@voltro/cli 0.54.0 → 0.56.0

package/dist/{codemodRunner-Cd4xkC6u.js → codemodRunner-BlQPfjzA.js}

@@ -6130,6 +6130,283 @@ var S = (e, t, n) => {
 			"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
 			"need nothing."
 		].join("\n")
+	}),
+	w({
+		version: "0.55.0",
+		id: "0.55.0/01_target-relations-declare-columns",
+		title: "A target's `relations:` names the junction's two columns now, not just the table",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+			let t = e.getFullText();
+			return /relations:\s*\{[^}{]*:\s*['"`]/.test(t);
+		}),
+		note: [
+			"A write target declares its many-to-many relations as objects now:",
+			"",
+			"    // before",
+			"    target: { table: 'employees', op: 'update',",
+			"      relations: { assignedStores: 'employee_assigned_stores' } }",
+			"",
+			"    // after",
+			"    target: { table: 'employees', op: 'update',",
+			"      relations: { assignedStores: {",
+			"        junction: 'employee_assigned_stores',",
+			"        anchorColumn: 'employeeId',   // the junction reference() pointing at `employees`",
+			"        targetColumn: 'storeId',      // the junction's other reference()",
+			"      } } }",
+			"",
+			"Take both column names from the junction table's own `reference()`",
+			"columns in your `db/` schema — `anchorColumn` is the one pointing at the",
+			"target's table, `targetColumn` is the other one.",
+			"",
+			"Why: the SAME declaration now drives the optimistic update in the browser,",
+			"so a multi-reference field flips as instantly as a scalar one instead of",
+			"waiting for the server delta. The browser cannot import your schema, so the",
+			"columns have to be stated. They are not taken on trust: before it writes,",
+			"the server compares them against the junction's real reference columns and",
+			"refuses — naming the correct pair — if they disagree."
+		].join("\n")
+	}),
+	w({
+		version: "0.55.0",
+		id: "0.55.0/02_widget-kind-gained-rich-text",
+		title: "WidgetKind gained 'rich-text' — total widget registries need one new entry",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
+		note: [
+			"This repository types a widget registry as `Record<WidgetKind, …>`.",
+			"`WidgetKind` gained `'rich-text'`, so the total map needs one new entry.",
+			"The framework ships a default you can point at:",
+			"",
+			"    import { RichTextWidget } from '@voltro/web'",
+			"    // …",
+			"    'rich-text': RichTextWidget,",
+			"",
+			"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
+			"need nothing."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/01_inspect_answers_are_observations",
+		title: "inspect answers are `Observation`s — the payload is `.data`",
+		kind: "manual",
+		reach: "beyond-source",
+		appliesTo: ({ text: e }) => e.find("/_voltro/inspect").length > 0,
+		note: [
+			"Every 2xx `/_voltro/inspect/*` response is now an envelope:",
+			"",
+			"    { data, scope, origin, completeness, capturedAt }",
+			"",
+			"What you read before is `.data`. So:",
+			"",
+			"    curl …/_voltro/inspect/subscriptions | jq .resume",
+			"    curl …/_voltro/inspect/subscriptions | jq .data.resume     # now",
+			"",
+			"The other four fields are the point of the change, not decoration:",
+			"",
+			"  • `scope.kind` — `process` (this replica only), `shared-store` (every",
+			"    replica would answer the same), `fleet` (assembled), `declaration`",
+			"    (from the source tree). A `process` answer on a multi-replica",
+			"    deployment is a SAMPLE, and it used to look identical to a fleet-wide",
+			"    one.",
+			"  • `origin.replicaId` / `origin.instanceId` — which process answered, and",
+			"    which generation of it. Query twice and you can now tell whether you",
+			"    reached the same one.",
+			"  • `completeness.fleetSize` — how many replicas exist. ABSENT when it",
+			"    could not be determined; never `1` as a guess.",
+			"  • `capturedAt` — the ORIGIN’s clock. Do not compare it with another",
+			"    replica’s.",
+			"",
+			"Check anything that reads these endpoints outside your TypeScript sources:",
+			"dashboards, `jq` filters in alerts, runbook commands, CI health checks,",
+			"scrape configs. A reader that pulls a field straight off the top level now",
+			"reads `undefined` — which in a health check is the failure mode worth",
+			"looking for first, because `undefined` and \"zero\" render the same in most",
+			"alerting rules."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/02_broadcast_gap_is_one_object",
