@voltro/cli 0.51.0 → 0.53.0

package/dist/{webDev-B-ubQEMX.js → webDev-oczpugbx.js}

@@ -2,39 +2,43 @@ import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
 import { n as t } from "./loadEnv-D9nEOClM.js";
 import { t as n } from "./bootRefusal-pgvDxlrU.js";
 import { r } from "./appPort-B_HpJ_ck.js";
-import { A as i, _ as a, g as o, h as s, m as c, o as l } from "./fileConventions-Cof68_BL.js";
-import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-CtL_xTbu.js";
-import { n as g } from "./agentsMd-D6yD7IQv.js";
-import { c as _, p as v, t as y } from "./renderModeScan-D7J1B7Kw.js";
-import { t as b } from "./pageConvention-cEiRxdab.js";
-import { i as x, n as S, r as C, t as w } from "./runtimeRegistry-DMeKfTHP.js";
-import { n as T } from "./logFileSink-B4uP8pvf.js";
-import { basename as E, dirname as D, join as O, relative as k, resolve as A } from "node:path";
-import { existsSync as j, promises as M, readFileSync as N, readdirSync as P, statSync as F, unwatchFile as ee, watchFile as I } from "node:fs";
-import { fileURLToPath as te, pathToFileURL as L } from "node:url";
-import { addSink as R, createLogger as z, printReadyBlock as ne } from "@voltro/logger";
-import { createRequire as B } from "node:module";
-import { currentTraceContext as V, resolveSecret as re } from "@voltro/runtime";
-import { homedir as H } from "node:os";
-import { FRAMEWORK_ENV_CATALOG as U, appEnvEntries as ie, checkEnvNaming as ae, formatEnvErrors as oe, installEnvSnapshot as W, isEnvContract as G, pluginEnvEntries as se, renderDotEnvExample as ce, resolveEnv as le } from "@voltro/env";
-import { __installPublicEnv as ue } from "@voltro/env/public";
-import { mkdir as de, writeFile as fe } from "node:fs/promises";
-import { createHash as pe } from "node:crypto";
-import { spawn as me } from "node:child_process";
-import { createConnection as K } from "node:net";
-import { PassThrough as he } from "node:stream";
+import { _ as i, g as a, h as o, j as s, s as c, v as l } from "./fileConventions-DASGEmj-.js";
+import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-Bd8-9wsi.js";
+import { n as g } from "./agentsMd-0l980yhL.js";
+import { c as _, f as v, p as y, t as b } from "./renderModeScan-CUbOeOAg.js";
+import { a as x, c as S, d as C, f as w, i as T, l as E, o as D, p as O, r as k, s as A, t as j } from "./imagePipeline-CBZmjT4i.js";
+import { d as M, n as N } from "./fontPipeline-Tsh8kZfA.js";
+import { t as P } from "./pageConvention-C938S8oC.js";
+import { i as ee, n as te, r as ne, t as re } from "./runtimeRegistry-DMeKfTHP.js";
+import { n as ie } from "./logFileSink-B4uP8pvf.js";
+import { basename as ae, dirname as F, join as I, relative as L, resolve as R, sep as z } from "node:path";
+import { existsSync as B, promises as V, readFileSync as oe, readdirSync as H, statSync as U, unwatchFile as se, watchFile as ce } from "node:fs";
+import { fileURLToPath as W, pathToFileURL as G } from "node:url";
+import { addSink as le, createLogger as K, printReadyBlock as ue } from "@voltro/logger";
+import { createRequire as q } from "node:module";
+import { classifyRequestOrigin as de, currentTraceContext as fe, resolveOriginGuardConfig as pe, resolveSecret as me } from "@voltro/runtime";
+import { homedir as he } from "node:os";
+import { FRAMEWORK_ENV_CATALOG as ge, appEnvEntries as _e, checkEnvNaming as ve, formatEnvErrors as ye, installEnvSnapshot as be, isEnvContract as xe, pluginEnvEntries as Se, renderDotEnvExample as Ce, resolveEnv as we } from "@voltro/env";
+import { __installPublicEnv as Te } from "@voltro/env/public";
+import { mkdir as Ee, readFile as De, writeFile as J } from "node:fs/promises";
+import { createHash as Oe, createHmac as ke, randomBytes as Ae, timingSafeEqual as je } from "node:crypto";
+import { spawn as Me } from "node:child_process";
+import { createConnection as Ne } from "node:net";
+import { FORM_FLASH_SCRIPT_ID as Pe, FORM_KEY_FIELD as Fe, FORM_PATH_PREFIX as Ie, FORM_PATH_PREFIX as Le, FORM_REDIRECT_FIELD as Re, formDataToInput as ze, validateFields as Y } from "@voltro/client/form";
+import { buildFeed as Be, contentArtifactPath as Ve, getCollection as He, getEntry as Ue, invalidateContentCache as We, registeredCollections as Ge, setContentRoot as Ke, validateReferences as qe } from "@voltro/content";
+import { PassThrough as Je } from "node:stream";
 //#region src/buildToolImport.ts
-var ge = (e) => {
+var Ye = (e) => {
 	let t = e;
 	return t?.code === "ERR_MODULE_NOT_FOUND" || /Cannot find (package|module)/.test(String(t?.message ?? ""));
-}, _e = async (e, t) => {
+}, Xe = async (e, t) => {
 	try {
 		return await t();
 	} catch (t) {
-		throw ge(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
+		throw Ye(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
 	}
-}, q = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", ve = (e, t) => t ? `${e} | undefined` : e, ye = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${ve(t.tsType, t.optional)}`).join("\n"), be = async (e, t) => {
-	let n = ye(t, () => !0), r = `${q}
+}, Ze = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", Qe = (e, t) => t ? `${e} | undefined` : e, $e = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${Qe(t.tsType, t.optional)}`).join("\n"), et = async (e, t) => {
+	let n = $e(t, () => !0), r = `${Ze}
 import '@voltro/env/server'
 
 declare module '@voltro/env/server' {
@@ -43,9 +47,9 @@ ${n.length > 0 ? n : "    // (no variables declared)"}
   }
 }
 `;
-	await fe(O(e, "env.generated.d.ts"), r, "utf8");
-}, xe = async (e, t) => {
-	let n = ye(t, (e) => e === "public"), r = `${q}
+	await J(I(e, "env.generated.d.ts"), r, "utf8");
+}, tt = async (e, t) => {
+	let n = $e(t, (e) => e === "public"), r = `${Ze}
 import '@voltro/env/public'
 
 declare module '@voltro/env/public' {
@@ -53,10 +57,10 @@ declare module '@voltro/env/public' {
 ${n.length > 0 ? n : "    // (no public variables declared)"}
   }
 }
-`, i = O(e, "src");
-	await de(i, { recursive: !0 }), await fe(O(i, "voltro-env.d.ts"), r, "utf8");
-}, Se = async (e, t) => {
-	let n = `${q}
+`, i = I(e, "src");
+	await Ee(i, { recursive: !0 }), await J(I(i, "voltro-env.d.ts"), r, "utf8");
+}, nt = async (e, t) => {
+	let n = `${Ze}
 import { __installPublicEnv } from '@voltro/env/public'
 
 export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
@@ -64,14 +68,14 @@ export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
 // Set the browser/SSR-shared global the \`publicEnv\` accessor reads.
 __installPublicEnv(publicEnvValues)
 `;
-	await de(e, { recursive: !0 }), await fe(O(e, "env.public.ts"), n, "utf8");
-}, Ce = async (e) => {
-	let t = G(e.rawEnv) ? e.rawEnv : void 0, n = await le({
+	await Ee(e, { recursive: !0 }), await J(I(e, "env.public.ts"), n, "utf8");
+}, rt = async (e) => {
+	let t = xe(e.rawEnv) ? e.rawEnv : void 0, n = await we({
 		contract: t,
-		resolveSecret: re
-	}), r = [...n.errors, ...ae(t, e.appType)];
-	if (r.length > 0) throw Error(oe(r));
-	W(n.values), e.appType === "web" && ue(n.publicValues);
+		resolveSecret: me
+	}), r = [...n.errors, ...ve(t, e.appType)];
+	if (r.length > 0) throw Error(ye(r));
+	be(n.values), e.appType === "web" && Te(n.publicValues);
 	let i = t ? Object.keys(t.vars).length : 0;
 	if (i > 0) {
 		let r = Object.keys(n.publicValues).length;
@@ -83,20 +87,20 @@ __installPublicEnv(publicEnvValues)
 			n.length > 0 && e.log.warn(`env: ${n.length} secret var(s) declared on a web app — secrets are reachable only from server-side render code and are NEVER bundled. Prefer declaring secrets on the api.`, { keys: n });
 		}
 	}
-	return e.generateTypes && t && (e.appType === "api" ? await be(e.root, t) : await xe(e.root, t)), {
+	return e.generateTypes && t && (e.appType === "api" ? await et(e.root, t) : await tt(e.root, t)), {
 		resolved: n,
 		contract: t
 	};
-}, we = (e) => {
-	let t = ie(e.contract), n = (e.plugins ?? []).flatMap((e) => se(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : U, i = /* @__PURE__ */ new Set(), a = [];
+}, it = (e) => {
+	let t = _e(e.contract), n = (e.plugins ?? []).flatMap((e) => Se(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : ge, i = /* @__PURE__ */ new Set(), a = [];
 	for (let e of [
 		...t,
 		...n,
 		...r
 	]) i.has(e.key) || (i.add(e.key), a.push(e));
 	return a;
-}, Te = (e, t, n = (e) => process.env[e]) => {
-	let r = we(t).map((e) => {
+}, at = (e, t, n = (e) => process.env[e]) => {
+	let r = it(t).map((e) => {
 		let t = n(e.key) !== void 0;
 		return {
 			...e,
@@ -113,33 +117,33 @@ __installPublicEnv(publicEnvValues)
 			missingRequired: r.filter((e) => e.required && !e.isSet && e.default === void 0).length
 		}
 	};
-}, Ee = (e, t) => {
-	let n = we({
+}, ot = (e, t) => {
+	let n = it({
 		...e,
 		includeFramework: !1
 	});
-	return ce(n, {
+	return Ce(n, {
 		includeFramework: e.includeFramework !== !1,
 		...t ? { header: t } : {}
 	});
-}, J = async (e, t) => {
+}, st = async (e, t) => {
 	let n = e;
 	for (;;) {
-		let e = O(n, "node_modules", t);
+		let e = I(n, "node_modules", t);
 		try {
-			if ((await M.stat(e)).isDirectory()) {
-				let t = await M.realpath(e);
+			if ((await V.stat(e)).isDirectory()) {
+				let t = await V.realpath(e);
 				return t.includes("/node_modules/") ? null : t;
 			}
 		} catch {}
-		let r = D(n);
+		let r = F(n);
 		if (r === n) return null;
 		n = r;
 	}
-}, De = async (e) => {
+}, ct = async (e) => {
 	let t;
 	try {
-		let n = await M.readFile(O(e, "package.json"), "utf8"), r = JSON.parse(n);
+		let n = await V.readFile(I(e, "package.json"), "utf8"), r = JSON.parse(n);
 		t = Object.keys({
 			...r.dependencies,
 			...r.devDependencies
@@ -148,11 +152,11 @@ __installPublicEnv(publicEnvValues)
 		return [];
 	}
 	return (await Promise.all(t.map(async (t) => {
-		let n = await J(e, t);
+		let n = await st(e, t);
 		if (n === null) return null;
-		let r = O(n, "src");
+		let r = I(n, "src");
 		try {
-			if (!(await M.stat(r)).isDirectory()) return null;
+			if (!(await V.stat(r)).isDirectory()) return null;
 		} catch {
 			return null;
 		}
@@ -161,11 +165,11 @@ __installPublicEnv(publicEnvValues)
 			dir: r
 		};
 	}))).filter((e) => e !== null);
-}, Oe = 500, ke = (e, t, n = {}) => {
+}, lt = 500, ut = (e, t, n = {}) => {
 	if (e.length === 0) return () => {};
-	let r = (e) => n.root ? k(n.root, e) : e, i = !1, a = (e) => {
+	let r = (e) => n.root ? L(n.root, e) : e, i = !1, a = (e) => {
 		i || (i = !0, t.warn(`.env changed (${r(e)}) — hard-restarting: process.env is read once at boot, a reload would keep stale values`, { file: r(e) }), Promise.resolve().then(() => n.onBeforeRestart?.()).catch((e) => t.warn(".env restart: onBeforeRestart failed (continuing)", {}, e)).finally(() => {
-			let e = me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+			let e = Me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 				stdio: "inherit",
 				env: process.env,
 				cwd: n.cwd ?? process.cwd()
@@ -179,22 +183,22 @@ __installPublicEnv(publicEnvValues)
 			});
 		}));
 	};
-	for (let t of e) I(t, { interval: Oe }, (e, n) => {
+	for (let t of e) ce(t, { interval: lt }, (e, n) => {
 		e.mtimeMs !== n.mtimeMs && a(t);
 	});
 	return t.info("watching .env files for changes", {
 		files: e.map(r),
-		intervalMs: Oe
+		intervalMs: lt
 	}), () => {
-		for (let t of e) ee(t);
+		for (let t of e) se(t);
 	};
-}, Ae = [{
+}, dt = [{
 	host: "127.0.0.1",
 	family: "IPv4"
 }, {
 	host: "::1",
 	family: "IPv6"
-}], je = (e, t, n) => new Promise((r) => {
+}], ft = (e, t, n) => new Promise((r) => {
 	let i = !1, a = (e) => {
 		if (!i) {
 			i = !0;
@@ -203,15 +207,15 @@ __installPublicEnv(publicEnvValues)
 			} catch {}
 			r(e);
 		}
-	}, o = K({
+	}, o = Ne({
 		host: e,
 		port: t
 	});
 	o.once("connect", () => a(!0)), o.once("error", () => a(!1)), o.setTimeout(n, () => a(!1));
-}), Me = async (e, t = 400) => ({ families: (await Promise.all(Ae.map(async (n) => ({
+}), pt = async (e, t = 400) => ({ families: (await Promise.all(dt.map(async (n) => ({
 	family: n.family,
-	taken: await je(n.host, e, t)
-})))).filter((e) => e.taken).map((e) => e.family) }), Ne = (e, t, n) => [
+	taken: await ft(n.host, e, t)
+})))).filter((e) => e.taken).map((e) => e.family) }), mt = (e, t, n) => [
 	`${t}: port ${e} is already being served (${n.join(" + ")}).`,
 	"",
 	"  Refusing to start. This is NOT a spurious check — a second listener can",
@@ -226,26 +230,26 @@ __installPublicEnv(publicEnvValues)
 	"",
 	"  Then re-run. To use a different port instead, change `port` in",
 	"  app.config.ts."
-].join("\n"), Pe = async (e, t) => {
-	let { families: r } = await Me(e);
-	if (r.length !== 0) throw n(Ne(e, t, r));
-}, Fe = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", Y = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, Ie = (e) => {
+].join("\n"), ht = async (e, t) => {
+	let { families: r } = await pt(e);
+	if (r.length !== 0) throw n(mt(e, t, r));
+}, gt = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", _t = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, vt = (e) => {
 	let t = [], n = e;
 	for (let e = 0; e < 12; e++) {
-		let e = O(n, "node_modules");
-		j(e) && t.push(e);
-		let r = D(n);
+		let e = I(n, "node_modules");
+		B(e) && t.push(e);
+		let r = F(n);
 		if (r === n) break;
 		n = r;
 	}
 	return t;
-}, Le = (e) => {
+}, yt = (e) => {
 	let t = /* @__PURE__ */ new Set([e]), n = e;
 	for (let e = 0; e < 12; e++) {
 		for (let e of ["pnpm-workspace.yaml", "pnpm-workspace.yml"]) {
 			let r;
 			try {
-				r = N(O(n, e), "utf8");
+				r = oe(I(n, e), "utf8");
 			} catch {
 				continue;
 			}
@@ -256,38 +260,38 @@ __installPublicEnv(publicEnvValues)
 				if (i === "" || i.includes("*")) continue;
 				let a;
 				try {
-					a = P(O(n, i), { withFileTypes: !0 });
+					a = H(I(n, i), { withFileTypes: !0 });
 				} catch {
 					continue;
 				}
-				for (let e of a) e.isDirectory() && t.add(O(n, i, e.name));
+				for (let e of a) e.isDirectory() && t.add(I(n, i, e.name));
 			}
 		}
 		for (let e of ["packages", "apps"]) {
 			let r;
 			try {
-				r = P(O(n, e), { withFileTypes: !0 });
+				r = H(I(n, e), { withFileTypes: !0 });
 			} catch {
 				continue;
 			}
-			for (let i of r) i.isDirectory() && t.add(O(n, e, i.name));
+			for (let i of r) i.isDirectory() && t.add(I(n, e, i.name));
 		}
-		let e = D(n);
+		let e = F(n);
 		if (e === n) break;
 		n = e;
 	}
 	return [...t];
-}, Re = (e) => {
+}, bt = (e) => {
 	let t = [];
-	for (let n of Le(e)) {
-		let e = O(n, "node_modules", "@voltro"), r;
+	for (let n of yt(e)) {
+		let e = I(n, "node_modules", "@voltro"), r;
 		try {
-			r = P(e);
+			r = H(e);
 		} catch {
 			continue;
 		}
 		for (let n of r) {
-			let r = O(e, n), i = ze(r);
+			let r = I(e, n), i = xt(r);
 			i !== void 0 && t.push({
 				pkg: `@voltro/${n}`,
 				version: i,
@@ -296,38 +300,38 @@ __installPublicEnv(publicEnvValues)
 		}
 	}
 	return t;
-}, ze = (e) => {
+}, xt = (e) => {
 	try {
-		let t = JSON.parse(N(O(e, "package.json"), "utf8"));
+		let t = JSON.parse(oe(I(e, "package.json"), "utf8"));
 		return typeof t.version == "string" ? t.version : void 0;
 	} catch {
 		return;
 	}
-}, X = (e) => {
+}, St = (e) => {
 	let t = [], n;
 	try {
-		n = P(e);
+		n = H(e);
 	} catch {
 		return t;
 	}
 	for (let r of n) {
-		if (r.startsWith(".") || Y.test(r)) continue;
-		let n = O(e, r);
+		if (r.startsWith(".") || _t.test(r)) continue;
+		let n = I(e, r);
 		if (r.startsWith("@")) {
 			let e;
 			try {
-				e = P(n);
+				e = H(n);
 			} catch {
 				continue;
 			}
 			for (let i of e) t.push({
 				pkg: `${r}/${i}`,
-				dir: O(n, i)
+				dir: I(n, i)
 			});
 			continue;
 		}
 		try {
-			if (!F(n).isDirectory()) continue;
+			if (!U(n).isDirectory()) continue;
 		} catch {
 			continue;
 		}
@@ -337,25 +341,25 @@ __installPublicEnv(publicEnvValues)
 		});
 	}
 	return t;
-}, Be = (e) => {
+}, Ct = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (e, n, r) => {
-		if (!Fe(e)) return;
+		if (!gt(e)) return;
 		let i = t.get(e) ?? /* @__PURE__ */ new Map();
 		i.has(n) || i.set(n, r), t.set(e, i);
 	};
-	for (let t of Ie(e)) for (let { pkg: e, dir: r } of X(t)) {
-		let t = ze(r);
+	for (let t of vt(e)) for (let { pkg: e, dir: r } of St(t)) {
+		let t = xt(r);
 		t !== void 0 && n(e, t, r);
 	}
-	for (let { pkg: t, version: r, dir: i } of Re(e)) n(t, r, i);
+	for (let { pkg: t, version: r, dir: i } of bt(e)) n(t, r, i);
 	let r = [];
 	for (let [n, i] of t) i.size < 2 || r.push({
 		pkg: n,
 		versions: [...i.keys()].sort(),
-		paths: [...i.values()].map((t) => k(e, t)).sort()
+		paths: [...i.values()].map((t) => L(e, t)).sort()
 	});
 	return r.sort((e, t) => e.pkg.localeCompare(t.pkg));
-}, Ve = (e) => {
+}, wt = (e) => {
 	if (e.length !== 0) return [
 		`•  ${e.length} package(s) resolved at more than one version:`,
 		...e.flatMap((e) => [`     ${e.pkg} — ${e.versions.join(", ")}`, ...e.paths.map((e) => `       ${e}`)]),
@@ -373,11 +377,11 @@ __installPublicEnv(publicEnvValues)
 		"   instrument), then reinstall. Do not silence the generated file — it is where",
 		"   a genuine mistake in your own descriptors surfaces."
 	].join("\n");
-}, He = (e) => {
+}, Tt = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	for (let n of Ie(e)) for (let { pkg: e, dir: r } of X(n)) {
+	for (let n of vt(e)) for (let { pkg: e, dir: r } of St(n)) {
 		if (!e.startsWith("@voltro/")) continue;
-		let n = ze(r);
+		let n = xt(r);
 		n !== void 0 && !t.has(e) && t.set(e, n);
 	}
 	if (t.size < 2) return;
@@ -392,7 +396,7 @@ __installPublicEnv(publicEnvValues)
 			version: t
 		})).sort((e, t) => e.pkg.localeCompare(t.pkg))
 	};
-}, Ue = (e) => {
+}, Et = (e) => {
 	if (e !== void 0) return [
 		`•  ${e.behind.length} @voltro/* package(s) are not on ${e.majority}:`,
 		...e.behind.map((e) => `     ${e.pkg}  ${e.version}`),
@@ -410,59 +414,59 @@ __installPublicEnv(publicEnvValues)
 		"   its pattern: the one that produced this report was `@voltro/[a-z-]+`,",
 		"   which silently skips `@voltro/i18n` because the name contains digits."
