@voltro/cli 0.52.0 → 0.54.0

package/dist/{fileTaxonomy-DvDUV9wq.js → fileTaxonomy-CbyMQYx_.js}

@@ -1,4 +1,4 @@
-import { C as e, E as t, O as n, T as r, d as i, h as a, i as o, l as s, m as c, r as l, u } from "./fileConventions-DOqD3lPS.js";
+import { A as e, D as t, O as n, T as r, _ as i, d as a, f as o, g as s, i as c, p as l, r as u } from "./fileConventions-l-RIXbx8.js";
 import { n as d, t as f } from "./tsconfigPaths-BWXBWgcl.js";
 import { dirname as p, join as m, relative as h, resolve as g, sep as _ } from "node:path";
 import { existsSync as v, readFileSync as y, readdirSync as b, statSync as x } from "node:fs";
@@ -38,45 +38,45 @@ var T = ".voltro-vendored", E = (e, t) => {
 }, D = (e, t) => t.some((t) => e === t.dir || e.startsWith(`${t.dir}${_}`)), O = (e, t) => t.map((t) => `${h(e, t.dir) || "."}  (${t.source})`), k = [
 	{
 		id: "component.ui",
-		re: o,
+		re: c,
 		needsTest: !0
 	},
 	{
 		id: "component",
-		re: l,
+		re: u,
 		needsTest: !0
 	},
 	{
 		id: "hook",
-		re: u,
+		re: o,
 		needsTest: !0
 	},
 	{
 		id: "tracking",
-		re: t,
+		re: n,
 		needsTest: !0
 	},
 	{
 		id: "store",
-		re: e,
+		re: r,
 		needsTest: !0
 	},
 	{
 		id: "internal",
-		re: i,
+		re: l,
 		needsTest: !0
 	},
 	{
 		id: "fixture",
-		re: s,
+		re: a,
 		needsTest: !1
 	},
 	{
 		id: "types",
-		re: n,
+		re: e,
 		needsTest: !1
 	}
-], A = (e) => k.find((t) => t.re.test(e))?.id ?? null, j = (e) => r.test(e), M = /* @__PURE__ */ new Set([
+], A = (e) => k.find((t) => t.re.test(e))?.id ?? null, j = (e) => t.test(e), M = /* @__PURE__ */ new Set([
 	"useMutation",
 	"useAction",
 	"useUpload",
@@ -244,10 +244,10 @@ var T = ".voltro-vendored", E = (e, t) => {
 		scanned: 0,
 		vendored: n
 	};
-	let i = new C({
+	let a = new C({
 		useInMemoryFileSystem: !0,
 		skipAddingFilesFromTsConfig: !0
-	}), o = [], s = (t) => h(e, t), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Map(), d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Map();
+	}), o = [], c = (t) => h(e, t), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Map(), d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Map();
 	for (let t of r) {
 		let n;
 		try {
@@ -257,7 +257,7 @@ var T = ".voltro-vendored", E = (e, t) => {
 		}
 		let r;
 		try {
-			r = i.createSourceFile(t.endsWith("x") ? "/scan.tsx" : "/scan.ts", n, { overwrite: !0 });
+			r = a.createSourceFile(t.endsWith("x") ? "/scan.tsx" : "/scan.ts", n, { overwrite: !0 });
 		} catch {
 			continue;
 		}
@@ -293,40 +293,40 @@ var T = ".voltro-vendored", E = (e, t) => {
 	for (let e of r) {
 		let t = A(e), n = l.get(e), r = u.get(e);
 		if (n === void 0 || r === void 0) continue;
-		let i = j(e);
-		t !== null && !i && (g += 1);
+		let a = j(e);
+		t !== null && !a && (g += 1);
 		let f = p.get(e) ?? [];
-		if ((t === "component" || t === "component.ui") && !i) {
+		if ((t === "component" || t === "component.ui") && !a) {
 			let t = J(n.components);
 			(n.components.length === 0 || !t) && o.push({
 				rule: "component/one-per-file",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: n.components.length === 0 ? "declares a component file but exports no component" : `exports ${n.components.length} unrelated components: ${n.components.join(", ")}`,
 				fix: "a component file exports ONE component — or one NAMESPACED family sharing its name (`Card`, `CardHeader`, `CardTitle`), which is one component with parts. Types alongside are fine. Unrelated components belong in their own files"
 			}), n.hooks.length > 0 && o.push({
 				rule: "component/no-hook-export",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: `also exports hook(s): ${n.hooks.join(", ")}`,
