@voltro/cli 0.52.0 → 0.53.0

package/dist/{checkCommand-COmqc2cB.js → checkCommand-C5elt0tW.js}

@@ -1,10 +1,10 @@
 import { t as e } from "./cliArgs-D4p8n7EE.js";
-import { a as t, l as n } from "./codegen-VF479Cnb.js";
+import { a as t, l as n } from "./codegen-FEk8AZHb.js";
 import { r } from "./appGraph-yRuKjOba.js";
 import { n as i } from "./cliOutput-D1tSBoRM.js";
 import { n as a, o, r as s, t as c } from "./inspectFetch-EMuhTG_9.js";
-import { r as l } from "./fileTaxonomy-DvDUV9wq.js";
-import { S as u } from "./doctorCommand-DtfJ3FA6.js";
+import { r as l } from "./fileTaxonomy-B7uxipWS.js";
+import { S as u } from "./doctorCommand-etMkflRc.js";
 import { resolve as d } from "node:path";
 import { readdirSync as f, statSync as p } from "node:fs";
 import { isReactivityChannelKey as m } from "@voltro/protocol";
@@ -170,9 +170,9 @@ var h = (e) => (e === void 0 ? [] : typeof e == "string" ? [e] : e).filter((e) =
 	let t = e.severity === "error" ? "✗ error" : "⚠ warn", n = e.file ? ` (${e.file})` : "";
 	return `${t}  ${e.rule}  ${e.node}${n}\n    ${e.breaks.join("; ")}\n    fix: ${e.fix}`;
 }).join("\n"), O = async (e) => {
-	let { walk: t, loadDiscovered: n, loadApiConfig: r } = await import("./dev--A3nsxA3.js"), { buildRpcEntry: i } = await import("./manifestBuild-CPjhvM62.js"), { buildCapabilityManifest: a } = await import("./inspect-CuGDYES0.js"), { relative: o } = await import("node:path"), s = await n(await t(e)), c = await r(e).then((e) => e?.plugins ?? []).catch(() => []);
+	let { walk: t, loadDiscovered: n, loadApiConfig: r } = await import("./dev-GjJWAYo2.js"), { buildRpcEntry: i } = await import("./manifestBuild-C4-J1-m_.js"), { buildCapabilityManifest: a } = await import("./inspect-CuoDInfZ.js"), { relative: o } = await import("node:path"), s = await n(await t(e)), c = await r(e).then((e) => e?.plugins ?? []).catch(() => []);
 	try {
-		let { mergePluginRoutesInto: e } = await import("./dev--A3nsxA3.js");
+		let { mergePluginRoutesInto: e } = await import("./dev-GjJWAYo2.js");
 		e({
 			plugins: c,
 			queries: s.queries,
@@ -189,7 +189,7 @@ var h = (e) => (e === void 0 ? [] : typeof e == "string" ? [e] : e).filter((e) =
 		...s.mutations.map((e) => l(e.descriptor, "mutation", e.file)),
 		...s.actions.map((e) => l(e.descriptor, "action", e.file)),
 		...s.streams.map((e) => l(e.descriptor, "stream", e.file))
-	], { assembleFrameworkTables: d } = await import("./frameworkTableAssembly-C6ETawPR.js"), f = await d({ root: e }).catch((e) => (console.warn(`\n⚠  plugin tables could not be collected — this report is INCOMPLETE.\n   ${e instanceof Error ? e.message.split("\n")[0] : String(e)}\n`), [])), p = new Set(s.tables.map((e) => e.tableName)), m = [...[...p].map((e) => ({ name: e })), ...f.map((e) => e.tableName).filter((e) => !p.has(e)).map((e) => ({
+	], { assembleFrameworkTables: d } = await import("./frameworkTableAssembly-C_7Z-rMs.js"), f = await d({ root: e }).catch((e) => (console.warn(`\n⚠  plugin tables could not be collected — this report is INCOMPLETE.\n   ${e instanceof Error ? e.message.split("\n")[0] : String(e)}\n`), [])), p = new Set(s.tables.map((e) => e.tableName)), m = [...[...p].map((e) => ({ name: e })), ...f.map((e) => e.tableName).filter((e) => !p.has(e)).map((e) => ({
 		name: e,
 		framework: !0
 	}))], h = c;

