	}), i || xn.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), xn.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
-		Nn();
+	}), i || gr.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), gr.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
+		Or();
 	}, 4e3).unref(), {
 		status: "launched",
 		port: t
 	};
-}, Fn = class extends Error {
-	_voltroDeferral = !0;
-	constructor(e) {
-		super(e), this.name = "DeferralNotSupportedError";
-	}
-}, In = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, Ln = (e) => {
-	if (!(e instanceof Error)) return;
-	let t = e._voltroControl;
-	if (t === "redirect") {
-		let { location: t, status: n } = e;
-		return typeof t == "string" ? {
-			status: n === 307 || n === 308 ? n : 303,
-			headers: {
-				location: t,
-				"x-voltro-rendered-by": "loader-redirect"
-			},
-			body: ""
-		} : void 0;
-	}
-	if (t === "not-found") return {
-		status: 404,
-		headers: {
-			"content-type": "text/plain; charset=utf-8",
-			"x-voltro-rendered-by": "loader-not-found"
-		},
-		body: "not found"
-	};
-}, Rn = (e) => {
-	let { helpers: t } = e, n = t.prepareDeferredLoaderData(e.loaderData, "page"), r = {}, i = {}, a = {};
-	for (let [n, o] of Object.entries(e.segmentLoaderData)) {
-		let e = Number(n), s = t.prepareDeferredLoaderData(o, e);
-		r[e] = s.renderData, i[e] = s.stateData, s.deferredIds && (a[e] = s.deferredIds);
-	}
-	let o = n.deferredIds !== void 0 || Object.keys(a).length > 0;
-	if (o) try {
-		t.assertDeferralSupported({
-			page: e.page,
-			renderMode: e.renderMode,
-			interactive: e.interactive,
-			...e.layoutShell ? { layoutShell: e.layoutShell } : {}
-		});
-	} catch (e) {
-		throw new Fn(e instanceof Error ? e.message : String(e));
-	}
-	return {
-		loaderData: n.renderData,
-		segmentLoaderData: r,
-		hasDeferred: o,
-		stateInput: {
-			path: e.pathname,
-			loaderData: n.stateData,
-			segmentLoaderData: i,
-			pageLoaderRan: e.pageLoaderRan,
-			...e.layoutShell ? { pageClientOnly: !0 } : {},
-			...n.deferredIds ? { deferredPageIds: n.deferredIds } : {},
-			...Object.keys(a).length > 0 ? { deferredSegmentIds: a } : {}
-		}
-	};
-}, zn = (e) => {
-	let { helpers: t, renderInput: n } = e, r = Rn({
-		helpers: t,
-		page: e.page,
-		pathname: n.pathname,
-		renderMode: "spa",
-		interactive: e.interactive,
-		loaderData: null,
-		segmentLoaderData: n.segmentLoaderData ?? {},
-		pageLoaderRan: !1,
-		layoutShell: e.delivery
-	});
-	return {
-		renderInput: {
-			...n,
-			pageSlot: !0,
-			loaderData: null,
-			segmentLoaderData: r.segmentLoaderData
-		},
-		stateScript: t.renderRouterStateScript(r.stateInput),
-		hasDeferred: r.hasDeferred
-	};
-}, Bn = (e) => {
-	let { html: t, meta: n } = e.helpers.renderPageToHtml(e.prepared.renderInput);
-	return {
-		body: t,
-		meta: n
-	};
-}, Vn = (e) => [
-	...e.extra ?? [],
-	e.helpers.renderMetaToHtml(e.meta),
-	`<meta name="voltro-interactive" content="${e.interactive}" />`,
-	...e.prepared.hasDeferred ? [e.helpers.renderDeferredRegistryScript()] : [],
-	e.prepared.stateScript
-].filter((e) => e.length > 0).join("\n    "), Hn = (e) => {
-	let t = e.indexOf("?");
-	return t === -1 ? {
-		pathname: e || "/",
-		search: ""
-	} : {
-		pathname: e.slice(0, t) || "/",
-		search: e.slice(t)
-	};
-}, Un = /Could not find required `intl` object/, Wn = "__voltro_i18n_instances__", Gn = (e = globalThis) => {
+}, Ar = /Could not find required `intl` object/, jr = "__voltro_i18n_instances__", Mr = (e = globalThis) => {
 	try {
-		let t = e[Wn]?.records;
+		let t = e[jr]?.records;
 		return t === void 0 || t.length === 0 ? void 0 : {
 			instances: t.length,
 			reactIntlCopies: new Set(t.map((e) => e.intlProvider)).size,
@@ -1375,7 +1626,7 @@ import {
 	} catch {
 		return;
 	}
-}, Kn = (e, t) => [
+}, Nr = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1393,7 +1644,7 @@ import {
 	"  versions on disk; this counts instances in the running process, and one",
 	"  file loaded down two paths is two instances.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), qn = (e, t) => [
+].join("\n"), Pr = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1409,7 +1660,7 @@ import {
 	"  direct import can land on a second copy that this count does not see —",
 	"  it counts what @voltro/i18n is bound to.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Jn = (e) => [
+].join("\n"), Fr = (e) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider> — the framework`,
@@ -1425,34 +1676,37 @@ import {
 	"  Do NOT use `pnpm ls` to rule that out: it lists versions on disk, and",
 	"  the duplication here is of module instances in one process.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Yn = (e, t, n, r = Gn()) => {
+].join("\n"), Ir = (e, t, n, r = Mr()) => {
 	if (!t) return;
 	let i = String(e?.message ?? e);
-	if (Un.test(i)) return r === void 0 ? Jn(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Kn(n, r) : qn(n, r);
-}, Xn = "<div id=\"root\"></div>", Zn = "<div id=\"root\">", Qn = "</div>", $n = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, er = /\bsrc=["']([^"']+)["']/i, tr = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, nr = (e) => {
-	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace($n, (e) => {
-		let r = er.exec(e)?.[1];
+	if (Ar.test(i)) return r === void 0 ? Fr(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Nr(n, r) : Pr(n, r);
+}, Lr = "<div id=\"root\"></div>", Rr = "<div id=\"root\">", zr = "</div>", Br = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, Vr = /\bsrc=["']([^"']+)["']/i, Hr = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, Ur = (e) => {
+	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace(Br, (e) => {
+		let r = Vr.exec(e)?.[1];
 		return r === void 0 || t(r) ? e : (n.push(r), "");
 	});
-	e.inlineModuleScriptsAsync && (r = r.replace(tr, "<script async$1>"));
-	let i = r.indexOf(Xn);
-	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Xn}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
+	e.inlineModuleScriptsAsync && (r = r.replace(Hr, "<script async$1>"));
+	let i = r.indexOf(Lr);
+	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Lr}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
 	return {
-		head: `${r.slice(0, i)}${Zn}`,
-		tail: `${Qn}${r.slice(i + 21)}`,
+		head: `${r.slice(0, i)}${Rr}`,
+		tail: `${zr}${r.slice(i + 21)}`,
 		bootstrapModules: n
 	};
-}, rr = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), ir = (e) => rr(e.head, e.headInjection).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${e.htmlLang}"`), ar = (e) => {
-	let { res: t, shell: n, htmlLang: r, headInjection: i } = e, a = null, o = !1, s = !1, c = () => {
+}, Wr = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), Gr = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), Kr = (e, t) => {
+	let n = [t.timeZone === void 0 ? "" : ` data-voltro-tz="${Gr(t.timeZone)}"`, t.renderedAt === void 0 ? "" : ` data-voltro-now="${t.renderedAt}"`].join("");
+	return e.replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${Gr(t.lang)}"${n}`);
+}, qr = (e) => Kr(Wr(e.head, e.headInjection), e.documentAttrs), Jr = (e) => {
+	let { res: t, shell: n, documentAttrs: r, headInjection: i } = e, a = null, o = !1, s = !1, c = () => {
 		if (s || !o || a === null) return;
 		s = !0, t.statusCode = e.statusCode ?? 200;
 		for (let [n, r] of Object.entries(e.headers ?? {})) t.setHeader(n, r);
-		t.flushHeaders?.(), t.write(ir({
+		t.flushHeaders?.(), t.write(qr({
 			head: n.head,
 			headInjection: i(a.meta),
-			htmlLang: r
+			documentAttrs: r
 		}));
-		let c = new he();
+		let c = new Te();
 		c.pipe(t, { end: !1 }), c.on("end", () => {
 			t.end(n.tail);
 		}), a.stream.pipe(c);
@@ -1477,16 +1731,16 @@ import {
 		return;
 	}
 	c();
-}, or = (e) => Array.isArray(e.preload) && e.preload.length > 0, sr = (e, t) => typeof e == "string" ? {
+}, Yr = (e) => Array.isArray(e.preload) && e.preload.length > 0, Xr = (e, t) => typeof e == "string" ? {
 	tag: e,
 	input: {}
 } : {
 	tag: e.tag,
 	input: e.input?.(t) ?? {}
-}, cr = async (e) => {
+}, Zr = async (e) => {
 	let { pageMod: t, params: n, query: r, apiName: i, seed: a, seedFailure: o, onError: s } = e;
-	if (or(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
-		let { tag: t, input: c } = sr(e, n);
+	if (Yr(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
+		let { tag: t, input: c } = Xr(e, n);
 		try {
 			a(i, t, c, await r(t, c));
 		} catch (e) {
@@ -1496,62 +1750,62 @@ import {
 			}, e);
 		}
 	}
-}, lr = (e) => a.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : o.test(e) || l.test(e) || i.test(e), ur = /* @__PURE__ */ new Set([
+}, Qr = (e) => a.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : o.test(e) || l.test(e) || i.test(e), $r = /* @__PURE__ */ new Set([
 	"node_modules",
 	"dist",
 	".framework",
 	".git"
-]), dr = async (e) => {
+]), ei = async (e) => {
 	let t = [], n = async (e) => {
 		let r;
 		try {
-			r = await M.readdir(e, { withFileTypes: !0 });
+			r = await N.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
 		for (let i of r) if (!(i.name.startsWith(".") && i.isDirectory())) {
 			if (i.isDirectory()) {
-				if (ur.has(i.name)) continue;
+				if ($r.has(i.name)) continue;
 				await n(O(e, i.name));
-			} else lr(i.name) && t.push(O(e, i.name));
+			} else Qr(i.name) && t.push(O(e, i.name));
 		}
 	};
 	return await n(e), t.sort();
-}, fr = async (e) => {
-	let t = pe("sha1");
-	for (let n of await dr(e)) {
+}, ti = async (e) => {
+	let t = ge("sha1");
+	for (let n of await ei(e)) {
 		t.update(n.slice(e.length)), t.update("\0");
 		try {
-			t.update(await M.readFile(n));
+			t.update(await N.readFile(n));
 		} catch {}
 		t.update("\0");
 	}
 	try {
-		t.update(await M.readFile(O(e, "rpcGroup.generated.ts")));
+		t.update(await N.readFile(O(e, "rpcGroup.generated.ts")));
 	} catch {}
 	return t.digest("hex");
-}, pr = async (e) => {
+}, ni = async (e) => {
 	if (e.length === 0) return;
 	let t = [];
-	for (let n of [...e].sort()) t.push(await fr(n));
-	return pe("sha1").update(t.join("\0")).digest("hex");
-}, mr = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", hr = ["middleware.ts", "middleware.tsx"], gr = (e) => {
+	for (let n of [...e].sort()) t.push(await ti(n));
+	return ge("sha1").update(t.join("\0")).digest("hex");
+}, ri = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", ii = ["middleware.ts", "middleware.tsx"], ai = (e) => {
 	let t = e.replace(/\/+$/, "");
 	return t === "" ? "/" : t;
-}, Z = (e, t) => {
-	let n = gr(e);
+}, X = (e, t) => {
+	let n = ai(e);
 	if (n === "/") return !0;
-	let r = gr(t);
+	let r = ai(t);
 	return r === n || r.startsWith(`${n}/`);
-}, _r = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, vr = (e, t) => {
+}, oi = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, si = (e, t) => {
 	if (e === void 0) return !0;
-	let n = _r(e.under), r = e.routes ?? [];
-	return n.length === 0 && r.length === 0 || r.includes(t) || n.some((e) => Z(e, t)) ? !(e.except ?? []).some((e) => e === t || Z(e, t)) : !1;
-}, yr = (e) => {
+	let n = oi(e.under), r = e.routes ?? [];
+	return n.length === 0 && r.length === 0 || r.includes(t) || n.some((e) => X(e, t)) ? !(e.except ?? []).some((e) => e === t || X(e, t)) : !1;
+}, ci = (e) => {
 	if (e?.assets !== !0) return [];
-	let t = _r(e.under);
+	let t = oi(e.under);
 	return t.length > 0 ? t : (e.routes ?? []).length > 0 ? [] : ["/"];
-}, br = (e, t) => yr(e).some((e) => Z(e, t)) ? !(e?.except ?? []).some((e) => Z(e, t)) : !1, xr = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? br(e.match, t.pathname) : vr(e.match, t.route))?.middleware, Sr = (e, t) => {
+}, li = (e, t) => ci(e).some((e) => X(e, t)) ? !(e?.except ?? []).some((e) => X(e, t)) : !1, ui = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? li(e.match, t.pathname) : si(e.match, t.route))?.middleware, di = (e, t) => {
 	let n = [];
 	for (let { exportName: r, middleware: i } of e) {
 		let e = i.match;
@@ -1559,13 +1813,13 @@ import {
 			kind: "dead-matcher",
 			message: `\`${r}\` matches routes: ['${i}'], which is not a route in this app. Route patterns are spelled as the router spells them, e.g. \`/notes/[id]\`.`
 		});
-		if (e?.assets !== !0) for (let [i, a] of [["under", _r(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => Z(e, t)) || n.push({
+		if (e?.assets !== !0) for (let [i, a] of [["under", oi(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => X(e, t)) || n.push({
 			kind: "dead-matcher",
 			message: `\`${r}\` matches ${i}: ['${e}'], which covers no route in this app. ` + (i === "except" ? "An `except` that excludes nothing is a rule that reads as active and is not." : "Add `assets: true` if you meant a path the router does not serve.")