 	].join("\n");
-}, We = (e, t) => {
-	let n = He(e);
+}, Dt = (e, t) => {
+	let n = Tt(e);
 	n !== void 0 && t.warn?.(`@voltro/* version skew: ${n.behind.length} package(s) are not on ${n.majority}`, {
 		majority: n.majority,
 		behind: n.behind.map((e) => `${e.pkg}@${e.version}`),
 		fix: "the framework ships in lockstep; bump the listed packages and reinstall"
 	});
-}, Ge = z({ scope: "vite" }), Ke = /\x1b\[[0-9;]*m/g, qe = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, Je = (e) => e.replace(Ke, "").replace(qe, "").trim(), Ye = /proxy error/i, Xe = [
+}, Ot = K({ scope: "vite" }), kt = /\x1b\[[0-9;]*m/g, At = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, jt = (e) => e.replace(kt, "").replace(At, "").trim(), Mt = /proxy error/i, Nt = [
 	"ECONNREFUSED",
 	"ECONNRESET",
 	"ECONNABORTED",
 	"EPIPE",
 	"ETIMEDOUT"
-], Ze = (e, t = 0) => {
+], Pt = (e, t = 0) => {
 	if (e == null || t > 5) return !1;
 	let n = e;
-	return typeof n.code == "string" && Xe.includes(n.code) || typeof n.message == "string" && Xe.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => Ze(e, t + 1)) ? !0 : Ze(n.cause, t + 1);
-}, Qe = 4e3, $e = () => {
+	return typeof n.code == "string" && Nt.includes(n.code) || typeof n.message == "string" && Nt.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => Pt(e, t + 1)) ? !0 : Pt(n.cause, t + 1);
+}, Ft = 4e3, It = () => {
 	let e = /* @__PURE__ */ new Set(), t = 0, n = {
 		hasWarned: !1,
 		info: (e) => {
-			let t = Je(e);
-			t.length !== 0 && Ge.info(t);
+			let t = jt(e);
+			t.length !== 0 && Ot.info(t);
 		},
 		warn: (e) => {
 			n.hasWarned = !0;
-			let t = Je(e);
-			t.length !== 0 && Ge.warn(t);
+			let t = jt(e);
+			t.length !== 0 && Ot.warn(t);
 		},
 		warnOnce: (t) => {
-			let r = Je(t);
-			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && Ge.warn(r));
+			let r = jt(t);
+			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && Ot.warn(r));
 		},
 		error: (e, n) => {
-			let r = Je(e), i = n?.error;
+			let r = jt(e), i = n?.error;
 			if (r.length !== 0) {
-				if (Ye.test(r) && Ze(i)) {
+				if (Mt.test(r) && Pt(i)) {
 					let e = Date.now();
-					e - t > Qe && (t = e, Ge.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
+					e - t > Ft && (t = e, Ot.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
 					return;
 				}
-				Ge.error(r, {}, i);
+				Ot.error(r, {}, i);
 			}
 		},
 		clearScreen: () => {},
 		hasErrorLogged: (e) => !1
 	};
 	return n;
-}, et = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), tt = (e) => {
+}, Lt = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), Rt = (e) => {
 	try {
-		let t = O(e, "tsconfig.json");
-		if (!j(t)) return [];
-		let n = JSON.parse(et(N(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = A(e, i), o = [];
+		let t = I(e, "tsconfig.json");
+		if (!B(t)) return [];
+		let n = JSON.parse(Lt(oe(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = R(e, i), o = [];
 		for (let [e, t] of Object.entries(r)) {
 			let n = t[0];
 			if (!n) continue;
@@ -472,11 +476,11 @@ __installPublicEnv(publicEnvValues)
 					let t = e.slice(0, -2).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 					o.push({
 						find: RegExp(`^${t}/(.*)$`),
-						replacement: `${O(a, n.slice(0, -2))}/$1`
+						replacement: `${I(a, n.slice(0, -2))}/$1`
 					});
 				} else o.push({
 					find: e,
-					replacement: O(a, n)
+					replacement: I(a, n)
 				});
 			}
 		}
@@ -484,12 +488,12 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return [];
 	}
-}, nt = (e = process.env) => {
+}, zt = (e = process.env) => {
 	let t = e.VOLTRO_DEV_SSR_COMPILE_CONCURRENCY;
 	if (t === void 0 || t.trim() === "") return 4;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 1 ? Math.floor(n) : 4;
-}, rt = (e) => {
+}, Bt = (e) => {
 	let t = Math.max(1, Math.floor(e)), n = 0, r = [], i = () => n < t ? (n++, Promise.resolve()) : new Promise((e) => r.push(e)), a = () => {
 		let e = r.shift();
 		e ? e() : n--;
@@ -507,8 +511,8 @@ __installPublicEnv(publicEnvValues)
 			return n;
 		}
 	};
-}, it = (e) => {
-	let t = rt(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
+}, Vt = (e) => {
+	let t = Bt(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
 	return {
 		load: (i, a) => {
 			if (r.has(i)) return a();
@@ -538,7 +542,727 @@ __installPublicEnv(publicEnvValues)
 			return r.size;
 		}
 	};
-}, at = (e) => {
+}, Ht = 1048576, Ut = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;"), Wt = (e) => JSON.stringify(e).replace(/</g, "\\u003c"), Gt = (e, t) => {
+	let n = `<script type="application/json" id="${Pe}">${Wt(t)}<\/script>`;
+	return e.includes("</body>") ? e.replace("</body>", `${n}</body>`) : e + n;
+}, Kt = (e) => {
+	let t = Object.entries(e.errors).map(([e, t]) => `<li><strong>${Ut(e)}</strong>: ${Ut(t)}</li>`).join("");
+	return `<!doctype html><html><head><meta charset="utf-8"><title>Form submission failed</title></head><body><h1>Submission failed</h1>${e.formError === void 0 ? "" : `<p>${Ut(e.formError)}</p>`}<ul>${t}</ul><p><a href="javascript:history.back()">Go back</a> to correct the form.</p></body></html>`;
+}, X = (e, t, n, r = "text/plain; charset=utf-8") => {
+	e.statusCode = t, e.setHeader("content-type", r), e.end(n);
+}, qt = (e, t, n) => {
+	e.setHeader("cache-control", "no-store"), X(e, t, n, "text/html; charset=utf-8");
+}, Jt = (e) => {
+	if (e !== void 0 && e !== "" && !(!e.startsWith("/") || e.startsWith("//") || e.includes("\\"))) return e;
+}, Yt = (e) => {
+	let t = e.referer;
+	if (t !== void 0) try {
+		let e = new URL(t);
+		return e.pathname + e.search;
+	} catch {
+		return;
+	}
+}, Xt = (e) => new Promise((t) => {
+	let n = [], r = 0;
+	e.on("data", (i) => {
+		if (r += i.length, r > Ht) {
+			e.removeAllListeners("data"), e.removeAllListeners("end"), t({ ok: !1 });
+			return;
+		}
+		n.push(i);
+	}), e.on("end", () => t({
+		ok: !0,
+		body: Buffer.concat(n).toString("utf8")
+	})), e.on("error", () => t({ ok: !1 }));
+}), Zt = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e.headers)) typeof r == "string" ? t[n.toLowerCase()] = r : Array.isArray(r) && (t[n.toLowerCase()] = r.join(", "));
+	return t;
+}, Qt = (e) => {
+	let t = e.originGuard ?? pe(void 0, process.env);
+	return async (n, r, i) => {
+		let a = (n.url ?? "/").split("?")[0];
+		if (!a.startsWith(Ie)) return !1;
+		if (n.method !== "POST") return r.setHeader("allow", "POST"), X(r, 405, "method not allowed — a /form/* endpoint accepts native form POSTs only"), !0;
+		let o = Zt(n);
+		if (!de({
+			headers: o,
+			config: t
+		}).allowed) return X(r, 403, "origin not allowed"), !0;
+		if ((o["content-type"] ?? "").includes("multipart/form-data")) return X(r, 415, "file uploads need JavaScript — the no-JS form path accepts application/x-www-form-urlencoded only"), !0;
+		let s = await Xt(n);
+		if (!s.ok) return X(r, 413, `form body exceeds ${Ht} bytes`), !0;
+		let c = new URLSearchParams(s.body), l = decodeURIComponent(a.slice(Ie.length)), u = (await e.loadDescriptors())?.[l];
+		if (u === void 0 || u.kind !== "mutation") return X(r, 404, `no mutation '${l}' — /form/* serves declared mutations only`), !0;
+		let d = c.get(Fe) ?? l, f = Jt(c.get(Re) ?? void 0), p = [];
+		for (let [e, t] of c) e !== Fe && e !== Re && p.push([e, t]);
+		let m = u.input;
+		if (m === void 0) return X(r, 404, `mutation '${l}' carries no input schema — the no-JS path cannot map its POST`), !0;
+		let h = ze(m, p), g = Y(m, h), _ = async (t) => {
+			let n = Yt(o);
+			if (n !== void 0) {
+				if (i !== void 0) {
+					i(n, t);
+					return;
+				}
+				let a = await e.renderErrorPage({
+					path: n,
+					headers: o,
+					flash: t
+				});
+				if (a !== void 0) {
+					qt(r, 422, Gt(a, t));
+					return;
+				}
+			}
+			qt(r, 422, Kt(t));
+		};
+		if (!g.valid) return await _({
+			formKey: d,
+			values: h,
+			errors: g.errors
+		}), !0;
+		let v = e.rpcQuery(o.cookie, o);
+		if (v === void 0) return X(r, 503, `api '${e.apiName ?? "?"}' has no server-side origin — the no-JS form path forwards over POST /rpc; set VOLTRO_API_ORIGIN (or apis.<name>.serverUrl) as for SSR loaders`), !0;
+		try {
+			await v(l, h);
+		} catch (e) {
+			let t = e.voltroError;
+			return await _({
+				formKey: d,
+				values: h,
+				errors: {},
+				formError: t?.message ?? t?._tag ?? "The server rejected this submission. Please try again."
+			}), !0;
+		}
+		let y = f ?? Yt(o) ?? "/";
+		return r.statusCode = 303, r.setHeader("location", y), r.end(), !0;
+	};
+}, $t = /^\s*(?:import|export)\s[^;'"]*?['"]([^'"]+)['"]/gm, en = [
+	"",
+	".tsx",
+	".ts",
+	".jsx",
+	".js",
+	"/index.tsx",
+	"/index.ts"
+], tn = (e) => /\.island\.(tsx|ts|jsx|js)$/.test(e), nn = ["@voltro/web", "@voltro/i18n"], rn = ["@voltro/client", "@voltro/ui"], an = (e, t) => e === t || e.startsWith(`${t}/`), on = (e) => e !== "@voltro/web/islands" && nn.some((t) => an(e, t)), sn = (e) => {
+	let t = [];
+	for (let n of e.matchAll($t)) t.push(n[1]);
+	return t;
+}, cn = async (e, t) => {
+	let n = R(F(e), t);
+	for (let e of en) {
+		let t = n + e;
+		try {
+			if ((await V.stat(t)).isFile()) return t;
+		} catch {}
+	}
+}, ln = async (e, t) => {
+	let n = I(e, "src", "pages", t), r = /* @__PURE__ */ new Set(), i = [], a = !1, o = [], s = async (t, n) => {
+		let c = `${t}\u0000${n ? "i" : "p"}`;
+		if (r.has(c)) return;
+		r.add(c);
+		let l;
+		try {
+			l = await V.readFile(t, "utf8");
+		} catch {
+			return;
+		}
+		for (let r of sn(l)) {
+			if (n) {
+				if (on(r)) {
+					o.push([L(e, t).split(z).join("/"), r]);
+					continue;
+				}
+				if (rn.some((e) => an(r, e))) {
+					a = !0;
+					continue;
+				}
+			}
+			if (!r.startsWith(".")) continue;
+			let c = await cn(t, r);
+			if (c === void 0) continue;
+			let l = n || tn(c);
+			if (!n && tn(c)) {
+				let t = L(e, c).split(z).join("/");
+				i.includes(t) || i.push(t);
+			}
+			await s(c, l);
+		}
+	};
+	return await s(n, tn(n)), tn(n) && i.unshift(L(e, n).split(z).join("/")), {
+		islandFiles: i,
+		usesClient: a,
+		violations: o
+	};
+}, un = (e) => {
+	let t = /^export const interactive\s*=\s*['"](full|islands|none)['"]/m.exec(e);
+	return t === null ? void 0 : t[1];
+}, dn = (e) => {
+	let t = e.indexOf("</head>"), n = t === -1 ? e : e.slice(0, t), r = [];
+	for (let e of n.matchAll(/<script\b([^>]*)>([\s\S]*?)<\/script>/gi)) {
+		let t = e[1] ?? "";
+		/\bsrc\s*=/.test(t) || /type\s*=\s*["']module["']/.test(t) || r.push(e[0]);
+	}
+	return r.map((e) => `    ${e}`).join("\n");
+}, fn = (e) => [...e.matchAll(/<link\b[^>]*\brel\s*=\s*["']stylesheet["'][^>]*>/gi)].map((e) => e[0]), pn = (e, t) => {
+	let n = fn(t).filter((t) => !e.includes(t));
+	if (n.length === 0) return e;
+	let r = n.map((e) => `    ${e}`).join("\n");
+	return e.includes("</head>") ? e.replace("</head>", `${r}\n  </head>`) : e + r;
+}, mn = (e) => {
+	let t = e.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+	return t === "" ? "root" : t;
+}, hn = class extends Error {
+	constructor(e, t) {
+		let n = t.map(([e, t]) => `  ${e} imports '${t}'`).join("\n");
+		super(`interactive: 'islands' page '${e}' has island code importing the framework barrel:\n${n}\n\nAn island hydrates in its own provider-less root — router hooks, <Link> and useT() throw there, and the '@voltro/web' barrel additionally pulls the Effect runtime into the slim islands entry (the bytes this mode exists to shed).\n\nFix: import island()/hydration APIs from '@voltro/web/islands' (the react-only subpath), move router/i18n-dependent UI out of the island, and keep island files to react + relative browser-safe imports. '@voltro/client' IS allowed — a useSubscription island gets the client boot automatically.`), this.name = "IslandsEntryViolation";
+	}
+}, gn = async (e) => {
+	let t = I(e.webRoot, ".framework", "island-shells"), n = [];
+	if (e.pages.length === 0) return n;
+	await V.mkdir(t, { recursive: !0 });
+	for (let r of e.pages) {
+		let i = await ln(e.webRoot, r.file);
+		if (i.violations.length > 0) throw new hn(r.pattern, i.violations);
+		let a = mn(r.pattern), o = `island-shells/${a}.tsx`, s = `island-shells/${a}.html`, c = i.islandFiles.map((e) => `import '../../${e}'`).join("\n"), l = i.usesClient ? [
+			`// GENERATED by voltro — the islands entry for '${r.pattern}' (client boot:`,
+			"// an island here imports @voltro/client, so the roots get a live runtime).",
+			...e.apiImports ?? [],
+			"import { VoltroRuntimeProvider } from '@voltro/web/runtime'",
+			"import { hydrateIslandsOnPage } from '@voltro/web/islands'",
+			c,
+			"hydrateIslandsOnPage({",
+			"  wrap: (children) => (",
+			`    <VoltroRuntimeProvider apis={${e.apiEntriesLiteral ?? "{}"}}>{children}</VoltroRuntimeProvider>`,
+			"  ),",
+			"})",
+			""
+		].join("\n") : [
+			`// GENERATED by voltro — the slim islands entry for '${r.pattern}'.`,
+			"// react + the island runtime + this page's islands; no router, no",
+			"// Effect runtime, no subscription cache.",
+			"import { hydrateIslandsOnPage } from '@voltro/web/islands'",
+			c,
+			"hydrateIslandsOnPage()",
+			""
+		].join("\n"), u = [
+			"<!doctype html>",
+			"<html lang=\"en\">",
+			"  <head>",
+			"    <meta charset=\"UTF-8\" />",
+			"    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />",
+			...e.headSnippets !== void 0 && e.headSnippets !== "" ? [e.headSnippets] : [],
+			"  </head>",
+			"  <body>",
+			"    <div id=\"root\"></div>",
+			`    <script type="module" src="/island-shells/${a}.tsx"><\/script>`,
+			"  </body>",
+			"</html>",
+			""
+		].join("\n");
+		await V.writeFile(I(t, `${a}.tsx`), l), await V.writeFile(I(t, `${a}.html`), u), n.push({
+			pattern: r.pattern,
+			name: a,
+			htmlFile: s,
+			entryFile: o,
+			usesClient: i.usesClient
+		});
+	}
+	return n;
+}, _n = K({ scope: "voltro:images" }), vn = /[?&]image(?:&|$)/, yn = /\.(png|jpe?g|webp|avif)(\?|$)/i, bn = {
+	avif: "image/avif",
+	webp: "image/webp",
+	jpeg: "image/jpeg",
+	png: "image/png"
+}, xn = (e) => Oe("sha256").update(e).digest("hex").slice(0, 12), Sn = (e) => `export default ${JSON.stringify(e)}\n`, Cn = (e) => {
+	let t = e.config ?? j, n = x(e.root), r = /* @__PURE__ */ new Map(), i = "/", a = !1;
+	return {
+		name: "voltro:image-assets",
+		enforce: "pre",
+		configResolved(e) {
+			i = e.base, a = e.command === "build";
+		},
+		async load(o) {
+			if (!vn.test(o) || !yn.test(o)) return null;
+			let s = o.split("?")[0], c = s, l = await E(c);
+			if (l === null && s.startsWith("/") && (c = I(e.root, s.slice(1)), l = await E(c)), l === null && this.error(`?image import points at a file that does not exist or is unreadable: ${s}`), await S() === null) {
+				w(_n);
+				let t;
+				if (a || e.urlMode === "build-urls") {
+					let e = `assets/${xn(c)}${c.slice(c.lastIndexOf("."))}`;
+					a && this.emitFile({
+						type: "asset",
+						fileName: e,
+						source: Buffer.from(l)
+					}), t = `${i}${e}`;
+				} else t = `/@fs${c}`;
+				return Sn({
+					src: t,
+					width: 0,
+					height: 0,
+					blurDataURL: "",
+					srcSet: "",
+					sources: []
+				});
+			}
+			if (a || e.urlMode === "build-urls") {
+				let e = await T({
+					sourceBytes: l,
+					cacheDir: n,
+					config: t
+				});
+				e === null && this.error(`?image import is not a raster image sharp can read: ${c}`);
+				let r = /* @__PURE__ */ new Map();
+				for (let t of e.variants) {
+					let e = t.format === "jpeg" ? "jpg" : t.format, n = `assets/${t.hash}.${e}`;
+					a && this.emitFile({
+						type: "asset",
+						fileName: n,
+						source: Buffer.from(t.bytes)
+					}), r.set(`${t.format}:${t.width}`, `${i}${n}`);
+				}
+				let o = (t) => e.widths.map((e) => `${r.get(`${t}:${e}`)} ${e}w`).join(", ");
+				return Sn({
+					src: r.get(`${e.fallbackFormat}:${e.widths[e.widths.length - 1]}`),
+					width: e.width,
+					height: e.height,
+					blurDataURL: e.blurDataURL,
+					srcSet: o(e.fallbackFormat),
+					sources: t.formats.map((e) => ({
+						type: bn[e],
+						srcSet: o(e)
+					}))
+				});
+			}
+			let u = await A(l);
+			u === null && this.error(`?image import is not a raster image sharp can read: ${c}`);
+			let d = Oe("sha256").update(l).digest("hex").slice(0, 16), f = await k(l, d, n), p = xn(c);
+			r.set(p, c);
+			let m = O(u.width), h = u.format === "png" ? "png" : "jpeg", g = (e, t) => `/_voltro/image/${p}?w=${e}&f=${t}`, _ = (e) => m.map((t) => `${g(t, e)} ${t}w`).join(", ");
+			return Sn({
+				src: g(m[m.length - 1], h),
+				width: u.width,
+				height: u.height,
+				blurDataURL: f ?? "",
+				srcSet: _(h),
+				sources: t.formats.map((e) => ({
+					type: bn[e],
+					srcSet: _(e)
+				}))
+			});
+		},
+		configureServer(e) {
+			e.middlewares.use("/_voltro/image", (e, i, a) => {
+				(async () => {
+					let a = new URL(e.url ?? "/", "http://localhost"), o = a.pathname.replace(/^\//, ""), s = r.get(o);
+					if (s === void 0) {
+						i.statusCode = 404, i.end("unknown image asset");
+						return;
+					}
+					let c = Number(a.searchParams.get("w")), l = a.searchParams.get("f") ?? "";
+					if (!Number.isInteger(c) || c <= 0 || c > 8192 || bn[l] === void 0) {
+						i.statusCode = 400, i.end("bad transform params");
+						return;
+					}
+					let u = await E(s);
+					if (u === null) {
+						i.statusCode = 404, i.end("source asset gone");
+						return;
+					}
+					let d = Oe("sha256").update(u).digest("hex").slice(0, 16), f = await C({
+						sourceBytes: u,
+						sourceHash: d,
+						width: c,
+						format: l,
+						quality: t.quality,
+						cacheDir: n
+					});
+					if (f === null) {
+						w(_n), i.statusCode = 200, i.setHeader("content-type", bn[l] ?? "application/octet-stream"), i.end(Buffer.from(u));
+						return;
+					}
+					i.statusCode = 200, i.setHeader("content-type", bn[l]), i.setHeader("cache-control", "max-age=31536000, immutable"), i.end(Buffer.from(f));
+				})().catch((e) => {
+					_n.warn("image transform failed", {}, e), a();
+				});
+			});
+		}
+	};
+}, wn = K({ scope: "voltro:fonts" }), Tn = /* @__PURE__ */ new Map(), En = async (e, t) => {
+	if (t === void 0 || t.length === 0) return null;
+	let n = Tn.get(e);
+	return n === void 0 && (n = N(t, async (t) => new Uint8Array(await De(I(e, t)))).then((e) => {
+		for (let t of e.warnings) M(t, wn);
+		return e;
+	}), Tn.set(e, n)), n;
+}, Dn = {
+	woff2: "font/woff2",
+	woff: "font/woff",
+	otf: "font/otf",
+	ttf: "font/ttf"
+}, On = (e, t) => ({
+	name: "voltro:font-assets",
+	configureServer(n) {
+		n.middlewares.use("/assets/fonts", (n, r, i) => {
+			(async () => {
+				let a = await En(e, t), o = (n.url ?? "/").replace(/^\//, "").split("?")[0], s = a?.files.find((e) => e.fileName === `assets/fonts/${o}`);
+				if (s === void 0) {
+					i();
+					return;
+				}
+				let c = o.slice(o.lastIndexOf(".") + 1);
+				r.statusCode = 200, r.setHeader("content-type", Dn[c] ?? "application/octet-stream"), r.setHeader("cache-control", "max-age=31536000, immutable"), r.end(Buffer.from(s.bytes));
+			})().catch(() => i());
+		});
+	}
+}), kn = K({ scope: "voltro:content" }), An = (e) => {
+	Ke(e);
+}, jn = async (e, t) => {
+	let n = await He(e.collection, e.locale === void 0 ? {} : { locale: e.locale });
+	return Be(n, {
+		title: e.title,
+		siteUrl: t,
+		...e.description === void 0 ? {} : { description: e.description },
+		feedPath: e.path,
+		item: e.item
+	});
+}, Mn = async (e, t, n) => {
+	if (t.length !== 0) {
+		if (n === void 0 || n === "") throw Error("config.feeds needs seo.siteUrl — RSS links must be absolute. Set seo: { siteUrl } in app.config.ts.");
+		for (let r of t) {
+			let t = await jn(r, n), i = I(e, r.path.replace(/^\/+/, ""));
+			await Ee(F(i), { recursive: !0 }), await J(i, t), kn.info(`feed: ${r.path} (${r.collection})`);
+		}
+	}
+}, Nn = async (e, t) => {
+	let n = await He(e, t === void 0 ? {} : { locale: t });
+	return JSON.stringify(n.map(({ html: e, body: t, headings: n, ...r }) => r));
+}, Pn = async (e, t, n) => {
+	let r = await Ue(e, t, n === void 0 ? {} : { locale: n });
+	if (r === null) return null;
+	let { body: i, ...a } = r;
+	return JSON.stringify(a);
+}, Fn = async (e) => {
+	await qe();
+	let t = 0;
+	for (let n of Ge()) {
+		let r = n.i18n?.locales ?? [void 0];
+		for (let i of r) {
+			let r = await Nn(n.name, i), a = I(e, Ve(n.name, i));
+			await Ee(F(a), { recursive: !0 }), await J(a, r), t += 1;
+			let o = JSON.parse(r);
+			for (let { slug: r } of o) {
+				let a = await Pn(n.name, r, i);
+				if (a === null) continue;
+				let o = I(e, Ve(n.name, i, r));
+				await Ee(F(o), { recursive: !0 }), await J(o, a), t += 1;
+			}
+		}
+	}
+	return t > 0 && kn.info(`content: ${t} artifact(s) into dist/assets/content`), t;
+}, In = async (e) => {
+	let t = /^\/assets\/content\/([A-Za-z0-9_-]+)(?:\.([A-Za-z0-9-]+))?\/(.+)$/.exec(e);
+	if (t === null) return null;
+	let [, n, r, i] = t;
+	if (Ge().every((e) => e.name !== n)) return null;
+	try {
+		if (i === "index.json") return {
+			status: 200,
+			body: await Nn(n, r)
+		};
+		let e = await Pn(n, i.replace(/\.json$/, ""), r);
+		return e === null ? {
+			status: 404,
+			body: "\"not found\""
+		} : {
+			status: 200,
+			body: e
+		};
+	} catch (t) {
+		return kn.warn("content request failed", { pathname: e }, t), {
+			status: 500,
+			body: "\"content error\""
+		};
+	}
+}, Ln = async (e) => {
+	let { readdir: t } = await import("node:fs/promises"), n = [], r;
+	try {
+		r = await t(e, { withFileTypes: !0 });
+	} catch {
+		return n;
+	}
+	for (let t of r) {
+		if (t.name.startsWith(".") || t.name === "node_modules") continue;
+		let r = I(e, t.name);
+		t.isDirectory() ? n.push(...await Ln(r)) : /\.collection\.tsx?$/.test(t.name) && n.push(r);
+	}
+	return n;
+}, Rn = (e, t = [], n) => ({
+	name: "voltro:content",
+	configureServer(r) {
+		let i = null, a = () => (i ??= (async () => {
+			for (let t of await Ln(I(e, "src"))) try {
+				await r.ssrLoadModule(t);
+			} catch (e) {
+				kn.warn("failed to load collection module", { file: t }, e);
+			}
+		})(), i);
+		r.watcher.add(I(e, "content")), r.watcher.on("all", (t, n) => {
+			typeof n == "string" && n.startsWith(I(e, "content")) && (We(), r.ws.send({ type: "full-reload" }));
+		});
+		for (let e of t) r.middlewares.use(e.path, (t, r) => {
+			(async () => {
+				await a();
+				let t = await jn(e, n ?? "http://localhost");
+				r.setHeader("content-type", "application/rss+xml"), r.end(t);
+			})().catch((t) => {
+				kn.warn("feed render failed", { path: e.path }, t), r.statusCode = 500, r.end("feed error");
+			});
+		});
+		r.middlewares.use("/assets/content", (e, t, n) => {
+			(async () => {
+				await a();
+				let r = await In(`/assets/content${(e.url ?? "/").split("?")[0]}`);
+				if (r === null) {
+					n();
+					return;
+				}
+				t.statusCode = r.status, t.setHeader("content-type", "application/json"), t.end(r.body);
+			})().catch(() => n());
+		});
+	}
+}), zn, Bn = async () => {
+	if (zn !== void 0) return zn;
+	try {
+		let e = await import("satori");
+		zn = e.default ?? e;
+	} catch {
+		zn = null;
+	}
+	return zn;
+}, Vn, Hn = async () => {
+	if (Vn !== void 0) return Vn;
+	try {
+		Vn = await import("@resvg/resvg-js");
+	} catch {
+		Vn = null;
+	}
+	return Vn;
+}, Un = async (e, t) => {
+	if (t === void 0 || t.length === 0) throw Error("ogImage needs a declared font: satori cannot render text without a font buffer, and there is no bundled default (that would ship a license artifact most projects replace). Declare one in app.config.ts — fonts: [{ family: 'Inter', src: [{ path: 'src/fonts/Inter.woff2' }] }] — see the Fonts docs.");
+	let n = [];
+	for (let r of t) for (let t of r.src) {
+		let i = await De(I(e, t.path)), a = typeof t.weight == "number" ? t.weight : void 0;
+		n.push({
+			name: r.family,
+			data: i.buffer.slice(i.byteOffset, i.byteOffset + i.byteLength),
+			...a === void 0 ? {} : { weight: a },
+			...t.style === void 0 ? {} : { style: t.style }
+		});
+	}
+	return n;
+}, Wn = async (e) => {
+	let t = await Bn(), n = await Hn();
+	if (t === null || n === null) {
+		let e = [t === null ? "satori" : null, n === null ? "@resvg/resvg-js" : null].filter((e) => e !== null).join(" + ");
+		throw Error(`ogImage cannot render: ${e} is not loadable. Both ship as optional dependencies of @voltro/cli — if your installer omitted optional dependencies, run \`pnpm add -D satori @resvg/resvg-js\` in this app.`);
+	}
+	let r = await t(e.element, {
+		width: e.width ?? 1200,
+		height: e.height ?? 630,
+		fonts: e.fonts.map((e) => ({
+			...e,
+			data: e.data
+		}))
+	});
+	return {
+		svg: r,
+		png: new Uint8Array(new n.Resvg(r).render().asPng())
+	};
+}, Gn = (e, t, n, r) => `${e}\u0000${t}\u0000${n}\u0000${r}`, Kn = (e, t) => ke("sha256", e).update(t).digest("hex"), qn = () => {
+	let e = process.env.VOLTRO_OG_SECRET;
+	return e !== void 0 && e !== "" ? {
+		secret: e,
+		fromEnv: !0
+	} : {
+		secret: Ae(32).toString("hex"),
+		fromEnv: !1
+	};
+}, Jn = "/_voltro/og", Yn = (e) => {
+	let t = e.ttlMs ?? 36e5, n, r = () => (n ??= Un(e.root, e.fonts), n);
+	return {
+		signOgUrl: ({ pattern: t, params: n, tenant: r, locale: i }) => {
+			let a = JSON.stringify(n), o = r ?? "", s = i ?? "", c = Kn(e.secret, Gn(t, a, o, s));
+			return `${Jn}?${new URLSearchParams({
+				route: t,
+				p: a,
+				...o === "" ? {} : { t: o },
+				...s === "" ? {} : { l: s },
+				sig: c
+			}).toString()}`;
+		},
+		handle: async (n) => {
+			if (n.pathname !== "/_voltro/og") return null;
+			let i = n.searchParams.get("route") ?? "", a = n.searchParams.get("p") ?? "{}", o = n.searchParams.get("t") ?? "", s = n.searchParams.get("l") ?? "", c = n.searchParams.get("sig") ?? "", l = Kn(e.secret, Gn(i, a, o, s)), u = Buffer.from(c, "utf8"), d = Buffer.from(l, "utf8");
