@voltro/cli 0.56.0 → 0.58.0

package/dist/{codemodRunner-BlQPfjzA.js → codemodRunner-BKjCwGiN.js}

@@ -2,13 +2,13 @@ import { A as e, D as t, I as n, O as r, _ as i, d as a, f as o, i as s, m as c,
 import { t as d } from "./pageConvention-CMpfDN6r.js";
 import { r as f } from "./tsconfigPaths-BWXBWgcl.js";
 import { a as p, i as m, t as h } from "./fileTaxonomy-CbyMQYx_.js";
-import { basename as g, dirname as _, join as v, relative as ee } from "node:path";
-import { existsSync as y, readFileSync as te, statSync as ne } from "node:fs";
-import { execFileSync as re } from "node:child_process";
-import { Node as b, Project as ie, QuoteKind as ae, SyntaxKind as x } from "ts-morph";
-import { globSync as oe } from "tinyglobby";
+import { basename as g, dirname as _, join as v, relative as y } from "node:path";
+import { existsSync as b, readFileSync as ee, statSync as te } from "node:fs";
+import { execFileSync as ne } from "node:child_process";
+import { Node as x, Project as re, QuoteKind as ie, SyntaxKind as S } from "ts-morph";
+import { globSync as ae } from "tinyglobby";
 //#region src/codemodHelpers.ts
-var S = (e, t, n) => {
+var C = (e, t, n) => {
 	let r = [];
 	for (let i of e.getImportDeclarations()) if (i.getModuleSpecifierValue() === t) for (let e of i.getNamedImports()) {
 		if (e.getName() !== n) continue;
@@ -16,70 +16,70 @@ var S = (e, t, n) => {
 		r.push(t ? t.getText() : e.getName());
 	}
 	return r;
-}, C = (e, t) => {
+}, w = (e, t) => {
 	let n = e.getExpression();
-	return b.isIdentifier(n) && t.includes(n.getText());
-}, se = (e, { module: t, from: n, to: r }) => {
+	return x.isIdentifier(n) && t.includes(n.getText());
+}, oe = (e, { module: t, from: n, to: r }) => {
 	let i = 0;
 	for (let a of e.getSourceFiles()) for (let e of a.getImportDeclarations()) if (e.getModuleSpecifierValue() === t) for (let t of e.getNamedImports()) {
 		if (t.getName() !== n) continue;
 		let e = t.getNameNode();
-		!t.getAliasNode() && b.isIdentifier(e) ? e.rename(r) : e.replaceWithText(r), i++;
+		!t.getAliasNode() && x.isIdentifier(e) ? e.rename(r) : e.replaceWithText(r), i++;
 	}
 	return i;
-}, ce = (e, { from: t, to: n }) => {
+}, se = (e, { from: t, to: n }) => {
 	let r = 0;
 	for (let i of e.getSourceFiles()) {
 		for (let e of i.getImportDeclarations()) e.getModuleSpecifierValue() === t && (e.setModuleSpecifier(n), r++);
 		for (let e of i.getExportDeclarations()) e.getModuleSpecifierValue() === t && (e.setModuleSpecifier(n), r++);
-		for (let e of i.getDescendantsOfKind(x.CallExpression)) {
-			if (e.getExpression().getKind() !== x.ImportKeyword) continue;
+		for (let e of i.getDescendantsOfKind(S.CallExpression)) {
+			if (e.getExpression().getKind() !== S.ImportKeyword) continue;
 			let i = e.getArguments()[0];
-			i && b.isStringLiteral(i) && i.getLiteralValue() === t && (i.replaceWithText(JSON.stringify(n)), r++);
+			i && x.isStringLiteral(i) && i.getLiteralValue() === t && (i.replaceWithText(JSON.stringify(n)), r++);
 		}
 	}
 	return r;
-}, le = (e, { component: t, from: n, to: r }) => {
+}, ce = (e, { component: t, from: n, to: r }) => {
 	let i = 0;
 	for (let a of e.getSourceFiles()) {
-		let e = [...a.getDescendantsOfKind(x.JsxOpeningElement), ...a.getDescendantsOfKind(x.JsxSelfClosingElement)];
-		for (let a of e) if (a.getTagNameNode().getText() === t) for (let e of a.getAttributes()) b.isJsxAttribute(e) && e.getNameNode().getText() === n && (e.getNameNode().replaceWithText(r), i++);
+		let e = [...a.getDescendantsOfKind(S.JsxOpeningElement), ...a.getDescendantsOfKind(S.JsxSelfClosingElement)];
+		for (let a of e) if (a.getTagNameNode().getText() === t) for (let e of a.getAttributes()) x.isJsxAttribute(e) && e.getNameNode().getText() === n && (e.getNameNode().replaceWithText(r), i++);
 	}
 	return i;
-}, ue = (e, { inCallTo: t, module: n, from: r, to: i }) => {
+}, le = (e, { inCallTo: t, module: n, from: r, to: i }) => {
 	let a = 0;
 	for (let o of e.getSourceFiles()) {
-		let e = S(o, n, t);
-		if (e.length !== 0) for (let t of o.getDescendantsOfKind(x.CallExpression).reverse()) {
-			if (!C(t, e)) continue;
+		let e = C(o, n, t);
+		if (e.length !== 0) for (let t of o.getDescendantsOfKind(S.CallExpression).reverse()) {
+			if (!w(t, e)) continue;
 			let n = t.getArguments()[0];
-			if (!(!n || !b.isObjectLiteralExpression(n))) for (let e of n.getProperties()) {
-				if (!b.isPropertyAssignment(e) && !b.isShorthandPropertyAssignment(e)) continue;
+			if (!(!n || !x.isObjectLiteralExpression(n))) for (let e of n.getProperties()) {
+				if (!x.isPropertyAssignment(e) && !x.isShorthandPropertyAssignment(e)) continue;
 				let t = e.getNameNode();
-				t.getText() === r && (b.isShorthandPropertyAssignment(e) ? e.replaceWithText(`${i}: ${r}`) : t.replaceWithText(i), a++);
+				t.getText() === r && (x.isShorthandPropertyAssignment(e) ? e.replaceWithText(`${i}: ${r}`) : t.replaceWithText(i), a++);
 			}
 		}
 	}
 	return a;
-}, de = (e, { module: t, name: n }) => {
+}, ue = (e, { module: t, name: n }) => {
 	let r = 0;
 	for (let i of e.getSourceFiles()) {
 		let e = i.getImportDeclaration((e) => e.getModuleSpecifierValue() === t);
 		e && (e.getNamedImports().some((e) => e.getName() === n) || (e.addNamedImport(n), r++));
 	}
 	return r;
-}, fe = (e, t, n) => {
+}, de = (e, t, n) => {
 	let r = e.getImportDeclaration((e) => e.getModuleSpecifierValue() === t);
 	r ? r.getNamedImports().some((e) => e.getName() === n) || r.addNamedImport(n) : e.addImportDeclaration({
 		moduleSpecifier: t,
 		namedImports: [n]
 	});
-}, pe = {
-	renameImport: se,
-	renameModuleSpecifier: ce,
-	renameJsxProp: le,
-	renameObjectKey: ue,
-	addImport: de,
+}, fe = {
+	renameImport: oe,
+	renameModuleSpecifier: se,
+	renameJsxProp: ce,
+	renameObjectKey: le,
+	addImport: ue,
 	removeImport: (e, { module: t, name: n }) => {
 		let r = 0;
 		for (let i of e.getSourceFiles()) for (let e of i.getImportDeclarations()) {
@@ -92,9 +92,9 @@ var S = (e, t, n) => {
 	changeCallArgs: (e, { module: t, callee: n, reorder: r, drop: i, toObject: a }) => {
 		let o = 0;
 		for (let s of e.getSourceFiles()) {
-			let e = S(s, t, n);
-			if (e.length !== 0) for (let t of s.getDescendantsOfKind(x.CallExpression).reverse()) {
-				if (!C(t, e)) continue;
+			let e = C(s, t, n);
+			if (e.length !== 0) for (let t of s.getDescendantsOfKind(S.CallExpression).reverse()) {
+				if (!w(t, e)) continue;
 				let n = t.getArguments().map((e) => e.getText());
 				if (r && (n = r.map((e) => n[e]).filter((e) => e !== void 0)), i) {
 					let e = new Set(i);
@@ -113,31 +113,31 @@ var S = (e, t, n) => {
 	wrapCall: (e, { module: t, callee: n, wrapper: r, wrapperModule: i }) => {
 		let a = 0;
 		for (let o of e.getSourceFiles()) {
-			let e = S(o, t, n);
+			let e = C(o, t, n);
 			if (e.length === 0) continue;
 			let s = !1;
-			for (let t of o.getDescendantsOfKind(x.CallExpression).reverse()) C(t, e) && (t.replaceWithText(`${r}(${t.getText()})`), s = !0, a++);
-			s && fe(o, i, r);
+			for (let t of o.getDescendantsOfKind(S.CallExpression).reverse()) w(t, e) && (t.replaceWithText(`${r}(${t.getText()})`), s = !0, a++);
+			s && de(o, i, r);
 		}
 		return a;
 	},
 	annotate: (e, { module: t, symbol: n, comment: r }) => {
 		let i = 0;
 		for (let a of e.getSourceFiles()) {
-			let e = S(a, t, n);
+			let e = C(a, t, n);
 			if (e.length === 0) continue;
 			let o = /* @__PURE__ */ new Map();
-			for (let t of a.getDescendantsOfKind(x.Identifier)) {
+			for (let t of a.getDescendantsOfKind(S.Identifier)) {
 				if (!e.includes(t.getText())) continue;
-				let n = t.getFirstAncestorByKind(x.ExpressionStatement) ?? t.getFirstAncestorByKind(x.VariableStatement) ?? t.getFirstAncestorByKind(x.ReturnStatement);
+				let n = t.getFirstAncestorByKind(S.ExpressionStatement) ?? t.getFirstAncestorByKind(S.VariableStatement) ?? t.getFirstAncestorByKind(S.ReturnStatement);
 				n && o.set(n.getStart(), n);
 			}
 			for (let e of [...o.values()].sort((e, t) => t.getStart() - e.getStart())) e.replaceWithText(`// TODO(voltro-migration): ${r}\n${e.getText()}`), i++;
 		}
 		return i;
 	}
-}, me = /^\d+\.\d+\.\d+$/, w = (e) => {
-	if (!me.test(e.version)) throw Error(`codemod "${e.id}": version must be x.y.z (got "${e.version}")`);
+}, pe = /^\d+\.\d+\.\d+$/, T = (e) => {
+	if (!pe.test(e.version)) throw Error(`codemod "${e.id}": version must be x.y.z (got "${e.version}")`);
 	if (!e.id.startsWith(`${e.version}/`)) throw Error(`codemod "${e.id}": id must start with "${e.version}/" (the version it migrates to)`);
 	if (e.kind === "transform" && typeof e.transform != "function") throw Error(`codemod "${e.id}": kind:'transform' requires a transform() function`);
 	if (e.kind === "manual" && (e.note === void 0 || e.note.trim() === "")) throw Error(`codemod "${e.id}": kind:'manual' requires a non-empty note`);
@@ -148,14 +148,14 @@ var S = (e, t, n) => {
 		__codemod: !0,
 		seq: n
 	};
-}, T = (e) => RegExp(`\\b${e}\\s*(?:<[^()]*>)?\\s*\\(`), he = (e, t) => {
+}, E = (e) => RegExp(`\\b${e}\\s*(?:<[^()]*>)?\\s*\\(`), me = (e, t) => {
 	let n = e.version.split(".").map(Number), r = t.version.split(".").map(Number);
 	for (let e = 0; e < 3; e++) {
 		let t = (n[e] ?? 0) - (r[e] ?? 0);
 		if (t !== 0) return t;
 	}
 	return e.seq === t.seq ? e.id < t.id ? -1 : +(e.id > t.id) : e.seq - t.seq;
-}, ge = w({
+}, he = T({
 	version: "0.3.0",
 	id: "0.3.0/01_prod-serve-requires-build",
 	title: "Production `voltro serve` requires a precompiled bundle (build before serve)",
@@ -175,7 +175,7 @@ var S = (e, t, n) => {
 		"",
 		"`voltro dev` and a non-production local `voltro serve` are unchanged (still tsx)."
 	].join("\n")
-}), _e = w({
+}), ge = T({
 	version: "0.4.0",
 	id: "0.4.0/01_rbac-forbidden-to-scopeerror",
 	title: "@voltro/plugin-rbac: `Forbidden` → protocol `ScopeError` (one denial tag)",
@@ -201,36 +201,36 @@ var S = (e, t, n) => {
 		let a = r + i;
 		a > 0 && n(`rbac Forbidden → ScopeError: rewrote ${a} import site(s). Check any \`new Forbidden({ reason })\` (→ \`new ScopeError({ message })\`) and \`catchTag('Forbidden')\` / \`_tag === 'Forbidden'\` (→ 'ScopeError') by hand.`);
 	}
-}), E = "@voltro/plugin-rbac/web", ve = "@voltro/client", ye = w({
+}), D = "@voltro/plugin-rbac/web", _e = "@voltro/client", ve = T({
 	version: "0.4.0",
 	id: "0.4.0/02_rbac-web-to-client-permissions",
 	title: "@voltro/plugin-rbac/web removed — the UI gate lives in @voltro/client",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === E)),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === D)),
 	transform: ({ project: e, helpers: t, log: n }) => {
 		let r = t.annotate(e, {
-			module: E,
+			module: D,
 			symbol: "RbacScopeContext",
 			comment: "voltro 0.4.0: RbacScopeContext is gone. Read scopes with `usePermissions()` from '@voltro/client' — it returns { scopes }, not the bare array."
 		}), i = t.renameImport(e, {
-			module: E,
+			module: D,
 			from: "RbacScopeProvider",
 			to: "PermissionProvider"
 		}) + t.renameImport(e, {
-			module: E,
+			module: D,
 			from: "canFromScopes",
 			to: "canCall"
 		}) + t.renameImport(e, {
-			module: E,
+			module: D,
 			from: "canAnyFromScopes",
 			to: "canCallAny"
 		}), a = t.renameModuleSpecifier(e, {
-			from: E,
-			to: ve
+			from: D,
+			to: _e
 		});
 		a > 0 && n(`@voltro/plugin-rbac/web → @voltro/client: repointed ${a} import(s)` + (i > 0 ? `, renamed ${i} symbol(s)` : "") + ". Mount <PermissionProvider scopes={…}> where <RbacScopeProvider> was — same prop, and it now feeds useCan across the whole app." + (r > 0 ? ` ${r} RbacScopeContext site(s) were annotated: switch them to usePermissions().` : ""));
 	}
-}), be = w({
+}), ye = T({
 	version: "0.5.0",
 	id: "0.5.0/01_one-terminal-exactly-one",
 	title: ".one() now fails on MORE than one row; NoRowFound is a declarable typed error",
@@ -263,7 +263,7 @@ var S = (e, t, n) => {
 		"      new OptimisticLockError({ table: 'notes', expected: 3 })",
 		"  • `instanceof` and `err._tag === 'NoRowFound'` checks are unaffected."
 	].join("\n")
-}), xe = w({
+}), be = T({
 	version: "0.5.0",
 	id: "0.5.0/02_typed-store-rows",
 	title: "store.query() now returns the row type — casts on row fields may stop compiling",
@@ -302,14 +302,14 @@ var S = (e, t, n) => {
 		"A hand-built descriptor still resolves to `Row`, so untyped call sites are",
 		"unaffected."