 				fix: "move the hook into its own *.hook.ts — a file exporting both is two files wearing one name, and neither can be reused without dragging the other"
 			});
 		}
-		if (t === "hook" && !i && (n.hooks.length !== 1 && o.push({
+		if (t === "hook" && !a && (n.hooks.length !== 1 && o.push({
 			rule: "hook/one-per-file",
-			file: s(e),
+			file: c(e),
 			severity: "error",
 			detail: n.hooks.length === 0 ? "declares a hook file but exports no use* hook" : `exports ${n.hooks.length} hooks: ${n.hooks.join(", ")}`,
 			fix: "a hook file exports exactly ONE use* hook (types alongside are fine)"
 		}), n.components.length > 0 && o.push({
 			rule: "hook/no-component-export",
-			file: s(e),
+			file: c(e),
 			severity: "error",
 			detail: `also exports component(s): ${n.components.join(", ")}`,
 			fix: "move the component into its own *.component.tsx"
 		})), t === "types" && n.hasRuntimeExport && o.push({
 			rule: "types/runtime-export",
-			file: s(e),
+			file: c(e),
 			severity: "error",
 			detail: `exports runtime value(s): ${[
 				...n.components,
@@ -338,9 +338,9 @@ var T = ".voltro-vendored", E = (e, t) => {
 			let t = f.filter((t) => !Y(t, e));
 			t.length > 0 && o.push({
 				rule: "internal/foreign-import",
-				file: s(e),
+				file: c(e),
 				severity: "error",
-				detail: `imported from outside its own directory by: ${t.slice(0, 5).map(s).join(", ")}${t.length > 5 ? ` (+${t.length - 5})` : ""}`,
+				detail: `imported from outside its own directory by: ${t.slice(0, 5).map(c).join(", ")}${t.length > 5 ? ` (+${t.length - 5})` : ""}`,
 				fix: "export it through the feature's public module, or move the importer inside. `.internal` is the promise that refactoring within this directory breaks nobody — a foreign import revokes it silently, which is how a feature boundary rots without a single review comment"
 			});
 		}
@@ -348,44 +348,44 @@ var T = ".voltro-vendored", E = (e, t) => {
 			let t = f.filter((e) => !j(e) && A(e) !== "fixture");
 			t.length > 0 && o.push({
 				rule: "fixture/production-import",
-				file: s(e),
+				file: c(e),
 				severity: "error",
-				detail: `imported by non-test file(s): ${t.slice(0, 5).map(s).join(", ")}`,
+				detail: `imported by non-test file(s): ${t.slice(0, 5).map(c).join(", ")}`,
 				fix: "test material must not be reachable from a production path — it ships in the bundle, and it is written to be convenient rather than correct"
 			});
 		}
-		if (t === "component.ui" && !i) {
+		if (t === "component.ui" && !a) {
 			let t = [...r.namedBindings].filter((e) => M.has(e)).sort();
 			t.length > 0 && o.push({
 				rule: "ui/no-write",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: `imports write hook(s): ${t.join(", ")}`,
 				fix: "a *.component.ui.tsx renders; it does not write. Lift the mutation into the *.component.tsx that owns it and pass a handler down. Reading (useT / useCan / usePermissions) stays allowed — threading those through props is prop-drilling, not reusability"
 			});
-			let n = m(e), i = n.filter((e) => {
+			let n = m(e), a = n.filter((e) => {
 				let t = A(e);
-				return t === "component" || t === "component.ui" || c.test(e) || a.has(e.slice(e.lastIndexOf(_) + 1));
+				return t === "component" || t === "component.ui" || s.test(e) || i.has(e.slice(e.lastIndexOf(_) + 1));
 			});
 			n.length === 0 ? o.push({
 				rule: "ui/orphaned",
-				file: s(e),
+				file: c(e),
 				severity: "warn",
 				detail: "nothing imports it",
 				fix: "render it from a *.component.tsx or a page, or delete it — an unrendered presentational component is carried, reviewed and refactored forever without reaching a user"