+			if (u.length !== d.length || !je(u, d)) return {
+				status: 403,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("bad signature")
+			};
+			if (!e.isOgSsrRoute(i)) return {
+				status: 404,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("no such og route")
+			};
+			let f = `og:${i}|p=${a}${o === "" ? "" : `|tenant=${o}`}${s === "" ? "" : `|lang=${s}`}`, p = e.cache.get(f), m = Date.now();
+			if (p !== void 0 && p.expiresAt > m) return {
+				status: 200,
+				headers: {
+					"content-type": "image/png",
+					"x-voltro-og-cache": "HIT"
+				},
+				body: new Uint8Array(Buffer.from(p.html, "base64"))
+			};
+			let h = (await e.getPageModule(i))?.ogImage;
+			if (typeof h != "function") return {
+				status: 404,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("page has no ogImage")
+			};
+			let { png: g } = await Wn({
+				element: await h({
+					params: JSON.parse(a),
+					loaderData: void 0,
+					...s === "" ? { locale: "en" } : { locale: s },
+					...o === "" ? {} : { tenant: o }
+				}),
+				fonts: await r()
+			}), _ = e.cache.generation(f);
+			return e.cache.set(f, {
+				html: Buffer.from(g).toString("base64"),
+				renderedAt: m,
+				expiresAt: m + t,
+				servableUntil: m + t,
+				revalidateMs: t,
+				staleWhileRevalidateMs: 0
+			}, { ifGeneration: _ }), {
+				status: 200,
+				headers: {
+					"content-type": "image/png",
+					"x-voltro-og-cache": "MISS"
+				},
+				body: g
+			};
+		}
+	};
+}, Xn = class extends Error {
+	_voltroDeferral = !0;
+	constructor(e) {
+		super(e), this.name = "DeferralNotSupportedError";
+	}
+}, Zn = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, Qn = (e) => {
+	if (!(e instanceof Error)) return;
+	let t = e._voltroControl;
+	if (t === "redirect") {
+		let { location: t, status: n } = e;
+		return typeof t == "string" ? {
+			status: n === 307 || n === 308 ? n : 303,
+			headers: {
+				location: t,
+				"x-voltro-rendered-by": "loader-redirect"
+			},
+			body: ""
+		} : void 0;
+	}
+	if (t === "not-found") return {
+		status: 404,
+		headers: {
+			"content-type": "text/plain; charset=utf-8",
+			"x-voltro-rendered-by": "loader-not-found"
+		},
+		body: "not found"
+	};
+}, $n = (e) => {
+	let { helpers: t } = e, n = t.prepareDeferredLoaderData(e.loaderData, "page"), r = {}, i = {}, a = {};
+	for (let [n, o] of Object.entries(e.segmentLoaderData)) {
+		let e = Number(n), s = t.prepareDeferredLoaderData(o, e);
+		r[e] = s.renderData, i[e] = s.stateData, s.deferredIds && (a[e] = s.deferredIds);
+	}
+	let o = n.deferredIds !== void 0 || Object.keys(a).length > 0;
+	if (o) try {
+		t.assertDeferralSupported({
+			page: e.page,
+			renderMode: e.renderMode,
+			interactive: e.interactive,
+			...e.layoutShell ? { layoutShell: e.layoutShell } : {},
+			...e.ppr === !0 ? { ppr: !0 } : {}
+		});
+	} catch (e) {
+		throw new Xn(e instanceof Error ? e.message : String(e));
+	}
+	return {
+		loaderData: n.renderData,
+		segmentLoaderData: r,
+		hasDeferred: o,
+		stateInput: {
+			path: e.pathname,
+			loaderData: n.stateData,
+			segmentLoaderData: i,
+			pageLoaderRan: e.pageLoaderRan,
+			...e.layoutShell ? { pageClientOnly: !0 } : {},
+			...n.deferredIds ? { deferredPageIds: n.deferredIds } : {},
+			...Object.keys(a).length > 0 ? { deferredSegmentIds: a } : {}
+		}
+	};
+}, er = (e) => {
+	let { helpers: t, renderInput: n } = e, r = $n({
+		helpers: t,
+		page: e.page,
+		pathname: n.pathname,
+		renderMode: "spa",
+		interactive: e.interactive,
+		loaderData: null,
+		segmentLoaderData: n.segmentLoaderData ?? {},
+		pageLoaderRan: !1,
+		layoutShell: e.delivery
+	});
+	return {
+		renderInput: {
+			...n,
+			pageSlot: !0,
+			loaderData: null,
+			segmentLoaderData: r.segmentLoaderData
+		},
+		stateScript: t.renderRouterStateScript(r.stateInput),
+		hasDeferred: r.hasDeferred
+	};
+}, tr = (e) => {
+	let { html: t, meta: n } = e.helpers.renderPageToHtml(e.prepared.renderInput);
+	return {
+		body: t,
+		meta: n
+	};
+}, nr = (e) => [
+	...e.extra ?? [],
+	e.helpers.renderMetaToHtml(e.meta),
+	`<meta name="voltro-interactive" content="${e.interactive}" />`,
+	...e.prepared.hasDeferred ? [e.helpers.renderDeferredRegistryScript()] : [],
+	e.prepared.stateScript
+].filter((e) => e.length > 0).join("\n    "), rr = (e, t) => {
+	let n = t.replace(/[^A-Za-z0-9+/=_-]/g, "");
+	return e.replace(/<script(?![^>]*\bnonce=)/gi, `<script nonce="${n}"`);
+}, ir = (e) => {
+	let t = e.indexOf("?");
+	return t === -1 ? {
+		pathname: e || "/",
+		search: ""
+	} : {
+		pathname: e.slice(0, t) || "/",
+		search: e.slice(t)
+	};
+}, ar = (e) => {
 	let t = [];
 	for (let n of e.split("/").filter(Boolean)) n.startsWith("[[...") && n.endsWith("]]") ? t.push({
 		name: n.slice(5, -2),
@@ -554,12 +1278,12 @@ __installPublicEnv(publicEnvValues)
 		optional: !1
 	});
 	return t;
-}, ot = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), st = async (e) => {
-	let t = A(e);
+}, or = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), sr = async (e) => {
+	let t = R(e);
 	for (let e = 0; e < 4; e++) {
-		let e = O(t, "project.json");
-		if (j(e)) try {
-			let n = await M.readFile(e, "utf8");
+		let e = I(t, "project.json");
+		if (B(e)) try {
+			let n = await V.readFile(e, "utf8");
 			return {
 				projectDir: t,
 				manifest: JSON.parse(n)
@@ -567,38 +1291,38 @@ __installPublicEnv(publicEnvValues)
 		} catch {
 			return null;
 		}
-		let n = D(t);
+		let n = F(t);
 		if (n === t) break;
 		t = n;
 	}
 	return null;
-}, ct = async (e) => {
-	let t = await st(e);
+}, cr = async (e) => {
+	let t = await sr(e);
 	if (!t) return [];
-	let { projectDir: n, manifest: r } = t, i = E(e), a = r.apps ?? {}, o = [];
+	let { projectDir: n, manifest: r } = t, i = ae(e), a = r.apps ?? {}, o = [];
 	for (let [e, t] of Object.entries(a)) {
 		if (e === i || t.kind !== "web" || typeof t.port != "number") continue;
-		let r = O(n, t.path ?? e), a = O(r, "src", "pages");
-		if (!j(a)) continue;
+		let r = I(n, t.path ?? e), a = I(r, "src", "pages");
+		if (!B(a)) continue;
 		let s;
 		try {
-			let { pages: e } = await Xr(a);
+			let { pages: e } = await ro(a);
 			s = e.map((e) => ({
 				pattern: e.pattern,
-				params: at(e.pattern)
+				params: ar(e.pattern)
 			}));
 		} catch {
 			continue;
 		}
 		o.push({
-			key: ot(e),
+			key: or(e),
 			origin: `http://localhost:${t.port}`,
 			...typeof t.origin == "string" && t.origin.length > 0 ? { prodOrigin: t.origin } : {},
 			routes: s
 		});
 	}
 	return o;
-}, lt = (e) => {
+}, lr = (e) => {
 	if (e.params.length === 0) return `'${e.pattern}'`;
 	let t = e.pattern;
 	for (let n of e.params) {
@@ -606,73 +1330,91 @@ __installPublicEnv(publicEnvValues)
 		t = t.replace(e, r);
 	}
 	return "`" + t + "`";
-}, ut = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
+}, ur = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
 	let t = "string";
 	return e.optional ? `readonly ${e.name}?: ${t}` : `readonly ${e.name}: ${t}`;
-}).join("; ")} }`, dt = (e, t, n) => {
-	let r = ut(e), i = lt(e), a = t ? "VoltroExternalUrl" : "VoltroRouteUrl", o = t && n ? `${n} + ` : "";
+}).join("; ")} }`, dr = (e, t, n) => {
+	let r = ur(e), i = lr(e), a = t ? "VoltroExternalUrl" : e.search === void 0 ? "VoltroRouteUrl" : `VoltroRouteUrl<Schema.Schema.Type<typeof ${e.search.alias}>>`, o = t && n ? `${n} + ` : "";
 	return e.params.length === 0 ? `() => (${o}${i}) as ${a}` : `({ ${e.params.map((e) => e.name).join(", ")} }: ${r}) => (${o}${i}) as ${a}`;
-}, ft = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${dt(e, !1)},`).join("\n")}\n}`, pt = (e, t) => {
+}, fr = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${dr(e, !1)},`).join("\n")}\n}`, pr = (e, t) => {
 	if (e.routes.length === 0) return `  ${e.key}: {} as Record<string, never>,`;
-	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${dt(e, !0, i)},`);
+	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${dr(e, !0, i)},`);
 	return `  ${e.key}: {\n${a.join("\n")}\n  },`;
-}, mt = async (e) => {
-	let t = e.pages.map((e) => ({
-		pattern: e.pattern,
-		params: at(e.pattern)
-	})), n = await ct(e.appRoot), r = [
+}, mr = async (e) => {
+	let t = await Promise.all(e.pages.map(async (t) => {
+		let n;
+		try {
+			let r = await V.readFile(I(e.appRoot, "src", "pages", t.file), "utf8");
+			/^export const searchParams\b/m.test(r) && (n = {
+				alias: `SP_${t.ident}`,
+				specifier: `../src/pages/${t.file.replace(/\.tsx?$/, "")}`
+			});
+		} catch {}
+		return {
+			pattern: t.pattern,
+			params: ar(t.pattern),
+			...n === void 0 ? {} : { search: n }
+		};
+	})), n = await cr(e.appRoot), r = t.filter((e) => e.search !== void 0).sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `import type { searchParams as ${e.search.alias} } from '${e.search.specifier}'`), i = [
 		"// THIS FILE IS GENERATED — DO NOT EDIT BY HAND.",
 		"// Re-emitted by `voltro dev` whenever `src/pages/**` changes.",
 		"// Type-safe route builders consumed by <Link to={...}>.",
 		"",
 		"import type { VoltroRouteUrl, VoltroExternalUrl } from '@voltro/web'",
+		...r.length > 0 ? [
+			"// Type-ONLY page imports: they brand each schema-carrying route's URL with",
+			"// its searchParams shape and are erased at compile time — no page enters",
+			"// this module's value graph (plans/parity/05, the code-splitting decision).",
+			"import type { Schema } from 'effect'",
+			...r
+		] : [],
 		"",
 		"type EmptyParams = Record<string, never>",
 		""
-	].join("\n"), i = e.mode ?? "dev", a = `${r}\n${`export const routes = ${ft(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => pt(e, i)).join("\n")}\n} as const\n`}`, o = O(e.appRoot, ".framework", "routes.generated.ts");
-	await M.mkdir(D(o), { recursive: !0 });
-	let s = null;
+	].join("\n"), a = e.mode ?? "dev", o = `${i}\n${`export const routes = ${fr(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => pr(e, a)).join("\n")}\n} as const\n`}`, s = I(e.appRoot, ".framework", "routes.generated.ts");
+	await V.mkdir(F(s), { recursive: !0 });
+	let c = null;
 	try {
-		s = await M.readFile(o, "utf8");
+		c = await V.readFile(s, "utf8");
 	} catch {}
-	return s === a ? {
-		path: o,
+	return c === o ? {
+		path: s,
 		wrote: !1
-	} : (await M.writeFile(o, a, "utf8"), {
-		path: o,
+	} : (await V.writeFile(s, o, "utf8"), {
+		path: s,
 		wrote: !0
 	});
-}, ht = (e) => {
+}, hr = (e) => {
 	if (e === "" || e === "/") return "/";
 	let t = e.startsWith("/") ? e : `/${e}`;
 	return t.endsWith("/") ? t.slice(0, -1) : t;
-}, gt = (e, t) => {
-	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = ht(t);
+}, gr = (e, t) => {
+	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = hr(t);
 	return r === "/" ? `${n}/` : `${n}${r}`;
-}, _t = (e, t, n) => {
-	let r = ht(e);
+}, _r = (e, t, n) => {
+	let r = hr(e);
 	return t === n ? r : r === "/" ? `/${t}` : `/${t}${r}`;
-}, vt = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), yt = (e) => {
+}, vr = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), yr = (e) => {
 	let { siteUrl: t, entries: n } = e, r = e.locales && e.locales.length > 1 ? e.locales : void 0, i = e.defaultLocale ?? r?.[0] ?? "en", a = r !== void 0, o = /* @__PURE__ */ new Map(), s = (e) => {
 		if (!r) return "";
-		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${vt(n)}" href="${vt(gt(t, _t(e, n, i)))}" />`);
-		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${vt(gt(t, _t(e, i, i)))}" />`), `\n${n.join("\n")}`;
+		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${vr(n)}" href="${vr(gr(t, _r(e, n, i)))}" />`);
+		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${vr(gr(t, _r(e, i, i)))}" />`), `\n${n.join("\n")}`;
 	};
 	for (let e of n) {
 		let n = r ?? [i];
 		for (let r of n) {
-			let n = gt(t, _t(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${vt(e.lastmod)}</lastmod>` : "";
-			o.set(n, `  <url>\n    <loc>${vt(n)}</loc>${a}${s(e.path)}\n  </url>`);
+			let n = gr(t, _r(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${vr(e.lastmod)}</lastmod>` : "";
+			o.set(n, `  <url>\n    <loc>${vr(n)}</loc>${a}${s(e.path)}\n  </url>`);
 		}
 	}
 	let c = [...o.keys()].sort().map((e) => o.get(e)).join("\n");
 	return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset${a ? " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\"" : " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\""}>\n${c}\n</urlset>\n`;
-}, bt = (e) => {
+}, br = (e) => {
 	if (!e.indexable) return "User-agent: *\nDisallow: /\n";
 	let t = ["User-agent: *", "Allow: /"];
-	for (let n of e.disallow ?? []) t.push(`Disallow: ${ht(n)}`);
+	for (let n of e.disallow ?? []) t.push(`Disallow: ${hr(n)}`);
 	return e.sitemapUrl && t.push("", `Sitemap: ${e.sitemapUrl}`), `${t.join("\n")}\n`;
-}, xt = 256, St = (e = xt) => {
+}, xr = 256, Sr = (e = xr) => {
 	let t = [], n = /* @__PURE__ */ new Set();
 	return {
 		emit(r, i) {
@@ -695,18 +1437,18 @@ __installPublicEnv(publicEnvValues)
 			return t.slice();
 		}
 	};
-}, Ct = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, wt = () => `: keep-alive ${Date.now()}\n\n`, Tt = 8e3, Et = (e, t = Tt) => {
-	let n = Ot(e);
+}, Cr = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, wr = () => `: keep-alive ${Date.now()}\n\n`, Tr = 8e3, Er = (e, t = Tr) => {
+	let n = Or(e);
 	return n.length <= t ? n : `${n.slice(0, t)}\n… [voltro] truncated at ${t} chars (${n.length} total)`;
-}, Dt = 4, Ot = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
+}, Dr = 4, Or = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
 	if (e instanceof Error) {
 		let r = e.stack ?? `${e.name}: ${e.message}`;
 		if (n.has(e)) return `${r}\n  [cycle]`;
 		n.add(e);
 		let i = [];
-		if (t < Dt) {
-			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${kt(Ot(a, t + 1, n))}`);
-			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${kt(Ot(e.cause, t + 1, n))}`);
+		if (t < Dr) {
+			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${kr(Or(a, t + 1, n))}`);
+			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${kr(Or(e.cause, t + 1, n))}`);
 		}
 		return r + i.join("");
 	}
@@ -715,30 +1457,30 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return "[unstringifiable thrown value]";
 	}
-}, kt = (e) => {
+}, kr = (e) => {
 	let t = e.split("\n");
 	return t.length <= 3 ? e : `${t.slice(0, 3).join("\n")}\n  …`;
-}, At = {
+}, Ar = {
 	trace: 0,
 	debug: 1,
 	info: 2,
 	warn: 3,
 	error: 4,
 	fatal: 5
-}, jt = 2e3, Mt = 200, Nt = class {
+}, jr = 2e3, Mr = 200, Nr = class {
 	capacity;
 	buffer = [];
-	constructor(e = jt) {
+	constructor(e = jr) {
 		this.capacity = e;
 	}
 	append(e) {
 		this.buffer.push(e), this.buffer.length > this.capacity && this.buffer.shift();
 	}
 	query(e = {}) {
-		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? Mt, this.capacity), i = e.minLevel === void 0 ? At.trace : At[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
+		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? Mr, this.capacity), i = e.minLevel === void 0 ? Ar.trace : Ar[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
 		for (let e = this.buffer.length - 1; e >= 0 && l.length < r; e--) {
 			let r = this.buffer[e];
-			r.ts < t || r.ts > n || At[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
+			r.ts < t || r.ts > n || Ar[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
 		}
 		return l.reverse();
 	}
@@ -751,7 +1493,7 @@ __installPublicEnv(publicEnvValues)
 	clear() {
 		this.buffer = [];
 	}
-}, Pt = null, Ft = () => (Pt === null && (Pt = new Nt()), Pt), It = (e) => {
+}, Pr = null, Fr = () => (Pr === null && (Pr = new Nr()), Pr), Ir = (e) => {
 	if (typeof e == "string") return e;
 	if (e instanceof Error) return e.message;
 	try {
@@ -759,28 +1501,28 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return String(e);
 	}
-}, Lt = 8e3, Rt = (e) => typeof e == "string" ? e.length <= Lt ? e : `${e.slice(0, Lt)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Et(e, Lt), zt = (e, t) => {
+}, Lr = 8e3, Rr = (e) => typeof e == "string" ? e.length <= Lr ? e : `${e.slice(0, Lr)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Er(e, Lr), zr = (e, t) => {
 	try {
 		e(...t);
 	} catch (n) {
 		try {
-			e(...t.map(Rt)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Lt} chars per argument.`);
+			e(...t.map(Rr)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Lr} chars per argument.`);
 		} catch {
 			e(`[voltro] a console.error argument could not be formatted at all (${t.length} arg(s)).`);
 		}
 	}
-}, Bt = (e) => {
+}, Br = (e) => {
 	let t = {
 		log: console.log.bind(console),
 		info: console.info.bind(console),
 		warn: console.warn.bind(console),
 		error: console.error.bind(console),
 		debug: console.debug.bind(console)
-	}, n = Ft(), r = !1, i = (i) => (...a) => {
-		if (zt(t[i], a), !r) {
+	}, n = Fr(), r = !1, i = (i) => (...a) => {
+		if (zr(t[i], a), !r) {
 			r = !0;
 			try {
-				let t = a.length > 0 ? It(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = V();
+				let t = a.length > 0 ? Ir(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = fe();
 				e.emit("log", {
 					level: i,
 					message: r,
@@ -807,7 +1549,7 @@ __installPublicEnv(publicEnvValues)
 		}
 	};
 	console.log = i("log"), console.info = i("info"), console.warn = i("warn"), console.error = i("error"), console.debug = i("debug");
-	let a = R((t) => {
+	let a = le((t) => {
 		if (!r) {
 			r = !0;
 			try {
@@ -818,7 +1560,7 @@ __installPublicEnv(publicEnvValues)
 					argsCount: 1,
 					...t.scope === void 0 ? {} : { scope: t.scope }
 				});
-				let a = V(), o = a !== void 0 && t.fields.traceId === void 0 ? {
+				let a = fe(), o = a !== void 0 && t.fields.traceId === void 0 ? {
 					...t.fields,
 					traceId: a.traceId
 				} : t.fields;
@@ -838,24 +1580,24 @@ __installPublicEnv(publicEnvValues)
 	return () => {
 		console.log = t.log, console.info = t.info, console.warn = t.warn, console.error = t.error, console.debug = t.debug, a();
 	};
-}, Vt = 2e3, Ht = 8, Ut = 1e3, Wt = 200, Gt = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Kt = (e) => {
+}, Vr = 2e3, Hr = 8, Ur = 1e3, Wr = 200, Gr = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Kr = (e) => {
 	switch (e) {
 		case "error": return "error";
 		case "warn": return "warn";
 		case "debug": return "debug";
 		default: return "info";
 	}
-}, qt = z({ scope: "client" }), Jt = (e, t) => {
+}, qr = K({ scope: "client" }), Jr = (e, t) => {
 	let n;
 	try {
 		n = JSON.parse(e);
 	} catch {
-		return Yt(400, { error: "invalid JSON body" });
+		return Yr(400, { error: "invalid JSON body" });
 	}
-	if (typeof n != "object" || !n) return Yt(400, { error: "body must be a JSON object" });
+	if (typeof n != "object" || !n) return Yr(400, { error: "body must be a JSON object" });
 	let r = n;
-	if (!Array.isArray(r.entries)) return Yt(400, { error: "entries must be an array" });
-	let i = typeof r.app == "string" ? Gt(r.app, 120) : void 0, a = typeof r.page == "string" ? Gt(r.page, 200) : void 0, o = typeof r.ua == "string" ? Gt(r.ua, 200) : void 0, s = r.entries.slice(0, Wt), c = 0;
+	if (!Array.isArray(r.entries)) return Yr(400, { error: "entries must be an array" });
+	let i = typeof r.app == "string" ? Gr(r.app, 120) : void 0, a = typeof r.page == "string" ? Gr(r.page, 200) : void 0, o = typeof r.ua == "string" ? Gr(r.ua, 200) : void 0, s = r.entries.slice(0, Wr), c = 0;
 	for (let e of s) {
 		if (typeof e != "object" || !e) continue;
 		let n = e;
@@ -866,7 +1608,7 @@ __installPublicEnv(publicEnvValues)
 			"warn",
 			"error",
 			"debug"
-		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Gt(n.message, Vt), u = Array.isArray(n.args) ? n.args.slice(0, Ht).filter((e) => typeof e == "string").map((e) => Gt(e, Ut)) : void 0, d = typeof n.stack == "string" ? Gt(n.stack, Vt) : void 0;
+		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Gr(n.message, Vr), u = Array.isArray(n.args) ? n.args.slice(0, Hr).filter((e) => typeof e == "string").map((e) => Gr(e, Ur)) : void 0, d = typeof n.stack == "string" ? Gr(n.stack, Vr) : void 0;
 		t.emit("clientLog", {
 			ts: s,
 			level: r,
@@ -881,35 +1623,35 @@ __installPublicEnv(publicEnvValues)
 			...i === void 0 ? {} : { app: i },
 			...a === void 0 ? {} : { page: a },
 			...u !== void 0 && u.length > 0 ? { args: u } : {}
-		}, p = Kt(r);
-		(p === "error" || p === "warn") && d !== void 0 ? qt[p](l, f, { stack: d }) : qt[p](l, {
+		}, p = Kr(r);
+		(p === "error" || p === "warn") && d !== void 0 ? qr[p](l, f, { stack: d }) : qr[p](l, {
 			...f,
 			...d === void 0 ? {} : { stack: d }
 		}), c++;
 	}
-	return Yt(202, {
+	return Yr(202, {
 		accepted: c,
 		dropped: r.entries.length - c
 	});
-}, Yt = (e, t) => ({
+}, Yr = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Xt = "/_voltro/inspect/clientLog", Zt = [
+}), Xr = "/_voltro/inspect/clientLog", Zr = [
 	"trace",
 	"debug",
 	"info",
 	"warn",
 	"error",
 	"fatal"
-], Qt = {
+], Qr = {
 	trace: "TRACE",
 	debug: "DEBUG",
 	info: "INFO ",
 	warn: "WARN ",
 	error: "ERROR",
 	fatal: "FATAL"
-}, $t = (e) => Zt.includes(e), en = (e, t, n = {}) => {
+}, $r = (e) => Zr.includes(e), ei = (e, t, n = {}) => {
 	if (u()) return {
 		status: 503,
 		contentType: "application/json",
@@ -940,7 +1682,7 @@ __installPublicEnv(publicEnvValues)
 		Number.isFinite(e) && e > 0 && (o.max = Math.floor(e));
 	}
 	let d = a.get("level");
-	d !== null && $t(d) && (o.minLevel = d);
+	d !== null && $r(d) && (o.minLevel = d);
 	let p = a.get("source");
 	(p === "server" || p === "client") && (o.source = p);
 	let m = a.get("scope");
@@ -953,7 +1695,7 @@ __installPublicEnv(publicEnvValues)
 	if ((a.get("format") ?? "json") === "text") return {
 		status: 200,
 		contentType: "text/plain; charset=utf-8",
-		body: _.map(tn).join("\n") + (_.length > 0 ? "\n" : "")
+		body: _.map(ti).join("\n") + (_.length > 0 ? "\n" : "")
 	};
 	let v = {
 		capturedAt: Date.now(),
@@ -967,40 +1709,40 @@ __installPublicEnv(publicEnvValues)
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(v)
 	};
-}, tn = (e) => {
-	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = rn(e.fields);
-	return `${n}:${r}:${i}.${a} ${Qt[e.level]} ${o} ${e.message}${s}`;
-}, nn = 80, rn = (e) => {
+}, ti = (e) => {
+	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = ri(e.fields);
+	return `${n}:${r}:${i}.${a} ${Qr[e.level]} ${o} ${e.message}${s}`;
+}, ni = 80, ri = (e) => {
 	let t = Object.entries(e);
 	if (t.length === 0) return "";
 	let n = [];
 	for (let [e, r] of t) {
 		if (r === void 0) continue;
-		let t = an(r);
+		let t = ii(r);
 		n.push(`${e}=${t}`);
 	}
 	return n.length > 0 ? "  " + n.join(" ") : "";
-}, an = (e) => {
+}, ii = (e) => {
 	if (typeof e == "string") {
-		let t = e.length > nn ? e.slice(0, nn) + "…" : e;
+		let t = e.length > ni ? e.slice(0, ni) + "…" : e;
 		return /[\s=]/.test(t) ? `"${t.replace(/"/g, "\\\"")}"` : t;
 	}
 	if (e === null) return "null";
 	if (typeof e == "number" || typeof e == "boolean") return String(e);
 	try {
 		let t = JSON.stringify(e);
-		return t.length > nn ? t.slice(0, nn) + "…" : t;
+		return t.length > ni ? t.slice(0, ni) + "…" : t;
 	} catch {
 		return "[unserialisable]";
 	}
-}, on = "/_voltro/inspect/logs", sn = (e, t, n) => {
+}, ai = "/_voltro/inspect/logs", oi = (e, t, n) => {
 	if (t.headers.authorization !== void 0) return !1;
 	let { token: r } = n;
 	if (r === void 0 || r === "" || !n.isLoopback(n.target)) return !1;
 	e.setHeader("authorization", `Bearer ${r}`);
 	let i = n.writeToken;
 	return i !== void 0 && i !== "" && t.headers["x-voltro-inspect-write"] === void 0 && e.setHeader("x-voltro-inspect-write", i), !0;
-}, cn = [{
+}, si = [{
 	match: (e) => typeof e == "string" && e.startsWith("[BABEL] Note: The code generator has deoptimised"),
 	handle: (e, t) => {
 		let n = e[0], r = n.match(/deoptimised the styling of (.+?) as it exceeds the max of (\d+\w*B)\.?/);
@@ -1012,13 +1754,13 @@ __installPublicEnv(publicEnvValues)
 			});
 		} else t.info(n);
 	}
-}], ln = () => {
+}], ci = () => {
 	let e = {
 		warn: console.warn.bind(console),
 		error: console.error.bind(console)
-	}, t = z({ scope: "babel" }), n = !1, r = (r) => (...i) => {
+	}, t = K({ scope: "babel" }), n = !1, r = (r) => (...i) => {
 		if (!n) {
-			for (let e of cn) if (e.match(i[0])) {
+			for (let e of si) if (e.match(i[0])) {
 				n = !0;
 				try {
 					e.handle(i, t);
@@ -1033,7 +1775,7 @@ __installPublicEnv(publicEnvValues)
 	return console.warn = r("warn"), console.error = r("error"), () => {
 		console.warn = e.warn, console.error = e.error;
 	};
-}, un = {
+}, li = {
 	loader: "it runs on the server, and the router caches its result per route + params",
 	renderMode: "it picks the server render strategy",
 	dynamic: "it picks the server render strategy",
@@ -1043,8 +1785,10 @@ __installPublicEnv(publicEnvValues)
 	staleWhileRevalidate: "it sets the ISR stale-while-revalidate window",
 	cacheInvalidatesOn: "it wires this page into the ISR cache invalidator",
 	interactive: "it decides how much client JS the server ships",
-	tenantAware: "it is part of the server-side cache key"
-}, dn = Object.keys(un), fn = "virtual:voltro-route-refresh", pn = `\0${fn}`, mn = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, hn = () => `
+	tenantAware: "it is part of the server-side cache key",
+	ogImage: "the server renders it into the og:image PNG",
+	ppr: "it switches the isr path to partial prerendering (cached shell + per-request holes)"
+}, ui = Object.keys(li), di = "virtual:voltro-route-refresh", fi = `\0${di}`, pi = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, mi = () => `
 // GENERATED by @voltro/cli — the \`voltro dev\` route Fast Refresh runtime.
