@voltro/cli 0.52.0 → 0.53.0

package/dist/{webDev-BgWL9gKV.js → webDev-oczpugbx.js}

@@ -2,40 +2,43 @@ import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
 import { n as t } from "./loadEnv-D9nEOClM.js";
 import { t as n } from "./bootRefusal-pgvDxlrU.js";
 import { r } from "./appPort-B_HpJ_ck.js";
-import { A as i, _ as a, g as o, h as s, m as c, o as l } from "./fileConventions-DOqD3lPS.js";
-import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-CtL_xTbu.js";
+import { _ as i, g as a, h as o, j as s, s as c, v as l } from "./fileConventions-DASGEmj-.js";
+import { A as u, D as d, a as f, h as p, j as m, k as h } from "./inspect-Bd8-9wsi.js";
 import { n as g } from "./agentsMd-0l980yhL.js";
-import { c as _, p as v, t as y } from "./renderModeScan-CcH2X1_D.js";
-import { t as b } from "./pageConvention-CzUiSbtU.js";
-import { i as x, n as S, r as C, t as w } from "./runtimeRegistry-DMeKfTHP.js";
-import { n as T } from "./logFileSink-B4uP8pvf.js";
-import { basename as E, dirname as D, join as O, relative as k, resolve as A, sep as j } from "node:path";
-import { existsSync as M, promises as N, readFileSync as P, readdirSync as F, statSync as ee, unwatchFile as te, watchFile as ne } from "node:fs";
-import { fileURLToPath as re, pathToFileURL as I } from "node:url";
-import { addSink as L, createLogger as R, printReadyBlock as z } from "@voltro/logger";
-import { createRequire as ie } from "node:module";
-import { classifyRequestOrigin as B, currentTraceContext as V, resolveOriginGuardConfig as ae, resolveSecret as oe } from "@voltro/runtime";
-import { homedir as H } from "node:os";
-import { FRAMEWORK_ENV_CATALOG as se, appEnvEntries as U, checkEnvNaming as ce, formatEnvErrors as le, installEnvSnapshot as W, isEnvContract as ue, pluginEnvEntries as de, renderDotEnvExample as fe, resolveEnv as pe } from "@voltro/env";
-import { __installPublicEnv as me } from "@voltro/env/public";
-import { mkdir as G, writeFile as he } from "node:fs/promises";
-import { createHash as ge } from "node:crypto";
-import { spawn as _e } from "node:child_process";
-import { createConnection as K } from "node:net";
-import { FORM_FLASH_SCRIPT_ID as ve, FORM_KEY_FIELD as ye, FORM_PATH_PREFIX as be, FORM_PATH_PREFIX as xe, FORM_REDIRECT_FIELD as Se, formDataToInput as Ce, validateFields as we } from "@voltro/client/form";
-import { PassThrough as Te } from "node:stream";
+import { c as _, f as v, p as y, t as b } from "./renderModeScan-CUbOeOAg.js";
+import { a as x, c as S, d as C, f as w, i as T, l as E, o as D, p as O, r as k, s as A, t as j } from "./imagePipeline-CBZmjT4i.js";
+import { d as M, n as N } from "./fontPipeline-Tsh8kZfA.js";
+import { t as P } from "./pageConvention-C938S8oC.js";
+import { i as ee, n as te, r as ne, t as re } from "./runtimeRegistry-DMeKfTHP.js";
+import { n as ie } from "./logFileSink-B4uP8pvf.js";
+import { basename as ae, dirname as F, join as I, relative as L, resolve as R, sep as z } from "node:path";
+import { existsSync as B, promises as V, readFileSync as oe, readdirSync as H, statSync as U, unwatchFile as se, watchFile as ce } from "node:fs";
+import { fileURLToPath as W, pathToFileURL as G } from "node:url";
+import { addSink as le, createLogger as K, printReadyBlock as ue } from "@voltro/logger";
+import { createRequire as q } from "node:module";
+import { classifyRequestOrigin as de, currentTraceContext as fe, resolveOriginGuardConfig as pe, resolveSecret as me } from "@voltro/runtime";
+import { homedir as he } from "node:os";
+import { FRAMEWORK_ENV_CATALOG as ge, appEnvEntries as _e, checkEnvNaming as ve, formatEnvErrors as ye, installEnvSnapshot as be, isEnvContract as xe, pluginEnvEntries as Se, renderDotEnvExample as Ce, resolveEnv as we } from "@voltro/env";
+import { __installPublicEnv as Te } from "@voltro/env/public";
+import { mkdir as Ee, readFile as De, writeFile as J } from "node:fs/promises";
+import { createHash as Oe, createHmac as ke, randomBytes as Ae, timingSafeEqual as je } from "node:crypto";
+import { spawn as Me } from "node:child_process";
+import { createConnection as Ne } from "node:net";
+import { FORM_FLASH_SCRIPT_ID as Pe, FORM_KEY_FIELD as Fe, FORM_PATH_PREFIX as Ie, FORM_PATH_PREFIX as Le, FORM_REDIRECT_FIELD as Re, formDataToInput as ze, validateFields as Y } from "@voltro/client/form";
+import { buildFeed as Be, contentArtifactPath as Ve, getCollection as He, getEntry as Ue, invalidateContentCache as We, registeredCollections as Ge, setContentRoot as Ke, validateReferences as qe } from "@voltro/content";
+import { PassThrough as Je } from "node:stream";
 //#region src/buildToolImport.ts
-var Ee = (e) => {
+var Ye = (e) => {
 	let t = e;
 	return t?.code === "ERR_MODULE_NOT_FOUND" || /Cannot find (package|module)/.test(String(t?.message ?? ""));
-}, De = async (e, t) => {
+}, Xe = async (e, t) => {
 	try {
 		return await t();
 	} catch (t) {
-		throw Ee(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
+		throw Ye(t) ? Error(`voltro: the build tool '${e}' is not installed.\n\nIt's an OPTIONAL dependency of @voltro/cli — needed by 'voltro dev' and 'voltro build', but excluded from a serve-only production install (that's how prod images stay lean). If you are building, reinstall WITHOUT '--no-optional' (e.g. 'pnpm install'). A production SERVE container does not need '${e}' — it boots from the precompiled bundle.`) : t;
 	}
-}, Oe = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", ke = (e, t) => t ? `${e} | undefined` : e, Ae = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${ke(t.tsType, t.optional)}`).join("\n"), je = async (e, t) => {
-	let n = Ae(t, () => !0), r = `${Oe}
+}, Ze = "// AUTO-GENERATED by Voltro — DO NOT EDIT.\n// Source: app.config.ts `env` (defineEnv). Regenerated on every `voltro dev` boot.\n", Qe = (e, t) => t ? `${e} | undefined` : e, $e = (e, t) => Object.entries(e.vars).filter(([, e]) => t(e.access)).map(([e, t]) => `${t.description ? `    /** ${t.description} */\n` : ""}    readonly ${e}: ${Qe(t.tsType, t.optional)}`).join("\n"), et = async (e, t) => {
+	let n = $e(t, () => !0), r = `${Ze}
 import '@voltro/env/server'
 
 declare module '@voltro/env/server' {
@@ -44,9 +47,9 @@ ${n.length > 0 ? n : "    // (no variables declared)"}
   }
 }
 `;
-	await he(O(e, "env.generated.d.ts"), r, "utf8");
-}, Me = async (e, t) => {
-	let n = Ae(t, (e) => e === "public"), r = `${Oe}
+	await J(I(e, "env.generated.d.ts"), r, "utf8");
+}, tt = async (e, t) => {
+	let n = $e(t, (e) => e === "public"), r = `${Ze}
 import '@voltro/env/public'
 
 declare module '@voltro/env/public' {
@@ -54,10 +57,10 @@ declare module '@voltro/env/public' {
 ${n.length > 0 ? n : "    // (no public variables declared)"}
   }
 }
-`, i = O(e, "src");
-	await G(i, { recursive: !0 }), await he(O(i, "voltro-env.d.ts"), r, "utf8");
-}, Ne = async (e, t) => {
-	let n = `${Oe}
+`, i = I(e, "src");
+	await Ee(i, { recursive: !0 }), await J(I(i, "voltro-env.d.ts"), r, "utf8");
+}, nt = async (e, t) => {
+	let n = `${Ze}
 import { __installPublicEnv } from '@voltro/env/public'
 
 export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
@@ -65,14 +68,14 @@ export const publicEnvValues = ${JSON.stringify(t, null, 2)} as const
 // Set the browser/SSR-shared global the \`publicEnv\` accessor reads.
 __installPublicEnv(publicEnvValues)
 `;
-	await G(e, { recursive: !0 }), await he(O(e, "env.public.ts"), n, "utf8");
-}, Pe = async (e) => {
-	let t = ue(e.rawEnv) ? e.rawEnv : void 0, n = await pe({
+	await Ee(e, { recursive: !0 }), await J(I(e, "env.public.ts"), n, "utf8");
+}, rt = async (e) => {
+	let t = xe(e.rawEnv) ? e.rawEnv : void 0, n = await we({
 		contract: t,
-		resolveSecret: oe
-	}), r = [...n.errors, ...ce(t, e.appType)];
-	if (r.length > 0) throw Error(le(r));
-	W(n.values), e.appType === "web" && me(n.publicValues);
+		resolveSecret: me
+	}), r = [...n.errors, ...ve(t, e.appType)];
+	if (r.length > 0) throw Error(ye(r));
+	be(n.values), e.appType === "web" && Te(n.publicValues);
 	let i = t ? Object.keys(t.vars).length : 0;
 	if (i > 0) {
 		let r = Object.keys(n.publicValues).length;
@@ -84,20 +87,20 @@ __installPublicEnv(publicEnvValues)
 			n.length > 0 && e.log.warn(`env: ${n.length} secret var(s) declared on a web app — secrets are reachable only from server-side render code and are NEVER bundled. Prefer declaring secrets on the api.`, { keys: n });
 		}
 	}
-	return e.generateTypes && t && (e.appType === "api" ? await je(e.root, t) : await Me(e.root, t)), {
+	return e.generateTypes && t && (e.appType === "api" ? await et(e.root, t) : await tt(e.root, t)), {
 		resolved: n,
 		contract: t
 	};
-}, q = (e) => {
-	let t = U(e.contract), n = (e.plugins ?? []).flatMap((e) => de(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : se, i = /* @__PURE__ */ new Set(), a = [];
+}, it = (e) => {
+	let t = _e(e.contract), n = (e.plugins ?? []).flatMap((e) => Se(e.name, e.declaredEnv)), r = e.includeFramework === !1 ? [] : ge, i = /* @__PURE__ */ new Set(), a = [];
 	for (let e of [
 		...t,
 		...n,
 		...r
 	]) i.has(e.key) || (i.add(e.key), a.push(e));
 	return a;
-}, Fe = (e, t, n = (e) => process.env[e]) => {
-	let r = q(t).map((e) => {
+}, at = (e, t, n = (e) => process.env[e]) => {
+	let r = it(t).map((e) => {
 		let t = n(e.key) !== void 0;
 		return {
 			...e,
@@ -114,33 +117,33 @@ __installPublicEnv(publicEnvValues)
 			missingRequired: r.filter((e) => e.required && !e.isSet && e.default === void 0).length
 		}
 	};
-}, Ie = (e, t) => {
-	let n = q({
+}, ot = (e, t) => {
+	let n = it({
 		...e,
 		includeFramework: !1
 	});
-	return fe(n, {
+	return Ce(n, {
 		includeFramework: e.includeFramework !== !1,
 		...t ? { header: t } : {}
 	});
-}, Le = async (e, t) => {
+}, st = async (e, t) => {
 	let n = e;
 	for (;;) {
-		let e = O(n, "node_modules", t);
+		let e = I(n, "node_modules", t);
 		try {
-			if ((await N.stat(e)).isDirectory()) {
-				let t = await N.realpath(e);
+			if ((await V.stat(e)).isDirectory()) {
+				let t = await V.realpath(e);
 				return t.includes("/node_modules/") ? null : t;
 			}
 		} catch {}
-		let r = D(n);
+		let r = F(n);
 		if (r === n) return null;
 		n = r;
 	}
-}, Re = async (e) => {
+}, ct = async (e) => {
 	let t;
 	try {
-		let n = await N.readFile(O(e, "package.json"), "utf8"), r = JSON.parse(n);
+		let n = await V.readFile(I(e, "package.json"), "utf8"), r = JSON.parse(n);
 		t = Object.keys({
 			...r.dependencies,
 			...r.devDependencies
@@ -149,11 +152,11 @@ __installPublicEnv(publicEnvValues)
 		return [];
 	}
 	return (await Promise.all(t.map(async (t) => {
-		let n = await Le(e, t);
+		let n = await st(e, t);
 		if (n === null) return null;
-		let r = O(n, "src");
+		let r = I(n, "src");
 		try {
-			if (!(await N.stat(r)).isDirectory()) return null;
+			if (!(await V.stat(r)).isDirectory()) return null;
 		} catch {
 			return null;
 		}
@@ -162,11 +165,11 @@ __installPublicEnv(publicEnvValues)
 			dir: r
 		};
 	}))).filter((e) => e !== null);
-}, ze = 500, Be = (e, t, n = {}) => {
+}, lt = 500, ut = (e, t, n = {}) => {
 	if (e.length === 0) return () => {};
-	let r = (e) => n.root ? k(n.root, e) : e, i = !1, a = (e) => {
+	let r = (e) => n.root ? L(n.root, e) : e, i = !1, a = (e) => {
 		i || (i = !0, t.warn(`.env changed (${r(e)}) — hard-restarting: process.env is read once at boot, a reload would keep stale values`, { file: r(e) }), Promise.resolve().then(() => n.onBeforeRestart?.()).catch((e) => t.warn(".env restart: onBeforeRestart failed (continuing)", {}, e)).finally(() => {
-			let e = _e(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+			let e = Me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 				stdio: "inherit",
 				env: process.env,
 				cwd: n.cwd ?? process.cwd()
@@ -180,22 +183,22 @@ __installPublicEnv(publicEnvValues)
 			});
 		}));
 	};
-	for (let t of e) ne(t, { interval: ze }, (e, n) => {
+	for (let t of e) ce(t, { interval: lt }, (e, n) => {
 		e.mtimeMs !== n.mtimeMs && a(t);
 	});
 	return t.info("watching .env files for changes", {
 		files: e.map(r),
-		intervalMs: ze
+		intervalMs: lt
 	}), () => {
-		for (let t of e) te(t);
+		for (let t of e) se(t);
 	};
-}, Ve = [{
+}, dt = [{
 	host: "127.0.0.1",
 	family: "IPv4"
 }, {
 	host: "::1",
 	family: "IPv6"
-}], J = (e, t, n) => new Promise((r) => {
+}], ft = (e, t, n) => new Promise((r) => {
 	let i = !1, a = (e) => {
 		if (!i) {
 			i = !0;
@@ -204,15 +207,15 @@ __installPublicEnv(publicEnvValues)
 			} catch {}
 			r(e);
 		}
-	}, o = K({
+	}, o = Ne({
 		host: e,
 		port: t
 	});
 	o.once("connect", () => a(!0)), o.once("error", () => a(!1)), o.setTimeout(n, () => a(!1));
-}), He = async (e, t = 400) => ({ families: (await Promise.all(Ve.map(async (n) => ({
+}), pt = async (e, t = 400) => ({ families: (await Promise.all(dt.map(async (n) => ({
 	family: n.family,
-	taken: await J(n.host, e, t)
-})))).filter((e) => e.taken).map((e) => e.family) }), Ue = (e, t, n) => [
+	taken: await ft(n.host, e, t)
+})))).filter((e) => e.taken).map((e) => e.family) }), mt = (e, t, n) => [
 	`${t}: port ${e} is already being served (${n.join(" + ")}).`,
 	"",
 	"  Refusing to start. This is NOT a spurious check — a second listener can",
@@ -227,26 +230,26 @@ __installPublicEnv(publicEnvValues)
 	"",
 	"  Then re-run. To use a different port instead, change `port` in",
 	"  app.config.ts."
-].join("\n"), We = async (e, t) => {
-	let { families: r } = await He(e);
-	if (r.length !== 0) throw n(Ue(e, t, r));
-}, Ge = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", Ke = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, qe = (e) => {
+].join("\n"), ht = async (e, t) => {
+	let { families: r } = await pt(e);
+	if (r.length !== 0) throw n(mt(e, t, r));
+}, gt = (e) => e === "effect" || e.startsWith("@effect/") || e.startsWith("@voltro/") || e === "react" || e === "react-dom", _t = /(^|\/)(\.bin|\.cache|\.pnpm-store|dist|build)(\/|$)/, vt = (e) => {
 	let t = [], n = e;
 	for (let e = 0; e < 12; e++) {
-		let e = O(n, "node_modules");
-		M(e) && t.push(e);
-		let r = D(n);
+		let e = I(n, "node_modules");
+		B(e) && t.push(e);
+		let r = F(n);
 		if (r === n) break;
 		n = r;
 	}
 	return t;
-}, Je = (e) => {
+}, yt = (e) => {
 	let t = /* @__PURE__ */ new Set([e]), n = e;
 	for (let e = 0; e < 12; e++) {
 		for (let e of ["pnpm-workspace.yaml", "pnpm-workspace.yml"]) {
 			let r;
 			try {
-				r = P(O(n, e), "utf8");
+				r = oe(I(n, e), "utf8");
 			} catch {
 				continue;
 			}
@@ -257,38 +260,38 @@ __installPublicEnv(publicEnvValues)
 				if (i === "" || i.includes("*")) continue;
 				let a;
 				try {
-					a = F(O(n, i), { withFileTypes: !0 });
+					a = H(I(n, i), { withFileTypes: !0 });
 				} catch {
 					continue;
 				}
-				for (let e of a) e.isDirectory() && t.add(O(n, i, e.name));
+				for (let e of a) e.isDirectory() && t.add(I(n, i, e.name));
 			}
 		}
 		for (let e of ["packages", "apps"]) {
 			let r;
 			try {
-				r = F(O(n, e), { withFileTypes: !0 });
+				r = H(I(n, e), { withFileTypes: !0 });
 			} catch {
 				continue;
 			}
-			for (let i of r) i.isDirectory() && t.add(O(n, e, i.name));
+			for (let i of r) i.isDirectory() && t.add(I(n, e, i.name));
 		}
-		let e = D(n);
+		let e = F(n);
 		if (e === n) break;
 		n = e;
 	}
 	return [...t];
-}, Ye = (e) => {
+}, bt = (e) => {
 	let t = [];
-	for (let n of Je(e)) {
-		let e = O(n, "node_modules", "@voltro"), r;
+	for (let n of yt(e)) {
+		let e = I(n, "node_modules", "@voltro"), r;
 		try {
-			r = F(e);
+			r = H(e);
 		} catch {
 			continue;
 		}
 		for (let n of r) {
-			let r = O(e, n), i = Xe(r);
+			let r = I(e, n), i = xt(r);
 			i !== void 0 && t.push({
 				pkg: `@voltro/${n}`,
 				version: i,
@@ -297,38 +300,38 @@ __installPublicEnv(publicEnvValues)
 		}
 	}
 	return t;
-}, Xe = (e) => {
+}, xt = (e) => {
 	try {
-		let t = JSON.parse(P(O(e, "package.json"), "utf8"));
+		let t = JSON.parse(oe(I(e, "package.json"), "utf8"));
 		return typeof t.version == "string" ? t.version : void 0;
 	} catch {
 		return;
 	}
-}, Ze = (e) => {
+}, St = (e) => {
 	let t = [], n;
 	try {
-		n = F(e);
+		n = H(e);
 	} catch {
 		return t;
 	}
 	for (let r of n) {
-		if (r.startsWith(".") || Ke.test(r)) continue;
-		let n = O(e, r);
+		if (r.startsWith(".") || _t.test(r)) continue;
+		let n = I(e, r);
 		if (r.startsWith("@")) {
 			let e;
 			try {
-				e = F(n);
+				e = H(n);
 			} catch {
 				continue;
 			}
 			for (let i of e) t.push({
 				pkg: `${r}/${i}`,
-				dir: O(n, i)
+				dir: I(n, i)
 			});
 			continue;
 		}
 		try {
-			if (!ee(n).isDirectory()) continue;
+			if (!U(n).isDirectory()) continue;
 		} catch {
 			continue;
 		}
@@ -338,25 +341,25 @@ __installPublicEnv(publicEnvValues)
 		});
 	}
 	return t;
-}, Qe = (e) => {
+}, Ct = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (e, n, r) => {
-		if (!Ge(e)) return;
+		if (!gt(e)) return;
 		let i = t.get(e) ?? /* @__PURE__ */ new Map();
 		i.has(n) || i.set(n, r), t.set(e, i);
 	};
-	for (let t of qe(e)) for (let { pkg: e, dir: r } of Ze(t)) {
-		let t = Xe(r);
+	for (let t of vt(e)) for (let { pkg: e, dir: r } of St(t)) {
+		let t = xt(r);
 		t !== void 0 && n(e, t, r);
 	}
-	for (let { pkg: t, version: r, dir: i } of Ye(e)) n(t, r, i);
+	for (let { pkg: t, version: r, dir: i } of bt(e)) n(t, r, i);
 	let r = [];
 	for (let [n, i] of t) i.size < 2 || r.push({
 		pkg: n,
 		versions: [...i.keys()].sort(),
-		paths: [...i.values()].map((t) => k(e, t)).sort()
+		paths: [...i.values()].map((t) => L(e, t)).sort()
 	});
 	return r.sort((e, t) => e.pkg.localeCompare(t.pkg));
-}, $e = (e) => {
+}, wt = (e) => {
 	if (e.length !== 0) return [
 		`•  ${e.length} package(s) resolved at more than one version:`,
 		...e.flatMap((e) => [`     ${e.pkg} — ${e.versions.join(", ")}`, ...e.paths.map((e) => `       ${e}`)]),
@@ -374,11 +377,11 @@ __installPublicEnv(publicEnvValues)
 		"   instrument), then reinstall. Do not silence the generated file — it is where",
 		"   a genuine mistake in your own descriptors surfaces."
 	].join("\n");
-}, et = (e) => {
+}, Tt = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	for (let n of qe(e)) for (let { pkg: e, dir: r } of Ze(n)) {
+	for (let n of vt(e)) for (let { pkg: e, dir: r } of St(n)) {
 		if (!e.startsWith("@voltro/")) continue;
-		let n = Xe(r);
+		let n = xt(r);
 		n !== void 0 && !t.has(e) && t.set(e, n);
 	}
 	if (t.size < 2) return;
@@ -393,7 +396,7 @@ __installPublicEnv(publicEnvValues)
 			version: t
 		})).sort((e, t) => e.pkg.localeCompare(t.pkg))
 	};
-}, tt = (e) => {
+}, Et = (e) => {
 	if (e !== void 0) return [
 		`•  ${e.behind.length} @voltro/* package(s) are not on ${e.majority}:`,
 		...e.behind.map((e) => `     ${e.pkg}  ${e.version}`),
@@ -411,59 +414,59 @@ __installPublicEnv(publicEnvValues)
 		"   its pattern: the one that produced this report was `@voltro/[a-z-]+`,",
 		"   which silently skips `@voltro/i18n` because the name contains digits."