-			}) : i.length === 0 && o.push({
+			}) : a.length === 0 && o.push({
 				rule: "ui/unlinked",
-				file: s(e),
+				file: c(e),
 				severity: "warn",
-				detail: `reached only by: ${n.slice(0, 5).map(s).join(", ")}${n.length > 5 ? ` (+${n.length - 5})` : ""} — barrels resolved through`,
+				detail: `reached only by: ${n.slice(0, 5).map(c).join(", ")}${n.length > 5 ? ` (+${n.length - 5})` : ""} — barrels resolved through`,
 				fix: "a presentational component should be reached from a *.component.tsx, another *.component.ui.tsx, or a page"
 			});
 		}
-		if (t === "store" && !i) {
+		if (t === "store" && !a) {
 			let t = d.get(e)?.get("defineStore") ?? 0;
 			t !== 1 && o.push({
 				rule: "store/one-per-file",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: t === 0 ? "declares a store file but calls no defineStore()" : `declares ${t} stores`,
 				fix: "a store file defines exactly ONE store — the SSR seed pass and devtools address stores by name, so two in a file makes both harder to find and neither easier to reason about"
@@ -393,23 +393,23 @@ var T = ".voltro-vendored", E = (e, t) => {
 			let n = [...d.get(e)?.keys() ?? []].filter((e) => P.has(e)).sort();
 			n.length > 0 && o.push({
 				rule: "store/mirrors-server-state",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: `reads server state here: ${n.join(", ")}`,
 				fix: "a store holds CLIENT state. A subscription is already live server state; copying it into a store gives you a second copy that does not live, and the page then shows the stale one — a bug that reads as \"reactivity is broken\". Read the subscription where you render it"
 			});
 		}
-		if (t !== "tracking" && !i) {
+		if (t !== "tracking" && !a) {
 			let t = [...d.get(e)?.keys() ?? []].filter((e) => N.has(e)).sort();
 			t.length > 0 && o.push({
 				rule: "tracking/outside-tracking-file",
-				file: s(e),
+				file: c(e),
 				severity: "error",
 				detail: `calls ${t.join(", ")} outside a *.tracking.ts`,
 				fix: "move the defineTracking(...) spec into a *.tracking.ts and import it here. The event catalogue — names, property bags, the decisions about what personal data goes out — belongs in one place you can list; calling useTracking with a spec from there is fine"
 			});
 		}
-		if (k.find((e) => e.id === t)?.needsTest === !0 && !i) {
+		if (k.find((e) => e.id === t)?.needsTest === !0 && !a) {
 			let t = e.replace(/\.tsx?$/, ""), n = e.endsWith("x") ? "tsx" : "ts";
 			["test", "spec"].flatMap((e) => [`${t}.${e}.ts`, `${t}.${e}.tsx`]).some((e) => {
 				try {
@@ -419,10 +419,10 @@ var T = ".voltro-vendored", E = (e, t) => {
 				}
 			}) || o.push({
 				rule: "convention/missing-test",
-				file: s(e),
+				file: c(e),
 				severity: "warn",
 				detail: "no test beside it",
-				fix: `add ${s(t)}.test.${n} — the name is derivable, so write it with the file. A shallow test earns its place: what it buys is that something MOUNTS the component, and a render loop, a crashing effect or a missing provider is invisible until then. One app wrote 251 of these and the first run found a render loop that made a page take 423 s and exhaust the heap — in a browser it had looked usable`
+				fix: `add ${c(t)}.test.${n} — the name is derivable, so write it with the file. A shallow test earns its place: what it buys is that something MOUNTS the component, and a render loop, a crashing effect or a missing provider is invisible until then. One app wrote 251 of these and the first run found a render loop that made a page take 423 s and exhaust the heap — in a browser it had looked usable`
 			});
 		}
 	}

