@voltro/cli 0.52.0 → 0.53.0

package/dist/start-ekPan8BT.js

@@ -0,0 +1,1510 @@
+import { i as e, t } from "./nodeEnvironment-cGFAj1J8.js";
+import { r as n } from "./appPort-B_HpJ_ck.js";
+import { $ as r, A as i, At as a, B as o, C as s, D as c, E as l, F as u, H as d, I as ee, K as f, L as te, M as p, N as m, O as h, Ot as g, Q as ne, R as _, S as v, T as y, Tt as b, U as x, V as S, W as C, Wt as w, Y as T, bt as re, ct as E, dt as ie, et as D, ft as O, ht as ae, i as oe, j as se, jt as k, k as ce, kt as le, l as ue, lt as A, m as de, mt as j, n as fe, nt as pe, o as me, ot as M, p as N, q as P, qt as F, s as he, st as I, tt as ge, ut as L, w as _e, x as ve, z as ye } from "./webDev-oczpugbx.js";
+import { o as be, t as xe } from "./connectionConfig-Bk9IC7D0.js";
+import { A as Se, D as R, a as Ce, h as we, j as Te, k as Ee } from "./inspect-Bd8-9wsi.js";
+import { n as De, r as Oe, t as ke } from "./inspectMetrics-CGF94puw.js";
+import { a as Ae, c as z, d as je, f as Me, l as Ne, p as B, u as Pe } from "./renderModeScan-CUbOeOAg.js";
+import { i as Fe, n as Ie, r as Le, t as Re } from "./runtimeRegistry-DMeKfTHP.js";
+import { n as ze } from "./logFileSink-B4uP8pvf.js";
+import { t as Be } from "./bootTiming-BdyP9nYw.js";
+import { dirname as V, extname as H, join as U, resolve as Ve } from "node:path";
+import { promises as W } from "node:fs";
+import { fileURLToPath as He, pathToFileURL as G } from "node:url";
+import { createLogger as K, printReadyBlock as Ue } from "@voltro/logger";
+import { Effect as We } from "effect";
+import { maybeCompress as q, snapshotMetricsSync as Ge } from "@voltro/runtime";
+import { createHash as J } from "node:crypto";
+import { resolveBroadcastProvider as Ke } from "@voltro/plugin-broadcast";
+import { createServer as qe } from "node:http";
+//#region src/httpResponseWrite.ts
+var Je = (e) => `W/"${J("md5").update(e).digest("hex")}"`, Ye = (e) => {
+	let { response: t, status: n, headers: r, body: i, requestHeaders: a } = e, o = r["cache-control"], s = (typeof o == "string" ? o : "").toLowerCase();
+	if (i === void 0 || n !== 200 || s.includes("no-store")) return !1;
+	let c = r["content-type"], l = typeof c == "string" ? c : void 0, u = Je(i), d = a["if-none-match"];
+	if (d !== void 0 && d.split(",").some((e) => e.trim() === u)) return t.writeHead(304, {
+		...r,
+		etag: u
+	}), t.end(), !0;
+	let ee = q({
+		body: typeof i == "string" ? new TextEncoder().encode(i) : new Uint8Array(i),
+		contentType: l,
+		acceptEncoding: a["accept-encoding"],
+		options: e.compression
+	}), f = {
+		...r,
+		...ee.headers,
+		etag: u
+	};
+	return ee.compressed && delete f["content-length"], t.writeHead(n, f), t.end(Buffer.from(ee.bytes)), !0;
+}, Y = K({ scope: "voltro:start:cdc" }), Xe = (e) => (t) => {
+	let n = 0;
+	for (let [r, i] of e.tableSubscriptionsByPattern) {
+		if (!i.includes(t)) continue;
+		let a = e.regexByPattern.get(r);
+		a && (n += e.cache.invalidateBy((e) => {
+			let t = e.split("|")[0] ?? e;
+			return a.test(t);
+		}));
+	}
+	return n;
+}, Ze = () => xe() ? be() : null, Qe = (e) => {
+	let t = e.channel ?? "framework_changes", n = e.revalidateChannel ?? "voltro_revalidate", r = Xe(e), i = null, a = null;
+	return {
+		start: async () => {
+			let o = e.tableSubscriptionsByPattern.size > 0, s = e.onRevalidate !== void 0;
+			if (!o && !s) return Y.debug("skipped — no pages declare cacheInvalidatesOn and no revalidation handler is wired"), !1;
+			let c = Ze();
+			if (!c && !o) return Y.debug("no database configured — the revalidation LISTEN line is unavailable"), !1;
+			if (!c) return Y.warn(`${e.tableSubscriptionsByPattern.size} route(s) declare \`cacheInvalidatesOn\` and will NOT be invalidated live — no database is configured for this web process. Set DB_URL (or DB_HOST / PG_HOST) so the CDC listener can connect; until then those routes go stale until their \`revalidate\` window expires.`, { routes: [...e.tableSubscriptionsByPattern.keys()] }), !1;
+			i = new (await (import("pg"))).default.Client(c), await i.connect(), a = (i) => {
+				if (i.channel === n && i.payload && e.onRevalidate) {
+					e.onRevalidate(i.payload);
+					return;
+				}
+				if (i.channel !== t || !i.payload) return;
+				let a;
+				try {
+					a = JSON.parse(i.payload);
+				} catch (e) {
+					Y.warn("bad CDC payload", {}, e);
+					return;
+				}
+				let o = r(a.table);
+				o > 0 && Y.info(`${a.op} on '${a.table}' → dropped ${o} cache entries`, {
+					op: a.op,
+					table: a.table,
+					dropped: o
+				});
+			}, i.on("notification", a), o && await i.query(`LISTEN ${t}`), s && await i.query(`LISTEN ${n}`);
+			let l = [...o ? [t] : [], ...s ? [n] : []];
+			return Y.info(`LISTEN ${l.join(", ")}`, {
+				channels: l,
+				..."connectionString" in c ? { target: c.connectionString.replace(/\/\/[^@/]*@/, "//") } : {
+					host: c.host,
+					port: c.port,
+					database: c.database
+				}
+			}), !0;
+		},
+		stop: async () => {
+			if (i) {
+				try {
+					a && i.off("notification", a), await i.end();
+				} catch {}
+				i = null, a = null;
+			}
+		}
+	};
+}, X = K({ scope: "voltro:start:isr-cache" }), $e = "voltro_isr_cache", et = (e) => `
+CREATE TABLE IF NOT EXISTS ${e} (
+  cache_key                TEXT PRIMARY KEY,
+  html                     TEXT NOT NULL,
+  rendered_at              BIGINT NOT NULL,
+  expires_at               BIGINT NOT NULL,
+  servable_until           BIGINT NOT NULL,
+  revalidate_ms            BIGINT NOT NULL,
+  stale_while_revalidate_ms BIGINT NOT NULL DEFAULT 0
+);
+CREATE INDEX IF NOT EXISTS ${e}_servable_until_idx ON ${e} (servable_until);
+`, tt = (e) => {
+	let t = e.tableName ?? $e, { client: n } = e, r = /* @__PURE__ */ new Map(), i = !1, a = (async () => {
+		i || (i = !0, await n.query(et(t)));
+	})().then(async () => {
+		let e = await n.query(`SELECT * FROM ${t}`);
+		for (let t of e.rows) r.set(t.cache_key, {
+			html: t.html,
+			renderedAt: Number(t.rendered_at),