 	].join("\n");
-}, nt = (e, t) => {
-	let n = et(e);
+}, Dt = (e, t) => {
+	let n = Tt(e);
 	n !== void 0 && t.warn?.(`@voltro/* version skew: ${n.behind.length} package(s) are not on ${n.majority}`, {
 		majority: n.majority,
 		behind: n.behind.map((e) => `${e.pkg}@${e.version}`),
 		fix: "the framework ships in lockstep; bump the listed packages and reinstall"
 	});
-}, rt = R({ scope: "vite" }), it = /\x1b\[[0-9;]*m/g, at = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, ot = (e) => e.replace(it, "").replace(at, "").trim(), st = /proxy error/i, ct = [
+}, Ot = K({ scope: "vite" }), kt = /\x1b\[[0-9;]*m/g, At = /^\s*\[?vite\]?\s*(\([a-z-]+\)\s*)?/, jt = (e) => e.replace(kt, "").replace(At, "").trim(), Mt = /proxy error/i, Nt = [
 	"ECONNREFUSED",
 	"ECONNRESET",
 	"ECONNABORTED",
 	"EPIPE",
 	"ETIMEDOUT"
-], lt = (e, t = 0) => {
+], Pt = (e, t = 0) => {
 	if (e == null || t > 5) return !1;
 	let n = e;
-	return typeof n.code == "string" && ct.includes(n.code) || typeof n.message == "string" && ct.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => lt(e, t + 1)) ? !0 : lt(n.cause, t + 1);
-}, ut = 4e3, dt = () => {
+	return typeof n.code == "string" && Nt.includes(n.code) || typeof n.message == "string" && Nt.some((e) => n.message.includes(e)) || Array.isArray(n.errors) && n.errors.some((e) => Pt(e, t + 1)) ? !0 : Pt(n.cause, t + 1);
+}, Ft = 4e3, It = () => {
 	let e = /* @__PURE__ */ new Set(), t = 0, n = {
 		hasWarned: !1,
 		info: (e) => {
-			let t = ot(e);
-			t.length !== 0 && rt.info(t);
+			let t = jt(e);
+			t.length !== 0 && Ot.info(t);
 		},
 		warn: (e) => {
 			n.hasWarned = !0;
-			let t = ot(e);
-			t.length !== 0 && rt.warn(t);
+			let t = jt(e);
+			t.length !== 0 && Ot.warn(t);
 		},
 		warnOnce: (t) => {
-			let r = ot(t);
-			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && rt.warn(r));
+			let r = jt(t);
+			e.has(r) || (e.add(r), n.hasWarned = !0, r.length !== 0 && Ot.warn(r));
 		},
 		error: (e, n) => {
-			let r = ot(e), i = n?.error;
+			let r = jt(e), i = n?.error;
 			if (r.length !== 0) {
-				if (st.test(r) && lt(i)) {
+				if (Mt.test(r) && Pt(i)) {
 					let e = Date.now();
-					e - t > ut && (t = e, rt.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
+					e - t > Ft && (t = e, Ot.info("waiting for api — proxy upstream not accepting connections yet (still starting?)"));
 					return;
 				}
-				rt.error(r, {}, i);
+				Ot.error(r, {}, i);
 			}
 		},
 		clearScreen: () => {},
 		hasErrorLogged: (e) => !1
 	};
 	return n;
-}, ft = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), pt = (e) => {
+}, Lt = (e) => e.replace(/\\"|"(?:[^"\\]|\\.)*"|(\/\/[^\n]*|\/\*[\s\S]*?\*\/)/g, (e, t) => t ? "" : e), Rt = (e) => {
 	try {
-		let t = O(e, "tsconfig.json");
-		if (!M(t)) return [];
-		let n = JSON.parse(ft(P(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = A(e, i), o = [];
+		let t = I(e, "tsconfig.json");
+		if (!B(t)) return [];
+		let n = JSON.parse(Lt(oe(t, "utf8"))).compilerOptions ?? {}, r = n.paths ?? {}, i = n.baseUrl ?? ".", a = R(e, i), o = [];
 		for (let [e, t] of Object.entries(r)) {
 			let n = t[0];
 			if (!n) continue;
@@ -473,11 +476,11 @@ __installPublicEnv(publicEnvValues)
 					let t = e.slice(0, -2).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 					o.push({
 						find: RegExp(`^${t}/(.*)$`),
-						replacement: `${O(a, n.slice(0, -2))}/$1`
+						replacement: `${I(a, n.slice(0, -2))}/$1`
 					});
 				} else o.push({
 					find: e,
-					replacement: O(a, n)
+					replacement: I(a, n)
 				});
 			}
 		}
@@ -485,12 +488,12 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return [];
 	}
-}, mt = (e = process.env) => {
+}, zt = (e = process.env) => {
 	let t = e.VOLTRO_DEV_SSR_COMPILE_CONCURRENCY;
 	if (t === void 0 || t.trim() === "") return 4;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 1 ? Math.floor(n) : 4;
-}, ht = (e) => {
+}, Bt = (e) => {
 	let t = Math.max(1, Math.floor(e)), n = 0, r = [], i = () => n < t ? (n++, Promise.resolve()) : new Promise((e) => r.push(e)), a = () => {
 		let e = r.shift();
 		e ? e() : n--;
@@ -508,8 +511,8 @@ __installPublicEnv(publicEnvValues)
 			return n;
 		}
 	};
-}, gt = (e) => {
-	let t = ht(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
+}, Vt = (e) => {
+	let t = Bt(e.limit), n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Set();
 	return {
 		load: (i, a) => {
 			if (r.has(i)) return a();
@@ -539,19 +542,19 @@ __installPublicEnv(publicEnvValues)
 			return r.size;
 		}
 	};
-}, _t = 1048576, vt = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;"), yt = (e) => JSON.stringify(e).replace(/</g, "\\u003c"), bt = (e, t) => {
-	let n = `<script type="application/json" id="${ve}">${yt(t)}<\/script>`;
+}, Ht = 1048576, Ut = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;"), Wt = (e) => JSON.stringify(e).replace(/</g, "\\u003c"), Gt = (e, t) => {
+	let n = `<script type="application/json" id="${Pe}">${Wt(t)}<\/script>`;
 	return e.includes("</body>") ? e.replace("</body>", `${n}</body>`) : e + n;
-}, xt = (e) => {
-	let t = Object.entries(e.errors).map(([e, t]) => `<li><strong>${vt(e)}</strong>: ${vt(t)}</li>`).join("");
-	return `<!doctype html><html><head><meta charset="utf-8"><title>Form submission failed</title></head><body><h1>Submission failed</h1>${e.formError === void 0 ? "" : `<p>${vt(e.formError)}</p>`}<ul>${t}</ul><p><a href="javascript:history.back()">Go back</a> to correct the form.</p></body></html>`;
-}, Y = (e, t, n, r = "text/plain; charset=utf-8") => {
+}, Kt = (e) => {
+	let t = Object.entries(e.errors).map(([e, t]) => `<li><strong>${Ut(e)}</strong>: ${Ut(t)}</li>`).join("");
+	return `<!doctype html><html><head><meta charset="utf-8"><title>Form submission failed</title></head><body><h1>Submission failed</h1>${e.formError === void 0 ? "" : `<p>${Ut(e.formError)}</p>`}<ul>${t}</ul><p><a href="javascript:history.back()">Go back</a> to correct the form.</p></body></html>`;
+}, X = (e, t, n, r = "text/plain; charset=utf-8") => {
 	e.statusCode = t, e.setHeader("content-type", r), e.end(n);
-}, St = (e, t, n) => {
-	e.setHeader("cache-control", "no-store"), Y(e, t, n, "text/html; charset=utf-8");
-}, Ct = (e) => {
+}, qt = (e, t, n) => {
+	e.setHeader("cache-control", "no-store"), X(e, t, n, "text/html; charset=utf-8");
+}, Jt = (e) => {
 	if (e !== void 0 && e !== "" && !(!e.startsWith("/") || e.startsWith("//") || e.includes("\\"))) return e;
-}, wt = (e) => {
+}, Yt = (e) => {
 	let t = e.referer;
 	if (t !== void 0) try {
 		let e = new URL(t);
@@ -559,10 +562,10 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return;
 	}
-}, Tt = (e) => new Promise((t) => {
+}, Xt = (e) => new Promise((t) => {
 	let n = [], r = 0;
 	e.on("data", (i) => {
-		if (r += i.length, r > _t) {
+		if (r += i.length, r > Ht) {
 			e.removeAllListeners("data"), e.removeAllListeners("end"), t({ ok: !1 });
 			return;
 		}
@@ -571,32 +574,32 @@ __installPublicEnv(publicEnvValues)
 		ok: !0,
 		body: Buffer.concat(n).toString("utf8")
 	})), e.on("error", () => t({ ok: !1 }));
-}), Et = (e) => {
+}), Zt = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e.headers)) typeof r == "string" ? t[n.toLowerCase()] = r : Array.isArray(r) && (t[n.toLowerCase()] = r.join(", "));
 	return t;
-}, Dt = (e) => {
-	let t = e.originGuard ?? ae(void 0, process.env);
+}, Qt = (e) => {
+	let t = e.originGuard ?? pe(void 0, process.env);
 	return async (n, r, i) => {
 		let a = (n.url ?? "/").split("?")[0];
-		if (!a.startsWith(be)) return !1;
-		if (n.method !== "POST") return r.setHeader("allow", "POST"), Y(r, 405, "method not allowed — a /form/* endpoint accepts native form POSTs only"), !0;
-		let o = Et(n);
-		if (!B({
+		if (!a.startsWith(Ie)) return !1;
+		if (n.method !== "POST") return r.setHeader("allow", "POST"), X(r, 405, "method not allowed — a /form/* endpoint accepts native form POSTs only"), !0;
+		let o = Zt(n);
+		if (!de({
 			headers: o,
 			config: t
-		}).allowed) return Y(r, 403, "origin not allowed"), !0;
-		if ((o["content-type"] ?? "").includes("multipart/form-data")) return Y(r, 415, "file uploads need JavaScript — the no-JS form path accepts application/x-www-form-urlencoded only"), !0;
-		let s = await Tt(n);
-		if (!s.ok) return Y(r, 413, `form body exceeds ${_t} bytes`), !0;
-		let c = new URLSearchParams(s.body), l = decodeURIComponent(a.slice(be.length)), u = (await e.loadDescriptors())?.[l];
-		if (u === void 0 || u.kind !== "mutation") return Y(r, 404, `no mutation '${l}' — /form/* serves declared mutations only`), !0;
-		let d = c.get(ye) ?? l, f = Ct(c.get(Se) ?? void 0), p = [];
-		for (let [e, t] of c) e !== ye && e !== Se && p.push([e, t]);
+		}).allowed) return X(r, 403, "origin not allowed"), !0;
+		if ((o["content-type"] ?? "").includes("multipart/form-data")) return X(r, 415, "file uploads need JavaScript — the no-JS form path accepts application/x-www-form-urlencoded only"), !0;
+		let s = await Xt(n);
+		if (!s.ok) return X(r, 413, `form body exceeds ${Ht} bytes`), !0;
+		let c = new URLSearchParams(s.body), l = decodeURIComponent(a.slice(Ie.length)), u = (await e.loadDescriptors())?.[l];
+		if (u === void 0 || u.kind !== "mutation") return X(r, 404, `no mutation '${l}' — /form/* serves declared mutations only`), !0;
+		let d = c.get(Fe) ?? l, f = Jt(c.get(Re) ?? void 0), p = [];
+		for (let [e, t] of c) e !== Fe && e !== Re && p.push([e, t]);
 		let m = u.input;
-		if (m === void 0) return Y(r, 404, `mutation '${l}' carries no input schema — the no-JS path cannot map its POST`), !0;
-		let h = Ce(m, p), g = we(m, h), _ = async (t) => {
-			let n = wt(o);
+		if (m === void 0) return X(r, 404, `mutation '${l}' carries no input schema — the no-JS path cannot map its POST`), !0;
+		let h = ze(m, p), g = Y(m, h), _ = async (t) => {
+			let n = Yt(o);
 			if (n !== void 0) {
 				if (i !== void 0) {
 					i(n, t);
@@ -608,11 +611,11 @@ __installPublicEnv(publicEnvValues)
 					flash: t
 				});
 				if (a !== void 0) {
-					St(r, 422, bt(a, t));
+					qt(r, 422, Gt(a, t));
 					return;
 				}
 			}
-			St(r, 422, xt(t));
+			qt(r, 422, Kt(t));
 		};
 		if (!g.valid) return await _({
 			formKey: d,
@@ -620,7 +623,7 @@ __installPublicEnv(publicEnvValues)
 			errors: g.errors
 		}), !0;
 		let v = e.rpcQuery(o.cookie, o);
-		if (v === void 0) return Y(r, 503, `api '${e.apiName ?? "?"}' has no server-side origin — the no-JS form path forwards over POST /rpc; set VOLTRO_API_ORIGIN (or apis.<name>.serverUrl) as for SSR loaders`), !0;
+		if (v === void 0) return X(r, 503, `api '${e.apiName ?? "?"}' has no server-side origin — the no-JS form path forwards over POST /rpc; set VOLTRO_API_ORIGIN (or apis.<name>.serverUrl) as for SSR loaders`), !0;
 		try {
 			await v(l, h);
 		} catch (e) {
@@ -632,10 +635,10 @@ __installPublicEnv(publicEnvValues)
 				formError: t?.message ?? t?._tag ?? "The server rejected this submission. Please try again."
 			}), !0;
 		}
-		let y = f ?? wt(o) ?? "/";
+		let y = f ?? Yt(o) ?? "/";
 		return r.statusCode = 303, r.setHeader("location", y), r.end(), !0;
 	};
-}, Ot = /^\s*(?:import|export)\s[^;'"]*?['"]([^'"]+)['"]/gm, kt = [
+}, $t = /^\s*(?:import|export)\s[^;'"]*?['"]([^'"]+)['"]/gm, en = [
 	"",
 	".tsx",
 	".ts",
@@ -643,87 +646,87 @@ __installPublicEnv(publicEnvValues)
 	".js",
 	"/index.tsx",
 	"/index.ts"
-], At = (e) => /\.island\.(tsx|ts|jsx|js)$/.test(e), jt = ["@voltro/web", "@voltro/i18n"], Mt = ["@voltro/client", "@voltro/ui"], Nt = (e, t) => e === t || e.startsWith(`${t}/`), Pt = (e) => e !== "@voltro/web/islands" && jt.some((t) => Nt(e, t)), Ft = (e) => {
+], tn = (e) => /\.island\.(tsx|ts|jsx|js)$/.test(e), nn = ["@voltro/web", "@voltro/i18n"], rn = ["@voltro/client", "@voltro/ui"], an = (e, t) => e === t || e.startsWith(`${t}/`), on = (e) => e !== "@voltro/web/islands" && nn.some((t) => an(e, t)), sn = (e) => {
 	let t = [];
-	for (let n of e.matchAll(Ot)) t.push(n[1]);
+	for (let n of e.matchAll($t)) t.push(n[1]);
 	return t;
-}, It = async (e, t) => {
-	let n = A(D(e), t);
-	for (let e of kt) {
+}, cn = async (e, t) => {
+	let n = R(F(e), t);
+	for (let e of en) {
 		let t = n + e;
 		try {
-			if ((await N.stat(t)).isFile()) return t;
+			if ((await V.stat(t)).isFile()) return t;
 		} catch {}
 	}
-}, Lt = async (e, t) => {
-	let n = O(e, "src", "pages", t), r = /* @__PURE__ */ new Set(), i = [], a = !1, o = [], s = async (t, n) => {
+}, ln = async (e, t) => {
+	let n = I(e, "src", "pages", t), r = /* @__PURE__ */ new Set(), i = [], a = !1, o = [], s = async (t, n) => {
 		let c = `${t}\u0000${n ? "i" : "p"}`;
 		if (r.has(c)) return;
 		r.add(c);
 		let l;
 		try {
-			l = await N.readFile(t, "utf8");
+			l = await V.readFile(t, "utf8");
 		} catch {
 			return;
 		}
-		for (let r of Ft(l)) {
+		for (let r of sn(l)) {
 			if (n) {
-				if (Pt(r)) {
-					o.push([k(e, t).split(j).join("/"), r]);
+				if (on(r)) {
+					o.push([L(e, t).split(z).join("/"), r]);
 					continue;
 				}
-				if (Mt.some((e) => Nt(r, e))) {
+				if (rn.some((e) => an(r, e))) {
 					a = !0;
 					continue;
 				}
 			}
 			if (!r.startsWith(".")) continue;
-			let c = await It(t, r);
+			let c = await cn(t, r);
 			if (c === void 0) continue;
-			let l = n || At(c);
-			if (!n && At(c)) {
-				let t = k(e, c).split(j).join("/");
+			let l = n || tn(c);
+			if (!n && tn(c)) {
+				let t = L(e, c).split(z).join("/");
 				i.includes(t) || i.push(t);
 			}
 			await s(c, l);
 		}
 	};
-	return await s(n, At(n)), At(n) && i.unshift(k(e, n).split(j).join("/")), {
+	return await s(n, tn(n)), tn(n) && i.unshift(L(e, n).split(z).join("/")), {
 		islandFiles: i,
 		usesClient: a,
 		violations: o
 	};
-}, Rt = (e) => {
+}, un = (e) => {
 	let t = /^export const interactive\s*=\s*['"](full|islands|none)['"]/m.exec(e);
 	return t === null ? void 0 : t[1];
-}, zt = (e) => {
+}, dn = (e) => {
 	let t = e.indexOf("</head>"), n = t === -1 ? e : e.slice(0, t), r = [];
 	for (let e of n.matchAll(/<script\b([^>]*)>([\s\S]*?)<\/script>/gi)) {
 		let t = e[1] ?? "";
 		/\bsrc\s*=/.test(t) || /type\s*=\s*["']module["']/.test(t) || r.push(e[0]);
 	}
 	return r.map((e) => `    ${e}`).join("\n");
-}, Bt = (e) => [...e.matchAll(/<link\b[^>]*\brel\s*=\s*["']stylesheet["'][^>]*>/gi)].map((e) => e[0]), Vt = (e, t) => {
-	let n = Bt(t).filter((t) => !e.includes(t));
+}, fn = (e) => [...e.matchAll(/<link\b[^>]*\brel\s*=\s*["']stylesheet["'][^>]*>/gi)].map((e) => e[0]), pn = (e, t) => {
+	let n = fn(t).filter((t) => !e.includes(t));
 	if (n.length === 0) return e;
 	let r = n.map((e) => `    ${e}`).join("\n");
 	return e.includes("</head>") ? e.replace("</head>", `${r}\n  </head>`) : e + r;
-}, Ht = (e) => {
+}, mn = (e) => {
 	let t = e.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
 	return t === "" ? "root" : t;
-}, Ut = class extends Error {
+}, hn = class extends Error {
 	constructor(e, t) {
 		let n = t.map(([e, t]) => `  ${e} imports '${t}'`).join("\n");
 		super(`interactive: 'islands' page '${e}' has island code importing the framework barrel:\n${n}\n\nAn island hydrates in its own provider-less root — router hooks, <Link> and useT() throw there, and the '@voltro/web' barrel additionally pulls the Effect runtime into the slim islands entry (the bytes this mode exists to shed).\n\nFix: import island()/hydration APIs from '@voltro/web/islands' (the react-only subpath), move router/i18n-dependent UI out of the island, and keep island files to react + relative browser-safe imports. '@voltro/client' IS allowed — a useSubscription island gets the client boot automatically.`), this.name = "IslandsEntryViolation";
 	}
-}, Wt = async (e) => {
-	let t = O(e.webRoot, ".framework", "island-shells"), n = [];
+}, gn = async (e) => {
+	let t = I(e.webRoot, ".framework", "island-shells"), n = [];
 	if (e.pages.length === 0) return n;
-	await N.mkdir(t, { recursive: !0 });
+	await V.mkdir(t, { recursive: !0 });
 	for (let r of e.pages) {
-		let i = await Lt(e.webRoot, r.file);
-		if (i.violations.length > 0) throw new Ut(r.pattern, i.violations);
-		let a = Ht(r.pattern), o = `island-shells/${a}.tsx`, s = `island-shells/${a}.html`, c = i.islandFiles.map((e) => `import '../../${e}'`).join("\n"), l = i.usesClient ? [
+		let i = await ln(e.webRoot, r.file);
+		if (i.violations.length > 0) throw new hn(r.pattern, i.violations);
+		let a = mn(r.pattern), o = `island-shells/${a}.tsx`, s = `island-shells/${a}.html`, c = i.islandFiles.map((e) => `import '../../${e}'`).join("\n"), l = i.usesClient ? [
 			`// GENERATED by voltro — the islands entry for '${r.pattern}' (client boot:`,
 			"// an island here imports @voltro/client, so the roots get a live runtime).",
 			...e.apiImports ?? [],
@@ -759,7 +762,7 @@ __installPublicEnv(publicEnvValues)
 			"</html>",
 			""
 		].join("\n");
-		await N.writeFile(O(t, `${a}.tsx`), l), await N.writeFile(O(t, `${a}.html`), u), n.push({
+		await V.writeFile(I(t, `${a}.tsx`), l), await V.writeFile(I(t, `${a}.html`), u), n.push({
 			pattern: r.pattern,
 			name: a,
 			htmlFile: s,
@@ -768,12 +771,398 @@ __installPublicEnv(publicEnvValues)
 		});
 	}
 	return n;
-}, Gt = class extends Error {
+}, _n = K({ scope: "voltro:images" }), vn = /[?&]image(?:&|$)/, yn = /\.(png|jpe?g|webp|avif)(\?|$)/i, bn = {
+	avif: "image/avif",
+	webp: "image/webp",
+	jpeg: "image/jpeg",
+	png: "image/png"
+}, xn = (e) => Oe("sha256").update(e).digest("hex").slice(0, 12), Sn = (e) => `export default ${JSON.stringify(e)}\n`, Cn = (e) => {
+	let t = e.config ?? j, n = x(e.root), r = /* @__PURE__ */ new Map(), i = "/", a = !1;
+	return {
+		name: "voltro:image-assets",
+		enforce: "pre",
+		configResolved(e) {
+			i = e.base, a = e.command === "build";
+		},
+		async load(o) {
+			if (!vn.test(o) || !yn.test(o)) return null;
+			let s = o.split("?")[0], c = s, l = await E(c);
+			if (l === null && s.startsWith("/") && (c = I(e.root, s.slice(1)), l = await E(c)), l === null && this.error(`?image import points at a file that does not exist or is unreadable: ${s}`), await S() === null) {
+				w(_n);
+				let t;
+				if (a || e.urlMode === "build-urls") {
+					let e = `assets/${xn(c)}${c.slice(c.lastIndexOf("."))}`;
+					a && this.emitFile({
+						type: "asset",
+						fileName: e,
+						source: Buffer.from(l)
+					}), t = `${i}${e}`;
+				} else t = `/@fs${c}`;
+				return Sn({
+					src: t,
+					width: 0,
+					height: 0,
+					blurDataURL: "",
+					srcSet: "",
+					sources: []
+				});
+			}
+			if (a || e.urlMode === "build-urls") {
+				let e = await T({
+					sourceBytes: l,
+					cacheDir: n,
+					config: t
+				});
+				e === null && this.error(`?image import is not a raster image sharp can read: ${c}`);
+				let r = /* @__PURE__ */ new Map();
+				for (let t of e.variants) {
+					let e = t.format === "jpeg" ? "jpg" : t.format, n = `assets/${t.hash}.${e}`;
+					a && this.emitFile({
+						type: "asset",
+						fileName: n,
+						source: Buffer.from(t.bytes)
+					}), r.set(`${t.format}:${t.width}`, `${i}${n}`);
+				}
+				let o = (t) => e.widths.map((e) => `${r.get(`${t}:${e}`)} ${e}w`).join(", ");
+				return Sn({
+					src: r.get(`${e.fallbackFormat}:${e.widths[e.widths.length - 1]}`),
+					width: e.width,
+					height: e.height,
+					blurDataURL: e.blurDataURL,
+					srcSet: o(e.fallbackFormat),
+					sources: t.formats.map((e) => ({
+						type: bn[e],
+						srcSet: o(e)
+					}))
+				});
+			}
+			let u = await A(l);
+			u === null && this.error(`?image import is not a raster image sharp can read: ${c}`);
+			let d = Oe("sha256").update(l).digest("hex").slice(0, 16), f = await k(l, d, n), p = xn(c);
+			r.set(p, c);
+			let m = O(u.width), h = u.format === "png" ? "png" : "jpeg", g = (e, t) => `/_voltro/image/${p}?w=${e}&f=${t}`, _ = (e) => m.map((t) => `${g(t, e)} ${t}w`).join(", ");
+			return Sn({
+				src: g(m[m.length - 1], h),
+				width: u.width,
+				height: u.height,
+				blurDataURL: f ?? "",
+				srcSet: _(h),
+				sources: t.formats.map((e) => ({
+					type: bn[e],
+					srcSet: _(e)
+				}))
+			});
+		},
+		configureServer(e) {
+			e.middlewares.use("/_voltro/image", (e, i, a) => {
+				(async () => {
+					let a = new URL(e.url ?? "/", "http://localhost"), o = a.pathname.replace(/^\//, ""), s = r.get(o);
+					if (s === void 0) {
+						i.statusCode = 404, i.end("unknown image asset");
+						return;
+					}
+					let c = Number(a.searchParams.get("w")), l = a.searchParams.get("f") ?? "";
+					if (!Number.isInteger(c) || c <= 0 || c > 8192 || bn[l] === void 0) {
+						i.statusCode = 400, i.end("bad transform params");
+						return;
+					}
+					let u = await E(s);
+					if (u === null) {
+						i.statusCode = 404, i.end("source asset gone");
+						return;
+					}
+					let d = Oe("sha256").update(u).digest("hex").slice(0, 16), f = await C({
+						sourceBytes: u,
+						sourceHash: d,
+						width: c,
+						format: l,
+						quality: t.quality,
+						cacheDir: n
+					});
+					if (f === null) {
+						w(_n), i.statusCode = 200, i.setHeader("content-type", bn[l] ?? "application/octet-stream"), i.end(Buffer.from(u));
+						return;
+					}
+					i.statusCode = 200, i.setHeader("content-type", bn[l]), i.setHeader("cache-control", "max-age=31536000, immutable"), i.end(Buffer.from(f));
+				})().catch((e) => {
+					_n.warn("image transform failed", {}, e), a();
+				});
+			});
+		}
+	};
+}, wn = K({ scope: "voltro:fonts" }), Tn = /* @__PURE__ */ new Map(), En = async (e, t) => {
+	if (t === void 0 || t.length === 0) return null;
+	let n = Tn.get(e);
+	return n === void 0 && (n = N(t, async (t) => new Uint8Array(await De(I(e, t)))).then((e) => {
+		for (let t of e.warnings) M(t, wn);
+		return e;
+	}), Tn.set(e, n)), n;
+}, Dn = {
+	woff2: "font/woff2",
+	woff: "font/woff",
+	otf: "font/otf",
+	ttf: "font/ttf"
+}, On = (e, t) => ({
+	name: "voltro:font-assets",
+	configureServer(n) {
+		n.middlewares.use("/assets/fonts", (n, r, i) => {
+			(async () => {
+				let a = await En(e, t), o = (n.url ?? "/").replace(/^\//, "").split("?")[0], s = a?.files.find((e) => e.fileName === `assets/fonts/${o}`);
+				if (s === void 0) {
+					i();
+					return;
+				}
+				let c = o.slice(o.lastIndexOf(".") + 1);
+				r.statusCode = 200, r.setHeader("content-type", Dn[c] ?? "application/octet-stream"), r.setHeader("cache-control", "max-age=31536000, immutable"), r.end(Buffer.from(s.bytes));
+			})().catch(() => i());
+		});
+	}
+}), kn = K({ scope: "voltro:content" }), An = (e) => {
+	Ke(e);
+}, jn = async (e, t) => {
+	let n = await He(e.collection, e.locale === void 0 ? {} : { locale: e.locale });
+	return Be(n, {
+		title: e.title,
+		siteUrl: t,
+		...e.description === void 0 ? {} : { description: e.description },
+		feedPath: e.path,
+		item: e.item
+	});
+}, Mn = async (e, t, n) => {
+	if (t.length !== 0) {
+		if (n === void 0 || n === "") throw Error("config.feeds needs seo.siteUrl — RSS links must be absolute. Set seo: { siteUrl } in app.config.ts.");
+		for (let r of t) {
+			let t = await jn(r, n), i = I(e, r.path.replace(/^\/+/, ""));
+			await Ee(F(i), { recursive: !0 }), await J(i, t), kn.info(`feed: ${r.path} (${r.collection})`);
+		}
+	}
+}, Nn = async (e, t) => {
+	let n = await He(e, t === void 0 ? {} : { locale: t });
+	return JSON.stringify(n.map(({ html: e, body: t, headings: n, ...r }) => r));
+}, Pn = async (e, t, n) => {
+	let r = await Ue(e, t, n === void 0 ? {} : { locale: n });
+	if (r === null) return null;
+	let { body: i, ...a } = r;
+	return JSON.stringify(a);
+}, Fn = async (e) => {
+	await qe();
+	let t = 0;
+	for (let n of Ge()) {
+		let r = n.i18n?.locales ?? [void 0];
+		for (let i of r) {
+			let r = await Nn(n.name, i), a = I(e, Ve(n.name, i));
+			await Ee(F(a), { recursive: !0 }), await J(a, r), t += 1;
+			let o = JSON.parse(r);
+			for (let { slug: r } of o) {
+				let a = await Pn(n.name, r, i);
+				if (a === null) continue;
+				let o = I(e, Ve(n.name, i, r));
+				await Ee(F(o), { recursive: !0 }), await J(o, a), t += 1;
+			}
+		}
+	}
+	return t > 0 && kn.info(`content: ${t} artifact(s) into dist/assets/content`), t;
+}, In = async (e) => {
+	let t = /^\/assets\/content\/([A-Za-z0-9_-]+)(?:\.([A-Za-z0-9-]+))?\/(.+)$/.exec(e);
+	if (t === null) return null;
+	let [, n, r, i] = t;
+	if (Ge().every((e) => e.name !== n)) return null;
+	try {
+		if (i === "index.json") return {
+			status: 200,
+			body: await Nn(n, r)
+		};
+		let e = await Pn(n, i.replace(/\.json$/, ""), r);
+		return e === null ? {
+			status: 404,
+			body: "\"not found\""
+		} : {
+			status: 200,
+			body: e
+		};
+	} catch (t) {
+		return kn.warn("content request failed", { pathname: e }, t), {
+			status: 500,
+			body: "\"content error\""
+		};
+	}
+}, Ln = async (e) => {
+	let { readdir: t } = await import("node:fs/promises"), n = [], r;
+	try {
+		r = await t(e, { withFileTypes: !0 });
+	} catch {
+		return n;
+	}
+	for (let t of r) {
+		if (t.name.startsWith(".") || t.name === "node_modules") continue;
+		let r = I(e, t.name);
+		t.isDirectory() ? n.push(...await Ln(r)) : /\.collection\.tsx?$/.test(t.name) && n.push(r);
+	}
+	return n;
+}, Rn = (e, t = [], n) => ({
+	name: "voltro:content",
+	configureServer(r) {
+		let i = null, a = () => (i ??= (async () => {
+			for (let t of await Ln(I(e, "src"))) try {
+				await r.ssrLoadModule(t);
+			} catch (e) {
+				kn.warn("failed to load collection module", { file: t }, e);
+			}
+		})(), i);
+		r.watcher.add(I(e, "content")), r.watcher.on("all", (t, n) => {
+			typeof n == "string" && n.startsWith(I(e, "content")) && (We(), r.ws.send({ type: "full-reload" }));
+		});
+		for (let e of t) r.middlewares.use(e.path, (t, r) => {
+			(async () => {
+				await a();
+				let t = await jn(e, n ?? "http://localhost");
+				r.setHeader("content-type", "application/rss+xml"), r.end(t);
+			})().catch((t) => {
+				kn.warn("feed render failed", { path: e.path }, t), r.statusCode = 500, r.end("feed error");
+			});
+		});
+		r.middlewares.use("/assets/content", (e, t, n) => {
+			(async () => {
+				await a();
+				let r = await In(`/assets/content${(e.url ?? "/").split("?")[0]}`);
+				if (r === null) {
+					n();
+					return;
+				}
+				t.statusCode = r.status, t.setHeader("content-type", "application/json"), t.end(r.body);
+			})().catch(() => n());
+		});
+	}
+}), zn, Bn = async () => {
+	if (zn !== void 0) return zn;
+	try {
+		let e = await import("satori");
+		zn = e.default ?? e;
+	} catch {
+		zn = null;
+	}
+	return zn;
+}, Vn, Hn = async () => {
+	if (Vn !== void 0) return Vn;
+	try {
+		Vn = await import("@resvg/resvg-js");
+	} catch {
+		Vn = null;
+	}
+	return Vn;
+}, Un = async (e, t) => {
+	if (t === void 0 || t.length === 0) throw Error("ogImage needs a declared font: satori cannot render text without a font buffer, and there is no bundled default (that would ship a license artifact most projects replace). Declare one in app.config.ts — fonts: [{ family: 'Inter', src: [{ path: 'src/fonts/Inter.woff2' }] }] — see the Fonts docs.");
+	let n = [];
+	for (let r of t) for (let t of r.src) {
+		let i = await De(I(e, t.path)), a = typeof t.weight == "number" ? t.weight : void 0;
+		n.push({
+			name: r.family,
+			data: i.buffer.slice(i.byteOffset, i.byteOffset + i.byteLength),
+			...a === void 0 ? {} : { weight: a },
+			...t.style === void 0 ? {} : { style: t.style }
+		});
+	}
+	return n;
+}, Wn = async (e) => {
+	let t = await Bn(), n = await Hn();
+	if (t === null || n === null) {
+		let e = [t === null ? "satori" : null, n === null ? "@resvg/resvg-js" : null].filter((e) => e !== null).join(" + ");
+		throw Error(`ogImage cannot render: ${e} is not loadable. Both ship as optional dependencies of @voltro/cli — if your installer omitted optional dependencies, run \`pnpm add -D satori @resvg/resvg-js\` in this app.`);