+		title: "attachBroadcastBus's onGap now receives a single BroadcastGap object",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("attachBroadcastBus")),
+		note: [
+			"`attachBroadcastBus({ onGap })` now receives ONE argument — a `BroadcastGap`",
+			"— instead of `(origin, missed)`.",
+			"",
+			"  before:  onGap: (origin, missed) => refreshAll(`missed ${missed} from ${origin}`)",
+			"  after:   onGap: (gap) => refreshAll(gap.reason)",
+			"",
+			"`gap.reason` is a ready-made sentence for your log line. `gap.origin` and",
+			"`gap.missed` are still there and still EXACT — but they are optional now,",
+			"because the bus reports two kinds of hole and only one of them has a peer",
+			"to blame:",
+			"",
+			"  • a peer's serial jumped → `{ reason, origin, missed }`",
+			"  • this replica was not subscribed for a while, or the transport re-dialled",
+			"    → `{ reason }` alone",
+			"",
+			"The recovery is the same for both: re-run every live query. If your handler",
+			"reads `origin`/`missed`, guard them — a hole with no peer is now reachable.",
+			"",
+			"Related, and needing no change from you: `attachBroadcastBus` no longer",
+			"rejects when the broker is unreachable at attach time. It warns, keeps the",
+			"local path working, retries in the background, and reports the time it spent",
+			"unsubscribed as a gap. If you wrapped the call in a try/catch to survive a",
+			"restarting broker, that catch is now dead code."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/03_outbox_drain_needs_an_identity",
+		title: "drainOutbox now requires claimedBy — the fleet-wide exactly-once gate",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("drainOutbox")),
+		note: [
+			"`drainOutbox({ … })` now requires a `claimedBy: string`.",
+			"",
+			"Why: the drain used to read every `pending` row and run its handler. Every",
+			"replica runs the drain, so every effect was dispatched once PER REPLICA — on",
+			"the happy path, every time. Rows are now claimed atomically",
+			"(`pending → delivering`) and a racing replica loses the row instead of",
+			"duplicating the side effect.",
+			"",
+			"What to pass: an id for this PROCESS, not for the replica. A replica name",
+			"survives a restart (`POD_NAME` on a StatefulSet, `VOLTRO_REPLICA_ID` by",
+			"definition) while the work does not, so a pod that died mid-delivery would",
+			"look like it still held its own claim:",
+			"",
+			"    import { instanceId } from '@voltro/protocol/identity'",
+			"    await drainOutbox({ store, handlers, claimedBy: instanceId() })",
+			"",
+			"Also new and optional: `claimLeaseMs` (default 5 minutes) — how long a claim",
+			"stands before another replica may take the row. Set it ABOVE your slowest",
+			"handler. A lease shorter than a real delivery hands the same row to a second",
+			"replica while the first is still working, which is the duplicate this",
+			"mechanism removes, reintroduced by a number.",
+			"",
+			"If you do NOT call `drainOutbox` yourself, there is nothing to do: `voltro",
+			"dev` and `voltro serve` pass the identity for you."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/04_reaction_dedupe_is_one_claim",
+		title: "runReaction's dedupe is a single atomic claim",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+			let t = e.getFullText();
+			return t.includes("runReaction") || t.includes("ReactionRunDeps");
+		}),
+		note: [
+			"`ReactionRunDeps.dedupe` changed from `{ has, add }` to `{ claim }`:",
+			"",
+			"    // before",
+			"    dedupe: { has: (k) => seen.has(k), add: (k) => { seen.add(k) } }",
+			"    // after",
+			"    dedupe: { claim: (k) => (seen.has(k) ? false : (seen.add(k), true)) }",
+			"",
+			"Why it is not a rename. `has` then `add` is a read followed by a write, and",
+			"two callers both read \"not seen\" before either writes — so `dedupeKey`, the",
+			"field `defineReaction` refuses to boot without, let the same change act once",
+			"per replica. Every single-instance run confirmed it worked, which is why it",
+			"survived: the gate was real in exactly the configuration that cannot observe",
+			"it.",
+			"",
+			"The claim is also taken BEFORE the act now, not after. That is what makes it",
+			"a gate rather than a report, and it has a cost worth knowing: an act that",
+			"THROWS has already consumed its key and is not re-run by a later duplicate.",
+			"Durability belongs to the workflow the act starts, not to the trigger.",