+			expiresAt: Number(t.expires_at),
+			servableUntil: Number(t.servable_until),
+			revalidateMs: Number(t.revalidate_ms),
+			staleWhileRevalidateMs: Number(t.stale_while_revalidate_ms)
+		});
+	}).catch((e) => {
+		X.warn("postgres bootstrap failed", {}, e);
+	}), o = (e, t) => {
+		a.then(() => n.query(e, t)).catch((e) => {
+			X.warn("postgres write failed", {}, e);
+		});
+	}, s = /* @__PURE__ */ new Map(), c = (e) => {
+		s.set(e, (s.get(e) ?? 0) + 1);
+	};
+	return {
+		get(e) {
+			return r.get(e);
+		},
+		set(e, n, i) {
+			return i?.ifGeneration !== void 0 && (s.get(e) ?? 0) !== i.ifGeneration ? !1 : (r.set(e, n), o(`INSERT INTO ${t}
+           (cache_key, html, rendered_at, expires_at, servable_until, revalidate_ms, stale_while_revalidate_ms)
+         VALUES ($1, $2, $3, $4, $5, $6, $7)
+         ON CONFLICT (cache_key) DO UPDATE SET
+           html = EXCLUDED.html,
+           rendered_at = EXCLUDED.rendered_at,
+           expires_at = EXCLUDED.expires_at,
+           servable_until = EXCLUDED.servable_until,
+           revalidate_ms = EXCLUDED.revalidate_ms,
+           stale_while_revalidate_ms = EXCLUDED.stale_while_revalidate_ms`, [
+				e,
+				n.html,
+				n.renderedAt,
+				n.expiresAt,
+				n.servableUntil,
+				n.revalidateMs,
+				n.staleWhileRevalidateMs
+			]), !0);
+		},
+		generation(e) {
+			return s.get(e) ?? 0;
+		},
+		invalidate(e) {
+			r.delete(e), c(e), o(`DELETE FROM ${t} WHERE cache_key = $1`, [e]);
+		},
+		invalidateBy(e) {
+			let n = 0, i = [];
+			for (let t of r.keys()) e(t) && (r.delete(t), c(t), i.push(t), n++);
+			return i.length > 0 && o(`DELETE FROM ${t} WHERE cache_key = ANY($1)`, [i]), n;
+		},
+		clear() {
+			for (let e of r.keys()) c(e);
+			r.clear(), o(`DELETE FROM ${t}`, []);
+		},
+		size() {
+			return r.size;
+		},
+		snapshot() {
+			return Array.from(r.entries());
+		}
+	};
+}, Z = K({ scope: "voltro:start:revalidate" }), nt = (e) => {
+	try {
+		let t = JSON.parse(e);
+		return (t.kind === "path" || t.kind === "table" || t.kind === "tag") && typeof t.value == "string" && t.value.length > 0 && (t.tenant === void 0 || typeof t.tenant == "string") ? {
+			kind: t.kind,
+			value: t.value,
+			...t.tenant === void 0 ? {} : { tenant: t.tenant }
+		} : (Z.warn("bad revalidation payload (shape)", { payload: e }), null);
+	} catch {
+		return Z.warn("bad revalidation payload (not JSON)", { payload: e }), null;
+	}
+}, rt = (e, t) => {
+	if (t.kind === "table" || t.kind === "tag") {
+		let n = e.tableSink(t.value);
+		return Z.info(`revalidate ${t.kind} '${t.value}' → dropped ${n} cache entries`, {
+			kind: t.kind,
+			value: t.value,
+			dropped: n
+		}), n;
+	}
+	let n = t.value, r = (e) => t.tenant === void 0 || e.split("|").includes(`tenant=${t.tenant}`), i = e.regexByPattern.get(n);
+	if (i !== void 0) {
+		let a = e.renderModeByPattern.get(n);
+		if (a !== "isr") return Z.error(`revalidatePath('${n}') targets a '${a ?? "unknown"}' route — only \`renderMode: 'isr'\` routes have cache entries to drop. Static HTML is a build artifact this process never re-renders; rebuild to change it.`, {
+			path: n,
+			renderMode: a ?? "unknown"
+		}), 0;
+		let o = e.cache.invalidateBy((e) => {
+			let t = e.split("|")[0] ?? e;
+			return i.test(t) && r(e);
+		});
+		return Z.info(`revalidate path pattern '${n}' → dropped ${o} cache entries`, {
+			path: n,
+			dropped: o,
+			...t.tenant === void 0 ? {} : { tenant: t.tenant }
+		}), o;
+	}
+	let a = [...e.regexByPattern.entries()].find(([, e]) => e.test(n));
+	if (a === void 0) return Z.error(`revalidatePath('${n}') matches no declared route — nothing was dropped. Pass a declared route pattern (e.g. /blog/[slug]) or a concrete path of one.`, { path: n }), 0;
+	let o = e.renderModeByPattern.get(a[0]);
+	if (o !== "isr") return Z.error(`revalidatePath('${n}') targets a '${o ?? "unknown"}' route (${a[0]}) — only \`renderMode: 'isr'\` routes have cache entries to drop.`, {
+		path: n,
+		route: a[0],
+		renderMode: o ?? "unknown"
+	}), 0;
+	let s = e.cache.invalidateBy((e) => (e.split("|")[0] ?? e) === n && r(e));
+	return Z.info(`revalidate path '${n}' → dropped ${s} cache entries`, {
+		path: n,
+		dropped: s,
+		...t.tenant === void 0 ? {} : { tenant: t.tenant }
+	}), s;
+}, Q = K({ scope: "voltro:start" }), it = await (async () => {
+	try {
+		let e = U(V(He(import.meta.url)), "..", "package.json"), t = await W.readFile(e, "utf8");
+		return JSON.parse(t).version ?? "0.0.0";
+	} catch {
+		return "0.0.0";
+	}
+})(), at = (e) => e instanceof Error && e._voltroControl === "redirect" && typeof e.location == "string", ot = (e) => e instanceof Error && e._voltroControl === "not-found", st = {
+	".html": "text/html; charset=utf-8",
+	".js": "application/javascript",
+	".mjs": "application/javascript",
+	".css": "text/css",
+	".json": "application/json",
+	".xml": "application/xml; charset=utf-8",
+	".rss": "application/rss+xml; charset=utf-8",
+	".atom": "application/atom+xml; charset=utf-8",
+	".svg": "image/svg+xml",
+	".png": "image/png",
+	".jpg": "image/jpeg",
+	".jpeg": "image/jpeg",
+	".webp": "image/webp",
+	".ico": "image/x-icon",
+	".woff": "font/woff",
+	".woff2": "font/woff2",
+	".txt": "text/plain; charset=utf-8"
+}, ct = (e) => st[H(e).toLowerCase()] ?? "application/octet-stream", lt = (e) => e.replace(/<script\b(?=[^>]*\btype="module")(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<script\b(?=[^>]*\bsrc=)(?:(?!<\/script>).)*<\/script>/gi, "").replace(/<link\b[^>]*\brel="modulepreload"[^>]*>/gi, ""), ut = async (e) => {
+	try {
+		return await W.stat(e), !0;
+	} catch {
+		return !1;
+	}
+}, dt = (e) => {
+	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
+	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
+	let a = i.join("/");
+	return {
+		regex: a.length === 0 ? /^\/?$/ : RegExp(`^/${a}/?$`),
+		paramNames: t,
+		priority: n
+	};
+}, ft = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = dt(e.pattern);
+	return {