+	}
+	let r = await t(e.element, {
+		width: e.width ?? 1200,
+		height: e.height ?? 630,
+		fonts: e.fonts.map((e) => ({
+			...e,
+			data: e.data
+		}))
+	});
+	return {
+		svg: r,
+		png: new Uint8Array(new n.Resvg(r).render().asPng())
+	};
+}, Gn = (e, t, n, r) => `${e}\u0000${t}\u0000${n}\u0000${r}`, Kn = (e, t) => ke("sha256", e).update(t).digest("hex"), qn = () => {
+	let e = process.env.VOLTRO_OG_SECRET;
+	return e !== void 0 && e !== "" ? {
+		secret: e,
+		fromEnv: !0
+	} : {
+		secret: Ae(32).toString("hex"),
+		fromEnv: !1
+	};
+}, Jn = "/_voltro/og", Yn = (e) => {
+	let t = e.ttlMs ?? 36e5, n, r = () => (n ??= Un(e.root, e.fonts), n);
+	return {
+		signOgUrl: ({ pattern: t, params: n, tenant: r, locale: i }) => {
+			let a = JSON.stringify(n), o = r ?? "", s = i ?? "", c = Kn(e.secret, Gn(t, a, o, s));
+			return `${Jn}?${new URLSearchParams({
+				route: t,
+				p: a,
+				...o === "" ? {} : { t: o },
+				...s === "" ? {} : { l: s },
+				sig: c
+			}).toString()}`;
+		},
+		handle: async (n) => {
+			if (n.pathname !== "/_voltro/og") return null;
+			let i = n.searchParams.get("route") ?? "", a = n.searchParams.get("p") ?? "{}", o = n.searchParams.get("t") ?? "", s = n.searchParams.get("l") ?? "", c = n.searchParams.get("sig") ?? "", l = Kn(e.secret, Gn(i, a, o, s)), u = Buffer.from(c, "utf8"), d = Buffer.from(l, "utf8");
+			if (u.length !== d.length || !je(u, d)) return {
+				status: 403,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("bad signature")
+			};
+			if (!e.isOgSsrRoute(i)) return {
+				status: 404,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("no such og route")
+			};
+			let f = `og:${i}|p=${a}${o === "" ? "" : `|tenant=${o}`}${s === "" ? "" : `|lang=${s}`}`, p = e.cache.get(f), m = Date.now();
+			if (p !== void 0 && p.expiresAt > m) return {
+				status: 200,
+				headers: {
+					"content-type": "image/png",
+					"x-voltro-og-cache": "HIT"
+				},
+				body: new Uint8Array(Buffer.from(p.html, "base64"))
+			};
+			let h = (await e.getPageModule(i))?.ogImage;
+			if (typeof h != "function") return {
+				status: 404,
+				headers: { "content-type": "text/plain" },
+				body: new TextEncoder().encode("page has no ogImage")
+			};
+			let { png: g } = await Wn({
+				element: await h({
+					params: JSON.parse(a),
+					loaderData: void 0,
+					...s === "" ? { locale: "en" } : { locale: s },
+					...o === "" ? {} : { tenant: o }
+				}),
+				fonts: await r()
+			}), _ = e.cache.generation(f);
+			return e.cache.set(f, {
+				html: Buffer.from(g).toString("base64"),
+				renderedAt: m,
+				expiresAt: m + t,
+				servableUntil: m + t,
+				revalidateMs: t,
+				staleWhileRevalidateMs: 0
+			}, { ifGeneration: _ }), {
+				status: 200,
+				headers: {
+					"content-type": "image/png",
+					"x-voltro-og-cache": "MISS"
+				},
+				body: g
+			};
+		}
+	};
+}, Xn = class extends Error {
 	_voltroDeferral = !0;
 	constructor(e) {
 		super(e), this.name = "DeferralNotSupportedError";
 	}
-}, Kt = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, qt = (e) => {
+}, Zn = (e) => typeof e == "object" && !!e && e._voltroDeferral === !0, Qn = (e) => {
 	if (!(e instanceof Error)) return;
 	let t = e._voltroControl;
 	if (t === "redirect") {
@@ -795,7 +1184,7 @@ __installPublicEnv(publicEnvValues)
 		},
 		body: "not found"
 	};
-}, Jt = (e) => {
+}, $n = (e) => {
 	let { helpers: t } = e, n = t.prepareDeferredLoaderData(e.loaderData, "page"), r = {}, i = {}, a = {};
 	for (let [n, o] of Object.entries(e.segmentLoaderData)) {
 		let e = Number(n), s = t.prepareDeferredLoaderData(o, e);
@@ -807,10 +1196,11 @@ __installPublicEnv(publicEnvValues)
 			page: e.page,
 			renderMode: e.renderMode,
 			interactive: e.interactive,
-			...e.layoutShell ? { layoutShell: e.layoutShell } : {}
+			...e.layoutShell ? { layoutShell: e.layoutShell } : {},
+			...e.ppr === !0 ? { ppr: !0 } : {}
 		});
 	} catch (e) {
-		throw new Gt(e instanceof Error ? e.message : String(e));
+		throw new Xn(e instanceof Error ? e.message : String(e));
 	}
 	return {
 		loaderData: n.renderData,
@@ -826,8 +1216,8 @@ __installPublicEnv(publicEnvValues)
 			...Object.keys(a).length > 0 ? { deferredSegmentIds: a } : {}
 		}
 	};
-}, Yt = (e) => {
-	let { helpers: t, renderInput: n } = e, r = Jt({
+}, er = (e) => {
+	let { helpers: t, renderInput: n } = e, r = $n({
 		helpers: t,
 		page: e.page,
 		pathname: n.pathname,
@@ -848,22 +1238,22 @@ __installPublicEnv(publicEnvValues)
 		stateScript: t.renderRouterStateScript(r.stateInput),
 		hasDeferred: r.hasDeferred
 	};
-}, Xt = (e) => {
+}, tr = (e) => {
 	let { html: t, meta: n } = e.helpers.renderPageToHtml(e.prepared.renderInput);
 	return {
 		body: t,
 		meta: n
 	};
-}, Zt = (e) => [
+}, nr = (e) => [
 	...e.extra ?? [],
 	e.helpers.renderMetaToHtml(e.meta),
 	`<meta name="voltro-interactive" content="${e.interactive}" />`,
 	...e.prepared.hasDeferred ? [e.helpers.renderDeferredRegistryScript()] : [],
 	e.prepared.stateScript
-].filter((e) => e.length > 0).join("\n    "), Qt = (e, t) => {
+].filter((e) => e.length > 0).join("\n    "), rr = (e, t) => {
 	let n = t.replace(/[^A-Za-z0-9+/=_-]/g, "");
 	return e.replace(/<script(?![^>]*\bnonce=)/gi, `<script nonce="${n}"`);
-}, $t = (e) => {
+}, ir = (e) => {
 	let t = e.indexOf("?");
 	return t === -1 ? {
 		pathname: e || "/",
@@ -872,7 +1262,7 @@ __installPublicEnv(publicEnvValues)
 		pathname: e.slice(0, t) || "/",
 		search: e.slice(t)
 	};
-}, en = (e) => {
+}, ar = (e) => {
 	let t = [];
 	for (let n of e.split("/").filter(Boolean)) n.startsWith("[[...") && n.endsWith("]]") ? t.push({
 		name: n.slice(5, -2),
@@ -888,12 +1278,12 @@ __installPublicEnv(publicEnvValues)
 		optional: !1
 	});
 	return t;
-}, tn = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), nn = async (e) => {
-	let t = A(e);
+}, or = (e) => e.replace(/-([a-z0-9])/g, (e, t) => t.toUpperCase()), sr = async (e) => {
+	let t = R(e);
 	for (let e = 0; e < 4; e++) {
-		let e = O(t, "project.json");
-		if (M(e)) try {
-			let n = await N.readFile(e, "utf8");
+		let e = I(t, "project.json");
+		if (B(e)) try {
+			let n = await V.readFile(e, "utf8");
 			return {
 				projectDir: t,
 				manifest: JSON.parse(n)
@@ -901,38 +1291,38 @@ __installPublicEnv(publicEnvValues)
 		} catch {
 			return null;
 		}
-		let n = D(t);
+		let n = F(t);
 		if (n === t) break;
 		t = n;
 	}
 	return null;
-}, rn = async (e) => {
-	let t = await nn(e);
+}, cr = async (e) => {
+	let t = await sr(e);
 	if (!t) return [];
-	let { projectDir: n, manifest: r } = t, i = E(e), a = r.apps ?? {}, o = [];
+	let { projectDir: n, manifest: r } = t, i = ae(e), a = r.apps ?? {}, o = [];
 	for (let [e, t] of Object.entries(a)) {
 		if (e === i || t.kind !== "web" || typeof t.port != "number") continue;
-		let r = O(n, t.path ?? e), a = O(r, "src", "pages");
-		if (!M(a)) continue;
+		let r = I(n, t.path ?? e), a = I(r, "src", "pages");
+		if (!B(a)) continue;
 		let s;
 		try {
-			let { pages: e } = await $(a);
+			let { pages: e } = await ro(a);
 			s = e.map((e) => ({
 				pattern: e.pattern,
-				params: en(e.pattern)
+				params: ar(e.pattern)
 			}));
 		} catch {
 			continue;
 		}
 		o.push({
-			key: tn(e),
+			key: or(e),
 			origin: `http://localhost:${t.port}`,
 			...typeof t.origin == "string" && t.origin.length > 0 ? { prodOrigin: t.origin } : {},
 			routes: s
 		});
 	}
 	return o;
-}, an = (e) => {
+}, lr = (e) => {
 	if (e.params.length === 0) return `'${e.pattern}'`;
 	let t = e.pattern;
 	for (let n of e.params) {
@@ -940,21 +1330,21 @@ __installPublicEnv(publicEnvValues)
 		t = t.replace(e, r);
 	}
 	return "`" + t + "`";
-}, on = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
+}, ur = (e) => e.params.length === 0 ? "EmptyParams" : `{ ${e.params.map((e) => {
 	let t = "string";
 	return e.optional ? `readonly ${e.name}?: ${t}` : `readonly ${e.name}: ${t}`;
-}).join("; ")} }`, sn = (e, t, n) => {
-	let r = on(e), i = an(e), a = t ? "VoltroExternalUrl" : e.search === void 0 ? "VoltroRouteUrl" : `VoltroRouteUrl<Schema.Schema.Type<typeof ${e.search.alias}>>`, o = t && n ? `${n} + ` : "";
+}).join("; ")} }`, dr = (e, t, n) => {
+	let r = ur(e), i = lr(e), a = t ? "VoltroExternalUrl" : e.search === void 0 ? "VoltroRouteUrl" : `VoltroRouteUrl<Schema.Schema.Type<typeof ${e.search.alias}>>`, o = t && n ? `${n} + ` : "";
 	return e.params.length === 0 ? `() => (${o}${i}) as ${a}` : `({ ${e.params.map((e) => e.name).join(", ")} }: ${r}) => (${o}${i}) as ${a}`;
-}, cn = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${sn(e, !1)},`).join("\n")}\n}`, ln = (e, t) => {
+}, fr = (e) => `{\n${[...e].sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `  ${JSON.stringify(e.pattern)}: ${dr(e, !1)},`).join("\n")}\n}`, pr = (e, t) => {
 	if (e.routes.length === 0) return `  ${e.key}: {} as Record<string, never>,`;
-	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${sn(e, !0, i)},`);
+	let n = [...e.routes].sort((e, t) => e.pattern.localeCompare(t.pattern)), r = t === "prod" && e.prodOrigin ? e.prodOrigin : e.origin, i = JSON.stringify(r), a = n.map((e) => `    ${JSON.stringify(e.pattern)}: ${dr(e, !0, i)},`);
 	return `  ${e.key}: {\n${a.join("\n")}\n  },`;
-}, un = async (e) => {
+}, mr = async (e) => {
 	let t = await Promise.all(e.pages.map(async (t) => {
 		let n;
 		try {
-			let r = await N.readFile(O(e.appRoot, "src", "pages", t.file), "utf8");
+			let r = await V.readFile(I(e.appRoot, "src", "pages", t.file), "utf8");
 			/^export const searchParams\b/m.test(r) && (n = {
 				alias: `SP_${t.ident}`,
 				specifier: `../src/pages/${t.file.replace(/\.tsx?$/, "")}`
@@ -962,10 +1352,10 @@ __installPublicEnv(publicEnvValues)
 		} catch {}
 		return {
 			pattern: t.pattern,
-			params: en(t.pattern),
+			params: ar(t.pattern),
 			...n === void 0 ? {} : { search: n }
 		};
-	})), n = await rn(e.appRoot), r = t.filter((e) => e.search !== void 0).sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `import type { searchParams as ${e.search.alias} } from '${e.search.specifier}'`), i = [
+	})), n = await cr(e.appRoot), r = t.filter((e) => e.search !== void 0).sort((e, t) => e.pattern.localeCompare(t.pattern)).map((e) => `import type { searchParams as ${e.search.alias} } from '${e.search.specifier}'`), i = [
 		"// THIS FILE IS GENERATED — DO NOT EDIT BY HAND.",
 		"// Re-emitted by `voltro dev` whenever `src/pages/**` changes.",
 		"// Type-safe route builders consumed by <Link to={...}>.",
@@ -981,50 +1371,50 @@ __installPublicEnv(publicEnvValues)
 		"",
 		"type EmptyParams = Record<string, never>",
 		""
-	].join("\n"), a = e.mode ?? "dev", o = `${i}\n${`export const routes = ${cn(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => ln(e, a)).join("\n")}\n} as const\n`}`, s = O(e.appRoot, ".framework", "routes.generated.ts");
-	await N.mkdir(D(s), { recursive: !0 });
+	].join("\n"), a = e.mode ?? "dev", o = `${i}\n${`export const routes = ${fr(t)} as const\n`}\n${n.length === 0 ? "export const siblingApps = {} as Record<string, never>\n" : `export const siblingApps = {\n${n.map((e) => pr(e, a)).join("\n")}\n} as const\n`}`, s = I(e.appRoot, ".framework", "routes.generated.ts");
+	await V.mkdir(F(s), { recursive: !0 });
 	let c = null;
 	try {
-		c = await N.readFile(s, "utf8");
+		c = await V.readFile(s, "utf8");
 	} catch {}
 	return c === o ? {
 		path: s,
 		wrote: !1
-	} : (await N.writeFile(s, o, "utf8"), {
+	} : (await V.writeFile(s, o, "utf8"), {
 		path: s,
 		wrote: !0
 	});
-}, dn = (e) => {
+}, hr = (e) => {
 	if (e === "" || e === "/") return "/";
 	let t = e.startsWith("/") ? e : `/${e}`;
 	return t.endsWith("/") ? t.slice(0, -1) : t;
-}, fn = (e, t) => {
-	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = dn(t);
+}, gr = (e, t) => {
+	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = hr(t);
 	return r === "/" ? `${n}/` : `${n}${r}`;
-}, pn = (e, t, n) => {
-	let r = dn(e);
+}, _r = (e, t, n) => {
+	let r = hr(e);
 	return t === n ? r : r === "/" ? `/${t}` : `/${t}${r}`;
-}, mn = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), hn = (e) => {
+}, vr = (e) => e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;"), yr = (e) => {
 	let { siteUrl: t, entries: n } = e, r = e.locales && e.locales.length > 1 ? e.locales : void 0, i = e.defaultLocale ?? r?.[0] ?? "en", a = r !== void 0, o = /* @__PURE__ */ new Map(), s = (e) => {
 		if (!r) return "";
-		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${mn(n)}" href="${mn(fn(t, pn(e, n, i)))}" />`);
-		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${mn(fn(t, pn(e, i, i)))}" />`), `\n${n.join("\n")}`;
+		let n = r.map((n) => `    <xhtml:link rel="alternate" hreflang="${vr(n)}" href="${vr(gr(t, _r(e, n, i)))}" />`);
+		return n.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${vr(gr(t, _r(e, i, i)))}" />`), `\n${n.join("\n")}`;
 	};
 	for (let e of n) {
 		let n = r ?? [i];
 		for (let r of n) {
-			let n = fn(t, pn(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${mn(e.lastmod)}</lastmod>` : "";
-			o.set(n, `  <url>\n    <loc>${mn(n)}</loc>${a}${s(e.path)}\n  </url>`);
+			let n = gr(t, _r(e.path, r, i)), a = e.lastmod ? `\n    <lastmod>${vr(e.lastmod)}</lastmod>` : "";
+			o.set(n, `  <url>\n    <loc>${vr(n)}</loc>${a}${s(e.path)}\n  </url>`);
 		}
 	}
 	let c = [...o.keys()].sort().map((e) => o.get(e)).join("\n");
 	return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset${a ? " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\"" : " xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\""}>\n${c}\n</urlset>\n`;
-}, gn = (e) => {
+}, br = (e) => {
 	if (!e.indexable) return "User-agent: *\nDisallow: /\n";
 	let t = ["User-agent: *", "Allow: /"];
-	for (let n of e.disallow ?? []) t.push(`Disallow: ${dn(n)}`);
+	for (let n of e.disallow ?? []) t.push(`Disallow: ${hr(n)}`);
 	return e.sitemapUrl && t.push("", `Sitemap: ${e.sitemapUrl}`), `${t.join("\n")}\n`;
-}, _n = 256, vn = (e = _n) => {
+}, xr = 256, Sr = (e = xr) => {
 	let t = [], n = /* @__PURE__ */ new Set();
 	return {
 		emit(r, i) {
@@ -1047,18 +1437,18 @@ __installPublicEnv(publicEnvValues)
 			return t.slice();
 		}
 	};
-}, yn = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, bn = () => `: keep-alive ${Date.now()}\n\n`, xn = 8e3, Sn = (e, t = xn) => {
-	let n = wn(e);
+}, Cr = (e) => `event: ${e.channel}\ndata: ${JSON.stringify(e)}\n\n`, wr = () => `: keep-alive ${Date.now()}\n\n`, Tr = 8e3, Er = (e, t = Tr) => {
+	let n = Or(e);
 	return n.length <= t ? n : `${n.slice(0, t)}\n… [voltro] truncated at ${t} chars (${n.length} total)`;
-}, Cn = 4, wn = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
+}, Dr = 4, Or = (e, t = 0, n = /* @__PURE__ */ new Set()) => {
 	if (e instanceof Error) {
 		let r = e.stack ?? `${e.name}: ${e.message}`;
 		if (n.has(e)) return `${r}\n  [cycle]`;
 		n.add(e);
 		let i = [];
-		if (t < Cn) {
-			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${Tn(wn(a, t + 1, n))}`);
-			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${Tn(wn(e.cause, t + 1, n))}`);
+		if (t < Dr) {
+			if (e instanceof AggregateError && Array.isArray(e.errors)) for (let [r, a] of e.errors.entries()) i.push(`\n  [aggregate ${r}] ${kr(Or(a, t + 1, n))}`);
+			else e.cause !== void 0 && e.cause !== null && i.push(`\n  [cause] ${kr(Or(e.cause, t + 1, n))}`);
 		}
 		return r + i.join("");
 	}
@@ -1067,30 +1457,30 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return "[unstringifiable thrown value]";
 	}
-}, Tn = (e) => {
+}, kr = (e) => {
 	let t = e.split("\n");
 	return t.length <= 3 ? e : `${t.slice(0, 3).join("\n")}\n  …`;
-}, En = {
+}, Ar = {
 	trace: 0,
 	debug: 1,
 	info: 2,
 	warn: 3,
 	error: 4,
 	fatal: 5
-}, Dn = 2e3, On = 200, kn = class {
+}, jr = 2e3, Mr = 200, Nr = class {
 	capacity;
 	buffer = [];
-	constructor(e = Dn) {
+	constructor(e = jr) {
 		this.capacity = e;
 	}
 	append(e) {
 		this.buffer.push(e), this.buffer.length > this.capacity && this.buffer.shift();
 	}
 	query(e = {}) {
-		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? On, this.capacity), i = e.minLevel === void 0 ? En.trace : En[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
+		let t = e.since ?? 0, n = e.until ?? Date.now(), r = Math.min(e.max ?? Mr, this.capacity), i = e.minLevel === void 0 ? Ar.trace : Ar[e.minLevel], a = e.scope?.toLowerCase(), o = e.source, s = e.filter?.toLowerCase(), c = e.traceId, l = [];
 		for (let e = this.buffer.length - 1; e >= 0 && l.length < r; e--) {
 			let r = this.buffer[e];
-			r.ts < t || r.ts > n || En[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
+			r.ts < t || r.ts > n || Ar[r.level] < i || (o === void 0 || r.source === o) && (a !== void 0 && (r.scope === void 0 || !r.scope.toLowerCase().includes(a)) || s !== void 0 && !r.message.toLowerCase().includes(s) || (c === void 0 || r.fields.traceId === c) && l.push(r));
 		}
 		return l.reverse();
 	}
@@ -1103,7 +1493,7 @@ __installPublicEnv(publicEnvValues)
 	clear() {
 		this.buffer = [];
 	}
-}, An = null, jn = () => (An === null && (An = new kn()), An), Mn = (e) => {
+}, Pr = null, Fr = () => (Pr === null && (Pr = new Nr()), Pr), Ir = (e) => {
 	if (typeof e == "string") return e;
 	if (e instanceof Error) return e.message;
 	try {
@@ -1111,28 +1501,28 @@ __installPublicEnv(publicEnvValues)
 	} catch {
 		return String(e);
 	}
-}, Nn = 8e3, Pn = (e) => typeof e == "string" ? e.length <= Nn ? e : `${e.slice(0, Nn)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Sn(e, Nn), Fn = (e, t) => {
+}, Lr = 8e3, Rr = (e) => typeof e == "string" ? e.length <= Lr ? e : `${e.slice(0, Lr)}… [voltro: truncated]` : typeof e != "object" || !e ? e : Er(e, Lr), zr = (e, t) => {
 	try {
 		e(...t);
 	} catch (n) {
 		try {
-			e(...t.map(Pn)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Nn} chars per argument.`);
+			e(...t.map(Rr)), e(`  ↑ [voltro] an argument above was too large for console formatting (${n?.message ?? "inspect failed"}) — printed bounded to ${Lr} chars per argument.`);
 		} catch {
 			e(`[voltro] a console.error argument could not be formatted at all (${t.length} arg(s)).`);
 		}
 	}
-}, In = (e) => {
+}, Br = (e) => {
 	let t = {
 		log: console.log.bind(console),
 		info: console.info.bind(console),
 		warn: console.warn.bind(console),
 		error: console.error.bind(console),
 		debug: console.debug.bind(console)
-	}, n = jn(), r = !1, i = (i) => (...a) => {
-		if (Fn(t[i], a), !r) {
+	}, n = Fr(), r = !1, i = (i) => (...a) => {
+		if (zr(t[i], a), !r) {
 			r = !0;
 			try {
-				let t = a.length > 0 ? Mn(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = V();
+				let t = a.length > 0 ? Ir(a[0]) : "", r = t.length > 500 ? t.slice(0, 500) + "…" : t, o = fe();
 				e.emit("log", {
 					level: i,
 					message: r,
@@ -1159,7 +1549,7 @@ __installPublicEnv(publicEnvValues)
 		}
 	};
 	console.log = i("log"), console.info = i("info"), console.warn = i("warn"), console.error = i("error"), console.debug = i("debug");
-	let a = L((t) => {
+	let a = le((t) => {
 		if (!r) {
 			r = !0;
 			try {
@@ -1170,7 +1560,7 @@ __installPublicEnv(publicEnvValues)
 					argsCount: 1,
 					...t.scope === void 0 ? {} : { scope: t.scope }
 				});
-				let a = V(), o = a !== void 0 && t.fields.traceId === void 0 ? {
+				let a = fe(), o = a !== void 0 && t.fields.traceId === void 0 ? {
 					...t.fields,
 					traceId: a.traceId
 				} : t.fields;
@@ -1190,24 +1580,24 @@ __installPublicEnv(publicEnvValues)
 	return () => {
 		console.log = t.log, console.info = t.info, console.warn = t.warn, console.error = t.error, console.debug = t.debug, a();
 	};
-}, Ln = 2e3, Rn = 8, zn = 1e3, Bn = 200, Vn = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Hn = (e) => {
+}, Vr = 2e3, Hr = 8, Ur = 1e3, Wr = 200, Gr = (e, t) => e.length > t ? `${e.slice(0, t)}…` : e, Kr = (e) => {
 	switch (e) {
 		case "error": return "error";
 		case "warn": return "warn";
 		case "debug": return "debug";
 		default: return "info";
 	}
-}, Un = R({ scope: "client" }), Wn = (e, t) => {
+}, qr = K({ scope: "client" }), Jr = (e, t) => {
 	let n;
 	try {
 		n = JSON.parse(e);
 	} catch {
-		return Gn(400, { error: "invalid JSON body" });
+		return Yr(400, { error: "invalid JSON body" });
 	}
-	if (typeof n != "object" || !n) return Gn(400, { error: "body must be a JSON object" });
+	if (typeof n != "object" || !n) return Yr(400, { error: "body must be a JSON object" });
 	let r = n;
-	if (!Array.isArray(r.entries)) return Gn(400, { error: "entries must be an array" });
-	let i = typeof r.app == "string" ? Vn(r.app, 120) : void 0, a = typeof r.page == "string" ? Vn(r.page, 200) : void 0, o = typeof r.ua == "string" ? Vn(r.ua, 200) : void 0, s = r.entries.slice(0, Bn), c = 0;
+	if (!Array.isArray(r.entries)) return Yr(400, { error: "entries must be an array" });
+	let i = typeof r.app == "string" ? Gr(r.app, 120) : void 0, a = typeof r.page == "string" ? Gr(r.page, 200) : void 0, o = typeof r.ua == "string" ? Gr(r.ua, 200) : void 0, s = r.entries.slice(0, Wr), c = 0;
 	for (let e of s) {
 		if (typeof e != "object" || !e) continue;
 		let n = e;
@@ -1218,7 +1608,7 @@ __installPublicEnv(publicEnvValues)
 			"warn",
 			"error",
 			"debug"
-		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Vn(n.message, Ln), u = Array.isArray(n.args) ? n.args.slice(0, Rn).filter((e) => typeof e == "string").map((e) => Vn(e, zn)) : void 0, d = typeof n.stack == "string" ? Vn(n.stack, Ln) : void 0;
+		].includes(n.level) ? n.level : "log", s = typeof n.ts == "number" && Number.isFinite(n.ts) ? n.ts : Date.now(), l = Gr(n.message, Vr), u = Array.isArray(n.args) ? n.args.slice(0, Hr).filter((e) => typeof e == "string").map((e) => Gr(e, Ur)) : void 0, d = typeof n.stack == "string" ? Gr(n.stack, Vr) : void 0;
 		t.emit("clientLog", {
 			ts: s,
 			level: r,
@@ -1233,35 +1623,35 @@ __installPublicEnv(publicEnvValues)
 			...i === void 0 ? {} : { app: i },
 			...a === void 0 ? {} : { page: a },
 			...u !== void 0 && u.length > 0 ? { args: u } : {}
-		}, p = Hn(r);
-		(p === "error" || p === "warn") && d !== void 0 ? Un[p](l, f, { stack: d }) : Un[p](l, {
+		}, p = Kr(r);
+		(p === "error" || p === "warn") && d !== void 0 ? qr[p](l, f, { stack: d }) : qr[p](l, {
 			...f,
 			...d === void 0 ? {} : { stack: d }
 		}), c++;
 	}
-	return Gn(202, {
+	return Yr(202, {
 		accepted: c,
 		dropped: r.entries.length - c
 	});
-}, Gn = (e, t) => ({
+}, Yr = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Kn = "/_voltro/inspect/clientLog", qn = [
+}), Xr = "/_voltro/inspect/clientLog", Zr = [
 	"trace",
 	"debug",
 	"info",
 	"warn",
 	"error",
 	"fatal"
-], Jn = {
+], Qr = {
 	trace: "TRACE",
 	debug: "DEBUG",
 	info: "INFO ",
 	warn: "WARN ",
 	error: "ERROR",
 	fatal: "FATAL"
-}, Yn = (e) => qn.includes(e), Xn = (e, t, n = {}) => {
+}, $r = (e) => Zr.includes(e), ei = (e, t, n = {}) => {
 	if (u()) return {
 		status: 503,
 		contentType: "application/json",
@@ -1292,7 +1682,7 @@ __installPublicEnv(publicEnvValues)
 		Number.isFinite(e) && e > 0 && (o.max = Math.floor(e));
 	}
 	let d = a.get("level");
-	d !== null && Yn(d) && (o.minLevel = d);
+	d !== null && $r(d) && (o.minLevel = d);
 	let p = a.get("source");
 	(p === "server" || p === "client") && (o.source = p);
 	let m = a.get("scope");
@@ -1305,7 +1695,7 @@ __installPublicEnv(publicEnvValues)
 	if ((a.get("format") ?? "json") === "text") return {
 		status: 200,
 		contentType: "text/plain; charset=utf-8",
-		body: _.map(Zn).join("\n") + (_.length > 0 ? "\n" : "")
+		body: _.map(ti).join("\n") + (_.length > 0 ? "\n" : "")
 	};
 	let v = {
 		capturedAt: Date.now(),
@@ -1319,40 +1709,40 @@ __installPublicEnv(publicEnvValues)
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(v)
 	};
-}, Zn = (e) => {
-	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = $n(e.fields);
-	return `${n}:${r}:${i}.${a} ${Jn[e.level]} ${o} ${e.message}${s}`;
-}, Qn = 80, $n = (e) => {
+}, ti = (e) => {
+	let t = new Date(e.ts), n = String(t.getHours()).padStart(2, "0"), r = String(t.getMinutes()).padStart(2, "0"), i = String(t.getSeconds()).padStart(2, "0"), a = String(t.getMilliseconds()).padStart(3, "0"), o = `[${e.scope ?? "?"}/${e.source}]`, s = ri(e.fields);
+	return `${n}:${r}:${i}.${a} ${Qr[e.level]} ${o} ${e.message}${s}`;
+}, ni = 80, ri = (e) => {
 	let t = Object.entries(e);
 	if (t.length === 0) return "";
 	let n = [];
 	for (let [e, r] of t) {
 		if (r === void 0) continue;
-		let t = er(r);
+		let t = ii(r);
 		n.push(`${e}=${t}`);
 	}
 	return n.length > 0 ? "  " + n.join(" ") : "";
-}, er = (e) => {
+}, ii = (e) => {
 	if (typeof e == "string") {
-		let t = e.length > Qn ? e.slice(0, Qn) + "…" : e;
+		let t = e.length > ni ? e.slice(0, ni) + "…" : e;
 		return /[\s=]/.test(t) ? `"${t.replace(/"/g, "\\\"")}"` : t;
 	}
 	if (e === null) return "null";
 	if (typeof e == "number" || typeof e == "boolean") return String(e);
 	try {
 		let t = JSON.stringify(e);
-		return t.length > Qn ? t.slice(0, Qn) + "…" : t;
+		return t.length > ni ? t.slice(0, ni) + "…" : t;
 	} catch {
 		return "[unserialisable]";
 	}
-}, tr = "/_voltro/inspect/logs", nr = (e, t, n) => {
+}, ai = "/_voltro/inspect/logs", oi = (e, t, n) => {
 	if (t.headers.authorization !== void 0) return !1;
 	let { token: r } = n;
 	if (r === void 0 || r === "" || !n.isLoopback(n.target)) return !1;
 	e.setHeader("authorization", `Bearer ${r}`);
 	let i = n.writeToken;
 	return i !== void 0 && i !== "" && t.headers["x-voltro-inspect-write"] === void 0 && e.setHeader("x-voltro-inspect-write", i), !0;
-}, rr = [{
+}, si = [{
 	match: (e) => typeof e == "string" && e.startsWith("[BABEL] Note: The code generator has deoptimised"),
 	handle: (e, t) => {
 		let n = e[0], r = n.match(/deoptimised the styling of (.+?) as it exceeds the max of (\d+\w*B)\.?/);
@@ -1364,13 +1754,13 @@ __installPublicEnv(publicEnvValues)
 			});
 		} else t.info(n);
 	}
-}], ir = () => {
+}], ci = () => {
 	let e = {
 		warn: console.warn.bind(console),
 		error: console.error.bind(console)
-	}, t = R({ scope: "babel" }), n = !1, r = (r) => (...i) => {
+	}, t = K({ scope: "babel" }), n = !1, r = (r) => (...i) => {
 		if (!n) {
-			for (let e of rr) if (e.match(i[0])) {
+			for (let e of si) if (e.match(i[0])) {
 				n = !0;
 				try {
 					e.handle(i, t);
@@ -1385,7 +1775,7 @@ __installPublicEnv(publicEnvValues)
 	return console.warn = r("warn"), console.error = r("error"), () => {
 		console.warn = e.warn, console.error = e.error;
 	};
-}, ar = {
+}, li = {
 	loader: "it runs on the server, and the router caches its result per route + params",
 	renderMode: "it picks the server render strategy",
 	dynamic: "it picks the server render strategy",
@@ -1395,8 +1785,10 @@ __installPublicEnv(publicEnvValues)
 	staleWhileRevalidate: "it sets the ISR stale-while-revalidate window",
 	cacheInvalidatesOn: "it wires this page into the ISR cache invalidator",
 	interactive: "it decides how much client JS the server ships",
-	tenantAware: "it is part of the server-side cache key"
-}, or = Object.keys(ar), sr = "virtual:voltro-route-refresh", cr = `\0${sr}`, lr = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, ur = () => `
+	tenantAware: "it is part of the server-side cache key",
+	ogImage: "the server renders it into the og:image PNG",
+	ppr: "it switches the isr path to partial prerendering (cached shell + per-request holes)"
+}, ui = Object.keys(li), di = "virtual:voltro-route-refresh", fi = `\0${di}`, pi = /(?:^|&)(raw|url|inline|worker|sharedworker|direct)(?:&|=|$)/, mi = () => `
 // GENERATED by @voltro/cli — the \`voltro dev\` route Fast Refresh runtime.