+			"",
+			"If you do NOT call `runReaction` yourself, there is nothing to do. `voltro",
+			"dev` and `voltro serve` now pass a durable, fleet-wide claimer",
+			"(`_voltro_change_claims`), so a reaction acts once across the whole fleet",
+			"instead of once per replica — no code change on your side."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/05_plugin_bind_context_claims_a_change",
+		title: "PluginBindContext requires claimChange; change identity moved to @voltro/database",
+		kind: "manual",
+		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+			let t = e.getFullText();
+			return t.includes("PluginBindContext") || t.includes("changeDigest") || t.includes("OccurrenceCounter") || t.includes("composeChangeKey") || t.includes("parseChangeKey");
+		}),
+		note: [
+			"Two changes, both narrow.",
+			"",
+			"1. `PluginBindContext` now has a REQUIRED `claimChange(scope, key) =>",
+			"   Promise<boolean>`. The framework supplies it on both boot paths, so a",
+			"   plugin only READS it — nothing to do unless you construct a",
+			"   `PluginBindContext` yourself, which in practice means a unit-test",
+			"   harness:",
+			"",
+			"       const ctx: PluginBindContext = {",
+			"         scheduleCoordinated: …,",
+			"         claimChange: () => Promise.resolve(true),   // add this",
+			"       }",
+			"",
+			"   In a real harness, decide what the case is testing before reaching for",
+			"   `true`: a stub that always claims asserts the SINGLE-replica behaviour.",
+			"   To exercise a fleet, share one claim ledger across the stubs — a `Set`",
+			"   of `${scope}/${key}` is enough.",
+			"",
+			"   Why it is required rather than optional: an absent gate reads exactly",
+			"   like a gate that passed, and every consumer of this field is counting or",
+			"   sending something. `plugin-billing` accrued a usage unit per metered row",
+			"   change on EVERY replica, so a tenant on two pods was invoiced twice.",
+			"",
+			"2. The change-identity helpers moved from `@voltro/plugin-cdc-out` to",
+			"   `@voltro/database`, beside `ChangeEvent` itself:",
+			"",
+			"       -import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/plugin-cdc-out'",
+			"       +import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/database'",
+			"",
+			"   `parseChangeKey` moved with them. `canonicalJson` did NOT become public:",
+			"   it is internal to the digest, and `@voltro/runtime` already exports a",
+			"   different function of that name."
+		].join("\n")
+	}),
+	w({
+		version: "0.56.0",
+		id: "0.56.0/06_serve_is_api_only",
+		title: "`voltro serve` on a WEB app now refuses — use `voltro start`",
+		kind: "manual",
+		reach: "beyond-source",
+		appliesTo: (e) => e.text.scanned === 0 || e.text.find("voltro serve").length > 0,
+		note: [
+			"`voltro serve` is the production server for an API app. On a WEB app it now",
+			"refuses with a one-line message instead of what it used to do.",
+			"",
+			"       web app, production      voltro start .      (unchanged)",
+			"       web app, development     voltro dev .        (unchanged)",
+			"       api app                  voltro serve .      (unchanged)",
+			"",
+			"Nothing changes for an api. For a web app the old behaviour was not a working",
+			"alternative that is being taken away:",
+			"",
+			"  • In production it already failed — the serve fast path requires an api",
+			"    serve bundle, which a web build never produces, so it exited 1 pointing",
+			"    at an artefact that cannot exist.",
+			"  • Below production it ran a SECOND vite build without Tailwind, without the",
+			"    image pipeline and without the islands entries, then served it through",
+			"    `vite preview`. With Tailwind that build aborts. Without it, it succeeds",
+			"    and DELETES `dist/server`, the island shells and every pre-rendered page —",
+			"    after which `voltro start` cannot boot at all.",
+			"",
+			"Search your Dockerfiles, compose files, CI jobs, Procfiles and runbooks:",
+			"",
+			"       grep -rn \"voltro serve\" .",
+			"",
+			"and change the ones that point at a WEB app to `voltro start`. An api entry",
+			"stays as it is. (The shipped Dockerfiles already run the precompiled bundle",
+			"directly — `node .framework/dist-web/startBundle/startEntry.js` for web,",
+			"`node .framework/dist-api/serveBundle/serveEntry.js` for an api — which is",
+			"faster still and needs no CLI in the runtime image.)"