+		pattern: e.pattern,
+		file: e.file,
+		dirChain: e.dirChain,
+		regex: t,
+		paramNames: n,
+		priority: r
+	};
+}).slice().sort((e, t) => e.priority - t.priority), pt = (e, t) => {
+	for (let n of t) {
+		let t = n.regex.exec(e);
+		if (!t) continue;
+		let r = {};
+		for (let e = 0; e < n.paramNames.length; e++) r[n.paramNames[e]] = t[e + 1] ?? "";
+		return {
+			route: n,
+			params: r
+		};
+	}
+	return null;
+}, mt = null, ht = async (e) => {
+	let { provider: t, route: n, params: r, pathname: a, dirs: s, shellTemplate: l, requestHeaders: f, requestUrl: m = "", apiOrigin: g, apiName: ne } = e, { search: _ } = ie(m), v = await ee(te(e.middlewares ?? [], {
+		route: n.pattern,
+		pathname: a
+	}), {
+		pathname: a,
+		search: _,
+		headers: f,
+		cookies: u(f.cookie),
+		route: n.pattern
+	}, e.onCookieWarning), b = await t.getPage(n.pattern, n.file), C = e.forceSsrRender === !0 ? "ssr" : z(b, n.file), w = C === "isr" && b.ppr === !0, T = C === "isr" && e.holesOnly !== !0 ? i(v.headers) : v.headers, re = me(g, T.cookie, {
+		apiName: ne,
+		headers: T
+	});
+	if (e.holesOnly === !0) {
+		if (typeof b.loader != "function") return null;
+		let e = new AbortController();
+		return {
+			holes: {
+				loader: b.loader,
+				ctx: {
+					params: r,
+					pathname: a,
+					search: _,
+					signal: e.signal,
+					headers: T,
+					query: re,
+					isServer: !0
+				},
+				helpers: await t.getHelpers(),
+				page: n.pattern
+			},
+			setCookies: v.setCookies
+		};
+	}
+	let D = C === "spa" && ue(s, n.dirChain).some((e) => e.hasLayout);
+	if (C !== "ssr" && C !== "isr" && !D) return null;
+	let ae = ue(s, n.dirChain), oe = {}, se = null, k, le = new AbortController(), de = w ? h(T, n.pattern) : T;
+	try {
+		(await t.getHelpers()).beginStoreSeeds(), {chain: k, segmentLoaderData: oe} = await he({
+			entries: ae,
+			loadLayout: (e) => t.getLayout(e.dir),
+			loadError: (e) => t.getError(e.dir),
+			loadPending: (e) => t.getPending(e.dir),
+			ctx: {
+				params: r,
+				pathname: a,
+				search: _,
+				signal: le.signal,
+				headers: de,
+				query: re,
+				isServer: !0
+			}
+		}), typeof b.loader == "function" && !D && (se = await b.loader({
+			params: r,
+			pathname: a,
+			search: _,
+			signal: le.signal,
+			headers: de,
+			query: re,
+			isServer: !0
+		}));
+	} catch (e) {
+		if (at(e)) return {
+			control: "redirect",
+			status: e.status,
+			location: e.location,
+			setCookies: v.setCookies,
+			responseHeaders: v.responseHeaders
+		};
+		if (ot(e)) return {
+			control: "not-found",
+			setCookies: v.setCookies,
+			responseHeaders: v.responseHeaders
+		};
+		throw e;
+	}
+	let j = await t.getHelpers();
+	D || await ye({
+		pageMod: b,
+		params: r,
+		query: re,
+		apiName: ne,
+		seed: j.seedPreloadedSubscription,
+		seedFailure: j.seedPreloadedSubscriptionFailure,
+		onError: ({ tag: e, apiName: t }, n) => Q.warn("preload seed failed", {
+			tag: e,
+			apiName: t,
+			pathname: a
+		}, n)
+	});
+	let fe = {
+		pattern: n.pattern,
+		Component: b.default,
+		meta: b.meta,
+		loader: b.loader,
+		ErrorBoundary: b.ErrorBoundary,
+		Pending: b.Pending,
+		renderMode: C,
+		chain: k
+	};
+	if (C === "isr" && v.cspNonce !== void 0) throw Error(`page '${n.pattern}' is renderMode 'isr' while middleware.ts mints a cspNonce — an isr render is CACHED and a cached nonce is a lie the browser enforces. Use renderMode 'ssr' for nonce'd pages, or a hash-based CSP for isr.`);
+	let pe = {
+		cookies: w ? c(ce(v.cookies), n.pattern) : C === "isr" ? ce(v.cookies) : v.cookies,
+		headers: de,
+		url: m,
+		...e.formFlash === void 0 ? {} : { formFlash: e.formFlash }
+	}, M = j.i18n?.resolve(T.cookie, T["accept-language"]), N = {
+		lang: M?.locale ?? pe.cookies["voltro:locale"] ?? "en",
+		...M?.timeZone === void 0 ? {} : { timeZone: M.timeZone },
+		renderedAt: Date.now()
+	}, P = b.interactive ?? "full";
+	if (D) {
+		let e = E({
+			helpers: j,
+			page: n.pattern,
+			interactive: P,
+			delivery: "stream",
+			renderInput: {
+				descriptor: fe,
+				params: r,
+				pathname: a,
+				search: _,
+				segmentLoaderData: oe,
+				requestContext: pe,
+				...M ? {
+					outerWrap: M.outerWrap,
+					locale: M.locale
+				} : {}
+			}
+		}), t = (t) => L({
+			helpers: j,
+			prepared: e,
+			meta: t,
+			interactive: P
+		});
+		if (e.hasDeferred) {
+			let n = d({ shell: l });
+			return {
+				renderMode: "spa",
+				setCookies: v.setCookies,
+				responseHeaders: v.responseHeaders,
+				stream: (r) => x({
+					res: r,
+					shell: n,
+					documentAttrs: N,
+					headers: {
+						...v.responseHeaders,
+						"content-type": "text/html; charset=utf-8",
+						"x-voltro-rendered-by": "spa",
+						...p(v.setCookies)
+					},
+					headInjection: t,
+					render: (t) => j.renderPageToStream({
+						...e.renderInput,
+						...t
+					}),
+					onShellError: (e) => {
+						Q.error("spa layout shell render failed", { pathname: a }, e), r.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), r.end("server error");
+					}
+				})
+			};
+		}
+		let i = A({
+			helpers: j,
+			prepared: e
+		});
+		return {
+			html: o(S(l.replace("<div id=\"root\"></div>", `<div id="root">${i.body}</div>`), t(i.meta)), N),
+			renderMode: "spa",
+			revalidateMs: null,
+			setCookies: v.setCookies,
+			responseHeaders: v.responseHeaders
+		};
+	}
+	let F = I({
+		helpers: j,
+		page: n.pattern,
+		pathname: a,
+		renderMode: C,
+		interactive: P,
+		loaderData: se,
+		segmentLoaderData: oe,
+		pageLoaderRan: typeof b.loader == "function",
+		...w ? { ppr: !0 } : {}
+	});
+	w && y(F.stateInput, n.pattern);
+	let ge = {
+		descriptor: fe,
+		params: r,
+		pathname: a,
+		search: _,
+		loaderData: F.loaderData,
+		segmentLoaderData: F.segmentLoaderData,
+		requestContext: pe,
+		...M ? {
+			outerWrap: M.outerWrap,
+			locale: M.locale
+		} : {}
+	}, _e = (t) => {
+		if (mt === null || C !== "ssr" && C !== "isr" || typeof b.ogImage != "function" || t.includes("og:image")) return "";