 		});
 	}
 	for (let r = 0; r < e.length; r += 1) for (let i = r + 1; i < e.length; i += 1) {
-		let a = e[r], o = e[i], s = t.find((e) => vr(a.middleware.match, e) && vr(o.middleware.match, e));
+		let a = e[r], o = e[i], s = t.find((e) => si(a.middleware.match, e) && si(o.middleware.match, e));
 		if (s !== void 0) {
 			n.push({
 				kind: "overlap",
@@ -1574,7 +1828,7 @@ import {
 			continue;
 		}
 		{
-			let e = yr(a.middleware.match), t = yr(o.middleware.match), r = e.some((e) => t.some((t) => Z(e, t) || Z(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => Z(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => Z(t, e)));
+			let e = ci(a.middleware.match), t = ci(o.middleware.match), r = e.some((e) => t.some((t) => X(e, t) || X(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => X(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => X(t, e)));
 			r && !i && n.push({
 				kind: "overlap",
 				message: `\`${a.exportName}\` and \`${o.exportName}\` both declare \`assets: true\` over overlapping paths. A non-page request would match both, and there is no route to tell them apart.`
@@ -1582,10 +1836,10 @@ import {
 		}
 	}
 	return n;
-}, Cr = (e, t) => {
-	let r = Sr(e, t);
+}, fi = (e, t) => {
+	let r = di(e, t);
 	if (r.length !== 0) throw n(`middleware.ts: ${r.length} problem(s)\n\n` + r.map((e) => `  • ${e.message}`).join("\n\n"));
-}, wr = (e) => {
+}, pi = (e) => {
 	let t = {};
 	if (!e) return t;
 	for (let n of e.split(";")) {
@@ -1599,11 +1853,11 @@ import {
 		}
 	}
 	return t;
-}, Tr = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), Er = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, Dr = (e) => e.httpOnly === void 0 && Er.test(e.name), Or = (e) => {
+}, mi = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), hi = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, gi = (e) => e.httpOnly === void 0 && hi.test(e.name), _i = (e) => {
 	let t = [`${e.name}=${encodeURIComponent(e.value)}`];
 	return t.push(`Path=${e.path ?? "/"}`), e.maxAge !== void 0 && t.push(`Max-Age=${Math.trunc(e.maxAge)}`), e.httpOnly !== !1 && t.push("HttpOnly"), e.secure === !0 && t.push("Secure"), t.push(`SameSite=${e.sameSite ?? "lax"}`), t.join("; ");
-}, kr = (e) => e.length === 0 ? {} : { "set-cookie": e.map(Or) }, Ar = async (e, t = (e) => import(L(e).href)) => {
-	for (let r of hr) {
+}, vi = (e) => e.length === 0 ? {} : { "set-cookie": e.map(_i) }, yi = async (e, t = (e) => import(I(e).href)) => {
+	for (let r of ii) {
 		let i;
 		try {
 			i = await t(O(e, r));
@@ -1612,7 +1866,7 @@ import {
 			if (t === "ERR_MODULE_NOT_FOUND" || t === "MODULE_NOT_FOUND") continue;
 			throw e;
 		}
-		let a = Object.entries(i ?? {}), o = a.filter((e) => mr(e[1])).map(([e, t]) => ({
+		let a = Object.entries(i ?? {}), o = a.filter((e) => ri(e[1])).map(([e, t]) => ({
 			exportName: e,
 			middleware: t
 		}));
@@ -1630,50 +1884,78 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		return o;
 	}
 	return [];
-}, jr = async (e, t, n) => {
+}, bi = async (e, t, n) => {
 	let r = {
 		headers: t.headers,
 		cookies: t.cookies,
-		setCookies: []
+		setCookies: [],
+		responseHeaders: {}
 	};
 	if (e === void 0) return r;
 	let i = await e.run(t);
 	if (!i) return r;
 	let a = i.setCookies ?? [];
-	if (n !== void 0) for (let e of a) Dr(e) && n(e);
+	if (n !== void 0) for (let e of a) gi(e) && n(e);
 	let o = i.headers ? {
 		...t.headers,
 		...i.headers
-	} : { ...t.headers };
+	} : { ...t.headers }, s = i.responseHeaders ?? {}, c = i.cspNonce === void 0 ? {} : { cspNonce: i.cspNonce };
 	if (a.length === 0) return {
 		headers: o,
 		cookies: t.cookies,
-		setCookies: a
+		setCookies: a,
+		responseHeaders: s,
+		...c
 	};
-	let s = { ...t.cookies };
-	for (let e of a) e.maxAge !== void 0 && e.maxAge <= 0 ? delete s[e.name] : s[e.name] = e.value;
-	return i.headers?.cookie === void 0 && (o.cookie = Tr(s)), {
+	let l = { ...t.cookies };
+	for (let e of a) e.maxAge !== void 0 && e.maxAge <= 0 ? delete l[e.name] : l[e.name] = e.value;
+	return i.headers?.cookie === void 0 && (o.cookie = mi(l)), {
 		headers: o,
-		cookies: s,
-		setCookies: a
+		cookies: l,
+		setCookies: a,
+		responseHeaders: s,
+		...c
 	};
-}, Q = z({ scope: "voltro:dev:web" }), Mr = z({ scope: "vite" }), Nr = await (async () => {
+}, xi = /* @__PURE__ */ new Set(["voltro:locale"]), Si = /* @__PURE__ */ new Set(["authorization", "cookie"]), Ci = (e) => {
+	let t = e.split(";").map((e) => e.trim()).filter((e) => {
+		let t = e.indexOf("="), n = (t === -1 ? e : e.slice(0, t)).trim();
+		return xi.has(n);
+	});
+	return t.length > 0 ? t.join("; ") : void 0;
+}, wi = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e)) if (!n.startsWith("x-voltro-")) {
+		if (Si.has(n)) {
+			if (n === "cookie") {
+				let e = Ci(r);
+				e !== void 0 && (t.cookie = e);
+			}
+			continue;
+		}
+		t[n] = r;
+	}
+	return t;
+}, Ti = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e)) xi.has(n) && (t[n] = r);
+	return t;
+}, Z = R({ scope: "voltro:dev:web" }), Ei = R({ scope: "vite" }), Di = await (async () => {
 	try {
-		let e = O(D(te(import.meta.url)), "..", "package.json"), t = await M.readFile(e, "utf8");
+		let e = O(D(re(import.meta.url)), "..", "package.json"), t = await N.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), Pr = async () => {
+})(), Oi = async () => {
 	try {
-		let e = D(te(import.meta.url)), t = A(e, "..", "..", "devtools");
-		if (j(O(t, "package.json"))) return t;
+		let e = D(re(import.meta.url)), t = A(e, "..", "..", "devtools");
+		if (M(O(t, "package.json"))) return t;
 		let n = A(e, "..", "..", "..", "devtools");
-		return j(O(n, "package.json")) ? n : null;
+		return M(O(n, "package.json")) ? n : null;
 	} catch {
 		return null;
 	}
-}, Fr = (e, t) => e.disableDevtools || !t ? [] : [
+}, ki = (e, t) => e.disableDevtools || !t ? [] : [
 	"",
 	"// Dev-only in-page devtools overlay. The `import.meta.env.DEV` guard is a",
 	"// compile-time constant, so prod builds strip this whole `if` block — the",
@@ -1683,46 +1965,44 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"  await import('@voltro/devtools/styles.css')",
 	"  Devtools = (await import('@voltro/devtools')).VoltroDevtools",
 	"}"
-], Ir = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], Lr = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], Rr = (e) => e.sentry ? [
+], Ai = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], ji = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], Mi = (e) => e.sentry ? [
 	"",
 	"// Browser-side Sentry (frontend half of the deep integration). Errors +",
 	"// browser rpc spans flow to Sentry, sharing the server transactions' trace.",
 	`await initSentryBrowser(${JSON.stringify(e.sentry)})`
-] : [], zr = (e) => e.env ? ["import './env.public'"] : [], Br = (e) => {
+] : [], Ni = (e) => e.env ? ["import './env.public'"] : [], Pi = (e) => {
 	let t = [], n = A(e);
 	for (;;) {
-		j(O(n, "pnpm-workspace.yaml")) && t.push(n);
+		M(O(n, "pnpm-workspace.yaml")) && t.push(n);
 		let e = D(n);
 		if (e === n) break;
 		n = e;
 	}
 	return t;
-}, Vr = b, Hr = (e) => {
+}, Fi = b, Ii = (e) => {
 	if (/\/node_modules\/(?:\.pnpm\/[^/]+\/node_modules\/)?(?:react|react-dom|scheduler)\//.test(e)) return "react";
-	let t = /\/([^/]+)\.island\.tsx?$/.exec(e);
-	if (t) return `island-${t[1]}`;
-}, Ur = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Wr = (e) => e.startsWith("(") && e.endsWith(")"), Gr = (e) => e.filter((e) => !Wr(e)), Kr = (e) => {
-	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Wr(e));
+}, Li = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Ri = (e) => e.startsWith("(") && e.endsWith(")"), zi = (e) => e.filter((e) => !Ri(e)), Bi = (e) => {
+	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Ri(e));
 	return t.length === 0 ? "/" : "/" + t.join("/");
-}, qr = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, $ = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, Jr = async (e) => {
+}, Vi = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, Q = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, $ = async (e) => {
 	let t = [], n = [], r = async (e, i) => {
 		let a = [];
 		try {
-			a = await M.readdir(e, { withFileTypes: !0 });
+			a = await N.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
-		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Vr(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
+		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Fi(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
 		if (l.some((e) => s.has(e))) {
 			let t = u.has("layout.tsx"), r = !1;
 			if (t) try {
-				let t = await M.readFile(O(e, "layout.tsx"), "utf8");
-				r = Ur.test(t);
+				let t = await N.readFile(O(e, "layout.tsx"), "utf8");
+				r = Li.test(t);
 			} catch {}
 			n.push({
 				dir: d,
 				chain: i,
-				contributesToUrl: i.length === 0 || !Wr(i[i.length - 1]),
+				contributesToUrl: i.length === 0 || !Ri(i[i.length - 1]),
 				hasLayout: t,
 				hasLayoutLoader: r,
 				hasError: u.has("error.tsx"),
@@ -1736,8 +2016,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			let n = d ? `${d}/${e}` : e;
 			t.push({
 				file: n,
-				pattern: Kr(n),
-				ident: qr(n),
+				pattern: Bi(n),
+				ident: Vi(n),
 				dirChain: i
 			});
 		}
@@ -1756,14 +2036,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		dirs: a,
 		orphanedSpecials: o
 	};
-}, Yr = (e, t) => {
+}, Hi = (e, t) => {
 	let n = [];
 	for (let r = 0; r <= t.length; r++) {
 		let i = t.slice(0, r).join("/"), a = e.find((e) => e.dir === i);
 		a && n.push(a);
 	}
 	return n;
-}, Xr = async (e) => {
+}, Ui = async (e) => {
 	let { entries: t, loadLayout: n, loadError: r, loadPending: i, ctx: a } = e, o = {};
 	return {
 		chain: await Promise.all(t.map(async (e, t) => {
@@ -1787,10 +2067,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		})),
 		segmentLoaderData: o
 	};
-}, Zr = (e) => {
-	let t = Gr(e);
+}, Wi = (e) => {
+	let t = zi(e);
 	return t.length === 0 ? "" : "/" + t.join("/");
-}, Qr = [
+}, Gi = [
 	"// Hot-reload bridge: keep SSR-injected <link rel=\"stylesheet\"> tags",
 	"// in sync with Vite's CSS HMR. Without this, edits to .css files",
 	"// only update the JS-injected <style> overlay; the underlying <link>",
@@ -1883,7 +2163,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"    _vdtErrorStart('Build error')",
 	"  })",
 	"}"
-].join("\n"), $r = (e) => {
+].join("\n"), Ki = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -1892,8 +2172,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: t,
 		priority: n
 	};
-}, ei = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = $r(e.pattern);
+}, qi = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = Ki(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -1902,7 +2182,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: n,
 		priority: r
 	};
-}).slice().sort((e, t) => e.priority - t.priority), ti = (e, t) => {
+}).slice().sort((e, t) => e.priority - t.priority), Ji = (e, t) => {
 	for (let n of t) {
 		let t = n.regex.exec(e);
 		if (!t) continue;
@@ -1914,9 +2194,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		};
 	}
 	return null;
-}, ni = J, ri = async (e) => {
+}, Yi = Le, Xi = async (e) => {
 	try {
-		let t = await import(L(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
+		let t = await import(I(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
 			kind: "api",
 			configPort: typeof n == "number" ? n : void 0,
 			env: {}
@@ -1930,7 +2210,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "api",
 		env: {}
 	}).port };
-}, ii = (e, t) => ({
+}, Zi = (e, t) => ({
 	name: e,
 	pkg: t.package,
 	browserWsUrl: t.url,
@@ -1938,7 +2218,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	...t.serverUrl ? { serverOrigin: t.serverUrl } : {},
 	...t.headers ? { headers: t.headers } : {},
 	...t.authHeaders ? { hasAuthHeaders: !0 } : {}
-}), ai = (e, t, n) => {
+}), Qi = (e, t, n) => {
 	let r = t.transport?.wsPath ?? n.wsPath;
 	return {
 		name: e,
@@ -1950,7 +2230,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		...t.headers ? { headers: t.headers } : {},
 		...t.authHeaders ? { hasAuthHeaders: !0 } : {}
 	};
-}, oi = (e) => {
+}, $i = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (n.proxyTarget === void 0) continue;
@@ -1958,43 +2238,43 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		if (e) throw Error(`[voltro] api ${JSON.stringify(n.name)} and ${JSON.stringify(e)} both resolve the same-origin WS path ${JSON.stringify(n.browserWsUrl)}. A custom transport.wsPath must be unique per origin (one api per origin may use a fixed path). Give each a distinct wsPath, or drop the override to use the default /ws/<name>.`);