 	].join("\n")
-}), Se = /VOLTRO_DEV_SESSION_SECRET|voltro-dev-session-secret/, Ce = /VOLTRO_SESSION_SECRET\s*(?:\?\?|\|\|)\s*['"`]/, we = w({
+}), xe = /VOLTRO_DEV_SESSION_SECRET|voltro-dev-session-secret/, Se = /VOLTRO_SESSION_SECRET\s*(?:\?\?|\|\|)\s*['"`]/, Ce = T({
 	version: "0.6.0",
 	id: "0.6.0/01_no-dev-session-secret",
 	title: "The built-in dev session secret is removed; VOLTRO_SESSION_SECRET is required",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return Se.test(t) || Ce.test(t);
+		return xe.test(t) || Se.test(t);
 	}),
 	note: [
 		"The framework no longer has a built-in fallback session secret.",
@@ -353,14 +353,14 @@ var S = (e, t, n) => {
 		"         voltro secret generate session",
 		"     `voltro dev` minting one for you locally does NOT cover your deployment."
 	].join("\n")
-}), Te = /computeProration|roundHalfAwayFromZero|ProrationInput|ProrationResult|DunningState|DunningCycleResult|DunningSchedule|DEFAULT_DUNNING_SCHEDULE|validateDunningSchedule|retryTimeFor|openDunning|recoverDunning|advanceDunning|runDunningCycle|recordPaymentFailure|recordPaymentSuccess|dunningSchedule|DunningStore|memoryDunningStore|dataStoreDunningStore/, Ee = w({
+}), we = /computeProration|roundHalfAwayFromZero|ProrationInput|ProrationResult|DunningState|DunningCycleResult|DunningSchedule|DEFAULT_DUNNING_SCHEDULE|validateDunningSchedule|retryTimeFor|openDunning|recoverDunning|advanceDunning|runDunningCycle|recordPaymentFailure|recordPaymentSuccess|dunningSchedule|DunningStore|memoryDunningStore|dataStoreDunningStore/, Te = T({
 	version: "0.6.0",
 	id: "0.6.0/03_billing-on-stripe-sdk",
 	title: "Billing moved onto the Stripe SDK; proration + dunning are now Stripe’s",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return Te.test(t) || /@voltro\/plugin-billing/.test(t);
+		return we.test(t) || /@voltro\/plugin-billing/.test(t);
 	}),
 	note: [
 		"`@voltro/plugin-billing` now talks to Stripe through the official SDK, and two",
@@ -416,7 +416,7 @@ var S = (e, t, n) => {
 		"  Set a `priceId` on every paid plan. A subscription created in the Stripe",
 		"  Dashboard is now recognised via its price id, which requires the mapping."
 	].join("\n")
-}), De = w({
+}), Ee = T({
 	version: "0.6.0",
 	id: "0.6.0/02_subscription-state-union",
 	title: "SubscriptionState is a discriminated union — `loading` now narrows `data`",
@@ -463,7 +463,7 @@ var S = (e, t, n) => {
 		"`error` set. If you branch only on `loading`, check `error` too, or that",
 		"case renders a skeleton forever."
 	].join("\n")
-}), Oe = w({
+}), De = T({
 	version: "0.6.0",
 	id: "0.6.0/04_relation-key-validation",
 	title: "relation key options are validated at boot; `one` now fails on more than one match",
@@ -504,28 +504,28 @@ var S = (e, t, n) => {
 		"read it now rather than waiting: `sourceKey` is almost always what a",
 		"\"parent\" relation means."
 	].join("\n")
-}), ke = "@voltro/plugin-atlassian", Ae = "atlassianPlugin", D = (e) => {
+}), Oe = "@voltro/plugin-atlassian", ke = "atlassianPlugin", Ae = (e) => {
 	let t = [];
-	for (let n of e.getImportDeclarations()) if (n.getModuleSpecifierValue() === ke) for (let e of n.getNamedImports()) e.getName() === Ae && t.push(e.getAliasNode()?.getText() ?? e.getName());
+	for (let n of e.getImportDeclarations()) if (n.getModuleSpecifierValue() === Oe) for (let e of n.getNamedImports()) e.getName() === ke && t.push(e.getAliasNode()?.getText() ?? e.getName());
 	return t;
-}, je = w({
+}, je = T({
 	version: "0.6.0",
 	id: "0.6.0/05_atlassian-avatar-mode",
 	title: "atlassianPlugin's `avatar` config requires an explicit `mode: 'service' | 'perUser'`",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => D(e).length > 0),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Ae(e).length > 0),
 	transform: ({ project: e, log: t }) => {
 		let n = 0;
 		for (let t of e.getSourceFiles()) {
-			let e = D(t);
-			if (e.length !== 0) for (let r of t.getDescendantsOfKind(x.CallExpression)) {
+			let e = Ae(t);
+			if (e.length !== 0) for (let r of t.getDescendantsOfKind(S.CallExpression)) {
 				if (!e.includes(r.getExpression().getText())) continue;
 				let t = r.getArguments()[0];
-				if (!t || !b.isObjectLiteralExpression(t)) continue;
+				if (!t || !x.isObjectLiteralExpression(t)) continue;
 				let i = t.getProperty("avatar");
-				if (!i || !b.isPropertyAssignment(i)) continue;
+				if (!i || !x.isPropertyAssignment(i)) continue;
 				let a = i.getInitializer();
-				!a || !b.isObjectLiteralExpression(a) || a.getProperty("mode") || (a.insertPropertyAssignment(0, {
+				!a || !x.isObjectLiteralExpression(a) || a.getProperty("mode") || (a.insertPropertyAssignment(0, {
 					name: "mode",
 					initializer: "'service'"
 				}), n++);
@@ -533,7 +533,7 @@ var S = (e, t, n) => {
 		}
 		n > 0 && (t(`atlassian avatar: added mode:'service' to ${n} config${n === 1 ? "" : "s"}`), t("  → to use the viewing user's own PAT instead, switch to mode:'perUser' and add resolveSubject"));
 	}
-}), Me = w({
+}), Me = T({
 	version: "0.6.0",
 	id: "0.6.0/06_ui-strings-connect-account",
 	title: "UiStrings gained a required `connectAccount` section",
@@ -577,7 +577,7 @@ var S = (e, t, n) => {
 		"Alternatively, switch the annotation to `PartialUiStrings` if the object",
 		"was only ever an override bag."
 	].join("\n")
-}), Ne = T("setRowFilter"), Pe = /\bresolveRowFilterScope\b/, Fe = w({
+}), Ne = E("setRowFilter"), Pe = /\bresolveRowFilterScope\b/, Fe = T({
 	version: "0.7.0",
 	id: "0.7.0/01_row-filter-load-failure",
 	title: "A row filter that fails to load now errors instead of returning zero rows",
@@ -655,14 +655,14 @@ var S = (e, t, n) => {
 		"     \"every row you could see was just deleted\". Make sure your subscription",
 		"     error handling surfaces this rather than swallowing it."
 	].join("\n")
-}), Ie = w({
+}), Ie = T({
 	version: "0.7.0",
 	id: "0.7.0/02_testing-invoke-effect-handlers",
 	title: "@voltro/testing: invoke() runs Effect handlers; executor types widened",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return t.includes("@voltro/testing") ? T("invoke").test(t) || /\bProcedureExecutor\b/.test(t) : !1;
+		return t.includes("@voltro/testing") ? E("invoke").test(t) || /\bProcedureExecutor\b/.test(t) : !1;
 	}),
 	note: [
 		"`invoke(descriptor, executor, input, ctx)` now DETECTS an Effect-returning",
@@ -710,7 +710,7 @@ var S = (e, t, n) => {
 		"transaction, the deadlock replay, `afterCommit` and the plugin interceptor",
 		"chain wrap an Effect handler exactly as they wrap an async one."
 	].join("\n")
-}), Le = /\bpasswordHash\b/, Re = /\b(UserStore|UserRecord|memoryUserStore|postgresUserStore)\b/, ze = w({
+}), Le = /\bpasswordHash\b/, Re = /\b(UserStore|UserRecord|memoryUserStore|postgresUserStore)\b/, ze = T({
 	version: "0.8.0",
 	id: "0.8.0/01_optional-password-hash",
 	title: "`UserRecord.passwordHash` is optional — password-less identities are now first-class",
@@ -788,7 +788,7 @@ var S = (e, t, n) => {
 		"     to match and make sure your read path maps a NULL column to `null`/",
 		"     `undefined` rather than to `''`-by-coercion."
 	].join("\n")
-}), Be = w({
+}), Be = T({
 	version: "0.8.0",
 	id: "0.8.0/02_ssr-streams-and-loaderdata",
 	title: "`ssr` pages stream; `useLoaderData<T>()` returns `LoaderData<T>`",
@@ -840,7 +840,7 @@ var S = (e, t, n) => {
 		"docs. `defer()` requires `renderMode: 'ssr'` and `interactive: 'full'`;",
 		"every other combination is a hard error naming the page."
 	].join("\n")
-}), Ve = /renderMode\s*[=:]\s*['"](spa|client)['"]/, He = /(^|[/\\])pages[/\\].*[/\\]?layout\.tsx$/, Ue = w({
+}), Ve = /renderMode\s*[=:]\s*['"](spa|client)['"]/, He = /(^|[/\\])pages[/\\].*[/\\]?layout\.tsx$/, Ue = T({
 	version: "0.9.0",
 	id: "0.9.0/01_ssr-layout-shell-for-spa",
 	title: "A `renderMode:'spa'` page under a layout now server-renders that layout",
@@ -885,35 +885,35 @@ var S = (e, t, n) => {
 		"Nothing changes for `static` / `ssr` / `isr` pages, or for a spa page that",
 		"has no layout (still a pure client mount)."
 	].join("\n")
-}), O = "client", k = "spa", A = (e) => {
+}), O = "client", We = "spa", k = (e) => {
 	if (!e) return null;
-	let t = b.isAsExpression(e) ? e.getExpression() : e;
-	return b.isStringLiteral(t) ? t : null;
-}, j = (e) => {
+	let t = x.isAsExpression(e) ? e.getExpression() : e;
+	return x.isStringLiteral(t) ? t : null;
+}, Ge = (e) => {
 	let t = [];
-	for (let n of e.getDescendantsOfKind(x.VariableDeclaration)) {
+	for (let n of e.getDescendantsOfKind(S.VariableDeclaration)) {
 		if (n.getName() !== "renderMode") continue;
-		let e = A(n.getInitializer());
+		let e = k(n.getInitializer());
 		e && t.push(e);
 	}
-	for (let n of e.getDescendantsOfKind(x.PropertyAssignment)) {
+	for (let n of e.getDescendantsOfKind(S.PropertyAssignment)) {
 		if (n.getName() !== "renderMode") continue;
-		let e = A(n.getInitializer());
+		let e = k(n.getInitializer());
 		e && t.push(e);
 	}
 	return t;
-}, We = w({
+}, Ke = T({
 	version: "0.10.0",
 	id: "0.10.0/01_render-mode-client-to-spa",
 	title: "renderMode is a closed set — `'client'` becomes `'spa'`",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => j(e).some((e) => e.getLiteralValue() === O)),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Ge(e).some((e) => e.getLiteralValue() === O)),
 	transform: ({ project: e, log: t }) => {
 		let n = 0, r = /* @__PURE__ */ new Set();
-		for (let t of e.getSourceFiles()) for (let e of j(t)) e.getLiteralValue() === O && (e.setLiteralValue(k), n++, r.add(t.getFilePath()));
-		n > 0 && (t(`renderMode: rewrote ${n} \`'${O}'\` → \`'${k}'\` in ${r.size} file${r.size === 1 ? "" : "s"}`), t("  → 'spa' is the mode those pages already behaved as: no prerender, client-rendered"), t("  → new in 0.9.0: if such a page sits under a layout, that layout now server-renders (see the note above)"));
+		for (let t of e.getSourceFiles()) for (let e of Ge(t)) e.getLiteralValue() === O && (e.setLiteralValue(We), n++, r.add(t.getFilePath()));
+		n > 0 && (t(`renderMode: rewrote ${n} \`'${O}'\` → \`'${We}'\` in ${r.size} file${r.size === 1 ? "" : "s"}`), t("  → 'spa' is the mode those pages already behaved as: no prerender, client-rendered"), t("  → new in 0.9.0: if such a page sits under a layout, that layout now server-renders (see the note above)"));
 	}
-}), Ge = w({
+}), qe = T({
 	version: "0.10.0",
 	id: "0.10.0/02_router-state-carries-its-path",
 	title: "`renderRouterStateScript` now requires the `path` it rendered",
@@ -950,7 +950,7 @@ var S = (e, t, n) => {
 		"Trailing slashes, a trailing `/index.html`, and percent-encoding are normalised",
 		"before the comparison, so the usual static-host shapes still hydrate."
 	].join("\n")
-}), Ke = w({
+}), Je = T({
 	version: "0.10.0",
 	id: "0.10.0/03_workflow-caller-context-resolved",
 	title: "workflow `buildContext` receives a RESOLVED caller context",
@@ -996,7 +996,7 @@ var S = (e, t, n) => {
 		"it receives the resolved context too, so `callerContext?.subject ?? …` there",
 		"becomes `callerContext.subject`."
 	].join("\n")
-}), qe = w({
+}), Ye = T({
 	version: "0.10.0",
 	id: "0.10.0/04_seed-run-status-skipped",
 	title: "seed run status gained `skipped`",
@@ -1037,7 +1037,7 @@ var S = (e, t, n) => {
 		"`Schema.Literal`, a zod enum, a DB check constraint), widen it there too — an",
 		"unlisted third state is a DECODE failure, not a rendering oddity."
 	].join("\n")
-}), Je = w({
+}), Xe = T({
 	version: "0.10.0",
 	id: "0.10.0/05_subscription-idle-state",
 	title: "`useSubscription` gained an idle state for `skip`",
@@ -1089,7 +1089,7 @@ var S = (e, t, n) => {
 		"time's data), hold it in your own state — the subscription no longer claims to",
 		"have data it was told to stop fetching."
 	].join("\n")
-}), Ye = w({
+}), Ze = T({
 	version: "0.11.0",
 	id: "0.11.0/01_step-options-type-params",
 	title: "`StepOptions` takes the context type first",
@@ -1117,7 +1117,7 @@ var S = (e, t, n) => {
 		"If the step reads nothing from earlier steps, `StepOptions<Record<never, never>,",
 		"Result>` is the honest spelling."
 	].join("\n")
-}), Xe = w({
+}), Qe = T({
 	version: "0.12.0",
 	id: "0.12.0/01_outbound-http-ssrf-guard",
 	title: "Outbound HttpClient blocks internal targets by default (add `http.allowHosts` if you call one)",
@@ -1157,7 +1157,7 @@ var S = (e, t, n) => {
 		"private address (DNS rebinding) still passes. Pair with network-layer egress",
 		"control if that is in your threat model."
 	].join("\n")
-}), Ze = w({
+}), $e = T({
 	version: "0.12.0",
 	id: "0.12.0/02_api-key-revoke-tenant-scope",
 	title: "apiKeyService.revoke/rotate now require the caller's tenantId",
@@ -1186,7 +1186,7 @@ var S = (e, t, n) => {
 		"The framework's own `/v1/api-keys/revoke` route already passes the caller's",
 		"tenant — no change needed if you only use the shipped routes."
 	].join("\n")
-}), Qe = w({
+}), et = T({
 	version: "0.12.0",
 	id: "0.12.0/03_api-key-on-behalf-of",
 	title: "API keys: createdBy is provenance, onBehalfOf is ownership",
@@ -1220,7 +1220,7 @@ var S = (e, t, n) => {
 		"specific one against what the body asks for. Grant them in your role map. A key",
 		"can never carry scopes its issuer does not hold."