package/dist/{checkCommand-2SbqzukH.js → checkCommand-D2ZduVlh.js}

@@ -1,2 +1,2 @@
-import { a as e, i as t, o as n } from "./checkCommand-COmqc2cB.js";
+import { a as e, i as t, o as n } from "./checkCommand-C5elt0tW.js";
 export { t as offlineManifest, e as runCheckCommand, n as toInput };

package/dist/codegen-BWpt3VgF.js

@@ -0,0 +1,2 @@
+import { t as e } from "./codegen-FEk8AZHb.js";
+export { e as checkRpcGroupFreshness };

package/dist/{codegen-VF479Cnb.js → codegen-FEk8AZHb.js}

@@ -1,4 +1,4 @@
-import { b as e, o as t, y as n } from "./fileConventions-DOqD3lPS.js";
+import { b as e, s as t, x as n } from "./fileConventions-DASGEmj-.js";
 import { dirname as r, join as i, relative as a, resolve as o } from "node:path";
 import { promises as s, readFileSync as c } from "node:fs";
 import { pathToFileURL as l } from "node:url";
@@ -162,7 +162,7 @@ var h = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.http
 				await a(o);
 				continue;
 			}
-			s.isFile() && (e.test(s.name) || n.test(s.name)) && r.push(o);
+			s.isFile() && (n.test(s.name) || e.test(s.name)) && r.push(o);
 		}
 	};
 	return await a(t), r;

package/dist/{codegenCommand-DCdG2JN-.js → codegenCommand-BOiWQ5hz.js}

@@ -1,7 +1,7 @@
-import { Cn as e, Sn as t, V as n, l as r, u as i } from "./dev-CRHoCEiy.js";
-import { Ct as a } from "./webDev-BgWL9gKV.js";
-import { n as o } from "./frameworkTableAssembly-w-XnLa3q.js";
-import { i as s, r as c } from "./codegen-VF479Cnb.js";
+import { En as e, Tn as t, V as n, l as r, u as i } from "./dev-C6LGF4iY.js";
+import { Bt as a } from "./webDev-oczpugbx.js";
+import { n as o } from "./frameworkTableAssembly-DKx3ba3S.js";
+import { i as s, r as c } from "./codegen-FEk8AZHb.js";
 import { basename as l, join as u, relative as d, resolve as f } from "node:path";
 import { promises as p } from "node:fs";
 import { pathToFileURL as m } from "node:url";