+		let r = T["x-tenant"], i = mt.signOgUrl({
+			pattern: n.pattern,
+			params: e.params,
+			...r === void 0 ? {} : { tenant: r }
+		});
+		return `<meta property="og:image" content="${i}" /><meta name="twitter:image" content="${i}" /><meta name="twitter:card" content="summary_large_image" />`;
+	}, ve = (e) => [
+		j.renderMetaToHtml(e) + _e(j.renderMetaToHtml(e)),
+		`<meta name="voltro-interactive" content="${P}" />`,
+		...F.hasDeferred ? [j.renderDeferredRegistryScript()] : [],
+		j.renderRouterStateScript(F.stateInput)
+	].filter((e) => e.length > 0).join("\n    ");
+	if (C === "ssr" && P === "full" && e.buffered !== !0) {
+		let e = d({ shell: l });
+		return {
+			renderMode: "ssr",
+			setCookies: v.setCookies,
+			stream: (t) => x({
+				res: t,
+				shell: e,
+				documentAttrs: N,
+				headers: {
+					...v.responseHeaders,
+					"content-type": "text/html; charset=utf-8",
+					"x-voltro-rendered-by": "ssr",
+					...p(v.setCookies)
+				},
+				headInjection: ve,
+				render: (e) => j.renderPageToStream({
+					...ge,
+					...e,
+					...v.cspNonce === void 0 ? {} : { nonce: v.cspNonce }
+				}),
+				onShellError: (e) => {
+					Q.error("ssr shell render failed", { pathname: a }, e), t.writeHead(500, { "content-type": "text/plain; charset=utf-8" }), t.end("server error");
+				}
+			})
+		};
+	}
+	let { html: be, meta: xe } = j.renderPageToHtml(ge), Se = ve(xe), R = o(S(l.replace("<div id=\"root\"></div>", `<div id="root">${be}</div>`), Se), N);
+	P === "none" && (R = lt(R));
+	let Ce = C === "isr" ? B(b.revalidate) : null;
+	return {
+		html: v.cspNonce === void 0 ? R : O(R, v.cspNonce),
+		renderMode: C,
+		revalidateMs: Ce,
+		setCookies: v.setCookies,
+		responseHeaders: v.responseHeaders
+	};
+}, $ = (e) => e === "" ? "/" : e, gt = async (e) => {
+	let t = await import(G(e).href);
+	return {
+		kind: "bundle",
+		getPageMeta: () => t.pageMeta,
+		async getPage(e, n) {
+			let r = t.pages[e];
+			if (!r) throw Error(`[voltro start] ssr bundle missing page for pattern ${e}`);
+			return typeof r == "function" ? await r() : r;
+		},
+		async getLayout(e) {
+			let n = t.layouts[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing layout for dir ${$(e)}`);
+			return typeof n == "function" ? await n() : n;
+		},
+		async getError(e) {
+			let n = t.errors[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing error for dir ${$(e)}`);
+			return typeof n == "function" ? await n() : n;
+		},
+		async getPending(e) {
+			let n = t.pendings[$(e)];
+			if (!n) throw Error(`[voltro start] ssr bundle missing pending for dir ${$(e)}`);
+			return typeof n == "function" ? await n() : n;
+		},
+		async getHelpers() {
+			return t.helpers;
+		},
+		async close() {}
+	};
+}, _t = async (e, t) => {
+	let n = await F("vite", () => import("vite")), r = (await import("@vitejs/plugin-react")).default, i = (await import("@tailwindcss/vite")).default, o = await n.createServer({
+		root: t,
+		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
+		plugins: [r(), i()],
+		resolve: { dedupe: [
+			"react",
+			"react-dom",
+			"react-intl",
+			"@voltro/i18n"
+		] },
+		ssr: { noExternal: ["react-intl", "@voltro/i18n"] },
+		server: {
+			middlewareMode: !0,
+			hmr: !1
+		},
+		appType: "custom",
+		logLevel: "warn"
+	}), s = U(e, "src", "pages"), c = (e) => e === "" ? s : U(s, e), l = a({
+		limit: k(),
+		onColdStart: (e) => Q.debug("ssr cold-compile start", { id: e }),
+		onColdEnd: (e, { durationMs: t, failed: n }) => Q.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
+			id: e,
+			ms: t,
+			...n ? { failed: !0 } : {}
+		})
+	}), u = (e) => l.load(e, async () => await o.ssrLoadModule(e));
+	return {
+		kind: "middleware",
+		async getPage(e, t) {
+			return u(U(s, t));
+		},
+		async getLayout(e) {
+			return u(U(c(e), "layout.tsx"));
+		},
+		async getError(e) {
+			return u(U(c(e), "error.tsx"));
+		},
+		async getPending(e) {
+			return u(U(c(e), "loading.tsx"));
+		},
+		async getHelpers() {
+			return await u("@voltro/web/ssr");
+		},
+		async close() {
+			await o.close();
+		}
+	};
+}, vt = async (t) => {
+	let i = Be(), a = await N(t);
+	if (!a) return {
+		ran: !1,
+		exitCode: 0
+	};
+	if (a.type !== "web") return Q.error("only web apps are supported by `voltro start`"), {
+		ran: !0,
+		exitCode: 1
+	};
+	{
+		let e = v(a);
+		if (e !== void 0) return Q.error(`voltro start: refusing to boot — ${e}`), {
+			ran: !0,
+			exitCode: 1
+		};
+	}
+	let { resolved: o } = await w({
+		rawEnv: a.env,
+		appType: "web",
+		root: t,
+		log: Q,
+		generateTypes: !1
+	}), c = o.publicValues;
+	i.mark("config");
+	let d = ge();
+	ne(d), Q.info("booting voltro start", { app: a.name ?? "(unnamed)" });
+	let p = n({
+		kind: "web",
+		configPort: a.port,
+		env: process.env,
+		dashboardPin: process.env[C] === "1"
+	});
+	for (let e of p.warnings) Q.warn(e);
+	let h = p.port, y = U(t, ".framework"), x = U(y, "dist"), S = U(x, "index.html");
+	if (!await ut(S)) return Q.error("no built dist found — run `voltro build` first", { distDir: x }), {
+		ran: !0,
+		exitCode: 1
+	};
+	let E = a.name ?? "unnamed", O = Re("web", E, h), k = ze(E);
+	await Fe({
+		id: O,
+		name: E,
+		kind: "web",
+		url: `http://localhost:${h}`,
+		pid: process.pid,
+		status: "booting",
+		logFile: k.path
+	}).catch(() => {});
+	let ce = U(x, "_voltro", "shell.html"), A = await ut(ce) ? await W.readFile(ce, "utf8") : await W.readFile(S, "utf8"), F = await de(t, a), he = De(a), I = fe(F[0]), L = F[0]?.name, ye = /* @__PURE__ */ new Set(), z = (e) => {
+		ye.has(e.name) || (ye.add(e.name), Q.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
+			cookie: e.name,
+			hint: "If your IdP client reads this from `document.cookie` (Supabase's `createBrowserClient` does), pass `httpOnly: false`. Otherwise the SSR render succeeds and the user is signed out at the first client-side call. Set `httpOnly: true` explicitly to silence this."