 
 /** Mirrors react-refresh's own \`isLikelyComponentType\` closely enough for the
@@ -1073,11 +1817,11 @@ const stableForm = (value) => {
  *  readers (\`build.ts\` prerender, \`webDev.ts\` dev SSR, \`start.ts\`). A change to
  *  one of THESE cannot be hot-applied: the server already ran with the old
  *  value. Everything else a page exports is plain client-side data. */
-const serverRelevantExports = ${JSON.stringify(dn)}
+const serverRelevantExports = ${JSON.stringify(ui)}
 
 /** Name → the server step that already consumed it, so the reload message can
  *  say WHY rather than just WHAT. Injected from the same single source. */
-const serverExportEffect = ${JSON.stringify(un)}
+const serverExportEffect = ${JSON.stringify(li)}
 
 /** The reason \`name\` forces a reload, for the console line. */
 export const serverEffectOf = (name) =>
@@ -1120,7 +1864,7 @@ export const routeUpdateNeedsReload = (prevExports, nextExports) => {
 const previousHook = globalThis.__getReactRefreshIgnoredExports
 globalThis.__getReactRefreshIgnoredExports = (args) =>
   ignoredExports.get(args.id) ?? previousHook?.(args) ?? []
-`, gn = (e) => `
+`, hi = (e) => `
 if (import.meta.hot) {
   // Self-import to read our OWN exports, the same technique the react plugin
   // uses; the namespace is only complete after evaluation, hence the promise.
@@ -1147,97 +1891,97 @@ import {
   registerRouteModule as __voltro_registerRouteModule,
   routeUpdateNeedsReload as __voltro_routeUpdateNeedsReload,
   serverEffectOf as __voltro_serverEffect,
-} from '${fn}'
-`, _n = (e) => e.replace(/\\/g, "/"), vn = (e, t) => {
-	let [n = "", r] = _n(e).split("?");
-	if (!n.endsWith(".tsx") || r !== void 0 && mn.test(r)) return !1;
-	let i = _n(t).replace(/\/$/, "");
-	return n.startsWith(`${i}/`) ? c.test(n) || s.has(n.slice(n.lastIndexOf("/") + 1)) : !1;
-}, yn = (e, t, n) => vn(t, n) ? `${e}${gn(_n(t).split("?")[0] ?? t)}` : null, bn = (e) => ({
+} from '${di}'
+`, gi = (e) => e.replace(/\\/g, "/"), _i = (e, t) => {
+	let [n = "", r] = gi(e).split("?");
+	if (!n.endsWith(".tsx") || r !== void 0 && pi.test(r)) return !1;
+	let i = gi(t).replace(/\/$/, "");
+	return n.startsWith(`${i}/`) ? o.test(n) || a.has(n.slice(n.lastIndexOf("/") + 1)) : !1;
+}, vi = (e, t, n) => _i(t, n) ? `${e}${hi(gi(t).split("?")[0] ?? t)}` : null, yi = (e) => ({
 	name: "voltro:route-fast-refresh",
 	enforce: "pre",
-	resolveId: (e) => e === "virtual:voltro-route-refresh" ? pn : void 0,
-	load: (e) => e === pn ? hn() : void 0,
+	resolveId: (e) => e === "virtual:voltro-route-refresh" ? fi : void 0,
+	load: (e) => e === fi ? mi() : void 0,
 	transform: (t, n, r) => {
 		if (r?.ssr === !0) return null;
-		let i = yn(t, n, e);
+		let i = vi(t, n, e);
 		return i === null ? null : {
 			code: i,
 			map: null
 		};
 	}
-}), xn = z({ scope: "voltro:dashboard" }), Sn = B(import.meta.url), Cn = 5179, wn = (e) => {
+}), bi = K({ scope: "voltro:dashboard" }), xi = q(import.meta.url), Si = 5179, Ci = (e) => {
 	let t = process.env.VOLTRO_DASHBOARD_PATH;
-	if (t && j(O(A(t), "app.config.ts"))) return A(t);
+	if (t && B(I(R(t), "app.config.ts"))) return R(t);
 	try {
-		let e = D(Sn.resolve("@voltro/dashboard/package.json"));
-		if (j(O(e, "app.config.ts"))) return e;
+		let e = F(xi.resolve("@voltro/dashboard/package.json"));
+		if (B(I(e, "app.config.ts"))) return e;
 	} catch {}
-	let n = O("voltro-devtools", "apps", "dashboard"), r = A(e);
+	let n = I("voltro-devtools", "apps", "dashboard"), r = R(e);
 	for (let e = 0; e < 10; e++) {
-		let e = O(r, n);
-		if (j(O(e, "app.config.ts"))) return e;
-		let t = D(r);
+		let e = I(r, n);
+		if (B(I(e, "app.config.ts"))) return e;
+		let t = F(r);
 		if (t === r) break;
 		r = t;
 	}
 	return null;
-}, Tn = "VOLTRO_IS_DASHBOARD", En = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
-	let i = K({
+}, wi = "VOLTRO_IS_DASHBOARD", Ti = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
+	let i = Ne({
 		port: e,
 		host: t
 	}), a = !1, o = (e) => {
 		a || (a = !0, i.destroy(), r(e));
 	};
 	i.once("connect", () => o(!0)), i.once("error", () => o(!1)), setTimeout(() => o(!1), n);
-}), Dn = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), On = () => process.env[Tn] === "1", kn = () => process.stdout.isTTY === !0, An = O(H(), ".voltro", "dashboard-launch.lock"), jn = 1e4, Mn = async () => {
+}), Ei = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), Di = () => process.env[wi] === "1", Oi = () => process.stdout.isTTY === !0, ki = I(he(), ".voltro", "dashboard-launch.lock"), Ai = 1e4, ji = async () => {
 	try {
-		await M.mkdir(D(An), { recursive: !0 });
-		let e = await M.open(An, "wx");
+		await V.mkdir(F(ki), { recursive: !0 });
+		let e = await V.open(ki, "wx");
 		return await e.write(`${process.pid}\n${Date.now()}\n`), await e.close(), !0;
 	} catch {
 		try {
-			let e = await M.stat(An);
-			if (Date.now() - e.mtimeMs > jn) return await M.unlink(An).catch(() => void 0), Mn();
+			let e = await V.stat(ki);
+			if (Date.now() - e.mtimeMs > Ai) return await V.unlink(ki).catch(() => void 0), ji();
 		} catch {}
 		return !1;
 	}
-}, Nn = async () => {
+}, Mi = async () => {
 	try {
-		await M.unlink(An);
+		await V.unlink(ki);
 	} catch {}
-}, Pn = async (e) => {
+}, Ni = async (e) => {
 	let t = e.port ?? 5179;
-	if (Dn()) return {
+	if (Ei()) return {
 		status: "skipped",
 		reason: "disabled by flag/env",
 		port: t
 	};
-	if (On()) return {
+	if (Di()) return {
 		status: "skipped",
 		reason: "this process IS the dashboard",
 		port: t
 	};
-	if (!kn()) return {
+	if (!Oi()) return {
 		status: "skipped",
 		reason: "stdout is not a TTY (CI/smoke)",
 		port: t
 	};
-	if (!await Mn()) return {
+	if (!await ji()) return {
 		status: "skipped",
 		reason: "another voltro process is currently launching the dashboard",
 		port: t
 	};
-	if (await En(t)) return await Nn(), {
+	if (await Ti(t)) return await Mi(), {
 		status: "already-running",
 		port: t
 	};
 	let n = e.voltroBin;
 	if (!n) {
 		let e = process.argv[1];
-		n = e && e.endsWith("/src/bin.ts") ? O(D(e), "..", "bin", "voltro.mjs") : e ?? "voltro";
+		n = e && e.endsWith("/src/bin.ts") ? I(F(e), "..", "bin", "voltro.mjs") : e ?? "voltro";
 	}
-	let r = O(e.dashboardAppPath, ".framework", "dist", "index.html"), i = j(r), a = i ? "start" : "dev", o = me(process.execPath, [
+	let r = I(e.dashboardAppPath, ".framework", "dist", "index.html"), i = B(r), a = i ? "start" : "dev", o = Me(process.execPath, [
 		n,
 		a,
 		e.dashboardAppPath
@@ -1245,7 +1989,7 @@ import {
 		stdio: "ignore",
 		env: {
 			...process.env,
-			[Tn]: "1",
+			[wi]: "1",
 			VOLTRO_DASHBOARD_PORT: String(t)
 		}
 	});
@@ -1253,120 +1997,19 @@ import {
 		if (o.exitCode === null && o.signalCode === null) try {
 			o.kill("SIGTERM");
 		} catch {}
-	}), xn.info(`auto-launching dashboard at http://localhost:${t}`, {
+	}), bi.info(`auto-launching dashboard at http://localhost:${t}`, {
 		port: t,
 		mode: a,
 		prebuilt: i
-	}), i || xn.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), xn.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
-		Nn();
+	}), i || bi.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), bi.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
+		Mi();
 	}, 4e3).unref(), {
 		status: "launched",
 		port: t
 	};
-}, Fn = class extends Error {
-	_voltroDeferral = !0;
-	constructor(e) {
-		super(e), this.name = "DeferralNotSupportedError";
-	}
-}, In = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, Ln = (e) => {
-	if (!(e instanceof Error)) return;
-	let t = e._voltroControl;
-	if (t === "redirect") {
-		let { location: t, status: n } = e;
-		return typeof t == "string" ? {
-			status: n === 307 || n === 308 ? n : 303,
-			headers: {
-				location: t,
-				"x-voltro-rendered-by": "loader-redirect"
-			},
-			body: ""
-		} : void 0;
-	}
-	if (t === "not-found") return {
-		status: 404,
-		headers: {
-			"content-type": "text/plain; charset=utf-8",
-			"x-voltro-rendered-by": "loader-not-found"
-		},
-		body: "not found"
-	};
-}, Rn = (e) => {
-	let { helpers: t } = e, n = t.prepareDeferredLoaderData(e.loaderData, "page"), r = {}, i = {}, a = {};
-	for (let [n, o] of Object.entries(e.segmentLoaderData)) {
-		let e = Number(n), s = t.prepareDeferredLoaderData(o, e);
-		r[e] = s.renderData, i[e] = s.stateData, s.deferredIds && (a[e] = s.deferredIds);
-	}
-	let o = n.deferredIds !== void 0 || Object.keys(a).length > 0;
-	if (o) try {
-		t.assertDeferralSupported({
-			page: e.page,
-			renderMode: e.renderMode,
-			interactive: e.interactive,
-			...e.layoutShell ? { layoutShell: e.layoutShell } : {}
-		});
-	} catch (e) {
-		throw new Fn(e instanceof Error ? e.message : String(e));
-	}
-	return {
-		loaderData: n.renderData,
-		segmentLoaderData: r,
-		hasDeferred: o,
-		stateInput: {
-			path: e.pathname,
-			loaderData: n.stateData,
-			segmentLoaderData: i,
-			pageLoaderRan: e.pageLoaderRan,
-			...e.layoutShell ? { pageClientOnly: !0 } : {},
-			...n.deferredIds ? { deferredPageIds: n.deferredIds } : {},
-			...Object.keys(a).length > 0 ? { deferredSegmentIds: a } : {}
-		}
-	};
-}, zn = (e) => {
-	let { helpers: t, renderInput: n } = e, r = Rn({
-		helpers: t,
-		page: e.page,
-		pathname: n.pathname,
-		renderMode: "spa",
-		interactive: e.interactive,
-		loaderData: null,
-		segmentLoaderData: n.segmentLoaderData ?? {},
-		pageLoaderRan: !1,
-		layoutShell: e.delivery
-	});
-	return {
-		renderInput: {
-			...n,
-			pageSlot: !0,
-			loaderData: null,
-			segmentLoaderData: r.segmentLoaderData
-		},
-		stateScript: t.renderRouterStateScript(r.stateInput),
-		hasDeferred: r.hasDeferred
-	};
-}, Bn = (e) => {
-	let { html: t, meta: n } = e.helpers.renderPageToHtml(e.prepared.renderInput);
-	return {
-		body: t,
-		meta: n
-	};
-}, Vn = (e) => [
-	...e.extra ?? [],
-	e.helpers.renderMetaToHtml(e.meta),
-	`<meta name="voltro-interactive" content="${e.interactive}" />`,
-	...e.prepared.hasDeferred ? [e.helpers.renderDeferredRegistryScript()] : [],
-	e.prepared.stateScript
-].filter((e) => e.length > 0).join("\n    "), Hn = (e) => {
-	let t = e.indexOf("?");
-	return t === -1 ? {
-		pathname: e || "/",
-		search: ""
-	} : {
-		pathname: e.slice(0, t) || "/",
-		search: e.slice(t)
-	};
-}, Un = /Could not find required `intl` object/, Wn = "__voltro_i18n_instances__", Gn = (e = globalThis) => {
+}, Pi = /Could not find required `intl` object/, Fi = "__voltro_i18n_instances__", Ii = (e = globalThis) => {
 	try {
-		let t = e[Wn]?.records;
+		let t = e[Fi]?.records;
 		return t === void 0 || t.length === 0 ? void 0 : {
 			instances: t.length,
 			reactIntlCopies: new Set(t.map((e) => e.intlProvider)).size,
@@ -1375,7 +2018,7 @@ import {
 	} catch {
 		return;
 	}
-}, Kn = (e, t) => [
+}, Li = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1393,7 +2036,7 @@ import {
 	"  versions on disk; this counts instances in the running process, and one",
 	"  file loaded down two paths is two instances.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), qn = (e, t) => [
+].join("\n"), Ri = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1409,7 +2052,7 @@ import {
 	"  direct import can land on a second copy that this count does not see —",
 	"  it counts what @voltro/i18n is bound to.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Jn = (e) => [
+].join("\n"), zi = (e) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider> — the framework`,
@@ -1425,37 +2068,37 @@ import {
 	"  Do NOT use `pnpm ls` to rule that out: it lists versions on disk, and",
 	"  the duplication here is of module instances in one process.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Yn = (e, t, n, r = Gn()) => {
+].join("\n"), Bi = (e, t, n, r = Ii()) => {
 	if (!t) return;
 	let i = String(e?.message ?? e);
-	if (Un.test(i)) return r === void 0 ? Jn(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Kn(n, r) : qn(n, r);
-}, Xn = "<div id=\"root\"></div>", Zn = "<div id=\"root\">", Qn = "</div>", $n = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, er = /\bsrc=["']([^"']+)["']/i, tr = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, nr = (e) => {
-	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace($n, (e) => {
-		let r = er.exec(e)?.[1];
+	if (Pi.test(i)) return r === void 0 ? zi(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Li(n, r) : Ri(n, r);
+}, Vi = "<div id=\"root\"></div>", Hi = "<div id=\"root\">", Ui = "</div>", Wi = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, Gi = /\bsrc=["']([^"']+)["']/i, Ki = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, qi = (e) => {
+	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace(Wi, (e) => {
+		let r = Gi.exec(e)?.[1];
 		return r === void 0 || t(r) ? e : (n.push(r), "");
 	});
-	e.inlineModuleScriptsAsync && (r = r.replace(tr, "<script async$1>"));
-	let i = r.indexOf(Xn);
-	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Xn}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
+	e.inlineModuleScriptsAsync && (r = r.replace(Ki, "<script async$1>"));
+	let i = r.indexOf(Vi);
+	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Vi}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
 	return {
-		head: `${r.slice(0, i)}${Zn}`,
-		tail: `${Qn}${r.slice(i + 21)}`,
+		head: `${r.slice(0, i)}${Hi}`,
+		tail: `${Ui}${r.slice(i + 21)}`,
 		bootstrapModules: n
 	};
-}, rr = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), ir = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), ar = (e, t) => {
-	let n = [t.timeZone === void 0 ? "" : ` data-voltro-tz="${ir(t.timeZone)}"`, t.renderedAt === void 0 ? "" : ` data-voltro-now="${t.renderedAt}"`].join("");
-	return e.replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${ir(t.lang)}"${n}`);
-}, or = (e) => ar(rr(e.head, e.headInjection), e.documentAttrs), sr = (e) => {
+}, Ji = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), Yi = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), Xi = (e, t) => {
+	let n = [t.timeZone === void 0 ? "" : ` data-voltro-tz="${Yi(t.timeZone)}"`, t.renderedAt === void 0 ? "" : ` data-voltro-now="${t.renderedAt}"`].join("");
+	return e.replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${Yi(t.lang)}"${n}`);
+}, Zi = (e) => Xi(Ji(e.head, e.headInjection), e.documentAttrs), Qi = (e) => {
 	let { res: t, shell: n, documentAttrs: r, headInjection: i } = e, a = null, o = !1, s = !1, c = () => {
 		if (s || !o || a === null) return;
 		s = !0, t.statusCode = e.statusCode ?? 200;
 		for (let [n, r] of Object.entries(e.headers ?? {})) t.setHeader(n, r);
-		t.flushHeaders?.(), t.write(or({
+		t.flushHeaders?.(), t.write(Zi({
 			head: n.head,
 			headInjection: i(a.meta),
 			documentAttrs: r
 		}));
-		let c = new he();
+		let c = new Je();
 		c.pipe(t, { end: !1 }), c.on("end", () => {
 			t.end(n.tail);
 		}), a.stream.pipe(c);
@@ -1480,16 +2123,16 @@ import {
 		return;
 	}
 	c();
-}, cr = (e) => Array.isArray(e.preload) && e.preload.length > 0, lr = (e, t) => typeof e == "string" ? {
+}, $i = (e) => Array.isArray(e.preload) && e.preload.length > 0, ea = (e, t) => typeof e == "string" ? {
 	tag: e,
 	input: {}
 } : {
 	tag: e.tag,
 	input: e.input?.(t) ?? {}
-}, ur = async (e) => {
+}, ta = async (e) => {
 	let { pageMod: t, params: n, query: r, apiName: i, seed: a, seedFailure: o, onError: s } = e;
-	if (cr(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
-		let { tag: t, input: c } = lr(e, n);
+	if ($i(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
+		let { tag: t, input: c } = ea(e, n);
 		try {
 			a(i, t, c, await r(t, c));
 		} catch (e) {
@@ -1499,62 +2142,62 @@ import {
 			}, e);
 		}
 	}
-}, dr = (e) => a.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : o.test(e) || l.test(e) || i.test(e), fr = /* @__PURE__ */ new Set([
+}, na = (e) => l.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : i.test(e) || c.test(e) || s.test(e), ra = /* @__PURE__ */ new Set([
 	"node_modules",
 	"dist",
 	".framework",
 	".git"
-]), pr = async (e) => {
+]), ia = async (e) => {
 	let t = [], n = async (e) => {
 		let r;
 		try {
-			r = await M.readdir(e, { withFileTypes: !0 });
+			r = await V.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
 		for (let i of r) if (!(i.name.startsWith(".") && i.isDirectory())) {
 			if (i.isDirectory()) {
-				if (fr.has(i.name)) continue;
-				await n(O(e, i.name));
-			} else dr(i.name) && t.push(O(e, i.name));
+				if (ra.has(i.name)) continue;
+				await n(I(e, i.name));
+			} else na(i.name) && t.push(I(e, i.name));
 		}
 	};
 	return await n(e), t.sort();
-}, mr = async (e) => {
-	let t = pe("sha1");
-	for (let n of await pr(e)) {
+}, aa = async (e) => {
+	let t = Oe("sha1");
+	for (let n of await ia(e)) {
 		t.update(n.slice(e.length)), t.update("\0");
 		try {
-			t.update(await M.readFile(n));
+			t.update(await V.readFile(n));
 		} catch {}
 		t.update("\0");
 	}
 	try {
-		t.update(await M.readFile(O(e, "rpcGroup.generated.ts")));
+		t.update(await V.readFile(I(e, "rpcGroup.generated.ts")));
 	} catch {}
 	return t.digest("hex");
-}, hr = async (e) => {
+}, oa = async (e) => {
 	if (e.length === 0) return;
 	let t = [];
-	for (let n of [...e].sort()) t.push(await mr(n));
-	return pe("sha1").update(t.join("\0")).digest("hex");
-}, gr = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", _r = ["middleware.ts", "middleware.tsx"], vr = (e) => {
+	for (let n of [...e].sort()) t.push(await aa(n));
+	return Oe("sha1").update(t.join("\0")).digest("hex");
+}, sa = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", ca = ["middleware.ts", "middleware.tsx"], la = (e) => {
 	let t = e.replace(/\/+$/, "");
 	return t === "" ? "/" : t;
 }, Z = (e, t) => {
-	let n = vr(e);
+	let n = la(e);
 	if (n === "/") return !0;
-	let r = vr(t);
+	let r = la(t);
 	return r === n || r.startsWith(`${n}/`);
-}, yr = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, br = (e, t) => {
+}, ua = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, da = (e, t) => {
 	if (e === void 0) return !0;
-	let n = yr(e.under), r = e.routes ?? [];
+	let n = ua(e.under), r = e.routes ?? [];
 	return n.length === 0 && r.length === 0 || r.includes(t) || n.some((e) => Z(e, t)) ? !(e.except ?? []).some((e) => e === t || Z(e, t)) : !1;
-}, xr = (e) => {
+}, fa = (e) => {
 	if (e?.assets !== !0) return [];
-	let t = yr(e.under);
+	let t = ua(e.under);
 	return t.length > 0 ? t : (e.routes ?? []).length > 0 ? [] : ["/"];
-}, Sr = (e, t) => xr(e).some((e) => Z(e, t)) ? !(e?.except ?? []).some((e) => Z(e, t)) : !1, Cr = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? Sr(e.match, t.pathname) : br(e.match, t.route))?.middleware, wr = (e, t) => {
+}, pa = (e, t) => fa(e).some((e) => Z(e, t)) ? !(e?.except ?? []).some((e) => Z(e, t)) : !1, ma = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? pa(e.match, t.pathname) : da(e.match, t.route))?.middleware, ha = (e, t) => {
 	let n = [];
 	for (let { exportName: r, middleware: i } of e) {
 		let e = i.match;
@@ -1562,13 +2205,13 @@ import {
 			kind: "dead-matcher",
 			message: `\`${r}\` matches routes: ['${i}'], which is not a route in this app. Route patterns are spelled as the router spells them, e.g. \`/notes/[id]\`.`
 		});
-		if (e?.assets !== !0) for (let [i, a] of [["under", yr(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => Z(e, t)) || n.push({
+		if (e?.assets !== !0) for (let [i, a] of [["under", ua(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => Z(e, t)) || n.push({
 			kind: "dead-matcher",
 			message: `\`${r}\` matches ${i}: ['${e}'], which covers no route in this app. ` + (i === "except" ? "An `except` that excludes nothing is a rule that reads as active and is not." : "Add `assets: true` if you meant a path the router does not serve.")