package/dist/{codemodRunner-r7J9lIa7.js → codemodRunner-BjtB2lq6.js}

@@ -1,7 +1,7 @@
-import { E as e, O as t, P as n, T as r, d as i, f as a, h as o, i as s, l as c, r as l, u } from "./fileConventions-DOqD3lPS.js";
-import { t as d } from "./pageConvention-CzUiSbtU.js";
+import { D as e, E as t, F as n, d as r, f as i, g as a, i as o, k as s, p as c, r as l, u } from "./fileConventions-DASGEmj-.js";
+import { t as d } from "./pageConvention-C938S8oC.js";
 import { r as f } from "./tsconfigPaths-BWXBWgcl.js";
-import { a as p, i as m, t as h } from "./fileTaxonomy-DvDUV9wq.js";
+import { a as p, i as m, t as h } from "./fileTaxonomy-B7uxipWS.js";
 import { basename as g, dirname as _, join as v, relative as ee } from "node:path";
 import { existsSync as y, readFileSync as te, statSync as ne } from "node:fs";
 import { execFileSync as re } from "node:child_process";
@@ -1503,7 +1503,7 @@ var S = (e, t, n) => {
 }, dt = /\.page\.tsx$/, F = (e) => {
 	let t = e.includes("\\src\\pages\\") ? "\\src\\pages\\" : "/src/pages/", n = e.indexOf(t);
 	return n === -1 ? null : e.slice(0, n);
-}, ft = (e) => e.endsWith(".tsx") && !o.has(e) && !d(e) && !/\.island\.tsx$/.test(e) && !dt.test(e), pt = w({
+}, ft = (e) => e.endsWith(".tsx") && !a.has(e) && !d(e) && !/\.island\.tsx$/.test(e) && !dt.test(e), pt = w({
 	version: "0.14.0",
 	id: "0.14.0/03_pages-suffix",
 	title: "Pages are declared with a .page.tsx suffix",
@@ -1553,18 +1553,18 @@ var S = (e, t, n) => {
 	}
 }), mt = [
 	/\.page\.tsx$/,
-	a,
-	s,
+	c,
+	o,
 	l,
-	u,
-	t,
+	r,
+	s,
 	i,
-	c,
+	u,
 	e,
-	r
+	t
 ], ht = (e) => {
 	let t = g(e);
-	return !/\.tsx?$/.test(t) || o.has(t) || n(t) || t === "index.ts" || t === "index.tsx" || t === "app.config.ts" ? !1 : !mt.some((e) => e.test(t));
+	return !/\.tsx?$/.test(t) || a.has(t) || n(t) || t === "index.ts" || t === "index.tsx" || t === "app.config.ts" ? !1 : !mt.some((e) => e.test(t));
 }, gt = (e) => {
 	let t = [], n = [], r = [], i = [];
 	for (let [a, o] of e.getExportedDeclarations()) {
@@ -6032,6 +6032,104 @@ var S = (e, t, n) => {
 			"    (that is what plugin-ratelimit's httpShield does now — a Redis outage",
 			"    must not become a self-inflicted API outage)."
 		].join("\n")
+	}),
+	w({
+		version: "0.53.0",
+		id: "0.53.0/01_conflict-columns-take-the-table",
+		title: "`missingConflictColumns` takes the table and classifies absent vs NULL",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("missingConflictColumns")),
+		note: [
+			"`missingConflictColumns(conflictColumns, row)` is now",
+			"`missingConflictColumns(table, conflictColumns, row)`, and it returns",
+			"`{ column, reason: \"absent\" | \"null\" }` entries instead of bare names.",
+			"",
+			"Pass the table definition (the same value `missingRequiredColumns` takes).",
+			"With it, DB-generated columns (`generatedAs`) are skipped: the database",
+			"computes those and rejects an explicit value, so their absence from a",
+			"payload is correct — the old signature could not know that and flagged",
+			"them. Pass `undefined` only when no definition is available; nothing is",
+			"skipped then.",
+			"",
+			"The `reason` field separates two different bugs the old flat list merged:",
+			"`absent` (the payload never set the key) and `null` (the key is present but",
+			"NULL — and NULL never matches a unique conflict target, so the write would",
+			"always INSERT; use a plain insert for NULL-keyed rows, or make the column",
+			"NOT NULL)."
+		].join("\n")
+	}),
+	w({
+		version: "0.53.0",
+		id: "0.53.0/02_empty-struct-input-flipped",
+		title: "`input: Schema.Struct({})` procedures flipped from accept-everything to reject-everything in 0.37.0",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /input:\s*Schema\.Struct\(\{\s*\}\)/.test(e.getFullText())),
+		note: [
+			"This repository declares procedures with `input: Schema.Struct({})`. Since",
+			"0.37.0 (an undeclared input field rejects the call), that shape flipped",
+			"HARDER than any other: an empty struct used to accept every payload, and",
+			"now rejects every non-empty one. A caller that always sent a field —",
+			"a table hook sending `{ limit }`, say — fails on the live subscription and",
+			"the SSR seed of the same page at once.",
+			"",
+			"Check those procedures first — the list takes a minute to produce and",
+			"yields the most expensive hits:",
+			"",
+			"  grep -rn 'input: Schema.Struct({})' <api root>",
+			"",
+			"For each: either the callers genuinely send nothing (fine — the empty",
+			"struct is the strongest declaration a procedure can make), or a caller",
+			"sends fields the schema must now declare."
+		].join("\n")
+	}),
+	w({
+		version: "0.53.0",
+		id: "0.53.0/03_validation-messages-are-ids",
+		title: "Form validation messages are ids + catalog now, not effect developer text",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+			let t = e.getFullText();
+			return /Expected .*, actual|is missing/.test(t) || /\.errors\[|useFormBinding\(/.test(t);
+		}),
+		note: [
+			"Form validation messages changed shape:",
+			"",
+			"- `errors[field]` values are TRANSLATED texts from a message catalog",
+			"  (built-in en/de, locale from `<html lang>` or the `locale:` option),",
+			"  no longer effect developer sentences. If you laid regexes over",
+			"  \"Expected string, actual undefined\" to derive translation keys,",
+			"  delete them and wire your catalog instead:",
+			"",
+			"    useFormBinding('users.create', { messages: (id, params) => t(id, params) })",
+			"",
+			"- `errors` keys are the FULL dotted path now (`address.city`,",
+			"  `entries.0.startsAt`) — a nested issue no longer collapses to its",
+			"  top-level segment. Code reading `errors.address` for a nested struct",
+			"  must read the leaf path it renders.",
+			"",
+			"- `validateFields` also returns `issues` — `{ path, id, params, fallback }`",
+			"  per failure — for widget kits that resolve messages themselves."
+		].join("\n")
+	}),
+	w({
+		version: "0.53.0",
+		id: "0.53.0/04_widget-kind-gained-array",
+		title: "WidgetKind gained 'array' and 'reference' — total widget registries need two new entries",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
+		note: [
+			"This repository types a widget registry as `Record<WidgetKind, …>`.",
+			"`WidgetKind` gained `'array'` (arrays of structs are field arrays now)",
+			"and `'reference'` (a formField({ reference }) table picker), so the total",
+			"map needs two new entries. With no dedicated UI yet, map both to your",
+			"custom/render-prop widget — that is what the built-in registry does:",
+			"",
+			"  array: CustomWidget,",
+			"  reference: CustomWidget,",
+			"",
+			"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
+			"need nothing."
+		].join("\n")
 	})
 ], J = /* @__PURE__ */ new Set([
 	"node_modules",