package/dist/fontPipeline-LxIHa1vo.js

@@ -0,0 +1,2 @@
+import { o as e, s as t } from "./fontPipeline-Tsh8kZfA.js";
+export { e as loadFontkit, t as loadSubsetFont };

package/dist/fontPipeline-Tsh8kZfA.js

@@ -0,0 +1,152 @@
+import { createHash as e } from "node:crypto";
+//#region src/fontPipeline.ts
+var t = (e) => e.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""), n, r = !1, i = async () => {
+	if (n !== void 0) return n;
+	try {
+		let e = await import("fontkit");
+		n = e.default ?? e;
+	} catch {
+		n = null;
+	}
+	return n;
+}, a, o = !1, s = async () => {
+	if (a !== void 0) return a;
+	try {
+		let e = await import("subset-font");
+		a = e.default ?? e;
+	} catch {
+		a = null;
+	}
+	return a;
+}, c = (e, t) => {
+	if (e === "fontkit") {
+		if (r) return;
+		r = !0, t.warn("font pipeline: fontkit is not loadable — fonts still self-host with @font-face + preload, but the size-adjusted fallback metrics (the CLS guard) are SKIPPED. It ships as an optional dependency of @voltro/cli; if your installer omitted optional deps, run `pnpm add -D fontkit`.");
+	} else {
+		if (o) return;
+		o = !0, t.warn("font pipeline: subset-font is not loadable — declared `subsets:` are SKIPPED and the full font files ship. Run `pnpm add -D subset-font` (optional dependency of @voltro/cli that your installer omitted).");
+	}
+}, l = {
+	Arial: {
+		unitsPerEm: 2048,
+		ascent: 1854,
+		descent: 434,
+		lineGap: 67,
+		xWidthAvg: 913
+	},
+	"Times New Roman": {
+		unitsPerEm: 2048,
+		ascent: 1825,
+		descent: 443,
+		lineGap: 87,
+		xWidthAvg: 832
+	}
+}, u = "etaoin shrdlu cmfwyp vbgkqj xz", d = async (e) => {
+	let t = await i();
+	if (t === null) return null;
+	try {
+		let n = t.create(Buffer.from(e)), r = n.layout(u).glyphs.map((e) => e.advanceWidth).filter((e) => Number.isFinite(e) && e > 0), i = r.length > 0 ? r.reduce((e, t) => e + t, 0) / r.length : 0;
+		return {
+			unitsPerEm: n.unitsPerEm,
+			ascent: Math.abs(n.ascent),
+			descent: Math.abs(n.descent),
+			lineGap: Math.abs(n.lineGap ?? 0),
+			xWidthAvg: i
+		};
+	} catch {
+		return null;
+	}
+}, f = (e) => `${(e * 100).toFixed(4).replace(/\.?0+$/, "")}%`, p = (e, t, n) => {
+	let r = l[n];
+	if (t.xWidthAvg <= 0 || t.unitsPerEm <= 0) return null;
+	let i = t.xWidthAvg / t.unitsPerEm / (r.xWidthAvg / r.unitsPerEm);
+	if (!Number.isFinite(i) || i <= 0) return null;
+	let a = t.ascent / t.unitsPerEm / i, o = t.descent / t.unitsPerEm / i, s = t.lineGap / t.unitsPerEm / i;
+	return [
+		"@font-face {",
+		`  font-family: '${e} Fallback';`,
+		`  src: local('${n}');`,
+		`  size-adjust: ${f(i)};`,
+		`  ascent-override: ${f(a)};`,
+		`  descent-override: ${f(o)};`,
+		`  line-gap-override: ${f(s)};`,
+		"}"
+	].join("\n");
+}, m = {
+	latin: "U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD",
+	"latin-ext": "U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF"
+}, h = (e) => {
+	let t = [];
+	for (let n of e.split(",")) {
+		let e = /U\+([0-9A-F]{1,6})(?:-([0-9A-F]{1,6}))?/i.exec(n.trim());
+		if (!e) continue;
+		let r = parseInt(e[1], 16), i = e[2] === void 0 ? r : parseInt(e[2], 16);
+		for (let e = r; e <= i && e <= 65535; e += 1) t.push(String.fromCharCode(e));
+	}
+	return t.join("");
+}, g = async (e, t) => {
+	let n = await s();
+	if (n === null) return null;
+	try {
+		let r = await n(Buffer.from(e), h(m[t]), { targetFormat: "woff2" });
+		return new Uint8Array(r);
+	} catch {
+		return null;
+	}
+}, _ = (t) => e("sha256").update(t).digest("hex").slice(0, 12), v = (e) => e.endsWith(".woff2") ? "woff2" : e.endsWith(".woff") ? "woff" : e.endsWith(".otf") ? "opentype" : "truetype", y = async (e, n, r = {}) => {
+	let a = r.baseUrl ?? "/", o = [], s = [], c = [], l = [], u = /* @__PURE__ */ new Set();
+	for (let r of e) {
+		let e = r.display ?? "swap", f = r.fallback ?? "Arial", h = null, y = !0;
+		for (let t of r.src) {
+			let l = await n(t.path);
+			h === null && (h = await d(l), h === null && await i() === null && u.add("fontkit"));
+			let f = t.weight ?? 400, p = t.style ?? "normal", b = (t, n, i) => {
+				let l = n === "woff2" ? "woff2" : n === "woff" ? "woff" : n === "opentype" ? "otf" : "ttf", u = `assets/fonts/${_(t)}.${l}`;
+				s.push({
+					fileName: u,
+					bytes: t,
+					preload: y
+				}), y && c.push(`${a}${u}`), y = !1, o.push([
+					"@font-face {",
+					`  font-family: '${r.family}';`,
+					`  font-style: ${p};`,
+					`  font-weight: ${f};`,
+					`  font-display: ${e};`,
+					`  src: url('${a}${u}') format('${n}');`,
+					...i === void 0 ? [] : [`  unicode-range: ${i};`],
+					"}"
+				].join("\n"));
+			};
+			if (r.subsets !== void 0 && r.subsets.length > 0) {
+				let e = !1;
+				for (let t of r.subsets) {
+					let n = await g(l, t);
+					if (n === null) {
+						u.add("subset-font");
+						break;
+					}
+					e = !0, b(n, "woff2", m[t]);
+				}
+				e || b(l, v(t.path));
+			} else b(l, v(t.path));
+		}
+		if (h !== null) {
+			let e = p(r.family, h, f);
+			e !== null && o.push(e);
+		}
+		let b = `--font-${t(r.family)}`;
+		l.push({
+			family: r.family,
+			variable: b
+		}), o.push(`:root { ${b}: '${r.family}', '${r.family} Fallback', ${f === "Arial" ? "Arial, sans-serif" : "'Times New Roman', serif"}; }`);
+	}
+	return {
+		css: o.join("\n"),
+		files: s,
+		preloads: c,
+		variables: l,
+		warnings: [...u]
+	};
+};
+//#endregion
+export { _ as a, h as c, c as d, t as i, d as l, y as n, i as o, p as r, s, m as t, g as u };