 
 /** Mirrors react-refresh's own \`isLikelyComponentType\` closely enough for the
@@ -1425,11 +1817,11 @@ const stableForm = (value) => {
  *  readers (\`build.ts\` prerender, \`webDev.ts\` dev SSR, \`start.ts\`). A change to
  *  one of THESE cannot be hot-applied: the server already ran with the old
  *  value. Everything else a page exports is plain client-side data. */
-const serverRelevantExports = ${JSON.stringify(or)}
+const serverRelevantExports = ${JSON.stringify(ui)}
 
 /** Name → the server step that already consumed it, so the reload message can
  *  say WHY rather than just WHAT. Injected from the same single source. */
-const serverExportEffect = ${JSON.stringify(ar)}
+const serverExportEffect = ${JSON.stringify(li)}
 
 /** The reason \`name\` forces a reload, for the console line. */
 export const serverEffectOf = (name) =>
@@ -1472,7 +1864,7 @@ export const routeUpdateNeedsReload = (prevExports, nextExports) => {
 const previousHook = globalThis.__getReactRefreshIgnoredExports
 globalThis.__getReactRefreshIgnoredExports = (args) =>
   ignoredExports.get(args.id) ?? previousHook?.(args) ?? []
-`, dr = (e) => `
+`, hi = (e) => `
 if (import.meta.hot) {
   // Self-import to read our OWN exports, the same technique the react plugin
   // uses; the namespace is only complete after evaluation, hence the promise.
@@ -1499,97 +1891,97 @@ import {
   registerRouteModule as __voltro_registerRouteModule,
   routeUpdateNeedsReload as __voltro_routeUpdateNeedsReload,
   serverEffectOf as __voltro_serverEffect,
-} from '${sr}'
-`, fr = (e) => e.replace(/\\/g, "/"), pr = (e, t) => {
-	let [n = "", r] = fr(e).split("?");
-	if (!n.endsWith(".tsx") || r !== void 0 && lr.test(r)) return !1;
-	let i = fr(t).replace(/\/$/, "");
-	return n.startsWith(`${i}/`) ? c.test(n) || s.has(n.slice(n.lastIndexOf("/") + 1)) : !1;
-}, mr = (e, t, n) => pr(t, n) ? `${e}${dr(fr(t).split("?")[0] ?? t)}` : null, hr = (e) => ({
+} from '${di}'
+`, gi = (e) => e.replace(/\\/g, "/"), _i = (e, t) => {
+	let [n = "", r] = gi(e).split("?");
+	if (!n.endsWith(".tsx") || r !== void 0 && pi.test(r)) return !1;
+	let i = gi(t).replace(/\/$/, "");
+	return n.startsWith(`${i}/`) ? o.test(n) || a.has(n.slice(n.lastIndexOf("/") + 1)) : !1;
+}, vi = (e, t, n) => _i(t, n) ? `${e}${hi(gi(t).split("?")[0] ?? t)}` : null, yi = (e) => ({
 	name: "voltro:route-fast-refresh",
 	enforce: "pre",
-	resolveId: (e) => e === "virtual:voltro-route-refresh" ? cr : void 0,
-	load: (e) => e === cr ? ur() : void 0,
+	resolveId: (e) => e === "virtual:voltro-route-refresh" ? fi : void 0,
+	load: (e) => e === fi ? mi() : void 0,
 	transform: (t, n, r) => {
 		if (r?.ssr === !0) return null;
-		let i = mr(t, n, e);
+		let i = vi(t, n, e);
 		return i === null ? null : {
 			code: i,
 			map: null
 		};
 	}
-}), gr = R({ scope: "voltro:dashboard" }), _r = ie(import.meta.url), vr = 5179, yr = (e) => {
+}), bi = K({ scope: "voltro:dashboard" }), xi = q(import.meta.url), Si = 5179, Ci = (e) => {
 	let t = process.env.VOLTRO_DASHBOARD_PATH;
-	if (t && M(O(A(t), "app.config.ts"))) return A(t);
+	if (t && B(I(R(t), "app.config.ts"))) return R(t);
 	try {
-		let e = D(_r.resolve("@voltro/dashboard/package.json"));
-		if (M(O(e, "app.config.ts"))) return e;
+		let e = F(xi.resolve("@voltro/dashboard/package.json"));
+		if (B(I(e, "app.config.ts"))) return e;
 	} catch {}
-	let n = O("voltro-devtools", "apps", "dashboard"), r = A(e);
+	let n = I("voltro-devtools", "apps", "dashboard"), r = R(e);
 	for (let e = 0; e < 10; e++) {
-		let e = O(r, n);
-		if (M(O(e, "app.config.ts"))) return e;
-		let t = D(r);
+		let e = I(r, n);
+		if (B(I(e, "app.config.ts"))) return e;
+		let t = F(r);
 		if (t === r) break;
 		r = t;
 	}
 	return null;
-}, br = "VOLTRO_IS_DASHBOARD", xr = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
-	let i = K({
+}, wi = "VOLTRO_IS_DASHBOARD", Ti = (e, t = "127.0.0.1", n = 250) => new Promise((r) => {
+	let i = Ne({
 		port: e,
 		host: t
 	}), a = !1, o = (e) => {
 		a || (a = !0, i.destroy(), r(e));
 	};
 	i.once("connect", () => o(!0)), i.once("error", () => o(!1)), setTimeout(() => o(!1), n);
-}), Sr = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), Cr = () => process.env[br] === "1", wr = () => process.stdout.isTTY === !0, Tr = O(H(), ".voltro", "dashboard-launch.lock"), Er = 1e4, Dr = async () => {
+}), Ei = () => !!(process.env.VOLTRO_DASHBOARD === "off" || process.argv.includes("--disable-dashboard")), Di = () => process.env[wi] === "1", Oi = () => process.stdout.isTTY === !0, ki = I(he(), ".voltro", "dashboard-launch.lock"), Ai = 1e4, ji = async () => {
 	try {
-		await N.mkdir(D(Tr), { recursive: !0 });
-		let e = await N.open(Tr, "wx");
+		await V.mkdir(F(ki), { recursive: !0 });
+		let e = await V.open(ki, "wx");
 		return await e.write(`${process.pid}\n${Date.now()}\n`), await e.close(), !0;
 	} catch {
 		try {
-			let e = await N.stat(Tr);
-			if (Date.now() - e.mtimeMs > Er) return await N.unlink(Tr).catch(() => void 0), Dr();
+			let e = await V.stat(ki);
+			if (Date.now() - e.mtimeMs > Ai) return await V.unlink(ki).catch(() => void 0), ji();
 		} catch {}
 		return !1;
 	}
-}, Or = async () => {
+}, Mi = async () => {
 	try {
-		await N.unlink(Tr);
+		await V.unlink(ki);
 	} catch {}
-}, kr = async (e) => {
+}, Ni = async (e) => {
 	let t = e.port ?? 5179;
-	if (Sr()) return {
+	if (Ei()) return {
 		status: "skipped",
 		reason: "disabled by flag/env",
 		port: t
 	};
-	if (Cr()) return {
+	if (Di()) return {
 		status: "skipped",
 		reason: "this process IS the dashboard",
 		port: t
 	};
-	if (!wr()) return {
+	if (!Oi()) return {
 		status: "skipped",
 		reason: "stdout is not a TTY (CI/smoke)",
 		port: t
 	};
-	if (!await Dr()) return {
+	if (!await ji()) return {
 		status: "skipped",
 		reason: "another voltro process is currently launching the dashboard",
 		port: t
 	};
-	if (await xr(t)) return await Or(), {
+	if (await Ti(t)) return await Mi(), {
 		status: "already-running",
 		port: t
 	};
 	let n = e.voltroBin;
 	if (!n) {
 		let e = process.argv[1];
-		n = e && e.endsWith("/src/bin.ts") ? O(D(e), "..", "bin", "voltro.mjs") : e ?? "voltro";
+		n = e && e.endsWith("/src/bin.ts") ? I(F(e), "..", "bin", "voltro.mjs") : e ?? "voltro";
 	}
-	let r = O(e.dashboardAppPath, ".framework", "dist", "index.html"), i = M(r), a = i ? "start" : "dev", o = _e(process.execPath, [
+	let r = I(e.dashboardAppPath, ".framework", "dist", "index.html"), i = B(r), a = i ? "start" : "dev", o = Me(process.execPath, [
 		n,
 		a,
 		e.dashboardAppPath
@@ -1597,7 +1989,7 @@ import {
 		stdio: "ignore",
 		env: {
 			...process.env,
-			[br]: "1",
+			[wi]: "1",
 			VOLTRO_DASHBOARD_PORT: String(t)
 		}
 	});
@@ -1605,19 +1997,19 @@ import {
 		if (o.exitCode === null && o.signalCode === null) try {
 			o.kill("SIGTERM");
 		} catch {}
-	}), gr.info(`auto-launching dashboard at http://localhost:${t}`, {
+	}), bi.info(`auto-launching dashboard at http://localhost:${t}`, {
 		port: t,
 		mode: a,
 		prebuilt: i
-	}), i || gr.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), gr.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
-		Or();
+	}), i || bi.debug("no pre-built dashboard — running `voltro dev`. Build with `cd voltro-devtools && pnpm build` for a fast prod boot."), bi.debug("disable via --disable-dashboard or VOLTRO_DASHBOARD=off"), setTimeout(() => {
+		Mi();
 	}, 4e3).unref(), {
 		status: "launched",
 		port: t
 	};
-}, Ar = /Could not find required `intl` object/, jr = "__voltro_i18n_instances__", Mr = (e = globalThis) => {
+}, Pi = /Could not find required `intl` object/, Fi = "__voltro_i18n_instances__", Ii = (e = globalThis) => {
 	try {
-		let t = e[jr]?.records;
+		let t = e[Fi]?.records;
 		return t === void 0 || t.length === 0 ? void 0 : {
 			instances: t.length,
 			reactIntlCopies: new Set(t.map((e) => e.intlProvider)).size,
@@ -1626,7 +2018,7 @@ import {
 	} catch {
 		return;
 	}
-}, Nr = (e, t) => [
+}, Li = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1644,7 +2036,7 @@ import {
 	"  versions on disk; this counts instances in the running process, and one",
 	"  file loaded down two paths is two instances.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Pr = (e, t) => [
+].join("\n"), Ri = (e, t) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider>, and this process`,
@@ -1660,7 +2052,7 @@ import {
 	"  direct import can land on a second copy that this count does not see —",
 	"  it counts what @voltro/i18n is bound to.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Fr = (e) => [
+].join("\n"), zi = (e) => [
 	"",
 	"── voltro diagnosis ───────────────────────────────────────────────────",
 	`${e} DID wrap this render in <I18nProvider> — the framework`,
@@ -1676,37 +2068,37 @@ import {
 	"  Do NOT use `pnpm ls` to rule that out: it lists versions on disk, and",
 	"  the duplication here is of module instances in one process.",
 	"───────────────────────────────────────────────────────────────────────"
-].join("\n"), Ir = (e, t, n, r = Mr()) => {
+].join("\n"), Bi = (e, t, n, r = Ii()) => {
 	if (!t) return;
 	let i = String(e?.message ?? e);
-	if (Ar.test(i)) return r === void 0 ? Fr(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Nr(n, r) : Pr(n, r);
-}, Lr = "<div id=\"root\"></div>", Rr = "<div id=\"root\">", zr = "</div>", Br = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, Vr = /\bsrc=["']([^"']+)["']/i, Hr = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, Ur = (e) => {
-	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace(Br, (e) => {
-		let r = Vr.exec(e)?.[1];
+	if (Pi.test(i)) return r === void 0 ? zi(n) : r.reactIntlCopies > 1 || r.instances > 1 ? Li(n, r) : Ri(n, r);
+}, Vi = "<div id=\"root\"></div>", Hi = "<div id=\"root\">", Ui = "</div>", Wi = /<script\b[^>]*\btype=["']module["'][^>]*><\/script>[ \t]*\n?/gi, Gi = /\bsrc=["']([^"']+)["']/i, Ki = /<script(?![^>]*\basync\b)([^>]*\btype=["']module["'][^>]*)>/gi, qi = (e) => {
+	let t = e.keepScriptInHead ?? ((e) => e.startsWith("/@")), n = [], r = e.shell.replace(Wi, (e) => {
+		let r = Gi.exec(e)?.[1];
 		return r === void 0 || t(r) ? e : (n.push(r), "");
 	});
-	e.inlineModuleScriptsAsync && (r = r.replace(Hr, "<script async$1>"));
-	let i = r.indexOf(Lr);
-	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Lr}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
+	e.inlineModuleScriptsAsync && (r = r.replace(Ki, "<script async$1>"));
+	let i = r.indexOf(Vi);
+	if (i === -1) throw Error(`[voltro] the generated shell has no \`${Vi}\` element, so a streamed response cannot be split around the page body. This is a framework bug unless the app overrode \`.framework/index.html\` by hand.`);
 	return {
-		head: `${r.slice(0, i)}${Rr}`,
-		tail: `${zr}${r.slice(i + 21)}`,
+		head: `${r.slice(0, i)}${Hi}`,
+		tail: `${Ui}${r.slice(i + 21)}`,
 		bootstrapModules: n
 	};
-}, Wr = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), Gr = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), Kr = (e, t) => {
-	let n = [t.timeZone === void 0 ? "" : ` data-voltro-tz="${Gr(t.timeZone)}"`, t.renderedAt === void 0 ? "" : ` data-voltro-now="${t.renderedAt}"`].join("");
-	return e.replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${Gr(t.lang)}"${n}`);
-}, qr = (e) => Kr(Wr(e.head, e.headInjection), e.documentAttrs), Jr = (e) => {
+}, Ji = (e, t) => (/<title>/i.test(t) ? e.replace(/[^\S\n]*<title>[\s\S]*?<\/title>\n?/i, "") : e).replace("</head>", `    ${t}\n  </head>`), Yi = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), Xi = (e, t) => {
+	let n = [t.timeZone === void 0 ? "" : ` data-voltro-tz="${Yi(t.timeZone)}"`, t.renderedAt === void 0 ? "" : ` data-voltro-now="${t.renderedAt}"`].join("");
+	return e.replace(/<html(\s+lang="[^"]*")?/i, `<html lang="${Yi(t.lang)}"${n}`);
+}, Zi = (e) => Xi(Ji(e.head, e.headInjection), e.documentAttrs), Qi = (e) => {
 	let { res: t, shell: n, documentAttrs: r, headInjection: i } = e, a = null, o = !1, s = !1, c = () => {
 		if (s || !o || a === null) return;
 		s = !0, t.statusCode = e.statusCode ?? 200;
 		for (let [n, r] of Object.entries(e.headers ?? {})) t.setHeader(n, r);
-		t.flushHeaders?.(), t.write(qr({
+		t.flushHeaders?.(), t.write(Zi({
 			head: n.head,
 			headInjection: i(a.meta),
 			documentAttrs: r
 		}));
-		let c = new Te();
+		let c = new Je();
 		c.pipe(t, { end: !1 }), c.on("end", () => {
 			t.end(n.tail);
 		}), a.stream.pipe(c);
@@ -1731,16 +2123,16 @@ import {
 		return;
 	}
 	c();
-}, Yr = (e) => Array.isArray(e.preload) && e.preload.length > 0, Xr = (e, t) => typeof e == "string" ? {
+}, $i = (e) => Array.isArray(e.preload) && e.preload.length > 0, ea = (e, t) => typeof e == "string" ? {
 	tag: e,
 	input: {}
 } : {
 	tag: e.tag,
 	input: e.input?.(t) ?? {}
-}, Zr = async (e) => {
+}, ta = async (e) => {
 	let { pageMod: t, params: n, query: r, apiName: i, seed: a, seedFailure: o, onError: s } = e;
-	if (Yr(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
-		let { tag: t, input: c } = Xr(e, n);
+	if ($i(t) && r !== void 0 && i !== void 0) for (let e of t.preload) {
+		let { tag: t, input: c } = ea(e, n);
 		try {
 			a(i, t, c, await r(t, c));
 		} catch (e) {
@@ -1750,62 +2142,62 @@ import {
 			}, e);
 		}
 	}
-}, Qr = (e) => a.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : o.test(e) || l.test(e) || i.test(e), $r = /* @__PURE__ */ new Set([
+}, na = (e) => l.test(e) || e.endsWith(".workflow.server.tsx") ? !1 : i.test(e) || c.test(e) || s.test(e), ra = /* @__PURE__ */ new Set([
 	"node_modules",
 	"dist",
 	".framework",
 	".git"
-]), ei = async (e) => {
+]), ia = async (e) => {
 	let t = [], n = async (e) => {
 		let r;
 		try {
-			r = await N.readdir(e, { withFileTypes: !0 });
+			r = await V.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
 		for (let i of r) if (!(i.name.startsWith(".") && i.isDirectory())) {
 			if (i.isDirectory()) {
-				if ($r.has(i.name)) continue;
-				await n(O(e, i.name));
-			} else Qr(i.name) && t.push(O(e, i.name));
+				if (ra.has(i.name)) continue;
+				await n(I(e, i.name));
+			} else na(i.name) && t.push(I(e, i.name));
 		}
 	};
 	return await n(e), t.sort();
-}, ti = async (e) => {
-	let t = ge("sha1");
-	for (let n of await ei(e)) {
+}, aa = async (e) => {
+	let t = Oe("sha1");
+	for (let n of await ia(e)) {
 		t.update(n.slice(e.length)), t.update("\0");
 		try {
-			t.update(await N.readFile(n));
+			t.update(await V.readFile(n));
 		} catch {}
 		t.update("\0");
 	}
 	try {
-		t.update(await N.readFile(O(e, "rpcGroup.generated.ts")));
+		t.update(await V.readFile(I(e, "rpcGroup.generated.ts")));
 	} catch {}
 	return t.digest("hex");
-}, ni = async (e) => {
+}, oa = async (e) => {
 	if (e.length === 0) return;
 	let t = [];
-	for (let n of [...e].sort()) t.push(await ti(n));
-	return ge("sha1").update(t.join("\0")).digest("hex");
-}, ri = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", ii = ["middleware.ts", "middleware.tsx"], ai = (e) => {
+	for (let n of [...e].sort()) t.push(await aa(n));
+	return Oe("sha1").update(t.join("\0")).digest("hex");
+}, sa = (e) => typeof e == "object" && !!e && e._tag === "VoltroMiddleware" && typeof e.run == "function", ca = ["middleware.ts", "middleware.tsx"], la = (e) => {
 	let t = e.replace(/\/+$/, "");
 	return t === "" ? "/" : t;
-}, X = (e, t) => {
-	let n = ai(e);
+}, Z = (e, t) => {
+	let n = la(e);
 	if (n === "/") return !0;
-	let r = ai(t);
+	let r = la(t);
 	return r === n || r.startsWith(`${n}/`);
-}, oi = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, si = (e, t) => {
+}, ua = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, da = (e, t) => {
 	if (e === void 0) return !0;
-	let n = oi(e.under), r = e.routes ?? [];
-	return n.length === 0 && r.length === 0 || r.includes(t) || n.some((e) => X(e, t)) ? !(e.except ?? []).some((e) => e === t || X(e, t)) : !1;
-}, ci = (e) => {
+	let n = ua(e.under), r = e.routes ?? [];
+	return n.length === 0 && r.length === 0 || r.includes(t) || n.some((e) => Z(e, t)) ? !(e.except ?? []).some((e) => e === t || Z(e, t)) : !1;
+}, fa = (e) => {
 	if (e?.assets !== !0) return [];
-	let t = oi(e.under);
+	let t = ua(e.under);
 	return t.length > 0 ? t : (e.routes ?? []).length > 0 ? [] : ["/"];
-}, li = (e, t) => ci(e).some((e) => X(e, t)) ? !(e?.except ?? []).some((e) => X(e, t)) : !1, ui = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? li(e.match, t.pathname) : si(e.match, t.route))?.middleware, di = (e, t) => {
+}, pa = (e, t) => fa(e).some((e) => Z(e, t)) ? !(e?.except ?? []).some((e) => Z(e, t)) : !1, ma = (e, t) => e.find(({ middleware: e }) => t.route === void 0 ? pa(e.match, t.pathname) : da(e.match, t.route))?.middleware, ha = (e, t) => {
 	let n = [];
 	for (let { exportName: r, middleware: i } of e) {
 		let e = i.match;
@@ -1813,13 +2205,13 @@ import {
 			kind: "dead-matcher",
 			message: `\`${r}\` matches routes: ['${i}'], which is not a route in this app. Route patterns are spelled as the router spells them, e.g. \`/notes/[id]\`.`
 		});
-		if (e?.assets !== !0) for (let [i, a] of [["under", oi(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => X(e, t)) || n.push({
+		if (e?.assets !== !0) for (let [i, a] of [["under", ua(e?.under)], ["except", e?.except ?? []]]) for (let e of a) t.some((t) => Z(e, t)) || n.push({
 			kind: "dead-matcher",
 			message: `\`${r}\` matches ${i}: ['${e}'], which covers no route in this app. ` + (i === "except" ? "An `except` that excludes nothing is a rule that reads as active and is not." : "Add `assets: true` if you meant a path the router does not serve.")