 		t.set(n.browserWsUrl, n.name);
 	}
-}, si = async (e, t) => {
+}, ea = async (e, t) => {
 	let n = Object.entries(t.apis ?? {}), r = [];
 	for (let [t, i] of n) {
 		if (i.url) {
-			r.push(ii(t, i));
+			r.push(Zi(t, i));
 			continue;
 		}
-		let n = await ni(e, i.package);
+		let n = await Yi(e, i.package);
 		if (!n) throw Error(`[voltro dev] api ${JSON.stringify(t)} (package ${JSON.stringify(i.package)}) is not a workspace dep and has no \`url\` set in app.config.ts. External apis need an explicit \`url\` because the framework can't discover their dev port.`);
-		r.push(ai(t, i, await ri(n)));
+		r.push(Qi(t, i, await Xi(n)));
 	}
-	return oi(r), r;
-}, ci = (e) => {
+	return $i(r), r;
+}, ta = (e) => {
 	if (!(!/^wss?:\/\//.test(e) && !/^https?:\/\//.test(e))) try {
 		let t = new URL(e);
 		return t.protocol = t.protocol === "wss:" || t.protocol === "https:" ? "https:" : "http:", `${t.protocol}//${t.host}`;
 	} catch {
 		return;
 	}
-}, li = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, ui = (e) => process.env[li(e)] ?? process.env.VOLTRO_API_ORIGIN, di = (e, t) => {
+}, na = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, ra = (e) => process.env[na(e)] ?? process.env.VOLTRO_API_ORIGIN, ia = (e, t) => {
 	if (!e) return;
-	let n = ui(e.name) ?? e.serverOrigin;
+	let n = ra(e.name) ?? e.serverOrigin;
 	if (n) {
-		let e = ci(n);
+		let e = ta(n);
 		if (e) return e;
 	}
 	if (t?.allowDevProxy && e.proxyTarget) {
-		let t = ci(e.proxyTarget);
+		let t = ta(e.proxyTarget);
 		if (t) return t;
 	}
-	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return ci(e.browserWsUrl);
-}, fi = (e, t, n) => {
+	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return ta(e.browserWsUrl);
+}, aa = (e, t, n) => {
 	if (!e) {
 		if (n?.apiName === void 0) return;
 		let e = n.apiName;
 		return async () => {
-			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${li(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
+			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${na(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
 		};
 	}
 	return async (r, i) => {
@@ -2017,7 +2297,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			});
 		} catch (t) {
 			let i = t?.cause?.code ?? String(t?.message ?? t);
-			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${li(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
+			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${na(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
 		}
 		if (!o.ok) throw Error(`[loader.query] ${r}: HTTP ${o.status} ${await o.text()}`);
 		let s = await o.json();
@@ -2047,8 +2327,20 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		}
 		if (u) return l;
 	};
-}, pi = async (e, t, n, r = {}) => {
-	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = j(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await Pr() !== null, s = t.theme === "system" ? [
+}, oa = (e, t) => {
+	let n = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppGroup`, r = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppDescriptors`, i = e.map((e) => `import { appGroup as ${n(e.name)}, appDescriptors as ${r(e.name)} } from '${e.pkg}/rpcGroup'`);
+	e.some((e) => e.hasAuthHeaders) && (i.push(`import __voltroAppConfig from '${t}'`), i.push("const __voltroAuthHeaders = (__voltroAppConfig as { readonly apis?: Record<string, { readonly authHeaders?: () => Record<string, string> | Promise<Record<string, string>> }> }).apis"));
+	let a = (e) => {
+		let t = [`group: ${n(e.name)}`];
+		return t.push(`descriptors: ${r(e.name)}`), t.push(`wsUrl: ${JSON.stringify(e.browserWsUrl)}`), e.hasAuthHeaders ? t.push(`headers: __voltroAuthHeaders?.[${JSON.stringify(e.name)}]?.authHeaders`) : e.headers && t.push(`headers: ${JSON.stringify(e.headers)}`), t;
+	};
+	return {
+		imports: i,
+		entryLines: e.map((e) => `    ${JSON.stringify(e.name)}: { ${a(e).join(", ")} },`),
+		providerEntryLines: e.map((e) => `    { name: ${JSON.stringify(e.name)}, ${a(e).join(", ")} },`)
+	};
+}, sa = async (e, t, n, r = {}) => {
+	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = M(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await Oi() !== null, s = t.theme === "system" ? [
 		"    <script>",
 		"      (function () {",
 		"        var root = document.documentElement",
@@ -2069,7 +2361,19 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"        }",
 		"      })()",
 		"    <\/script>"
-	].join("\n") : "", c = [
+	].join("\n") : "", c = t.timeZone === "viewer" ? [
+		"    <script>",
+		"      (function () {",
+		"        try {",
+		"          if (/(?:^|;\\s*)voltro:tz=/.test(document.cookie)) return",
+		"          var tz = Intl.DateTimeFormat().resolvedOptions().timeZone",
+		"          if (!tz) return",
+		"          document.cookie = 'voltro:tz=' + encodeURIComponent(tz)",
+		"            + '; path=/; max-age=31536000; SameSite=Lax'",
+		"        } catch (e) {}",
+		"      })()",
+		"    <\/script>"
+	].join("\n") : "", l = [
 		"<!doctype html>",
 		"<!-- GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot. -->",
 		`<html lang="en"${a}>`,
@@ -2079,6 +2383,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		`    <title>${i}</title>`,
 		"    <link rel=\"icon\" type=\"image/svg+xml\" href=\"/favicon.svg\" />",
 		...s ? [s] : [],
+		...c ? [c] : [],
 		"  </head>",
 		"  <body>",
 		"    <div id=\"root\"></div>",
@@ -2086,75 +2391,70 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"  </body>",
 		"</html>",
 		""
-	].join("\n"), l = O(e, "src", "pages"), { pages: u, dirs: d, orphanedSpecials: f } = await Jr(l);
-	await y(l, u);
-	for (let e of f) Q.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
-	let p = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppGroup`, m = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppDescriptors`, h = n.map((e) => `import { appGroup as ${p(e.name)}, appDescriptors as ${m(e.name)} } from '${e.pkg}/rpcGroup'`);
-	n.some((e) => e.hasAuthHeaders) && (h.push("import __voltroAppConfig from '../app.config'"), h.push("const __voltroAuthHeaders = (__voltroAppConfig as { readonly apis?: Record<string, { readonly authHeaders?: () => Record<string, string> | Promise<Record<string, string>> }> }).apis"));
-	let g = n.map((e) => {
-		let t = [`group: ${p(e.name)}`];
-		return t.push(`descriptors: ${m(e.name)}`), t.push(`wsUrl: ${JSON.stringify(e.browserWsUrl)}`), e.hasAuthHeaders ? t.push(`headers: __voltroAuthHeaders?.[${JSON.stringify(e.name)}]?.authHeaders`) : e.headers && t.push(`headers: ${JSON.stringify(e.headers)}`), `    ${JSON.stringify(e.name)}: { ${t.join(", ")} },`;
-	}), _, v, b;
-	if (u.length > 0) {
-		let n = u.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
-		for (let e of d) {
+	].join("\n"), u = O(e, "src", "pages"), { pages: d, dirs: f, orphanedSpecials: p } = await $(u);
+	await y(u, d);
+	for (let e of p) Z.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
+	let { imports: m, entryLines: h } = oa(n, "../app.config"), g, _, v;
+	if (d.length > 0) {
+		let n = d.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
+		for (let e of f) {
 			let t = e.dir === "" ? "../src/pages" : `../src/pages/${e.dir}`;
-			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${$(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${$(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${$(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${$(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${$(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
+			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${Q(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${Q(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${Q(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${Q(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${Q(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
 		}
-		let i = u.map((e) => {
-			let t = Yr(d, e.dirChain).map((e) => {
+		let i = d.map((e) => {
+			let t = Hi(f, e.dirChain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout:  refs.layouts[${n}]`), e.hasLayoutLoader && t.push(`loader:  refs.layoutLoaders[${n}]`), e.hasError && t.push(`Error:   refs.errors[${n}]`), e.hasPending && t.push(`Pending: refs.pendings[${n}]`), `      { ${t.join(", ")} }`;
 			}).join(",\n");
 			return `    makePageRoute(${JSON.stringify(e.pattern)}, ${t.length > 0 ? `[\n${t},\n    ]` : "undefined"}),`;
-		}), a = d.filter((e) => e.hasNotFound).map((e) => {
-			let t = Zr(e.chain), n = Yr(d, e.chain).map((e) => {
+		}), a = f.filter((e) => e.hasNotFound).map((e) => {
+			let t = Wi(e.chain), n = Hi(f, e.chain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout: refs.layouts[${n}]`), e.hasError && t.push(`Error:  refs.errors[${n}]`), `        { ${t.join(", ")} }`;
 			}).join(",\n"), r = n.length > 0 ? `\n      chain: [\n${n},\n      ],` : "";
 			return `    {\n      prefix: ${JSON.stringify(t)},\n      Component: refs.notFounds[${JSON.stringify(e.dir)}],${r}\n    },`;
-		}), s = [], c = [], l = [], f = [], p = [], m = [];
-		for (let e of d) {
+		}), s = [], c = [], l = [], u = [], p = [], y = [];
+		for (let e of f) {
 			let t = e.dir === "" ? "../src/pages/layout.tsx" : `../src/pages/${e.dir}/layout.tsx`, n = e.dir === "" ? "../src/pages/error.tsx" : `../src/pages/${e.dir}/error.tsx`, r = e.dir === "" ? "../src/pages/loading.tsx" : `../src/pages/${e.dir}/loading.tsx`, i = e.dir === "" ? "../src/pages/not-found.tsx" : `../src/pages/${e.dir}/not-found.tsx`, a = JSON.stringify(e.dir);
-			e.hasLayout && e.hasLayoutLoader ? (c.push(`  ${a}: ${$(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${$(e.dir, "Layout")}Mod.loader,`), s.push({
+			e.hasLayout && e.hasLayoutLoader ? (c.push(`  ${a}: ${Q(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${Q(e.dir, "Layout")}Mod.loader,`), s.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})) : e.hasLayout && (c.push(`  ${a}: ${$(e.dir, "Layout")},`), s.push({
+			})) : e.hasLayout && (c.push(`  ${a}: ${Q(e.dir, "Layout")},`), s.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})), e.hasError && (f.push(`  ${a}: ${$(e.dir, "Error")},`), s.push({
+			})), e.hasError && (u.push(`  ${a}: ${Q(e.dir, "Error")},`), s.push({
 				relPath: n,
 				kind: "error",
 				slotKey: e.dir
-			})), e.hasPending && (p.push(`  ${a}: ${$(e.dir, "Pending")},`), s.push({
+			})), e.hasPending && (p.push(`  ${a}: ${Q(e.dir, "Pending")},`), s.push({
 				relPath: r,
 				kind: "pending",
 				slotKey: e.dir
-			})), e.hasNotFound && (m.push(`  ${a}: ${$(e.dir, "NotFound")},`), s.push({
+			})), e.hasNotFound && (y.push(`  ${a}: ${Q(e.dir, "NotFound")},`), s.push({
 				relPath: i,
 				kind: "notFound",
 				slotKey: e.dir
 			}));
 		}
-		for (let e of u) s.push({
+		for (let e of d) s.push({
 			relPath: `../src/pages/${e.file}`,
 			kind: "page",
 			slotKey: e.pattern
 		});
-		let y = s.map((e) => `      ${JSON.stringify(e.relPath)},`), x = s.map((e, t) => {
+		let b = s.map((e) => `      ${JSON.stringify(e.relPath)},`), x = s.map((e, t) => {
 			let n = JSON.stringify(e.slotKey);
 			return e.kind === "page" ? `      if (newMods[${t}] && refs.pages[${n}] !== undefined) { refs.pages[${n}] = newMods[${t}]; changed = true }` : `      if (newMods[${t}]?.default) { refs.${e.kind === "layout" ? "layouts" : e.kind === "error" ? "errors" : e.kind === "pending" ? "pendings" : "notFounds"}[${n}] = newMods[${t}].default;${e.kind === "layout" ? ` refs.layoutLoaders[${n}] = newMods[${t}].loader;` : ""} changed = true }`;
-		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => j(O(e, "src", "locales", `${t}.ts`)) || j(O(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en";
-		if (S.length > 0 && !C && Q.info(`i18n: locales [${S.join(", ")}] declared with no src/locales/<code>.ts — using them for <html lang> and the resolved locale only. Add the catalogs to get <I18nProvider> wired, or keep your own i18n stack.`), S.length > 0 && !S.includes(T)) throw Error(`[voltro dev] app.config.ts: defaultLocale '${T}' must be one of locales [${S.join(", ")}]`);
-		let E = w ? [
+		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => M(O(e, "src", "locales", `${t}.ts`)) || M(O(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en", E = t.router?.viewTransitions === !0 ? " viewTransitions" : "";