 	].join("\n")
-}), $e = w({
+}), tt = T({
 	version: "0.12.0",
 	id: "0.12.0/04_inspect-fail-closed",
 	title: "The inspect surface requires VOLTRO_INSPECT_TOKEN (previously open when unset)",
@@ -1249,7 +1249,7 @@ var S = (e, t, n) => {
 		"",
 		"To turn the surface off entirely instead, set `VOLTRO_INSPECT=off`."
 	].join("\n")
-}), et = w({
+}), nt = T({
 	version: "0.13.0",
 	id: "0.13.0/01_bearer-gates-fail-closed",
 	title: "checkBearer is fail-closed; scimPlugin refuses an empty token",
@@ -1286,7 +1286,7 @@ var S = (e, t, n) => {
 		"  • `@voltro/plugin-prometheus` already passes `{ openWhenUnset: true }` — its",
 		"    `PROMETHEUS_TOKEN` is documented as optional. Nothing to do there."
 	].join("\n")
-}), tt = w({
+}), rt = T({
 	version: "0.13.0",
 	id: "0.13.0/02_storage-grants-owner-only",
 	title: "storage.share / revoke / listGrants require ownership",
@@ -1317,7 +1317,7 @@ var S = (e, t, n) => {
 		"    returning the grant or null. `storage.revoke` is handed a grant id, so it has",
 		"    to resolve the object before it can check the owner."
 	].join("\n")
-}), nt = w({
+}), it = T({
 	version: "0.13.0",
 	id: "0.13.0/03_apply-plan-convergence-proof",
 	title: "applyPlan requires a `replan` convergence proof",
@@ -1350,7 +1350,7 @@ var S = (e, t, n) => {
 		"  • `AppliedMigration` gained `appliedOps` (operations actually EXECUTED, from",
 		"    the per-op results). If you construct that value in a test fixture, add it."
 	].join("\n")
-}), rt = w({
+}), at = T({
 	version: "0.14.0",
 	id: "0.14.0/01_resolve-scopes-store",
 	title: "auth.resolveScopes receives the app DataStore",
@@ -1388,19 +1388,19 @@ var S = (e, t, n) => {
 		"    deliberately does not, because only you know how fast a role change must",
 		"    take effect."
 	].join("\n")
-}), M = (e) => {
-	if (!b.isCallExpression(e)) return !1;
+}), ot = (e) => {
+	if (!x.isCallExpression(e)) return !1;
 	let t = e.getExpression();
-	return b.isPropertyAccessExpression(t) && t.getName() === "reactive" && e.getArguments().length === 0;
-}, it = (e) => e.getDescendantsOfKind(x.CallExpression).some(M), at = (e) => {
-	let t = 0, n = e.getDescendantsOfKind(x.CallExpression);
+	return x.isPropertyAccessExpression(t) && t.getName() === "reactive" && e.getArguments().length === 0;
+}, st = (e) => e.getDescendantsOfKind(S.CallExpression).some(ot), ct = (e) => {
+	let t = 0, n = e.getDescendantsOfKind(S.CallExpression);
 	for (let e of n) {
-		if (e.wasForgotten() || !M(e)) continue;
+		if (e.wasForgotten() || !ot(e)) continue;
 		let n = e.getExpression();
-		b.isPropertyAccessExpression(n) && (e.replaceWithText(n.getExpression().getText()), t++);
+		x.isPropertyAccessExpression(n) && (e.replaceWithText(n.getExpression().getText()), t++);
 	}
 	return t;
-}, ot = w({
+}, lt = T({
 	version: "0.14.0",
 	id: "0.14.0/02_reactive-by-default",
 	title: "Reactivity is the default; .reactive() is removed",
@@ -1418,16 +1418,16 @@ var S = (e, t, n) => {
 		"real saving: REPLICA IDENTITY FULL widens every UPDATE/DELETE in the WAL.",
 		"`voltro dev` warns if you opt out a table a query still reads."
 	].join("\n"),
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => it(e)),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => st(e)),
 	transform: ({ project: e, log: t }) => {
 		let n = 0, r = 0;
 		for (let t of e.getSourceFiles()) {
-			let e = at(t);
+			let e = ct(t);
 			e !== 0 && (n += e, r++);
 		}
 		return n > 0 && t(`removed ${n} .reactive() call(s) across ${r} file(s) — reactivity is the default`), n > 0;
 	}
-}), st = w({
+}), ut = T({
 	version: "0.14.0",
 	id: "0.14.0/07_dev-remote-file-migrations",
 	title: "voltro dev refuses unattended file migrations against a remote database",
@@ -1470,19 +1470,19 @@ var S = (e, t, n) => {
 		"Unchanged: `voltro db files`, `voltro db apply` and `voltro serve`. This gates the",
 		"AUTOMATIC boot path only; an explicit command is already an explicit decision."
 	].join("\n")
-}), ct = (e) => [...e.getImportDeclarations(), ...e.getExportDeclarations()], N = (e) => g(e).replace(/\.tsx?$/, ""), lt = (e, t, n) => {
-	let r = N(t), i = N(n);
+}), dt = (e) => [...e.getImportDeclarations(), ...e.getExportDeclarations()], A = (e) => g(e).replace(/\.tsx?$/, ""), ft = (e, t, n) => {
+	let r = A(t), i = A(n);
 	if (r === i) return;
 	let a = /\.tsx?$/.exec(e)?.[0] ?? "", o = a === "" ? e : e.slice(0, -a.length);
 	if (!o.endsWith(`/${r}`) && o !== r) return;
 	let s = a === "" ? "" : /\.tsx$/.test(n) ? ".tsx" : ".ts";
 	return `${o.slice(0, o.length - r.length)}${i}${s}`;
-}, P = (e, t) => {
+}, j = (e, t) => {
 	let n = e.getFilePath(), r = [];
-	for (let i of e.getProject().getSourceFiles()) for (let e of ct(i)) {
+	for (let i of e.getProject().getSourceFiles()) for (let e of dt(i)) {
 		let i = e.getModuleSpecifierValue();
 		if (i === void 0 || i.startsWith(".") || e.getModuleSpecifierSourceFile()?.getFilePath() !== n) continue;
-		let a = lt(i, n, t);
+		let a = ft(i, n, t);
 		a !== void 0 && r.push({
 			decl: e,
 			spec: a
@@ -1491,19 +1491,19 @@ var S = (e, t, n) => {
 	e.move(t);
 	for (let e of r) e.decl.setModuleSpecifier(e.spec);
 	return r.length;
-}, ut = (e) => {
+}, pt = (e) => {
 	let t = e.getProject().getCompilerOptions().paths;
 	if (t === void 0) return;
-	let n = N(e.getFilePath()), r = e.getFilePath().slice(0, e.getFilePath().lastIndexOf("/"));
+	let n = A(e.getFilePath()), r = e.getFilePath().slice(0, e.getFilePath().lastIndexOf("/"));
 	for (let [e, i] of Object.entries(t)) if (!e.endsWith("*")) for (let t of i ?? []) {
 		if (!/\.tsx?$/.test(t)) continue;
-		let i = N(t), a = t.slice(0, t.lastIndexOf("/"));
+		let i = A(t), a = t.slice(0, t.lastIndexOf("/"));
 		if (i === n && r.endsWith(a.replace(/^\.\//, ""))) return e;
 	}
-}, dt = /\.page\.tsx$/, F = (e) => {
+}, mt = /\.page\.tsx$/, M = (e) => {
 	let t = e.includes("\\src\\pages\\") ? "\\src\\pages\\" : "/src/pages/", n = e.indexOf(t);
 	return n === -1 ? null : e.slice(0, n);
-}, ft = (e) => e.endsWith(".tsx") && !i.has(e) && !d(e) && !/\.island\.tsx$/.test(e) && !dt.test(e), pt = w({
+}, ht = (e) => e.endsWith(".tsx") && !i.has(e) && !d(e) && !/\.island\.tsx$/.test(e) && !mt.test(e), gt = T({
 	version: "0.14.0",
 	id: "0.14.0/03_pages-suffix",
 	title: "Pages are declared with a .page.tsx suffix",
@@ -1518,8 +1518,8 @@ var S = (e, t, n) => {
 	transform: ({ project: e, log: t }) => {
 		let n = /* @__PURE__ */ new Map(), r = e.getSourceFiles().filter((t) => {
 			let r = t.getFilePath();
-			if (!ft(g(r))) return !1;
-			let i = F(r);
+			if (!ht(g(r))) return !1;
+			let i = M(r);
 			if (i === null) return !1;
 			let a = n.get(i);
 			return a === void 0 && (a = e.getSourceFile(v(i, "app.config.ts")) !== void 0 || e.getSourceFile(v(i, "app.config.tsx")) !== void 0, n.set(i, a)), a;
@@ -1537,13 +1537,13 @@ var S = (e, t, n) => {
 			let n = t.getFilePath(), r = g(n), s = _(n), c = r.slice(0, -4);
 			for (let t of [".test.tsx", ".spec.tsx"]) {
 				let n = v(s, `${c}${t}`), r = e.getSourceFile(n);
-				r !== void 0 && (P(r, v(s, `${c}.page${t}`)), o += 1);
+				r !== void 0 && (j(r, v(s, `${c}.page${t}`)), o += 1);
 			}
-			P(t, v(s, `${c}.page.tsx`));
+			j(t, v(s, `${c}.page.tsx`));
 			let l = i.get(n);
 			if (l !== void 0 && l.length > 0 && !l.every((e) => d(g(e)))) {
-				let e = F(n) ?? _(n), t = [...new Set(l)].map((t) => ee(e, t));
-				a.push(`${ee(e, n)}  ← imported by ${t.join(", ")}`);
+				let e = M(n) ?? _(n), t = [...new Set(l)].map((t) => y(e, t));
+				a.push(`${y(e, n)}  ← imported by ${t.join(", ")}`);
 			}
 		}
 		if (t(`renamed ${r.length} route file(s) to *.page.tsx${o > 0 ? ` (+${o} co-located test file(s))` : ""}`), a.length > 0) {
@@ -1551,7 +1551,7 @@ var S = (e, t, n) => {
 			for (let e of a) t(`    ${e}`);
 		}
 	}
-}), mt = [
+}), _t = [
 	/\.page\.tsx$/,
 	c,
 	s,
@@ -1562,24 +1562,24 @@ var S = (e, t, n) => {
 	a,
 	r,
 	t
-], ht = (e) => {
+], vt = (e) => {
 	let t = g(e);
-	return !/\.tsx?$/.test(t) || i.has(t) || n(t) || t === "index.ts" || t === "index.tsx" || t === "app.config.ts" ? !1 : !mt.some((e) => e.test(t));
-}, gt = (e) => {
+	return !/\.tsx?$/.test(t) || i.has(t) || n(t) || t === "index.ts" || t === "index.tsx" || t === "app.config.ts" ? !1 : !_t.some((e) => e.test(t));
+}, yt = (e) => {
 	let t = [], n = [], r = [], i = [];
 	for (let [a, o] of e.getExportedDeclarations()) {
 		let e = o[0];
 		if (e === void 0) continue;
-		if (b.isInterfaceDeclaration(e) || b.isTypeAliasDeclaration(e)) {
+		if (x.isInterfaceDeclaration(e) || x.isTypeAliasDeclaration(e)) {
 			i.push(a);
 			continue;
 		}
 		if (a === "default") {
-			if (!(b.isFunctionDeclaration(e) || b.isClassDeclaration(e) || b.isArrowFunction(e) || b.isFunctionExpression(e))) {
+			if (!(x.isFunctionDeclaration(e) || x.isClassDeclaration(e) || x.isArrowFunction(e) || x.isFunctionExpression(e))) {
 				r.push("default");
 				continue;
 			}
-			let n = b.isFunctionDeclaration(e) || b.isClassDeclaration(e) ? e.getName() : void 0;
+			let n = x.isFunctionDeclaration(e) || x.isClassDeclaration(e) ? e.getName() : void 0;
 			t.push(n ?? "Default");
 			continue;
 		}
@@ -1592,10 +1592,10 @@ var S = (e, t, n) => {
 		others: r,
 		types: i
 	};
-}, _t = (e, t) => {
+}, bt = (e, t) => {
 	let { components: n, hooks: r, others: i, types: a } = e;
 	return n.length + r.length + i.length === 0 ? a.length > 0 ? ".types" : null : t && h(n) && r.length === 0 && i.length === 0 ? ".component.tsx" : n.length === 0 && r.length === 1 && i.length === 0 ? ".hook" : null;
-}, vt = w({
+}, xt = T({
 	version: "0.14.0",
 	id: "0.14.0/04_file-taxonomy",
 	title: "Web files declare their contract (*.component.tsx / *.hook.ts / *.types.ts)",
@@ -1608,19 +1608,19 @@ var S = (e, t, n) => {
 		if (s.length > 0) for (let e of s) t(`  exempt (not ours): ${e.dir} — ${e.source}`);
 		for (let t of e.getSourceFiles()) {
 			let e = t.getFilePath();
-			if (!ht(e) || p(e, s)) continue;
-			let o = ut(t);
+			if (!vt(e) || p(e, s)) continue;
+			let o = pt(t);
 			if (o !== void 0) {
 				a.push(`${g(e)}  (tsconfig paths: "${o}")`);
 				continue;
 			}
-			let c = e.endsWith(".tsx"), l = gt(t), u = _t(l, c);
+			let c = e.endsWith(".tsx"), l = yt(t), u = bt(l, c);
 			if (u === null) {
 				l.components.length > 0 && l.hooks.length > 0 && r.push(`${g(e)}  (component ${l.components.join("/")} + hook ${l.hooks.join("/")})`);
 				continue;
 			}
 			let d = g(e).replace(/\.tsx?$/, ""), f = u === ".component.tsx" ? ".component.tsx" : `${u}${c ? ".tsx" : ".ts"}`;
-			i += P(t, v(_(e), `${d}${f}`)), n.push(`${d}${f}`);
+			i += j(t, v(_(e), `${d}${f}`)), n.push(`${d}${f}`);
 		}
 		if (n.length > 0 && (t(`declared ${n.length} file(s): component / hook / types`), i > 0 && t(`  rewrote ${i} aliased import specifier(s) (@/… and friends)`)), a.length > 0) {
 			t(""), t(`left alone — a tsconfig \`paths\` entry names ${a.length} of these files directly:`);
@@ -1633,7 +1633,7 @@ var S = (e, t, n) => {
 			r.length > 20 && t(`    (+${r.length - 20} more)`);
 		}
 	}
-}), yt = w({
+}), St = T({
 	version: "0.14.0",
 	id: "0.14.0/05_typed-tracking",
 	title: "Tracking catalogues are typed against the component props",
@@ -1670,7 +1670,7 @@ var S = (e, t, n) => {
 		"Read each one before changing it: a cast that no longer compiles is sometimes",
 		"a real type disagreement the old signature was hiding."
 	].join("\n")
-}), bt = w({
+}), Ct = T({
 	version: "0.14.0",
 	id: "0.14.0/06_voltro-test-skips-e2e",
 	title: "`voltro test` leaves `e2e/` to `voltro e2e`",
@@ -1692,13 +1692,13 @@ var S = (e, t, n) => {
 		"    code it tests, or",
 		"  • pass your own `--exclude`, which overrides the framework default outright."