package/dist/{frameworkTableAssembly-w-XnLa3q.js → frameworkTableAssembly-D7LJuALW.js}

@@ -1,6 +1,6 @@
 import { n as e } from "./appModuleLoader-C9r9mxZt.js";
 import { n as t } from "./declaredSchemaGates-BlcwObhb.js";
-import { D as n, a as r, j as i, k as a, x as o } from "./fileConventions-DOqD3lPS.js";
+import { C as n, N as r, j as i, k as a, o } from "./fileConventions-l-RIXbx8.js";
 import { basename as s, join as c } from "node:path";
 import { existsSync as l, promises as u } from "node:fs";
 import { pathToFileURL as d } from "node:url";
@@ -407,20 +407,20 @@ var we = [
 		connections: r.map((e) => `${e.definition.id} (${e.definition.kind})`),
 		files: r.map((e) => He(s(e.file)))
 	}), r;
-}, J = (e) => r.test(e) || o.test(e), Y = async (e) => {
-	let t = !1, r = !1, o = !1, s = !1, l = !1, d = async (e) => {
+}, J = (e) => o.test(e) || n.test(e), Y = async (e) => {
+	let t = !1, n = !1, o = !1, s = !1, l = !1, d = async (e) => {
 		let f = await u.readdir(e, { withFileTypes: !0 }).catch(() => []);
 		for (let u of f) if (u.isDirectory()) {
 			if (u.name === "node_modules" || u.name === "dist" || u.name === ".framework" || u.name.startsWith(".")) continue;
 			await d(c(e, u.name));
 		} else {
 			let e = u.name;
-			(i.test(e) || n.test(e)) && (t = !0), J(e) && (r = !0), a.test(e) && (o = !0), W.test(e) && (s = !0), q.test(e) && (l = !0);
+			(r.test(e) || a.test(e)) && (t = !0), J(e) && (n = !0), i.test(e) && (o = !0), W.test(e) && (s = !0), q.test(e) && (l = !0);
 		}
 	};
 	return await d(e), {
 		workflows: t,
-		schedules: r,
+		schedules: n,
 		webhooks: o,
 		agents: s,
 		connections: l