 		});
 	}
 	for (let r = 0; r < e.length; r += 1) for (let i = r + 1; i < e.length; i += 1) {
-		let a = e[r], o = e[i], s = t.find((e) => si(a.middleware.match, e) && si(o.middleware.match, e));
+		let a = e[r], o = e[i], s = t.find((e) => da(a.middleware.match, e) && da(o.middleware.match, e));
 		if (s !== void 0) {
 			n.push({
 				kind: "overlap",
@@ -1828,7 +2220,7 @@ import {
 			continue;
 		}
 		{
-			let e = ci(a.middleware.match), t = ci(o.middleware.match), r = e.some((e) => t.some((t) => X(e, t) || X(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => X(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => X(t, e)));
+			let e = fa(a.middleware.match), t = fa(o.middleware.match), r = e.some((e) => t.some((t) => Z(e, t) || Z(t, e))), i = (a.middleware.match?.except ?? []).some((e) => t.length > 0 && t.every((t) => Z(e, t))) || (o.middleware.match?.except ?? []).some((t) => e.length > 0 && e.every((e) => Z(t, e)));
 			r && !i && n.push({
 				kind: "overlap",
 				message: `\`${a.exportName}\` and \`${o.exportName}\` both declare \`assets: true\` over overlapping paths. A non-page request would match both, and there is no route to tell them apart.`
@@ -1836,10 +2228,10 @@ import {
 		}
 	}
 	return n;
-}, fi = (e, t) => {
-	let r = di(e, t);
+}, ga = (e, t) => {
+	let r = ha(e, t);
 	if (r.length !== 0) throw n(`middleware.ts: ${r.length} problem(s)\n\n` + r.map((e) => `  • ${e.message}`).join("\n\n"));
-}, pi = (e) => {
+}, _a = (e) => {
 	let t = {};
 	if (!e) return t;
 	for (let n of e.split(";")) {
@@ -1853,20 +2245,20 @@ import {
 		}
 	}
 	return t;
-}, mi = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), hi = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, gi = (e) => e.httpOnly === void 0 && hi.test(e.name), _i = (e) => {
+}, va = (e) => Object.entries(e).map(([e, t]) => `${e}=${encodeURIComponent(t)}`).join("; "), ya = /(^|[-_.])(auth[-_.]?token|session|access[-_.]?token)([-_.]|$)|^sb-.*-auth-token$/i, ba = (e) => e.httpOnly === void 0 && ya.test(e.name), xa = (e) => {
 	let t = [`${e.name}=${encodeURIComponent(e.value)}`];
 	return t.push(`Path=${e.path ?? "/"}`), e.maxAge !== void 0 && t.push(`Max-Age=${Math.trunc(e.maxAge)}`), e.httpOnly !== !1 && t.push("HttpOnly"), e.secure === !0 && t.push("Secure"), t.push(`SameSite=${e.sameSite ?? "lax"}`), t.join("; ");
-}, vi = (e) => e.length === 0 ? {} : { "set-cookie": e.map(_i) }, yi = async (e, t = (e) => import(I(e).href)) => {
-	for (let r of ii) {
+}, Sa = (e) => e.length === 0 ? {} : { "set-cookie": e.map(xa) }, Ca = async (e, t = (e) => import(G(e).href)) => {
+	for (let r of ca) {
 		let i;
 		try {
-			i = await t(O(e, r));
+			i = await t(I(e, r));
 		} catch (e) {
 			let t = e?.code;
 			if (t === "ERR_MODULE_NOT_FOUND" || t === "MODULE_NOT_FOUND") continue;
 			throw e;
 		}
-		let a = Object.entries(i ?? {}), o = a.filter((e) => ri(e[1])).map(([e, t]) => ({
+		let a = Object.entries(i ?? {}), o = a.filter((e) => sa(e[1])).map(([e, t]) => ({
 			exportName: e,
 			middleware: t
 		}));
@@ -1884,7 +2276,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		return o;
 	}
 	return [];
-}, bi = async (e, t, n) => {
+}, wa = async (e, t, n) => {
 	let r = {
 		headers: t.headers,
 		cookies: t.cookies,
@@ -1895,7 +2287,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	let i = await e.run(t);
 	if (!i) return r;
 	let a = i.setCookies ?? [];
-	if (n !== void 0) for (let e of a) gi(e) && n(e);
+	if (n !== void 0) for (let e of a) ba(e) && n(e);
 	let o = i.headers ? {
 		...t.headers,
 		...i.headers
@@ -1909,25 +2301,25 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	};
 	let l = { ...t.cookies };
 	for (let e of a) e.maxAge !== void 0 && e.maxAge <= 0 ? delete l[e.name] : l[e.name] = e.value;
-	return i.headers?.cookie === void 0 && (o.cookie = mi(l)), {
+	return i.headers?.cookie === void 0 && (o.cookie = va(l)), {
 		headers: o,
 		cookies: l,
 		setCookies: a,
 		responseHeaders: s,
 		...c
 	};
-}, xi = /* @__PURE__ */ new Set(["voltro:locale"]), Si = /* @__PURE__ */ new Set(["authorization", "cookie"]), Ci = (e) => {
+}, Ta = /* @__PURE__ */ new Set(["voltro:locale"]), Ea = /* @__PURE__ */ new Set(["authorization", "cookie"]), Da = (e) => {
 	let t = e.split(";").map((e) => e.trim()).filter((e) => {
 		let t = e.indexOf("="), n = (t === -1 ? e : e.slice(0, t)).trim();
-		return xi.has(n);
+		return Ta.has(n);
 	});
 	return t.length > 0 ? t.join("; ") : void 0;
-}, wi = (e) => {
+}, Oa = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) if (!n.startsWith("x-voltro-")) {
-		if (Si.has(n)) {
+		if (Ea.has(n)) {
 			if (n === "cookie") {
-				let e = Ci(r);
+				let e = Da(r);
 				e !== void 0 && (t.cookie = e);
 			}
 			continue;
@@ -1935,27 +2327,78 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		t[n] = r;
 	}
 	return t;
-}, Ti = (e) => {
+}, ka = (e) => {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) xi.has(n) && (t[n] = r);
+	for (let [n, r] of Object.entries(e)) Ta.has(n) && (t[n] = r);
 	return t;
-}, Z = R({ scope: "voltro:dev:web" }), Ei = R({ scope: "vite" }), Di = await (async () => {
+}, Aa = ["cookie", "authorization"], ja = (e) => Aa.includes(e) || e.startsWith("x-voltro-"), Ma = ["voltro:locale"], Na = class extends Error {
+	constructor(e, t, n) {
+		super(`[voltro] ppr page '${n}': the SHELL render read the ${e} '${t}'. A ppr shell is CACHED and served to every visitor, so it must be computed without credentials — there is no way to prove request-independence by inspection, so the read itself is the error. Move this read into a deferred hole (the second argument of defer(), which runs per request with the full context), or drop ppr and use renderMode 'ssr'.`), this.name = "PprShellCredentialAccessError";
+	}
+}, Pa = (e, t) => new Proxy({ ...e }, { get(e, n, r) {
+	if (typeof n == "string" && ja(n)) throw new Na("header", n, t);
+	return Reflect.get(e, n, r);
+} }), Fa = (e, t) => new Proxy({ ...e }, { get(e, n, r) {
+	if (typeof n == "string" && !Ma.includes(n) && !(n in Object.prototype)) throw new Na("cookie", n, t);
+	return Reflect.get(e, n, r);
+} }), Ia = Symbol.for("@voltro/cli/ppr:metrics"), La = () => {
+	let e = globalThis;
+	return e[Ia] ??= {
+		shellServes: 0,
+		holePasses: 0,
+		holeSettles: 0,
+		holeErrors: 0,
+		holeLatencyMsLast: 0,
+		holeLatencyMsMax: 0
+	};
+}, Ra = async (e) => {
+	let t = La();
+	t.holePasses += 1;
+	let n = Date.now(), r = () => e.res.destroyed === !0 || e.res.writableEnded === !0;
+	try {
+		let n = await e.loader(e.ctx), i = e.helpers.prepareDeferredLoaderData(n, "page"), a = i.deferredIds;
+		if (a === void 0) {
+			r() || e.res.end();
+			return;
+		}
+		let o = i.renderData;
+		await Promise.all(Object.entries(a).map(async ([n, i]) => {
+			let a = await o[n];
+			t.holeSettles += 1, !r() && e.res.write(`<script>${e.helpers.deferredSettleScript(i, a)}<\/script>`);
+		}));
+	} catch (n) {
+		t.holeErrors += 1, e.log.warn("ppr hole pass failed — holes stay on their fallbacks", { page: e.page }, n);
+	} finally {
+		let i = Date.now() - n;
+		t.holeLatencyMsLast = i, i > t.holeLatencyMsMax && (t.holeLatencyMsMax = i), r() || e.res.end();
+	}
+}, za = (e, t) => {
+	if (e.deferredSegmentIds !== void 0) throw Error(`[voltro] ppr page '${t}': a LAYOUT loader in its chain uses defer(). ppr appends holes for the PAGE loader only — move the deferred field into the page loader, or return the value directly from the layout.`);
+}, Q = K({ scope: "voltro:dev:web" }), Ba = K({ scope: "vite" }), Va = await (async () => {
 	try {
-		let e = O(D(re(import.meta.url)), "..", "package.json"), t = await N.readFile(e, "utf8");
+		let e = I(F(W(import.meta.url)), "..", "package.json"), t = await V.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
 	}
-})(), Oi = async () => {
+})(), Ha = (e, t) => {
+	let n;
+	for (let r of e) {
+		if (!r.hasNotFound) continue;
+		let e = "/" + r.dir.split("/").filter((e) => e !== "" && !/^\(.*\)$/.test(e)).join("/"), i = e === "/" ? "/" : e;
+		i !== "/" && !(t === i || t.startsWith(i + "/")) || (n === void 0 || r.dir.length > n.dir.length) && (n = r);
+	}
+	return n;
+}, Ua = async () => {
 	try {
-		let e = D(re(import.meta.url)), t = A(e, "..", "..", "devtools");
-		if (M(O(t, "package.json"))) return t;
-		let n = A(e, "..", "..", "..", "devtools");
-		return M(O(n, "package.json")) ? n : null;
+		let e = F(W(import.meta.url)), t = R(e, "..", "..", "devtools");
+		if (B(I(t, "package.json"))) return t;
+		let n = R(e, "..", "..", "..", "devtools");
+		return B(I(n, "package.json")) ? n : null;
 	} catch {
 		return null;
 	}
-}, ki = (e, t) => e.disableDevtools || !t ? [] : [
+}, Wa = (e, t) => e.disableDevtools || !t ? [] : [
 	"",
 	"// Dev-only in-page devtools overlay. The `import.meta.env.DEV` guard is a",
 	"// compile-time constant, so prod builds strip this whole `if` block — the",
@@ -1965,85 +2408,85 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"  await import('@voltro/devtools/styles.css')",
 	"  Devtools = (await import('@voltro/devtools')).VoltroDevtools",
 	"}"
-], Ai = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], ji = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], Mi = (e) => e.sentry ? [
+], Ga = (e, t) => e.disableDevtools || !t ? [] : ["  ...(Devtools ? { Devtools } : {}),"], Ka = (e) => e.sentry ? ["import { initSentryBrowser } from '@voltro/plugin-sentry/web'"] : [], qa = (e) => e.sentry ? [
 	"",
 	"// Browser-side Sentry (frontend half of the deep integration). Errors +",
 	"// browser rpc spans flow to Sentry, sharing the server transactions' trace.",
 	`await initSentryBrowser(${JSON.stringify(e.sentry)})`
-] : [], Ni = (e) => e.env ? ["import './env.public'"] : [], Pi = (e) => {
-	let t = [], n = A(e);
+] : [], Ja = (e) => e.env ? ["import './env.public'"] : [], Ya = (e) => {
+	let t = [], n = R(e);
 	for (;;) {
-		M(O(n, "pnpm-workspace.yaml")) && t.push(n);
-		let e = D(n);
+		B(I(n, "pnpm-workspace.yaml")) && t.push(n);
+		let e = F(n);
 		if (e === n) break;
 		n = e;
 	}
 	return t;
-}, Fi = b, Ii = (e) => {
+}, Xa = P, Za = (e) => {
 	if (/\/node_modules\/(?:\.pnpm\/[^/]+\/node_modules\/)?(?:react|react-dom|scheduler)\//.test(e)) return "react";
-}, Li = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, Ri = (e) => e.startsWith("(") && e.endsWith(")"), zi = (e) => e.filter((e) => !Ri(e)), Bi = (e) => {
-	let t = e.replace(c, "").split("/").filter(Boolean).filter((e) => !Ri(e));
+}, Qa = /export\s+(?:async\s+)?(?:const|function|let|var)\s+loader\b/, $a = (e) => e.startsWith("(") && e.endsWith(")"), eo = (e) => e.filter((e) => !$a(e)), to = (e) => {
+	let t = e.replace(o, "").split("/").filter(Boolean).filter((e) => !$a(e));
 	return t.length === 0 ? "/" : "/" + t.join("/");
-}, Vi = (e) => `${e.replace(c, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, Q = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, $ = async (e) => {
+}, no = (e) => `${e.replace(o, "").split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Index"}Page`, $ = (e, t) => e === "" ? `Root${t}` : `${e.split("/").filter(Boolean).map((e) => e.replace(/[()]/g, "").replace(/\[\.\.\./g, "_rest_").replace(/[[\]]/g, "_")).map((e) => e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_") || "Root"}${t}`, ro = async (e) => {
 	let t = [], n = [], r = async (e, i) => {
-		let a = [];
+		let s = [];
 		try {
-			a = await N.readdir(e, { withFileTypes: !0 });
+			s = await V.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
-		let o = a.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = a.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Fi(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
-		if (l.some((e) => s.has(e))) {
+		let c = s.filter((e) => e.isDirectory()).map((e) => e.name).sort(), l = s.filter((e) => e.isFile() && e.name.endsWith(".tsx") && !Xa(e.name)).map((e) => e.name).sort(), u = new Set(l), d = i.join("/");
+		if (l.some((e) => a.has(e))) {
 			let t = u.has("layout.tsx"), r = !1;
 			if (t) try {
-				let t = await N.readFile(O(e, "layout.tsx"), "utf8");
-				r = Li.test(t);
+				let t = await V.readFile(I(e, "layout.tsx"), "utf8");
+				r = Qa.test(t);
 			} catch {}
 			n.push({
 				dir: d,
 				chain: i,
-				contributesToUrl: i.length === 0 || !Ri(i[i.length - 1]),
+				contributesToUrl: i.length === 0 || !$a(i[i.length - 1]),
 				hasLayout: t,
 				hasLayoutLoader: r,
 				hasError: u.has("error.tsx"),
 				hasPending: u.has("loading.tsx"),
 				hasNotFound: u.has("not-found.tsx"),
-				specialFiles: l.filter((e) => s.has(e))
+				specialFiles: l.filter((e) => a.has(e))
 			});
 		}
 		for (let e of l) {
-			if (!c.test(e)) continue;
+			if (!o.test(e)) continue;
 			let n = d ? `${d}/${e}` : e;
 			t.push({
 				file: n,
-				pattern: Bi(n),
-				ident: Vi(n),
+				pattern: to(n),
+				ident: no(n),
 				dirChain: i
 			});
 		}
-		for (let t of o) await r(O(e, t), [...i, t]);
+		for (let t of c) await r(I(e, t), [...i, t]);
 	};
 	await r(e, []), t.sort((e, t) => e.file < t.file ? -1 : 1);
 	let i = /* @__PURE__ */ new Set();
 	for (let e of t) for (let t = e.dirChain.length; t >= 0; t--) i.add(e.dirChain.slice(0, t).join("/"));
-	let a = [], o = [];
-	for (let { specialFiles: e, ...t } of n) i.has(t.dir) ? a.push(t) : o.push({
+	let s = [], c = [];
+	for (let { specialFiles: e, ...t } of n) i.has(t.dir) ? s.push(t) : c.push({
 		dir: t.dir,
 		files: e
 	});
 	return {
 		pages: t,
-		dirs: a,
-		orphanedSpecials: o
+		dirs: s,
+		orphanedSpecials: c
 	};
-}, Hi = (e, t) => {
+}, io = (e, t) => {
 	let n = [];
 	for (let r = 0; r <= t.length; r++) {
 		let i = t.slice(0, r).join("/"), a = e.find((e) => e.dir === i);
 		a && n.push(a);
 	}
 	return n;
-}, Ui = async (e) => {
+}, ao = async (e) => {
 	let { entries: t, loadLayout: n, loadError: r, loadPending: i, ctx: a } = e, o = {};
 	return {
 		chain: await Promise.all(t.map(async (e, t) => {
@@ -2067,10 +2510,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		})),
 		segmentLoaderData: o
 	};
-}, Wi = (e) => {
-	let t = zi(e);
+}, oo = (e) => {
+	let t = eo(e);
 	return t.length === 0 ? "" : "/" + t.join("/");
-}, Gi = [
+}, so = [
 	"// Hot-reload bridge: keep SSR-injected <link rel=\"stylesheet\"> tags",
 	"// in sync with Vite's CSS HMR. Without this, edits to .css files",
 	"// only update the JS-injected <style> overlay; the underlying <link>",
@@ -2163,7 +2606,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	"    _vdtErrorStart('Build error')",
 	"  })",
 	"}"
-].join("\n"), Ki = (e) => {
+].join("\n"), co = (e) => {
 	let t = [], n = 0, r = e.split("/").filter(Boolean), i = [];
 	for (let e of r) e.startsWith("[[...") && e.endsWith("]]") ? (i.push("(.*)"), t.push(e.slice(5, -2)), n += 2) : e.startsWith("[...") && e.endsWith("]") ? (i.push("(.+)"), t.push(e.slice(4, -1)), n += 3) : e.startsWith("[") && e.endsWith("]") ? (i.push("([^/]+)"), t.push(e.slice(1, -1)), n += 1) : i.push(e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
 	let a = i.join("/");
@@ -2172,8 +2615,8 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: t,
 		priority: n
 	};
-}, qi = (e) => e.map((e) => {
-	let { regex: t, paramNames: n, priority: r } = Ki(e.pattern);
+}, lo = (e) => e.map((e) => {
+	let { regex: t, paramNames: n, priority: r } = co(e.pattern);
 	return {
 		pattern: e.pattern,
 		file: e.file,
@@ -2182,7 +2625,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		paramNames: n,
 		priority: r
 	};
-}).slice().sort((e, t) => e.priority - t.priority), Ji = (e, t) => {
+}).slice().sort((e, t) => e.priority - t.priority), uo = (e, t) => {
 	for (let n of t) {
 		let t = n.regex.exec(e);
 		if (!t) continue;
@@ -2194,9 +2637,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		};
 	}
 	return null;
-}, Yi = Le, Xi = async (e) => {
+}, fo = st, po = async (e) => {
 	try {
-		let t = await import(I(O(e, "app.config.ts")).href), n = t.default?.port, i = r({
+		let t = await import(G(I(e, "app.config.ts")).href), n = t.default?.port, i = r({
 			kind: "api",
 			configPort: typeof n == "number" ? n : void 0,
 			env: {}
@@ -2210,7 +2653,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "api",
 		env: {}
 	}).port };
-}, Zi = (e, t) => ({
+}, mo = (e, t) => ({
 	name: e,
 	pkg: t.package,
 	browserWsUrl: t.url,
@@ -2218,7 +2661,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	...t.serverUrl ? { serverOrigin: t.serverUrl } : {},
 	...t.headers ? { headers: t.headers } : {},
 	...t.authHeaders ? { hasAuthHeaders: !0 } : {}
-}), Qi = (e, t, n) => {
+}), ho = (e, t, n) => {
 	let r = t.transport?.wsPath ?? n.wsPath;
 	return {
 		name: e,
@@ -2230,7 +2673,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		...t.headers ? { headers: t.headers } : {},
 		...t.authHeaders ? { hasAuthHeaders: !0 } : {}
 	};
-}, $i = (e) => {
+}, go = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (n.proxyTarget === void 0) continue;
@@ -2238,43 +2681,43 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		if (e) throw Error(`[voltro] api ${JSON.stringify(n.name)} and ${JSON.stringify(e)} both resolve the same-origin WS path ${JSON.stringify(n.browserWsUrl)}. A custom transport.wsPath must be unique per origin (one api per origin may use a fixed path). Give each a distinct wsPath, or drop the override to use the default /ws/<name>.`);
 		t.set(n.browserWsUrl, n.name);
 	}
-}, ea = async (e, t) => {
+}, _o = async (e, t) => {
 	let n = Object.entries(t.apis ?? {}), r = [];
 	for (let [t, i] of n) {
 		if (i.url) {
-			r.push(Zi(t, i));
+			r.push(mo(t, i));
 			continue;
 		}
-		let n = await Yi(e, i.package);
+		let n = await fo(e, i.package);
 		if (!n) throw Error(`[voltro dev] api ${JSON.stringify(t)} (package ${JSON.stringify(i.package)}) is not a workspace dep and has no \`url\` set in app.config.ts. External apis need an explicit \`url\` because the framework can't discover their dev port.`);
-		r.push(Qi(t, i, await Xi(n)));
+		r.push(ho(t, i, await po(n)));
 	}
-	return $i(r), r;
-}, ta = (e) => {
+	return go(r), r;
+}, vo = (e) => {
 	if (!(!/^wss?:\/\//.test(e) && !/^https?:\/\//.test(e))) try {
 		let t = new URL(e);
 		return t.protocol = t.protocol === "wss:" || t.protocol === "https:" ? "https:" : "http:", `${t.protocol}//${t.host}`;
 	} catch {
 		return;
 	}
-}, na = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, ra = (e) => process.env[na(e)] ?? process.env.VOLTRO_API_ORIGIN, ia = (e, t) => {
+}, yo = (e) => `VOLTRO_API_ORIGIN_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, bo = (e) => process.env[yo(e)] ?? process.env.VOLTRO_API_ORIGIN, xo = (e, t) => {
 	if (!e) return;
-	let n = ra(e.name) ?? e.serverOrigin;
+	let n = bo(e.name) ?? e.serverOrigin;
 	if (n) {
-		let e = ta(n);
+		let e = vo(n);
 		if (e) return e;
 	}
 	if (t?.allowDevProxy && e.proxyTarget) {
-		let t = ta(e.proxyTarget);
+		let t = vo(e.proxyTarget);
 		if (t) return t;
 	}
-	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return ta(e.browserWsUrl);
-}, aa = (e, t, n) => {
+	if (!e.proxyTarget && /^wss?:\/\//.test(e.browserWsUrl)) return vo(e.browserWsUrl);
+}, So = (e, t, n) => {
 	if (!e) {
 		if (n?.apiName === void 0) return;
 		let e = n.apiName;
 		return async () => {
-			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${na(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
+			throw Error(`[loader.query] api '${e}' has no server-side origin for SSR. In a split web/api deployment the web pod reaches the api by internal DNS, not the browser's relative wsPath — set ${yo(e)} (or VOLTRO_API_ORIGIN, or apis.${e}.serverUrl in app.config.ts) to the api's internal origin, e.g. http://api.<namespace>.svc.cluster.local. The browser transport is unaffected.`);
 		};
 	}
 	return async (r, i) => {
@@ -2297,7 +2740,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			});
 		} catch (t) {
 			let i = t?.cause?.code ?? String(t?.message ?? t);
-			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${na(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
+			throw Error(`[loader.query] ${r}: could not reach the api at ${e}/rpc (${i}). ${n?.apiName ? `Set ${yo(n.apiName)} / VOLTRO_API_ORIGIN` : "Set the api server origin"} to the api's SSR-reachable origin (internal cluster DNS in a split deployment).`, { cause: t });
 		}
 		if (!o.ok) throw Error(`[loader.query] ${r}: HTTP ${o.status} ${await o.text()}`);
 		let s = await o.json();
@@ -2327,7 +2770,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		}
 		if (u) return l;
 	};
-}, oa = (e, t) => {
+}, Co = (e, t) => {
 	let n = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppGroup`, r = (e) => `${e.replace(/[^a-zA-Z0-9]/g, "_")}AppDescriptors`, i = e.map((e) => `import { appGroup as ${n(e.name)}, appDescriptors as ${r(e.name)} } from '${e.pkg}/rpcGroup'`);
 	e.some((e) => e.hasAuthHeaders) && (i.push(`import __voltroAppConfig from '${t}'`), i.push("const __voltroAuthHeaders = (__voltroAppConfig as { readonly apis?: Record<string, { readonly authHeaders?: () => Record<string, string> | Promise<Record<string, string>> }> }).apis"));
 	let a = (e) => {
@@ -2339,8 +2782,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		entryLines: e.map((e) => `    ${JSON.stringify(e.name)}: { ${a(e).join(", ")} },`),
 		providerEntryLines: e.map((e) => `    { name: ${JSON.stringify(e.name)}, ${a(e).join(", ")} },`)
 	};
-}, sa = async (e, t, n, r = {}) => {
-	let i = t.title ?? t.name ?? "app", a = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", o = M(O(e, "node_modules", "@voltro", "devtools", "package.json")) || await Oi() !== null, s = t.theme === "system" ? [
+}, wo = async (e, t, n, r = {}) => {
+	let i = t.title ?? t.name ?? "app";
+	An(e);
+	let a = await En(e, t.fonts), o = a === null ? [] : [...a.preloads.map((e) => `    <link rel="preload" as="font" type="font/${e.endsWith(".woff2") ? "woff2" : e.endsWith(".woff") ? "woff" : e.endsWith(".otf") ? "otf" : "ttf"}" href="${e}" crossorigin />`), `    <style data-voltro-fonts>${a.css}</style>`], s = t.theme === "dark" ? " class=\"dark\"" : t.theme === "light" ? " class=\"light\"" : "", c = B(I(e, "node_modules", "@voltro", "devtools", "package.json")) || await Ua() !== null, l = t.theme === "system" ? [
 		"    <script>",
 		"      (function () {",
 		"        var root = document.documentElement",
@@ -2361,7 +2806,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"        }",
 		"      })()",
 		"    <\/script>"
-	].join("\n") : "", c = t.timeZone === "viewer" ? [
+	].join("\n") : "", u = t.timeZone === "viewer" ? [
 		"    <script>",
 		"      (function () {",
 		"        try {",
@@ -2373,17 +2818,18 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"        } catch (e) {}",
 		"      })()",
 		"    <\/script>"
-	].join("\n") : "", l = [
+	].join("\n") : "", d = [
 		"<!doctype html>",
 		"<!-- GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot. -->",
-		`<html lang="en"${a}>`,
+		`<html lang="en"${s}>`,
 		"  <head>",
 		"    <meta charset=\"UTF-8\" />",
 		"    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />",
 		`    <title>${i}</title>`,
 		"    <link rel=\"icon\" type=\"image/svg+xml\" href=\"/favicon.svg\" />",
-		...s ? [s] : [],
-		...c ? [c] : [],
+		...o,
+		...l ? [l] : [],
+		...u ? [u] : [],
 		"  </head>",
 		"  <body>",
 		"    <div id=\"root\"></div>",
@@ -2391,70 +2837,70 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		"  </body>",
 		"</html>",
 		""
-	].join("\n"), u = O(e, "src", "pages"), { pages: d, dirs: f, orphanedSpecials: p } = await $(u);
-	await y(u, d);