 	].join("\n")
-}), xt = (e) => {
+}), wt = (e) => {
 	let t = e.replace(/\.component(\.ui)?(\.tsx?)$/, "$2");
 	return t === e ? null : n(t) ? t : null;
-}, St = (e) => {
+}, Tt = (e) => {
 	for (let [, t] of e.getExportedDeclarations()) if (t[0] !== void 0) return !1;
 	return e.getExportDeclarations().length === 0 && e.getExportAssignments().length === 0;
-}, Ct = w({
+}, Et = T({
 	version: "0.15.0",
 	id: "0.15.0/01_undo-mistaken-taxonomy-renames",
 	title: "Undo the two file renames 0.14.0 got wrong (framework primitives, side-effect modules)",
@@ -1715,14 +1715,14 @@ var S = (e, t, n) => {
 	transform: ({ project: e, log: t }) => {
 		let n = [], r = [];
 		for (let t of e.getSourceFiles()) {
-			let e = t.getFilePath(), i = g(e), a = xt(i);
+			let e = t.getFilePath(), i = g(e), a = wt(i);
 			if (a !== null) {
-				P(t, v(_(e), a)), n.push(`${i} → ${a}`);
+				j(t, v(_(e), a)), n.push(`${i} → ${a}`);
 				continue;
 			}
-			if (/\.types\.tsx?$/.test(i) && St(t)) {
+			if (/\.types\.tsx?$/.test(i) && Tt(t)) {
 				let n = i.replace(/\.types(\.tsx?)$/, "$1");
-				P(t, v(_(e), n)), r.push(`${i} → ${n}`);
+				j(t, v(_(e), n)), r.push(`${i} → ${n}`);
 			}
 		}
 		if (n.length > 0) {
@@ -1736,54 +1736,54 @@ var S = (e, t, n) => {
 		}
 		n.length === 0 && r.length === 0 && t("nothing to undo — 0.14.0 renamed neither a framework file nor a side-effect module here.");
 	}
-}), I = ["@voltro/client", "@voltro/web"], L = "@voltro/protocol", wt = w({
+}), N = ["@voltro/client", "@voltro/web"], P = "@voltro/protocol", Dt = T({
 	version: "0.15.0",
 	id: "0.15.0/02_error-tag-in-protocol",
 	title: "`errorTag` is imported from @voltro/protocol",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => I.includes(e.getModuleSpecifierValue()) && e.getNamedImports().some((e) => e.getName() === "errorTag"))),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => N.includes(e.getModuleSpecifierValue()) && e.getNamedImports().some((e) => e.getName() === "errorTag"))),
 	transform: ({ project: e, log: t }) => {
 		let n = 0;
 		for (let t of e.getSourceFiles()) for (let e of t.getImportDeclarations()) {
-			if (!I.includes(e.getModuleSpecifierValue())) continue;
+			if (!N.includes(e.getModuleSpecifierValue())) continue;
 			let r = e.getNamedImports().find((e) => e.getName() === "errorTag");
 			if (r === void 0) continue;
 			let i = r.getAliasNode()?.getText(), a = e.isTypeOnly() || r.isTypeOnly();
 			r.remove();
-			let o = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === L && e.isTypeOnly() === a), s = {
+			let o = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === P && e.isTypeOnly() === a), s = {
 				name: "errorTag",
 				...i === void 0 ? {} : { alias: i }
 			};
 			o === void 0 ? t.addImportDeclaration({
-				moduleSpecifier: L,
+				moduleSpecifier: P,
 				isTypeOnly: a,
 				namedImports: [s]
 			}) : o.addNamedImport(s), e.getNamedImports().length === 0 && e.getDefaultImport() === void 0 && e.getNamespaceImport() === void 0 && e.remove(), n += 1;
 		}
-		n > 0 && t(`errorTag: ${n} import(s) repointed to ${L}`);
+		n > 0 && t(`errorTag: ${n} import(s) repointed to ${P}`);
 	}
-}), R = /\.page\.tsx$/, Tt = /\.page\.(test|spec)\.tsx$/, Et = (e) => /(^|\/)src\/pages\//.test(e), Dt = (e) => {
-	let t = _(e), n = g(e).replace(R, "");
+}), F = /\.page\.tsx$/, Ot = /\.page\.(test|spec)\.tsx$/, kt = (e) => /(^|\/)src\/pages\//.test(e), At = (e) => {
+	let t = _(e), n = g(e).replace(F, "");
 	return n === "index" ? v(t, "page.tsx") : v(t, n, "page.tsx");
-}, Ot = (e) => {
-	let t = _(e), n = g(e), r = /\.page\.spec\.tsx$/.test(n) ? "spec" : "test", i = n.replace(Tt, "");
+}, jt = (e) => {
+	let t = _(e), n = g(e), r = /\.page\.spec\.tsx$/.test(n) ? "spec" : "test", i = n.replace(Ot, "");
 	return i === "index" ? v(t, `page.${r}.tsx`) : v(t, i, `page.${r}.tsx`);
-}, kt = w({
+}, Mt = T({
 	version: "0.17.0",
 	id: "0.17.0/01_pages-are-directories",
 	title: "A directory is a route segment; its route is page.tsx",
 	kind: "transform",
 	scope: ["**/src/pages/**/*.ts", "**/src/pages/**/*.tsx"],
 	needsImporters: !0,
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Et(e.getFilePath()) && R.test(g(e.getFilePath()))),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => kt(e.getFilePath()) && F.test(g(e.getFilePath()))),
 	transform: ({ project: e, log: t }) => {
 		let n = e.getSourceFiles(), r = [];
 		for (let e of n) {
 			let t = String(e.getFilePath());
-			if (!Et(t)) continue;
-			let n = g(t), i = Tt.test(n);
-			if (!i && !R.test(n)) continue;
-			let a = i ? Ot(t) : Dt(t);
+			if (!kt(t)) continue;
+			let n = g(t), i = Ot.test(n);
+			if (!i && !F.test(n)) continue;
+			let a = i ? jt(t) : At(t);
 			a !== t && r.push({
 				sf: e,
 				from: t,
@@ -1802,7 +1802,7 @@ var S = (e, t, n) => {
 			}
 		}
 		let l = [], u = 0;
-		for (let e of r) s.has(e.from) || (u += P(e.sf, e.to), e.isTest || l.push(o(e.to)));
+		for (let e of r) s.has(e.from) || (u += j(e.sf, e.to), e.isTest || l.push(o(e.to)));
 		if (l.length > 0 && (t(`moved ${l.length} route(s) into their own directory`), u > 0 && t(`  rewrote ${u} aliased import specifier(s)`)), c.length > 0) {
 			t(""), t(`LEFT ALONE — ${c.length} case(s) where two files claim one route:`);
 			for (let e of c) t(`  ${e}`);
@@ -1810,12 +1810,12 @@ var S = (e, t, n) => {
 		}
 		l.length === 0 && c.length === 0 && t("every route already lives in its own directory — nothing to move.");
 	}
-}), At = /,\s*(['"])like\1\s*,/, jt = w({
+}), Nt = /,\s*(['"])like\1\s*,/, Pt = T({
 	version: "0.18.0",
 	id: "0.18.0/01_where-like-removed",
 	title: "the `'like'` where-operator is removed — pick `contains` or `startsWith`",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => At.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Nt.test(e.getFullText())),
 	note: [
 		"The `'like'` operator is removed from the ergonomic `.where(col, op, value)` form.",
 		"",
@@ -1853,12 +1853,12 @@ var S = (e, t, n) => {
 		"in a raw query (`ctx.store.raw`); the DSL has no arbitrary-pattern operator, and",
 		"adding one that cannot use an index is not on the roadmap."
 	].join("\n")
-}), Mt = /\.serverOnly\s*\(\s*\)/, Nt = w({
+}), Ft = /\.serverOnly\s*\(\s*\)/, It = T({
 	version: "0.19.0",
 	id: "0.19.0/01_server-only-gates-the-boot",
 	title: "`.serverOnly()` now FAILS the boot under `voltro serve` — it used to only warn",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Mt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Ft.test(e.getFullText())),
 	note: [
 		"`.serverOnly()` now GATES. Before 0.19.0 it emitted one `log.warn` and let the",
 		"boot continue — in every command, including `voltro serve`.",
@@ -1905,12 +1905,12 @@ var S = (e, t, n) => {
 		"hatch is that people delete the marker instead — and a check whose only way out",
 		"is to disable it gets disabled."
 	].join("\n")
-}), Pt = /\bauditPlugin\s*\(/, Ft = w({
+}), Lt = /\bauditPlugin\s*\(/, Rt = T({
 	version: "0.19.0",
 	id: "0.19.0/02_audit-redact-input-default",
 	title: "`auditPlugin` now redacts mutation input by default (`redactInput: 'all'`)",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Pt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Lt.test(e.getFullText())),
 	note: [
 		"`auditPlugin`'s `redactInput` now defaults to `'all'`. Audit rows written from",
 		"now on carry `input: { __redacted: 'all' }` — which still proves a payload",
@@ -1946,12 +1946,12 @@ var S = (e, t, n) => {
 		"those markers live on TABLE COLUMNS, and this is a mutation's INPUT.",
 		"`changePassword({ oldPassword, newPassword })` has no column to consult."
 	].join("\n")
-}), It = T("registerWriteRecorder"), Lt = w({
+}), zt = E("registerWriteRecorder"), Bt = T({
 	version: "0.20.0",
 	id: "0.20.0/01_write-recorder-port",
 	title: "`WriteRecorder` takes a port (`{ append, maxOf }`) instead of a bare `append`",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => It.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => zt.test(e.getFullText())),
 	note: [
 		"If you wrote your own in-transaction write recorder, its first parameter is",
 		"now an object rather than a function:",
@@ -1990,12 +1990,12 @@ var S = (e, t, n) => {
 		"nested transaction, and a throw from either operation still rolls the",
 		"caller's write back. That is the guarantee the timing exists for."
 	].join("\n")
-}), Rt = /\.maxLength\s*\(/, zt = w({
+}), Vt = /\.maxLength\s*\(/, Ht = T({
 	version: "0.21.0",
 	id: "0.21.0/01_maxlength-now-migrates",
 	title: "`text().maxLength(n)` now migrates EXISTING columns — plan before you apply",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Rt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Vt.test(e.getFullText())),
 	note: [
 		"Your source does not change. `text().maxLength(n)` compiles exactly as before",
 		"and every bound you already declared stays as written.",
@@ -2037,12 +2037,12 @@ var S = (e, t, n) => {
 		"framework guarantees, and an upgrade-time ALTER that fails on your data is a",
 		"worse outcome than the index-size concern it would fix."
 	].join("\n")
-}), Bt = /\bMigrationOperation\b|\bPlannedOperation\b|\bInspectMigrationOperationKind\b|\bOperationKind\b/, Vt = w({
+}), Ut = /\bMigrationOperation\b|\bPlannedOperation\b|\bInspectMigrationOperationKind\b|\bOperationKind\b/, Wt = T({
 	version: "0.22.0",
 	id: "0.22.0/01_rename-index-op",
 	title: "`MigrationOperation` gained a `rename-index` kind",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Bt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Ut.test(e.getFullText())),
 	note: [
 		"The migration planner can now emit a `rename-index` operation:",
 		"",
@@ -2074,12 +2074,12 @@ var S = (e, t, n) => {
 		"match where two same-shaped indexes were renamed at once. Those still plan",
 		"as drop + create, exactly as before."
 	].join("\n")
-}), Ht = /@voltro\/plugin-(notifications|scim|ai-flows)/, Ut = w({
+}), Gt = /@voltro\/plugin-(notifications|scim|ai-flows)/, Kt = T({
 	version: "0.22.0",
 	id: "0.22.0/02_plugin-tables-voltro-prefixed",
 	title: "plugin-owned tables are `_voltro_`-prefixed (the rows move themselves)",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Ht.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Gt.test(e.getFullText())),
 	note: [
 		"Ten tables owned by @voltro/plugin-notifications, @voltro/plugin-scim and",
 		"@voltro/plugin-ai-flows moved out of your table namespace and into the",
@@ -2129,12 +2129,12 @@ var S = (e, t, n) => {
 		"gained a `rename-table` kind. An exhaustive `switch` needs an arm; don't add",
 		"a `default:`, which would silence this and every future kind."
 	].join("\n")
-}), Wt = /QueryCacheScope|QueryCacheConfig|scope\s*:\s*['"](?:subject|global)['"]/, Gt = w({
+}), qt = /QueryCacheScope|QueryCacheConfig|scope\s*:\s*['"](?:subject|global)['"]/, Jt = T({
 	version: "0.22.0",
 	id: "0.22.0/03_cache-scope-gained-tenant",
 	title: "`cache.scope` gained 'tenant' — an exhaustive switch over it needs a branch",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Wt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => qt.test(e.getFullText())),
 	note: [
 		"`cache: { scope }` now accepts a third value, `'tenant'`: one cache entry per",
 		"org, none shared across orgs.",
@@ -2163,12 +2163,12 @@ var S = (e, t, n) => {
 		"Rubric: does the resolved predicate depend on the caller? On the PERSON →",
 		"`subject`; on their ORG only → `tenant`; on neither → `global`."
 	].join("\n")
-}), Kt = /envTokenAuthResolver|InspectAuthResolver|authResolver/, qt = w({
+}), Yt = /envTokenAuthResolver|InspectAuthResolver|authResolver/, Xt = T({
 	version: "0.22.0",
 	id: "0.22.0/04_inspect-write-credential",
 	title: "Mutating `/_voltro/inspect/*` endpoints need VOLTRO_INSPECT_WRITE_TOKEN",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Kt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Yt.test(e.getFullText())),
 	note: [
 		"A POST / PATCH / PUT / DELETE to `/_voltro/inspect/*` now needs a SECOND",
 		"credential: `VOLTRO_INSPECT_WRITE_TOKEN`, sent as the `x-voltro-inspect-write`",
@@ -2206,12 +2206,12 @@ var S = (e, t, n) => {
 		"IMPLEMENTING a resolver is unaffected — `(headers) => …` still satisfies the",
 		"type. Only callers are obliged."
 	].join("\n")
-}), Jt = /versioningPlugin\s*\(/, Yt = w({
+}), Zt = /versioningPlugin\s*\(/, Qt = T({
 	version: "0.23.0",
 	id: "0.23.0/01_versioning-is-opt-out",
 	title: "versioningPlugin: `tables: string[]` → opt-out by default, `include` / `exclude` by value",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Jt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Zt.test(e.getFullText())),
 	note: [
 		"`versioningPlugin({ tables: [...] })` no longer compiles. Row history is now",
 		"ON by default for every table your app declares.",
@@ -2251,12 +2251,12 @@ var S = (e, t, n) => {
 		"surprises you, `exclude` is the knob, and the retention sweep",
 		"(`VOLTRO_ROW_HISTORY_TTL_HOURS`) still bounds age."
 	].join("\n")
-}), Xt = /@voltro\/ai|\.agent\.tsx|agent_(threads|messages)/, Zt = w({
+}), $t = /@voltro\/ai|\.agent\.tsx|agent_(threads|messages)/, en = T({
 	version: "0.24.0",
 	id: "0.24.0/01_agent-tables-voltro-prefixed",
 	title: "the two agent tables are `_voltro_`-prefixed (the rows move themselves)",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Xt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => $t.test(e.getFullText())),
 	note: [
 		"The two tables owned by @voltro/ai moved out of your table namespace and",
 		"into the framework's:",
@@ -2309,12 +2309,12 @@ var S = (e, t, n) => {
 		"declared by something. You get a fresh empty `_voltro_…` table alongside it,",
 		"which is the collision this ends."