+		if (S.length > 0 && !C && Z.info(`i18n: locales [${S.join(", ")}] declared with no src/locales/<code>.ts — using them for <html lang> and the resolved locale only. Add the catalogs to get <I18nProvider> wired, or keep your own i18n stack.`), S.length > 0 && !S.includes(T)) throw Error(`[voltro dev] app.config.ts: defaultLocale '${T}' must be one of locales [${S.join(", ")}]`);
+		let D = w ? [
 			"import { I18nProvider } from '@voltro/i18n'",
 			"import { resolveLocale } from '@voltro/i18n/server'",
 			"import { useServerRequest } from '@voltro/web'",
 			...S.map((e) => `import i18nCatalog_${e} from '../src/locales/${e}'`)
 		] : [];
-		v = [
+		_ = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// Routes + per-page chain + not-found scopes assembled from src/pages/.",
 			"//",
@@ -2194,13 +2494,13 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			...l,
 			"  },",
 			"  errors: {",
-			...f,
+			...u,
 			"  },",
 			"  pendings: {",
 			...p,
 			"  },",
 			"  notFounds: {",
-			...m,
+			...y,
 			"  },",
 			"  pages: {},",
 			"}",
@@ -2265,7 +2565,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"if (import.meta.hot) {",
 			"  import.meta.hot.accept(",
 			"    [",
-			...y,
+			...b,
 			"    ],",
 			"    (newMods: Array<Record<string, unknown> | undefined>) => {",
 			"      let changed = false",
@@ -2275,7 +2575,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"  )",
 			"}",
 			""
-		].join("\n"), _ = [
+		].join("\n"), g = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// The app's root component. It exports `App` and NOTHING ELSE: react-refresh",
 			"// only accepts a module whose every export is a component, and a module it",
@@ -2286,7 +2586,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"",
 			"import { useMemo, useSyncExternalStore } from 'react'",
 			"import { Router } from '@voltro/web'",
-			...E,
+			...D,
 			"import { subscribe, getVersion, buildRoutes, buildNotFounds } from './routeTable'",
 			"",
 			...w ? [
@@ -2297,6 +2597,29 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				`const I18N_SUPPORTED: ReadonlyArray<string> = [${S.map((e) => JSON.stringify(e)).join(", ")}]`,
 				`const I18N_DEFAULT = ${JSON.stringify(T)}`,
 				"",
+				"// The zone + clock the SERVER decided for this document, read back off",
+				"// <html>. Same contract as <html lang> below and for the same reason:",
+				"// the browser could answer both of these itself, its answer would",
+				"// differ from the server's, and a difference is a hydration mismatch.",
+				"//",
+				"// Reading the ATTRIBUTE rather than the browser is the whole point.",
+				"// 'Intl.DateTimeFormat().resolvedOptions().timeZone' is the viewer's",
+				"// TRUE zone and is therefore the wrong value here — the server could",
+				"// not know it, so it did not render with it. The app makes the server",
+				"// know it by writing the 'voltro:tz' cookie (the pre-paint script",
+				"// seeds it from the browser; a login overwrites it with the user's",
+				"// own), and then the server's answer IS the viewer's zone.",
+				"const readPublishedDocumentAttrs = (): { timeZone?: string; renderedAt?: number } => {",
+				"  if (typeof document === 'undefined') return {}",
+				"  const el = document.documentElement",
+				"  const tz = el.getAttribute('data-voltro-tz')",
+				"  const now = Number(el.getAttribute('data-voltro-now'))",
+				"  return {",
+				"    ...(tz ? { timeZone: tz } : {}),",
+				"    ...(Number.isFinite(now) && now > 0 ? { renderedAt: now } : {}),",
+				"  }",
+				"}",
+				"",
 				"const pickI18nLocale = (ssr: ReturnType<typeof useServerRequest>): string => {",
 				"  if (ssr) {",
 				"    return resolveLocale({",
@@ -2350,28 +2673,37 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				"  const ssr = useServerRequest()",
 				"  const locale = pickI18nLocale(ssr)",
 				"  const messages = I18N_CATALOGS[locale] ?? I18N_CATALOGS[I18N_DEFAULT]!",
+				"  // Read once per mount, not per render: the values are fixed for the",
+				"  // life of the document, and 'renderedAt' moving would defeat the",
+				"  // point of pinning it.",
+				"  const published = useMemo(readPublishedDocumentAttrs, [])",
 				"  return (",
-				"    <I18nProvider locale={locale} messages={messages} defaultLocale={I18N_DEFAULT}>",
-				"      <Router routes={routes} notFounds={notFounds} />",
+				"    <I18nProvider",
+				"      locale={locale}",
+				"      messages={messages}",
+				"      defaultLocale={I18N_DEFAULT}",
+				"      {...published}",
+				"    >",
+				`      <Router routes={routes} notFounds={notFounds}${E} />`,
 				"    </I18nProvider>",
 				"  )"
-			] : ["  return <Router routes={routes} notFounds={notFounds} />"],
+			] : [`  return <Router routes={routes} notFounds={notFounds}${E} />`],
 			"}",
 			""
-		].join("\n"), b = [
+		].join("\n"), v = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// Entry: imports the generated App component and calls mount() with the",
 			"// resolved apis map. Side-effect only — no local component definitions —",
 			"// so downstream invalidations (user page edits) terminate at app.tsx.",
 			"",
-			...zr(t),
+			...Ni(t),
 			"import { mount } from '@voltro/web'",
-			...h,
+			...m,
 			"import { App } from './app'",
 			"import { preloadCurrentRoute } from './routeTable'",
-			...Lr(t),
-			...Fr(t, o),
-			...Rr(t),
+			...ji(t),
+			...ki(t, o),
+			...Mi(t),
 			"",
 			"// Preload the current route's page chunk BEFORE hydration so the first",
 			"// client render matches the SSG/SSR-prerendered HTML. Without it, a lazy",
@@ -2386,83 +2718,83 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"",
 			"mount(App, {",
 			"  apis: {",
-			...g,
+			...h,
 			"  },",
-			...Ir(t, o),
+			...Ai(t, o),
 			"})",
 			"",
-			Qr
+			Gi
 		].join("\n");
-	} else _ = "", v = "", b = [
+	} else g = "", _ = "", v = [
 		"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 		"// The user's root component lives at ../src/App.tsx; this file imports it",
 		"// and calls mount(). Side-effect only, no component definitions, so the",
 		"// user's component file remains the Fast Refresh boundary.",
 		"",
-		...zr(t),
+		...Ni(t),
 		"import { mount } from '@voltro/web'",
-		...h,
+		...m,
 		"import App from '../src/App'",
-		...Lr(t),
-		...Fr(t, o),
-		...Rr(t),
+		...ji(t),
+		...ki(t, o),
+		...Mi(t),
 		"",
 		"mount(App, {",
 		"  apis: {",
-		...g,
+		...h,
 		"  },",
-		...Ir(t, o),
+		...Ai(t, o),
 		"})",
 		"",
-		Qr
+		Gi
 	].join("\n");
-	let x = O(e, ".framework");
-	await M.mkdir(x, { recursive: !0 }), t.env ? await Se(x, r) : await M.rm(O(x, "env.public.ts"), { force: !0 }), await M.writeFile(O(x, "index.html"), c, "utf8"), await M.writeFile(O(x, "main.tsx"), b, "utf8"), _ ? (await M.writeFile(O(x, "app.tsx"), _, "utf8"), await M.writeFile(O(x, "routeTable.ts"), v, "utf8")) : (await M.rm(O(x, "app.tsx"), { force: !0 }), await M.rm(O(x, "routeTable.ts"), { force: !0 }));
-	let S = O(e, ".gitignore"), C = "";
+	let b = O(e, ".framework");
+	await N.mkdir(b, { recursive: !0 }), t.env ? await Ne(b, r) : await N.rm(O(b, "env.public.ts"), { force: !0 }), await N.writeFile(O(b, "index.html"), l, "utf8"), await N.writeFile(O(b, "main.tsx"), v, "utf8"), g ? (await N.writeFile(O(b, "app.tsx"), g, "utf8"), await N.writeFile(O(b, "routeTable.ts"), _, "utf8")) : (await N.rm(O(b, "app.tsx"), { force: !0 }), await N.rm(O(b, "routeTable.ts"), { force: !0 }));
+	let x = O(e, ".gitignore"), S = "";
 	try {
-		C = await M.readFile(S, "utf8");
+		S = await N.readFile(x, "utf8");
 	} catch {}
-	let w = ["/.framework/"], T = new Set(C.split("\n").map((e) => e.trim())), E = w.filter((e) => !T.has(e));
-	if (E.length > 0) {
-		let e = C === "" || C.endsWith("\n") ? "" : "\n";
+	let C = ["/.framework/"], w = new Set(S.split("\n").map((e) => e.trim())), T = C.filter((e) => !w.has(e));
+	if (T.length > 0) {
+		let e = S === "" || S.endsWith("\n") ? "" : "\n";
 		try {
-			await M.appendFile(S, `${e}${E.join("\n")}\n`, "utf8");
+			await N.appendFile(x, `${e}${T.join("\n")}\n`, "utf8");
 		} catch (e) {
-			Q.warn(`could not add ${E.join(", ")} to ${S} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
+			Z.warn(`could not add ${T.join(", ")} to ${x} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
 		}
 	}
-}, mi = async (e, t) => {
+}, ca = async (e, t) => {
 	try {
 		let n = D(e), r = O(n, "project.json");
-		if (!j(r)) return;
-		let i = await M.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
+		if (!M(r)) return;
+		let i = await N.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
 		for (let [e, n] of Object.entries(a)) e !== o && n.port === t && s.push(e);
 		if (s.length === 0) return;
-		Q.warn("sibling app(s) claim the same port — only one boots", {
+		Z.warn("sibling app(s) claim the same port — only one boots", {
 			port: t,
 			conflicts: s,
 			projectJson: r
 		});
 	} catch {}
-}, hi = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), gi = async (e, t = {}) => {
-	let n = hi(e), r = t.preferSource !== !0 && j(n) ? n : O(e, "app.config.ts");
+}, la = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), ua = async (e, t = {}) => {
+	let n = la(e), r = t.preferSource !== !0 && M(n) ? n : O(e, "app.config.ts");
 	try {
-		let e = (await import(L(r).href)).default;
+		let e = (await import(I(r).href)).default;
 		return typeof e == "object" && e && "type" in e && e.type === "web" ? e : null;
 	} catch {
 		return null;
 	}
-}, _i = async (e) => {
-	let n = await gi(e, { preferSource: !0 });
+}, da = async (e) => {
+	let n = await ua(e, { preferSource: !0 });
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
-	ln();
-	let i = St();
-	Bt(i), Q.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), We(e, Q);
-	let a = await si(e, n);
-	for (let e of a) Q.info("api wired", {
+	ir();
+	let i = vn();
+	In(i), Z.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), nt(e, Z);
+	let a = await ea(e, n);
+	for (let e of a) Z.info("api wired", {
 		name: e.name,
 		pkg: e.pkg,
 		...e.proxyTarget ? { proxyTo: e.proxyTarget } : { directWs: e.browserWsUrl }
@@ -2470,17 +2802,17 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	g(e).then((e) => {
 		for (let t of e.files) if (t.action === "created") {
 			let e = t.path.split("/").pop() ?? t.path;
-			Q.info(`${e} seeded`, { path: t.path });
+			Z.info(`${e} seeded`, { path: t.path });
 		}
 	}).catch(() => {});
-	let { resolved: o } = await Ce({
+	let { resolved: o } = await Pe({
 		rawEnv: n.env,
 		appType: "web",
 		root: e,
-		log: Q,
+		log: Z,
 		generateTypes: !0
 	}), s = o.publicValues;
-	await pi(e, n, a, s), Q.debug("generated framework entry files", { files: [
+	await sa(e, n, a, s), Z.debug("generated framework entry files", { files: [
 		"index.html",
 		".framework/main.tsx",
 		...n.env ? [".framework/env.public.ts"] : []
@@ -2489,9 +2821,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env,
-		dashboardPin: process.env[Tn] === "1"
+		dashboardPin: process.env[br] === "1"
 	});
-	for (let e of c.warnings) Q.warn(e);
+	for (let e of c.warnings) Z.warn(e);
 	let l = c.port, y = n.name ?? "unnamed", b = w("web", y, l), D = T(y);
 	await x({
 		id: b,
@@ -2501,22 +2833,22 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		pid: process.pid,
 		status: "booting",
 		logFile: D.path
-	}).catch(() => {}), await mi(e, l);
-	let { pages: N, dirs: P } = await Jr(O(e, "src", "pages")), F = {
+	}).catch(() => {}), await ca(e, l);
+	let { pages: j, dirs: P } = await $(O(e, "src", "pages")), F = {
 		dirs: P,
-		ssrRoutes: ei(N)
+		ssrRoutes: qi(j)
 	}, ee = P.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), I = await mt({
+	})), te = await un({
 		appRoot: e,
-		pages: N
+		pages: j
 	});
-	I.wrote && Q.debug("routes codegen wrote", { path: k(e, I.path) });
-	let te = await _e("vite", () => import("vite")), L = (await import("@vitejs/plugin-react")).default, R = (await import("@tailwindcss/vite")).default, z = O(e, ".framework"), B = O(e, "src"), V = /* @__PURE__ */ new Set([
+	te.wrote && Z.debug("routes codegen wrote", { path: k(e, te.path) });
+	let ne = await De("vite", () => import("vite")), re = (await import("@vitejs/plugin-react")).default, I = (await import("@tailwindcss/vite")).default, L = O(e, ".framework"), R = O(e, "src"), ie = /* @__PURE__ */ new Set([
 		".framework",
 		"node_modules",
 		"dist",
@@ -2524,64 +2856,64 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		".vite",
 		".turbo",
 		".cache"
-	]), re = {
+	]), B = {
 		name: "framework:watch-app-sources",