package/dist/{commands-Cc_nV8WI.js → commands-DyxAmhP0.js}

@@ -80,7 +80,7 @@ var l = () => {
 		name: "init",
 		summary: "Initialise the current directory as a Voltro workspace root (pnpm-workspace.yaml, root scripts, .gitignore, git init). Idempotent; takes no arguments.",
 		status: "wired",
-		run: (e) => import("./metaCommands-C6RFmF1r.js").then((t) => t.runInit(e)),
+		run: (e) => import("./metaCommands-Cn2oboG4.js").then((t) => t.runInit(e)),
 		help: {
 			usage: "",
 			examples: [["voltro init", "make the current directory a workspace root, then `voltro create-project <name>`"]],
@@ -91,7 +91,7 @@ var l = () => {
 		name: "dev",
 		summary: "Start the local development server (auto-discovers routes / mutations).",
 		status: "wired",
-		run: (e) => import("./dev--A3nsxA3.js").then((t) => t.runDev(e)),
+		run: (e) => import("./dev-GjJWAYo2.js").then((t) => t.runDev(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro dev", "boot the app in the current directory"], ["voltro dev apps/acme/api", "boot a specific app"]],
@@ -109,7 +109,7 @@ var l = () => {
 		name: "dashboard",
 		summary: "Serve the DevTools dashboard standalone (from @voltro/dashboard). Targets via VOLTRO_DASHBOARD_APPS; --port to override.",
 		status: "wired",
-		run: (e) => import("./dashboardCommand-C-gKvwqh.js").then((t) => t.runDashboardCommand(e)),
+		run: (e) => import("./dashboardCommand-BdKTyT13.js").then((t) => t.runDashboardCommand(e)),
 		help: {
 			usage: "[--port <n>]",
 			flags: [["--port <n>", "port to serve the dashboard on"]],
@@ -121,7 +121,7 @@ var l = () => {
 		name: "check",
 		summary: "Verify the app graph (blast-radius checks) against a running api; LLM-shaped --json diagnostics. Flags: --json, --process <p>, --diff removeTable:<name>.",
 		status: "wired",
-		run: (e) => import("./checkCommand-2SbqzukH.js").then((t) => t.runCheckCommand(e)),
+		run: (e) => import("./checkCommand-D2ZduVlh.js").then((t) => t.runCheckCommand(e)),
 		help: {
 			usage: "[--json] [--offline] [--process <name>] [--diff removeTable:<name>]",
 			flags: [
@@ -155,7 +155,7 @@ var l = () => {
 		name: "webhooks",
 		summary: "Outbound-webhook artefacts. `consumer` generates the ZERO-DEPENDENCY Standard-Webhooks verification package a subscriber installs, from this app's own declared events; `events` lists the events a subscriber can register for. Usage: voltro webhooks <consumer|events> [path] [--out <dir>] [--name <pkg>] [--json].",
 		status: "wired",
-		run: (e) => import("./webhooksCommand-CoIO3jbj.js").then((t) => t.runWebhooksCommand(e)),
+		run: (e) => import("./webhooksCommand-4SVPDjKg.js").then((t) => t.runWebhooksCommand(e)),
 		help: {
 			usage: "<consumer|events> [path] [--out <dir>] [--name <pkg>] [--json]",
 			flags: [
@@ -171,7 +171,7 @@ var l = () => {
 		name: "evolve",
 		summary: "Schema-evolution copilot: propose an observed-graph-driven codemod + a branch-verified backfill for a schema change (rename/retype/split/drop a column, rename a table). Dry-run by default; --write applies. Usage: voltro evolve rename-column <table>.<col> --to <newName> [--write] [--json].",
 		status: "wired",
-		run: (e) => import("./evolveCommand-CMROeKeA.js").then((t) => t.runEvolveCommand(e)),
+		run: (e) => import("./evolveCommand-CG0_ebO5.js").then((t) => t.runEvolveCommand(e)),
 		help: {
 			usage: "<rename-column|rename-table|retype-column|split-column|drop-column> <target> [--to <new>] [--write]",
 			flags: [
@@ -188,7 +188,7 @@ var l = () => {
 		name: "codegen",
 		summary: "Emit rpcGroup.generated.ts from discovered route / mutation descriptors.",
 		status: "wired",
-		run: (e) => import("./codegenCommand-DCdG2JN-.js").then((t) => t.runCodegenCommand(e)),