+		}));
+	}, B = await m(t);
+	B.length > 0 && Q.info(`middleware.ts loaded — ${B.length} middleware(s): ` + B.map((e) => e.exportName).join(", "));
+	let V, H = null, Ve = process.env.SSR_CACHE === "postgres";
+	if (Ve && xe()) H = new (await (import("pg"))).default.Client(be()), await H.connect(), V = tt({ client: H }), Q.info("isr cache backend: postgres", { table: "voltro_isr_cache" });
+	else if (Ve) {
+		let t = "SSR_CACHE=postgres, but nothing in the environment names a database (looked for DB_URL, DB_PRIMARY_URL, DB_DIRECT_URL, DB_MIGRATE_URL, DB_HOST, PG_HOST).";
+		if (e()) throw Q.fatal(`${t} Refusing to fall back to the per-process memory cache: it is not shared between instances and does not survive a restart, so the pages this process serves would differ from its replicas' with nothing to indicate it.`), Error("[voltro start] SSR_CACHE=postgres with no database configured");
+		V = Me(), Q.warn(`${t} Falling back to the per-process memory cache — this would be a hard failure in production.`);
+	} else V = Me(), Q.info("isr cache backend: memory (per-process)", { hint: "set SSR_CACHE=postgres for persistent storage" });
+	await s(t, a, F, c);
+	let He = U(t, "src", "pages"), { pages: G, dirs: K } = await ve(He), q = ft(G);
+	se(B, q.map((e) => e.pattern)), i.mark("scan");
+	let J = U(x, "server", "ssrEntry.js"), Je = await ut(J);
+	if (!Je && process.env.NODE_ENV === "production") throw Q.fatal(`production \`voltro start\` requires a precompiled SSR bundle at ${J} but it is missing. Run \`voltro build\` before serving — production renders from the bundle and never compiles on demand.`), Error(`[voltro start] missing SSR bundle at ${J}`);
+	let Y = Je ? await gt(J) : await _t(t, y);
+	Q.info(`ssr loader: ${Y.kind}`, {
+		kind: Y.kind,
+		...Y.kind === "middleware" ? { hint: "no pre-built SSR bundle found; run `voltro build` to enable bundle mode" } : {}
+	}), i.mark("provider");
+	let Ze = Y.getPageMeta?.();
+	re(t);
+	let X = /* @__PURE__ */ new Map(), $e = 0;
+	for (let e of G) {
+		let t = Ze?.[e.pattern];
+		if (t) {
+			X.set(e.pattern, t);
+			continue;
+		}
+		try {
+			let t = await Y.getPage(e.pattern, e.file);
+			X.set(e.pattern, Ae(t, e.file)), $e++;
+		} catch (t) {
+			Q.warn("failed to load page metadata", { pattern: e.pattern }, t);
+		}
+	}
+	let et = /* @__PURE__ */ new Map();
+	for (let [e, t] of X) {
+		if (t.interactive !== "islands") continue;
+		let n = U(x, "island-shells", `${b(e)}.html`);
+		try {
+			et.set(e, await W.readFile(n, "utf8"));
+		} catch {
+			Q.warn("islands page has no built per-page shell — serving the full app shell", {
+				pattern: e,
+				expected: n
+			});
+		}
+	}
+	Q.info(`registered ${X.size} route(s)`, {
+		count: X.size,
+		fromManifest: X.size - $e,
+		fromModules: $e
+	}), i.mark("routes");
+	let Z = /* @__PURE__ */ new Set();
+	for (let e of q) X.get(e.pattern)?.renderMode === "spa" && ue(K, e.dirChain).some((e) => e.hasLayout) && Z.add(e.pattern);
+	Z.size > 0 && Q.info(`${Z.size} spa route(s) render an SSR layout shell`, { patterns: [...Z] });
+	let at = /* @__PURE__ */ new Map();
+	for (let [e, t] of X) t.cacheInvalidatesOn.length > 0 && at.set(e, t.cacheInvalidatesOn);
+	let ot = /* @__PURE__ */ new Map();
+	for (let e of q) ot.set(e.pattern, e.regex);
+	{
+		let n = new Set([...X].filter(([, e]) => (e.renderMode === "ssr" || e.renderMode === "isr") && e.hasOgImage).map(([e]) => e));
+		if (n.size > 0) {
+			let { secret: r, fromEnv: i } = ae();
+			if (!i && e()) throw Q.fatal(`${n.size} ssr route(s) export ogImage, but VOLTRO_OG_SECRET is unset. Behind a load balancer the signing replica and the fetching replica differ, so a per-boot secret would 403 every cross-replica image fetch. Set VOLTRO_OG_SECRET (any long random value, same on every replica).`), Error("[voltro start] ssr ogImage routes need VOLTRO_OG_SECRET in a deploy environment");
+			let o = new Map(G.map((e) => [e.pattern, e.file]));
+			mt = j({
+				root: t,
+				fonts: a.fonts,
+				cache: V,
+				secret: r,
+				isOgSsrRoute: (e) => n.has(e),
+				getPageModule: async (e) => {
+					let t = o.get(e);
+					return t === void 0 ? null : await Y.getPage(e, t);
+				}
+			}), Q.info(`og route active for ${n.size} ssr route(s)`, { secret: i ? "env" : "per-boot" });
+		}
+	}
+	let st = /* @__PURE__ */ new Map();
+	for (let [e, t] of X) st.set(e, t.renderMode);
+	let lt = [...X.values()].some((e) => e.renderMode === "isr"), dt = {
+		cache: V,
+		tableSink: Xe({
+			cache: V,
+			tableSubscriptionsByPattern: at,
+			regexByPattern: ot
+		}),
+		regexByPattern: ot,
+		renderModeByPattern: st
+	}, $ = (e) => {
+		let t = nt(e);
+		t && rt(dt, t);
+	}, vt = Qe({
+		cache: V,
+		tableSubscriptionsByPattern: at,
+		regexByPattern: ot,
+		...lt ? { onRevalidate: $ } : {}
+	}), yt = await vt.start(), bt = null, xt = null;
+	if (lt) {
+		let e = Ke({}, process.env);
+		if (e.crossReplica) try {
+			xt = e.provider;
+			let t = Oe(process.env);
+			bt = await We.runPromise(e.provider.subscribe(t, $)), Q.info(`revalidation subscriber: broker (${e.provider.name})`, { channel: t });
+		} catch (e) {
+			Q.warn("revalidation broker subscribe failed — broker leg disabled", {}, e), xt = null;
+		}
+		yt && bt === null && Q.info("revalidation subscriber: postgres LISTEN (voltro_revalidate)"), !yt && bt === null && Q.warn("isr routes exist, but this web process has NO revalidation transport: no database is configured for the LISTEN line and no broker is configured. `revalidatePath` / `revalidateTable` / `revalidateTag` from the api will not reach this process — cached pages stay until their own `revalidate` window expires. Set DB_URL (postgres) or BROADCAST_URL (redis:// or nats://) on BOTH the api and this web deployment.");
+	}
+	i.mark("cdc");
+	let St = ke(), Ct = G.map((e) => {
+		let t = X.get(e.pattern);
+		return {
+			pattern: e.pattern,
+			file: e.file,
+			dirChain: e.dirChain,
+			renderMode: t?.renderMode ?? "static",
+			interactive: t?.interactive ?? "full",
+			tenantAware: t?.tenantAware ?? !1,
+			revalidateMs: t?.revalidateMs ?? null,
+			staleWhileRevalidateMs: t?.staleWhileRevalidateMs ?? 0,
+			cacheInvalidatesOn: t?.cacheInvalidatesOn ?? [],
+			hasLoader: t?.hasLoader ?? !1,
+			hasMeta: t?.hasMeta ?? !1,
+			hasGetStaticPaths: t?.hasGetStaticPaths ?? !1
+		};
+	}), wt = K.map((e) => ({
+		dir: e.dir,
+		hasLayout: e.hasLayout,
+		hasError: e.hasError,
+		hasPending: e.hasPending,
+		hasNotFound: e.hasNotFound
+	})), Tt = H ? "postgres" : "memory", Et = {
+		kind: "web",
+		meta: {
+			name: a.name ?? "(unnamed)",
+			voltroVersion: it,
+			port: h,
+			mode: "start",
+			apis: Object.entries(a.apis ?? {}).map(([e, t]) => {
+				let n = {
+					name: e,
+					package: t.package
+				};