 		async configureServer(t) {
 			try {
-				let n = (await M.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !V.has(e.name));
+				let n = (await N.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !ie.has(e.name));
 				for (let r of n) t.watcher.add(O(e, r.name));
-				n.length === 0 && t.watcher.add(B);
+				n.length === 0 && t.watcher.add(R);
 			} catch {
-				t.watcher.add(B);
+				t.watcher.add(R);
 			}
-			for (let n of await De(e)) t.watcher.add(n.dir);
+			for (let n of await Re(e)) t.watcher.add(n.dir);
 		}
-	}, H = O(e, "src", "pages"), U = (e) => e.endsWith(".tsx") && (e === H || e.startsWith(H + "/")), ie = (e) => e === H || e.startsWith(H + "/"), W = async (t) => {
+	}, V = O(e, "src", "pages"), ae = (e) => e.endsWith(".tsx") && (e === V || e.startsWith(V + "/")), oe = (e) => e === V || e.startsWith(V + "/"), H = async (t) => {
 		try {
 			let r = Date.now();
-			await pi(e, n, a, s);
-			let { pages: i, dirs: o } = await Jr(H);
-			await mt({
+			await sa(e, n, a, s);
+			let { pages: i, dirs: o } = await $(V);
+			await un({
 				appRoot: e,
 				pages: i
-			}), F.dirs = o, F.ssrRoutes = ei(i), Q.info("page tree regenerated", {
+			}), F.dirs = o, F.ssrRoutes = qi(i), Z.info("page tree regenerated", {
 				reason: t,
 				ms: Date.now() - r,
 				routes: F.ssrRoutes.length
 			});
-			for (let e of Sr(X, F.ssrRoutes.map((e) => e.pattern))) Q.error(`middleware.ts: ${e.message}`);
+			for (let e of di(J, F.ssrRoutes.map((e) => e.pattern))) Z.error(`middleware.ts: ${e.message}`);
 		} catch (e) {
-			Q.error("page tree regen failed", { reason: t }, e);
+			Z.error("page tree regen failed", { reason: t }, e);
 		}
-	}, ae = {
+	}, se = {
 		name: "framework:regenerate-on-page-tree-change",
 		configureServer(t) {
 			let n = null, r = [], i = (e) => {
 				r.push(e), n && clearTimeout(n), n = setTimeout(() => {
 					n = null;
 					let e = r.length === 1 ? r[0] : `${r.length} events (${r[0]}, …)`;
-					r.length = 0, W(e);
+					r.length = 0, H(e);
 				}, 50);
 			};
 			t.watcher.on("add", (t) => {
-				U(t) && i(`add ${k(e, t)}`);
+				ae(t) && i(`add ${k(e, t)}`);
 			}), t.watcher.on("unlink", (t) => {
-				U(t) && i(`unlink ${k(e, t)}`);
+				ae(t) && i(`unlink ${k(e, t)}`);
 			}), t.watcher.on("addDir", (t) => {
-				ie(t) && i(`addDir ${k(e, t)}`);
+				oe(t) && i(`addDir ${k(e, t)}`);
 			}), t.watcher.on("unlinkDir", (t) => {
-				ie(t) && i(`unlinkDir ${k(e, t)}`);
+				oe(t) && i(`unlinkDir ${k(e, t)}`);
 			});
 		}
-	}, G = O(e, "app.config.ts"), se = (e) => {
-		if (!oe(e.env)) return "";
+	}, U = O(e, "app.config.ts"), ce = (e) => {
+		if (!ue(e.env)) return "";
 		let t = Object.entries(e.env.vars).map(([e, t]) => `${e}:${t.access}`).sort();
 		return `${String(e.env.publicPrefix)}|${t.join(",")}`;
-	}, ce = (e, t) => {
+	}, le = (e, t) => {
 		let n = [];
-		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), se(e) !== se(t) && n.push("env"), n;
-	}, le = n, ue = A(G), de = () => {
-		let e = me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), ce(e) !== ce(t) && n.push("env"), n;
+	}, W = n, de = A(U), fe = () => {
+		let e = _e(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 			stdio: "inherit",
 			env: process.env,
 			cwd: process.cwd()
@@ -2591,29 +2923,29 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		process.on("SIGINT", n), process.on("SIGTERM", r), e.on("exit", (e, t) => {
 			process.off("SIGINT", n), process.off("SIGTERM", r), t ? process.kill(process.pid, t) : process.exit(e ?? 0);
 		}), e.on("error", (e) => {
-			Q.error("restart spawn failed", {}, e), process.exit(1);
+			Z.error("restart spawn failed", {}, e), process.exit(1);
 		});
-	}, fe = {
+	}, pe = {
 		name: "framework:watch-app-config",
 		async configureServer(n) {
-			n.watcher.add(G), Q.info("watching app.config.ts for changes", { path: k(e, G) });
-			let r = hr.map((t) => O(e, t)), i = new Set(r.map((e) => A(e)));
+			n.watcher.add(U), Z.info("watching app.config.ts for changes", { path: k(e, U) });
+			let r = ii.map((t) => O(e, t)), i = new Set(r.map((e) => A(e)));
 			for (let e of r) n.watcher.add(e);
 			n.watcher.on("all", (t, r) => {
-				i.has(A(r)) && (Q.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: k(e, r) }), n.close().catch(() => void 0).then(() => {
-					de();
+				i.has(A(r)) && (Z.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: k(e, r) }), n.close().catch(() => void 0).then(() => {
+					fe();
 				}));
 			});
 			let a = async () => {
 				try {
 					try {
-						let e = n.moduleGraph.getModuleById(G);
+						let e = n.moduleGraph.getModuleById(U);
 						e && n.moduleGraph.invalidateModule(e);
 					} catch {}
-					let e = (await n.ssrLoadModule(G, { fixStacktrace: !0 })).default;
-					return typeof e == "object" && e && "type" in e && e.type === "web" ? e : (Q.warn("app.config.ts re-load returned wrong shape", { hasDefault: e !== void 0 }), null);
+					let e = (await n.ssrLoadModule(U, { fixStacktrace: !0 })).default;
+					return typeof e == "object" && e && "type" in e && e.type === "web" ? e : (Z.warn("app.config.ts re-load returned wrong shape", { hasDefault: e !== void 0 }), null);
 				} catch (e) {
-					return Q.warn("app.config.ts re-load failed — ignoring this change", {}, e), null;
+					return Z.warn("app.config.ts re-load failed — ignoring this change", {}, e), null;
 				}
 			}, o = null, s = () => {
 				o && clearTimeout(o), o = setTimeout(() => {
@@ -2622,104 +2954,104 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			}, c = async () => {
 				let t = await a();
 				if (!t) {
-					Q.info("app.config.ts onConfigChange: load returned null — skipping");
+					Z.info("app.config.ts onConfigChange: load returned null — skipping");
 					return;
 				}
-				if (Q.info("app.config.ts onConfigChange: loaded", {
+				if (Z.info("app.config.ts onConfigChange: loaded", {
 					theme: t.theme,
 					port: t.port,
 					name: t.name
-				}), JSON.stringify(t) === JSON.stringify(le)) {
-					Q.info("app.config.ts onConfigChange: parsed config unchanged — skipping (no-op edit?)");
+				}), JSON.stringify(t) === JSON.stringify(W)) {
+					Z.info("app.config.ts onConfigChange: parsed config unchanged — skipping (no-op edit?)");
 					return;
 				}
-				let r = ce(le, t);
+				let r = le(W, t);
 				if (r.length > 0) {
-					Q.warn("app.config.ts changed — hard restart required", { fields: r });
+					Z.warn("app.config.ts changed — hard restart required", { fields: r });
 					try {
 						await n.close();
 					} catch {}
-					de();
+					fe();
 					return;
 				}
 				try {
 					let r = Date.now();
-					await pi(e, t, await si(e, t)), le = t, n.ws && n.ws.send({
+					await sa(e, t, await ea(e, t)), W = t, n.ws && n.ws.send({
 						type: "full-reload",
 						path: "*"
-					}), Q.info("app.config.ts soft-regen", {
+					}), Z.info("app.config.ts soft-regen", {
 						ms: Date.now() - r,
 						reload: "full"
 					});
 				} catch (e) {
-					Q.error("app.config.ts soft-regen failed", {}, e);
+					Z.error("app.config.ts soft-regen failed", {}, e);
 				}
-			}, l = (e) => E(e) === "app.config.ts" ? e === G || A(e) === ue : !1;
+			}, l = (e) => E(e) === "app.config.ts" ? e === U || A(e) === de : !1;
 			n.watcher.on("change", (e) => {
-				l(e) && (Q.info("app.config.ts change event (chokidar)", { file: e }), s());
+				l(e) && (Z.info("app.config.ts change event (chokidar)", { file: e }), s());
 			}), n.watcher.on("add", (e) => {
-				l(e) && (Q.info("app.config.ts add event (chokidar)", { file: e }), s());
+				l(e) && (Z.info("app.config.ts add event (chokidar)", { file: e }), s());
 			});
 			try {
 				let { watchFile: e } = await import("node:fs");
-				e(G, { interval: 500 }, (e, t) => {
-					e.mtimeMs !== t.mtimeMs && (Q.info("app.config.ts change event (poll)", { mtime: e.mtimeMs }), s());
-				}), Q.info("app.config.ts polling watcher attached", { intervalMs: 500 });
+				e(U, { interval: 500 }, (e, t) => {
+					e.mtimeMs !== t.mtimeMs && (Z.info("app.config.ts change event (poll)", { mtime: e.mtimeMs }), s());
+				}), Z.info("app.config.ts polling watcher attached", { intervalMs: 500 });
 			} catch (e) {
-				Q.warn("app.config.ts polling watcher could not attach", {}, e);
+				Z.warn("app.config.ts polling watcher could not attach", {}, e);
 			}
-			ke(t, Q, {
+			Be(t, Z, {
 				root: e,
 				onBeforeRestart: () => n.close()
 			});
 		}
-	}, pe = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, K = 0, he = {
+	}, me = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, G = 0, he = {
 		name: "framework:suppress-api-hmr",
 		handleHotUpdate(e) {
-			if (K += 1, pe.test(e.file)) return [];
+			if (G += 1, me.test(e.file)) return [];
 		}
 	}, ge = {
 		name: "framework:reoptimize-on-rpcgroup-change",
 		async configureServer(t) {
 			let n = [];
 			for (let r of a) {
-				let i = await ni(e, r.pkg);
+				let i = await Yi(e, r.pkg);
 				if (i) {
 					n.push(i);
 					try {
 						t.watcher.add(O(i, "rpcGroup.generated.ts"));
 					} catch {}
-					for (let e of await dr(i)) try {
+					for (let e of await ei(i)) try {
 						t.watcher.add(e);
 					} catch {}
 				}
 			}
 			if (n.length === 0) return;
-			let r = await pr(n), i = null, o = !1, s = async () => {
+			let r = await ni(n), i = null, o = !1, s = async () => {
 				if (o) return;
-				let e = await pr(n);
+				let e = await ni(n);
 				if (e !== void 0 && e !== r) {
-					r = e, o = !0, Q.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
+					r = e, o = !0, Z.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
 					try {
-						await M.rm(O(z, ".vite", "deps"), {
+						await N.rm(O(L, ".vite", "deps"), {
 							recursive: !0,
 							force: !0
 						}), await t.restart(!0);
 					} catch (e) {
-						o = !1, Q.error("rpcGroup re-optimize failed", {}, e);
+						o = !1, Z.error("rpcGroup re-optimize failed", {}, e);
 					}
 				}
 			}, c = (e) => {
 				let t = A(e);
-				!lr(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
+				!Qr(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
 					s();
 				}, 120));
 			};
 			t.watcher.on("change", c), t.watcher.on("add", c);
 		}
-	}, q = {}, ve = (e) => (t) => {
+	}, K = {}, ve = (e) => (t) => {
 		t.on("proxyReq", (t, n) => {
-			sn(t, n, {
+			nr(t, n, {
 				target: e,
 				token: process.env.VOLTRO_INSPECT_TOKEN,
 				writeToken: process.env.VOLTRO_INSPECT_WRITE_TOKEN,
@@ -2729,14 +3061,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	};
 	for (let e of a) {
 		if (!e.proxyTarget) continue;
-		q[e.browserWsUrl] = {
+		K[e.browserWsUrl] = {
 			target: e.proxyTarget,
 			ws: !0,
 			changeOrigin: !0,
 			...e.wsPath ? {} : { rewrite: () => "/ws" }
 		};
 		let t = e.proxyTarget.replace(/^ws/, "http");
-		q[`/_voltro/api/${e.name}`] = {
+		K[`/_voltro/api/${e.name}`] = {
 			target: t,
 			changeOrigin: !0,
 			rewrite: (t) => t.replace(RegExp(`^/_voltro/api/${e.name}`), ""),
@@ -2744,15 +3076,15 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		};
 	}
 	for (let [e, t] of Object.entries(n.proxies ?? {})) {
-		if (q[e]) {
-			Q.warn("user proxy ignored — prefix already claimed by an api ws proxy", { prefix: e });
+		if (K[e]) {
+			Z.warn("user proxy ignored — prefix already claimed by an api ws proxy", { prefix: e });
 			continue;
 		}
-		q[e] = {
+		K[e] = {
 			target: t.target,
 			changeOrigin: t.changeOrigin ?? !0,
 			...t.rewrite === void 0 ? {} : { rewrite: (n) => n.replace(RegExp(`^${e}`), t.rewrite) }
-		}, Q.info(`proxy ${e} → ${t.target}`, {
+		}, Z.info(`proxy ${e} → ${t.target}`, {
 			prefix: e,
 			target: t.target,
 			...t.rewrite === void 0 ? {} : { rewrite: t.rewrite }
@@ -2764,7 +3096,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			let r = null, a = async () => {
 				if (r !== null) return r;
 				let n = [];
-				for (let r of N) try {
+				for (let r of j) try {
 					let i = await t.ssrLoadModule(O(e, "src", "pages", r.file));
 					n.push({
 						pattern: r.pattern,
@@ -2781,7 +3113,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						hasGetStaticPaths: typeof i.getStaticPaths == "function"
 					});
 				} catch (e) {
-					Q.warn("inspect: failed to load page metadata", { pattern: r.pattern }, e);
+					Z.warn("inspect: failed to load page metadata", { pattern: r.pattern }, e);
 				}
 				return r = n, n;
 			};
@@ -2801,9 +3133,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}), n();
 			}), t.middlewares.use((t, n, r) => {
 				if (t.method !== "GET" && t.method !== "HEAD") return r();