+		run: (e) => import("./codegenCommand-BOiWQ5hz.js").then((t) => t.runCodegenCommand(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro codegen", "regenerate rpcGroup.generated.ts for the app in the cwd"]],
@@ -199,7 +199,7 @@ var l = () => {
 		name: "migrate",
 		summary: "Apply the declared schema to the database (alias of `db apply` — diffs declared vs live and emits the ALTERs). `--create-only` for the bootstrap-only CREATE TABLE IF NOT EXISTS path.",
 		status: "wired",
-		run: (e) => import("./migrate-D0F-eTlK.js").then((t) => t.runMigrateCommand(e)),
+		run: (e) => import("./migrate-Cko9rswM.js").then((t) => t.runMigrateCommand(e)),
 		help: {
 			usage: "[app] [--create-only]",
 			flags: [["--create-only", "only CREATE TABLE IF NOT EXISTS — never ALTER (bootstrap)"]],
@@ -211,7 +211,7 @@ var l = () => {
 		name: "test",
 		summary: "Run vitest against the app at the cwd (auto-discovers *.test.ts/tsx).",
 		status: "wired",
-		run: (e) => import("./test-f3amja6a.js").then((t) => t.runTestCommand(e)),
+		run: (e) => import("./test-BWPQcRoB.js").then((t) => t.runTestCommand(e)),
 		help: {
 			usage: "[dir] [filter…] [--watch] [-t <pattern>]",
 			flags: [
@@ -259,7 +259,7 @@ var l = () => {
 		name: "info",
 		summary: "Report versions (CLI, node, every installed @voltro/* — flags lockstep skew), package manager, and dialect. --json for CI. Exits 1 on version skew.",
 		status: "wired",
-		run: (e) => import("./infoCommand-DXM868o_.js").then((t) => t.runInfoCommand(e)),
+		run: (e) => import("./infoCommand-_53iOc_j.js").then((t) => t.runInfoCommand(e)),
 		help: {
 			usage: "[--json]",
 			flags: [["--json", "machine-readable report"]],
@@ -280,7 +280,7 @@ var l = () => {
 		name: "env",
 		summary: "Inspect/sync the typed-env manifest. Subcommands: check (default), sync (.env.example), types (env.generated.d.ts for CI tsc), turbo.",
 		status: "wired",
-		run: (e) => import("./envCommand-D4gCrrTZ.js").then((t) => t.runEnvCommand(e)),
+		run: (e) => import("./envCommand-dSyKvRkM.js").then((t) => t.runEnvCommand(e)),
 		help: {
 			usage: "[check|sync|types|turbo] [--force]",
 			flags: [["--force", "overwrite the generated file instead of refusing on a conflict"]],
@@ -309,12 +309,12 @@ var l = () => {
 		run: async (e) => {
 			let t = e.find((e) => !e.startsWith("-")) ?? process.cwd();
 			if (e.includes("--preflight")) {
-				let { runServePreflight: e } = await import("./doctorCommand-CqoWA2p5.js");
+				let { runServePreflight: e } = await import("./doctorCommand-B0hX0tdz.js");
 				return e(o(t), !0);
 			}
-			let { tryRunWebServe: n } = await import("./webDev-CZbTsDcH.js"), r = await n(o(t));
+			let { tryRunWebServe: n } = await import("./webDev-C7jWJ5dX.js"), r = await n(o(t));
 			if (!r.ran) {
-				let { runServeDispatch: t } = await import("./serveCommand-DLc-BznW.js");
+				let { runServeDispatch: t } = await import("./serveCommand-DsnrVN3U.js");
 				return t(e);
 			}
 			return r.exitCode;
@@ -342,13 +342,13 @@ var l = () => {
 		handlesHelp: !0,
 		summary: "Preflight an app for production: the precompiled serve bundle, hand-rolled primitives (naming the shipped one), @voltro/* version skew, executors with no access check, `.serverOnly()` leaks, and junction-FK gaps.",
 		status: "wired",
-		run: (e) => import("./doctorCommand-CqoWA2p5.js").then((t) => t.runDoctorCommand(e))
+		run: (e) => import("./doctorCommand-B0hX0tdz.js").then((t) => t.runDoctorCommand(e))
 	},
 	{
 		name: "build",
 		summary: "Production build for a web app (vite build + per-page SSG pre-render).",
 		status: "wired",
-		run: (e) => import("./build-CPgcMQug.js").then((t) => t.runBuildCommand(e)),
+		run: (e) => import("./build-D-OnvNMf.js").then((t) => t.runBuildCommand(e)),
 		help: {
 			usage: "[app] [--target <t>]",
 			flags: [["--target <t>", "build target"]],