 		});
 	}
 	for (let r = 0; r < e.length; r += 1) for (let i = r + 1; i < e.length; i += 1) {
-		let a = e[r], o = e[i], s = t.find((e) => br(a.middleware.match, e) && br(o.middleware.match, e));
+		let a = e[r], o = e[i], s = t.find((e) => da(a.middleware.match, e) && da(o.middleware.match, e));
 		if (s !== void 0) {
 			n.push({
 				kind: "overlap",
@@ -1577,7 +2220,7 @@ import {
 			continue;
 		}
 		{
-			let e = xr(a.middleware.match), t = xr(o.middleware.match), r = e.some((e) => t.some((t) => Z(e, t) || Z(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => Z(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => Z(t, e)));
+			let e = fa(a.middleware.match), t = fa(o.middleware.match), r = e.some((e) => t.some((t) => Z(e, t) || Z(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => Z(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => Z(t, e)));
 			r && !i && n.push({
 				kind: "overlap",
 				message: `\`${a.exportName}\` and \`${o.exportName}\` both declare \`assets: true\` over overlapping paths. A non-page request would match both, and there is no route to tell them apart.`
@@ -1585,10 +2228,10 @@ import {
 		}
 	}
 	return n;
-}, Tr = (e, t) => {
-	let r = wr(e, t);
+}, ga = (e, t) => {
+	let r = ha(e, t);
 	if (r.length !== 0) throw n(`middleware.ts: ${r.length} problem(s)\n\n` + r.map((e) => `  • ${e.message}`).join("\n\n"));
-}, Er = (e) => {
+}, _a = (e) => {
 	let t = {};
 	if (!e) return t;
 	for (let n of e.split(";")) {
@@ -1602,20 +2245,20 @@ import {
 		}
 	}
 	return t;
-}, Dr = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), Or = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, kr = (e) => e.httpOnly === void 0 && Or.test(e.name), Ar = (e) => {
+}, va = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), ya = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, ba = (e) => e.httpOnly === void 0 && ya.test(e.name), xa = (e) => {
 	let t = [`${e.name}=${encodeURIComponent(e.value)}`];
 	return t.push(`Path=${e.path ?? "/"}`), e.maxAge !== void 0 && t.push(`Max-Age=${Math.trunc(e.maxAge)}`), e.httpOnly !== !1 && t.push("HttpOnly"), e.secure === !0 && t.push("Secure"), t.push(`SameSite=${e.sameSite ?? "lax"}`), t.join("; ");
-}, jr = (e) => e.length === 0 ? {} : { "set-cookie": e.map(Ar) }, Mr = async (e, t = (e) => import(L(e).href)) => {
-	for (let r of _r) {
+}, Sa = (e) => e.length === 0 ? {} : { "set-cookie": e.map(xa) }, Ca = async (e, t = (e) => import(G(e).href)) => {
+	for (let r of ca) {
 		let i;
 		try {
-			i = await t(O(e, r));
+			i = await t(I(e, r));
 		} catch (e) {
 			let t = e?.code;
 			if (t === "ERR_MODULE_NOT_FOUND" || t === "MODULE_NOT_FOUND") continue;
 			throw e;
 		}
-		let a = Object.entries(i ?? {}), o = a.filter((e) => gr(e[1])).map(([e, t]) => ({
+		let a = Object.entries(i ?? {}), o = a.filter((e) => sa(e[1])).map(([e, t]) => ({
 			exportName: e,
 			middleware: t
 		}));
@@ -1633,50 +2276,129 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		return o;
 	}
 	return [];
-}, Nr = async (e, t, n) => {
+}, wa = async (e, t, n) => {
 	let r = {
 		headers: t.headers,
 		cookies: t.cookies,
-		setCookies: []
+		setCookies: [],
+		responseHeaders: {}
 	};
 	if (e === void 0) return r;
 	let i = await e.run(t);
 	if (!i) return r;
 	let a = i.setCookies ?? [];
-	if (n !== void 0) for (let e of a) kr(e) && n(e);
+	if (n !== void 0) for (let e of a) ba(e) && n(e);
 	let o = i.headers ? {
 		...t.headers,
 		...i.headers
-	} : { ...t.headers };
+	} : { ...t.headers }, s = i.responseHeaders ?? {}, c = i.cspNonce === void 0 ? {} : { cspNonce: i.cspNonce };
 	if (a.length === 0) return {
 		headers: o,
 		cookies: t.cookies,
-		setCookies: a
+		setCookies: a,
+		responseHeaders: s,
+		...c
 	};
-	let s = { ...t.cookies };
-	for (let e of a) e.maxAge !== void 0 && e.maxAge <= 0 ? delete s[e.name] : s[e.name] = e.value;
-	return i.headers?.cookie === void 0 && (o.cookie = Dr(s)), {
+	let l = { ...t.cookies };
+	for (let e of a) e.maxAge !== void 0 && e.maxAge <= 0 ? delete l[e.name] : l[e.name] = e.value;
+	return i.headers?.cookie === void 0 && (o.cookie = va(l)), {
 		headers: o,
-		cookies: s,
-		setCookies: a
+		cookies: l,
+		setCookies: a,
+		responseHeaders: s,
+		...c
+	};
+}, Ta = /* @__PURE__ */ new Set(["voltro:locale"]), Ea = /* @__PURE__ */ new Set(["authorization", "cookie"]), Da = (e) => {
+	let t = e.split(";").map((e) => e.trim()).filter((e) => {
+		let t = e.indexOf("="), n = (t === -1 ? e : e.slice(0, t)).trim();
+		return Ta.has(n);
+	});
+	return t.length > 0 ? t.join("; ") : void 0;
+}, Oa = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e)) if (!n.startsWith("x-voltro-")) {
+		if (Ea.has(n)) {
+			if (n === "cookie") {
+				let e = Da(r);
+				e !== void 0 && (t.cookie = e);
+			}
+			continue;
+		}
+		t[n] = r;
+	}
+	return t;
+}, ka = (e) => {
+	let t = {};
+	for (let [n, r] of Object.entries(e)) Ta.has(n) && (t[n] = r);
+	return t;
+}, Aa = ["cookie", "authorization"], ja = (e) => Aa.includes(e) || e.startsWith("x-voltro-"), Ma = ["voltro:locale"], Na = class extends Error {
+	constructor(e, t, n) {
+		super(`[voltro] ppr page '${n}': the SHELL render read the ${e} '${t}'. A ppr shell is CACHED and served to every visitor, so it must be computed without credentials — there is no way to prove request-independence by inspection, so the read itself is the error. Move this read into a deferred hole (the second argument of defer(), which runs per request with the full context), or drop ppr and use renderMode 'ssr'.`), this.name = "PprShellCredentialAccessError";
+	}
+}, Pa = (e, t) => new Proxy({ ...e }, { get(e, n, r) {
+	if (typeof n == "string" && ja(n)) throw new Na("header", n, t);
+	return Reflect.get(e, n, r);
+} }), Fa = (e, t) => new Proxy({ ...e }, { get(e, n, r) {
+	if (typeof n == "string" && !Ma.includes(n) && !(n in Object.prototype)) throw new Na("cookie", n, t);
+	return Reflect.get(e, n, r);
+} }), Ia = Symbol.for("@voltro/cli/ppr:metrics"), La = () => {
+	let e = globalThis;
+	return e[Ia] ??= {
+		shellServes: 0,
+		holePasses: 0,
+		holeSettles: 0,
+		holeErrors: 0,
+		holeLatencyMsLast: 0,
+		holeLatencyMsMax: 0
 	};
-}, Q = z({ scope: "voltro:dev:web" }), Pr = z({ scope: "vite" }), Fr = await (async () => {
+}, Ra = async (e) => {
+	let t = La();
+	t.holePasses += 1;
+	let n = Date.now(), r = () => e.res.destroyed === !0 || e.res.writableEnded === !0;
 	try {
-		let e = O(D(te(import.meta.url)), "..", "package.json"), t = await M.readFile(e, "utf8");
+		let n = await e.loader(e.ctx), i = e.helpers.prepareDeferredLoaderData(n, "page"), a = i.deferredIds;
+		if (a === void 0) {
+			r() || e.res.end();
+			return;
+		}
+		let o = i.renderData;
+		await Promise.all(Object.entries(a).map(async ([n, i]) => {
+			let a = await o[n];
+			t.holeSettles += 1, !r() && e.res.write(`<script>${e.helpers.deferredSettleScript(i, a)}<\/script>`);
+		}));
+	} catch (n) {
+		t.holeErrors += 1, e.log.warn("ppr hole pass failed — holes stay on their fallbacks", { page: e.page }, n);
+	} finally {
+		let i = Date.now() - n;
+		t.holeLatencyMsLast = i, i > t.holeLatencyMsMax && (t.holeLatencyMsMax = i), r() || e.res.end();
+	}
+}, za = (e, t) => {
+	if (e.deferredSegmentIds !== void 0) throw Error(`[voltro] ppr page '${t}': a LAYOUT loader in its chain uses defer(). ppr appends holes for the PAGE loader only — move the deferred field into the page loader, or return the value directly from the layout.`);
+}, Q = K({ scope: "voltro:dev:web" }), Ba = K({ scope: "vite" }), Va = await (async () => {
+	try {
+		let e = I(F(W(import.meta.url)), "..", "package.json"), t = await V.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), Ir = async () => {
+})(), Ha = (e, t) => {
+	let n;
+	for (let r of e) {
+		if (!r.hasNotFound) continue;
+		let e = "/" + r.dir.split("/").filter((e) => e !== "" && !/^\(.*\)$/.test(e)).join("/"), i = e === "/" ? "/" : e;
+		i !== "/" && !(t === i || t.startsWith(i + "/")) || (n === void 0 || r.dir.length > n.dir.length) && (n = r);
+	}
+	return n;
+}, Ua = async () => {
 	try {
-		let e = D(te(import.meta.url)), t = A(e, "..", "..", "devtools");
-		if (j(O(t, "package.json"))) return t;
-		let n = A(e, "..", "..", "..", "devtools");
-		return j(O(n, "package.json")) ? n : null;
+		let e = F(W(import.meta.url)), t = R(e, "..", "..", "devtools");
+		if (B(I(t, "package.json"))) return t;
+		let n = R(e, "..", "..", "..", "devtools");
+		return B(I(n, "package.json")) ? n : null;
 	} catch {
 		return null;
 	}
-}, Lr = (e, t) => e.disableDevtools || !t ? [] : [
+}, Wa = (e, t) => e.disableDevtools || !t ? [] : [
 	"",
 	"// Dev-only in-page devtools overlay. The `import.meta.env.DEV` guard is a",
 	"// compile-time constant, so prod builds strip this whole `if` block — the",
@@ -1686,87 +2408,85 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"  await import('@voltro/devtools/styles.css')",
 	"  Devtools = (await import('@voltro/devtools')).VoltroDevtools",
 	"}"
-], Rr = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], zr = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], Br = (e) => e.sentry ? [
+], Ga = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], Ka = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], qa = (e) => e.sentry ? [
 	"",
 	"// Browser-side Sentry (frontend half of the deep integration). Errors +",
 	"// browser rpc spans flow to Sentry, sharing the server transactions' trace.",
 	`await initSentryBrowser(${JSON.stringify(e.sentry)})`
-] : [], Vr = (e) => e.env ? ["import './env.public'"] : [], Hr = (e) => {
-	let t = [], n = A(e);
+] : [], Ja = (e) => e.env ? ["import './env.public'"] : [], Ya = (e) => {
+	let t = [], n = R(e);
 	for (;;) {
-		j(O(n, "pnpm-workspace.yaml")) && t.push(n);
-		let e = D(n);
+		B(I(n, "pnpm-workspace.yaml")) && t.push(n);
+		let e = F(n);
 		if (e === n) break;
 		n = e;
 	}
 	return t;
-}, Ur = b, Wr = (e) => {
+}, Xa = P, Za = (e) => {
 	if (/\/node_modules\/(?:\.pnpm\/[^/]+\/node_modules\/)?(?:react|react-dom|scheduler)\//.test(e)) return "react";
-	let t = /\/([^/]+)\.island\.tsx?$/.exec(e);
-	if (t) return `island-${t[1]}`;
-}, Gr = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Kr = (e) => e.startsWith("(") && e.endsWith(")"), qr = (e) => e.filter((e) => !Kr(e)), Jr = (e) => {
-	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Kr(e));
+}, Qa = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, $a = (e) => e.startsWith("(") && e.endsWith(")"), eo = (e) => e.filter((e) => !$a(e)), to = (e) => {
+	let t = e.replace(o, "").split("/").filter(Boolean).filter((e) => !$a(e));
 	return t.length === 0 ? "/" : "/" + t.join("/");
-}, Yr = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, $ = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, Xr = async (e) => {
+}, no = (e) => `${e.replace(o, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, $ = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, ro = async (e) => {
 	let t = [], n = [], r = async (e, i) => {
-		let a = [];
+		let s = [];
 		try {
-			a = await M.readdir(e, { withFileTypes: !0 });
+			s = await V.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
-		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Ur(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
-		if (l.some((e) => s.has(e))) {
+		let c = s.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = s.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Xa(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
+		if (l.some((e) => a.has(e))) {
 			let t = u.has("layout.tsx"), r = !1;
 			if (t) try {
-				let t = await M.readFile(O(e, "layout.tsx"), "utf8");
-				r = Gr.test(t);
+				let t = await V.readFile(I(e, "layout.tsx"), "utf8");
+				r = Qa.test(t);
 			} catch {}
 			n.push({
 				dir: d,
 				chain: i,
-				contributesToUrl: i.length === 0 || !Kr(i[i.length - 1]),
+				contributesToUrl: i.length === 0 || !$a(i[i.length - 1]),
 				hasLayout: t,
 				hasLayoutLoader: r,
 				hasError: u.has("error.tsx"),
 				hasPending: u.has("loading.tsx"),
 				hasNotFound: u.has("not-found.tsx"),
-				specialFiles: l.filter((e) => s.has(e))
+				specialFiles: l.filter((e) => a.has(e))
 			});
 		}
 		for (let e of l) {
-			if (!c.test(e)) continue;
+			if (!o.test(e)) continue;
 			let n = d ? `${d}/${e}` : e;
 			t.push({
 				file: n,
-				pattern: Jr(n),
-				ident: Yr(n),
+				pattern: to(n),
+				ident: no(n),
 				dirChain: i
 			});
 		}
-		for (let t of o) await r(O(e, t), [...i, t]);
+		for (let t of c) await r(I(e, t), [...i, t]);
 	};
 	await r(e, []), t.sort((e, t) => e.file < t.file ? -1 : 1);
 	let i = /* @__PURE__ */ new Set();
 	for (let e of t) for (let t = e.dirChain.length; t >= 0; t--) i.add(e.dirChain.slice(0, t).join("/"));
-	let a = [], o = [];
-	for (let { specialFiles: e, ...t } of n) i.has(t.dir) ? a.push(t) : o.push({
+	let s = [], c = [];
+	for (let { specialFiles: e, ...t } of n) i.has(t.dir) ? s.push(t) : c.push({
 		dir: t.dir,
 		files: e
 	});
 	return {
 		pages: t,
-		dirs: a,
-		orphanedSpecials: o
+		dirs: s,
+		orphanedSpecials: c
 	};
-}, Zr = (e, t) => {
+}, io = (e, t) => {
 	let n = [];
 	for (let r = 0; r <= t.length; r++) {
 		let i = t.slice(0, r).join("/"), a = e.find((e) => e.dir === i);
 		a && n.push(a);
 	}
 	return n;
-}, Qr = async (e) => {
+}, ao = async (e) => {
 	let { entries: t, loadLayout: n, loadError: r, loadPending: i, ctx: a } = e, o = {};
 	return {
 		chain: await Promise.all(t.map(async (e, t) => {
@@ -1790,10 +2510,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		})),
 		segmentLoaderData: o
 	};
-}, $r = (e) => {
-	let t = qr(e);
+}, oo = (e) => {
+	let t = eo(e);
 	return t.length === 0 ? "" : "/" + t.join("/");
-}, ei = [
+}, so = [
 	"// Hot-reload bridge: keep SSR-injected <link rel=\"stylesheet\"> tags",
 	"// in sync with Vite's CSS HMR. Without this, edits to .css files",
 	"// only update the JS-injected <style> overlay; the underlying <link>",
@@ -1886,7 +2606,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"    _vdtErrorStart('Build error')",
 	"  })",
 	"}"
-].join("\n"), ti = (e) => {
+].join("\n"), co = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -1895,8 +2615,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: t,
 		priority: n
 	};
-}, ni = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = ti(e.pattern);
+}, lo = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = co(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -1905,7 +2625,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: n,
 		priority: r
 	};
-}).slice().sort((e, t) => e.priority - t.priority), ri = (e, t) => {
+}).slice().sort((e, t) => e.priority - t.priority), uo = (e, t) => {
 	for (let n of t) {
 		let t = n.regex.exec(e);
 		if (!t) continue;
@@ -1917,9 +2637,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		};
 	}
 	return null;
-}, ii = J, ai = async (e) => {
+}, fo = st, po = async (e) => {
 	try {
-		let t = await import(L(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
+		let t = await import(G(I(e, "app.config.ts")).href), n = t.default?.port, i = r({
 			kind: "api",
 			configPort: typeof n == "number" ? n : void 0,
 			env: {}
@@ -1933,7 +2653,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "api",
 		env: {}
 	}).port };
-}, oi = (e, t) => ({
+}, mo = (e, t) => ({
 	name: e,
 	pkg: t.package,
 	browserWsUrl: t.url,
@@ -1941,7 +2661,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	...t.serverUrl ? { serverOrigin: t.serverUrl } : {},
 	...t.headers ? { headers: t.headers } : {},
 	...t.authHeaders ? { hasAuthHeaders: !0 } : {}
-}), si = (e, t, n) => {
+}), ho = (e, t, n) => {
 	let r = t.transport?.wsPath ?? n.wsPath;
 	return {
 		name: e,
@@ -1953,7 +2673,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		...t.headers ? { headers: t.headers } : {},
 		...t.authHeaders ? { hasAuthHeaders: !0 } : {}
 	};
-}, ci = (e) => {
+}, go = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (n.proxyTarget === void 0) continue;
@@ -1961,43 +2681,43 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		if (e) throw Error(`[voltro] api ${JSON.stringify(n.name)} and ${JSON.stringify(e)} both resolve the same-origin WS path ${JSON.stringify(n.browserWsUrl)}. A custom transport.wsPath must be unique per origin (one api per origin may use a fixed path). Give each a distinct wsPath, or drop the override to use the default /ws/<name>.`);
 		t.set(n.browserWsUrl, n.name);
 	}
-}, li = async (e, t) => {
+}, _o = async (e, t) => {
 	let n = Object.entries(t.apis ?? {}), r = [];
 	for (let [t, i] of n) {
 		if (i.url) {
-			r.push(oi(t, i));
+			r.push(mo(t, i));
 			continue;
 		}
-		let n = await ii(e, i.package);
+		let n = await fo(e, i.package);
 		if (!n) throw Error(`[voltro dev] api ${JSON.stringify(t)} (package ${JSON.stringify(i.package)}) is not a workspace dep and has no \`url\` set in app.config.ts. External apis need an explicit \`url\` because the framework can't discover their dev port.`);
-		r.push(si(t, i, await ai(n)));
+		r.push(ho(t, i, await po(n)));
 	}
-	return ci(r), r;
-}, ui = (e) => {
+	return go(r), r;
+}, vo = (e) => {
 	if (!(!/^wss?:\/\//.test(e) && !/^https?:\/\//.test(e))) try {
 		let t = new URL(e);
 		return t.protocol = t.protocol === "wss:" || t.protocol === "https:" ? "https:" : "http:", `${t.protocol}//${t.host}`;
 	} catch {
 		return;
 	}
-}, di = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, fi = (e) => process.env[di(e)] ?? process.env.VOLTRO_API_ORIGIN, pi = (e, t) => {
+}, yo = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, bo = (e) => process.env[yo(e)] ?? process.env.VOLTRO_API_ORIGIN, xo = (e, t) => {
 	if (!e) return;
-	let n = fi(e.name) ?? e.serverOrigin;
+	let n = bo(e.name) ?? e.serverOrigin;
 	if (n) {
-		let e = ui(n);
+		let e = vo(n);
 		if (e) return e;
 	}
 	if (t?.allowDevProxy && e.proxyTarget) {
-		let t = ui(e.proxyTarget);
+		let t = vo(e.proxyTarget);
 		if (t) return t;
 	}
-	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return ui(e.browserWsUrl);
-}, mi = (e, t, n) => {
+	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return vo(e.browserWsUrl);
+}, So = (e, t, n) => {
 	if (!e) {
 		if (n?.apiName === void 0) return;
 		let e = n.apiName;
 		return async () => {
-			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${di(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
+			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${yo(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
 		};
 	}
 	return async (r, i) => {
@@ -2020,7 +2740,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			});
 		} catch (t) {
 			let i = t?.cause?.code ?? String(t?.message ?? t);
-			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${di(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
+			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${yo(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
 		}
 		if (!o.ok) throw Error(`[loader.query] ${r}: HTTP ${o.status} ${await o.text()}`);
 		let s = await o.json();
@@ -2050,8 +2770,22 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		}
 		if (u) return l;
 	};
-}, hi = async (e, t, n, r = {}) => {
-	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = j(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await Ir() !== null, s = t.theme === "system" ? [
+}, Co = (e, t) => {
+	let n = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppGroup`, r = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppDescriptors`, i = e.map((e) => `import { appGroup as ${n(e.name)}, appDescriptors as ${r(e.name)} } from '${e.pkg}/rpcGroup'`);
+	e.some((e) => e.hasAuthHeaders) && (i.push(`import __voltroAppConfig from '${t}'`), i.push("const __voltroAuthHeaders = (__voltroAppConfig as { readonly apis?: Record<string, { readonly authHeaders?: () => Record<string, string> | Promise<Record<string, string>> }> }).apis"));
+	let a = (e) => {
+		let t = [`group: ${n(e.name)}`];
+		return t.push(`descriptors: ${r(e.name)}`), t.push(`wsUrl: ${JSON.stringify(e.browserWsUrl)}`), e.hasAuthHeaders ? t.push(`headers: __voltroAuthHeaders?.[${JSON.stringify(e.name)}]?.authHeaders`) : e.headers && t.push(`headers: ${JSON.stringify(e.headers)}`), t;
+	};
+	return {
+		imports: i,
+		entryLines: e.map((e) => `    ${JSON.stringify(e.name)}: { ${a(e).join(", ")} },`),
+		providerEntryLines: e.map((e) => `    { name: ${JSON.stringify(e.name)}, ${a(e).join(", ")} },`)
+	};
+}, wo = async (e, t, n, r = {}) => {
+	let i = t.title ?? t.name ?? "app";
+	An(e);
+	let a = await En(e, t.fonts), o = a === null ? [] : [...a.preloads.map((e) => `    <link rel="preload" as="font" type="font/${e.endsWith(".woff2") ? "woff2" : e.endsWith(".woff") ? "woff" : e.endsWith(".otf") ? "otf" : "ttf"}" href="${e}" crossorigin />`), `    <style data-voltro-fonts>${a.css}</style>`], s = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", c = B(I(e, "node_modules", "@voltro", "devtools", "package.json")) || await Ua() !== null, l = t.theme === "system" ? [
 		"    <script>",
 		"      (function () {",
 		"        var root = document.documentElement",
@@ -2072,7 +2806,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"        }",
 		"      })()",
 		"    <\/script>"
-	].join("\n") : "", c = t.timeZone === "viewer" ? [
+	].join("\n") : "", u = t.timeZone === "viewer" ? [
 		"    <script>",
 		"      (function () {",
 		"        try {",
@@ -2084,17 +2818,18 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"        } catch (e) {}",