-	for (let e of p) Z.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
-	let { imports: m, entryLines: h } = oa(n, "../app.config"), g, _, v;
-	if (d.length > 0) {
-		let n = d.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
-		for (let e of f) {
+	].join("\n"), f = I(e, "src", "pages"), { pages: p, dirs: m, orphanedSpecials: h } = await ro(f);
+	await b(f, p);
+	for (let e of h) Q.warn(`src/pages/${e.dir || "."}/ contains ${e.files.join(", ")} but no page.tsx at or below it — ${e.files.length > 1 ? "those files are" : "that file is"} inert. A layout/error/loading/not-found file only applies to routes in its own directory tree; if this is an ordinary component, rename it so it does not read as a route boundary.`);
+	let { imports: g, entryLines: _ } = Co(n, "../app.config"), v, y, x;
+	if (p.length > 0) {
+		let n = p.map((e) => `  ${JSON.stringify(e.pattern)}: () => import('../src/pages/${e.file}'),`), r = [];
+		for (let e of m) {
 			let t = e.dir === "" ? "../src/pages" : `../src/pages/${e.dir}`;
-			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${Q(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${Q(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${Q(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${Q(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${Q(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
+			e.hasLayout && e.hasLayoutLoader ? r.push(`import * as ${$(e.dir, "Layout")}Mod from '${t}/layout.tsx'`) : e.hasLayout && r.push(`import ${$(e.dir, "Layout")}   from '${t}/layout.tsx'`), e.hasError && r.push(`import ${$(e.dir, "Error")}    from '${t}/error.tsx'`), e.hasPending && r.push(`import ${$(e.dir, "Pending")}  from '${t}/loading.tsx'`), e.hasNotFound && r.push(`import ${$(e.dir, "NotFound")} from '${t}/not-found.tsx'`);
 		}
-		let i = d.map((e) => {
-			let t = Hi(f, e.dirChain).map((e) => {
+		let i = p.map((e) => {
+			let t = io(m, e.dirChain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout:  refs.layouts[${n}]`), e.hasLayoutLoader && t.push(`loader:  refs.layoutLoaders[${n}]`), e.hasError && t.push(`Error:   refs.errors[${n}]`), e.hasPending && t.push(`Pending: refs.pendings[${n}]`), `      { ${t.join(", ")} }`;
 			}).join(",\n");
 			return `    makePageRoute(${JSON.stringify(e.pattern)}, ${t.length > 0 ? `[\n${t},\n    ]` : "undefined"}),`;
-		}), a = f.filter((e) => e.hasNotFound).map((e) => {
-			let t = Wi(e.chain), n = Hi(f, e.chain).map((e) => {
+		}), a = m.filter((e) => e.hasNotFound).map((e) => {
+			let t = oo(e.chain), n = io(m, e.chain).map((e) => {
 				let t = [`id: ${JSON.stringify(e.dir || "/")}`], n = JSON.stringify(e.dir);
 				return e.hasLayout && t.push(`Layout: refs.layouts[${n}]`), e.hasError && t.push(`Error:  refs.errors[${n}]`), `        { ${t.join(", ")} }`;
 			}).join(",\n"), r = n.length > 0 ? `\n      chain: [\n${n},\n      ],` : "";
 			return `    {\n      prefix: ${JSON.stringify(t)},\n      Component: refs.notFounds[${JSON.stringify(e.dir)}],${r}\n    },`;
-		}), s = [], c = [], l = [], u = [], p = [], y = [];
-		for (let e of f) {
+		}), o = [], s = [], l = [], u = [], d = [], f = [];
+		for (let e of m) {
 			let t = e.dir === "" ? "../src/pages/layout.tsx" : `../src/pages/${e.dir}/layout.tsx`, n = e.dir === "" ? "../src/pages/error.tsx" : `../src/pages/${e.dir}/error.tsx`, r = e.dir === "" ? "../src/pages/loading.tsx" : `../src/pages/${e.dir}/loading.tsx`, i = e.dir === "" ? "../src/pages/not-found.tsx" : `../src/pages/${e.dir}/not-found.tsx`, a = JSON.stringify(e.dir);
-			e.hasLayout && e.hasLayoutLoader ? (c.push(`  ${a}: ${Q(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${Q(e.dir, "Layout")}Mod.loader,`), s.push({
+			e.hasLayout && e.hasLayoutLoader ? (s.push(`  ${a}: ${$(e.dir, "Layout")}Mod.default,`), l.push(`  ${a}: ${$(e.dir, "Layout")}Mod.loader,`), o.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})) : e.hasLayout && (c.push(`  ${a}: ${Q(e.dir, "Layout")},`), s.push({
+			})) : e.hasLayout && (s.push(`  ${a}: ${$(e.dir, "Layout")},`), o.push({
 				relPath: t,
 				kind: "layout",
 				slotKey: e.dir
-			})), e.hasError && (u.push(`  ${a}: ${Q(e.dir, "Error")},`), s.push({
+			})), e.hasError && (u.push(`  ${a}: ${$(e.dir, "Error")},`), o.push({
 				relPath: n,
 				kind: "error",
 				slotKey: e.dir
-			})), e.hasPending && (p.push(`  ${a}: ${Q(e.dir, "Pending")},`), s.push({
+			})), e.hasPending && (d.push(`  ${a}: ${$(e.dir, "Pending")},`), o.push({
 				relPath: r,
 				kind: "pending",
 				slotKey: e.dir
-			})), e.hasNotFound && (y.push(`  ${a}: ${Q(e.dir, "NotFound")},`), s.push({
+			})), e.hasNotFound && (f.push(`  ${a}: ${$(e.dir, "NotFound")},`), o.push({
 				relPath: i,
 				kind: "notFound",
 				slotKey: e.dir
 			}));
 		}
-		for (let e of d) s.push({
+		for (let e of p) o.push({
 			relPath: `../src/pages/${e.file}`,
 			kind: "page",
 			slotKey: e.pattern
 		});
-		let b = s.map((e) => `      ${JSON.stringify(e.relPath)},`), x = s.map((e, t) => {
+		let h = o.map((e) => `      ${JSON.stringify(e.relPath)},`), b = o.map((e, t) => {
 			let n = JSON.stringify(e.slotKey);
 			return e.kind === "page" ? `      if (newMods[${t}] && refs.pages[${n}] !== undefined) { refs.pages[${n}] = newMods[${t}]; changed = true }` : `      if (newMods[${t}]?.default) { refs.${e.kind === "layout" ? "layouts" : e.kind === "error" ? "errors" : e.kind === "pending" ? "pendings" : "notFounds"}[${n}] = newMods[${t}].default;${e.kind === "layout" ? ` refs.layoutLoaders[${n}] = newMods[${t}].loader;` : ""} changed = true }`;
-		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => M(O(e, "src", "locales", `${t}.ts`)) || M(O(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en", E = t.router?.viewTransitions === !0 ? " viewTransitions" : "";
-		if (S.length > 0 && !C && Z.info(`i18n: locales [${S.join(", ")}] declared with no src/locales/<code>.ts — using them for <html lang> and the resolved locale only. Add the catalogs to get <I18nProvider> wired, or keep your own i18n stack.`), S.length > 0 && !S.includes(T)) throw Error(`[voltro dev] app.config.ts: defaultLocale '${T}' must be one of locales [${S.join(", ")}]`);
+		}), S = t.locales ?? [], C = S.length > 0 && S.every((t) => B(I(e, "src", "locales", `${t}.ts`)) || B(I(e, "src", "locales", `${t}.tsx`))), w = C, T = t.defaultLocale ?? S[0] ?? "en", E = t.router?.viewTransitions === !0 ? " viewTransitions" : "";
+		if (S.length > 0 && !C && Q.info(`i18n: locales [${S.join(", ")}] declared with no src/locales/<code>.ts — using them for <html lang> and the resolved locale only. Add the catalogs to get <I18nProvider> wired, or keep your own i18n stack.`), S.length > 0 && !S.includes(T)) throw Error(`[voltro dev] app.config.ts: defaultLocale '${T}' must be one of locales [${S.join(", ")}]`);
 		let D = w ? [
 			"import { I18nProvider } from '@voltro/i18n'",
 			"import { resolveLocale } from '@voltro/i18n/server'",
 			"import { useServerRequest } from '@voltro/web'",
 			...S.map((e) => `import i18nCatalog_${e} from '../src/locales/${e}'`)
 		] : [];
-		_ = [
+		y = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// Routes + per-page chain + not-found scopes assembled from src/pages/.",
 			"//",
@@ -2488,7 +2934,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"  pages:         Record<string, unknown>",
 			"} = {",
 			"  layouts: {",
-			...c,
+			...s,
 			"  },",
 			"  layoutLoaders: {",
 			...l,
@@ -2497,10 +2943,10 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			...u,
 			"  },",
 			"  pendings: {",
-			...p,
+			...d,
 			"  },",
 			"  notFounds: {",
-			...y,
+			...f,
 			"  },",
 			"  pages: {},",
 			"}",
@@ -2565,17 +3011,17 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"if (import.meta.hot) {",
 			"  import.meta.hot.accept(",
 			"    [",
-			...b,
+			...h,
 			"    ],",
 			"    (newMods: Array<Record<string, unknown> | undefined>) => {",
 			"      let changed = false",
-			...x,
+			...b,
 			"      if (changed) bump()",
 			"    },",
 			"  )",
 			"}",
 			""
-		].join("\n"), g = [
+		].join("\n"), v = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// The app's root component. It exports `App` and NOTHING ELSE: react-refresh",
 			"// only accepts a module whose every export is a component, and a module it",
@@ -2690,20 +3136,20 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			] : [`  return <Router routes={routes} notFounds={notFounds}${E} />`],
 			"}",
 			""
-		].join("\n"), v = [
+		].join("\n"), x = [
 			"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 			"// Entry: imports the generated App component and calls mount() with the",
 			"// resolved apis map. Side-effect only — no local component definitions —",
 			"// so downstream invalidations (user page edits) terminate at app.tsx.",
 			"",
-			...Ni(t),
+			...Ja(t),
 			"import { mount } from '@voltro/web'",
-			...m,
+			...g,
 			"import { App } from './app'",
 			"import { preloadCurrentRoute } from './routeTable'",
-			...ji(t),
-			...ki(t, o),
-			...Mi(t),
+			...Ka(t),
+			...Wa(t, c),
+			...qa(t),
 			"",
 			"// Preload the current route's page chunk BEFORE hydration so the first",
 			"// client render matches the SSG/SSR-prerendered HTML. Without it, a lazy",
@@ -2718,83 +3164,93 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			"",
 			"mount(App, {",
 			"  apis: {",
-			...h,
+			..._,
 			"  },",
-			...Ai(t, o),
+			...Ga(t, c),
 			"})",
 			"",
-			Gi
+			so
 		].join("\n");
-	} else g = "", _ = "", v = [
+	} else v = "", y = "", x = [
 		"// GENERATED BY `voltro dev` — do not edit; will be overwritten on next boot.",
 		"// The user's root component lives at ../src/App.tsx; this file imports it",
 		"// and calls mount(). Side-effect only, no component definitions, so the",
 		"// user's component file remains the Fast Refresh boundary.",
 		"",
-		...Ni(t),
+		...Ja(t),
 		"import { mount } from '@voltro/web'",
-		...m,
+		...g,
 		"import App from '../src/App'",
-		...ji(t),
-		...ki(t, o),
-		...Mi(t),
+		...Ka(t),
+		...Wa(t, c),
+		...qa(t),
 		"",
 		"mount(App, {",
 		"  apis: {",
-		...h,
+		..._,
 		"  },",
-		...Ai(t, o),
+		...Ga(t, c),
 		"})",
 		"",
-		Gi
+		so
 	].join("\n");
-	let b = O(e, ".framework");
-	await N.mkdir(b, { recursive: !0 }), t.env ? await Ne(b, r) : await N.rm(O(b, "env.public.ts"), { force: !0 }), await N.writeFile(O(b, "index.html"), l, "utf8"), await N.writeFile(O(b, "main.tsx"), v, "utf8"), g ? (await N.writeFile(O(b, "app.tsx"), g, "utf8"), await N.writeFile(O(b, "routeTable.ts"), _, "utf8")) : (await N.rm(O(b, "app.tsx"), { force: !0 }), await N.rm(O(b, "routeTable.ts"), { force: !0 }));
-	let x = O(e, ".gitignore"), S = "";
+	let S = I(e, ".framework");
+	await V.mkdir(S, { recursive: !0 }), t.env ? await nt(S, r) : await V.rm(I(S, "env.public.ts"), { force: !0 }), await V.writeFile(I(S, "index.html"), d, "utf8"), await V.writeFile(I(S, "main.tsx"), x, "utf8"), v ? (await V.writeFile(I(S, "app.tsx"), v, "utf8"), await V.writeFile(I(S, "routeTable.ts"), y, "utf8")) : (await V.rm(I(S, "app.tsx"), { force: !0 }), await V.rm(I(S, "routeTable.ts"), { force: !0 }));
+	let C = I(e, ".gitignore"), w = "";
 	try {
-		S = await N.readFile(x, "utf8");
+		w = await V.readFile(C, "utf8");
 	} catch {}
-	let C = ["/.framework/"], w = new Set(S.split("\n").map((e) => e.trim())), T = C.filter((e) => !w.has(e));
-	if (T.length > 0) {
-		let e = S === "" || S.endsWith("\n") ? "" : "\n";
+	let T = ["/.framework/"], E = new Set(w.split("\n").map((e) => e.trim())), D = T.filter((e) => !E.has(e));
+	if (D.length > 0) {
+		let e = w === "" || w.endsWith("\n") ? "" : "\n";
 		try {
-			await N.appendFile(x, `${e}${T.join("\n")}\n`, "utf8");
+			await V.appendFile(C, `${e}${D.join("\n")}\n`, "utf8");
 		} catch (e) {
-			Z.warn(`could not add ${T.join(", ")} to ${x} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
+			Q.warn(`could not add ${D.join(", ")} to ${C} — add it by hand so the generated directory stays out of git. The build is unaffected.`, { reason: e?.message ?? String(e) });
 		}
 	}
-}, ca = async (e, t) => {
+}, To = async (e, t) => {
 	try {
-		let n = D(e), r = O(n, "project.json");
-		if (!M(r)) return;
-		let i = await N.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
+		let n = F(e), r = I(n, "project.json");
+		if (!B(r)) return;
+		let i = await V.readFile(r, "utf8"), a = JSON.parse(i).apps ?? {}, o = e.split("/").filter(Boolean).pop() ?? "", s = [];
 		for (let [e, n] of Object.entries(a)) e !== o && n.port === t && s.push(e);
 		if (s.length === 0) return;
-		Z.warn("sibling app(s) claim the same port — only one boots", {
+		Q.warn("sibling app(s) claim the same port — only one boots", {
 			port: t,
 			conflicts: s,
 			projectJson: r
 		});
 	} catch {}
-}, la = (e) => O(e, ".framework", "dist", "server", "appConfig.js"), ua = async (e, t = {}) => {
-	let n = la(e), r = t.preferSource !== !0 && M(n) ? n : O(e, "app.config.ts");
+}, Eo = (e) => I(e, ".framework", "dist", "server", "appConfig.js"), Do = async (e, t = {}) => {
+	let n = Eo(e), r = t.preferSource !== !0 && B(n) ? n : I(e, "app.config.ts");
 	try {
-		let e = (await import(I(r).href)).default;
+		let e = (await import(G(r).href)).default;
 		return typeof e == "object" && e && "type" in e && e.type === "web" ? e : null;
 	} catch {
 		return null;
 	}
-}, da = async (e) => {
-	let n = await ua(e, { preferSource: !0 });
+}, Oo = (e) => {
+	let t = e.restRoutes;
+	if (t !== void 0 && t.length !== 0) return `app.config.ts declares ${t.length} restRoute(s) on a type:'web' app — REST routes mount on the API process and were silently ignored here, so a health probe hitting one gets the SPA shell (200) and a POST gets 404.\n  Move them to the API app's app.config.ts (they mount under the api origin), and call them there;\n  for same-origin paths in front of the web app, terminate them at your ingress/proxy instead.`;
+}, ko = async (e) => {
+	let n = await Do(e, { preferSource: !0 });
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
-	ir();
-	let i = vn();
-	In(i), Z.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), nt(e, Z);
-	let a = await ea(e, n);
-	for (let e of a) Z.info("api wired", {
+	{
+		let e = Oo(n);
+		if (e !== void 0) return Q.error(`voltro dev (web): refusing to boot — ${e}`), {
+			ran: !0,
+			exitCode: 1
+		};
+	}
+	ci();
+	let i = Sr();
+	Br(i), Q.info("booting voltro dev (web)", { app: n.name ?? "(unnamed)" }), Dt(e, Q);
+	let a = await _o(e, n);
+	for (let e of a) Q.info("api wired", {
 		name: e.name,
 		pkg: e.pkg,
 		...e.proxyTarget ? { proxyTo: e.proxyTarget } : { directWs: e.browserWsUrl }
@@ -2802,17 +3258,17 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	g(e).then((e) => {
 		for (let t of e.files) if (t.action === "created") {
 			let e = t.path.split("/").pop() ?? t.path;
-			Z.info(`${e} seeded`, { path: t.path });
+			Q.info(`${e} seeded`, { path: t.path });
 		}
 	}).catch(() => {});
-	let { resolved: o } = await Pe({
+	let { resolved: o } = await rt({
 		rawEnv: n.env,
 		appType: "web",
 		root: e,
-		log: Z,
+		log: Q,
 		generateTypes: !0
 	}), s = o.publicValues;
-	await sa(e, n, a, s), Z.debug("generated framework entry files", { files: [
+	await wo(e, n, a, s), Q.debug("generated framework entry files", { files: [
 		"index.html",
 		".framework/main.tsx",
 		...n.env ? [".framework/env.public.ts"] : []
@@ -2821,34 +3277,46 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env,
-		dashboardPin: process.env[br] === "1"
+		dashboardPin: process.env[wi] === "1"
 	});
-	for (let e of c.warnings) Z.warn(e);
-	let l = c.port, y = n.name ?? "unnamed", b = w("web", y, l), D = T(y);
-	await x({
-		id: b,
-		name: y,
+	for (let e of c.warnings) Q.warn(e);
+	let l = c.port, b = n.name ?? "unnamed", x = re("web", b, l), S = ie(b);
+	await ee({
+		id: x,
+		name: b,
 		kind: "web",
 		url: `http://localhost:${l}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: D.path
-	}).catch(() => {}), await ca(e, l);
-	let { pages: j, dirs: P } = await $(O(e, "src", "pages")), F = {
-		dirs: P,
-		ssrRoutes: qi(j)
-	}, ee = P.map((e) => ({
+		logFile: S.path
+	}).catch(() => {}), await To(e, l);
+	let { pages: C, dirs: w } = await ro(I(e, "src", "pages")), T = null, E = n.fonts !== void 0 && n.fonts.length > 0 ? Yn({
+		root: e,
+		fonts: n.fonts,
+		cache: v(),
+		secret: qn().secret,
+		isOgSsrRoute: (e) => O.ssrRoutes.some((t) => t.pattern === e),
+		getPageModule: async (e) => {
+			let t = O.ssrRoutes.find((t) => t.pattern === e);
+			if (t === void 0 || T === null) return null;
+			let n = await T(t.file), r = _(n, t.file);
+			return r === "ssr" || r === "isr" ? n : null;
+		}
+	}) : null, O = {
+		dirs: w,
+		ssrRoutes: lo(C)
+	}, k = w.map((e) => ({
 		dir: e.dir,
 		hasLayout: e.hasLayout,
 		hasError: e.hasError,
 		hasPending: e.hasPending,
 		hasNotFound: e.hasNotFound
-	})), te = await un({
+	})), A = await mr({
 		appRoot: e,
-		pages: j
+		pages: C
 	});
-	te.wrote && Z.debug("routes codegen wrote", { path: k(e, te.path) });
-	let ne = await De("vite", () => import("vite")), re = (await import("@vitejs/plugin-react")).default, I = (await import("@tailwindcss/vite")).default, L = O(e, ".framework"), R = O(e, "src"), ie = /* @__PURE__ */ new Set([
+	A.wrote && Q.debug("routes codegen wrote", { path: L(e, A.path) });
+	let j = await Xe("vite", () => import("vite")), M = (await import("@vitejs/plugin-react")).default, N = (await import("@tailwindcss/vite")).default, P = I(e, ".framework"), F = I(e, "src"), z = /* @__PURE__ */ new Set([
 		".framework",
 		"node_modules",
 		"dist",
@@ -2856,64 +3324,64 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		".vite",
 		".turbo",
 		".cache"
-	]), B = {
+	]), oe = {
 		name: "framework:watch-app-sources",
 		async configureServer(t) {
 			try {
-				let n = (await N.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !ie.has(e.name));
-				for (let r of n) t.watcher.add(O(e, r.name));
-				n.length === 0 && t.watcher.add(R);
+				let n = (await V.readdir(e, { withFileTypes: !0 })).filter((e) => e.isDirectory() && !z.has(e.name));
+				for (let r of n) t.watcher.add(I(e, r.name));
+				n.length === 0 && t.watcher.add(F);
 			} catch {
-				t.watcher.add(R);
+				t.watcher.add(F);
 			}
-			for (let n of await Re(e)) t.watcher.add(n.dir);
+			for (let n of await ct(e)) t.watcher.add(n.dir);
 		}
-	}, V = O(e, "src", "pages"), ae = (e) => e.endsWith(".tsx") && (e === V || e.startsWith(V + "/")), oe = (e) => e === V || e.startsWith(V + "/"), H = async (t) => {
+	}, H = I(e, "src", "pages"), U = (e) => e.endsWith(".tsx") && (e === H || e.startsWith(H + "/")), se = (e) => e === H || e.startsWith(H + "/"), ce = async (t) => {
 		try {
 			let r = Date.now();
-			await sa(e, n, a, s);
-			let { pages: i, dirs: o } = await $(V);
-			await un({
+			await wo(e, n, a, s);
+			let { pages: i, dirs: o } = await ro(H);
+			await mr({
 				appRoot: e,
 				pages: i
-			}), F.dirs = o, F.ssrRoutes = qi(i), Z.info("page tree regenerated", {
+			}), O.dirs = o, O.ssrRoutes = lo(i), Q.info("page tree regenerated", {
 				reason: t,
 				ms: Date.now() - r,
-				routes: F.ssrRoutes.length
+				routes: O.ssrRoutes.length
 			});
-			for (let e of di(J, F.ssrRoutes.map((e) => e.pattern))) Z.error(`middleware.ts: ${e.message}`);
+			for (let e of ha(Y, O.ssrRoutes.map((e) => e.pattern))) Q.error(`middleware.ts: ${e.message}`);
 		} catch (e) {
-			Z.error("page tree regen failed", { reason: t }, e);
+			Q.error("page tree regen failed", { reason: t }, e);
 		}
-	}, se = {
+	}, W = {
 		name: "framework:regenerate-on-page-tree-change",
 		configureServer(t) {
 			let n = null, r = [], i = (e) => {
 				r.push(e), n && clearTimeout(n), n = setTimeout(() => {
 					n = null;
 					let e = r.length === 1 ? r[0] : `${r.length} events (${r[0]}, …)`;
-					r.length = 0, H(e);
+					r.length = 0, ce(e);
 				}, 50);
 			};
 			t.watcher.on("add", (t) => {
-				ae(t) && i(`add ${k(e, t)}`);
+				U(t) && i(`add ${L(e, t)}`);
 			}), t.watcher.on("unlink", (t) => {
-				ae(t) && i(`unlink ${k(e, t)}`);
+				U(t) && i(`unlink ${L(e, t)}`);
 			}), t.watcher.on("addDir", (t) => {
-				oe(t) && i(`addDir ${k(e, t)}`);
+				se(t) && i(`addDir ${L(e, t)}`);
 			}), t.watcher.on("unlinkDir", (t) => {
-				oe(t) && i(`unlinkDir ${k(e, t)}`);
+				se(t) && i(`unlinkDir ${L(e, t)}`);
 			});
 		}
-	}, U = O(e, "app.config.ts"), ce = (e) => {
-		if (!ue(e.env)) return "";
+	}, G = I(e, "app.config.ts"), le = (e) => {
+		if (!xe(e.env)) return "";
 		let t = Object.entries(e.env.vars).map(([e, t]) => `${e}:${t.access}`).sort();
 		return `${String(e.env.publicPrefix)}|${t.join(",")}`;
-	}, le = (e, t) => {
+	}, K = (e, t) => {
 		let n = [];
-		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), ce(e) !== ce(t) && n.push("env"), n;
-	}, W = n, de = A(U), fe = () => {
-		let e = _e(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
+		return e.port !== t.port && n.push(`port ${e.port ?? "(default)"} → ${t.port ?? "(default)"}`), JSON.stringify(e.proxies) !== JSON.stringify(t.proxies) && n.push("proxies"), JSON.stringify(e.allowedHosts) !== JSON.stringify(t.allowedHosts) && n.push("allowedHosts"), JSON.stringify(e.apis) !== JSON.stringify(t.apis) && n.push("apis"), le(e) !== le(t) && n.push("env"), n;
+	}, q = n, de = R(G), fe = () => {
+		let e = Me(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
 			stdio: "inherit",
 			env: process.env,
 			cwd: process.cwd()
@@ -2923,29 +3391,29 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		process.on("SIGINT", n), process.on("SIGTERM", r), e.on("exit", (e, t) => {
 			process.off("SIGINT", n), process.off("SIGTERM", r), t ? process.kill(process.pid, t) : process.exit(e ?? 0);
 		}), e.on("error", (e) => {
-			Z.error("restart spawn failed", {}, e), process.exit(1);
+			Q.error("restart spawn failed", {}, e), process.exit(1);
 		});
 	}, pe = {
 		name: "framework:watch-app-config",
 		async configureServer(n) {
-			n.watcher.add(U), Z.info("watching app.config.ts for changes", { path: k(e, U) });
-			let r = ii.map((t) => O(e, t)), i = new Set(r.map((e) => A(e)));
+			n.watcher.add(G), Q.info("watching app.config.ts for changes", { path: L(e, G) });
+			let r = ca.map((t) => I(e, t)), i = new Set(r.map((e) => R(e)));
 			for (let e of r) n.watcher.add(e);
 			n.watcher.on("all", (t, r) => {
-				i.has(A(r)) && (Z.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: k(e, r) }), n.close().catch(() => void 0).then(() => {
+				i.has(R(r)) && (Q.warn("middleware.ts changed — restarting (it is loaded once per boot)", { path: L(e, r) }), n.close().catch(() => void 0).then(() => {
 					fe();
 				}));
 			});
 			let a = async () => {
 				try {
 					try {
-						let e = n.moduleGraph.getModuleById(U);
+						let e = n.moduleGraph.getModuleById(G);
 						e && n.moduleGraph.invalidateModule(e);
 					} catch {}
-					let e = (await n.ssrLoadModule(U, { fixStacktrace: !0 })).default;
-					return typeof e == "object" && e && "type" in e && e.type === "web" ? e : (Z.warn("app.config.ts re-load returned wrong shape", { hasDefault: e !== void 0 }), null);
+					let e = (await n.ssrLoadModule(G, { fixStacktrace: !0 })).default;
+					return typeof e == "object" && e && "type" in e && e.type === "web" ? e : (Q.warn("app.config.ts re-load returned wrong shape", { hasDefault: e !== void 0 }), null);
 				} catch (e) {
-					return Z.warn("app.config.ts re-load failed — ignoring this change", {}, e), null;
+					return Q.warn("app.config.ts re-load failed — ignoring this change", {}, e), null;