@@ -364,7 +364,7 @@ var l = () => {
 		name: "prune-runtime",
 		summary: "Trim a deployed web tree’s node_modules to the reachable runtime set (standalone image slimming).",
 		status: "wired",
-		run: (e) => import("./runtimeTrace-BPQyCmC5.js").then((t) => t.runPruneRuntimeCommand(e)),
+		run: (e) => import("./runtimeTrace-c0APJz7E.js").then((t) => t.runPruneRuntimeCommand(e)),
 		hidden: !0
 	},
 	{
@@ -382,7 +382,7 @@ var l = () => {
 		name: "dormancy",
 		summary: "Single-node scale-to-zero: front the API with a wake-orchestrator that stops the app when idle and brings it back on a request or a due wakeup (cron/workflow). Needs a SQL store. Flags: --port, --app-port, --idle-grace-ms, --tick-ms.",
 		status: "wired",
-		run: (e) => import("./dormancyCommand-Drn7o0No.js").then((t) => t.runDormancyCommand(e)),
+		run: (e) => import("./dormancyCommand-UwZ1AZzB.js").then((t) => t.runDormancyCommand(e)),
 		help: {
 			usage: "[app] [--port <n>] [--app-port <n>] [--idle-grace-ms <n>] [--tick-ms <n>]",
 			flags: [
@@ -399,7 +399,7 @@ var l = () => {
 		name: "start",
 		summary: "Production runtime: serves dist + SSR-on-demand for ssr/isr pages.",
 		status: "wired",
-		run: (e) => import("./start-DfL3fOiN.js").then((t) => t.runStartCommand(e)),
+		run: (e) => import("./start-BJzZLbt8.js").then((t) => t.runStartCommand(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro start", "serve a built web app (dist + SSR-on-demand)"]],
@@ -410,7 +410,7 @@ var l = () => {
 		name: "deploy",
 		summary: "Show deploy options + `voltro deploy plan` auto-detects the target tier (static-cdn / container / functions) per app + function.",
 		status: "wired",
-		run: (e) => import("./metaCommands-C6RFmF1r.js").then((t) => t.runDeploy(e)),
+		run: (e) => import("./metaCommands-Cn2oboG4.js").then((t) => t.runDeploy(e)),
 		help: {
 			usage: "[plan]",
 			examples: [["voltro deploy plan", "the auto-detected target tier per app + function"]]
@@ -428,13 +428,13 @@ var l = () => {
 		handlesHelp: !0,
 		summary: "Deploy a pre-built static site (./dist) to a cheap external host. Subcommands: hosts, deploy --host cloudflare-pages|s3|netlify [--spa] [--dry-run].",
 		status: "wired",
-		run: (e) => import("./staticCommand-BwNEDlSU.js").then((t) => t.runStaticCommand(e))
+		run: (e) => import("./staticCommand-xlSL-IWk.js").then((t) => t.runStaticCommand(e))
 	},
 	{
 		name: "privacy",
 		summary: "GDPR / DSAR tooling. scope [root] — derive the subject graph from the schema AND print what it cannot see. export <subjectId> --url <app> / erase <subjectId> --url <app> --confirm — run against the RUNNING app's admin-gated governance endpoint, so the erasure log and configured anonymize fields apply.",
 		status: "wired",
-		run: (e) => import("./privacyCommand-DGdopOI6.js").then((t) => t.runPrivacyCommand(e)),
+		run: (e) => import("./privacyCommand-DWTQMC6R.js").then((t) => t.runPrivacyCommand(e)),
 		help: {
 			usage: e(n),
 			examples: [
@@ -453,7 +453,7 @@ var l = () => {
 		name: "db",
 		summary: "Database subcommands. Declarative flow: plan, apply, branch, plans, drift [--accept], squash, restore-snapshot. File migrations: generate [name], migrate, rollback, status, files, rollback-file. Data + housekeeping: seed, gc-snapshots, adopt. Credentials at rest: scan-credentials (find plaintext), encrypt-column (migrate a populated column onto .encrypted()).",
 		status: "wired",
-		run: (e) => import("./dbCommand-DNb6yeOG.js").then((t) => t.runDbCommand(e)),
+		run: (e) => import("./dbCommand-B1EXBC6f.js").then((t) => t.runDbCommand(e)),
 		help: {
 			usage: e(t),
 			examples: [
@@ -469,7 +469,7 @@ var l = () => {
 		name: "data",