 		"      })()",
 		"    <\/script>"
-	].join("\n") : "", l = [
+	].join("\n") : "", d = [
 		"<!doctype html>",
 		"<!-- GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot. -->",
-		`<html lang="en"${a}>`,
+		`<html lang="en"${s}>`,
 		"  <head>",
 		"    <meta charset=\"UTF-8\" />",
 		"    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />",
 		`    <title>${i}</title>`,
 		"    <link rel=\"icon\" type=\"image/svg+xml\" href=\"/favicon.svg\" />",
-		...s ? [s] : [],
-		...c ? [c] : [],
+		...o,
+		...l ? [l] : [],
+		...u ? [u] : [],
 		"  </head>",
 		"  <body>",
 		"    <div id=\"root\"></div>",
@@ -2102,75 +2837,70 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"  </body>",
 		"</html>",
 		""
-	].join("\n"), u = O(e, "src", "pages"), { pages: d, dirs: f, orphanedSpecials: p } = await Xr(u);
-	await y(u, d);
-	for (let e of p) Q.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
-	let m = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppGroup`, h = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppDescriptors`, g = n.map((e) => `import { appGroup as ${m(e.name)}, appDescriptors as ${h(e.name)} } from '${e.pkg}/rpcGroup'`);
-	n.some((e) => e.hasAuthHeaders) && (g.push("import __voltroAppConfig from '../app.config'"), g.push("const __voltroAuthHeaders = (__voltroAppConfig as { readonly apis?: Record<string, { readonly authHeaders?: () => Record<string, string> | Promise<Record<string, string>> }> }).apis"));
-	let _ = n.map((e) => {
-		let t = [`group: ${m(e.name)}`];
-		return t.push(`descriptors: ${h(e.name)}`), t.push(`wsUrl: ${JSON.stringify(e.browserWsUrl)}`), e.hasAuthHeaders ? t.push(`headers: __voltroAuthHeaders?.[${JSON.stringify(e.name)}]?.authHeaders`) : e.headers && t.push(`headers: ${JSON.stringify(e.headers)}`), `    ${JSON.stringify(e.name)}: { ${t.join(", ")} },`;
-	}), v, b, x;
-	if (d.length > 0) {
-		let n = d.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
-		for (let e of f) {
+	].join("\n"), f = I(e, "src", "pages"), { pages: p, dirs: m, orphanedSpecials: h } = await ro(f);
+	await b(f, p);
+	for (let e of h) Q.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
+	let { imports: g, entryLines: _ } = Co(n, "../app.config"), v, y, x;
+	if (p.length > 0) {
+		let n = p.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
+		for (let e of m) {
 			let t = e.dir === "" ? "../src/pages" : `../src/pages/${e.dir}`;
 			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${$(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${$(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${$(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${$(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${$(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
 		}
-		let i = d.map((e) => {
-			let t = Zr(f, e.dirChain).map((e) => {
+		let i = p.map((e) => {
+			let t = io(m, e.dirChain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout:  refs.layouts[${n}]`), e.hasLayoutLoader && t.push(`loader:  refs.layoutLoaders[${n}]`), e.hasError && t.push(`Error:   refs.errors[${n}]`), e.hasPending && t.push(`Pending: refs.pendings[${n}]`), `      { ${t.join(", ")} }`;
 			}).join(",\n");
 			return `    makePageRoute(${JSON.stringify(e.pattern)}, ${t.length > 0 ? `[\n${t},\n    ]` : "undefined"}),`;
-		}), a = f.filter((e) => e.hasNotFound).map((e) => {
-			let t = $r(e.chain), n = Zr(f, e.chain).map((e) => {
+		}), a = m.filter((e) => e.hasNotFound).map((e) => {
+			let t = oo(e.chain), n = io(m, e.chain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout: refs.layouts[${n}]`), e.hasError && t.push(`Error:  refs.errors[${n}]`), `        { ${t.join(", ")} }`;
 			}).join(",\n"), r = n.length > 0 ? `\n      chain: [\n${n},\n      ],` : "";
 			return `    {\n      prefix: ${JSON.stringify(t)},\n      Component: refs.notFounds[${JSON.stringify(e.dir)}],${r}\n    },`;
-		}), s = [], c = [], l = [], u = [], p = [], m = [];
-		for (let e of f) {
+		}), o = [], s = [], l = [], u = [], d = [], f = [];
+		for (let e of m) {
 			let t = e.dir === "" ? "../src/pages/layout.tsx" : `../src/pages/${e.dir}/layout.tsx`, n = e.dir === "" ? "../src/pages/error.tsx" : `../src/pages/${e.dir}/error.tsx`, r = e.dir === "" ? "../src/pages/loading.tsx" : `../src/pages/${e.dir}/loading.tsx`, i = e.dir === "" ? "../src/pages/not-found.tsx" : `../src/pages/${e.dir}/not-found.tsx`, a = JSON.stringify(e.dir);
-			e.hasLayout && e.hasLayoutLoader ? (c.push(`  ${a}: ${$(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${$(e.dir, "Layout")}Mod.loader,`), s.push({
+			e.hasLayout && e.hasLayoutLoader ? (s.push(`  ${a}: ${$(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${$(e.dir, "Layout")}Mod.loader,`), o.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})) : e.hasLayout && (c.push(`  ${a}: ${$(e.dir, "Layout")},`), s.push({
+			})) : e.hasLayout && (s.push(`  ${a}: ${$(e.dir, "Layout")},`), o.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})), e.hasError && (u.push(`  ${a}: ${$(e.dir, "Error")},`), s.push({
+			})), e.hasError && (u.push(`  ${a}: ${$(e.dir, "Error")},`), o.push({
 				relPath: n,
 				kind: "error",
 				slotKey: e.dir
-			})), e.hasPending && (p.push(`  ${a}: ${$(e.dir, "Pending")},`), s.push({
+			})), e.hasPending && (d.push(`  ${a}: ${$(e.dir, "Pending")},`), o.push({
 				relPath: r,
 				kind: "pending",
 				slotKey: e.dir
-			})), e.hasNotFound && (m.push(`  ${a}: ${$(e.dir, "NotFound")},`), s.push({
+			})), e.hasNotFound && (f.push(`  ${a}: ${$(e.dir, "NotFound")},`), o.push({
 				relPath: i,
 				kind: "notFound",
 				slotKey: e.dir
 			}));
 		}
-		for (let e of d) s.push({
+		for (let e of p) o.push({
 			relPath: `../src/pages/${e.file}`,
 			kind: "page",
 			slotKey: e.pattern
 		});
-		let h = s.map((e) => `      ${JSON.stringify(e.relPath)},`), y = s.map((e, t) => {
+		let h = o.map((e) => `      ${JSON.stringify(e.relPath)},`), b = o.map((e, t) => {
 			let n = JSON.stringify(e.slotKey);
 			return e.kind === "page" ? `      if (newMods[${t}] && refs.pages[${n}] !== undefined) { refs.pages[${n}] = newMods[${t}]; changed = true }` : `      if (newMods[${t}]?.default) { refs.${e.kind === "layout" ? "layouts" : e.kind === "error" ? "errors" : e.kind === "pending" ? "pendings" : "notFounds"}[${n}] = newMods[${t}].default;${e.kind === "layout" ? ` refs.layoutLoaders[${n}] = newMods[${t}].loader;` : ""} changed = true }`;
-		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => j(O(e, "src", "locales", `${t}.ts`)) || j(O(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en";
+		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => B(I(e, "src", "locales", `${t}.ts`)) || B(I(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en", E = t.router?.viewTransitions === !0 ? " viewTransitions" : "";
 		if (S.length > 0 && !C && Q.info(`i18n: locales [${S.join(", ")}] declared with no src/locales/<code>.ts — using them for <html lang> and the resolved locale only. Add the catalogs to get <I18nProvider> wired, or keep your own i18n stack.`), S.length > 0 && !S.includes(T)) throw Error(`[voltro dev] app.config.ts: defaultLocale '${T}' must be one of locales [${S.join(", ")}]`);
-		let E = w ? [
+		let D = w ? [
 			"import { I18nProvider } from '@voltro/i18n'",
 			"import { resolveLocale } from '@voltro/i18n/server'",
 			"import { useServerRequest } from '@voltro/web'",
 			...S.map((e) => `import i18nCatalog_${e} from '../src/locales/${e}'`)
 		] : [];
-		b = [
+		y = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// Routes + per-page chain + not-found scopes assembled from src/pages/.",
 			"//",
@@ -2204,7 +2934,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"  pages:         Record<string, unknown>",
 			"} = {",
 			"  layouts: {",
-			...c,
+			...s,
 			"  },",
 			"  layoutLoaders: {",
 			...l,
@@ -2213,10 +2943,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			...u,
 			"  },",
 			"  pendings: {",
-			...p,
+			...d,
 			"  },",
 			"  notFounds: {",
-			...m,
+			...f,
 			"  },",
 			"  pages: {},",
 			"}",
@@ -2285,7 +3015,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"    ],",
 			"    (newMods: Array<Record<string, unknown> | undefined>) => {",
 			"      let changed = false",
-			...y,
+			...b,
 			"      if (changed) bump()",
 			"    },",
 			"  )",
@@ -2302,7 +3032,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"",
 			"import { useMemo, useSyncExternalStore } from 'react'",
 			"import { Router } from '@voltro/web'",
-			...E,
+			...D,
 			"import { subscribe, getVersion, buildRoutes, buildNotFounds } from './routeTable'",
 			"",
 			...w ? [
@@ -2400,10 +3130,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				"      defaultLocale={I18N_DEFAULT}",
 				"      {...published}",
 				"    >",
-				"      <Router routes={routes} notFounds={notFounds} />",
+				`      <Router routes={routes} notFounds={notFounds}${E} />`,
 				"    </I18nProvider>",
 				"  )"
-			] : ["  return <Router routes={routes} notFounds={notFounds} />"],
+			] : [`  return <Router routes={routes} notFounds={notFounds}${E} />`],
 			"}",
 			""
 		].join("\n"), x = [
@@ -2412,14 +3142,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"// resolved apis map. Side-effect only — no local component definitions —",
 			"// so downstream invalidations (user page edits) terminate at app.tsx.",
 			"",
-			...Vr(t),
+			...Ja(t),
 			"import { mount } from '@voltro/web'",
 			...g,
 			"import { App } from './app'",
 			"import { preloadCurrentRoute } from './routeTable'",
-			...zr(t),
-			...Lr(t, o),
-			...Br(t),
+			...Ka(t),
+			...Wa(t, c),
+			...qa(t),
 			"",
 			"// Preload the current route's page chunk BEFORE hydration so the first",
 			"// client render matches the SSG/SSR-prerendered HTML. Without it, a lazy",
@@ -2436,54 +3166,54 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"  apis: {",
 			..._,
 			"  },",
-			...Rr(t, o),
+			...Ga(t, c),
 			"})",
 			"",
-			ei
+			so
 		].join("\n");
-	} else v = "", b = "", x = [
+	} else v = "", y = "", x = [
 		"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 		"// The user's root component lives at ../src/App.tsx; this file imports it",
 		"// and calls mount(). Side-effect only, no component definitions, so the",
 		"// user's component file remains the Fast Refresh boundary.",
 		"",
-		...Vr(t),
+		...Ja(t),
 		"import { mount } from '@voltro/web'",
 		...g,
 		"import App from '../src/App'",
-		...zr(t),
-		...Lr(t, o),
-		...Br(t),
+		...Ka(t),
+		...Wa(t, c),
+		...qa(t),
 		"",
 		"mount(App, {",
 		"  apis: {",
 		..._,
 		"  },",
-		...Rr(t, o),
+		...Ga(t, c),
 		"})",
 		"",
-		ei
+		so
 	].join("\n");
-	let S = O(e, ".framework");
-	await M.mkdir(S, { recursive: !0 }), t.env ? await Se(S, r) : await M.rm(O(S, "env.public.ts"), { force: !0 }), await M.writeFile(O(S, "index.html"), l, "utf8"), await M.writeFile(O(S, "main.tsx"), x, "utf8"), v ? (await M.writeFile(O(S, "app.tsx"), v, "utf8"), await M.writeFile(O(S, "routeTable.ts"), b, "utf8")) : (await M.rm(O(S, "app.tsx"), { force: !0 }), await M.rm(O(S, "routeTable.ts"), { force: !0 }));
-	let C = O(e, ".gitignore"), w = "";
+	let S = I(e, ".framework");
+	await V.mkdir(S, { recursive: !0 }), t.env ? await nt(S, r) : await V.rm(I(S, "env.public.ts"), { force: !0 }), await V.writeFile(I(S, "index.html"), d, "utf8"), await V.writeFile(I(S, "main.tsx"), x, "utf8"), v ? (await V.writeFile(I(S, "app.tsx"), v, "utf8"), await V.writeFile(I(S, "routeTable.ts"), y, "utf8")) : (await V.rm(I(S, "app.tsx"), { force: !0 }), await V.rm(I(S, "routeTable.ts"), { force: !0 }));
+	let C = I(e, ".gitignore"), w = "";
 	try {
-		w = await M.readFile(C, "utf8");
+		w = await V.readFile(C, "utf8");
 	} catch {}
 	let T = ["/.framework/"], E = new Set(w.split("\n").map((e) => e.trim())), D = T.filter((e) => !E.has(e));
 	if (D.length > 0) {
 		let e = w === "" || w.endsWith("\n") ? "" : "\n";
 		try {
-			await M.appendFile(C, `${e}${D.join("\n")}\n`, "utf8");
+			await V.appendFile(C, `${e}${D.join("\n")}\n`, "utf8");
 		} catch (e) {
 			Q.warn(`could not add ${D.join(", ")} to ${C} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
 		}
 	}
-}, gi = async (e, t) => {
+}, To = async (e, t) => {
 	try {
-		let n = D(e), r = O(n, "project.json");
-		if (!j(r)) return;
-		let i = await M.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
+		let n = F(e), r = I(n, "project.json");
+		if (!B(r)) return;
+		let i = await V.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
 		for (let [e, n] of Object.entries(a)) e !== o && n.port === t && s.push(e);
 		if (s.length === 0) return;
 		Q.warn("sibling app(s) claim the same port — only one boots", {
@@ -2492,24 +3222,34 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			projectJson: r
 		});
 	} catch {}
-}, _i = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), vi = async (e, t = {}) => {
-	let n = _i(e), r = t.preferSource !== !0 && j(n) ? n : O(e, "app.config.ts");
+}, Eo = (e) => I(e, ".framework", "dist", "server", "appConfig.js"), Do = async (e, t = {}) => {
+	let n = Eo(e), r = t.preferSource !== !0 && B(n) ? n : I(e, "app.config.ts");
 	try {
-		let e = (await import(L(r).href)).default;
+		let e = (await import(G(r).href)).default;
 		return typeof e == "object" && e && "type" in e && e.type === "web" ? e : null;
 	} catch {
 		return null;
 	}
-}, yi = async (e) => {
-	let n = await vi(e, { preferSource: !0 });
+}, Oo = (e) => {
+	let t = e.restRoutes;
+	if (t !== void 0 && t.length !== 0) return `app.config.ts declares ${t.length} restRoute(s) on a type:'web' app — REST routes mount on the API process and were silently ignored here, so a health probe hitting one gets the SPA shell (200) and a POST gets 404.\n  Move them to the API app's app.config.ts (they mount under the api origin), and call them there;\n  for same-origin paths in front of the web app, terminate them at your ingress/proxy instead.`;
+}, ko = async (e) => {
+	let n = await Do(e, { preferSource: !0 });
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
-	ln();
-	let i = St();
-	Bt(i), Q.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), We(e, Q);
-	let a = await li(e, n);
+	{
+		let e = Oo(n);
+		if (e !== void 0) return Q.error(`voltro dev (web): refusing to boot — ${e}`), {
+			ran: !0,
+			exitCode: 1
+		};
+	}
+	ci();
+	let i = Sr();
+	Br(i), Q.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), Dt(e, Q);
+	let a = await _o(e, n);
 	for (let e of a) Q.info("api wired", {
 		name: e.name,
 		pkg: e.pkg,
@@ -2521,14 +3261,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			Q.info(`${e} seeded`, { path: t.path });
 		}
 	}).catch(() => {});
-	let { resolved: o } = await Ce({
+	let { resolved: o } = await rt({
 		rawEnv: n.env,
 		appType: "web",
 		root: e,
 		log: Q,
 		generateTypes: !0
 	}), s = o.publicValues;
-	await hi(e, n, a, s), Q.debug("generated framework entry files", { files: [
+	await wo(e, n, a, s), Q.debug("generated framework entry files", { files: [
 		"index.html",
 		".framework/main.tsx",
 		...n.env ? [".framework/env.public.ts"] : []
@@ -2537,34 +3277,46 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env,
-		dashboardPin: process.env[Tn] === "1"
+		dashboardPin: process.env[wi] === "1"
 	});
 	for (let e of c.warnings) Q.warn(e);
-	let l = c.port, y = n.name ?? "unnamed", b = w("web", y, l), D = T(y);
-	await x({
-		id: b,
-		name: y,
+	let l = c.port, b = n.name ?? "unnamed", x = re("web", b, l), S = ie(b);
+	await ee({
+		id: x,
+		name: b,
 		kind: "web",
 		url: `http://localhost:${l}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: D.path
-	}).catch(() => {}), await gi(e, l);
-	let { pages: N, dirs: P } = await Xr(O(e, "src", "pages")), F = {
-		dirs: P,
-		ssrRoutes: ni(N)
-	}, ee = P.map((e) => ({
+		logFile: S.path
+	}).catch(() => {}), await To(e, l);
+	let { pages: C, dirs: w } = await ro(I(e, "src", "pages")), T = null, E = n.fonts !== void 0 && n.fonts.length > 0 ? Yn({
+		root: e,
+		fonts: n.fonts,
+		cache: v(),
+		secret: qn().secret,
+		isOgSsrRoute: (e) => O.ssrRoutes.some((t) => t.pattern === e),
+		getPageModule: async (e) => {
+			let t = O.ssrRoutes.find((t) => t.pattern === e);
+			if (t === void 0 || T === null) return null;
+			let n = await T(t.file), r = _(n, t.file);
+			return r === "ssr" || r === "isr" ? n : null;
+		}
+	}) : null, O = {
+		dirs: w,
+		ssrRoutes: lo(C)
+	}, k = w.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), I = await mt({
+	})), A = await mr({
 		appRoot: e,
-		pages: N
+		pages: C
 	});
-	I.wrote && Q.debug("routes codegen wrote", { path: k(e, I.path) });
-	let te = await _e("vite", () => import("vite")), L = (await import("@vitejs/plugin-react")).default, R = (await import("@tailwindcss/vite")).default, z = O(e, ".framework"), B = O(e, "src"), V = /* @__PURE__ */ new Set([
+	A.wrote && Q.debug("routes codegen wrote", { path: L(e, A.path) });
+	let j = await Xe("vite", () => import("vite")), M = (await import("@vitejs/plugin-react")).default, N = (await import("@tailwindcss/vite")).default, P = I(e, ".framework"), F = I(e, "src"), z = /* @__PURE__ */ new Set([
 		".framework",
 		"node_modules",
 		"dist",
@@ -2572,64 +3324,64 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		".vite",
 		".turbo",
 		".cache"
-	]), re = {
+	]), oe = {
 		name: "framework:watch-app-sources",
 		async configureServer(t) {
 			try {
-				let n = (await M.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !V.has(e.name));
-				for (let r of n) t.watcher.add(O(e, r.name));
-				n.length === 0 && t.watcher.add(B);
+				let n = (await V.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !z.has(e.name));
+				for (let r of n) t.watcher.add(I(e, r.name));
+				n.length === 0 && t.watcher.add(F);
 			} catch {
-				t.watcher.add(B);
+				t.watcher.add(F);
 			}
-			for (let n of await De(e)) t.watcher.add(n.dir);
+			for (let n of await ct(e)) t.watcher.add(n.dir);
 		}
-	}, H = O(e, "src", "pages"), U = (e) => e.endsWith(".tsx") && (e === H || e.startsWith(H + "/")), ie = (e) => e === H || e.startsWith(H + "/"), ae = async (t) => {
+	}, H = I(e, "src", "pages"), U = (e) => e.endsWith(".tsx") && (e === H || e.startsWith(H + "/")), se = (e) => e === H || e.startsWith(H + "/"), ce = async (t) => {
 		try {
 			let r = Date.now();
-			await hi(e, n, a, s);
-			let { pages: i, dirs: o } = await Xr(H);
-			await mt({
+			await wo(e, n, a, s);
+			let { pages: i, dirs: o } = await ro(H);
+			await mr({
 				appRoot: e,
 				pages: i
-			}), F.dirs = o, F.ssrRoutes = ni(i), Q.info("page tree regenerated", {
+			}), O.dirs = o, O.ssrRoutes = lo(i), Q.info("page tree regenerated", {
 				reason: t,
 				ms: Date.now() - r,
-				routes: F.ssrRoutes.length
+				routes: O.ssrRoutes.length
 			});
-			for (let e of wr(X, F.ssrRoutes.map((e) => e.pattern))) Q.error(`middleware.ts: ${e.message}`);
+			for (let e of ha(Y, O.ssrRoutes.map((e) => e.pattern))) Q.error(`middleware.ts: ${e.message}`);
 		} catch (e) {
 			Q.error("page tree regen failed", { reason: t }, e);
 		}
-	}, oe = {
+	}, W = {
 		name: "framework:regenerate-on-page-tree-change",
 		configureServer(t) {
 			let n = null, r = [], i = (e) => {
 				r.push(e), n && clearTimeout(n), n = setTimeout(() => {
 					n = null;
 					let e = r.length === 1 ? r[0] : `${r.length} events (${r[0]}, …)`;
-					r.length = 0, ae(e);
+					r.length = 0, ce(e);
 				}, 50);
 			};
 			t.watcher.on("add", (t) => {
-				U(t) && i(`add ${k(e, t)}`);
+				U(t) && i(`add ${L(e, t)}`);
 			}), t.watcher.on("unlink", (t) => {
-				U(t) && i(`unlink ${k(e, t)}`);
+				U(t) && i(`unlink ${L(e, t)}`);
 			}), t.watcher.on("addDir", (t) => {
-				ie(t) && i(`addDir ${k(e, t)}`);
+				se(t) && i(`addDir ${L(e, t)}`);
 			}), t.watcher.on("unlinkDir", (t) => {
-				ie(t) && i(`unlinkDir ${k(e, t)}`);
+				se(t) && i(`unlinkDir ${L(e, t)}`);
 			});
 		}
-	}, W = O(e, "app.config.ts"), se = (e) => {
-		if (!G(e.env)) return "";
+	}, G = I(e, "app.config.ts"), le = (e) => {
+		if (!xe(e.env)) return "";
 		let t = Object.entries(e.env.vars).map(([e, t]) => `${e}:${t.access}`).sort();
 		return `${String(e.env.publicPrefix)}|${t.join(",")}`;
-	}, ce = (e, t) => {
+	}, K = (e, t) => {
 		let n = [];
-		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), se(e) !== se(t) && n.push("env"), n;
-	}, le = n, ue = A(W), de = () => {
-		let e = me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), le(e) !== le(t) && n.push("env"), n;
+	}, q = n, de = R(G), fe = () => {
+		let e = Me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 			stdio: "inherit",
 			env: process.env,
 			cwd: process.cwd()
@@ -2641,24 +3393,24 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		}), e.on("error", (e) => {
 			Q.error("restart spawn failed", {}, e), process.exit(1);
 		});
-	}, fe = {
+	}, pe = {
 		name: "framework:watch-app-config",
 		async configureServer(n) {
-			n.watcher.add(W), Q.info("watching app.config.ts for changes", { path: k(e, W) });
-			let r = _r.map((t) => O(e, t)), i = new Set(r.map((e) => A(e)));
+			n.watcher.add(G), Q.info("watching app.config.ts for changes", { path: L(e, G) });
+			let r = ca.map((t) => I(e, t)), i = new Set(r.map((e) => R(e)));
 			for (let e of r) n.watcher.add(e);
 			n.watcher.on("all", (t, r) => {
-				i.has(A(r)) && (Q.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: k(e, r) }), n.close().catch(() => void 0).then(() => {
-					de();