+				return t.url !== void 0 && (n.url = t.url), n;
+			})
+		},
+		routes: Ct,
+		dirs: wt,
+		cache: () => {
+			let e = Date.now(), t = V.snapshot().map(([t, n]) => ({
+				key: t,
+				renderedAt: n.renderedAt,
+				expiresAt: n.expiresAt,
+				servableUntil: n.servableUntil,
+				ageMs: e - n.renderedAt,
+				htmlBytes: Buffer.byteLength(n.html, "utf8"),
+				revalidateMs: n.revalidateMs,
+				staleWhileRevalidateMs: n.staleWhileRevalidateMs
+			}));
+			return {
+				backend: Tt,
+				size: V.size(),
+				entries: t
+			};
+		},
+		metrics: () => Ge()
+	}, Dt = async (e, n) => {
+		let i = e.split("?")[0] ?? "/";
+		if (a.name === "voltroDashboard" && i === "/api/dashboard/registry") try {
+			let e = await Ie();
+			return {
+				status: 200,
+				headers: { "content-type": "application/json; charset=utf-8" },
+				body: JSON.stringify(e)
+			};
+		} catch (e) {
+			return {
+				status: 500,
+				headers: { "content-type": "text/plain" },
+				body: `registry read error: ${e.message}`
+			};
+		}
+		if (a.name === "voltroDashboard" && i === "/api/dashboard/config") {
+			let e = process.env.VOLTRO_DASHBOARD_APPS, t = [];
+			if (e && e.trim().length > 0) {
+				let n;
+				try {
+					n = JSON.parse(e);
+				} catch (e) {
+					return {
+						status: 500,
+						headers: { "content-type": "text/plain" },
+						body: `VOLTRO_DASHBOARD_APPS is not valid JSON: ${e.message}`
+					};
+				}
+				for (let e of Array.isArray(n) ? n : []) {
+					if (typeof e != "object" || !e) continue;
+					let n = e;
+					typeof n.url == "string" && n.url.length !== 0 && t.push({
+						url: n.url,
+						...typeof n.name == "string" ? { name: n.name } : {},
+						...typeof n.token == "string" ? { token: n.token } : {}
+					});
+				}
+			}
+			return {
+				status: 200,
+				headers: { "content-type": "application/json; charset=utf-8" },
+				body: JSON.stringify({ apps: t })
+			};
+		}
+		if (mt !== null && i === "/_voltro/og") {
+			let t = await mt.handle(new URL(e, "http://localhost"));
+			if (t !== null) return {
+				status: t.status,
+				headers: { ...t.headers },
+				body: Buffer.from(t.body)
+			};
+		}
+		if (i === "/_voltro/inspect/logs") {
+			let t = T(e, r(), n);
+			return {
+				status: t.status,
+				headers: {
+					"content-type": t.contentType,
+					...R(n.origin)
+				},
+				body: t.body
+			};
+		}
+		if (i !== "/_voltro/inspect/stream") {
+			let t = we(e, Et, n);
+			if (t !== null) return {
+				status: t.status,
+				headers: {
+					"content-type": t.contentType,
+					...t.headers ?? {}
+				},
+				body: t.body
+			};
+		}
+		let o = pt(i, q), s = o ? X.get(o.route.pattern)?.renderMode : void 0, c = s === "ssr" || s === "isr" || (o ? Z.has(o.route.pattern) : !1), f = [];
+		if (!c && B.length > 0) {
+			let t = te(B, {
+				route: void 0,
+				pathname: i
+			});
+			if (t !== void 0) {
+				let r = await ee(t, {
+					pathname: i,
+					search: e.slice(i.length),
+					headers: n,
+					cookies: u(n.cookie),
+					route: void 0
+				});
+				f.push(...r.setCookies);
+			}
+		}
+		let p = (e) => f.length === 0 ? e : {
+			...e,
+			"set-cookie": f.map(_)
+		}, m = i === "/" ? U(x, "index.html") : U(x, i.replace(/^\//, ""), "index.html");
+		if (!c && await ut(m)) {
+			let e = await W.readFile(m);
+			return {
+				status: 200,
+				headers: p({ "content-type": "text/html; charset=utf-8" }),
+				body: e
+			};
+		}
+		if (/\.[a-z0-9]+$/i.test(i)) {
+			let e = U(x, i.replace(/^\//, ""));
+			if (await ut(e)) {
+				let t = await W.readFile(e);
+				return {
+					status: 200,
+					headers: p({ "content-type": ct(e) }),
+					body: t
+				};
+			}
+		}
+		let h = pt(i, q);
+		if (!h) {
+			let r = oe(K, i);
+			if (r !== void 0) try {
+				let a = await ht({
+					provider: Y,
+					root: t,
+					route: {
+						pattern: "<not-found>",
+						file: r.dir === "" ? "not-found.tsx" : `${r.dir}/not-found.tsx`,
+						dirChain: r.chain,
+						regex: /^$/,
+						paramNames: [],
+						priority: 2 ** 53 - 1
+					},
+					params: {},
+					pathname: i,
+					dirs: K,
+					shellTemplate: A,
+					requestHeaders: n,
+					apiOrigin: I,
+					apiName: L,
+					middlewares: B,
+					onCookieWarning: z,
+					requestUrl: e,
+					buffered: !0,
+					forceSsrRender: !0
+				});
+				if (a && "html" in a && typeof a.html == "string") return {
+					status: 404,
+					headers: p({
+						"content-type": "text/html; charset=utf-8",
+						"x-voltro-rendered-by": "ssr-not-found"
+					}),
+					body: a.html
+				};
+			} catch (e) {
+				Q.warn("not-found.tsx failed to render — serving the plain 404", { pathname: i }, e instanceof Error ? e : Error(String(e)));
+			}
+			return {
+				status: 404,
+				headers: p({
+					"content-type": "text/plain",
+					"x-voltro-rendered-by": "plain-not-found"
+				}),
+				body: "not found"
+			};
+		}
+		let g = X.get(h.route.pattern), ne = n["x-tenant"] ?? "anonymous", v = (await Y.getHelpers()).i18n?.resolve(n.cookie, n["accept-language"])?.locale, y = Ne(i, {
+			...g?.tenantAware ? { tenant: ne } : {},
+			...v ? { locale: v } : {}
+		}), b = g?.ppr === !0 && g.renderMode === "isr", S = (r, a) => ({
+			status: 200,
+			headers: {},
+			body: "",
+			stream: (o) => {
+				l().shellServes += 1, o.writeHead(200, {
+					"content-type": "text/html; charset=utf-8",
+					"x-voltro-rendered-by": "isr",
+					"x-voltro-ppr": "shell+holes",
+					...a
+				}), o.write(r), (async () => {
+					try {
+						let r = await ht({
+							provider: Y,
+							root: t,
+							route: h.route,
+							params: h.params,
+							pathname: i,
+							dirs: K,
+							shellTemplate: et.get(h.route.pattern) ?? A,
+							requestHeaders: n,
+							apiOrigin: I,
+							apiName: L,
+							middlewares: B,
+							onCookieWarning: z,
+							requestUrl: e,
+							holesOnly: !0
+						});
+						r !== null && "holes" in r ? await _e({
+							loader: r.holes.loader,
+							ctx: r.holes.ctx,
+							res: o,
+							helpers: r.holes.helpers,
+							page: r.holes.page,
+							log: Q
+						}) : o.writableEnded || o.end();
+					} catch (e) {
+						Q.warn("ppr hole pass failed", { url: i }, e), o.writableEnded || o.end();
+					}
+				})();
+			}
+		}), C = V.get(y), w = Date.now();
+		if (C && Pe(C, w)) return d.emit("cache", {
+			kind: "HIT",
+			key: y,
+			ageMs: w - C.renderedAt
+		}), b ? S(C.html, {
+			"x-voltro-cache": "HIT",
+			"x-voltro-cache-key": y,
+			"x-voltro-cache-age-ms": String(w - C.renderedAt)
+		}) : {
+			status: 200,
+			headers: {
+				"content-type": "text/html; charset=utf-8",
+				"x-voltro-rendered-by": "isr",
+				"x-voltro-cache": "HIT",
+				"x-voltro-cache-key": y,
+				"x-voltro-cache-age-ms": String(w - C.renderedAt)
+			},
+			body: C.html
+		};
+		if (C && je(C, w)) {