-				let { pathname: i } = Hn(t.url ?? "/");
-				if (i !== "/robots.txt" || j(O(e, "public", "robots.txt"))) return r();
-				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(bt({ indexable: !1 }));
+				let { pathname: i } = $t(t.url ?? "/");
+				if (i !== "/robots.txt" || M(O(e, "public", "robots.txt"))) return r();
+				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(gn({ indexable: !1 }));
 			}), n.name === "voltroDashboard" && t.middlewares.use(async (e, t, n) => {
 				let r = e.url ?? "", i = r.split("?")[0];
 				if (i === "/api/dashboard/proxy") {
@@ -2894,7 +3226,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				for (let [t, n] of Object.entries(e.headers ?? {})) n !== void 0 && (s[String(t).toLowerCase()] = Array.isArray(n) ? n.join(", ") : String(n));
 				let c = o.split("?")[0];
 				if (e.method === "GET" && (c === "/_voltro/inspect/logs" || o.startsWith("/_voltro/inspect/logs?"))) {
-					let e = d(s.origin), n = en(o, Ft(), s);
+					let e = d(s.origin), n = Xn(o, jn(), s);
 					t.statusCode = n.status, t.setHeader("content-type", n.contentType);
 					for (let [n, r] of Object.entries(e)) t.setHeader(n, r);
 					t.end(n.body);
@@ -2912,7 +3244,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					e.setEncoding("utf-8"), e.on("data", (e) => {
 						r += e;
 					}), e.on("end", () => {
-						let e = Jt(r, i);
+						let e = Wn(r, i);
 						t.statusCode = e.status, t.setHeader("content-type", e.contentType);
 						for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 						t.end(e.body);
@@ -2943,14 +3275,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 					t.flushHeaders?.(), t.write("retry: 5000\n\n");
 					let a = o.indexOf("?");
-					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(Ct(e));
+					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(yn(e));
 					let c = i.subscribe((e) => {
 						try {
-							t.write(Ct(e));
+							t.write(yn(e));
 						} catch {}
 					}), l = setInterval(() => {
 						try {
-							t.write(wt());
+							t.write(bn());
 						} catch {}
 					}, 15e3), p = () => {
 						clearInterval(l), c();
@@ -2963,7 +3295,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						kind: "web",
 						meta: {
 							name: n.name ?? "(unnamed)",
-							voltroVersion: Nr,
+							voltroVersion: Di,
 							port: l,
 							mode: "dev",
 							apis: Object.entries(n.apis ?? {}).map(([e, t]) => {
@@ -2981,7 +3313,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							size: 0,
 							entries: []
 						}),
-						env: () => Te(n.name ?? "app", { contract: oe(n.env) ? n.env : void 0 })
+						env: () => Fe(n.name ?? "app", { contract: ue(n.env) ? n.env : void 0 })
 					}, c = p(o, i, s, { method: e.method ?? "GET" });
 					if (c === null) return r();
 					t.statusCode = c.status, t.setHeader("content-type", c.contentType);
@@ -3005,12 +3337,12 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}
 			});
 		}
-	} : null, xe = /* @__PURE__ */ new Set(), Se = (e, t, n, r, i, a = !1) => {
-		let o = Yn(i, a, t) ?? "";
-		if (Q.error(`${t} render failed`, {
+	} : null, Se = /* @__PURE__ */ new Set(), Ce = (e, t, n, r, i, a = !1) => {
+		let o = Ir(i, a, t) ?? "";
+		if (Z.error(`${t} render failed`, {
 			pathname: n,
 			pattern: r,
-			cause: Et(i) + o
+			cause: Sn(i) + o
 		}), e.headersSent) {
 			e.end();
 			return;
@@ -3018,89 +3350,115 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		e.writeHead(500, {
 			"content-type": "text/plain; charset=utf-8",
 			"x-voltro-rendered-by": `${t}-failed`,
-			"x-voltro-ssr-generation": String(K)
+			"x-voltro-ssr-generation": String(G)
 		});
-		let s = K === 0 ? "" : `\n[voltro] this process has absorbed ${K} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
-		e.end(`${t} render failed for ${n}\n\n${Et(i)}\n${o}\n${s}`);
-	}, we = nt(), Ee = it({
+		let s = G === 0 ? "" : `\n[voltro] this process has absorbed ${G} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
+		e.end(`${t} render failed for ${n}\n\n${Sn(i)}\n${o}\n${s}`);
+	}, we = mt(), Te = gt({
 		limit: we,
-		onColdStart: (e) => Q.debug("ssr cold-compile start", { id: e }),
-		onColdEnd: (e, { durationMs: t, failed: n }) => Q.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
+		onColdStart: (e) => Z.debug("ssr cold-compile start", { id: e }),
+		onColdEnd: (e, { durationMs: t, failed: n }) => Z.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
 			id: e,
 			ms: t,
 			...n ? { failed: !0 } : {}
 		})
 	});
-	Q.debug(`ssr cold-compile concurrency ${we}`, { concurrency: we });
-	let J = null, Oe = async () => (J === null && (J = await M.readFile(O(e, ".framework", "index.html"), "utf8")), J), Ae = {
+	Z.debug(`ssr cold-compile concurrency ${we}`, { concurrency: we });
+	let Ee = null, Oe = async () => (Ee === null && (Ee = await N.readFile(O(e, ".framework", "index.html"), "utf8")), Ee), ke = {
 		name: "framework:ssr",
 		configureServer(t) {
-			let r = (e) => Ee.load(e, async () => await t.ssrLoadModule(e)), i, o = !1, s = () => {
+			let r = (e) => Te.load(e, async () => await t.ssrLoadModule(e)), i, o = !1, s = () => {
 				if (i !== void 0) return i;
 				let t = n.locales ?? [], a = n.defaultLocale ?? t[0] ?? "en";
 				return t.length === 0 ? (i = Promise.resolve(() => void 0), i) : (i = (async () => {
-					let [{ makeSsgWrap: n }, { makeSsrI18nResolver: i }] = await Promise.all([r("@voltro/i18n"), r("@voltro/i18n/server")]), s = {};
-					for (let i of t) if (j(O(e, "src", "locales", `${i}.ts`))) try {
-						let t = (await r(O(e, "src", "locales", `${i}.ts`))).default;
-						t !== void 0 && (s[i] = n(i, t, a));
+					let [{ makeSsgWrap: i }, { makeSsrI18nResolver: s }] = await Promise.all([r("@voltro/i18n"), r("@voltro/i18n/server")]), c = {};
+					for (let n of t) if (M(O(e, "src", "locales", `${n}.ts`))) try {
+						let t = (await r(O(e, "src", "locales", `${n}.ts`))).default;
+						t !== void 0 && (c[n] = i(n, t, a));
 					} catch (e) {
-						Q.warn("locale catalog failed to load for SSR", { locale: i }, e);
+						Z.warn("locale catalog failed to load for SSR", { locale: n }, e);
 					}
-					if (o = Object.keys(s).length > 0, Object.keys(s).length === 0) {
-						let { resolveLocale: e } = await r("@voltro/i18n/server");
-						return (n, r) => ({
+					if (o = Object.keys(c).length > 0, Object.keys(c).length === 0) {
+						let { resolveLocale: e, resolveTimeZone: i } = await r("@voltro/i18n/server");
+						return (r, o) => ({
 							locale: e({
-								cookieHeader: n ?? null,
-								acceptLanguageHeader: r ?? null,
+								cookieHeader: r ?? null,
+								acceptLanguageHeader: o ?? null,
 								supported: t,
 								defaultLocale: a
 							}),
+							timeZone: i({
+								cookieHeader: r ?? null,
+								configured: n.timeZone ?? null,
+								defaultTimeZone: n.defaultTimeZone ?? null
+							}),
 							outerWrap: (e) => e
 						});
 					}
-					return i({
-						wraps: s,
+					return s({
+						wraps: c,
 						supported: t,
-						defaultLocale: a
+						defaultLocale: a,
+						timeZone: n.timeZone ?? null,
+						defaultTimeZone: n.defaultTimeZone ?? null
 					});
 				})(), i);
-			};
-			t.middlewares.use(async (i, c, l) => {
+			}, c = Dt({
+				apiName: a[0]?.name,
+				apiOrigin: ia(a[0], { allowDevProxy: !0 }),
+				loadDescriptors: async () => {
+					let e = a[0];
+					if (e !== void 0) return (await r(`${e.pkg}/rpcGroup`)).appDescriptors;
+				},
+				rpcQuery: (e, t) => aa(ia(a[0], { allowDevProxy: !0 }), e, {
+					apiName: a[0]?.name,
+					headers: t
+				}),
+				renderErrorPage: async () => void 0
+			});
+			t.middlewares.use((e, t, n) => {
+				if (!(e.url ?? "/").split("?")[0].startsWith(xe)) return n();
+				c(e, t, (t, r) => {
+					e.url = t, e.method = "GET", e.__voltroFormFlash = r, n();
+				}).then((e) => {
+					e || n();
+				});
+			}), t.middlewares.use(async (i, c, l) => {
 				if (i.method !== "GET" && i.method !== "HEAD") return l();
 				let u = i.url ?? "/";
 				u.indexOf("?");
-				let { pathname: d, search: f } = Hn(u);
+				let { pathname: d, search: f } = $t(u), p = i.__voltroFormFlash;
 				if (d.startsWith("/@") || d.startsWith("/node_modules/") || d.startsWith("/.framework/") || d.startsWith("/_voltro/") || d === "/main.tsx" || d === "/index.html" || d === "/sw.js" || d === "/favicon.ico" || d === "/robots.txt") return l();
-				let p = async () => {
-					if (X.length === 0) return;
-					let e = xr(X, {
+				let m = async () => {
+					if (J.length === 0) return;
+					let e = ui(J, {
 						route: void 0,
 						pathname: d
 					});
 					if (e === void 0) return;
 					let t = {};
 					for (let [e, n] of Object.entries(i.headers ?? {})) typeof n == "string" ? t[e] = n : Array.isArray(n) && (t[e] = n.join(", "));
-					let n = await jr(e, {
+					let n = await bi(e, {
 						pathname: d,
 						search: f,
 						headers: t,
-						cookies: wr(t.cookie),
+						cookies: pi(t.cookie),
 						route: void 0
 					});
-					for (let e of n.setCookies) c.appendHeader("set-cookie", Or(e));
+					for (let e of n.setCookies) c.appendHeader("set-cookie", _i(e));
 				};
-				if (/\.[a-z0-9]+$/i.test(d)) return await p(), l();
-				let m = ti(d, F.ssrRoutes);
-				if (!m) return await p(), l();
-				let h = !xe.has(m.route.pattern), g = Date.now();
-				h && Q.info(`ssr compiling ${m.route.pattern}`, {
-					pattern: m.route.pattern,
+				if (/\.[a-z0-9]+$/i.test(d)) return await m(), l();
+				let h = Ji(d, F.ssrRoutes);
+				if (!h) return await m(), l();
+				let g = !Se.has(h.route.pattern), v = Date.now();
+				g && Z.info(`ssr compiling ${h.route.pattern}`, {
+					pattern: h.route.pattern,
 					pathname: d
 				});
-				let v = {}, y = async (e, t) => {
+				let y = {}, b = async (e, t) => {
 					let n = Date.now(), r = await t();
-					return v[e] = (v[e] ?? 0) + (Date.now() - n), r;
-				}, b = async (e, n, r) => {
+					return y[e] = (y[e] ?? 0) + (Date.now() - n), r;
+				}, x = async (e, n, r) => {
 					let i = await t.moduleGraph.getModuleById(e);
 					if (!(!i || n.has(e))) {
 						if (n.add(e), i.id && /\.(css|sass|scss|less|stylus|pcss|postcss)(\?|$)/.test(i.id)) {
@@ -3108,144 +3466,163 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							r.includes(e) || r.push(e);
 							return;
 						}
-						for (let e of i.importedModules ?? []) e.id && await b(e.id, n, r);
+						for (let e of i.importedModules ?? []) e.id && await x(e.id, n, r);
 					}
-				}, x = !1;
+				}, S = !1;
 				try {
-					let S = await y("loadPage", async () => await r(O(e, "src", "pages", m.route.file))), C = _(S, O("src", "pages", m.route.file)), w = Yr(F.dirs, m.route.dirChain), T = C === "spa" && w.some((e) => e.hasLayout);
-					if (C !== "ssr" && C !== "isr" && !T) return await p(), l();
-					let E = {};
-					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? E[e] = t : Array.isArray(t) && (E[e] = t.join(", "));
-					let D = await jr(xr(X, {
-						route: m.route.pattern,
+					let C = await b("loadPage", async () => await r(O(e, "src", "pages", h.route.file))), w = _(C, O("src", "pages", h.route.file)), T = Hi(F.dirs, h.route.dirChain), E = w === "spa" && T.some((e) => e.hasLayout), D = C.interactive ?? "full";
+					if (w !== "ssr" && w !== "isr" && !E && D !== "islands") return await m(), l();
+					let k = {};
+					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? k[e] = t : Array.isArray(t) && (k[e] = t.join(", "));
+					let A = await bi(ui(J, {
+						route: h.route.pattern,
 						pathname: d
 					}), {
 						pathname: d,
 						search: f,
-						headers: E,
-						cookies: wr(E.cookie),
-						route: m.route.pattern
-					}, ze);
-					for (let e of D.setCookies) c.appendHeader("set-cookie", Or(e));
-					let k = D.headers, A = fi(di(a[0], { allowDevProxy: !0 }), D.headers.cookie, {
+						headers: k,
+						cookies: pi(k.cookie),
+						route: h.route.pattern
+					}, Ve);
+					for (let e of A.setCookies) c.appendHeader("set-cookie", _i(e));
+					for (let [e, t] of Object.entries(A.responseHeaders)) c.setHeader(e, t);
+					if (w === "isr" && A.cspNonce !== void 0) throw Error(`page '${h.route.pattern}' is renderMode 'isr' while middleware.ts mints a cspNonce — an isr render is CACHED and a cached nonce is a lie the browser enforces. Use renderMode 'ssr' for nonce'd pages, or a hash-based CSP for isr.`);
+					let j = w === "isr" ? wi(A.headers) : A.headers, M = aa(ia(a[0], { allowDevProxy: !0 }), j.cookie, {
 						apiName: a[0]?.name,
-						headers: D.headers