package/dist/frameworkTableAssembly-IPD1pUnZ.js

@@ -0,0 +1,2 @@
+import { c as e, n as t } from "./frameworkTableAssembly-D7LJuALW.js";
+export { t as assembleFrameworkTables, e as loadAppSchemaInputs };

package/dist/imagePipeline-B_GVJgm6.js

@@ -0,0 +1,2 @@
+import { c as e, u as t } from "./imagePipeline-CBZmjT4i.js";
+export { e as loadSharp, t as sharpUnavailableReason };

package/dist/imagePipeline-CBZmjT4i.js

@@ -0,0 +1,127 @@
+import { join as e } from "node:path";
+import { mkdir as t, readFile as n, stat as r, writeFile as i } from "node:fs/promises";
+import { createHash as a } from "node:crypto";
+//#region src/imagePipeline.ts
+var o = [
+	640,
+	750,
+	828,
+	1080,
+	1200,
+	1920,
+	2048,
+	3840
+], s = {
+	formats: ["avif", "webp"],
+	quality: 75
+}, c = (e) => ({
+	formats: e?.formats !== void 0 && e.formats.length > 0 ? e.formats.filter((e) => e === "avif" || e === "webp") : s.formats,
+	quality: e?.quality !== void 0 && Number.isFinite(e.quality) && e.quality >= 1 && e.quality <= 100 ? Math.round(e.quality) : s.quality
+}), l, u = !1, d, f = async () => {
+	if (l !== void 0) return l;
+	try {
+		let e = await import("sharp");
+		l = e.default ?? e;
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		d = t.includes("Could not load the sharp module") ? {
+			reason: "binary-missing",
+			detail: t
+		} : {
+			reason: "not-installed",
+			detail: t
+		}, l = null;
+	}
+	return l;
+}, p = () => d, m = (e) => {
+	if (u) return;
+	u = !0;
+	let t = d?.reason === "binary-missing" ? "sharp is installed but its platform binary is missing (an install that omitted optional dependencies drops the @img/* prebuilds). Reinstall without omitting optional deps, or run `pnpm add -D sharp` in this app to pin it directly." : "sharp is not installed. It ships as an optional dependency of @voltro/cli; if your installer skipped optional dependencies, run `pnpm add -D sharp` in this app.";
+	e.warn(`image pipeline: serving ORIGINAL images without srcSet variants or blur placeholders — ${t} Until then <Image> falls back to the passthrough loader.`);
+}, h = (e, t, n, r) => `${e}-w${t}-q${r}.${n}`, g = (t) => e(t, ".framework", "image-cache"), _ = (e) => a("sha256").update(e).digest("hex").slice(0, 16), v = 4, y = 0, b = [], x = async (e) => {
+	y >= v && await new Promise((e) => b.push(e)), y += 1;
+	try {
+		return await e();
+	} finally {
+		--y, b.shift()?.();
+	}
+}, S = async (r) => {
+	let a = await f();
+	if (!a) return null;
+	let o = e(r.cacheDir, h(r.sourceHash, r.width, r.format, r.quality));
+	try {
+		let e = await n(o);
+		return r.onCache?.("hit"), new Uint8Array(e);
+	} catch {}
+	r.onCache?.("miss");
+	let s = await x(async () => {
+		let e = await a(Buffer.from(r.sourceBytes), { failOn: "none" }).resize({
+			width: r.width,
+			withoutEnlargement: !0
+		}).toFormat(r.format, { quality: r.quality }).toBuffer();
+		return new Uint8Array(e);
+	});
+	return await t(r.cacheDir, { recursive: !0 }), await i(o, s), s;
+}, C = async (e) => {
+	let t = await f();
+	if (!t) return null;
+	try {
+		let n = await t(Buffer.from(e), { failOn: "none" }).metadata();
+		return n.width === void 0 || n.height === void 0 || n.format === void 0 ? null : {
+			width: n.width,
+			height: n.height,
+			format: n.format
+		};
+	} catch {
+		return null;
+	}
+}, w = async (e, t, n) => {
+	let r = await S({
+		sourceBytes: e,
+		sourceHash: t,
+		width: 16,
+		format: "webp",
+		quality: 40,
+		cacheDir: n
+	});
+	return r === null ? null : `data:image/webp;base64,${Buffer.from(r).toString("base64")}`;
+}, T = (e) => [...o.filter((t) => t < e), e], E = async (e) => {
+	let t = await C(e.sourceBytes);
+	if (t === null) return null;
+	let n = _(e.sourceBytes), r = T(t.width), i = t.format === "png" ? "png" : "jpeg", a = [...e.config.formats, i], o = [];
+	for (let t of a) for (let i of r) {
+		let r = await S({
+			sourceBytes: e.sourceBytes,
+			sourceHash: n,
+			width: i,
+			format: t,
+			quality: e.config.quality,
+			cacheDir: e.cacheDir,
+			...e.onCache === void 0 ? {} : { onCache: e.onCache }
+		});
+		if (r === null) return null;
+		o.push({
+			width: i,
+			format: t,
+			bytes: r,
+			hash: _(r)
+		});
+	}
+	let s = await w(e.sourceBytes, n, e.cacheDir);
+	return s === null ? null : {
+		width: t.width,
+		height: t.height,
+		blurDataURL: s,
+		widths: r,
+		variants: o,
+		fallbackFormat: i
+	};
+}, D = async (e) => {
+	try {
+		return (await r(e)).isFile() ? new Uint8Array(await n(e)) : null;
+	} catch {
+		return null;
+	}
+};
+//#endregion
+export { g as a, f as c, S as d, m as f, E as i, D as l, o as n, c as o, T as p, w as r, C as s, s as t, p as u };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-Cc_nV8WI.js";
-import { r as o } from "./templates-BR-fb4SP.js";
+import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-6Kzi92Np.js";
+import { r as o } from "./templates-BTWZkJJT.js";
 //#region src/index.ts
 var s = "framework";
 //#endregion