 				}
 			}, o = null, s = () => {
 				o && clearTimeout(o), o = setTimeout(() => {
@@ -2954,20 +3422,20 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 			}, c = async () => {
 				let t = await a();
 				if (!t) {
-					Z.info("app.config.ts onConfigChange: load returned null — skipping");
+					Q.info("app.config.ts onConfigChange: load returned null — skipping");
 					return;
 				}
-				if (Z.info("app.config.ts onConfigChange: loaded", {
+				if (Q.info("app.config.ts onConfigChange: loaded", {
 					theme: t.theme,
 					port: t.port,
 					name: t.name
-				}), JSON.stringify(t) === JSON.stringify(W)) {
-					Z.info("app.config.ts onConfigChange: parsed config unchanged — skipping (no-op edit?)");
+				}), JSON.stringify(t) === JSON.stringify(q)) {
+					Q.info("app.config.ts onConfigChange: parsed config unchanged — skipping (no-op edit?)");
 					return;
 				}
-				let r = le(W, t);
+				let r = K(q, t);
 				if (r.length > 0) {
-					Z.warn("app.config.ts changed — hard restart required", { fields: r });
+					Q.warn("app.config.ts changed — hard restart required", { fields: r });
 					try {
 						await n.close();
 					} catch {}
@@ -2976,82 +3444,82 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}
 				try {
 					let r = Date.now();
-					await sa(e, t, await ea(e, t)), W = t, n.ws && n.ws.send({
+					await wo(e, t, await _o(e, t)), q = t, n.ws && n.ws.send({
 						type: "full-reload",
 						path: "*"
-					}), Z.info("app.config.ts soft-regen", {
+					}), Q.info("app.config.ts soft-regen", {
 						ms: Date.now() - r,
 						reload: "full"
 					});
 				} catch (e) {
-					Z.error("app.config.ts soft-regen failed", {}, e);
+					Q.error("app.config.ts soft-regen failed", {}, e);
 				}
-			}, l = (e) => E(e) === "app.config.ts" ? e === U || A(e) === de : !1;
+			}, l = (e) => ae(e) === "app.config.ts" ? e === G || R(e) === de : !1;
 			n.watcher.on("change", (e) => {
-				l(e) && (Z.info("app.config.ts change event (chokidar)", { file: e }), s());
+				l(e) && (Q.info("app.config.ts change event (chokidar)", { file: e }), s());
 			}), n.watcher.on("add", (e) => {
-				l(e) && (Z.info("app.config.ts add event (chokidar)", { file: e }), s());
+				l(e) && (Q.info("app.config.ts add event (chokidar)", { file: e }), s());
 			});
 			try {
 				let { watchFile: e } = await import("node:fs");
-				e(U, { interval: 500 }, (e, t) => {
-					e.mtimeMs !== t.mtimeMs && (Z.info("app.config.ts change event (poll)", { mtime: e.mtimeMs }), s());
-				}), Z.info("app.config.ts polling watcher attached", { intervalMs: 500 });
+				e(G, { interval: 500 }, (e, t) => {
+					e.mtimeMs !== t.mtimeMs && (Q.info("app.config.ts change event (poll)", { mtime: e.mtimeMs }), s());
+				}), Q.info("app.config.ts polling watcher attached", { intervalMs: 500 });
 			} catch (e) {
-				Z.warn("app.config.ts polling watcher could not attach", {}, e);
+				Q.warn("app.config.ts polling watcher could not attach", {}, e);
 			}
-			Be(t, Z, {
+			ut(t, Q, {
 				root: e,
 				onBeforeRestart: () => n.close()
 			});
 		}
-	}, me = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, G = 0, he = {
+	}, me = /\/apps\/[^/]+\/.*\.(route|mutation|workflow|schema)\.tsx?$/, he = 0, ge = {
 		name: "framework:suppress-api-hmr",
 		handleHotUpdate(e) {
-			if (G += 1, me.test(e.file)) return [];
+			if (he += 1, me.test(e.file)) return [];
 		}
-	}, ge = {
+	}, _e = {
 		name: "framework:reoptimize-on-rpcgroup-change",
 		async configureServer(t) {
 			let n = [];
 			for (let r of a) {
-				let i = await Yi(e, r.pkg);
+				let i = await fo(e, r.pkg);
 				if (i) {
 					n.push(i);
 					try {
-						t.watcher.add(O(i, "rpcGroup.generated.ts"));
+						t.watcher.add(I(i, "rpcGroup.generated.ts"));
 					} catch {}
-					for (let e of await ei(i)) try {
+					for (let e of await ia(i)) try {
 						t.watcher.add(e);
 					} catch {}
 				}
 			}
 			if (n.length === 0) return;
-			let r = await ni(n), i = null, o = !1, s = async () => {
+			let r = await oa(n), i = null, o = !1, s = async () => {
 				if (o) return;
-				let e = await ni(n);
+				let e = await oa(n);
 				if (e !== void 0 && e !== r) {
-					r = e, o = !0, Z.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
+					r = e, o = !0, Q.info("the api surface changed — re-bundling the api client + reloading (descriptor edits propagate automatically; no manual restart needed)");
 					try {
-						await N.rm(O(L, ".vite", "deps"), {
+						await V.rm(I(P, ".vite", "deps"), {
 							recursive: !0,
 							force: !0
 						}), await t.restart(!0);
 					} catch (e) {
-						o = !1, Z.error("rpcGroup re-optimize failed", {}, e);
+						o = !1, Q.error("rpcGroup re-optimize failed", {}, e);
 					}
 				}
 			}, c = (e) => {
-				let t = A(e);
-				!Qr(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
+				let t = R(e);
+				!na(t) && !t.endsWith("rpcGroup.generated.ts") || (i && clearTimeout(i), i = setTimeout(() => {
 					s();
 				}, 120));
 			};
 			t.watcher.on("change", c), t.watcher.on("add", c);
 		}
-	}, K = {}, ve = (e) => (t) => {
+	}, ve = {}, ye = (e) => (t) => {
 		t.on("proxyReq", (t, n) => {
-			nr(t, n, {
+			oi(t, n, {
 				target: e,
 				token: process.env.VOLTRO_INSPECT_TOKEN,
 				writeToken: process.env.VOLTRO_INSPECT_WRITE_TOKEN,
@@ -3061,59 +3529,59 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	};
 	for (let e of a) {
 		if (!e.proxyTarget) continue;
-		K[e.browserWsUrl] = {
+		ve[e.browserWsUrl] = {
 			target: e.proxyTarget,
 			ws: !0,
 			changeOrigin: !0,
 			...e.wsPath ? {} : { rewrite: () => "/ws" }
 		};
 		let t = e.proxyTarget.replace(/^ws/, "http");
-		K[`/_voltro/api/${e.name}`] = {
+		ve[`/_voltro/api/${e.name}`] = {
 			target: t,
 			changeOrigin: !0,
 			rewrite: (t) => t.replace(RegExp(`^/_voltro/api/${e.name}`), ""),
-			configure: ve(t)
+			configure: ye(t)
 		};
 	}
 	for (let [e, t] of Object.entries(n.proxies ?? {})) {
-		if (K[e]) {
-			Z.warn("user proxy ignored — prefix already claimed by an api ws proxy", { prefix: e });
+		if (ve[e]) {
+			Q.warn("user proxy ignored — prefix already claimed by an api ws proxy", { prefix: e });
 			continue;
 		}
-		K[e] = {
+		ve[e] = {
 			target: t.target,
 			changeOrigin: t.changeOrigin ?? !0,
 			...t.rewrite === void 0 ? {} : { rewrite: (n) => n.replace(RegExp(`^${e}`), t.rewrite) }
-		}, Z.info(`proxy ${e} → ${t.target}`, {
+		}, Q.info(`proxy ${e} → ${t.target}`, {
 			prefix: e,
 			target: t.target,
 			...t.rewrite === void 0 ? {} : { rewrite: t.rewrite }
 		});
 	}
-	let ye = {
+	let be = {
 		name: "framework:inspect",
 		configureServer(t) {
 			let r = null, a = async () => {
 				if (r !== null) return r;
 				let n = [];
-				for (let r of j) try {
-					let i = await t.ssrLoadModule(O(e, "src", "pages", r.file));
+				for (let r of C) try {
+					let i = await t.ssrLoadModule(I(e, "src", "pages", r.file));
 					n.push({
 						pattern: r.pattern,
 						file: r.file,
 						dirChain: r.dirChain,
-						renderMode: _(i, O("src", "pages", r.file)),
+						renderMode: _(i, I("src", "pages", r.file)),
 						interactive: i.interactive ?? "full",
 						tenantAware: i.tenantAware === !0,
-						revalidateMs: v(i.revalidate),
-						staleWhileRevalidateMs: v(i.staleWhileRevalidate) ?? 0,
+						revalidateMs: y(i.revalidate),
+						staleWhileRevalidateMs: y(i.staleWhileRevalidate) ?? 0,
 						cacheInvalidatesOn: Array.isArray(i.cacheInvalidatesOn) ? i.cacheInvalidatesOn : [],
 						hasLoader: typeof i.loader == "function",
 						hasMeta: i.meta != null,
 						hasGetStaticPaths: typeof i.getStaticPaths == "function"
 					});
 				} catch (e) {
-					Z.warn("inspect: failed to load page metadata", { pattern: r.pattern }, e);
+					Q.warn("inspect: failed to load page metadata", { pattern: r.pattern }, e);
 				}
 				return r = n, n;
 			};
@@ -3133,9 +3601,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}), n();
 			}), t.middlewares.use((t, n, r) => {
 				if (t.method !== "GET" && t.method !== "HEAD") return r();
-				let { pathname: i } = $t(t.url ?? "/");
-				if (i !== "/robots.txt" || M(O(e, "public", "robots.txt"))) return r();
-				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(gn({ indexable: !1 }));
+				let { pathname: i } = ir(t.url ?? "/");
+				if (i !== "/robots.txt" || B(I(e, "public", "robots.txt"))) return r();
+				n.statusCode = 200, n.setHeader("Content-Type", "text/plain; charset=utf-8"), n.end(br({ indexable: !1 }));
 			}), n.name === "voltroDashboard" && t.middlewares.use(async (e, t, n) => {
 				let r = e.url ?? "", i = r.split("?")[0];
 				if (i === "/api/dashboard/proxy") {
@@ -3226,7 +3694,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				for (let [t, n] of Object.entries(e.headers ?? {})) n !== void 0 && (s[String(t).toLowerCase()] = Array.isArray(n) ? n.join(", ") : String(n));
 				let c = o.split("?")[0];
 				if (e.method === "GET" && (c === "/_voltro/inspect/logs" || o.startsWith("/_voltro/inspect/logs?"))) {
-					let e = d(s.origin), n = Xn(o, jn(), s);
+					let e = d(s.origin), n = ei(o, Fr(), s);
 					t.statusCode = n.status, t.setHeader("content-type", n.contentType);
 					for (let [n, r] of Object.entries(e)) t.setHeader(n, r);
 					t.end(n.body);
@@ -3244,7 +3712,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					e.setEncoding("utf-8"), e.on("data", (e) => {
 						r += e;
 					}), e.on("end", () => {
-						let e = Wn(r, i);
+						let e = Jr(r, i);
 						t.statusCode = e.status, t.setHeader("content-type", e.contentType);
 						for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 						t.end(e.body);
@@ -3275,14 +3743,14 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 					for (let [e, r] of Object.entries(n)) t.setHeader(e, r);
 					t.flushHeaders?.(), t.write("retry: 5000\n\n");
 					let a = o.indexOf("?");
-					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(yn(e));
+					if (a === -1 || new URLSearchParams(o.slice(a + 1)).get("live") !== "1") for (let e of i.buffered()) t.write(Cr(e));
 					let c = i.subscribe((e) => {
 						try {
-							t.write(yn(e));
+							t.write(Cr(e));
 						} catch {}
 					}), l = setInterval(() => {
 						try {
-							t.write(bn());
+							t.write(wr());
 						} catch {}
 					}, 15e3), p = () => {
 						clearInterval(l), c();
@@ -3295,7 +3763,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						kind: "web",
 						meta: {
 							name: n.name ?? "(unnamed)",
-							voltroVersion: Di,
+							voltroVersion: Va,
 							port: l,
 							mode: "dev",
 							apis: Object.entries(n.apis ?? {}).map(([e, t]) => {
@@ -3307,13 +3775,13 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							})
 						},
 						routes: await a(),
-						dirs: ee,
+						dirs: k,
 						cache: () => ({
 							backend: "memory",
 							size: 0,
 							entries: []
 						}),
-						env: () => Fe(n.name ?? "app", { contract: ue(n.env) ? n.env : void 0 })
+						env: () => at(n.name ?? "app", { contract: xe(n.env) ? n.env : void 0 })
 					}, c = p(o, i, s, { method: e.method ?? "GET" });
 					if (c === null) return r();
 					t.statusCode = c.status, t.setHeader("content-type", c.contentType);
@@ -3324,25 +3792,25 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				}
 			});
 		}
-	}, be = n.name === "voltroDashboard" ? {
+	}, Se = n.name === "voltroDashboard" ? {
 		name: "framework:dashboard-registry",
 		configureServer(e) {
 			e.middlewares.use(async (e, t, n) => {
 				if (!(e.url ?? "").startsWith("/api/dashboard/registry")) return n();
 				try {
-					let e = await S();
+					let e = await te();
 					t.statusCode = 200, t.setHeader("content-type", "application/json; charset=utf-8"), t.end(JSON.stringify(e));
 				} catch (e) {
 					t.statusCode = 500, t.setHeader("content-type", "text/plain"), t.end(`registry read error: ${e.message}`);
 				}
 			});
 		}
-	} : null, Se = /* @__PURE__ */ new Set(), Ce = (e, t, n, r, i, a = !1) => {
-		let o = Ir(i, a, t) ?? "";
-		if (Z.error(`${t} render failed`, {
+	} : null, Ce = /* @__PURE__ */ new Set(), we = (e, t, n, r, i, a = !1) => {
+		let o = Bi(i, a, t) ?? "";
+		if (Q.error(`${t} render failed`, {
 			pathname: n,
 			pattern: r,
-			cause: Sn(i) + o
+			cause: Er(i) + o
 		}), e.headersSent) {
 			e.end();
 			return;
@@ -3350,33 +3818,33 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		e.writeHead(500, {
 			"content-type": "text/plain; charset=utf-8",
 			"x-voltro-rendered-by": `${t}-failed`,
-			"x-voltro-ssr-generation": String(G)
+			"x-voltro-ssr-generation": String(he)
 		});
-		let s = G === 0 ? "" : `\n[voltro] this process has absorbed ${G} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
-		e.end(`${t} render failed for ${n}\n\n${Sn(i)}\n${o}\n${s}`);
-	}, we = mt(), Te = gt({
-		limit: we,
-		onColdStart: (e) => Z.debug("ssr cold-compile start", { id: e }),
-		onColdEnd: (e, { durationMs: t, failed: n }) => Z.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
+		let s = he === 0 ? "" : `\n[voltro] this process has absorbed ${he} hot update(s) since boot, so its SSR\nmodule graph may not match the files on disk. Before reporting this — to us or to\nyourself — restart \`voltro dev\` and measure once from a fresh boot.\n`;
+		e.end(`${t} render failed for ${n}\n\n${Er(i)}\n${o}\n${s}`);
+	}, Te = zt(), Ee = Vt({
+		limit: Te,
+		onColdStart: (e) => Q.debug("ssr cold-compile start", { id: e }),
+		onColdEnd: (e, { durationMs: t, failed: n }) => Q.debug(`ssr cold-compile ${n ? "FAILED" : "end"} ${t}ms`, {
 			id: e,
 			ms: t,
 			...n ? { failed: !0 } : {}
 		})
 	});
-	Z.debug(`ssr cold-compile concurrency ${we}`, { concurrency: we });
-	let Ee = null, Oe = async () => (Ee === null && (Ee = await N.readFile(O(e, ".framework", "index.html"), "utf8")), Ee), ke = {
+	Q.debug(`ssr cold-compile concurrency ${Te}`, { concurrency: Te });
+	let De = null, J = async () => (De === null && (De = await V.readFile(I(e, ".framework", "index.html"), "utf8")), De), Oe = {
 		name: "framework:ssr",
 		configureServer(t) {
-			let r = (e) => Te.load(e, async () => await t.ssrLoadModule(e)), i, o = !1, s = () => {
+			let r = (e) => Ee.load(e, async () => await t.ssrLoadModule(e)), i, o = !1, s = () => {
 				if (i !== void 0) return i;
 				let t = n.locales ?? [], a = n.defaultLocale ?? t[0] ?? "en";
 				return t.length === 0 ? (i = Promise.resolve(() => void 0), i) : (i = (async () => {
 					let [{ makeSsgWrap: i }, { makeSsrI18nResolver: s }] = await Promise.all([r("@voltro/i18n"), r("@voltro/i18n/server")]), c = {};
-					for (let n of t) if (M(O(e, "src", "locales", `${n}.ts`))) try {
-						let t = (await r(O(e, "src", "locales", `${n}.ts`))).default;
+					for (let n of t) if (B(I(e, "src", "locales", `${n}.ts`))) try {
+						let t = (await r(I(e, "src", "locales", `${n}.ts`))).default;
 						t !== void 0 && (c[n] = i(n, t, a));
 					} catch (e) {
-						Z.warn("locale catalog failed to load for SSR", { locale: n }, e);
+						Q.warn("locale catalog failed to load for SSR", { locale: n }, e);
 					}
 					if (o = Object.keys(c).length > 0, Object.keys(c).length === 0) {
 						let { resolveLocale: e, resolveTimeZone: i } = await r("@voltro/i18n/server");
@@ -3403,62 +3871,88 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 						defaultTimeZone: n.defaultTimeZone ?? null
 					});
 				})(), i);
-			}, c = Dt({
+			}, c = Qt({
 				apiName: a[0]?.name,
-				apiOrigin: ia(a[0], { allowDevProxy: !0 }),
+				apiOrigin: xo(a[0], { allowDevProxy: !0 }),
 				loadDescriptors: async () => {
 					let e = a[0];
 					if (e !== void 0) return (await r(`${e.pkg}/rpcGroup`)).appDescriptors;
 				},
-				rpcQuery: (e, t) => aa(ia(a[0], { allowDevProxy: !0 }), e, {
+				rpcQuery: (e, t) => So(xo(a[0], { allowDevProxy: !0 }), e, {
 					apiName: a[0]?.name,
 					headers: t
 				}),
 				renderErrorPage: async () => void 0
 			});
 			t.middlewares.use((e, t, n) => {
-				if (!(e.url ?? "/").split("?")[0].startsWith(xe)) return n();
+				if (!(e.url ?? "/").split("?")[0].startsWith(Le)) return n();
 				c(e, t, (t, r) => {
 					e.url = t, e.method = "GET", e.__voltroFormFlash = r, n();
 				}).then((e) => {
 					e || n();
 				});
+			}), T = async (n) => await t.ssrLoadModule(I(e, "src", "pages", n)), t.middlewares.use(async (e, t, n) => {
+				let r = e.url ?? "/";
+				if (!r.startsWith("/_voltro/og") || E === null) return n();
+				try {
+					let e = await E.handle(new URL(r, "http://localhost"));
+					if (e === null) return n();
+					t.statusCode = e.status;
+					for (let [n, r] of Object.entries(e.headers)) t.setHeader(n, r);
+					t.end(Buffer.from(e.body));
+				} catch (e) {
+					t.statusCode = 500, t.setHeader("content-type", "text/plain"), t.end(`og render error: ${e.message}`);
+				}
 			}), t.middlewares.use(async (i, c, l) => {
 				if (i.method !== "GET" && i.method !== "HEAD") return l();
 				let u = i.url ?? "/";
 				u.indexOf("?");
-				let { pathname: d, search: f } = $t(u), p = i.__voltroFormFlash;
+				let { pathname: d, search: f } = ir(u), p = i.__voltroFormFlash;
 				if (d.startsWith("/@") || d.startsWith("/node_modules/") || d.startsWith("/.framework/") || d.startsWith("/_voltro/") || d === "/main.tsx" || d === "/index.html" || d === "/sw.js" || d === "/favicon.ico" || d === "/robots.txt") return l();
 				let m = async () => {
-					if (J.length === 0) return;
-					let e = ui(J, {
+					if (Y.length === 0) return;
+					let e = ma(Y, {
 						route: void 0,
 						pathname: d
 					});
 					if (e === void 0) return;
 					let t = {};
 					for (let [e, n] of Object.entries(i.headers ?? {})) typeof n == "string" ? t[e] = n : Array.isArray(n) && (t[e] = n.join(", "));
-					let n = await bi(e, {
+					let n = await wa(e, {
 						pathname: d,
 						search: f,
 						headers: t,
-						cookies: pi(t.cookie),
+						cookies: _a(t.cookie),
 						route: void 0
 					});
-					for (let e of n.setCookies) c.appendHeader("set-cookie", _i(e));
+					for (let e of n.setCookies) c.appendHeader("set-cookie", xa(e));
 				};
 				if (/\.[a-z0-9]+$/i.test(d)) return await m(), l();
-				let h = Ji(d, F.ssrRoutes);
-				if (!h) return await m(), l();
-				let g = !Se.has(h.route.pattern), v = Date.now();
-				g && Z.info(`ssr compiling ${h.route.pattern}`, {
+				let h = uo(d, O.ssrRoutes), g = !1;
+				if (!h) {
+					let e = Ha(O.dirs, d);
+					if (e === void 0) return await m(), l();
+					g = !0, h = {
+						route: {
+							pattern: "<not-found>",
+							file: e.dir === "" ? "not-found.tsx" : `${e.dir}/not-found.tsx`,
+							dirChain: e.chain,
+							regex: /^$/,
+							paramNames: [],
+							priority: 2 ** 53 - 1
+						},
+						params: {}
+					};
+				}
+				let v = !Ce.has(h.route.pattern), y = Date.now();
+				v && Q.info(`ssr compiling ${h.route.pattern}`, {
 					pattern: h.route.pattern,
 					pathname: d
 				});
-				let y = {}, b = async (e, t) => {
+				let b = {}, x = async (e, t) => {
 					let n = Date.now(), r = await t();
-					return y[e] = (y[e] ?? 0) + (Date.now() - n), r;
-				}, x = async (e, n, r) => {
+					return b[e] = (b[e] ?? 0) + (Date.now() - n), r;
+				}, S = async (e, n, r) => {
 					let i = await t.moduleGraph.getModuleById(e);
 					if (!(!i || n.has(e))) {
 						if (n.add(e), i.id && /\.(css|sass|scss|less|stylus|pcss|postcss)(\?|$)/.test(i.id)) {
@@ -3466,293 +3960,326 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 							r.includes(e) || r.push(e);
 							return;
 						}
-						for (let e of i.importedModules ?? []) e.id && await x(e.id, n, r);
+						for (let e of i.importedModules ?? []) e.id && await S(e.id, n, r);
 					}
-				}, S = !1;
+				}, C = !1;
 				try {
-					let C = await b("loadPage", async () => await r(O(e, "src", "pages", h.route.file))), w = _(C, O("src", "pages", h.route.file)), T = Hi(F.dirs, h.route.dirChain), E = w === "spa" && T.some((e) => e.hasLayout), D = C.interactive ?? "full";
-					if (w !== "ssr" && w !== "isr" && !E && D !== "islands") return await m(), l();
-					let k = {};
-					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? k[e] = t : Array.isArray(t) && (k[e] = t.join(", "));
-					let A = await bi(ui(J, {
+					let w = await x("loadPage", async () => await r(I(e, "src", "pages", h.route.file))), T = g ? "ssr" : _(w, I("src", "pages", h.route.file)), D = io(O.dirs, h.route.dirChain), k = T === "spa" && D.some((e) => e.hasLayout), A = w.interactive ?? "full";
+					if (T !== "ssr" && T !== "isr" && !k && A !== "islands") return await m(), l();
+					let j = {};
+					for (let [e, t] of Object.entries(i.headers ?? {})) typeof t == "string" ? j[e] = t : Array.isArray(t) && (j[e] = t.join(", "));
+					let M = await wa(ma(Y, {
 						route: h.route.pattern,
 						pathname: d
 					}), {
 						pathname: d,
 						search: f,
-						headers: k,
-						cookies: pi(k.cookie),
+						headers: j,
+						cookies: _a(j.cookie),
 						route: h.route.pattern
-					}, Ve);
-					for (let e of A.setCookies) c.appendHeader("set-cookie", _i(e));
-					for (let [e, t] of Object.entries(A.responseHeaders)) c.setHeader(e, t);
-					if (w === "isr" && A.cspNonce !== void 0) throw Error(`page '${h.route.pattern}' is renderMode 'isr' while middleware.ts mints a cspNonce — an isr render is CACHED and a cached nonce is a lie the browser enforces. Use renderMode 'ssr' for nonce'd pages, or a hash-based CSP for isr.`);
-					let j = w === "isr" ? wi(A.headers) : A.headers, M = aa(ia(a[0], { allowDevProxy: !0 }), j.cookie, {
+					}, ze);
+					for (let e of M.setCookies) c.appendHeader("set-cookie", xa(e));
+					for (let [e, t] of Object.entries(M.responseHeaders)) c.setHeader(e, t);
+					if (T === "isr" && M.cspNonce !== void 0) throw Error(`page '${h.route.pattern}' is renderMode 'isr' while middleware.ts mints a cspNonce — an isr render is CACHED and a cached nonce is a lie the browser enforces. Use renderMode 'ssr' for nonce'd pages, or a hash-based CSP for isr.`);
+					let N = T === "isr" ? Oa(M.headers) : M.headers, P = T === "isr" && w.ppr === !0, ee = P ? Pa(N, h.route.pattern) : N, te = So(xo(a[0], { allowDevProxy: !0 }), N.cookie, {
 						apiName: a[0]?.name,
-						headers: j
-					}), P = new AbortController(), ee = () => P.abort();
-					c.once("close", ee);
-					let te = null, ne = [], re = {};
+						headers: N
+					}), ne = new AbortController(), re = () => ne.abort();
+					c.once("close", re);
+					let ie = null, ae = [], F = {};
 					try {
-						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: ne, segmentLoaderData: re} = await b("loadChain", () => Ui({
-							entries: T,
-							loadLayout: (t) => r(O(e, "src", "pages", t.dir, "layout.tsx")),
-							loadError: (t) => r(O(e, "src", "pages", t.dir, "error.tsx")),
-							loadPending: (t) => r(O(e, "src", "pages", t.dir, "loading.tsx")),
+						(await r("@voltro/web/ssr")).beginStoreSeeds(), {chain: ae, segmentLoaderData: F} = await x("loadChain", () => ao({
+							entries: D,
+							loadLayout: (t) => r(I(e, "src", "pages", t.dir, "layout.tsx")),
+							loadError: (t) => r(I(e, "src", "pages", t.dir, "error.tsx")),
+							loadPending: (t) => r(I(e, "src", "pages", t.dir, "loading.tsx")),
 							ctx: {
 								params: h.params,
 								pathname: d,
 								search: f,
-								signal: P.signal,
-								headers: j,
-								query: M,
+								signal: ne.signal,
+								headers: ee,
+								query: te,
 								isServer: !0
 							}
 						}));
-						let t = C.loader;