+			d.emit("cache", {
+				kind: "STALE",
+				key: y,
+				ageMs: w - C.renderedAt
+			});
+			let r = V.generation(y);
+			return (async () => {
+				try {
+					let a = await ht({
+						provider: Y,
+						root: t,
+						route: h.route,
+						params: h.params,
+						pathname: i,
+						dirs: K,
+						shellTemplate: et.get(h.route.pattern) ?? A,
+						requestHeaders: n,
+						apiOrigin: I,
+						apiName: L,
+						middlewares: B,
+						onCookieWarning: z,
+						requestUrl: e,
+						buffered: !0
+					});
+					if (a && "html" in a && a.renderMode === "isr" && a.revalidateMs !== null) {
+						let e = X.get(h.route.pattern)?.staleWhileRevalidateMs ?? 0, t = Date.now();
+						V.set(y, {
+							html: a.html,
+							renderedAt: t,
+							expiresAt: t + a.revalidateMs,
+							servableUntil: t + a.revalidateMs + e,
+							revalidateMs: a.revalidateMs,
+							staleWhileRevalidateMs: e
+						}, { ifGeneration: r }) || Q.info("SWR refresh discarded — the entry was purged while it rendered", { key: y });
+					}
+				} catch (e) {
+					Q.warn("background SWR refresh failed", { url: i }, e);
+				}
+			})(), b ? S(C.html, {
+				"x-voltro-cache": "STALE",
+				"x-voltro-cache-key": y,
+				"x-voltro-cache-age-ms": String(w - C.renderedAt)
+			}) : {
+				status: 200,
+				headers: {
+					"content-type": "text/html; charset=utf-8",
+					"x-voltro-rendered-by": "isr",
+					"x-voltro-cache": "STALE",
+					"x-voltro-cache-key": y,
+					"x-voltro-cache-age-ms": String(w - C.renderedAt)
+				},
+				body: C.html
+			};
+		}
+		try {
+			let r = V.generation(y), a = await ht({
+				provider: Y,
+				root: t,
+				route: h.route,
+				params: h.params,
+				pathname: i,
+				dirs: K,
+				shellTemplate: et.get(h.route.pattern) ?? A,
+				requestHeaders: n,
+				apiOrigin: I,
+				apiName: L,
+				middlewares: B,
+				onCookieWarning: z,
+				requestUrl: e
+			});
+			if (!a) return {
+				status: 200,
+				headers: {
+					"content-type": "text/html; charset=utf-8",
+					"x-voltro-rendered-by": "spa-fallback"
+				},
+				body: A
+			};
+			let o = a.setCookies ?? [], s = a.responseHeaders ?? {}, c = (e) => ({
+				...s,
+				...e,
+				...o.length === 0 ? {} : { "set-cookie": o.map(_) }
+			});
+			if ("stream" in a) return {
+				status: 200,
+				headers: { "x-voltro-rendered-by": a.renderMode },
+				body: "",
+				stream: a.stream
+			};
+			if ("control" in a) return a.control === "redirect" ? {
+				status: a.status,
+				headers: c({
+					location: a.location,
+					"x-voltro-rendered-by": "loader-redirect"
+				}),
+				body: ""
+			} : {
+				status: 404,
+				headers: c({
+					"content-type": "text/plain; charset=utf-8",
+					"x-voltro-rendered-by": "loader-not-found"
+				}),
+				body: "not found"
+			};
+			if ("holes" in a) throw Error("renderPageForRequest returned a holes arm without holesOnly");
+			let l = c({
+				"content-type": "text/html; charset=utf-8",
+				"x-voltro-rendered-by": a.renderMode
+			});
+			if (a.renderMode === "isr" && a.revalidateMs !== null) {
+				let e = Date.now(), t = X.get(h.route.pattern)?.staleWhileRevalidateMs ?? 0;
+				V.set(y, {
+					html: a.html,
+					renderedAt: e,
+					expiresAt: e + a.revalidateMs,
+					servableUntil: e + a.revalidateMs + t,
+					revalidateMs: a.revalidateMs,
+					staleWhileRevalidateMs: t
+				}, { ifGeneration: r }) || Q.info("miss fill discarded — the entry was purged while it rendered", { key: y }), l["x-voltro-cache"] = "MISS", l["x-voltro-cache-key"] = y, l["x-voltro-cache-revalidate-ms"] = String(a.revalidateMs), t > 0 && (l["x-voltro-cache-swr-ms"] = String(t)), d.emit("cache", {
+					kind: "MISS",
+					key: y,
+					revalidateMs: a.revalidateMs,
+					swrMs: t
+				});
+			} else a.renderMode === "isr" && (l["x-voltro-cache"] = "BYPASS", d.emit("cache", {
+				kind: "BYPASS",
+				key: y
+			}));
+			return b && a.renderMode === "isr" ? S(a.html, {
+				"x-voltro-cache": l["x-voltro-cache"] ?? "MISS",
+				"x-voltro-cache-key": y
+			}) : {
+				status: 200,
+				headers: l,
+				body: a.html
+			};
+		} catch (e) {
+			return Q.error("render error", { url: i }, e), M(e) ? {
+				status: 500,
+				headers: {
+					"content-type": "text/plain; charset=utf-8",
+					"x-voltro-rendered-by": "defer-unsupported"
+				},
+				body: e.message
+			} : e instanceof Error && e.name === "PprShellCredentialAccessError" ? {
+				status: 500,
+				headers: {
+					"content-type": "text/plain; charset=utf-8",
+					"x-voltro-rendered-by": "ppr-shell-credential"
+				},
+				body: e.message
+			} : {
+				status: 500,
+				headers: { "content-type": "text/plain" },
+				body: "server error"
+			};
+		}
+	}, Ot = !1, kt = le({
+		apiName: L,
+		apiOrigin: I,
+		loadDescriptors: async () => {
+			if (L === void 0) return;
+			let e = (await Y.getHelpers()).apiDescriptors?.[L];
+			return e === void 0 ? void 0 : await e();
+		},
+		rpcQuery: (e, t) => me(I, e, {
+			apiName: L,
+			headers: t
+		}),
+		renderErrorPage: async ({ path: e, headers: n, flash: r }) => {
+			let { pathname: i } = ie(e), a = pt(i, q);
+			if (!a) return;
+			let o = await ht({
+				provider: Y,
+				root: t,
+				route: a.route,
+				params: a.params,
+				pathname: i,
+				dirs: K,
+				shellTemplate: A,
+				requestHeaders: n,
+				apiOrigin: I,
+				apiName: L,
+				middlewares: B,
+				onCookieWarning: z,
+				requestUrl: e,
+				formFlash: r,
+				buffered: !0
+			});
+			return o !== null && "html" in o ? o.html : void 0;
+		}
+	}), At = qe(async (e, t) => {
+		let n = e.url ?? "/", r = Date.now(), i = {};
+		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (i[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
+		let o = n.split("?")[0] ?? "/", s = (e.method ?? "GET").toUpperCase();
+		if (o === "/internal/liveness") {
+			t.writeHead(200, {
+				"content-type": "text/plain",
+				"cache-control": "no-store"
+			}), t.end("ok");
+			return;
+		}
+		if (o === "/internal/readiness") {
+			let e = Ot ? 200 : 503;
+			t.writeHead(e, {
+				"content-type": "text/plain",
+				"cache-control": "no-store"
+			}), t.end(Ot ? "ready" : "not-ready");
+			return;
+		}
+		if (!(o.startsWith(g) && await kt(e, t))) {
+			if (s === "OPTIONS" && o.startsWith("/_voltro/inspect")) {
+				let e = R(i.origin);
+				t.writeHead(204, e), t.end();
+				return;
+			}
+			if (a.name === "voltroDashboard" && o === "/api/dashboard/proxy") {
+				let r = new URL(n, "http://x").searchParams.get("target");
+				if (!r) {
+					t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
+					return;
+				}
+				if (!Ee(r)) {
+					t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
+					return;
+				}
+				try {
+					let n = { accept: i.accept ?? "application/json" }, a = i.authorization;