package/dist/{infoCommand-DXM868o_.js → infoCommand-DlYlUPqs.js}

@@ -1,5 +1,5 @@
 import { n as e, r as t, t as n } from "./cliOutput-D1tSBoRM.js";
-import { o as r } from "./updateCommand-BMk2e4ky.js";
+import { o as r } from "./updateCommand-CRJlAOaM.js";
 import { join as i, resolve as a } from "node:path";
 import { readFileSync as o, readdirSync as s, statSync as c } from "node:fs";
 //#region src/infoCommand.ts

package/dist/{inspect-CtL_xTbu.js → inspect-Bd8-9wsi.js}

@@ -1,4 +1,4 @@
-import { n as e } from "./inspectGateHint-BjnFubmH.js";
+import { n as e } from "./inspectGateHint-4LxkNtrz.js";
 import { lastWriteProvenance as t } from "@voltro/runtime";
 import { timingSafeStringEqual as n } from "@voltro/protocol/session";
 //#region src/inspect.ts

package/dist/inspect-CuoDInfZ.js

@@ -0,0 +1,2 @@
+import { r as e } from "./inspect-Bd8-9wsi.js";
+export { e as buildCapabilityManifest };

package/dist/{inspectGateHint-BjnFubmH.js → inspectGateHint-4LxkNtrz.js}

@@ -1,5 +1,5 @@
 //#region src/inspectGateHint.ts
-var e = (e) => e === 401 || e === 403, t = (e) => e === 403 ? "The inspect surface rejected the credential. VOLTRO_INSPECT_TOKEN must be set on the SERVER and in this shell, and the two values must match. (This is a framework gate, not a database permission.)" : "The inspect surface is gated and this request carried no credential. Set VOLTRO_INSPECT_TOKEN on the server and in this shell (same value), or pass --token.", n = "`voltro dev` mints VOLTRO_INSPECT_WRITE_TOKEN into the project's gitignored .env.local, so read the value from there and send it in this shell; outside dev nothing mints it and you set it explicitly on both sides.", r = (e, t) => {
+var e = (e) => e === 401 || e === 403, t = (e) => e === 403 ? "The inspect surface rejected the credential. VOLTRO_INSPECT_TOKEN must be set on the SERVER and in this shell, and the two values must match. (This is a framework gate, not a database permission.)" : "The inspect surface is gated and this request carried no credential. Set VOLTRO_INSPECT_TOKEN on the server and in this shell (same value), or pass --token.", n = "`voltro dev` mints VOLTRO_INSPECT_WRITE_TOKEN into the project's gitignored .env.local, so read the value from there and send it in this shell; outside dev nothing mints it — generate one with `voltro secret generate inspect-write` and set it explicitly on both sides.", r = (e, t) => {
 	let r = `inspect: ${(t || "unknown-method").toUpperCase()} is a mutating request and needs the WRITE credential — VOLTRO_INSPECT_WRITE_TOKEN, sent as the \`x-voltro-inspect-write\` header alongside the bearer. The read token authorises reads only.`;
 	return e === "unset" ? `${r} The SERVER has none configured, so no header can satisfy this. Mutating inspect endpoints (GDPR erase/export, storage share/revoke, schedule fire) need their own secret. ${n}` : e === "mismatch" ? `${r} The header was sent and does not match the server's value — so this is the two values disagreeing, not a missing setting. ${n}` : `${r} This request carried no such header. ${n}`;
 };