+		].join("\n")
 	})
 ], J = /* @__PURE__ */ new Set([
 	"node_modules",

package/dist/{commands-6Kzi92Np.js → commands-CWjfThXv.js}

@@ -91,7 +91,7 @@ var u = () => {
 		name: "dev",
 		summary: "Start the local development server (auto-discovers routes / mutations).",
 		status: "wired",
-		run: (e) => import("./dev-cKUiZZsB.js").then((t) => t.runDev(e)),
+		run: (e) => import("./dev-B9Gz0k85.js").then((t) => t.runDev(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro dev", "boot the app in the current directory"], ["voltro dev apps/acme/api", "boot a specific app"]],
@@ -109,7 +109,7 @@ var u = () => {
 		name: "dashboard",
 		summary: "Serve the DevTools dashboard standalone (from @voltro/dashboard). Targets via VOLTRO_DASHBOARD_APPS; --port to override.",
 		status: "wired",
-		run: (e) => import("./dashboardCommand-Cq1PWvI1.js").then((t) => t.runDashboardCommand(e)),
+		run: (e) => import("./dashboardCommand-BekcY5Ls.js").then((t) => t.runDashboardCommand(e)),
 		help: {
 			usage: "[--port <n>]",
 			flags: [["--port <n>", "port to serve the dashboard on"]],
@@ -121,7 +121,7 @@ var u = () => {
 		name: "check",
 		summary: "Verify the app graph (blast-radius checks) against a running api; LLM-shaped --json diagnostics. Flags: --json, --process <p>, --diff removeTable:<name>.",
 		status: "wired",
-		run: (e) => import("./checkCommand-L7DTlpIF.js").then((t) => t.runCheckCommand(e)),
+		run: (e) => import("./checkCommand-D0QV_zM_.js").then((t) => t.runCheckCommand(e)),
 		help: {
 			usage: "[--json] [--offline] [--process <name>] [--diff removeTable:<name>]",
 			flags: [
@@ -155,7 +155,7 @@ var u = () => {
 		name: "webhooks",
 		summary: "Outbound-webhook artefacts. `consumer` generates the ZERO-DEPENDENCY Standard-Webhooks verification package a subscriber installs, from this app's own declared events; `events` lists the events a subscriber can register for. Usage: voltro webhooks <consumer|events> [path] [--out <dir>] [--name <pkg>] [--json].",
 		status: "wired",
-		run: (e) => import("./webhooksCommand-BvzXNHji.js").then((t) => t.runWebhooksCommand(e)),
+		run: (e) => import("./webhooksCommand-uuPu8qQX.js").then((t) => t.runWebhooksCommand(e)),
 		help: {
 			usage: "<consumer|events> [path] [--out <dir>] [--name <pkg>] [--json]",
 			flags: [
@@ -171,7 +171,7 @@ var u = () => {
 		name: "evolve",
 		summary: "Schema-evolution copilot: propose an observed-graph-driven codemod + a branch-verified backfill for a schema change (rename/retype/split/drop a column, rename a table). Dry-run by default; --write applies. Usage: voltro evolve rename-column <table>.<col> --to <newName> [--write] [--json].",
 		status: "wired",
-		run: (e) => import("./evolveCommand-BwvQ8dVH.js").then((t) => t.runEvolveCommand(e)),
+		run: (e) => import("./evolveCommand-YV8qW1LU.js").then((t) => t.runEvolveCommand(e)),
 		help: {
 			usage: "<rename-column|rename-table|retype-column|split-column|drop-column> <target> [--to <new>] [--write]",
 			flags: [
@@ -188,7 +188,7 @@ var u = () => {
 		name: "codegen",
 		summary: "Emit rpcGroup.generated.ts from discovered route / mutation descriptors.",
 		status: "wired",
-		run: (e) => import("./codegenCommand-CG_Vx4lc.js").then((t) => t.runCodegenCommand(e)),
+		run: (e) => import("./codegenCommand-CidbQzbv.js").then((t) => t.runCodegenCommand(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro codegen", "regenerate rpcGroup.generated.ts for the app in the cwd"]],
@@ -221,7 +221,7 @@ var u = () => {