+				i.has(R(r)) && (Q.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: L(e, r) }), n.close().catch(() => void 0).then(() => {
+					fe();
 				}));
 			});
 			let a = async () => {
 				try {
 					try {
-						let e = n.moduleGraph.getModuleById(W);
+						let e = n.moduleGraph.getModuleById(G);
 						e && n.moduleGraph.invalidateModule(e);
 					} catch {}
-					let e = (await n.ssrLoadModule(W, { fixStacktrace: !0 })).default;
+					let e = (await n.ssrLoadModule(G, { fixStacktrace: !0 })).default;
 					return typeof e == "object" && e && "type" in e && e.type === "web" ? e : (Q.warn("app.config.ts re-load returned wrong shape", { hasDefault: e !== void 0 }), null);
 				} catch (e) {
 					return Q.warn("app.config.ts re-load failed — ignoring this change", {}, e), null;
@@ -2677,22 +3429,22 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					theme: t.theme,
 					port: t.port,
 					name: t.name
-				}), JSON.stringify(t) === JSON.stringify(le)) {
+				}), JSON.stringify(t) === JSON.stringify(q)) {
 					Q.info("app.config.ts onConfigChange: parsed config unchanged — skipping (no-op edit?)");
 					return;
 				}
-				let r = ce(le, t);
+				let r = K(q, t);
 				if (r.length > 0) {
 					Q.warn("app.config.ts changed — hard restart required", { fields: r });
 					try {
 						await n.close();
 					} catch {}
-					de();
+					fe();
 					return;
 				}
 				try {
 					let r = Date.now();
-					await hi(e, t, await li(e, t)), le = t, n.ws && n.ws.send({
+					await wo(e, t, await _o(e, t)), q = t, n.ws && n.ws.send({
 						type: "full-reload",
 						path: "*"
 					}), Q.info("app.config.ts soft-regen", {
@@ -2702,7 +3454,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				} catch (e) {
 					Q.error("app.config.ts soft-regen failed", {}, e);
 				}
-			}, l = (e) => E(e) === "app.config.ts" ? e === W || A(e) === ue : !1;
+			}, l = (e) => ae(e) === "app.config.ts" ? e === G || R(e) === de : !1;
 			n.watcher.on("change", (e) => {
 				l(e) && (Q.info("app.config.ts change event (chokidar)", { file: e }), s());
 			}), n.watcher.on("add", (e) => {
@@ -2710,46 +3462,46 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			});
 			try {
 				let { watchFile: e } = await import("node:fs");
-				e(W, { interval: 500 }, (e, t) => {
+				e(G, { interval: 500 }, (e, t) => {
 					e.mtimeMs !== t.mtimeMs && (Q.info("app.config.ts change event (poll)", { mtime: e.mtimeMs }), s());
 				}), Q.info("app.config.ts polling watcher attached", { intervalMs: 500 });
 			} catch (e) {
 				Q.warn("app.config.ts polling watcher could not attach", {}, e);
 			}
-			ke(t, Q, {
+			ut(t, Q, {
 				root: e,
 				onBeforeRestart: () => n.close()
 			});
 		}
-	}, pe = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, K = 0, he = {
+	}, me = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, he = 0, ge = {
 		name: "framework:suppress-api-hmr",
 		handleHotUpdate(e) {
-			if (K += 1, pe.test(e.file)) return [];
+			if (he += 1, me.test(e.file)) return [];
 		}
-	}, ge = {
+	}, _e = {
 		name: "framework:reoptimize-on-rpcgroup-change",
 		async configureServer(t) {
 			let n = [];
 			for (let r of a) {
-				let i = await ii(e, r.pkg);
+				let i = await fo(e, r.pkg);
 				if (i) {
 					n.push(i);
 					try {
-						t.watcher.add(O(i, "rpcGroup.generated.ts"));
+						t.watcher.add(I(i, "rpcGroup.generated.ts"));
 					} catch {}
-					for (let e of await pr(i)) try {
+					for (let e of await ia(i)) try {
 						t.watcher.add(e);
 					} catch {}
 				}
 			}
 			if (n.length === 0) return;
-			let r = await hr(n), i = null, o = !1, s = async () => {
+			let r = await oa(n), i = null, o = !1, s = async () => {
 				if (o) return;
-				let e = await hr(n);
+				let e = await oa(n);
 				if (e !== void 0 && e !== r) {
 					r = e, o = !0, Q.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
 					try {
-						await M.rm(O(z, ".vite", "deps"), {
+						await V.rm(I(P, ".vite", "deps"), {
 							recursive: !0,
 							force: !0
 						}), await t.restart(!0);
@@ -2758,16 +3510,16 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					}
 				}
 			}, c = (e) => {
-				let t = A(e);
-				!dr(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
+				let t = R(e);
+				!na(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
 					s();
 				}, 120));
 			};
 			t.watcher.on("change", c), t.watcher.on("add", c);
 		}
-	}, q = {}, ve = (e) => (t) => {
+	}, ve = {}, ye = (e) => (t) => {
 		t.on("proxyReq", (t, n) => {
-			sn(t, n, {
+			oi(t, n, {
 				target: e,
 				token: process.env.VOLTRO_INSPECT_TOKEN,
 				writeToken: process.env.VOLTRO_INSPECT_WRITE_TOKEN,
@@ -2777,26 +3529,26 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	};
 	for (let e of a) {
 		if (!e.proxyTarget) continue;
-		q[e.browserWsUrl] = {
+		ve[e.browserWsUrl] = {
 			target: e.proxyTarget,
 			ws: !0,
 			changeOrigin: !0,
 			...e.wsPath ? {} : { rewrite: () => "/ws" }
 		};
 		let t = e.proxyTarget.replace(/^ws/, "http");
-		q[`/_voltro/api/${e.name}`] = {
+		ve[`/_voltro/api/${e.name}`] = {
 			target: t,
 			changeOrigin: !0,
 			rewrite: (t) => t.replace(RegExp(`^/_voltro/api/${e.name}`), ""),
-			configure: ve(t)
+			configure: ye(t)
 		};
 	}
 	for (let [e, t] of Object.entries(n.proxies ?? {})) {
-		if (q[e]) {
+		if (ve[e]) {
 			Q.warn("user proxy ignored — prefix already claimed by an api ws proxy", { prefix: e });
 			continue;
 		}
-		q[e] = {
+		ve[e] = {
 			target: t.target,
 			changeOrigin: t.changeOrigin ?? !0,
 			...t.rewrite === void 0 ? {} : { rewrite: (n) => n.replace(RegExp(`^${e}`), t.rewrite) }
@@ -2806,23 +3558,23 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			...t.rewrite === void 0 ? {} : { rewrite: t.rewrite }
 		});
 	}
-	let ye = {
+	let be = {
 		name: "framework:inspect",
 		configureServer(t) {
 			let r = null, a = async () => {
 				if (r !== null) return r;
 				let n = [];
-				for (let r of N) try {
-					let i = await t.ssrLoadModule(O(e, "src", "pages", r.file));
+				for (let r of C) try {
+					let i = await t.ssrLoadModule(I(e, "src", "pages", r.file));
 					n.push({
 						pattern: r.pattern,
 						file: r.file,
 						dirChain: r.dirChain,
-						renderMode: _(i, O("src", "pages", r.file)),
+						renderMode: _(i, I("src", "pages", r.file)),
 						interactive: i.interactive ?? "full",
 						tenantAware: i.tenantAware === !0,
-						revalidateMs: v(i.revalidate),
-						staleWhileRevalidateMs: v(i.staleWhileRevalidate) ?? 0,
+						revalidateMs: y(i.revalidate),
+						staleWhileRevalidateMs: y(i.staleWhileRevalidate) ?? 0,
 						cacheInvalidatesOn: Array.isArray(i.cacheInvalidatesOn) ? i.cacheInvalidatesOn : [],
 						hasLoader: typeof i.loader == "function",
 						hasMeta: i.meta != null,
@@ -2849,9 +3601,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}), n();
 			}), t.middlewares.use((t, n, r) => {
 				if (t.method !== "GET" && t.method !== "HEAD") return r();
-				let { pathname: i } = Hn(t.url ?? "/");
-				if (i !== "/robots.txt" || j(O(e, "public", "robots.txt"))) return r();
-				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(bt({ indexable: !1 }));
+				let { pathname: i } = ir(t.url ?? "/");
+				if (i !== "/robots.txt" || B(I(e, "public", "robots.txt"))) return r();
+				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(br({ indexable: !1 }));
 			}), n.name === "voltroDashboard" && t.middlewares.use(async (e, t, n) => {
 				let r = e.url ?? "", i = r.split("?")[0];
 				if (i === "/api/dashboard/proxy") {
@@ -2942,7 +3694,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				for (let [t, n] of Object.entries(e.headers ?? {})) n !== void 0 && (s[String(t).toLowerCase()] = Array.isArray(n) ? n.join(", ") : String(n));
 				let c = o.split("?")[0];
 				if (e.method === "GET" && (c === "/_voltro/inspect/logs" || o.startsWith("/_voltro/inspect/logs?"))) {
-					let e = d(s.origin), n = en(o, Ft(), s);
+					let e = d(s.origin), n = ei(o, Fr(), s);
 					t.statusCode = n.status, t.setHeader("content-type", n.contentType);
 					for (let [n, r] of Object.entries(e)) t.setHeader(n, r);
 					t.end(n.body);
@@ -2960,7 +3712,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					e.setEncoding("utf-8"), e.on("data", (e) => {
 						r += e;
 					}), e.on("end", () => {
-						let e = Jt(r, i);
+						let e = Jr(r, i);
 						t.statusCode = e.status, t.setHeader("content-type", e.contentType);
 						for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 						t.end(e.body);
@@ -2991,14 +3743,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 					t.flushHeaders?.(), t.write("retry: 5000\n\n");
 					let a = o.indexOf("?");
-					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(Ct(e));
+					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(Cr(e));
 					let c = i.subscribe((e) => {
 						try {
-							t.write(Ct(e));
+							t.write(Cr(e));
 						} catch {}
 					}), l = setInterval(() => {
 						try {
-							t.write(wt());
+							t.write(wr());
 						} catch {}
 					}, 15e3), p = () => {
 						clearInterval(l), c();
@@ -3011,7 +3763,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						kind: "web",
 						meta: {
 							name: n.name ?? "(unnamed)",
-							voltroVersion: Fr,
+							voltroVersion: Va,
 							port: l,
 							mode: "dev",
 							apis: Object.entries(n.apis ?? {}).map(([e, t]) => {
@@ -3023,13 +3775,13 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							})
 						},
 						routes: await a(),
-						dirs: ee,
+						dirs: k,
 						cache: () => ({
 							backend: "memory",
 							size: 0,
 							entries: []
 						}),
-						env: () => Te(n.name ?? "app", { contract: G(n.env) ? n.env : void 0 })
+						env: () => at(n.name ?? "app", { contract: xe(n.env) ? n.env : void 0 })
 					}, c = p(o, i, s, { method: e.method ?? "GET" });
 					if (c === null) return r();
 					t.statusCode = c.status, t.setHeader("content-type", c.contentType);
@@ -3040,25 +3792,25 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}
 			});
 		}
-	}, be = n.name === "voltroDashboard" ? {
+	}, Se = n.name === "voltroDashboard" ? {
 		name: "framework:dashboard-registry",
 		configureServer(e) {
 			e.middlewares.use(async (e, t, n) => {
 				if (!(e.url ?? "").startsWith("/api/dashboard/registry")) return n();
 				try {
-					let e = await S();
+					let e = await te();
 					t.statusCode = 200, t.setHeader("content-type", "application/json; charset=utf-8"), t.end(JSON.stringify(e));
 				} catch (e) {
 					t.statusCode = 500, t.setHeader("content-type", "text/plain"), t.end(`registry read error: ${e.message}`);
 				}
 			});
 		}
-	} : null, xe = /* @__PURE__ */ new Set(), Se = (e, t, n, r, i, a = !1) => {
-		let o = Yn(i, a, t) ?? "";
+	} : null, Ce = /* @__PURE__ */ new Set(), we = (e, t, n, r, i, a = !1) => {
+		let o = Bi(i, a, t) ?? "";
 		if (Q.error(`${t} render failed`, {
 			pathname: n,
 			pattern: r,
-			cause: Et(i) + o
+			cause: Er(i) + o
 		}), e.headersSent) {
 			e.end();
 			return;
@@ -3066,12 +3818,12 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		e.writeHead(500, {
 			"content-type": "text/plain; charset=utf-8",
 			"x-voltro-rendered-by": `${t}-failed`,
-			"x-voltro-ssr-generation": String(K)
+			"x-voltro-ssr-generation": String(he)
 		});
-		let s = K === 0 ? "" : `\n[voltro] this process has absorbed ${K} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
-		e.end(`${t} render failed for ${n}\n\n${Et(i)}\n${o}\n${s}`);
-	}, we = nt(), Ee = it({
-		limit: we,
+		let s = he === 0 ? "" : `\n[voltro] this process has absorbed ${he} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
+		e.end(`${t} render failed for ${n}\n\n${Er(i)}\n${o}\n${s}`);
+	}, Te = zt(), Ee = Vt({
+		limit: Te,
 		onColdStart: (e) => Q.debug("ssr cold-compile start", { id: e }),
 		onColdEnd: (e, { durationMs: t, failed: n }) => Q.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
 			id: e,
@@ -3079,8 +3831,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			...n ? { failed: !0 } : {}
 		})
 	});
-	Q.debug(`ssr cold-compile concurrency ${we}`, { concurrency: we });
-	let J = null, Oe = async () => (J === null && (J = await M.readFile(O(e, ".framework", "index.html"), "utf8")), J), Ae = {
+	Q.debug(`ssr cold-compile concurrency ${Te}`, { concurrency: Te });
+	let De = null, J = async () => (De === null && (De = await V.readFile(I(e, ".framework", "index.html"), "utf8")), De), Oe = {
 		name: "framework:ssr",
 		configureServer(t) {
 			let r = (e) => Ee.load(e, async () => await t.ssrLoadModule(e)), i, o = !1, s = () => {
@@ -3088,8 +3840,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				let t = n.locales ?? [], a = n.defaultLocale ?? t[0] ?? "en";
 				return t.length === 0 ? (i = Promise.resolve(() => void 0), i) : (i = (async () => {
 					let [{ makeSsgWrap: i }, { makeSsrI18nResolver: s }] = await Promise.all([r("@voltro/i18n"), r("@voltro/i18n/server")]), c = {};
-					for (let n of t) if (j(O(e, "src", "locales", `${n}.ts`))) try {
-						let t = (await r(O(e, "src", "locales", `${n}.ts`))).default;
+					for (let n of t) if (B(I(e, "src", "locales", `${n}.ts`))) try {
+						let t = (await r(I(e, "src", "locales", `${n}.ts`))).default;
 						t !== void 0 && (c[n] = i(n, t, a));
 					} catch (e) {
 						Q.warn("locale catalog failed to load for SSR", { locale: n }, e);
@@ -3119,43 +3871,88 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						defaultTimeZone: n.defaultTimeZone ?? null
 					});
 				})(), i);
-			};
-			t.middlewares.use(async (i, c, l) => {
+			}, c = Qt({
+				apiName: a[0]?.name,
+				apiOrigin: xo(a[0], { allowDevProxy: !0 }),
+				loadDescriptors: async () => {
+					let e = a[0];
+					if (e !== void 0) return (await r(`${e.pkg}/rpcGroup`)).appDescriptors;
+				},
+				rpcQuery: (e, t) => So(xo(a[0], { allowDevProxy: !0 }), e, {
+					apiName: a[0]?.name,
+					headers: t
+				}),
+				renderErrorPage: async () => void 0
+			});
+			t.middlewares.use((e, t, n) => {
+				if (!(e.url ?? "/").split("?")[0].startsWith(Le)) return n();
+				c(e, t, (t, r) => {
+					e.url = t, e.method = "GET", e.__voltroFormFlash = r, n();
+				}).then((e) => {
+					e || n();
+				});
+			}), T = async (n) => await t.ssrLoadModule(I(e, "src", "pages", n)), t.middlewares.use(async (e, t, n) => {
+				let r = e.url ?? "/";
+				if (!r.startsWith("/_voltro/og") || E === null) return n();
+				try {
+					let e = await E.handle(new URL(r, "http://localhost"));
+					if (e === null) return n();
+					t.statusCode = e.status;
+					for (let [n, r] of Object.entries(e.headers)) t.setHeader(n, r);
+					t.end(Buffer.from(e.body));
+				} catch (e) {
+					t.statusCode = 500, t.setHeader("content-type", "text/plain"), t.end(`og render error: ${e.message}`);
+				}
+			}), t.middlewares.use(async (i, c, l) => {
 				if (i.method !== "GET" && i.method !== "HEAD") return l();
 				let u = i.url ?? "/";
 				u.indexOf("?");
-				let { pathname: d, search: f } = Hn(u);
+				let { pathname: d, search: f } = ir(u), p = i.__voltroFormFlash;
 				if (d.startsWith("/@") || d.startsWith("/node_modules/") || d.startsWith("/.framework/") || d.startsWith("/_voltro/") || d === "/main.tsx" || d === "/index.html" || d === "/sw.js" || d === "/favicon.ico" || d === "/robots.txt") return l();
-				let p = async () => {
-					if (X.length === 0) return;
-					let e = Cr(X, {
+				let m = async () => {
+					if (Y.length === 0) return;
+					let e = ma(Y, {
 						route: void 0,
 						pathname: d
 					});
 					if (e === void 0) return;
 					let t = {};
 					for (let [e, n] of Object.entries(i.headers ?? {})) typeof n == "string" ? t[e] = n : Array.isArray(n) && (t[e] = n.join(", "));
-					let n = await Nr(e, {
+					let n = await wa(e, {
 						pathname: d,
 						search: f,
 						headers: t,
-						cookies: Er(t.cookie),
+						cookies: _a(t.cookie),
 						route: void 0
 					});
-					for (let e of n.setCookies) c.appendHeader("set-cookie", Ar(e));
+					for (let e of n.setCookies) c.appendHeader("set-cookie", xa(e));
 				};
-				if (/\.[a-z0-9]+$/i.test(d)) return await p(), l();
-				let m = ri(d, F.ssrRoutes);
-				if (!m) return await p(), l();
-				let h = !xe.has(m.route.pattern), g = Date.now();
-				h && Q.info(`ssr compiling ${m.route.pattern}`, {
-					pattern: m.route.pattern,
+				if (/\.[a-z0-9]+$/i.test(d)) return await m(), l();
+				let h = uo(d, O.ssrRoutes), g = !1;
+				if (!h) {
+					let e = Ha(O.dirs, d);
+					if (e === void 0) return await m(), l();
+					g = !0, h = {
+						route: {
+							pattern: "<not-found>",
+							file: e.dir === "" ? "not-found.tsx" : `${e.dir}/not-found.tsx`,
+							dirChain: e.chain,
+							regex: /^$/,
+							paramNames: [],
+							priority: 2 ** 53 - 1
+						},
+						params: {}
+					};
+				}
+				let v = !Ce.has(h.route.pattern), y = Date.now();
+				v && Q.info(`ssr compiling ${h.route.pattern}`, {
+					pattern: h.route.pattern,
 					pathname: d
 				});
-				let v = {}, y = async (e, t) => {
+				let b = {}, x = async (e, t) => {
 					let n = Date.now(), r = await t();
-					return v[e] = (v[e] ?? 0) + (Date.now() - n), r;
-				}, b = async (e, n, r) => {
+					return b[e] = (b[e] ?? 0) + (Date.now() - n), r;
+				}, S = async (e, n, r) => {
 					let i = await t.moduleGraph.getModuleById(e);
 					if (!(!i || n.has(e))) {
 						if (n.add(e), i.id && /\.(css|sass|scss|less|stylus|pcss|postcss)(\?|$)/.test(i.id)) {
@@ -3163,259 +3960,310 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							r.includes(e) || r.push(e);
 							return;
 						}
-						for (let e of i.importedModules ?? []) e.id && await b(e.id, n, r);
+						for (let e of i.importedModules ?? []) e.id && await S(e.id, n, r);
 					}
-				}, x = !1;
+				}, C = !1;
 				try {
-					let S = await y("loadPage", async () => await r(O(e, "src", "pages", m.route.file))), C = _(S, O("src", "pages", m.route.file)), w = Zr(F.dirs, m.route.dirChain), T = C === "spa" && w.some((e) => e.hasLayout);
-					if (C !== "ssr" && C !== "isr" && !T) return await p(), l();
-					let E = {};
-					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? E[e] = t : Array.isArray(t) && (E[e] = t.join(", "));
-					let D = await Nr(Cr(X, {
-						route: m.route.pattern,
+					let w = await x("loadPage", async () => await r(I(e, "src", "pages", h.route.file))), T = g ? "ssr" : _(w, I("src", "pages", h.route.file)), D = io(O.dirs, h.route.dirChain), k = T === "spa" && D.some((e) => e.hasLayout), A = w.interactive ?? "full";
+					if (T !== "ssr" && T !== "isr" && !k && A !== "islands") return await m(), l();
+					let j = {};
+					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? j[e] = t : Array.isArray(t) && (j[e] = t.join(", "));
+					let M = await wa(ma(Y, {
+						route: h.route.pattern,
 						pathname: d
 					}), {
 						pathname: d,
 						search: f,
-						headers: E,
-						cookies: Er(E.cookie),
-						route: m.route.pattern
+						headers: j,
+						cookies: _a(j.cookie),
+						route: h.route.pattern
 					}, ze);
-					for (let e of D.setCookies) c.appendHeader("set-cookie", Ar(e));
-					let k = D.headers, A = mi(pi(a[0], { allowDevProxy: !0 }), D.headers.cookie, {
+					for (let e of M.setCookies) c.appendHeader("set-cookie", xa(e));
+					for (let [e, t] of Object.entries(M.responseHeaders)) c.setHeader(e, t);
+					if (T === "isr" && M.cspNonce !== void 0) throw Error(`page '${h.route.pattern}' is renderMode 'isr' while middleware.ts mints a cspNonce — an isr render is CACHED and a cached nonce is a lie the browser enforces. Use renderMode 'ssr' for nonce'd pages, or a hash-based CSP for isr.`);
+					let N = T === "isr" ? Oa(M.headers) : M.headers, P = T === "isr" && w.ppr === !0, ee = P ? Pa(N, h.route.pattern) : N, te = So(xo(a[0], { allowDevProxy: !0 }), N.cookie, {
 						apiName: a[0]?.name,
-						headers: D.headers
-					}), j = new AbortController(), M = () => j.abort();
-					c.once("close", M);
-					let N = null, P = [], ee = {};
+						headers: N
+					}), ne = new AbortController(), re = () => ne.abort();
+					c.once("close", re);
+					let ie = null, ae = [], F = {};
 					try {
-						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: P, segmentLoaderData: ee} = await y("loadChain", () => Qr({
-							entries: w,
-							loadLayout: (t) => r(O(e, "src", "pages", t.dir, "layout.tsx")),
-							loadError: (t) => r(O(e, "src", "pages", t.dir, "error.tsx")),
-							loadPending: (t) => r(O(e, "src", "pages", t.dir, "loading.tsx")),
+						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: ae, segmentLoaderData: F} = await x("loadChain", () => ao({
+							entries: D,
+							loadLayout: (t) => r(I(e, "src", "pages", t.dir, "layout.tsx")),
+							loadError: (t) => r(I(e, "src", "pages", t.dir, "error.tsx")),
+							loadPending: (t) => r(I(e, "src", "pages", t.dir, "loading.tsx")),
 							ctx: {
-								params: m.params,
+								params: h.params,
 								pathname: d,
 								search: f,
-								signal: j.signal,
-								headers: k,
-								query: A,
+								signal: ne.signal,
+								headers: ee,
+								query: te,
 								isServer: !0
 							}
 						}));
-						let t = S.loader;
-						typeof t == "function" && !T && (N = await y("loader", () => t({
-							params: m.params,
+						let t = w.loader;
+						typeof t == "function" && !k && (ie = await x("loader", () => t({
+							params: h.params,
 							pathname: d,
 							search: f,
-							signal: j.signal,