package/dist/manifestBuild-C4-J1-m_.js

@@ -0,0 +1,2 @@
+import { t as e } from "./manifestBuild-Cqgsx2bM.js";
+export { e as buildRpcEntry };

package/dist/{manifestBuild-CuU1VrSm.js → manifestBuild-Cqgsx2bM.js}

@@ -1,4 +1,4 @@
-import { P as e } from "./inspect-CtL_xTbu.js";
+import { P as e } from "./inspect-Bd8-9wsi.js";
 import { JSONSchema as t } from "effect";
 //#region src/manifestBuild.ts
 var n = (e) => {

package/dist/{metaCommands-C6RFmF1r.js → metaCommands-x7RCi2AF.js}

@@ -1,7 +1,7 @@
 import { i as e, n as t, r as n } from "./cliArgs-D4p8n7EE.js";
 import { t as r } from "./cliRuntime-Dh7UDinH.js";
-import { n as i } from "./renderProfile-Ck32Fzxr.js";
-import { a, i as o } from "./projectScaffold-B4dmTlwT.js";
+import { n as i } from "./renderProfile-DvrhVJHa.js";
+import { a, i as o } from "./projectScaffold-CSN0OzBV.js";
 import { t as s } from "./discover-C9XKJDco.js";
 import { basename as c, join as l, relative as u, resolve as d } from "node:path";
 import { createLogger as f } from "@voltro/logger";
@@ -141,7 +141,13 @@ var v = /* @__PURE__ */ new Set([
 		env: "VOLTRO_INSPECT_TOKEN",
 		encoding: "base64url",
 		bytes: 32,
-		note: "bearer token for /_voltro/inspect/*"
+		note: "bearer token for /_voltro/inspect/* (reads)"
+	},
+	"inspect-write": {
+		env: "VOLTRO_INSPECT_WRITE_TOKEN",
+		encoding: "base64url",
+		bytes: 32,
+		note: "second factor for MUTATING inspect endpoints (x-voltro-inspect-write header)"
 	},
 	webhook: {
 		env: "VOLTRO_WEBHOOK_SECRET_<ID>",

package/dist/{migrate-D0F-eTlK.js → migrate-BK_Bbx-_.js}

@@ -1,7 +1,7 @@
 import { t as e } from "./cliError-BmdYnghb.js";
 import { r as t } from "./dialectDriver-czCHYpeH.js";
 import { a as n, r } from "./connectionConfig-Bk9IC7D0.js";
-import { g as i, n as a, s as o } from "./frameworkTableAssembly-w-XnLa3q.js";
+import { g as i, n as a, s as o } from "./frameworkTableAssembly-D7LJuALW.js";
 import { t as s } from "./cliRuntime-Dh7UDinH.js";
 import { join as c, relative as l, resolve as u } from "node:path";
 import { pathToFileURL as d } from "node:url";
@@ -79,7 +79,7 @@ var _ = /* @__PURE__ */ new Set([
 		let t = u(e.find((e) => !e.startsWith("-")) ?? process.cwd());
 		return s(S(t), { scope: "voltro:migrate" });
 	}
-	let { runDbCommand: t } = await import("./dbCommand-DNb6yeOG.js");
+	let { runDbCommand: t } = await import("./dbCommand-CSFWs9ev.js");
 	return t(["apply", ...e]);
 };
 //#endregion