 		name: "migrate",
 		summary: "Apply the declared schema to the database (alias of `db apply` — diffs declared vs live and emits the ALTERs). `--create-only` for the bootstrap-only CREATE TABLE IF NOT EXISTS path.",
 		status: "wired",
-		run: (e) => import("./migrate-BK_Bbx-_.js").then((t) => t.runMigrateCommand(e)),
+		run: (e) => import("./migrate-SICulyz1.js").then((t) => t.runMigrateCommand(e)),
 		help: {
 			usage: "[app] [--create-only]",
 			flags: [["--create-only", "only CREATE TABLE IF NOT EXISTS — never ALTER (bootstrap)"]],
@@ -233,7 +233,7 @@ var u = () => {
 		name: "test",
 		summary: "Run vitest against the app at the cwd (auto-discovers *.test.ts/tsx).",
 		status: "wired",
-		run: (e) => import("./test-D_kW4KMj.js").then((t) => t.runTestCommand(e)),
+		run: (e) => import("./test-jipIQ5Mx.js").then((t) => t.runTestCommand(e)),
 		help: {
 			usage: "[dir] [filter…] [--watch] [-t <pattern>]",
 			flags: [
@@ -281,7 +281,7 @@ var u = () => {
 		name: "info",
 		summary: "Report versions (CLI, node, every installed @voltro/* — flags lockstep skew), package manager, and dialect. --json for CI. Exits 1 on version skew.",
 		status: "wired",
-		run: (e) => import("./infoCommand-DlYlUPqs.js").then((t) => t.runInfoCommand(e)),
+		run: (e) => import("./infoCommand-BjVXpMlP.js").then((t) => t.runInfoCommand(e)),
 		help: {
 			usage: "[--json]",
 			flags: [["--json", "machine-readable report"]],
@@ -302,7 +302,7 @@ var u = () => {
 		name: "env",
 		summary: "Inspect/sync the typed-env manifest. Subcommands: check (default), sync (.env.example), types (env.generated.d.ts for CI tsc), turbo.",
 		status: "wired",
-		run: (e) => import("./envCommand-Cyynmcfa.js").then((t) => t.runEnvCommand(e)),
+		run: (e) => import("./envCommand-BDUgV7EM.js").then((t) => t.runEnvCommand(e)),
 		help: {
 			usage: "[check|sync|types|turbo] [--force]",
 			flags: [["--force", "overwrite the generated file instead of refusing on a conflict"]],
@@ -326,17 +326,17 @@ var u = () => {
 	},
 	{
 		name: "serve",
-		summary: "Production server: web app (vite preview) OR API (rpc + tenant scope + audit atomicity), auto-detected.",
+		summary: "Production server for an API app (rpc + tenant scope + audit atomicity). A WEB app is served by `voltro start`.",
 		status: "wired",
 		run: async (e) => {
 			let t = e.find((e) => !e.startsWith("-")) ?? process.cwd();
 			if (e.includes("--preflight")) {
-				let { runServePreflight: e } = await import("./doctorCommand-J3qu4E0Y.js");
+				let { runServePreflight: e } = await import("./doctorCommand-BMWs6aVm.js");
 				return e(s(t), !0);
 			}
-			let { tryRunWebServe: n } = await import("./webDev-DlvZO30c.js"), r = await n(s(t));
+			let { tryRunWebServe: n } = await import("./webDev-C2dRz9s5.js"), r = await n(s(t));
 			if (!r.ran) {
-				let { runServeDispatch: t } = await import("./serveCommand-BiPe8BJm.js");
+				let { runServeDispatch: t } = await import("./serveCommand-BITS8Hpj.js");
 				return t(e);
 			}
 			return r.exitCode;
@@ -344,8 +344,8 @@ var u = () => {
 		help: {
 			usage: "[app] [--preflight]",
 			flags: [["--preflight", "check serve-bundle readiness and exit 1 if it is missing — never boots"]],
-			examples: [["voltro serve", "production server for the app in the cwd (api or web, auto-detected)"], ["voltro serve . --preflight", "a Dockerfile/CI gate that catches \"prod serve, no build\""]],
-			notes: ["In production a precompiled bundle is MANDATORY — run `voltro build` first."]