 		summary: "Export/import + backup/restore of app data. Logical (rows + optional assets): export <dir> [--tenant <id>|--tables a,b|--exclude a,b] [--assets] [--compression zstd|gzip|none] [--consistency live|snapshot]; import <dir> [--assets] [--no-verify]; transfers — the history in all four directions, including a run in flight; inspect <file|dir>; unpack <file> <dir>. Native (vendor dump, no resume): backup <dir> [--assets] / restore <dir> [--assets] (pg_dump/mariadb-dump/…) — a restore marks the database in-progress until it finishes. Recovery: clear-replace-marker, clear-staging. Resumable + typed-NDJSON on the logical path; content-addressed assets on both.",
 		status: "wired",
-		run: (e) => import("./dataCommand-BgpBHnlB.js").then((t) => t.runDataCommand(e)),
+		run: (e) => import("./dataCommand-Bab9X7s8.js").then((t) => t.runDataCommand(e)),
 		help: {
 			usage: e(r),
 			flags: [
@@ -526,27 +526,27 @@ var l = () => {
 		handlesHelp: !0,
 		summary: "Generate strong secrets. `generate [purpose]` (data-transfer, session, bundle-key, field-encryption, …) emits the right var+format; `generate` alone prints a generic secret; `list` shows all. Encrypted per-env storage is in Voltro Cloud.",
 		status: "wired",
-		run: (e) => import("./metaCommands-C6RFmF1r.js").then((t) => t.runSecret(e))
+		run: (e) => import("./metaCommands-Cn2oboG4.js").then((t) => t.runSecret(e))
 	},
 	{
 		name: "update",
 		handlesHelp: !0,
 		summary: "Upgrade the app to the latest framework: bump every @voltro/* dependency (across ALL workspace members, install once at the workspace root), then run the codemods shipped with the target version. Flags: --to <version>, --from <version>, --codemods-only, --dry-run, --force, --exact, --help. After: run `voltro db apply`.",
 		status: "wired",
-		run: (e) => import("./updateCommand-5gFVfK5q.js").then((t) => t.runUpdateCommand(e))
+		run: (e) => import("./updateCommand-Bqql_rsQ.js").then((t) => t.runUpdateCommand(e))
 	},
 	{
 		name: "_apply-codemods",
 		summary: "Internal: apply shipped codemods for a framework version jump (re-exec target of `voltro update`).",
 		status: "wired",
 		hidden: !0,
-		run: (e) => import("./updateCommand-5gFVfK5q.js").then((t) => t.runApplyCodemods(e))
+		run: (e) => import("./updateCommand-Bqql_rsQ.js").then((t) => t.runApplyCodemods(e))
 	},
 	{
 		name: "embeddings",
 		summary: "Embeddings tooling. Subcommand: backfill <table> --text <field> --vector <field> [--model <m>] [--model-field <f>] [--batch <n>] [--dry-run] — (re)embed rows the vectorEmbedding() mixin missed.",
 		status: "wired",
-		run: (e) => import("./embeddingsCommand-Z-jO1fWN.js").then((t) => t.runEmbeddingsCommand(e)),
+		run: (e) => import("./embeddingsCommand-C70zWHwo.js").then((t) => t.runEmbeddingsCommand(e)),
 		help: {
 			usage: "backfill <table> --text <field> --vector <field> [--model <m>] [--batch <n>] [--dry-run]",
 			flags: [
@@ -564,7 +564,7 @@ var l = () => {
 		name: "telemetry",
 		summary: "Report telemetry status — Voltro collects none (no phone-home, nothing to opt out of).",
 		status: "wired",
-		run: (e) => import("./metaCommands-C6RFmF1r.js").then((t) => t.runTelemetry(e)),
+		run: (e) => import("./metaCommands-Cn2oboG4.js").then((t) => t.runTelemetry(e)),
 		help: {
 			usage: "",
 			examples: [["voltro telemetry", "confirm what is collected: nothing"]],
@@ -592,7 +592,7 @@ var l = () => {
 		summary: "Ask a RUNNING app whether its declared access is enforced. `access` calls every guarded procedure with NO credentials and reports any that answer (--process, --url, --strict, --format).",
 		status: "wired",
 		handlesHelp: !0,
-		run: (e) => import("./probeCommand-C9gazU0H.js").then((t) => t.runProbeCommand(e))
+		run: (e) => import("./probeCommand-DkGGLknv.js").then((t) => t.runProbeCommand(e))
 	},
 	{
 		name: "schedule",