-					}), j = new AbortController(), M = () => j.abort();
-					c.once("close", M);
-					let N = null, P = [], ee = {};
+						headers: j
+					}), P = new AbortController(), ee = () => P.abort();
+					c.once("close", ee);
+					let te = null, ne = [], re = {};
 					try {
-						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: P, segmentLoaderData: ee} = await y("loadChain", () => Xr({
-							entries: w,
+						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: ne, segmentLoaderData: re} = await b("loadChain", () => Ui({
+							entries: T,
 							loadLayout: (t) => r(O(e, "src", "pages", t.dir, "layout.tsx")),
 							loadError: (t) => r(O(e, "src", "pages", t.dir, "error.tsx")),
 							loadPending: (t) => r(O(e, "src", "pages", t.dir, "loading.tsx")),
 							ctx: {
-								params: m.params,
+								params: h.params,
 								pathname: d,
 								search: f,
-								signal: j.signal,
-								headers: k,
-								query: A,
+								signal: P.signal,
+								headers: j,
+								query: M,
 								isServer: !0
 							}
 						}));
-						let t = S.loader;
-						typeof t == "function" && !T && (N = await y("loader", () => t({
-							params: m.params,
+						let t = C.loader;
+						typeof t == "function" && !E && (te = await b("loader", () => t({
+							params: h.params,
 							pathname: d,
 							search: f,
-							signal: j.signal,
-							headers: k,
-							query: A,
+							signal: P.signal,
+							headers: j,
+							query: M,
 							isServer: !0
 						})));
 					} finally {
-						c.off("close", M);
+						c.off("close", ee);
 					}
-					let I = await y("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
-					T || await cr({
-						pageMod: S,
-						params: m.params,
-						query: A,
+					let I = await b("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
+					E || await Zr({
+						pageMod: C,
+						params: h.params,
+						query: M,
 						apiName: a[0]?.name,
 						seed: I.seedPreloadedSubscription,
 						seedFailure: I.seedPreloadedSubscriptionFailure,
-						onError: ({ tag: e, apiName: t }, n) => Q.warn("preload seed failed", {
+						onError: ({ tag: e, apiName: t }, n) => Z.warn("preload seed failed", {
 							tag: e,
 							apiName: t,
 							pathname: d
 						}, n)
 					});
-					let te = {
-						pattern: m.route.pattern,
-						Component: S.default,
-						meta: S.meta,
-						loader: S.loader,
-						ErrorBoundary: S.ErrorBoundary,
-						Pending: S.Pending,
-						renderMode: C,
-						chain: P
-					}, L = {
-						cookies: D.cookies,
-						headers: k,
-						url: u
-					}, R = S.interactive ?? "full", z = (await s())(k.cookie, k["accept-language"]);
-					x = z !== void 0 && o;
-					let ne = z ? {
+					let L = {
+						pattern: h.route.pattern,
+						Component: C.default,
+						meta: C.meta,
+						loader: C.loader,
+						ErrorBoundary: C.ErrorBoundary,
+						Pending: C.Pending,
+						renderMode: w,
+						chain: ne
+					}, R = {
+						cookies: w === "isr" ? Ti(A.cookies) : A.cookies,
+						headers: j,
+						url: u,
+						...p === void 0 ? {} : { formFlash: p }
+					}, z = (await s())(j.cookie, j["accept-language"]);
+					S = z !== void 0 && o;
+					let ie = z ? {
 						outerWrap: z.outerWrap,
 						locale: z.locale
-					} : {}, B = T ? zn({
+					} : {}, B = E ? Yt({
 						helpers: I,
-						page: `src/pages/${m.route.file}`,
-						interactive: R,
+						page: `src/pages/${h.route.file}`,
+						interactive: D,
 						delivery: "stream",
 						renderInput: {
-							descriptor: te,
-							params: m.params,
+							descriptor: L,
+							params: h.params,
 							pathname: d,
 							search: f,
-							segmentLoaderData: ee,
-							requestContext: L,
-							...ne
+							segmentLoaderData: re,
+							requestContext: R,
+							...ie
 						}
-					}) : null, V = T ? null : Rn({
+					}) : null, V = E ? null : Jt({
 						helpers: I,
-						page: `src/pages/${m.route.file}`,
+						page: `src/pages/${h.route.file}`,
 						pathname: d,
-						renderMode: C,
-						interactive: R,
-						loaderData: N,
-						segmentLoaderData: ee,
-						pageLoaderRan: typeof S.loader == "function"
-					}), re = [];
-					await y("collectCss", async () => {
+						renderMode: w,
+						interactive: D,
+						loaderData: te,
+						segmentLoaderData: re,
+						pageLoaderRan: typeof C.loader == "function"
+					}), ae = [];
+					await b("collectCss", async () => {
 						let t = /* @__PURE__ */ new Set(), n = [
-							O(e, "src", "pages", m.route.file),
-							...w.flatMap((t) => [
+							O(e, "src", "pages", h.route.file),
+							...T.flatMap((t) => [
 								...t.hasLayout ? [O(e, "src", "pages", t.dir, "layout.tsx")] : [],
 								...t.hasError ? [O(e, "src", "pages", t.dir, "error.tsx")] : [],
 								...t.hasPending ? [O(e, "src", "pages", t.dir, "loading.tsx")] : []
 							]),
 							O(e, ".framework", "main.tsx")
 						];
-						for (let e of n) await b(e, t, re);
+						for (let e of n) await x(e, t, ae);
 					});
-					let H = await y("readShell", Oe), U = await y("transformShell", () => t.transformIndexHtml(u, H)), ie = re.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), W = z?.locale ?? L.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", ae = Date.now();
+					let oe = (D === "islands" ? await b("islandsEntry", async () => {
+						let t = oa(a, "../../app.config"), n = (await Wt({
+							webRoot: e,
+							pages: [{
+								pattern: h.route.pattern,
+								file: h.route.file
+							}],
+							headSnippets: zt(await Oe()),
+							apiImports: t.imports,
+							apiEntriesLiteral: `[\n${t.providerEntryLines.join("\n")}\n  ]`
+						}))[0];
+						return n === void 0 ? void 0 : await N.readFile(O(e, ".framework", n.htmlFile), "utf8");
+					}) : void 0) ?? await b("readShell", Oe), H = await b("transformShell", () => t.transformIndexHtml(u, oe)), se = ae.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), U = z?.locale ?? R.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", ce = Date.now(), le = {
+						lang: U,
+						...z?.timeZone === void 0 ? {} : { timeZone: z.timeZone },
+						renderedAt: ce
+					};
 					if (B) {
-						let e = (e) => Vn({
+						let e = (e) => Zt({
 							helpers: I,
 							prepared: B,
 							meta: e,
-							interactive: R,
-							extra: [ie]
+							interactive: D,
+							extra: [se]
 						});
-						if (B.hasDeferred) ar({
+						if (B.hasDeferred) Jr({
 							res: c,
-							shell: nr({
-								shell: U,
+							shell: Ur({
+								shell: H,
 								inlineModuleScriptsAsync: !0
 							}),
-							htmlLang: W,
+							documentAttrs: le,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "spa-shell-dev"
@@ -3256,40 +3633,40 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 								...e
 							}),
 							onShellError: (e) => {
-								Se(c, "spa-shell-dev", d, m.route.pattern, e, x);
+								Ce(c, "spa-shell-dev", d, h.route.pattern, e, S);
 							}
 						});
 						else {
-							let t = Bn({
+							let t = Xt({
 								helpers: I,
 								prepared: B
-							}), n = U.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${W}"`);
+							}), n = Kr(H.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`), le);
 							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "spa-shell-dev"), c.end(n);
 						}
 					} else if (V) {
 						let e = (e) => [
-							ie,
+							se,
 							I.renderMetaToHtml(e),
-							`<meta name="voltro-interactive" content="${R}" />`,
+							`<meta name="voltro-interactive" content="${D}" />`,
 							...V.hasDeferred ? [I.renderDeferredRegistryScript()] : [],
 							I.renderRouterStateScript(V.stateInput)
 						].filter((e) => e.length > 0).join("\n    "), t = {
-							descriptor: te,
-							params: m.params,
+							descriptor: L,
+							params: h.params,
 							pathname: d,
 							search: f,
 							loaderData: V.loaderData,
 							segmentLoaderData: V.segmentLoaderData,
-							requestContext: L,
-							...ne
+							requestContext: R,
+							...ie
 						};
-						if (C === "ssr" && R === "full") ar({
+						if (w === "ssr" && D === "full" && p === void 0) Jr({
 							res: c,
-							shell: nr({
-								shell: U,
+							shell: Ur({
+								shell: H,
 								inlineModuleScriptsAsync: !0
 							}),
-							htmlLang: W,
+							documentAttrs: le,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "ssr-dev"
@@ -3297,82 +3674,85 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							headInjection: e,
 							render: (e) => I.renderPageToStream({
 								...t,
-								...e
+								...e,
+								...A.cspNonce === void 0 ? {} : { nonce: A.cspNonce }
 							}),
 							onShellError: (e) => {
-								Se(c, "ssr-dev", d, m.route.pattern, e, x);
+								Ce(c, "ssr-dev", d, h.route.pattern, e, S);
 							}
 						});
 						else {
-							let { html: n, meta: r } = I.renderPageToHtml(t), i = U.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`).replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${W}"`);
-							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "ssr-dev"), c.end(i);
+							let { html: n, meta: r } = I.renderPageToHtml(t), i = Kr(H.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`), le);
+							c.statusCode = p === void 0 ? 200 : 422, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "ssr-dev"), p !== void 0 && c.setHeader("cache-control", "no-store");
+							let a = p === void 0 ? i : bt(i, p);
+							c.end(A.cspNonce === void 0 ? a : Qt(a, A.cspNonce));
 						}
 					}
-					v.render = Date.now() - ae;
-					let G = Date.now() - g;
-					h ? (xe.add(m.route.pattern), Q.info(`ssr compiled ${m.route.pattern} in ${G}ms`, {
-						pattern: m.route.pattern,
+					y.render = Date.now() - ce;
+					let W = Date.now() - v;
+					g ? (Se.add(h.route.pattern), Z.info(`ssr compiled ${h.route.pattern} in ${W}ms`, {
+						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: G,
+						elapsedMs: W,
 						cold: !0,
-						phases: v
-					})) : G > 200 && Q.info(`ssr rendered ${d} in ${G}ms`, {
-						pattern: m.route.pattern,
+						phases: y
+					})) : W > 200 && Z.info(`ssr rendered ${d} in ${W}ms`, {
+						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: G,
+						elapsedMs: W,
 						cold: !1,
-						phases: v
+						phases: y
 					});
 				} catch (e) {
-					if (In(e)) {
-						Q.error("ssr-dev render refused", {
+					if (Kt(e)) {
+						Z.error("ssr-dev render refused", {
 							pathname: d,
-							pattern: m.route.pattern
+							pattern: h.route.pattern
 						}, e), c.statusCode = 500, c.setHeader("content-type", "text/plain; charset=utf-8"), c.end(e.message);
 						return;
 					}
-					let t = Ln(e);
+					let t = qt(e);
 					if (t) {
 						c.statusCode = t.status;
 						for (let [e, n] of Object.entries(t.headers)) c.setHeader(e, String(n));
 						c.end(t.body);
 						return;
 					}
-					Se(c, "ssr-dev", d, m.route.pattern, e, x);
+					Ce(c, "ssr-dev", d, h.route.pattern, e, S);
 				}
 			});
 		}
-	}, je = Date.now(), Me = te.version ?? "?", Ne = await Pr(), Fe = O(e, "node_modules", "@voltro", "ui-shadcn"), Y = j(O(Fe, "package.json")) ? Fe : null, Ie = [], Le = await (async () => {
+	}, Ae = Date.now(), je = ne.version ?? "?", Me = await Oi(), Ne = O(e, "node_modules", "@voltro", "ui-shadcn"), q = M(O(Ne, "package.json")) ? Ne : null, Ie = [], Le = await (async () => {
 		let t = [];
 		for (let n of a) {
-			let r = await ni(e, n.pkg);
+			let r = await Yi(e, n.pkg);
 			r && t.push(r);
 		}
-		let n = await pr(t);
+		let n = await ni(t);
 		if (n === void 0) return !1;
-		let r = O(z, ".voltro-rpcgroup-optimize"), i = "";
+		let r = O(L, ".voltro-rpcgroup-optimize"), i = "";
 		try {
-			i = (await M.readFile(r, "utf8")).trim();
+			i = (await N.readFile(r, "utf8")).trim();
 		} catch {}
 		if (i === n) return !1;
 		try {
-			await M.writeFile(r, n);
+			await N.writeFile(r, n);
 		} catch {}
 		return !0;
-	})(), Re = /* @__PURE__ */ new Set(), ze = (e) => {
-		Re.has(e.name) || (Re.add(e.name), Q.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
+	})(), ze = /* @__PURE__ */ new Set(), Ve = (e) => {
+		ze.has(e.name) || (ze.add(e.name), Z.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
 			cookie: e.name,
 			hint: "If your IdP client reads this from `document.cookie` (Supabase's `createBrowserClient` does), pass `httpOnly: false`. Otherwise the SSR render succeeds and the user is signed out at the first client-side call. Set `httpOnly: true` explicitly to silence this."