 	].join("\n")
-}), Qt = /\.events\s*\.\s*emit\s*\(/, $t = w({
+}), tn = /\.events\s*\.\s*emit\s*\(/, nn = T({
 	version: "0.25.0",
 	id: "0.25.0/01_events-emit-to-publish",
 	title: "`ctx.events.emit(name, data)` → `ctx.events.publish(descriptor, key, payload)`",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Qt.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => tn.test(e.getFullText())),
 	note: [
 		"`ctx.events.emit('name', data)` is gone. Declare the event and publish it:",
 		"",
@@ -2358,53 +2358,53 @@ var S = (e, t, n) => {
 		"",
 		"Docs: https://docs.voltro.dev/docs/data/events"
 	].join("\n")
-}), en = /* @__PURE__ */ new Set([
+}), rn = /* @__PURE__ */ new Set([
 	"description",
 	"version",
 	"globalRateLimit"
-]), tn = ["defaultRetry", "defaultSigning"], nn = (e) => e.getDescendantsOfKind(x.CallExpression).filter((e) => e.getExpression().getText() === "defineOutgoingEvent"), rn = w({
+]), an = ["defaultRetry", "defaultSigning"], on = (e) => e.getDescendantsOfKind(S.CallExpression).filter((e) => e.getExpression().getText() === "defineOutgoingEvent"), sn = T({
 	version: "0.25.0",
 	id: "0.25.0/02_outgoing-event-to-define-event",
 	title: "`defineOutgoingEvent` → `defineEvent({ …, webhook: { … } })`",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => nn(e).length > 0),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => on(e).length > 0),
 	transform: ({ project: e, log: t }) => {
 		let n = 0, r = /* @__PURE__ */ new Set(), i = [];
-		for (let t of e.getSourceFiles()) for (let e of nn(t)) {
+		for (let t of e.getSourceFiles()) for (let e of on(t)) {
 			let a = e.getArguments()[0];
-			if (a === void 0 || !a.isKind(x.ObjectLiteralExpression)) continue;
-			let o = a.getProperties().filter((e) => e.isKind(x.PropertyAssignment)), s = (e) => o.find((t) => t.asKindOrThrow(x.PropertyAssignment).getName() === e)?.asKindOrThrow(x.PropertyAssignment).getInitializer()?.getText(), c = s("id"), l = s("payload");
+			if (a === void 0 || !a.isKind(S.ObjectLiteralExpression)) continue;
+			let o = a.getProperties().filter((e) => e.isKind(S.PropertyAssignment)), s = (e) => o.find((t) => t.asKindOrThrow(S.PropertyAssignment).getName() === e)?.asKindOrThrow(S.PropertyAssignment).getInitializer()?.getText(), c = s("id"), l = s("payload");
 			if (c === void 0 || l === void 0) continue;
-			let u = [...en].map((e) => {
+			let u = [...rn].map((e) => {
 				let t = s(e);
 				if (t !== void 0) return `${e === "globalRateLimit" ? "rateLimit" : e}: ${t}`;
 			}).filter((e) => e !== void 0);
-			for (let e of tn) s(e) !== void 0 && i.push(`${t.getBaseName()}: ${e}`);
+			for (let e of an) s(e) !== void 0 && i.push(`${t.getBaseName()}: ${e}`);
 			let d = u.length > 0 ? `, webhook: { ${u.join(", ")} }` : ", webhook: {}";
 			e.replaceWithText(`defineEvent({ name: ${c}, key: Schema.Struct({}), payload: ${l}${d} })`), n++, r.add(t.getFilePath());
 		}
 		n !== 0 && (t(`webhooks: rewrote ${n} \`defineOutgoingEvent\` → \`defineEvent\` in ${r.size} file${r.size === 1 ? "" : "s"}`), t("  → `key: Schema.Struct({})` is CORRECT, not a placeholder: a webhook event goes to"), t("    subscribed targets, not to a routing key. Give it a key only if you also want"), t("    connected clients to subscribe per-something with `useEvent`."), t("  → import `defineEvent` from `@voltro/protocol` and `Schema` from `effect`;"), t("    the file is now a declaration, so `*.event.ts` is its home."), t("  → `ctx.webhooks.emit(descriptor, payload)` still works, and"), t("    `ctx.events.publish(descriptor, key, payload)` now reaches the HTTP targets too."), i.length > 0 && (t(`  → NOT carried across (${i.length}): ${[...new Set(i)].join(", ")}`), t("    The plugin's retry/signing shapes are richer than the declared event can hold,"), t("    so they are left in place as a compile error rather than dropped silently."), t("    Configure them at subscribe time, where the full shape is typed.")));
 	}
-}), an = (e) => e.getDescendantsOfKind(x.CallExpression).filter((e) => {
+}), cn = (e) => e.getDescendantsOfKind(S.CallExpression).filter((e) => {
 	let t = e.getExpression().getText();
 	return t === "broadcast" || t === "broadcastPlugin";
-}), on = (e) => {
+}), I = (e) => {
 	let t = e.getArguments()[0];
-	if (!(t === void 0 || !t.isKind(x.ObjectLiteralExpression))) return t.getProperties().filter((e) => e.isKind(x.PropertyAssignment)).map((e) => e.asKindOrThrow(x.PropertyAssignment)).find((e) => e.getName() === "channel");
-}, sn = w({
+	if (!(t === void 0 || !t.isKind(S.ObjectLiteralExpression))) return t.getProperties().filter((e) => e.isKind(S.PropertyAssignment)).map((e) => e.asKindOrThrow(S.PropertyAssignment)).find((e) => e.getName() === "channel");
+}, ln = T({
 	version: "0.25.0",
 	id: "0.25.0/03_broadcast-channel-to-namespace",
 	title: "`broadcast({ channel })` → `broadcast({ namespace })`",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => an(e).some((e) => on(e) !== void 0)),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => cn(e).some((e) => I(e) !== void 0)),
 	transform: ({ project: e, log: t }) => {
 		let n = 0, r = [], i = [], a = /* @__PURE__ */ new Set();
-		for (let t of e.getSourceFiles()) for (let e of an(t)) {
-			let o = on(e);
+		for (let t of e.getSourceFiles()) for (let e of cn(t)) {
+			let o = I(e);
 			if (o === void 0) continue;
 			let s = o.getInitializer();
 			if (s === void 0) continue;
-			let c = s.getText(), l = s.isKind(x.StringLiteral) ? s.getLiteralValue() : void 0;
+			let c = s.getText(), l = s.isKind(S.StringLiteral) ? s.getLiteralValue() : void 0;
 			if (l !== void 0 && l.endsWith(":changes")) {
 				let e = l.slice(0, -8);
 				o.replaceWithText(`namespace: '${e}'`), r.push(`${t.getBaseName()}: '${l}' → '${e}'`);
@@ -2417,7 +2417,7 @@ var S = (e, t, n) => {
 			for (let e of i) t(`  ! ${e} — carried verbatim; CHECK IT: the value is now a PREFIX the framework`), t("      appends ':changes' / ':events:<name>' / ':members' / ':presence' to.");
 		}
 	}
-}), cn = w({
+}), un = T({
 	version: "0.26.0",
 	id: "0.26.0/01_event-webhook-retry-removed",
 	title: "`defineEvent({ webhook: { retry } })` is gone — it never did anything",
@@ -2451,7 +2451,7 @@ var S = (e, t, n) => {
 		"If you were relying on the declared value to take effect, note that it never",
 		"did — your deliveries have been using the target default all along."
 	].join("\n")
-}), ln = w({
+}), dn = T({
 	version: "0.26.0",
 	id: "0.26.0/02_step-retry-enforced",
 	title: "workflow step `retry:` is now ENFORCED (was metadata) — drop any redundant manual retry",
@@ -2504,12 +2504,12 @@ var S = (e, t, n) => {
 		"(retry transient, fail permanent), `maxElapsed: '5 minutes'` (a total time budget,",
 		"not just a count), `jitter` (on by default), and `respectRetryAfter` (honor a 429)."
 	].join("\n")
-}), un = /\bmakeSubjectId\b/, dn = w({
+}), fn = /\bmakeSubjectId\b/, pn = T({
 	version: "0.28.0",
 	id: "0.28.0/01_notifications-resolve-subject-id-async",
 	title: "`makeSubjectId` returns a Promise; `resolveSubjectId` may be async",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => un.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => fn.test(e.getFullText())),
 	note: [
 		"`makeSubjectId` from @voltro/plugin-notifications now returns a Promise.",
 		"",
@@ -2541,12 +2541,12 @@ var S = (e, t, n) => {
 		"  reconnect. Memoise inside your own resolver if that trade suits your app —",
 		"  you know your invalidation and we do not."
 	].join("\n")
-}), fn = /\bPluginRefChange\b|\bisSoftDelete\s*\(|\bapplyPluginRefRules\s*\(/, pn = w({
+}), mn = /\bPluginRefChange\b|\bisSoftDelete\s*\(|\bapplyPluginRefRules\s*\(/, hn = T({
 	version: "0.28.0",
 	id: "0.28.0/02_plugin-ref-change-event",
 	title: "`PluginRefChange` is removed — the change channel's `ChangeEvent` is the one shape",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => fn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => mn.test(e.getFullText())),
 	note: [
 		"`PluginRefChange` no longer exists. `isSoftDelete` and `applyPluginRefRules`",
 		"take `ChangeEvent` from @voltro/database — the type the change channel actually",
@@ -2588,12 +2588,12 @@ var S = (e, t, n) => {
 		"     not know that writes a delete, and the test passes against a stream the",
 		"     framework never emits. That is the defect this change removes."
 	].join("\n")
-}), mn = /credentialsResolver\s*:/, hn = w({
+}), gn = /credentialsResolver\s*:/, _n = T({
 	version: "0.28.0",
 	id: "0.28.0/03_atlassian-credentials-context",
 	title: "`credentialsResolver` receives `{ subject, store }` instead of a bare Subject",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => mn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => gn.test(e.getFullText())),
 	note: [
 		"@voltro/plugin-atlassian: `credentialsResolver` now takes a context object.",
 		"",
@@ -2663,12 +2663,12 @@ var S = (e, t, n) => {
 		"",
 		"and rotate anything you find — a redacted future does not un-leak a past row."
 	].join("\n")
-}), gn = /auditPlugin\s*\(/, _n = w({
+}), vn = /auditPlugin\s*\(/, yn = T({
 	version: "0.28.0",
 	id: "0.28.0/04_audit-redacts-subject-metadata",
 	title: "`auditPlugin` redacts `subject.metadata` by default",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => gn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => vn.test(e.getFullText())),
 	note: [
 		"`auditPlugin` now redacts `subject.metadata` before the sink sees the event.",
 		"",
@@ -2724,12 +2724,12 @@ var S = (e, t, n) => {
 		"     keeps the token in the framework vault, and the resolver's new `store`",
 		"     handle covers an app with its own token table."
 	].join("\n")
-}), vn = T("useLoaderData"), yn = w({
+}), bn = E("useLoaderData"), xn = T({
 	version: "0.29.0",
 	id: "0.29.0/01_loader-data-absence",
 	title: "`useLoaderData()` throws at a level that declares no `loader`",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => vn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => bn.test(e.getFullText())),
 	note: [
 		"`useLoaderData()` used to return `undefined` at a level with no `loader`,",
 		"which then died at `Cannot destructure property 'x' of undefined` — a",
@@ -2765,38 +2765,38 @@ var S = (e, t, n) => {
 		"that legitimately resolves to `undefined` does not throw — only a missing",
 		"`loader` does."
 	].join("\n")
-}), z = "@voltro/ui-shadcn", B = "voltro:lang", bn = "voltro:locale", xn = "parsePreferenceCookies", Sn = (e, t) => {
+}), L = "@voltro/ui-shadcn", R = "voltro:lang", Sn = "voltro:locale", z = "parsePreferenceCookies", Cn = (e, t) => {
 	let n = [];
-	for (let r of e.getImportDeclarations()) if (r.getModuleSpecifierValue() === z) for (let e of r.getNamedImports()) e.getName() === t && n.push(e.getAliasNode()?.getText() ?? e.getName());
+	for (let r of e.getImportDeclarations()) if (r.getModuleSpecifierValue() === L) for (let e of r.getNamedImports()) e.getName() === t && n.push(e.getAliasNode()?.getText() ?? e.getName());
 	return n;
-}, Cn = (e) => {
+}, wn = (e) => {
 	let t = 0;
-	for (let n of e.getSourceFiles()) n.getFullText().includes(B) && n.forEachDescendant((e) => {
-		if (b.isStringLiteral(e) || b.isNoSubstitutionTemplateLiteral(e) || b.isTemplateHead(e) || b.isTemplateMiddle(e) || b.isTemplateTail(e) || b.isRegularExpressionLiteral(e)) {
+	for (let n of e.getSourceFiles()) n.getFullText().includes(R) && n.forEachDescendant((e) => {
+		if (x.isStringLiteral(e) || x.isNoSubstitutionTemplateLiteral(e) || x.isTemplateHead(e) || x.isTemplateMiddle(e) || x.isTemplateTail(e) || x.isRegularExpressionLiteral(e)) {
 			let n = e.getText();
-			if (!n.includes(B)) return;
-			e.replaceWithText(n.split(B).join(bn)), t++;
+			if (!n.includes(R)) return;
+			e.replaceWithText(n.split(R).join(Sn)), t++;
 		}
 	});
 	return t;
-}, wn = (e) => {
+}, Tn = (e) => {
 	let t = 0, n = 0;
 	for (let r of e.getSourceFiles()) {
-		let e = Sn(r, xn);
+		let e = Cn(r, z);
 		e.length !== 0 && r.forEachDescendant((r) => {
-			if (!b.isCallExpression(r) || !e.includes(r.getExpression().getText())) return;
+			if (!x.isCallExpression(r) || !e.includes(r.getExpression().getText())) return;
 			let i = r.getParent();
-			if (b.isPropertyAccessExpression(i) && i.getName() === "lang") {
+			if (x.isPropertyAccessExpression(i) && i.getName() === "lang") {
 				i.getNameNode().replaceWithText("locale"), t++;
 				return;
 			}
-			if (b.isVariableDeclaration(i)) {
+			if (x.isVariableDeclaration(i)) {
 				let e = i.getNameNode();
-				if (!b.isObjectBindingPattern(e)) return;
+				if (!x.isObjectBindingPattern(e)) return;
 				for (let t of e.getElements()) {
 					if (t.getPropertyNameNode() !== void 0) continue;
 					let e = t.getNameNode();
-					!b.isIdentifier(e) || e.getText() !== "lang" || (t.replaceWithText(`locale: ${t.getText()}`), n++);
+					!x.isIdentifier(e) || e.getText() !== "lang" || (t.replaceWithText(`locale: ${t.getText()}`), n++);
 				}
 			}
 		});
@@ -2805,29 +2805,29 @@ var S = (e, t, n) => {
 		access: t,
 		destructured: n
 	};
-}, Tn = w({
+}, En = T({
 	version: "0.30.0",
 	id: "0.30.0/01_locale-cookie-rename",
 	title: "the language-preference cookie is `voltro:locale` (was `voltro:lang`)",
 	kind: "transform",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return t.includes(B) || t.includes(z) && (t.includes("LANG_COOKIE") || t.includes(xn));
+		return t.includes(R) || t.includes(L) && (t.includes("LANG_COOKIE") || t.includes(z));
 	}),
 	transform: ({ project: e, helpers: t, log: n }) => {
 		let r = t.renameImport(e, {
-			module: z,
+			module: L,
 			from: "LANG_COOKIE",
 			to: "LOCALE_COOKIE"
-		}), i = Cn(e), { access: a, destructured: o } = wn(e), s = [];
+		}), i = wn(e), { access: a, destructured: o } = Tn(e), s = [];
 		r > 0 && s.push(`LANG_COOKIE → LOCALE_COOKIE (${r} import(s))`), i > 0 && s.push(`'voltro:lang' → 'voltro:locale' (${i} literal(s))`), a + o > 0 && s.push(`parsePreferenceCookies().lang → .locale (${a + o} site(s))`), s.length !== 0 && n(`locale cookie rename: ${s.join("; ")}. Your SOURCE is migrated. Your USERS' cookies are not — the old \`voltro:lang\` cookie in an already-visited browser is no longer read, so each user falls back to Accept-Language / defaultLocale once and re-picks their language. Nothing errors. If that reset is unacceptable, copy the old value forward at your own boot — the codemod file has the three-line bridge.` + (o > 0 ? ` ${o} destructure(s) were rewritten as \`{ locale: lang }\` to keep the local name safe from a scope collision — rename the binding yourself if you want the vocabulary to match.` : ""));
 	}
-}), En = /auditPlugin\s*\(|versioningPlugin\s*\(|atlassianPlugin\s*\(/, Dn = w({
+}), Dn = /auditPlugin\s*\(|versioningPlugin\s*\(|atlassianPlugin\s*\(/, On = T({
 	version: "0.30.0",
 	id: "0.30.0/02_audit-purge-query-recheck",
 	title: "re-run the credential-purge query — the 0.28.0 spelling under-reported on MySQL/MariaDB",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => En.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Dn.test(e.getFullText())),
 	note: [
 		"IF YOU ALREADY RAN THE 0.28.0 PURGE CHECK ON MySQL OR MariaDB, RUN IT AGAIN.",
 		"The query that note shipped under-reported, and it under-reported by",
@@ -2874,14 +2874,14 @@ var S = (e, t, n) => {
 		"  `connectionCredentials(...)` keeps it in the framework vault",
 		"  (see `0.28.0/03_atlassian-credentials-context`)."