+					a ? n.authorization = Array.isArray(a) ? a[0] : a : Te(r) && process.env.VOLTRO_INSPECT_TOKEN && (n.authorization = `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}`);
+					let o;
+					if (s && s !== "GET" && s !== "HEAD") {
+						let t = [];
+						for await (let n of e) t.push(n);
+						o = Buffer.concat(t);
+						let r = i["content-type"];
+						r && (n["content-type"] = Array.isArray(r) ? r[0] : r);
+					}
+					let c = await fetch(r, {
+						redirect: "manual",
+						method: s,
+						headers: n,
+						...o ? { body: new Uint8Array(o.buffer, o.byteOffset, o.byteLength) } : {}
+					}), l = Buffer.from(await c.arrayBuffer());
+					t.writeHead(c.status, {
+						"content-type": c.headers.get("content-type") ?? "application/octet-stream",
+						"content-length": String(l.length)
+					}), t.end(l);
+				} catch (e) {
+					t.writeHead(502, { "content-type": "text/plain" }), t.end(`proxy error: ${e.message}`);
+				}
+				return;
+			}
+			if (a.name === "voltroDashboard" && o === "/api/dashboard/proxy/stream") {
+				let r = new URL(n, "http://x").searchParams.get("target");
+				if (!r) {
+					t.writeHead(400, { "content-type": "text/plain" }), t.end("missing ?target=");
+					return;
+				}
+				if (!Ee(r)) {
+					t.writeHead(400, { "content-type": "text/plain" }), t.end("target not allowed: must be loopback or an origin configured in VOLTRO_DASHBOARD_APPS");
+					return;
+				}
+				let a = new AbortController();
+				e.on("close", () => a.abort()), t.on("close", () => a.abort());
+				try {
+					let e = i.authorization ?? (Te(r) && process.env.VOLTRO_INSPECT_TOKEN ? `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}` : void 0), n = await fetch(r, {
+						redirect: "manual",
+						method: "GET",
+						headers: {
+							accept: "text/event-stream",
+							...e ? { authorization: Array.isArray(e) ? e[0] : e } : {}
+						},
+						signal: a.signal
+					});
+					if (!n.ok || !n.body) {
+						t.writeHead(n.status, { "content-type": "text/plain" }), t.end(`upstream ${n.status}`);
+						return;
+					}
+					t.writeHead(200, {
+						"content-type": "text/event-stream; charset=utf-8",
+						"cache-control": "no-cache, no-transform",
+						connection: "keep-alive",
+						"x-accel-buffering": "no"
+					}), t.flushHeaders();
+					let o = n.body.getReader();
+					try {
+						for (;;) {
+							let { done: e, value: n } = await o.read();
+							if (e) break;
+							n && t.write(Buffer.from(n));
+						}
+					} finally {
+						o.releaseLock(), t.end();
+					}
+				} catch (e) {
+					e.name !== "AbortError" && (t.writeHead(502, { "content-type": "text/plain" }), t.end(`proxy stream error: ${e.message}`));
+				}
+				return;
+			}
+			if (o === "/_voltro/inspect/stream") {
+				let n = R(i.origin);
+				if (Se()) {
+					t.writeHead(503, {
+						"content-type": "application/json",
+						...n
+					}), t.end(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }));
+					return;
+				}
+				let r = Ce(i, "GET");
+				if (!r.ok) {
+					t.writeHead(401, {
+						"content-type": "application/json",
+						...n
+					}), t.end(JSON.stringify({
+						error: "unauthorized",
+						reason: r.reason
+					}));
+					return;
+				}
+				t.writeHead(200, {
+					"content-type": "text/event-stream; charset=utf-8",
+					"cache-control": "no-cache, no-transform",
+					connection: "keep-alive",
+					"x-accel-buffering": "no",
+					...n
+				}), t.flushHeaders(), t.write("retry: 5000\n\n");
+				for (let e of d.buffered()) t.write(D(e));
+				let a = d.subscribe((e) => {
+					t.write(D(e));
+				}), o = setInterval(() => {
+					t.write(pe());
+				}, 15e3), s = () => {
+					clearInterval(o), a();
+				};
+				e.on("close", s), t.on("close", s);
+				return;
+			}
+			try {
+				let e = await Dt(n, i);
+				if (e.stream ? e.stream(t) : Ye({
+					response: t,
+					status: e.status,
+					headers: e.headers,
+					body: e.body,
+					requestHeaders: i,
+					compression: he.compression
+				}) || (t.writeHead(e.status, e.headers), t.end(e.body)), !o.startsWith("/_voltro/inspect")) {
+					let t = Date.now() - r;
+					d.emit("request", {
+						url: o,
+						status: e.status,
+						durationMs: t,
+						renderedBy: e.headers["x-voltro-rendered-by"],
+						cache: e.headers["x-voltro-cache"]
+					});
+					let n = pt(o, q)?.route.pattern ?? (e.status === 404 ? "<unmatched>" : "<asset>");
+					St.record({
+						kind: "request",
+						tag: n,
+						durationMs: t,
+						status: e.status >= 500 ? "error" : "ok"
+					});
+				}
+			} catch (e) {
+				t.writeHead(500, { "content-type": "text/plain" }), t.end(`internal error: ${e.message}`);
+			}
+		}
+	});
+	await new Promise((e) => At.listen(h, "::", e)), Ot = !0, i.mark("ready"), Q.info(`listening on http://localhost:${h}`, {
+		port: h,
+		distDir: x
+	}), Q.debug("dynamic + ssr/isr routes resolve via SSR loader");
+	try {
+		await Fe({
+			id: O,
+			name: E,
+			kind: "web",
+			url: `http://localhost:${h}`,
+			pid: process.pid,
+			status: "live",
+			logFile: k.path
+		});
+		let e = P(t);
+		if (e) {
+			let t = await f({ dashboardAppPath: e });
+			t.status === "launched" ? Q.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && Q.debug(`dashboard already running on :${t.port}`, { port: t.port });
+		}
+		setInterval(() => {
+			Fe({
+				id: O,
+				name: E,
+				kind: "web",
+				url: `http://localhost:${h}`,
+				pid: process.pid,
+				status: "live",
+				logFile: k.path
+			}).catch(() => {});
+		}, 1e4).unref();
+	} catch (e) {
+		Q.warn("runtime-registry write failed", {}, e);
+	}
+	Ue({
+		app: a.name ?? "unnamed",
+		kind: "web",
+		url: `http://localhost:${h}`,
+		bootMs: i.total()
+	});
+	let jt = i.phaseBreakdown();
+	Q.info(`start: ready in ${i.total()}ms`, {
+		bootMs: i.total(),
+		...jt ? { phases: jt } : {}
+	});
+	let Mt = !1, Nt = (e) => async () => {
+		if (!Mt) {
+			if (Mt = !0, Q.info(`received ${e}, shutting down`, { signal: e }), At.close(), await vt.stop(), bt) try {
+				bt();
+			} catch {}
+			if (xt) try {
+				await We.runPromise(xt.close());
+			} catch {}
+			if (H) try {
+				await H.end();
+			} catch {}
+			await Y.close(), await Le(O), await k.dispose(), process.exit(0);
+		}
+	};
+	process.on("SIGINT", Nt("SIGINT")), process.on("SIGTERM", Nt("SIGTERM"));
+	let Pt = process.ppid;
+	if (Pt > 1) {
+		let e = setInterval(() => {
+			(process.ppid !== Pt || process.ppid === 1) && (clearInterval(e), Nt("SIGTERM")());
+		}, 2e3);
+		e.unref();
+	}
+	return new Promise(() => {});
+}, yt = async (e) => {
+	t("start");
+	let n = e.find((e) => !e.startsWith("-")) ?? process.cwd(), r = await vt(Ve(n));
+	return r.ran ? r.exitCode : (Q.error("no web app found at this path"), 1);
+};
+//#endregion
+export { vt as n, yt as t };