+			examples: [["voltro serve", "production API server for the app in the cwd"], ["voltro serve . --preflight", "a Dockerfile/CI gate that catches \"prod serve, no build\""]],
+			notes: ["In production a precompiled bundle is MANDATORY — run `voltro build` first.", "A WEB app is refused here and pointed at `voltro start` (production) / `voltro dev`."]
 		}
 	},
 	{
@@ -364,17 +364,17 @@ var u = () => {
 		handlesHelp: !0,
 		summary: "Preflight an app for production: the precompiled serve bundle, hand-rolled primitives (naming the shipped one), @voltro/* version skew, executors with no access check, `.serverOnly()` leaks, and junction-FK gaps.",
 		status: "wired",
-		run: (e) => import("./doctorCommand-J3qu4E0Y.js").then((t) => t.runDoctorCommand(e))
+		run: (e) => import("./doctorCommand-BMWs6aVm.js").then((t) => t.runDoctorCommand(e))
 	},
 	{
 		name: "build",
 		summary: "Production build for a web app (vite build + per-page SSG pre-render).",
 		status: "wired",
-		run: (e) => import("./build-D4ygSbnV.js").then((t) => t.runBuildCommand(e)),
+		run: (e) => import("./build-CI36wL4R.js").then((t) => t.runBuildCommand(e)),
 		help: {
 			usage: "[app] [--target <t>]",
-			flags: [["--target <t>", "build target"]],
-			examples: [["voltro build", "production build for the app in the cwd"]],
+			flags: [["--target <t>", "build target"], ["--report", "print what a visitor downloads: first load, chunks, server artefacts"]],
+			examples: [["voltro build", "production build for the app in the cwd"], ["voltro build --report", "the same build, then its first-load size in bytes"]],
 			notes: [
 				"A web app gets the vite build + per-page SSG prerender + the start bundle; an api gets",
 				"the precompiled serve bundle. Both regenerate their generated files first, so a clean",
@@ -386,7 +386,7 @@ var u = () => {
 		name: "prune-runtime",
 		summary: "Trim a deployed web tree’s node_modules to the reachable runtime set (standalone image slimming).",
 		status: "wired",
-		run: (e) => import("./runtimeTrace-CGWx1Q6l.js").then((t) => t.runPruneRuntimeCommand(e)),
+		run: (e) => import("./runtimeTrace-DgYMc09E.js").then((t) => t.runPruneRuntimeCommand(e)),
 		hidden: !0
 	},
 	{
@@ -404,7 +404,7 @@ var u = () => {
 		name: "dormancy",
 		summary: "Single-node scale-to-zero: front the API with a wake-orchestrator that stops the app when idle and brings it back on a request or a due wakeup (cron/workflow). Needs a SQL store. Flags: --port, --app-port, --idle-grace-ms, --tick-ms.",
 		status: "wired",
-		run: (e) => import("./dormancyCommand-w1TrmgYP.js").then((t) => t.runDormancyCommand(e)),
+		run: (e) => import("./dormancyCommand-eXTQMbHU.js").then((t) => t.runDormancyCommand(e)),
 		help: {
 			usage: "[app] [--port <n>] [--app-port <n>] [--idle-grace-ms <n>] [--tick-ms <n>]",
 			flags: [
@@ -421,7 +421,7 @@ var u = () => {
 		name: "start",
 		summary: "Production runtime: serves dist + SSR-on-demand for ssr/isr pages.",
 		status: "wired",
-		run: (e) => import("./start-B0bnJgxI.js").then((t) => t.runStartCommand(e)),
+		run: (e) => import("./start-BFQQkL1i.js").then((t) => t.runStartCommand(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro start", "serve a built web app (dist + SSR-on-demand)"]],
@@ -475,7 +475,7 @@ var u = () => {
 		name: "db",