 	].join("\n")
-}), On = /\.webhooks\s*\.\s*emit\s*\(|useWebhooks\s*\(/, kn = w({
+}), kn = /\.webhooks\s*\.\s*emit\s*\(|useWebhooks\s*\(/, An = T({
 	version: "0.30.0",
 	id: "0.30.0/03_webhook-emit-durable-deferral",
 	title: "a deferred `webhooks.emit` rides the transactional outbox; `{ immediate: true }` opts out",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return On.test(t) || T("emit").test(t);
+		return kn.test(t) || E("emit").test(t);
 	}),
 	note: [
 		"A `ctx.webhooks.emit(...)` inside a MUTATION now enqueues a transactional",
@@ -2931,14 +2931,14 @@ var S = (e, t, n) => {
 		"created by the declarative differ on the next `voltro dev` boot or",
 		"`voltro db apply` — there is nothing to run by hand."
 	].join("\n")
-}), An = /\.executionId\b|workflows\s*\.\s*start\s*\(|workflows\s*\.\s*child\s*\(/, jn = w({
+}), jn = /\.executionId\b|workflows\s*\.\s*start\s*\(|workflows\s*\.\s*child\s*\(/, Mn = T({
 	version: "0.30.0",
 	id: "0.30.0/04_workflow-run-handle-nullable-execution",
 	title: "`WorkflowRunHandle.executionId` is `string | null`; `status` gains queued/dropped/skipped",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return An.test(t) || T("start").test(t);
+		return jn.test(t) || E("start").test(t);
 	}),
 	note: [
 		"A workflow start no longer always becomes a run. With declarative flow",
@@ -3003,12 +3003,12 @@ var S = (e, t, n) => {
 		"  and `singleton: { mode: 'skip' }` throws `WorkflowSingletonHeldError`",
 		"  carrying the incumbent's execution id, so you can wait on THAT run."
 	].join("\n")
-}), Mn = /auditPlugin\s*\(|versioningPlugin\s*\(|atlassianPlugin\s*\(/, Nn = w({
+}), Nn = /auditPlugin\s*\(|versioningPlugin\s*\(|atlassianPlugin\s*\(/, Pn = T({
 	version: "0.31.0",
 	id: "0.31.0/01_rerun-credential-scan",
 	title: "re-run `voltro db scan-credentials` — on 0.30.0–0.30.2 it skipped the column credentials land in",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Mn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Nn.test(e.getFullText())),
 	note: [
 		"IF YOU RAN `voltro db scan-credentials` ON 0.30.0, 0.30.1 OR 0.30.2, RUN IT",
 		"AGAIN. Its answer did not cover the column a leaked credential is most",
@@ -3042,7 +3042,7 @@ var S = (e, t, n) => {
 		"credential on the Subject — `connectionCredentials(...)` keeps it in the",
 		"framework vault."
 	].join("\n")
-}), Pn = w({
+}), Fn = T({
 	version: "0.32.0",
 	id: "0.32.0/01_audit-redacts-outcome",
 	title: "`auditPlugin` now redacts `outcome` by default — opt out if your trail reads it",
@@ -3083,7 +3083,7 @@ var S = (e, t, n) => {
 		"purge the rows AND rotate the credentials — assume anything written to a",
 		"log table has been read."
 	].join("\n")
-}), Fn = w({
+}), In = T({
 	version: "0.33.0",
 	id: "0.33.0/01_opentelemetry-optional-peer",
 	title: "`@effect/opentelemetry` is now an optional peer — install it if you use tracing",
@@ -3115,7 +3115,7 @@ var S = (e, t, n) => {
 		"never wrote down. It is a startup failure, not a silent loss of traces —",
 		"losing telemetry quietly would be the worse outcome."
 	].join("\n")
-}), In = w({
+}), Ln = T({
 	version: "0.33.0",
 	id: "0.33.0/02_coordinated-handle-gained-wake",
 	title: "`CoordinatedScheduleHandle` gained `wake()`, `currentIntervalMs()` and `isArmed()` — update hand-written test doubles",
@@ -3165,7 +3165,7 @@ var S = (e, t, n) => {
 		"Reporting nothing is the conservative default on purpose — a task that",
 		"cannot tell whether it was idle must not be slowed down on a guess."
 	].join("\n")
-}), Ln = w({
+}), Rn = T({
 	version: "0.34.0",
 	id: "0.34.0/01_serve-does-mount-inspect",
 	title: "Correction: `voltro serve` DOES mount an inspect surface (the 0.12.0 note said it mounts none)",
@@ -3206,12 +3206,12 @@ var S = (e, t, n) => {
 		"place, everyone already past 0.12.0 — which is everyone the wrong sentence",
 		"could have misled — would never have seen it."
 	].join("\n")
-}), Rn = (e) => /\.with\(\s*[\w.]*tenant\(/.test(e) || /\.serverOnly\(\s*\)/.test(e), zn = w({
+}), zn = (e) => /\.with\(\s*[\w.]*tenant\(/.test(e) || /\.serverOnly\(\s*\)/.test(e), Bn = T({
 	version: "0.34.0",
 	id: "0.34.0/02_keyed-writes-are-tenant-scoped",
 	title: "Keyed-by-pk writes are tenant-enforced, and `crud` refuses `.serverOnly()` input",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Rn(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => zn(e.getFullText())),
 	note: [
 		"TWO WRITE-SIDE REFUSALS ARE NEW. Neither changes a type, so `tsc` will not",
 		"point at the call sites — these are runtime behaviour changes.",
@@ -3275,30 +3275,30 @@ var S = (e, t, n) => {
 		"   an attack look like a no-op and leaves an honest caller debugging a",
 		"   value that quietly did not land."
 	].join("\n")
-}), Bn = /* @__PURE__ */ new Set([
+}), Vn = /* @__PURE__ */ new Set([
 	"defineQuery",
 	"defineMutation",
 	"defineAction",
 	"defineStream"
-]), Vn = (e) => {
+]), Hn = (e) => {
 	let t = e.getArguments()[0];
-	if (t === void 0 || !t.isKind(x.ObjectLiteralExpression)) return /* @__PURE__ */ new Set();
+	if (t === void 0 || !t.isKind(S.ObjectLiteralExpression)) return /* @__PURE__ */ new Set();
 	let n = /* @__PURE__ */ new Set();
 	for (let e of t.getProperties()) {
-		let t = (e.asKind(x.PropertyAssignment) ?? e.asKind(x.ShorthandPropertyAssignment))?.getName?.();
+		let t = (e.asKind(S.PropertyAssignment) ?? e.asKind(S.ShorthandPropertyAssignment))?.getName?.();
 		t !== void 0 && n.add(t);
 	}
 	return n;
-}, Hn = (e, t) => /define(Query|Mutation|Action|Stream)\s*\(/.test(e) ? t.some((e) => {
-	if (!Bn.has(e.getExpression().getText())) return !1;
-	let t = Vn(e);
+}, Un = (e, t) => /define(Query|Mutation|Action|Stream)\s*\(/.test(e) ? t.some((e) => {
+	if (!Vn.has(e.getExpression().getText())) return !1;
+	let t = Hn(e);
 	return !t.has("internal") && !t.has("guards") && !t.has("openAccess");
-}) : !1, Un = w({
+}) : !1, Wn = T({
 	version: "0.34.0",
 	id: "0.34.0/03_procedure-access-decision",
 	title: "Every wire-exposed procedure declares an access decision (`guards:` or `openAccess:`)",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Hn(e.getFullText(), e.getDescendantsOfKind(x.CallExpression))),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Un(e.getFullText(), e.getDescendantsOfKind(S.CallExpression))),
 	note: [
 		"YOUR APP WILL NOT BOOT UNTIL EVERY WIRE-EXPOSED PROCEDURE DECIDES WHO MAY",
 		"CALL IT. This is the single largest behaviour change in this release, and it",
@@ -3343,18 +3343,18 @@ var S = (e, t, n) => {
 		"procedures your PLUGINS declare — the gate reads your app's own discovered",
 		"files only, so adopting this does not turn into a plugin bug report."
 	].join("\n")
-}), Wn = [
+}), Gn = [
 	"workosAuthorizationUrl",
 	"workosAuthenticateWithCode",
 	"workosBeginLogin"
-], Gn = w({
+], Kn = T({
 	version: "0.34.0",
 	id: "0.34.0/04_workos-oauth-state-pkce",
 	title: "WorkOS hosted login: `workosAuthorizationUrl` → `workosBeginLogin`, with mandatory `state` + PKCE",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return t.includes("@voltro/plugin-auth-workos") && Wn.some((e) => t.includes(e));
+		return t.includes("@voltro/plugin-auth-workos") && Gn.some((e) => t.includes(e));
 	}),
 	note: [
 		"YOUR WORKOS HOSTED-LOGIN FLOW HAD NO CSRF PROTECTION BY DEFAULT, AND NO PKCE.",
@@ -3412,12 +3412,12 @@ var S = (e, t, n) => {
 		"are accepted on the existing endpoints; your registered redirect URI is",
 		"unchanged."
 	].join("\n")
-}), Kn = /mirrorTables|_?voltro_mirror_/, qn = w({
+}), qn = /mirrorTables|_?voltro_mirror_/, Jn = T({
 	version: "0.34.0",
 	id: "0.34.0/05_analytics-mirror-versioned-writes",
 	title: "Analytics CDC-mirror: version-ordered writes, tombstoned deletes, retry + repair",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Kn.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => qn.test(e.getFullText())),
 	note: [
 		"The analytics CDC-mirror (`mirrorTables`) now orders every write and",
 		"retries the ones that fail. Three things to do.",
@@ -3472,7 +3472,7 @@ var S = (e, t, n) => {
 		"  VOLTRO_ANALYTICS_MIRROR_REPAIR_INTERVAL_MS  (60000, 0 disables)",
 		"  VOLTRO_ANALYTICS_MIRROR_REPAIR_QUEUE_LIMIT  (10000)"
 	].join("\n")
-}), Jn = w({
+}), Yn = T({
 	version: "0.34.0",
 	id: "0.34.0/06_origin-guard-and-trusted-proxies",
 	title: "Cross-site protection, trusted proxies and security headers are ON by default on the api listener",
@@ -3596,7 +3596,7 @@ var S = (e, t, n) => {
 		"   a `Transfer-Encoding: chunked` body skipped it and was buffered without",
 		"   bound. No action needed; VOLTRO_MAX_RPC_BODY_BYTES still tunes it."
 	].join("\n")
-}), Yn = w({
+}), Xn = T({
 	version: "0.34.0",
 	id: "0.34.0/07_incoming-webhook-declares-verification",
 	title: "An incoming webhook with no signature scheme now refuses to boot",
@@ -3645,7 +3645,7 @@ var S = (e, t, n) => {
 		"value — the sender holds the other half of it, so a generated one would",
 		"authenticate nobody."
 	].join("\n")
-}), Xn = w({
+}), Zn = T({
 	version: "0.34.0",
 	id: "0.34.0/08_init-initialises-the-workspace",
 	title: "`voltro init` initialises the workspace root; scaffolding is `create-project` only",
@@ -3697,20 +3697,20 @@ var S = (e, t, n) => {
 		"all 18 of its scripts — including the `pnpm db:up` the CLI then printed as a",
 		"next step. Run `voltro init` in the root first."
 	].join("\n")
-}), Zn = (e, t) => (e.getProperty(t)?.asKind(x.PropertyAssignment))?.getInitializer()?.asKind(x.ObjectLiteralExpression), Qn = (e) => {
+}), Qn = (e, t) => (e.getProperty(t)?.asKind(S.PropertyAssignment))?.getInitializer()?.asKind(S.ObjectLiteralExpression), $n = (e) => {
 	if (e.getExpression().getText() !== "workflow") return !1;
-	let t = e.getArguments()[0]?.asKind(x.ObjectLiteralExpression);
+	let t = e.getArguments()[0]?.asKind(S.ObjectLiteralExpression);
 	if (t === void 0) return !1;
-	let n = Zn(t, "messages");
+	let n = Qn(t, "messages");
 	return n !== void 0 && n.getProperty("queries") !== void 0;
-}, $n = w({
+}, er = T({
 	version: "0.34.0",
 	id: "0.34.0/09_workflow-messages-queries-removed",
 	title: "`workflow({ messages: { queries } })` is removed — it never had a send path",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return !t.includes("queries") || !/workflow\s*\(/.test(t) ? !1 : e.getDescendantsOfKind(x.CallExpression).some(Qn);
+		return !t.includes("queries") || !/workflow\s*\(/.test(t) ? !1 : e.getDescendantsOfKind(S.CallExpression).some($n);
 	}),
 	note: [
 		"YOU DECLARED `messages: { queries: { … } }` ON A WORKFLOW. That channel is",
@@ -3753,7 +3753,7 @@ var S = (e, t, n) => {
 		"in-flight runs finish on the old path after a deploy. See the Versioning",
 		"page in the docs."
 	].join("\n")
-}), er = w({
+}), tr = T({
 	version: "0.34.0",
 	id: "0.34.0/11_ai-flows-per-step-human-signal",
 	title: "`HUMAN_RESPONSE_SIGNAL` removed — a human step's signal name is now per-step",
@@ -3797,23 +3797,23 @@ var S = (e, t, n) => {
 		"per flow (`humanTimeoutMs`), per app (`aiFlowsPlugin({ humanReviewTimeoutMs })`)",
 		"or per deploy (`VOLTRO_AI_FLOW_HUMAN_REVIEW_TIMEOUT_HOURS`). `0` = wait forever."