-							headers: k,
-							query: A,
+							signal: ne.signal,
+							headers: ee,
+							query: te,
 							isServer: !0
 						})));
 					} finally {
-						c.off("close", M);
+						c.off("close", re);
 					}
-					let I = await y("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
-					T || await ur({
-						pageMod: S,
-						params: m.params,
-						query: A,
+					let L = await x("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
+					k || await ta({
+						pageMod: w,
+						params: h.params,
+						query: te,
 						apiName: a[0]?.name,
-						seed: I.seedPreloadedSubscription,
-						seedFailure: I.seedPreloadedSubscriptionFailure,
+						seed: L.seedPreloadedSubscription,
+						seedFailure: L.seedPreloadedSubscriptionFailure,
 						onError: ({ tag: e, apiName: t }, n) => Q.warn("preload seed failed", {
 							tag: e,
 							apiName: t,
 							pathname: d
 						}, n)
 					});
-					let te = {
-						pattern: m.route.pattern,
-						Component: S.default,
-						meta: S.meta,
-						loader: S.loader,
-						ErrorBoundary: S.ErrorBoundary,
-						Pending: S.Pending,
-						renderMode: C,
-						chain: P
-					}, L = {
-						cookies: D.cookies,
-						headers: k,
-						url: u
-					}, R = S.interactive ?? "full", z = (await s())(k.cookie, k["accept-language"]);
-					x = z !== void 0 && o;
-					let ne = z ? {
-						outerWrap: z.outerWrap,
-						locale: z.locale
-					} : {}, B = T ? zn({
-						helpers: I,
-						page: `src/pages/${m.route.file}`,
-						interactive: R,
+					let R = {
+						pattern: h.route.pattern,
+						Component: w.default,
+						meta: w.meta,
+						loader: w.loader,
+						ErrorBoundary: w.ErrorBoundary,
+						Pending: w.Pending,
+						renderMode: T,
+						chain: ae
+					}, z = {
+						cookies: P ? Fa(ka(M.cookies), h.route.pattern) : T === "isr" ? ka(M.cookies) : M.cookies,
+						headers: ee,
+						url: u,
+						...p === void 0 ? {} : { formFlash: p }
+					}, B = (await s())(N.cookie, N["accept-language"]);
+					C = B !== void 0 && o;
+					let oe = B ? {
+						outerWrap: B.outerWrap,
+						locale: B.locale
+					} : {}, H = k ? er({
+						helpers: L,
+						page: `src/pages/${h.route.file}`,
+						interactive: A,
 						delivery: "stream",
 						renderInput: {
-							descriptor: te,
-							params: m.params,
+							descriptor: R,
+							params: h.params,
 							pathname: d,
 							search: f,
-							segmentLoaderData: ee,
-							requestContext: L,
-							...ne
+							segmentLoaderData: F,
+							requestContext: z,
+							...oe
 						}
-					}) : null, V = T ? null : Rn({
-						helpers: I,
-						page: `src/pages/${m.route.file}`,
+					}) : null, U = k ? null : $n({
+						helpers: L,
+						page: `src/pages/${h.route.file}`,
 						pathname: d,
-						renderMode: C,
-						interactive: R,
-						loaderData: N,
-						segmentLoaderData: ee,
-						pageLoaderRan: typeof S.loader == "function"
-					}), re = [];
-					await y("collectCss", async () => {
+						renderMode: T,
+						interactive: A,
+						loaderData: ie,
+						segmentLoaderData: F,
+						pageLoaderRan: typeof w.loader == "function",
+						...P ? { ppr: !0 } : {}
+					});
+					P && U !== null && za(U.stateInput, h.route.pattern);
+					let se = [];
+					await x("collectCss", async () => {
 						let t = /* @__PURE__ */ new Set(), n = [
-							O(e, "src", "pages", m.route.file),
-							...w.flatMap((t) => [
-								...t.hasLayout ? [O(e, "src", "pages", t.dir, "layout.tsx")] : [],
-								...t.hasError ? [O(e, "src", "pages", t.dir, "error.tsx")] : [],
-								...t.hasPending ? [O(e, "src", "pages", t.dir, "loading.tsx")] : []
+							I(e, "src", "pages", h.route.file),
+							...D.flatMap((t) => [
+								...t.hasLayout ? [I(e, "src", "pages", t.dir, "layout.tsx")] : [],
+								...t.hasError ? [I(e, "src", "pages", t.dir, "error.tsx")] : [],
+								...t.hasPending ? [I(e, "src", "pages", t.dir, "loading.tsx")] : []
 							]),
-							O(e, ".framework", "main.tsx")
+							I(e, ".framework", "main.tsx")
 						];
-						for (let e of n) await b(e, t, re);
+						for (let e of n) await S(e, t, se);
 					});
-					let H = await y("readShell", Oe), U = await y("transformShell", () => t.transformIndexHtml(u, H)), ie = re.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), ae = z?.locale ?? L.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", oe = Date.now(), W = {
-						lang: ae,
-						...z?.timeZone === void 0 ? {} : { timeZone: z.timeZone },
-						renderedAt: oe
+					let ce = (A === "islands" ? await x("islandsEntry", async () => {
+						let t = Co(a, "../../app.config"), n = (await gn({
+							webRoot: e,
+							pages: [{
+								pattern: h.route.pattern,
+								file: h.route.file
+							}],
+							headSnippets: dn(await J()),
+							apiImports: t.imports,
+							apiEntriesLiteral: `[\n${t.providerEntryLines.join("\n")}\n  ]`
+						}))[0];
+						return n === void 0 ? void 0 : await V.readFile(I(e, ".framework", n.htmlFile), "utf8");
+					}) : void 0) ?? await x("readShell", J), W = await x("transformShell", () => t.transformIndexHtml(u, ce)), G = se.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), le = B?.locale ?? z.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", K = Date.now(), ue = {
+						lang: le,
+						...B?.timeZone === void 0 ? {} : { timeZone: B.timeZone },
+						renderedAt: K
 					};
-					if (B) {
-						let e = (e) => Vn({
-							helpers: I,
-							prepared: B,
+					if (H) {
+						let e = (e) => nr({
+							helpers: L,
+							prepared: H,
 							meta: e,
-							interactive: R,
-							extra: [ie]
+							interactive: A,
+							extra: [G]
 						});
-						if (B.hasDeferred) sr({
+						if (H.hasDeferred) Qi({
 							res: c,
-							shell: nr({
-								shell: U,
+							shell: qi({
+								shell: W,
 								inlineModuleScriptsAsync: !0
 							}),
-							documentAttrs: W,
+							documentAttrs: ue,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "spa-shell-dev"
 							},
 							headInjection: e,
-							render: (e) => I.renderPageToStream({
-								...B.renderInput,
+							render: (e) => L.renderPageToStream({
+								...H.renderInput,
 								...e
 							}),
 							onShellError: (e) => {
-								Se(c, "spa-shell-dev", d, m.route.pattern, e, x);
+								we(c, "spa-shell-dev", d, h.route.pattern, e, C);
 							}
 						});
 						else {
-							let t = Bn({
-								helpers: I,
-								prepared: B
-							}), n = ar(U.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`), W);
+							let t = tr({
+								helpers: L,
+								prepared: H
+							}), n = Xi(W.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`), ue);
 							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "spa-shell-dev"), c.end(n);
 						}
-					} else if (V) {
-						let e = (e) => [
-							ie,
-							I.renderMetaToHtml(e),
-							`<meta name="voltro-interactive" content="${R}" />`,
-							...V.hasDeferred ? [I.renderDeferredRegistryScript()] : [],
-							I.renderRouterStateScript(V.stateInput)
-						].filter((e) => e.length > 0).join("\n    "), t = {
-							descriptor: te,
-							params: m.params,
+					} else if (U) {
+						let e = (e) => {
+							if (E === null || T !== "ssr" && T !== "isr" || typeof w.ogImage != "function" || e.includes("og:image")) return "";
+							let t = i.headers["x-tenant"], n = E.signOgUrl({
+								pattern: h.route.pattern,
+								params: h.params,
+								...typeof t == "string" ? { tenant: t } : {}
+							});
+							return `<meta property="og:image" content="${n}" /><meta name="twitter:image" content="${n}" /><meta name="twitter:card" content="summary_large_image" />`;
+						}, t = (t) => [
+							G,
+							L.renderMetaToHtml(t) + e(L.renderMetaToHtml(t)),
+							`<meta name="voltro-interactive" content="${A}" />`,
+							...U.hasDeferred ? [L.renderDeferredRegistryScript()] : [],
+							L.renderRouterStateScript(U.stateInput)
+						].filter((e) => e.length > 0).join("\n    "), n = {
+							descriptor: R,
+							params: h.params,
 							pathname: d,
 							search: f,
-							loaderData: V.loaderData,
-							segmentLoaderData: V.segmentLoaderData,
-							requestContext: L,
-							...ne
+							loaderData: U.loaderData,
+							segmentLoaderData: U.segmentLoaderData,
+							requestContext: z,
+							...oe
 						};
-						if (C === "ssr" && R === "full") sr({
+						if (T === "ssr" && A === "full" && p === void 0) Qi({
 							res: c,
-							shell: nr({
-								shell: U,
+							shell: qi({
+								shell: W,
 								inlineModuleScriptsAsync: !0
 							}),
-							documentAttrs: W,
+							documentAttrs: ue,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "ssr-dev"
 							},
-							headInjection: e,
-							render: (e) => I.renderPageToStream({
-								...t,
-								...e
+							headInjection: t,
+							render: (e) => L.renderPageToStream({
+								...n,
+								...e,
+								...M.cspNonce === void 0 ? {} : { nonce: M.cspNonce }
 							}),
 							onShellError: (e) => {
-								Se(c, "ssr-dev", d, m.route.pattern, e, x);
+								we(c, "ssr-dev", d, h.route.pattern, e, C);
 							}
 						});
 						else {
-							let { html: n, meta: r } = I.renderPageToHtml(t), i = ar(U.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`), W);
-							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "ssr-dev"), c.end(i);
+							let { html: e, meta: r } = L.renderPageToHtml(n), i = Xi(W.replace("<div id=\"root\"></div>", `<div id="root">${e}</div>`).replace("</head>", `    ${t(r)}\n  </head>`), ue);
+							c.statusCode = p === void 0 ? g ? 404 : 200 : 422, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", g ? "ssr-not-found" : "ssr-dev"), p !== void 0 && c.setHeader("cache-control", "no-store");
+							let o = p === void 0 ? i : Gt(i, p);
+							if (P && p === void 0 && typeof w.loader == "function") {
+								c.setHeader("x-voltro-ppr", "shell+holes"), c.write(o);
+								let e = So(xo(a[0], { allowDevProxy: !0 }), M.headers.cookie, {
+									apiName: a[0]?.name,
+									headers: M.headers
+								}), t = new AbortController();
+								await Ra({
+									loader: w.loader,
+									ctx: {
+										params: h.params,
+										pathname: d,
+										search: f,
+										signal: t.signal,
+										headers: M.headers,
+										query: e,
+										isServer: !0
+									},
+									res: c,
+									helpers: L,
+									page: h.route.pattern,
+									log: Q
+								});
+							} else c.end(M.cspNonce === void 0 ? o : rr(o, M.cspNonce));
 						}
 					}
-					v.render = Date.now() - oe;
-					let G = Date.now() - g;
-					h ? (xe.add(m.route.pattern), Q.info(`ssr compiled ${m.route.pattern} in ${G}ms`, {
-						pattern: m.route.pattern,
+					b.render = Date.now() - K;
+					let q = Date.now() - y;
+					v ? (Ce.add(h.route.pattern), Q.info(`ssr compiled ${h.route.pattern} in ${q}ms`, {
+						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: G,
+						elapsedMs: q,
 						cold: !0,
-						phases: v
-					})) : G > 200 && Q.info(`ssr rendered ${d} in ${G}ms`, {
-						pattern: m.route.pattern,
+						phases: b
+					})) : q > 200 && Q.info(`ssr rendered ${d} in ${q}ms`, {
+						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: G,
+						elapsedMs: q,
 						cold: !1,
-						phases: v
+						phases: b
 					});
 				} catch (e) {
-					if (In(e)) {
+					if (Zn(e)) {
 						Q.error("ssr-dev render refused", {
 							pathname: d,
-							pattern: m.route.pattern
+							pattern: h.route.pattern
 						}, e), c.statusCode = 500, c.setHeader("content-type", "text/plain; charset=utf-8"), c.end(e.message);
 						return;
 					}
-					let t = Ln(e);
+					let t = Qn(e);
 					if (t) {
 						c.statusCode = t.status;
 						for (let [e, n] of Object.entries(t.headers)) c.setHeader(e, String(n));
 						c.end(t.body);
 						return;
 					}
-					Se(c, "ssr-dev", d, m.route.pattern, e, x);
+					we(c, "ssr-dev", d, h.route.pattern, e, C);
 				}
 			});
 		}
-	}, je = Date.now(), Me = te.version ?? "?", Ne = await Ir(), Fe = O(e, "node_modules", "@voltro", "ui-shadcn"), Y = j(O(Fe, "package.json")) ? Fe : null, Ie = [], Le = await (async () => {
+	}, ke = Date.now(), Ae = j.version ?? "?", je = await Ua(), Ne = I(e, "node_modules", "@voltro", "ui-shadcn"), Pe = B(I(Ne, "package.json")) ? Ne : null, Fe = [], Ie = await (async () => {
 		let t = [];
 		for (let n of a) {
-			let r = await ii(e, n.pkg);
+			let r = await fo(e, n.pkg);
 			r && t.push(r);
 		}
-		let n = await hr(t);
+		let n = await oa(t);
 		if (n === void 0) return !1;
-		let r = O(z, ".voltro-rpcgroup-optimize"), i = "";
+		let r = I(P, ".voltro-rpcgroup-optimize"), i = "";
 		try {
-			i = (await M.readFile(r, "utf8")).trim();
+			i = (await V.readFile(r, "utf8")).trim();
 		} catch {}
 		if (i === n) return !1;
 		try {
-			await M.writeFile(r, n);
+			await V.writeFile(r, n);
 		} catch {}
 		return !0;
 	})(), Re = /* @__PURE__ */ new Set(), ze = (e) => {
@@ -3423,15 +4271,15 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			cookie: e.name,
 			hint: "If your IdP client reads this from `document.cookie` (Supabase's `createBrowserClient` does), pass `httpOnly: false`. Otherwise the SSR render succeeds and the user is signed out at the first client-side call. Set `httpOnly: true` explicitly to silence this."
 		}));
-	}, X = await Mr(e);
-	X.length > 0 && Q.info(`middleware.ts loaded — ${X.length} middleware(s): ` + X.map((e) => e.exportName).join(", ")), Tr(X, F.ssrRoutes.map((e) => e.pattern)), Le && Q.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
+	}, Y = await Ca(e);
+	Y.length > 0 && Q.info(`middleware.ts loaded — ${Y.length} middleware(s): ` + Y.map((e) => e.exportName).join(", ")), ga(Y, O.ssrRoutes.map((e) => e.pattern)), Ie && Q.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
 	try {
-		await Pe(l, "voltro dev (web)");
+		await ht(l, "voltro dev (web)");
 	} catch (e) {
 		Q.error(String(e.message ?? e)), process.exit(1);
 	}
-	await (await te.createServer({
-		root: z,
+	await (await j.createServer({
+		root: P,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		ssr: { noExternal: ["react-intl", "@voltro/i18n"] },
 		resolve: {
@@ -3442,66 +4290,72 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				"@voltro/i18n"
 			],
 			alias: [
-				...Ne ? [{
+				...je ? [{
 					find: "@voltro/devtools/styles.css",
-					replacement: O(Ne, "src/styles.css")
+					replacement: I(je, "src/styles.css")
 				}, {
 					find: "@voltro/devtools",
-					replacement: O(Ne, "src/index.ts")
+					replacement: I(je, "src/index.ts")
 				}] : [],
-				...Y ? [
+				...Pe ? [
 					{
 						find: "@voltro/ui-shadcn/tokens.css",
-						replacement: O(Y, "src/tokens.css")
+						replacement: I(Pe, "src/tokens.css")
 					},
 					{
 						find: "@voltro/ui-shadcn/cn",
-						replacement: O(Y, "src/cn.ts")
+						replacement: I(Pe, "src/cn.ts")
 					},
 					{
 						find: "@voltro/ui-shadcn/brand",
-						replacement: O(Y, "src/brand/voltroLogo.tsx")
+						replacement: I(Pe, "src/brand/voltroLogo.tsx")
 					},
 					{
 						find: "@voltro/ui-shadcn",
-						replacement: O(Y, "src/index.ts")
+						replacement: I(Pe, "src/index.ts")
 					}
 				] : [],
-				...tt(e)
+				...Rt(e)
 			]
 		},
 		optimizeDeps: {
-			include: [...a.map((e) => `${e.pkg}/rpcGroup`), ...Ie],
-			force: Le
+			include: [...a.map((e) => `${e.pkg}/rpcGroup`), ...Fe],
+			force: Ie
 		},
-		customLogger: $e(),
+		customLogger: It(),
 		plugins: [
-			bn(O(e, "src", "pages")),
-			L(),
-			R(),
-			re,
+			yi(I(e, "src", "pages")),
+			Cn({
+				root: e,
+				config: D(n.images)
+			}),
+			On(e, n.fonts),
+			Rn(e, n.feeds ?? [], n.seo?.siteUrl),
+			M(),
+			N(),
 			oe,
-			fe,
-			he,
+			W,
+			pe,
 			ge,
-			ye,
-			Ae,
-			...be ? [be] : []
+			_e,
+			be,
+			Oe,
+			...Se ? [Se] : []
 		],
 		server: {
 			port: l,
 			strictPort: !0,
 			host: !0,
 			allowedHosts: n.allowedHosts === !0 || [...n.allowedHosts ?? []],
-			proxy: q,
-			fs: { allow: [e, ...Hr(e)] }
+			proxy: ve,
+			fs: { allow: [e, ...Ya(e)] }
 		},
 		appType: "spa",
-		cacheDir: O(z, ".vite"),
-		publicDir: O(e, "public")
-	})).listen(), Pr.info(`v${Me} ready in ${Date.now() - je}ms`, {
-		version: Me,
-		bootMs: Date.now() - je
+		cacheDir: I(P, ".vite"),
+		publicDir: I(e, "public")
+	})).listen(), Ba.info(`v${Ae} ready in ${Date.now() - ke}ms`, {
+		version: Ae,
+		bootMs: Date.now() - ke
 	}), Q.info(`listening on http://localhost:${l}`, {
 		port: l,
 		app: n.name ?? "(unnamed)"
@@ -3511,62 +4365,62 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		target: e.proxyTarget
 	}), Q.info(`proxy /_voltro/api/${e.name} → ${e.proxyTarget.replace(/^ws/, "http")}/_voltro/inspect`, { api: e.name }));
 	try {
-		await x({
-			id: b,
-			name: y,
+		await ee({
+			id: x,
+			name: b,
 			kind: "web",
 			url: `http://localhost:${l}`,
 			pid: process.pid,
 			status: "live",
-			logFile: D.path
+			logFile: S.path
 		});
-		let t = wn(e);
+		let t = Ci(e);
 		if (t) {
-			let e = await Pn({ dashboardAppPath: t });
+			let e = await Ni({ dashboardAppPath: t });
 			e.status === "launched" ? Q.info(`dashboard launched at http://localhost:${e.port}`, { port: e.port }) : e.status === "already-running" && Q.debug(`dashboard already running on :${e.port}`, { port: e.port });
 		}
 		setInterval(() => {
-			x({
-				id: b,
-				name: y,
+			ee({
+				id: x,
+				name: b,
 				kind: "web",
 				url: `http://localhost:${l}`,
 				pid: process.pid,
 				status: "live",
-				logFile: D.path
+				logFile: S.path
 			}).catch(() => {});
 		}, 1e4).unref();
 		let n = () => {
-			C(b), D.dispose();
+			ne(x), S.dispose();
 		};
 		process.on("SIGINT", n), process.on("SIGTERM", n);
 	} catch (e) {
 		Q.warn("runtime-registry write failed", {}, e);
 	}
-	return ne({
+	return ue({
 		app: n.name ?? "unnamed",
 		kind: "web",
 		url: `http://localhost:${l}`,
-		bootMs: Date.now() - je
+		bootMs: Date.now() - ke
 	}), new Promise(() => {});
-}, bi = async (t) => {
+}, Ao = async (t) => {
 	e("serve");
-	let n = await vi(t);
+	let n = await Do(t);
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
 	let i = Date.now(), a = Q.child("serve");
 	a.info("booting voltro serve (preview)", { app: n.name ?? "(unnamed)" });
-	let o = await li(t, n);
+	let o = await _o(t, n);
 	for (let e of o) a.info("api wired", {
 		name: e.name,
 		pkg: e.pkg
 	});
-	await hi(t, n, o);
+	await wo(t, n, o);
 	{
-		let { pages: e } = await Xr(O(t, "src", "pages"));
-		await mt({
+		let { pages: e } = await ro(I(t, "src", "pages"));
+		await mr({
 			appRoot: t,
 			pages: e
 		});
@@ -3575,12 +4429,12 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env
-	}).port, c = await _e("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = O(t, ".framework");
+	}).port, c = await Xe("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = I(t, ".framework");
 	Q.info("running production build"), await c.build({
 		root: u,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [l()],
-		customLogger: $e(),
+		customLogger: It(),
 		resolve: { dedupe: [
 			"react",
 			"react-dom",
@@ -3589,9 +4443,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		] },
 		build: {
 			outDir: "dist",
-			rollupOptions: { output: { manualChunks: Wr } }
+			rollupOptions: { output: { manualChunks: Za } }
 		},
-		publicDir: O(t, "public")
+		publicDir: I(t, "public")
 	});
 	let d = (await c.preview({
 		root: u,
@@ -3602,7 +4456,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		label: "Local",
 		url: e
 	})) ?? [];
-	return ne({
+	return ue({
 		app: n.name ?? "unnamed",
 		kind: "preview",
 		url: f,
@@ -3611,4 +4465,4 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	}), new Promise(() => {});
 };
 //#endregion
-export { bt as $, ar as A, Tn as B, Mr as C, Cr as D, Nr as E, Rn as F, en as G, Pn as H, zn as I, Bt as J, Xt as K, Bn as L, nr as M, sr as N, Ar as O, In as P, wt as Q, Vn as R, jr as S, Er as T, wn as U, Cn as V, on as W, Ct as X, Ft as Y, St as Z, bi as _, xe as _t, Qr as a, Be as at, hi as b, Jr as c, Ue as ct, vi as d, ke as dt, yt as et, li as f, J as ft, yi as g, Ce as gt, di as h, Ee as ht, mi as i, tt as it, rr as j, ur as k, $ as l, We as lt, si as m, Te as mt, pi as n, it as nt, _i as o, He as ot, oi as p, De as pt, Jt as q, ci as r, nt as rt, Zr as s, Ve as st, Gr as t, mt as tt, Yr as u, Pe as ut, Wr as v, be as vt, wr as w, Tr as x, Xr as y, _e as yt, Hn as z };
+export { Fr as $, Oa as A, Vt as At, Xi as B, st as Bt, wo as C, gn as Ct, Fa as D, pn as Dt, La as E, un as Et, _a as F, wt as Ft, Si as G, tt as Gt, qi as H, at as Ht, wa as I, Et as It, ai as J, Ni as K, et as Kt, ma as L, Dt as Lt, Sa as M, Rt as Mt, Ca as N, Ct as Nt, Pa as O, Le as Ot, ha as P, Tt as Pt, Br as Q, xa as R, ht as Rt, Oo as S, Cn as St, za as T, mn as Tt, Qi as U, ot as Ut, Ji as V, ct as Vt, wi as W, rt as Wt, Xr as X, ei as Y, Jr as Z, yo as _, Wn as _t, Co as a, mr as at, Za as b, An as bt, Eo as c, er as ct, $ as d, ir as dt, Cr as et, no as f, rr as ft, ho as g, Un as gt, mo as h, qn as ht, Ha as i, yr as it, ga as j, zt as jt, ka as k, Qt as kt, io as l, tr as lt, _o as m, Yn as mt, xo as n, wr as nt, So as o, Zn as ot, Do as p, Jn as pt, Ci as q, Xe as qt, go as r, br as rt, ao as s, $n as st, Qa as t, Sr as tt, to as u, nr as ut, ko as v, Fn as vt, Ra as w, dn as wt, ro as x, En as xt, Ao as y, Mn as yt, ta as z, ut as zt };