package/dist/{dashboardCommand-C-gKvwqh.js → dashboardCommand-BdKTyT13.js}

@@ -1,6 +1,6 @@
-import { f as e } from "./dev-CRHoCEiy.js";
-import { B as t, L as n } from "./webDev-BgWL9gKV.js";
-import { t as r } from "./start-jw89Xbqy.js";
+import { f as e } from "./dev-C6LGF4iY.js";
+import { W as t, q as n } from "./webDev-oczpugbx.js";
+import { t as r } from "./start-ekPan8BT.js";
 import { join as i } from "node:path";
 import { existsSync as a } from "node:fs";
 import { createLogger as o } from "@voltro/logger";
@@ -9,10 +9,10 @@ var s = o({ scope: "voltro:dashboard" }), c = (e, t) => {
 	let n = e.indexOf(t);
 	return n >= 0 ? e[n + 1] : void 0;
 }, l = async (o) => {
-	process.env[n] = "1";
+	process.env[t] = "1";
 	let l = c(o, "--port") ?? process.env.VOLTRO_DASHBOARD_PORT ?? "5179";
 	process.env.VOLTRO_DASHBOARD_PORT = l;
-	let u = t(process.cwd());
+	let u = n(process.cwd());
 	if (!u) return s.error("dashboard app not found. Install it with `pnpm add @voltro/dashboard`, or set VOLTRO_DASHBOARD_PATH to a dashboard app directory."), 1;
 	let d = a(i(u, ".framework", "dist", "index.html"));
 	return s.info(`serving the Voltro dashboard on :${l}`, {

package/dist/{dataCommand-BgpBHnlB.js → dataCommand-Bab9X7s8.js}

@@ -1,11 +1,11 @@
 import { i as e, t } from "./subcommandNames-DpYs3DXr.js";
 import { t as n } from "./cliError-BmdYnghb.js";
-import { B as r, c as i, i as a, o } from "./dev-CRHoCEiy.js";
+import { B as r, c as i, i as a, o } from "./dev-C6LGF4iY.js";
 import { n as s, t as c } from "./cliArgs-D4p8n7EE.js";
 import { r as l } from "./dialectDriver-czCHYpeH.js";
 import { i as u, n as d, r as f, t as p } from "./dataProfile-Du3ztYxv.js";
 import { o as m, t as h } from "./inspectFetch-EMuhTG_9.js";
-import { r as g } from "./dbCommand-sHedr-NJ.js";
+import { r as g } from "./dbCommand-06O2finM.js";
 import { resolve as _ } from "node:path";
 import { createLogger as v } from "@voltro/logger";
 import { DATA_TRANSFERS_TABLE as y, REPLACE_IN_PROGRESS_TABLE as b, _voltroDataTransfersTable as x, _voltroReplaceInProgressTable as S, connectionIdentity as C, derivedRowId as w, ensureTableRegistered as T, normaliseTarget as ee, sameDatabase as te, streamTable as ne } from "@voltro/database";