 	].join("\n")
-}), tr = /* @__PURE__ */ new Set([
+}), nr = /* @__PURE__ */ new Set([
 	"@voltro/plugin-auth",
 	"@voltro/protocol/session",
 	"@voltro/plugin-sso-saml"
-]), nr = /* @__PURE__ */ new Set(["issueSession", "signSession"]), rr = (e) => {
+]), rr = /* @__PURE__ */ new Set(["issueSession", "signSession"]), ir = (e) => {
 	let t = e.getFullText();
 	if (!/issueSession|signSession|resolveScopes|@voltro\/(plugin-auth|protocol\/session|plugin-sso-saml)/.test(t)) return !1;
-	for (let t of e.getImportDeclarations()) if (tr.has(t.getModuleSpecifierValue())) return !0;
-	for (let t of e.getDescendantsOfKind(x.CallExpression)) if (nr.has(t.getExpression().getText())) return !0;
-	for (let t of e.getDescendantsOfKind(x.PropertyAssignment)) if (t.getName() === "resolveScopes") return !0;
+	for (let t of e.getImportDeclarations()) if (nr.has(t.getModuleSpecifierValue())) return !0;
+	for (let t of e.getDescendantsOfKind(S.CallExpression)) if (rr.has(t.getExpression().getText())) return !0;
+	for (let t of e.getDescendantsOfKind(S.PropertyAssignment)) if (t.getName() === "resolveScopes") return !0;
 	return !1;
-}, ir = w({
+}, ar = T({
 	version: "0.34.0",
 	id: "0.34.0/12_session-cookie-carries-identity",
 	title: "The session cookie carries identity only — authority resolves per request",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some(rr),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(ir),
 	note: [
 		"YOUR USERS WILL SIGN IN ONCE MORE, AND A SESSION COOKIE CAN NO LONGER",
 		"CARRY PERMISSIONS.",
@@ -3904,12 +3904,12 @@ var S = (e, t, n) => {
 		"not have: an authoritative resolver now overrides a token's own scope",
 		"claim, which union-only could never do."
 	].join("\n")
-}), ar = /\bMockEmail\b|\.email\.(sent|lastTo|clear)\b|\bSentEmail\b/, or = w({
+}), or = /\bMockEmail\b|\.email\.(sent|lastTo|clear)\b|\bSentEmail\b/, sr = T({
 	version: "0.34.0",
 	id: "0.34.0/10_testing-mail-is-a-service",
 	title: "`ctx.email` / `MockEmail` removed — assert mail through the mail plugin",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => ar.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => or.test(e.getFullText())),
 	note: [
 		"`@voltro/testing` no longer ships `MockEmail`, and `makeTestContext()` no",
 		"longer returns `ctx.email`. Your tests that touch it will not compile.",
@@ -3978,12 +3978,12 @@ var S = (e, t, n) => {
 		"  • `makeTestContext({ layers })` — your app's own `app.config.ts`",
 		"    `layers:` now resolve for an Effect-mode handler under test."
 	].join("\n")
-}), sr = /from\s+['"]@voltro\/plugin-billing(?:\/[\w-]+)?['"]/, cr = w({
+}), cr = /from\s+['"]@voltro\/plugin-billing(?:\/[\w-]+)?['"]/, lr = T({
 	version: "0.34.0",
 	id: "0.34.0/13_billing-provider-dunning",
 	title: "Billing dunning — `BillingProvider.fetchSubscription` is required, and `plan()` now honours a grace period",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => sr.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => cr.test(e.getFullText())),
 	note: [
 		"BILLING GAINED A DUNNING SEQUENCE. TWO THINGS CHANGED UNDER YOU.",
 		"",
@@ -4059,12 +4059,12 @@ var S = (e, t, n) => {
 		"`pastDueSince` / `statusEventAt` columns ride the declarative differ — they",
 		"are applied by `voltro db apply` and by a `voltro dev` boot, on every dialect."
 	].join("\n")
-}), lr = /from\s+['"]@voltro\/plugin-search(?:\/[\w-]+)?['"]/, ur = w({
+}), ur = /from\s+['"]@voltro\/plugin-search(?:\/[\w-]+)?['"]/, dr = T({
 	version: "0.34.0",
 	id: "0.34.0/14_search-memory-backend-refuses-production",
 	title: "`plugin-search` on the in-memory backend now refuses to boot in production",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => lr.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => ur.test(e.getFullText())),
 	note: [
 		"THE ZERO-CONFIG SEARCH BACKEND NO LONGER BOOTS IN PRODUCTION.",
 		"",
@@ -4133,7 +4133,7 @@ var S = (e, t, n) => {
 		"(`ts_headline` / `snippet()` / …) that `SearchQuery` promises. Degrading",
 		"those silently would replace one lie with another."
 	].join("\n")
-}), dr = w({
+}), fr = T({
 	version: "0.34.0",
 	id: "0.34.0/15_mysql-mssql-tls-honoured",
 	title: "mysql/mariadb and mssql connections honour ?ssl= / ?sslmode= — or refuse to boot",
@@ -4205,7 +4205,7 @@ var S = (e, t, n) => {
 		"spins in-tick and starves the event loop. Set it only if you know nothing in",
 		"your process does that, and set it well above their peak concurrency."
 	].join("\n")
-}), fr = w({
+}), pr = T({
 	version: "0.34.0",
 	id: "0.34.0/16_declare-node-env-for-migration-commands",
 	title: "`voltro db apply` / `voltro migrate` now treat an unset NODE_ENV as production",
@@ -4269,12 +4269,12 @@ var S = (e, t, n) => {
 		"process environment if you want a non-production `voltro serve` without a",
 		"built bundle. Everything downstream of the launcher does honour `.env`."
 	].join("\n")
-}), pr = /\/(?:src\/)?pages\//, mr = /\bcacheInvalidatesOn\b/, hr = w({
+}), mr = /\/(?:src\/)?pages\//, hr = /\bcacheInvalidatesOn\b/, gr = T({
 	version: "0.34.0",
 	id: "0.34.0/17_isr-postgres-refuses-without-a-database",
 	title: "The postgres ISR cache + CDC invalidator read DB_URL, and no longer fall back silently",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => mr.test(e.getFullText()) || pr.test(e.getFilePath())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => hr.test(e.getFullText()) || mr.test(e.getFilePath())),
 	note: [
 		"YOUR WEB PROCESS MAY HAVE BEEN USING THE MEMORY ISR CACHE ALL ALONG.",
 		"",
@@ -4319,12 +4319,12 @@ var S = (e, t, n) => {
 		"   until their `revalidate` window expires. Give the web process a `DB_URL`",
 		"   or remove the declaration."
 	].join("\n")
-}), gr = /\.migration\.ts$/, _r = w({
+}), _r = /\.migration\.ts$/, vr = T({
 	version: "0.34.0",
 	id: "0.34.0/18_serve-refuses-pending-file-migrations",
 	title: "`voltro serve` refuses to boot with pending file-based migrations",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => gr.test(e.getFilePath())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => _r.test(e.getFilePath())),
 	note: [
 		"YOUR DEPLOY MUST RUN `migrations/*.migration.ts` BEFORE `voltro serve`.",
 		"",
@@ -4367,11 +4367,11 @@ var S = (e, t, n) => {
 		"fingerprint check — it is the one switch for \"no boot-time schema checks\",",
 		"and it now covers both."
 	].join("\n")
-}), vr = /* @__PURE__ */ new Set([
+}), yr = /* @__PURE__ */ new Set([
 	"@voltro/plugin-auth",
 	"@voltro/plugin-auth/schema",
 	"@voltro/plugin-auth/plugin"
-]), yr = /* @__PURE__ */ new Set([
+]), br = /* @__PURE__ */ new Set([
 	"UserStore",
 	"authTables",
 	"SendEmail",
@@ -4379,20 +4379,20 @@ var S = (e, t, n) => {
 	"memoryUserStore",
 	"postgresUserStore",
 	"authRoutesPlugin"
-]), br = (e) => {
+]), xr = (e) => {
 	if (!e.getFullText().includes("@voltro/plugin-auth")) return !1;
-	for (let t of e.getImportDeclarations()) if (vr.has(t.getModuleSpecifierValue())) {
-		for (let e of t.getNamedImports()) if (yr.has(e.getName())) return !0;
+	for (let t of e.getImportDeclarations()) if (yr.has(t.getModuleSpecifierValue())) {
+		for (let e of t.getNamedImports()) if (br.has(e.getName())) return !0;
 		if (t.getNamespaceImport() !== void 0) return !0;
 	}
-	for (let t of e.getDescendantsOfKind(x.TypeReference)) if (t.getTypeName().getText() === "UserStore") return !0;
+	for (let t of e.getDescendantsOfKind(S.TypeReference)) if (t.getTypeName().getText() === "UserStore") return !0;
 	return !1;
-}, xr = w({
+}, Sr = T({
 	version: "0.34.0",
 	id: "0.34.0/20_user-store-auth-feature-methods",
 	title: "UserStore gained the email-verification, invitation and impersonation methods",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some(br),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(xr),
 	note: [
 		"IF YOU USE memoryUserStore OR postgresUserStore, THERE IS NOTHING TO DO.",
 		"Both already implement everything below. Read on only if you wrote your",
@@ -4472,7 +4472,7 @@ var S = (e, t, n) => {
 		"   is the difference between \"new signups must confirm\" and \"everyone is",
 		"   locked out until they check their mail\"."
 	].join("\n")
-}), Sr = /* @__PURE__ */ new Set([
+}), B = /* @__PURE__ */ new Set([
 	"bindConnectionSubject",
 	"getConnectionSubject",
 	"unbindConnectionSubject",
@@ -4481,12 +4481,12 @@ var S = (e, t, n) => {
 ]), Cr = (e) => {
 	let t = e.getFullText();
 	if (!/ConnectionSubject|connectionSubjectsSnapshot|rebind/.test(t)) return !1;
-	for (let t of e.getDescendantsOfKind(x.CallExpression)) if (Sr.has(t.getExpression().getText())) return !0;
-	for (let t of e.getImportDeclarations()) for (let e of t.getNamedImports()) if (Sr.has(e.getName())) return !0;
-	for (let t of e.getDescendantsOfKind(x.PropertyAssignment)) if (t.getName() === "rebind") return !0;
-	for (let t of e.getDescendantsOfKind(x.ShorthandPropertyAssignment)) if (t.getName() === "rebind") return !0;
+	for (let t of e.getDescendantsOfKind(S.CallExpression)) if (B.has(t.getExpression().getText())) return !0;
+	for (let t of e.getImportDeclarations()) for (let e of t.getNamedImports()) if (B.has(e.getName())) return !0;
+	for (let t of e.getDescendantsOfKind(S.PropertyAssignment)) if (t.getName() === "rebind") return !0;
+	for (let t of e.getDescendantsOfKind(S.ShorthandPropertyAssignment)) if (t.getName() === "rebind") return !0;
 	return !1;
-}, wr = w({
+}, wr = T({
 	version: "0.34.0",
 	id: "0.34.0/19_connection-override-carries-a-credential",
 	title: "Soft re-auth presents a credential — it no longer hands the server a Subject",
@@ -4580,10 +4580,10 @@ var S = (e, t, n) => {
 	if (/\.workflow(\.server)?\.tsx?$/.test(e.getBaseName())) return !0;
 	let t = e.getFullText();
 	if (!/resolveScopes|defineWorkflow|ctx\.workflows/.test(t)) return !1;
-	for (let t of e.getDescendantsOfKind(x.PropertyAssignment)) if (t.getName() === "resolveScopes") return !0;
-	for (let t of e.getDescendantsOfKind(x.CallExpression)) if (t.getExpression().getText() === "defineWorkflow") return !0;
+	for (let t of e.getDescendantsOfKind(S.PropertyAssignment)) if (t.getName() === "resolveScopes") return !0;
+	for (let t of e.getDescendantsOfKind(S.CallExpression)) if (t.getExpression().getText() === "defineWorkflow") return !0;
 	return !1;
-}, Er = w({
+}, Er = T({
 	version: "0.34.0",
 	id: "0.34.0/20_workflow-authority-resolves-at-resume",
 	title: "A resumed workflow re-resolves its caller's authority instead of restoring it",
@@ -4668,9 +4668,9 @@ var S = (e, t, n) => {
 		let t = e.getName();
 		if (t === "EntityAdminSpec" || t === "deriveEntityAdmins") return !0;
 	}
-	for (let t of e.getDescendantsOfKind(x.PropertyAccessExpression)) if (Dr.has(t.getName())) return !0;
+	for (let t of e.getDescendantsOfKind(S.PropertyAccessExpression)) if (Dr.has(t.getName())) return !0;
 	return !1;
-}, kr = w({
+}, kr = T({
 	version: "0.34.0",
 	id: "0.34.0/21_admin-gates-on-declared-access",
 	title: "The derived admin gates on the api's DECLARED access — the invented `<table>:create` scopes are gone",
@@ -4765,7 +4765,7 @@ var S = (e, t, n) => {
 		"from \"undeclared\", so an intentionally public action rendered as forbidden",
 		"to everybody."
 	].join("\n")
-}), Ar = /\b(useMutation|useAction|useWorkflow|useWorkflowSignal|useWorkflowUpdate|useUpload)\b/, jr = /FiberFailure|Cause\.squash|squashWith/, Mr = w({
+}), Ar = /\b(useMutation|useAction|useWorkflow|useWorkflowSignal|useWorkflowUpdate|useUpload)\b/, jr = /FiberFailure|Cause\.squash|squashWith/, Mr = T({
 	version: "0.34.0",
 	id: "0.34.0/22_write-rejections-carry-the-typed-error",
 	title: "A rejected mutate/run/signal/upload carries the typed error, not a FiberFailure",
@@ -4825,7 +4825,7 @@ var S = (e, t, n) => {
 		"contract, reject from a real rpc client, or assert on the value your",
 		"component branches on rather than on the literal the test wrote."
 	].join("\n")
-}), Nr = /@voltro\/plugin-sso-saml|samlSsoPlugin/, Pr = w({
+}), Nr = /@voltro\/plugin-sso-saml|samlSsoPlugin/, Pr = T({
 	version: "0.34.0",
 	id: "0.34.0/23_saml-signature-and-replay-defaults",
 	title: "SAML: response-signature requirement relaxed + surfaced; replay protection ON by default",
@@ -4921,14 +4921,14 @@ var S = (e, t, n) => {
 		"request, and the envelope is unauthenticated. If you must run unsolicited,",
 		"set `wantAuthnResponseSigned: true`."