 		}));
-	}, X = await Ar(e);
-	X.length > 0 && Q.info(`middleware.ts loaded — ${X.length} middleware(s): ` + X.map((e) => e.exportName).join(", ")), Cr(X, F.ssrRoutes.map((e) => e.pattern)), Le && Q.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
+	}, J = await yi(e);
+	J.length > 0 && Z.info(`middleware.ts loaded — ${J.length} middleware(s): ` + J.map((e) => e.exportName).join(", ")), fi(J, F.ssrRoutes.map((e) => e.pattern)), Le && Z.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
 	try {
-		await Pe(l, "voltro dev (web)");
+		await We(l, "voltro dev (web)");
 	} catch (e) {
-		Q.error(String(e.message ?? e)), process.exit(1);
+		Z.error(String(e.message ?? e)), process.exit(1);
 	}
-	await (await te.createServer({
-		root: z,
+	await (await ne.createServer({
+		root: L,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		ssr: { noExternal: ["react-intl", "@voltro/i18n"] },
 		resolve: {
@@ -3383,50 +3763,50 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				"@voltro/i18n"
 			],
 			alias: [
-				...Ne ? [{
+				...Me ? [{
 					find: "@voltro/devtools/styles.css",
-					replacement: O(Ne, "src/styles.css")
+					replacement: O(Me, "src/styles.css")
 				}, {
 					find: "@voltro/devtools",
-					replacement: O(Ne, "src/index.ts")
+					replacement: O(Me, "src/index.ts")
 				}] : [],
-				...Y ? [
+				...q ? [
 					{
 						find: "@voltro/ui-shadcn/tokens.css",
-						replacement: O(Y, "src/tokens.css")
+						replacement: O(q, "src/tokens.css")
 					},
 					{
 						find: "@voltro/ui-shadcn/cn",
-						replacement: O(Y, "src/cn.ts")
+						replacement: O(q, "src/cn.ts")
 					},
 					{
 						find: "@voltro/ui-shadcn/brand",
-						replacement: O(Y, "src/brand/voltroLogo.tsx")
+						replacement: O(q, "src/brand/voltroLogo.tsx")
 					},
 					{
 						find: "@voltro/ui-shadcn",
-						replacement: O(Y, "src/index.ts")
+						replacement: O(q, "src/index.ts")
 					}
 				] : [],
-				...tt(e)
+				...pt(e)
 			]
 		},
 		optimizeDeps: {
 			include: [...a.map((e) => `${e.pkg}/rpcGroup`), ...Ie],
 			force: Le
 		},
-		customLogger: $e(),
+		customLogger: dt(),
 		plugins: [
-			bn(O(e, "src", "pages")),
-			L(),
-			R(),
-			re,
-			ae,
-			fe,
+			hr(O(e, "src", "pages")),
+			re(),
+			I(),
+			B,
+			se,
+			pe,
 			he,
 			ge,
 			ye,
-			Ae,
+			ke,
 			...be ? [be] : []
 		],
 		server: {
@@ -3434,23 +3814,23 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			strictPort: !0,
 			host: !0,
 			allowedHosts: n.allowedHosts === !0 || [...n.allowedHosts ?? []],
-			proxy: q,
-			fs: { allow: [e, ...Br(e)] }
+			proxy: K,
+			fs: { allow: [e, ...Pi(e)] }
 		},
 		appType: "spa",
-		cacheDir: O(z, ".vite"),
+		cacheDir: O(L, ".vite"),
 		publicDir: O(e, "public")
-	})).listen(), Mr.info(`v${Me} ready in ${Date.now() - je}ms`, {
-		version: Me,
-		bootMs: Date.now() - je
-	}), Q.info(`listening on http://localhost:${l}`, {
+	})).listen(), Ei.info(`v${je} ready in ${Date.now() - Ae}ms`, {
+		version: je,
+		bootMs: Date.now() - Ae
+	}), Z.info(`listening on http://localhost:${l}`, {
 		port: l,
 		app: n.name ?? "(unnamed)"
 	});
-	for (let e of a) e.proxyTarget && (Q.info(`proxy /ws/${e.name} → ${e.proxyTarget}`, {
+	for (let e of a) e.proxyTarget && (Z.info(`proxy /ws/${e.name} → ${e.proxyTarget}`, {
 		api: e.name,
 		target: e.proxyTarget
-	}), Q.info(`proxy /_voltro/api/${e.name} → ${e.proxyTarget.replace(/^ws/, "http")}/_voltro/inspect`, { api: e.name }));
+	}), Z.info(`proxy /_voltro/api/${e.name} → ${e.proxyTarget.replace(/^ws/, "http")}/_voltro/inspect`, { api: e.name }));
 	try {
 		await x({
 			id: b,
@@ -3461,10 +3841,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			status: "live",
 			logFile: D.path
 		});
-		let t = wn(e);
+		let t = yr(e);
 		if (t) {
-			let e = await Pn({ dashboardAppPath: t });
-			e.status === "launched" ? Q.info(`dashboard launched at http://localhost:${e.port}`, { port: e.port }) : e.status === "already-running" && Q.debug(`dashboard already running on :${e.port}`, { port: e.port });
+			let e = await kr({ dashboardAppPath: t });
+			e.status === "launched" ? Z.info(`dashboard launched at http://localhost:${e.port}`, { port: e.port }) : e.status === "already-running" && Z.debug(`dashboard already running on :${e.port}`, { port: e.port });
 		}
 		setInterval(() => {
 			x({
@@ -3482,32 +3862,32 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		};
 		process.on("SIGINT", n), process.on("SIGTERM", n);
 	} catch (e) {
-		Q.warn("runtime-registry write failed", {}, e);
+		Z.warn("runtime-registry write failed", {}, e);
 	}
-	return ne({
+	return z({
 		app: n.name ?? "unnamed",
 		kind: "web",
 		url: `http://localhost:${l}`,
-		bootMs: Date.now() - je
+		bootMs: Date.now() - Ae
 	}), new Promise(() => {});
-}, vi = async (t) => {
+}, fa = async (t) => {
 	e("serve");
-	let n = await gi(t);
+	let n = await ua(t);
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
-	let i = Date.now(), a = Q.child("serve");
+	let i = Date.now(), a = Z.child("serve");
 	a.info("booting voltro serve (preview)", { app: n.name ?? "(unnamed)" });
-	let o = await si(t, n);
+	let o = await ea(t, n);
 	for (let e of o) a.info("api wired", {
 		name: e.name,
 		pkg: e.pkg
 	});
-	await pi(t, n, o);
+	await sa(t, n, o);
 	{
-		let { pages: e } = await Jr(O(t, "src", "pages"));
-		await mt({
+		let { pages: e } = await $(O(t, "src", "pages"));
+		await un({
 			appRoot: t,
 			pages: e
 		});
@@ -3516,12 +3896,12 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env
-	}).port, c = await _e("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = O(t, ".framework");
-	Q.info("running production build"), await c.build({
+	}).port, c = await De("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = O(t, ".framework");
+	Z.info("running production build"), await c.build({
 		root: u,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [l()],
-		customLogger: $e(),
+		customLogger: dt(),
 		resolve: { dedupe: [
 			"react",
 			"react-dom",
@@ -3530,7 +3910,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		] },
 		build: {
 			outDir: "dist",
-			rollupOptions: { output: { manualChunks: Hr } }
+			rollupOptions: { output: { manualChunks: Ii } }
 		},
 		publicDir: O(t, "public")
 	});
@@ -3543,7 +3923,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		label: "Local",
 		url: e
 	})) ?? [];
-	return ne({
+	return z({
 		app: n.name ?? "unnamed",
 		kind: "preview",
 		url: f,
@@ -3552,4 +3932,4 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	}), new Promise(() => {});
 };
 //#endregion
-export { yt as $, rr as A, Cn as B, Ar as C, xr as D, jr as E, zn as F, Xt as G, wn as H, Bn as I, Ft as J, Jt as K, Vn as L, ar as M, In as N, Or as O, Rn as P, bt as Q, Hn as R, kr as S, wr as T, on as U, Pn as V, en as W, St as X, Ct as Y, wt as Z, vi as _, be as _t, Xr as a, He as at, pi as b, Kr as c, We as ct, gi as d, J as dt, mt as et, si as f, De as ft, _i as g, xe as gt, li as h, Ce as ht, fi as i, Be as it, nr as j, cr as k, $ as l, Pe as lt, ai as m, Ee as mt, di as n, nt, hi as o, Ve as ot, ii as p, Te as pt, Bt as q, oi as r, tt as rt, Yr as s, Ue as st, Ur as t, it as tt, qr as u, ke as ut, Hr as v, _e as vt, Sr as w, Cr as x, Jr as y, Tn as z };
+export { Kt as $, ui as A, De as At, yr as B, wi as C, Le as Ct, di as D, Pe as Dt, yi as E, Ie as Et, Ur as F, In as G, Xn as H, Jr as I, vn as J, jn as K, br as L, Zr as M, Kr as N, pi as O, Me as Ot, Wr as P, un as Q, vr as R, Ti as S, Be as St, vi as T, Fe as Tt, Kn as U, tr as V, Wn as W, gn as X, bn as Y, hn as Z, da as _, et as _t, aa as a, Qt as at, $ as b, nt as bt, Hi as c, Ht as ct, Vi as d, xe as dt, Jt as et, ua as f, Dt as ft, na as g, Qe as gt, Qi as h, pt as ht, oa as i, $t as it, _i as j, bi as k, je as kt, Bi as l, Rt as lt, Zi as m, mt, ia as n, Xt as nt, Ui as o, Wt as ot, ea as p, gt as pt, yn as q, $i as r, Zt as rt, la as s, zt as st, Li as t, Yt as tt, Q as u, Vt as ut, fa as v, $e as vt, fi as w, Re as wt, sa as x, We as xt, Ii as y, tt as yt, kr as z };