-						typeof t == "function" && !E && (te = await b("loader", () => t({
+						let t = w.loader;
+						typeof t == "function" && !k && (ie = await x("loader", () => t({
 							params: h.params,
 							pathname: d,
 							search: f,
-							signal: P.signal,
-							headers: j,
-							query: M,
+							signal: ne.signal,
+							headers: ee,
+							query: te,
 							isServer: !0
 						})));
 					} finally {
-						c.off("close", ee);
+						c.off("close", re);
 					}
-					let I = await b("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
-					E || await Zr({
-						pageMod: C,
+					let L = await x("loadSsrHelpers", async () => await r("@voltro/web/ssr"));
+					k || await ta({
+						pageMod: w,
 						params: h.params,
-						query: M,
+						query: te,
 						apiName: a[0]?.name,
-						seed: I.seedPreloadedSubscription,
-						seedFailure: I.seedPreloadedSubscriptionFailure,
-						onError: ({ tag: e, apiName: t }, n) => Z.warn("preload seed failed", {
+						seed: L.seedPreloadedSubscription,
+						seedFailure: L.seedPreloadedSubscriptionFailure,
+						onError: ({ tag: e, apiName: t }, n) => Q.warn("preload seed failed", {
 							tag: e,
 							apiName: t,
 							pathname: d
 						}, n)
 					});
-					let L = {
+					let R = {
 						pattern: h.route.pattern,
-						Component: C.default,
-						meta: C.meta,
-						loader: C.loader,
-						ErrorBoundary: C.ErrorBoundary,
-						Pending: C.Pending,
-						renderMode: w,
-						chain: ne
-					}, R = {
-						cookies: w === "isr" ? Ti(A.cookies) : A.cookies,
-						headers: j,
+						Component: w.default,
+						meta: w.meta,
+						loader: w.loader,
+						ErrorBoundary: w.ErrorBoundary,
+						Pending: w.Pending,
+						renderMode: T,
+						chain: ae
+					}, z = {
+						cookies: P ? Fa(ka(M.cookies), h.route.pattern) : T === "isr" ? ka(M.cookies) : M.cookies,
+						headers: ee,
 						url: u,
 						...p === void 0 ? {} : { formFlash: p }
-					}, z = (await s())(j.cookie, j["accept-language"]);
-					S = z !== void 0 && o;
-					let ie = z ? {
-						outerWrap: z.outerWrap,
-						locale: z.locale
-					} : {}, B = E ? Yt({
-						helpers: I,
+					}, B = (await s())(N.cookie, N["accept-language"]);
+					C = B !== void 0 && o;
+					let oe = B ? {
+						outerWrap: B.outerWrap,
+						locale: B.locale
+					} : {}, H = k ? er({
+						helpers: L,
 						page: `src/pages/${h.route.file}`,
-						interactive: D,
+						interactive: A,
 						delivery: "stream",
 						renderInput: {
-							descriptor: L,
+							descriptor: R,
 							params: h.params,
 							pathname: d,
 							search: f,
-							segmentLoaderData: re,
-							requestContext: R,
-							...ie
+							segmentLoaderData: F,
+							requestContext: z,
+							...oe
 						}
-					}) : null, V = E ? null : Jt({
-						helpers: I,
+					}) : null, U = k ? null : $n({
+						helpers: L,
 						page: `src/pages/${h.route.file}`,
 						pathname: d,
-						renderMode: w,
-						interactive: D,
-						loaderData: te,
-						segmentLoaderData: re,
-						pageLoaderRan: typeof C.loader == "function"
-					}), ae = [];
-					await b("collectCss", async () => {
+						renderMode: T,
+						interactive: A,
+						loaderData: ie,
+						segmentLoaderData: F,
+						pageLoaderRan: typeof w.loader == "function",
+						...P ? { ppr: !0 } : {}
+					});
+					P && U !== null && za(U.stateInput, h.route.pattern);
+					let se = [];
+					await x("collectCss", async () => {
 						let t = /* @__PURE__ */ new Set(), n = [
-							O(e, "src", "pages", h.route.file),
-							...T.flatMap((t) => [
-								...t.hasLayout ? [O(e, "src", "pages", t.dir, "layout.tsx")] : [],
-								...t.hasError ? [O(e, "src", "pages", t.dir, "error.tsx")] : [],
-								...t.hasPending ? [O(e, "src", "pages", t.dir, "loading.tsx")] : []
+							I(e, "src", "pages", h.route.file),
+							...D.flatMap((t) => [
+								...t.hasLayout ? [I(e, "src", "pages", t.dir, "layout.tsx")] : [],
+								...t.hasError ? [I(e, "src", "pages", t.dir, "error.tsx")] : [],
+								...t.hasPending ? [I(e, "src", "pages", t.dir, "loading.tsx")] : []
 							]),
-							O(e, ".framework", "main.tsx")
+							I(e, ".framework", "main.tsx")
 						];
-						for (let e of n) await x(e, t, ae);
+						for (let e of n) await S(e, t, se);
 					});
-					let oe = (D === "islands" ? await b("islandsEntry", async () => {
-						let t = oa(a, "../../app.config"), n = (await Wt({
+					let ce = (A === "islands" ? await x("islandsEntry", async () => {
+						let t = Co(a, "../../app.config"), n = (await gn({
 							webRoot: e,
 							pages: [{
 								pattern: h.route.pattern,
 								file: h.route.file
 							}],
-							headSnippets: zt(await Oe()),
+							headSnippets: dn(await J()),
 							apiImports: t.imports,
 							apiEntriesLiteral: `[\n${t.providerEntryLines.join("\n")}\n  ]`
 						}))[0];
-						return n === void 0 ? void 0 : await N.readFile(O(e, ".framework", n.htmlFile), "utf8");
-					}) : void 0) ?? await b("readShell", Oe), H = await b("transformShell", () => t.transformIndexHtml(u, oe)), se = ae.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), U = z?.locale ?? R.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", ce = Date.now(), le = {
-						lang: U,
-						...z?.timeZone === void 0 ? {} : { timeZone: z.timeZone },
-						renderedAt: ce
+						return n === void 0 ? void 0 : await V.readFile(I(e, ".framework", n.htmlFile), "utf8");
+					}) : void 0) ?? await x("readShell", J), W = await x("transformShell", () => t.transformIndexHtml(u, ce)), G = se.map((e) => `<link rel="stylesheet" href="${e}?direct" />`).join("\n    "), le = B?.locale ?? z.cookies["voltro:locale"] ?? n.defaultLocale ?? (n.locales ?? [])[0] ?? "en", K = Date.now(), ue = {
+						lang: le,
+						...B?.timeZone === void 0 ? {} : { timeZone: B.timeZone },
+						renderedAt: K
 					};
-					if (B) {
-						let e = (e) => Zt({
-							helpers: I,
-							prepared: B,
+					if (H) {
+						let e = (e) => nr({
+							helpers: L,
+							prepared: H,
 							meta: e,
-							interactive: D,
-							extra: [se]
+							interactive: A,
+							extra: [G]
 						});
-						if (B.hasDeferred) Jr({
+						if (H.hasDeferred) Qi({
 							res: c,
-							shell: Ur({
-								shell: H,
+							shell: qi({
+								shell: W,
 								inlineModuleScriptsAsync: !0
 							}),
-							documentAttrs: le,
+							documentAttrs: ue,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "spa-shell-dev"
 							},
 							headInjection: e,
-							render: (e) => I.renderPageToStream({
-								...B.renderInput,
+							render: (e) => L.renderPageToStream({
+								...H.renderInput,
 								...e
 							}),
 							onShellError: (e) => {
-								Ce(c, "spa-shell-dev", d, h.route.pattern, e, S);
+								we(c, "spa-shell-dev", d, h.route.pattern, e, C);
 							}
 						});
 						else {
-							let t = Xt({
-								helpers: I,
-								prepared: B
-							}), n = Kr(H.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`), le);
+							let t = tr({
+								helpers: L,
+								prepared: H
+							}), n = Xi(W.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`).replace("</head>", `    ${e(t.meta)}\n  </head>`), ue);
 							c.statusCode = 200, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "spa-shell-dev"), c.end(n);
 						}
-					} else if (V) {
-						let e = (e) => [
-							se,
-							I.renderMetaToHtml(e),
-							`<meta name="voltro-interactive" content="${D}" />`,
-							...V.hasDeferred ? [I.renderDeferredRegistryScript()] : [],
-							I.renderRouterStateScript(V.stateInput)
-						].filter((e) => e.length > 0).join("\n    "), t = {
-							descriptor: L,
+					} else if (U) {
+						let e = (e) => {
+							if (E === null || T !== "ssr" && T !== "isr" || typeof w.ogImage != "function" || e.includes("og:image")) return "";
+							let t = i.headers["x-tenant"], n = E.signOgUrl({
+								pattern: h.route.pattern,
+								params: h.params,
+								...typeof t == "string" ? { tenant: t } : {}
+							});
+							return `<meta property="og:image" content="${n}" /><meta name="twitter:image" content="${n}" /><meta name="twitter:card" content="summary_large_image" />`;
+						}, t = (t) => [
+							G,
+							L.renderMetaToHtml(t) + e(L.renderMetaToHtml(t)),
+							`<meta name="voltro-interactive" content="${A}" />`,
+							...U.hasDeferred ? [L.renderDeferredRegistryScript()] : [],
+							L.renderRouterStateScript(U.stateInput)
+						].filter((e) => e.length > 0).join("\n    "), n = {
+							descriptor: R,
 							params: h.params,
 							pathname: d,
 							search: f,
-							loaderData: V.loaderData,
-							segmentLoaderData: V.segmentLoaderData,
-							requestContext: R,
-							...ie
+							loaderData: U.loaderData,
+							segmentLoaderData: U.segmentLoaderData,
+							requestContext: z,
+							...oe
 						};
-						if (w === "ssr" && D === "full" && p === void 0) Jr({
+						if (T === "ssr" && A === "full" && p === void 0) Qi({
 							res: c,
-							shell: Ur({
-								shell: H,
+							shell: qi({
+								shell: W,
 								inlineModuleScriptsAsync: !0
 							}),
-							documentAttrs: le,
+							documentAttrs: ue,
 							headers: {
 								"content-type": "text/html; charset=utf-8",
 								"x-voltro-rendered-by": "ssr-dev"
 							},
-							headInjection: e,
-							render: (e) => I.renderPageToStream({
-								...t,
+							headInjection: t,
+							render: (e) => L.renderPageToStream({
+								...n,
 								...e,
-								...A.cspNonce === void 0 ? {} : { nonce: A.cspNonce }
+								...M.cspNonce === void 0 ? {} : { nonce: M.cspNonce }
 							}),
 							onShellError: (e) => {
-								Ce(c, "ssr-dev", d, h.route.pattern, e, S);
+								we(c, "ssr-dev", d, h.route.pattern, e, C);
 							}
 						});
 						else {
-							let { html: n, meta: r } = I.renderPageToHtml(t), i = Kr(H.replace("<div id=\"root\"></div>", `<div id="root">${n}</div>`).replace("</head>", `    ${e(r)}\n  </head>`), le);
-							c.statusCode = p === void 0 ? 200 : 422, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", "ssr-dev"), p !== void 0 && c.setHeader("cache-control", "no-store");
-							let a = p === void 0 ? i : bt(i, p);
-							c.end(A.cspNonce === void 0 ? a : Qt(a, A.cspNonce));
+							let { html: e, meta: r } = L.renderPageToHtml(n), i = Xi(W.replace("<div id=\"root\"></div>", `<div id="root">${e}</div>`).replace("</head>", `    ${t(r)}\n  </head>`), ue);
+							c.statusCode = p === void 0 ? g ? 404 : 200 : 422, c.setHeader("content-type", "text/html; charset=utf-8"), c.setHeader("x-voltro-rendered-by", g ? "ssr-not-found" : "ssr-dev"), p !== void 0 && c.setHeader("cache-control", "no-store");
+							let o = p === void 0 ? i : Gt(i, p);
+							if (P && p === void 0 && typeof w.loader == "function") {
+								c.setHeader("x-voltro-ppr", "shell+holes"), c.write(o);
+								let e = So(xo(a[0], { allowDevProxy: !0 }), M.headers.cookie, {
+									apiName: a[0]?.name,
+									headers: M.headers
+								}), t = new AbortController();
+								await Ra({
+									loader: w.loader,
+									ctx: {
+										params: h.params,
+										pathname: d,
+										search: f,
+										signal: t.signal,
+										headers: M.headers,
+										query: e,
+										isServer: !0
+									},
+									res: c,
+									helpers: L,
+									page: h.route.pattern,
+									log: Q
+								});
+							} else c.end(M.cspNonce === void 0 ? o : rr(o, M.cspNonce));
 						}
 					}
-					y.render = Date.now() - ce;
-					let W = Date.now() - v;
-					g ? (Se.add(h.route.pattern), Z.info(`ssr compiled ${h.route.pattern} in ${W}ms`, {
+					b.render = Date.now() - K;
+					let q = Date.now() - y;
+					v ? (Ce.add(h.route.pattern), Q.info(`ssr compiled ${h.route.pattern} in ${q}ms`, {
 						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: W,
+						elapsedMs: q,
 						cold: !0,
-						phases: y
-					})) : W > 200 && Z.info(`ssr rendered ${d} in ${W}ms`, {
+						phases: b
+					})) : q > 200 && Q.info(`ssr rendered ${d} in ${q}ms`, {
 						pattern: h.route.pattern,
 						pathname: d,
-						elapsedMs: W,
+						elapsedMs: q,
 						cold: !1,
-						phases: y
+						phases: b
 					});
 				} catch (e) {
-					if (Kt(e)) {
-						Z.error("ssr-dev render refused", {
+					if (Zn(e)) {
+						Q.error("ssr-dev render refused", {
 							pathname: d,
 							pattern: h.route.pattern
 						}, e), c.statusCode = 500, c.setHeader("content-type", "text/plain; charset=utf-8"), c.end(e.message);
 						return;
 					}
-					let t = qt(e);
+					let t = Qn(e);
 					if (t) {
 						c.statusCode = t.status;
 						for (let [e, n] of Object.entries(t.headers)) c.setHeader(e, String(n));
 						c.end(t.body);
 						return;
 					}
-					Ce(c, "ssr-dev", d, h.route.pattern, e, S);
+					we(c, "ssr-dev", d, h.route.pattern, e, C);
 				}
 			});
 		}
-	}, Ae = Date.now(), je = ne.version ?? "?", Me = await Oi(), Ne = O(e, "node_modules", "@voltro", "ui-shadcn"), q = M(O(Ne, "package.json")) ? Ne : null, Ie = [], Le = await (async () => {
+	}, ke = Date.now(), Ae = j.version ?? "?", je = await Ua(), Ne = I(e, "node_modules", "@voltro", "ui-shadcn"), Pe = B(I(Ne, "package.json")) ? Ne : null, Fe = [], Ie = await (async () => {
 		let t = [];
 		for (let n of a) {
-			let r = await Yi(e, n.pkg);
+			let r = await fo(e, n.pkg);
 			r && t.push(r);
 		}
-		let n = await ni(t);
+		let n = await oa(t);
 		if (n === void 0) return !1;
-		let r = O(L, ".voltro-rpcgroup-optimize"), i = "";
+		let r = I(P, ".voltro-rpcgroup-optimize"), i = "";
 		try {
-			i = (await N.readFile(r, "utf8")).trim();
+			i = (await V.readFile(r, "utf8")).trim();
 		} catch {}
 		if (i === n) return !1;
 		try {
-			await N.writeFile(r, n);
+			await V.writeFile(r, n);
 		} catch {}
 		return !0;
-	})(), ze = /* @__PURE__ */ new Set(), Ve = (e) => {
-		ze.has(e.name) || (ze.add(e.name), Z.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
+	})(), Re = /* @__PURE__ */ new Set(), ze = (e) => {
+		Re.has(e.name) || (Re.add(e.name), Q.warn(`middleware.ts wrote the cookie "${e.name}" with the HttpOnly default — a browser SDK cannot read it`, {
 			cookie: e.name,
 			hint: "If your IdP client reads this from `document.cookie` (Supabase's `createBrowserClient` does), pass `httpOnly: false`. Otherwise the SSR render succeeds and the user is signed out at the first client-side call. Set `httpOnly: true` explicitly to silence this."
 		}));
-	}, J = await yi(e);
-	J.length > 0 && Z.info(`middleware.ts loaded — ${J.length} middleware(s): ` + J.map((e) => e.exportName).join(", ")), fi(J, F.ssrRoutes.map((e) => e.pattern)), Le && Z.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
+	}, Y = await Ca(e);
+	Y.length > 0 && Q.info(`middleware.ts loaded — ${Y.length} middleware(s): ` + Y.map((e) => e.exportName).join(", ")), ga(Y, O.ssrRoutes.map((e) => e.pattern)), Ie && Q.info("rpcGroup changed since last boot — forcing a dep re-optimize so the browser loads the current api client");
 	try {
-		await We(l, "voltro dev (web)");
+		await ht(l, "voltro dev (web)");
 	} catch (e) {
-		Z.error(String(e.message ?? e)), process.exit(1);
+		Q.error(String(e.message ?? e)), process.exit(1);
 	}
-	await (await ne.createServer({
-		root: L,
+	await (await j.createServer({
+		root: P,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		ssr: { noExternal: ["react-intl", "@voltro/i18n"] },
 		resolve: {
@@ -3763,131 +4290,137 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 				"@voltro/i18n"
 			],
 			alias: [
-				...Me ? [{
+				...je ? [{
 					find: "@voltro/devtools/styles.css",
-					replacement: O(Me, "src/styles.css")
+					replacement: I(je, "src/styles.css")
 				}, {
 					find: "@voltro/devtools",
-					replacement: O(Me, "src/index.ts")
+					replacement: I(je, "src/index.ts")
 				}] : [],
-				...q ? [
+				...Pe ? [
 					{
 						find: "@voltro/ui-shadcn/tokens.css",
-						replacement: O(q, "src/tokens.css")
+						replacement: I(Pe, "src/tokens.css")
 					},
 					{
 						find: "@voltro/ui-shadcn/cn",
-						replacement: O(q, "src/cn.ts")
+						replacement: I(Pe, "src/cn.ts")
 					},
 					{
 						find: "@voltro/ui-shadcn/brand",
-						replacement: O(q, "src/brand/voltroLogo.tsx")
+						replacement: I(Pe, "src/brand/voltroLogo.tsx")
 					},
 					{
 						find: "@voltro/ui-shadcn",
-						replacement: O(q, "src/index.ts")
+						replacement: I(Pe, "src/index.ts")
 					}
 				] : [],
-				...pt(e)
+				...Rt(e)
 			]
 		},
 		optimizeDeps: {
-			include: [...a.map((e) => `${e.pkg}/rpcGroup`), ...Ie],
-			force: Le
+			include: [...a.map((e) => `${e.pkg}/rpcGroup`), ...Fe],
+			force: Ie
 		},
-		customLogger: dt(),
+		customLogger: It(),
 		plugins: [
-			hr(O(e, "src", "pages")),
-			re(),
-			I(),
-			B,
-			se,
+			yi(I(e, "src", "pages")),
+			Cn({
+				root: e,
+				config: D(n.images)
+			}),
+			On(e, n.fonts),
+			Rn(e, n.feeds ?? [], n.seo?.siteUrl),
+			M(),
+			N(),
+			oe,
+			W,
 			pe,
-			he,
 			ge,
-			ye,
-			ke,
-			...be ? [be] : []
+			_e,
+			be,
+			Oe,
+			...Se ? [Se] : []
 		],
 		server: {
 			port: l,
 			strictPort: !0,
 			host: !0,
 			allowedHosts: n.allowedHosts === !0 || [...n.allowedHosts ?? []],
-			proxy: K,
-			fs: { allow: [e, ...Pi(e)] }
+			proxy: ve,
+			fs: { allow: [e, ...Ya(e)] }
 		},
 		appType: "spa",
-		cacheDir: O(L, ".vite"),
-		publicDir: O(e, "public")
-	})).listen(), Ei.info(`v${je} ready in ${Date.now() - Ae}ms`, {
-		version: je,
-		bootMs: Date.now() - Ae
-	}), Z.info(`listening on http://localhost:${l}`, {
+		cacheDir: I(P, ".vite"),
+		publicDir: I(e, "public")
+	})).listen(), Ba.info(`v${Ae} ready in ${Date.now() - ke}ms`, {
+		version: Ae,
+		bootMs: Date.now() - ke
+	}), Q.info(`listening on http://localhost:${l}`, {
 		port: l,
 		app: n.name ?? "(unnamed)"
 	});
-	for (let e of a) e.proxyTarget && (Z.info(`proxy /ws/${e.name} → ${e.proxyTarget}`, {
+	for (let e of a) e.proxyTarget && (Q.info(`proxy /ws/${e.name} → ${e.proxyTarget}`, {
 		api: e.name,
 		target: e.proxyTarget
-	}), Z.info(`proxy /_voltro/api/${e.name} → ${e.proxyTarget.replace(/^ws/, "http")}/_voltro/inspect`, { api: e.name }));
+	}), Q.info(`proxy /_voltro/api/${e.name} → ${e.proxyTarget.replace(/^ws/, "http")}/_voltro/inspect`, { api: e.name }));
 	try {
-		await x({
-			id: b,
-			name: y,
+		await ee({
+			id: x,
+			name: b,
 			kind: "web",
 			url: `http://localhost:${l}`,
 			pid: process.pid,
 			status: "live",
-			logFile: D.path
+			logFile: S.path
 		});
-		let t = yr(e);
+		let t = Ci(e);
 		if (t) {
-			let e = await kr({ dashboardAppPath: t });
-			e.status === "launched" ? Z.info(`dashboard launched at http://localhost:${e.port}`, { port: e.port }) : e.status === "already-running" && Z.debug(`dashboard already running on :${e.port}`, { port: e.port });
+			let e = await Ni({ dashboardAppPath: t });
+			e.status === "launched" ? Q.info(`dashboard launched at http://localhost:${e.port}`, { port: e.port }) : e.status === "already-running" && Q.debug(`dashboard already running on :${e.port}`, { port: e.port });
 		}
 		setInterval(() => {
-			x({
-				id: b,
-				name: y,
+			ee({
+				id: x,
+				name: b,
 				kind: "web",
 				url: `http://localhost:${l}`,
 				pid: process.pid,
 				status: "live",
-				logFile: D.path
+				logFile: S.path
 			}).catch(() => {});
 		}, 1e4).unref();
 		let n = () => {
-			C(b), D.dispose();
+			ne(x), S.dispose();
 		};
 		process.on("SIGINT", n), process.on("SIGTERM", n);
 	} catch (e) {
-		Z.warn("runtime-registry write failed", {}, e);
+		Q.warn("runtime-registry write failed", {}, e);
 	}
-	return z({
+	return ue({
 		app: n.name ?? "unnamed",
 		kind: "web",
 		url: `http://localhost:${l}`,
-		bootMs: Date.now() - Ae
+		bootMs: Date.now() - ke
 	}), new Promise(() => {});
-}, fa = async (t) => {
+}, Ao = async (t) => {
 	e("serve");
-	let n = await ua(t);
+	let n = await Do(t);
 	if (!n) return {
 		ran: !1,
 		exitCode: 0
 	};
-	let i = Date.now(), a = Z.child("serve");
+	let i = Date.now(), a = Q.child("serve");
 	a.info("booting voltro serve (preview)", { app: n.name ?? "(unnamed)" });
-	let o = await ea(t, n);
+	let o = await _o(t, n);
 	for (let e of o) a.info("api wired", {
 		name: e.name,
 		pkg: e.pkg
 	});
-	await sa(t, n, o);
+	await wo(t, n, o);
 	{
-		let { pages: e } = await $(O(t, "src", "pages"));
-		await un({
+		let { pages: e } = await ro(I(t, "src", "pages"));
+		await mr({
 			appRoot: t,
 			pages: e
 		});
@@ -3896,12 +4429,12 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		kind: "web",
 		configPort: n.port,
 		env: process.env
-	}).port, c = await De("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = O(t, ".framework");
-	Z.info("running production build"), await c.build({
+	}).port, c = await Xe("vite", () => import("vite")), l = (await import("@vitejs/plugin-react")).default, u = I(t, ".framework");
+	Q.info("running production build"), await c.build({
 		root: u,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [l()],
-		customLogger: dt(),
+		customLogger: It(),
 		resolve: { dedupe: [
 			"react",
 			"react-dom",
@@ -3910,9 +4443,9 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		] },
 		build: {
 			outDir: "dist",
-			rollupOptions: { output: { manualChunks: Ii } }
+			rollupOptions: { output: { manualChunks: Za } }
 		},
-		publicDir: O(t, "public")
+		publicDir: I(t, "public")
 	});
 	let d = (await c.preview({
 		root: u,
@@ -3923,7 +4456,7 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 		label: "Local",
 		url: e
 	})) ?? [];
-	return z({
+	return ue({
 		app: n.name ?? "unnamed",
 		kind: "preview",
 		url: f,
@@ -3932,4 +4465,4 @@ The wrapper is what carries \`match\`, and what lets \`voltro doctor\` report wh
 	}), new Promise(() => {});
 };
 //#endregion
-export { Kt as $, ui as A, De as At, yr as B, wi as C, Le as Ct, di as D, Pe as Dt, yi as E, Ie as Et, Ur as F, In as G, Xn as H, Jr as I, vn as J, jn as K, br as L, Zr as M, Kr as N, pi as O, Me as Ot, Wr as P, un as Q, vr as R, Ti as S, Be as St, vi as T, Fe as Tt, Kn as U, tr as V, Wn as W, gn as X, bn as Y, hn as Z, da as _, et as _t, aa as a, Qt as at, $ as b, nt as bt, Hi as c, Ht as ct, Vi as d, xe as dt, Jt as et, ua as f, Dt as ft, na as g, Qe as gt, Qi as h, pt as ht, oa as i, $t as it, _i as j, bi as k, je as kt, Bi as l, Rt as lt, Zi as m, mt, ia as n, Xt as nt, Ui as o, Wt as ot, ea as p, gt as pt, yn as q, $i as r, Zt as rt, la as s, zt as st, Li as t, Yt as tt, Q as u, Vt as ut, fa as v, $e as vt, fi as w, Re as wt, sa as x, We as xt, Ii as y, tt as yt, kr as z };
+export { Fr as $, Oa as A, Vt as At, Xi as B, st as Bt, wo as C, gn as Ct, Fa as D, pn as Dt, La as E, un as Et, _a as F, wt as Ft, Si as G, tt as Gt, qi as H, at as Ht, wa as I, Et as It, ai as J, Ni as K, et as Kt, ma as L, Dt as Lt, Sa as M, Rt as Mt, Ca as N, Ct as Nt, Pa as O, Le as Ot, ha as P, Tt as Pt, Br as Q, xa as R, ht as Rt, Oo as S, Cn as St, za as T, mn as Tt, Qi as U, ot as Ut, Ji as V, ct as Vt, wi as W, rt as Wt, Xr as X, ei as Y, Jr as Z, yo as _, Wn as _t, Co as a, mr as at, Za as b, An as bt, Eo as c, er as ct, $ as d, ir as dt, Cr as et, no as f, rr as ft, ho as g, Un as gt, mo as h, qn as ht, Ha as i, yr as it, ga as j, zt as jt, ka as k, Qt as kt, io as l, tr as lt, _o as m, Yn as mt, xo as n, wr as nt, So as o, Zn as ot, Do as p, Jn as pt, Ci as q, Xe as qt, go as r, br as rt, ao as s, $n as st, Qa as t, Sr as tt, to as u, nr as ut, ko as v, Fn as vt, Ra as w, dn as wt, ro as x, En as xt, Ao as y, Mn as yt, ta as z, ut as zt };