 		summary: "Database subcommands. Declarative flow: plan, apply, branch, plans, drift [--accept], squash, restore-snapshot. File migrations: generate [name], migrate, rollback, status, files, rollback-file. Data + housekeeping: seed, gc-snapshots, adopt. Credentials at rest: scan-credentials (find plaintext), encrypt-column (migrate a populated column onto .encrypted()).",
 		status: "wired",
-		run: (e) => import("./dbCommand-CSFWs9ev.js").then((t) => t.runDbCommand(e)),
+		run: (e) => import("./dbCommand-DrycGWWt.js").then((t) => t.runDbCommand(e)),
 		help: {
 			usage: e(n),
 			examples: [
@@ -491,7 +491,7 @@ var u = () => {
 		name: "data",
 		summary: "Export/import + backup/restore of app data. Logical (rows + optional assets): export <dir> [--tenant <id>|--tables a,b|--exclude a,b] [--assets] [--compression zstd|gzip|none] [--consistency live|snapshot]; import <dir> [--assets] [--no-verify]; transfers — the history in all four directions, including a run in flight; inspect <file|dir>; unpack <file> <dir>. Native (vendor dump, no resume): backup <dir> [--assets] / restore <dir> [--assets] (pg_dump/mariadb-dump/…) — a restore marks the database in-progress until it finishes. Recovery: clear-replace-marker, clear-staging. Resumable + typed-NDJSON on the logical path; content-addressed assets on both.",
 		status: "wired",
-		run: (e) => import("./dataCommand-DYzW8vkv.js").then((t) => t.runDataCommand(e)),
+		run: (e) => import("./dataCommand-2pccgbIy.js").then((t) => t.runDataCommand(e)),
 		help: {
 			usage: e(i),
 			flags: [
@@ -555,20 +555,20 @@ var u = () => {
 		handlesHelp: !0,
 		summary: "Upgrade the app to the latest framework: bump every @voltro/* dependency (across ALL workspace members, install once at the workspace root), then run the codemods shipped with the target version. Flags: --to <version>, --from <version>, --codemods-only, --dry-run, --force, --exact, --help. After: run `voltro db apply`.",
 		status: "wired",
-		run: (e) => import("./updateCommand-CIoVDKnj.js").then((t) => t.runUpdateCommand(e))
+		run: (e) => import("./updateCommand-DsXEAHbd.js").then((t) => t.runUpdateCommand(e))
 	},
 	{
 		name: "_apply-codemods",
 		summary: "Internal: apply shipped codemods for a framework version jump (re-exec target of `voltro update`).",
 		status: "wired",
 		hidden: !0,
-		run: (e) => import("./updateCommand-CIoVDKnj.js").then((t) => t.runApplyCodemods(e))
+		run: (e) => import("./updateCommand-DsXEAHbd.js").then((t) => t.runApplyCodemods(e))
 	},
 	{
 		name: "embeddings",
 		summary: "Embeddings tooling. Subcommand: backfill <table> --text <field> --vector <field> [--model <m>] [--model-field <f>] [--batch <n>] [--dry-run] — (re)embed rows the vectorEmbedding() mixin missed.",
 		status: "wired",
-		run: (e) => import("./embeddingsCommand-CMgPyRTr.js").then((t) => t.runEmbeddingsCommand(e)),
+		run: (e) => import("./embeddingsCommand-CTmiQvwa.js").then((t) => t.runEmbeddingsCommand(e)),
 		help: {
 			usage: "backfill <table> --text <field> --vector <field> [--model <m>] [--batch <n>] [--dry-run]",
 			flags: [
@@ -614,14 +614,14 @@ var u = () => {
 		summary: "Ask a RUNNING app whether its declared access is enforced. `access` calls every guarded procedure with NO credentials and reports any that answer (--process, --url, --strict, --format).",
 		status: "wired",
 		handlesHelp: !0,
-		run: (e) => import("./probeCommand-_C0YU207.js").then((t) => t.runProbeCommand(e))
+		run: (e) => import("./probeCommand-6HxEkNDG.js").then((t) => t.runProbeCommand(e))
 	},
 	{
 		name: "schedule",
 		summary: "Operate on registered schedules. `run <name>` fires one on demand (--process, --trigger manual|external, --url).",
 		status: "wired",
 		handlesHelp: !0,
-		run: (e) => import("./scheduleCmd-DQRu6BZC.js").then((t) => t.runScheduleCommand(e))
+		run: (e) => import("./scheduleCmd-DYBUfo_T.js").then((t) => t.runScheduleCommand(e))
 	},
 	{
 		name: "schedule-manifest",
@@ -643,35 +643,35 @@ var u = () => {
 		handlesHelp: !0,
 		summary: "Tail recent log records from every running voltro process. --tail N --since 30s --level error --filter PAT --format json|pretty|text.",
 		status: "wired",
-		run: (e) => import("./logsCmd-B6oNsfaZ.js").then((t) => t.runLogsCommand(e))
+		run: (e) => import("./logsCmd-BU8uCdys.js").then((t) => t.runLogsCommand(e))
 	},
 	{
 		name: "traces",
 		handlesHelp: !0,
 		summary: "Distributed traces from every running api. --tail N --errors --since 30s --process NAME --format json|pretty. Use --id <traceId> for the waterfall of one trace.",
 		status: "wired",
-		run: (e) => import("./tracesCmd-DgtgOUdi.js").then((t) => t.runTracesCommand(e))
+		run: (e) => import("./tracesCmd-BWYDqMy6.js").then((t) => t.runTracesCommand(e))
 	},
 	{
 		name: "inspect",
 		handlesHelp: !0,
 		summary: "Query the live /_voltro/inspect/* surface. Subcommands: app, routes, rpc, metrics, cache, schedules, aggregates, invoke. --process NAME --format json|pretty. `schedules --failing` reports only broken crons and exits 1 if any (usable as a post-deploy gate).",
 		status: "wired",
-		run: (e) => import("./inspectCmd-niF97fAq.js").then((t) => t.runInspectCommand(e))
+		run: (e) => import("./inspectCmd-CP-G0sVK.js").then((t) => t.runInspectCommand(e))
 	},
 	{
 		name: "workflows",
 		handlesHelp: !0,
 		summary: "Inspect + operate workflow runs. Subcommands: list, show <runId>, start <name>, retry|cancel|suspend|resume <runId>, signal|update <runId> --name, children <parentExecutionId>, flow (declarative flow-control queue + ledger), pause|unpause <workflowName>.",
 		status: "wired",
-		run: (e) => import("./workflowsCmd-BGF-mRZ5.js").then((t) => t.runWorkflowsCommand(e))
+		run: (e) => import("./workflowsCmd-g-DNpaUc.js").then((t) => t.runWorkflowsCommand(e))
 	},
 	{
 		name: "cluster",
 		handlesHelp: !0,
 		summary: "Clustering snapshot of every running api. Subcommand: status — per-instance replicaId, runner address, dialect, CDC flavor, coordination, server_id, + a flag for SQL runners stuck on localhost. --process NAME --format json|pretty.",
 		status: "wired",
-		run: (e) => import("./clusterCmd-DrVFCzSj.js").then((t) => t.runClusterCommand(e))
+		run: (e) => import("./clusterCmd-CdLB1GkT.js").then((t) => t.runClusterCommand(e))
 	},
 	{
 		name: "login",

package/dist/{dashboardCommand-Cq1PWvI1.js → dashboardCommand-BekcY5Ls.js}

@@ -1,6 +1,6 @@
-import { f as e } from "./dev-CmuvUKRq.js";
-import { Z as t, et as n } from "./webDev-DSI9SOhs.js";
-import { t as r } from "./start-Clz-1BHB.js";
+import { f as e } from "./dev-Dw263KPu.js";
+import { Q as t, tt as n } from "./webDev-C53hJdcL.js";
+import { t as r } from "./start-B9NGB8gn.js";
 import { join as i } from "node:path";
 import { existsSync as a } from "node:fs";
 import { createLogger as o } from "@voltro/logger";