 	].join("\n")
-}), Fr = /\b(signPayload|verifySignature)\s*\(/, Ir = w({
+}), Fr = /\b(signPayload|verifySignature)\s*\(/, Ir = T({
 	version: "0.34.0",
 	id: "0.34.0/24_webhook-signing-renders-headers",
 	title: "Webhook signing: `signPayload`/`verifySignature` → `signRequest`/`verifyRequest`",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Fr.test(e.getFullText())),
 	note: "A webhook signature scheme now renders a header MAP rather than one header,\nand verifies against the request's whole header map.\n\n  - signPayload(scheme, rawBody, secret)\n      → signRequest(scheme, { rawBody, secret, messageId })\n      returns { headers } instead of { headerName, headerValue }\n\n  - verifySignature(scheme, rawBody, secret, headerValue)\n      → verifyRequest(scheme, { rawBody, secret, headers })\n\nRewrite each call site:\n\n    // before\n    const { headerName, headerValue } = signPayload(scheme, body, secret)\n    await fetch(url, { headers: { [headerName]: headerValue }, body })\n\n    // after\n    const { headers } = signRequest(scheme, { rawBody: body, secret, messageId: deliveryId })\n    await fetch(url, { headers, body })\n\nWHY `messageId` IS REQUIRED, AND WHY THIS IS NOT AUTOMATED:\n\n  Standard Webhooks signs over `<messageId>.<timestamp>.<body>` and sends the\n  id as `webhook-id` — which is also the value the spec tells consumers to\n  use as their IDEMPOTENCY KEY. Pass the id that identifies the message to\n  THAT receiver, stable across retries (the framework passes its delivery\n  id). A fresh `randomUUID()` per attempt compiles and reads fine, and\n  quietly makes every retry look like a new message to the receiver.\n\nTHE DEFAULT OUTGOING SCHEME CHANGED:\n\n  `defaultOutgoingSignature()` now returns Standard Webhooks v1.0.0 —\n  `webhook-id` / `webhook-timestamp` / `webhook-signature: v1,<base64>` — so\n  a NEW subscription signs to an interoperable spec every conformant\n  consumer library already verifies. Existing target rows are untouched:\n  each stores the scheme it was created with.\n\n  Its key serialization differs too: `whsec_` + base64 of 24..64 random\n  bytes, HMAC-ing the DECODED bytes. `subscribe()` mints the right shape\n  automatically; passing your own hex secret for a standard-webhooks target\n  is REFUSED at subscribe rather than producing signatures no consumer\n  accepts.\n\n  To keep the previous house format on a new subscription, pass it\n  explicitly: `webhooks.subscribe({ …, signing: genericHmacSignature() })`\n  — the same shape as before, under a name that says it is a choice.\n\nALSO IN THIS RELEASE, no code change needed:\n\n  - a 3xx response is a failure and redirects are no longer FOLLOWED (they\n    were, by fetch's default — which also walked past the SSRF guard);\n  - a `410 Gone` disables the target immediately, whatever the\n    consecutive-failure threshold says;\n  - each attempt has a 30s wire timeout (`VOLTRO_WEBHOOK_TIMEOUT_MS`, or\n    `timeoutMs`). There was none, so a receiver that accepted the connection\n    and never answered held the delivery workflow open indefinitely.\n\nAnd `slackSignature()` is now a REAL verifier. It shipped as a stub that\nreturned false unconditionally, workable only through a header-packing\nconvention in the route mounter. A scheme now receives the whole header map\nand reads `x-slack-request-timestamp` itself."
-}), Lr = /from\s+['"]@voltro\/plugin-presence(?:\/[a-z]+)?['"]/, Rr = /\b(lastSeen|presenceTable|memoryPresenceStore|isOnline|filterOnline|staleKeys|PresenceStore|PresenceEntry|PresenceTracker)\b/, zr = /_voltro_presence/, Br = w({
+}), Lr = /from\s+['"]@voltro\/plugin-presence(?:\/[a-z]+)?['"]/, Rr = /\b(lastSeen|presenceTable|memoryPresenceStore|isOnline|filterOnline|staleKeys|PresenceStore|PresenceEntry|PresenceTracker)\b/, zr = /_voltro_presence/, Br = T({
 	version: "0.34.0",
 	id: "0.34.0/25_presence-has-no-table",
 	title: "Presence: `_voltro_presence` is gone, and so is `lastSeen` on the roster",
@@ -4940,10 +4940,10 @@ var S = (e, t, n) => {
 	note: "@voltro/plugin-presence no longer declares a table. Four things moved.\n\n1. A roster member is now { key, meta } — there is NO `lastSeen`.\n\n   It was the OWNING replica's clock, so on more than one replica \"active 3\n   minutes ago\" rendered from it was wrong by the skew between two pods, with\n   nothing to say so. It was also the only field a plain heartbeat changed,\n   which is what made the roster push on every beat instead of on every change.\n\n       // before\n       members.map((m) => `${m.key} — ${ago(m.lastSeen)}`)\n       // after: put anything time-shaped you need into meta\n       usePresence(channel, { meta: { joinedAt: Date.now() } })\n       members.map((m) => `${m.key} — ${ago(m.meta?.joinedAt)}`)\n\n2. `PresenceTracker.track()` and `.untrack()` return { delta, changed }.\n\n       // before\n       bus.announce(tracker.track({ channel, tenantId, key }))\n       // after — announce ALWAYS (a peer's sweep needs the liveness signal),\n       // push only on a change\n       const write = tracker.track({ channel, tenantId, key })\n       bus.announce(write.delta)\n       if (write.changed) publishReactivity(store, presenceRoster)\n\n   Do not blind-append `.delta` and move on: dropping `changed` restores the\n   per-heartbeat push this release removed, and nothing will report it.\n\n   `attachPresenceBus` also takes an optional `onRosterChanged` now — call it\n   if you drive the bus yourself, or a peer's join and a peer's death will\n   update your tracker and push nobody.\n\n3. These exports are DELETED, with no replacement:\n\n       presenceTable, PresenceStore, PresenceEntry,\n       memoryPresenceStore, isOnline, filterOnline, staleKeys\n\n   They were the table era's read model — an abstraction over rows plus the\n   staleness filter a row needed because it outlived the client that wrote it.\n   Presence has neither. Reading the roster is `presence.list` / `usePresence`;\n   the staleness sweep is the plugin's own and needs nothing from you.\n\n4. If your `source:` names '_voltro_presence' as a string, point it at the\n   channel object instead:\n\n       import { presenceRoster } from '@voltro/plugin-presence'\n       defineQuery({ name: 'room.summary', source: presenceRoster, ... })\n\n   And to push it yourself:\n\n       import { publishReactivity } from '@voltro/protocol'\n       publishReactivity(ctx.store, presenceRoster)\n\nTHE TABLE IS NOT DROPPED FOR YOU. The declarative differ never plans a drop for\na framework table no app declares — deliberately, so a live `_voltro_*` table is\nnever destroyed by an app that simply does not know about it. So an existing\n`_voltro_presence` stays, empty, until you remove it:\n\n    DROP TABLE IF EXISTS _voltro_presence;\n\nIt holds no data anyone can use: nothing has written a row to it since presence\nmoved into memory."
 }), Vr = (e) => {
 	let t = e.getArguments()[0];
-	if (t === void 0 || !t.isKind(x.ObjectLiteralExpression)) return /* @__PURE__ */ new Set();
+	if (t === void 0 || !t.isKind(S.ObjectLiteralExpression)) return /* @__PURE__ */ new Set();
 	let n = /* @__PURE__ */ new Set();
 	for (let e of t.getProperties()) {
-		let t = (e.asKind(x.PropertyAssignment) ?? e.asKind(x.ShorthandPropertyAssignment))?.getName?.();
+		let t = (e.asKind(S.PropertyAssignment) ?? e.asKind(S.ShorthandPropertyAssignment))?.getName?.();
 		t !== void 0 && n.add(t);
 	}
 	return n;
@@ -4951,21 +4951,21 @@ var S = (e, t, n) => {
 	if (e.getExpression().getText() !== "defineEvent") return !1;
 	let t = Vr(e);
 	return !t.has("guards") && !t.has("openAccess");
-}) : !1, Ur = w({
+}) : !1, Ur = T({
 	version: "0.35.0",
 	id: "0.35.0/01_event-access-decision",
 	title: "Every declared event decides who may listen (`guards:` or `openAccess:`)",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Hr(e.getFullText(), e.getDescendantsOfKind(x.CallExpression))),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Hr(e.getFullText(), e.getDescendantsOfKind(S.CallExpression))),
 	note: (/* @__PURE__ */ "YOUR APP WILL NOT BOOT UNTIL EVERY DECLARED EVENT DECIDES WHO MAY LISTEN.(This closes the sibling of 0.34.0's procedure gate: `defineEvent`'s `guards:`(was optional and enforcement skipped an empty list, so an event with no(decision was silently subscribable by ANY authenticated session that could(open the socket.((WHAT TO DO, IN THIS ORDER:((1) LIST THEM. `voltro doctor` prints every undecided event with its tag and(   file — the same set, from the same function, that the boot refuses on.(   `voltro doctor --json` carries it as `accessDecisions.undecided` for CI.((2) DECIDE EACH ONE. There are exactly two answers and they are not the same(   claim:((       guards: [{ scope: 'display:read' }]     a subscriber must hold a scope(       openAccess: 'public scoreboard'         anyone may listen — and why((   `openAccess` takes a REASON, not a boolean. It is what a reviewer reads(   later, and it is what makes \"we decided this is open\" distinguishable(   from \"nobody looked\".((3) DO NOT RUBBER-STAMP. Reaching for a scope every caller already holds(   satisfies the gate, reads as protection, and enforces nothing. If the(   event is open, say `openAccess`. If it should not be open, this gate just(   found a real hole — an event often carries exactly the data its table(   guards behind a scoped query.((IF YOU NEED TO SHIP FIRST. The same field that covers procedures covers(events, in `app.config.ts`:((       export default { security: { defaultDeny: false } }((That restores the old default-allow for the WHOLE app, in one place a(reviewer can see. There is no env var for it, on purpose. `voltro doctor`(keeps listing the undecided events while it is off, marked advisory.((NOT AFFECTED: apps already running `security: { defaultDeny: false }`, and(events your PLUGINS declare — the gate reads your app's own discovered(`*.event.ts` files only.".split("(")).join("\n")
-}), Wr = /\brouteHttp\s*\(/, Gr = w({
+}), Wr = /\brouteHttp\s*\(/, Gr = T({
 	version: "0.34.0",
 	id: "0.34.0/26_route-http-is-async",
 	title: "`routeHttp` returns a Promise",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Wr.test(e.getFullText())),
 	note: "`routeHttp` (@voltro/mcp) is async now:\n\n    routeHttp(options): HttpOutcome        // before\n    routeHttp(options): Promise<HttpOutcome>  // after\n\nAwait it, and make the enclosing function async if it is not already:\n\n    // before\n    const outcome = routeHttp({ method, url, body, tools })\n    if (outcome.kind === 'json') respond(outcome)\n\n    // after\n    const outcome = await routeHttp({ method, url, body, tools })\n    if (outcome.kind === 'json') respond(outcome)\n\nWhy it moved: `tools/list` now folds in the app's agent tools and `tools/call`\nexecutes one, so two of the methods reach the app. The rest still resolve without\ntouching anything, and the function is still pure in the sense that matters — it\nbinds no socket, and a test supplies a `live` double.\n\nIf you use the shipped `serveHttp` transport there is nothing to do; it already\nawaits."
-}), Kr = /@voltro\/plugin-(billing|governance|storage)/, qr = /* @__PURE__ */ RegExp("\\b(billing\\.(startCheckout|portalUrl|previewChange|changePlan|changeSeats|invoices|reportUsage)|governance\\.(export|erase)|storage\\.(mintUploadUrl|ingestUrl|listRefs))\\b"), Jr = /\bdefinePluginRoute\s*\(|\broutes\s*:\s*\[/, Yr = w({
+}), Kr = /@voltro\/plugin-(billing|governance|storage)/, qr = /* @__PURE__ */ RegExp("\\b(billing\\.(startCheckout|portalUrl|previewChange|changePlan|changeSeats|invoices|reportUsage)|governance\\.(export|erase)|storage\\.(mintUploadUrl|ingestUrl|listRefs))\\b"), Jr = /\bdefinePluginRoute\s*\(|\broutes\s*:\s*\[/, Yr = T({
 	version: "0.35.0",
 	id: "0.35.0/02_plugin-procedures-carry-access-decisions",
 	title: "First-party plugin procedures carry access decisions; twelve now require a scope",
@@ -5037,7 +5037,7 @@ var S = (e, t, n) => {
 		"`openAccess` with the reason each is safe (self-scoped rows, signed",
 		"subject-bound tickets, per-object grants), and behave exactly as before."
 	].join("\n")
-}), Xr = /AnalyticsMirrorImpl/, Zr = w({
+}), Xr = /AnalyticsMirrorImpl/, Zr = T({
 	version: "0.35.0",
 	id: "0.35.0/03_analytics-mirror-max-version",
 	title: "Custom analytics mirror sinks answer `maxVersion` (fleet-scope seed read)",
@@ -5067,21 +5067,21 @@ var S = (e, t, n) => {
 		"",
 		"The read is issued at most once per key per process, off the commit path."
 	].join("\n")
-}), Qr = (e) => /RunStepStatus/.test(e) || /['"]succeeded['"]/.test(e) && /['"]waiting['"]/.test(e) && /RunStep|runStep|flow/i.test(e), $r = w({
+}), Qr = (e) => /RunStepStatus/.test(e) || /['"]succeeded['"]/.test(e) && /['"]waiting['"]/.test(e) && /RunStep|runStep|flow/i.test(e), $r = T({
 	version: "0.35.0",
 	id: "0.35.0/04_flow-run-step-skipped",
 	title: "A flow run step can now be 'skipped' — handle it where you render a run timeline",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Qr(e.getFullText())),
 	note: (/* @__PURE__ */ "A FLOW RUN STEP CAN NOW BE 'skipped'.((`when:` on a flow step gates it on a prior value, and a step whose condition(is false is SKIPPED rather than run. That is a sixth member of(`RunStepStatus`, so an exhaustive switch over it no longer compiles, and a(lookup keyed by status now has a hole.((WHAT TO DO:((1) FIND IT. Anywhere you render or branch on a run step status — a timeline(   component, a status badge map, a progress calculation.((2) DECIDE WHAT A SKIPPED STEP LOOKS LIKE. It is NOT a failure and NOT a(   success: it did not run, on purpose, and it produced no output. The(   step carries `skipReason` — the rendered condition, e.g.(   `{{mode}} equals \"full\"` — so the timeline can say WHY.((3) DO NOT DEFAULT IT TO INVISIBLE. Dropping the row compiles and reads fine(   in review, and it reproduces exactly the problem `skipReason` exists to(   prevent: a step that vanished is indistinguishable from a step nobody(   declared, which is the first thing a user reports as a bug.((A PROGRESS COUNT probably needs a second look too: `succeeded / total` now(under-reports a completed run that skipped a step. Counting(`succeeded + skipped` against the total is usually what was meant.((If your app does not render a flow timeline, there is nothing to do — this(note fires on any file that names the status type or its literals.".split("(")).join("\n")
-}), ei = w({
+}), ei = T({
 	version: "0.35.0",
 	id: "0.35.0/05_declared-schema-drops-runtime-flags",
 	title: "The declared schema no longer reads `CDC` / `VOLTRO_UNDO` / `VOLTRO_TRACING_PERSIST`",
 	kind: "manual",
 	appliesTo: () => !0,
 	note: (/* @__PURE__ */ "The set of framework tables your app DECLARES is hashed into the schema(fingerprint. A pre-deploy `voltro db apply` records that hash; every serving(container recomputes it and refuses to boot if it differs. Until this release(three RUNTIME flags fed into that set:((    CDC=0                       removed `_voltro_cdc_offsets`(    VOLTRO_UNDO=on              added   `_voltro_undo_log`(    VOLTRO_TRACING_PERSIST=all  added   `_voltro_traces`((All three read as pure runtime knobs, so they tend to live on the PODS and(not on the pre-upgrade migrate Job — which is a green migrate followed by(every pod in CrashLoopBackOff. This was reported against a Helm deployment(where `CDC: \"0\"` was in all three overlays' pod blocks and none of their(jobs; it had been latent for months and would have fired on the next deploy.((WHAT YOU MUST DO — only if you set one of these to turn a table ON in(production:((  * `VOLTRO_UNDO=on` in production  → add to app.config.ts:(        export default { schema: { undo: true }, … }(  * `VOLTRO_TRACING_PERSIST` keeping trace history in production → add:(        export default { schema: { traces: true }, … }((    Without the declaration, `voltro serve` now REFUSES to boot and names the(    field. That refusal is the point: before, the same configuration either(    wrote to a table nobody created or produced a fingerprint the migrate job(    could not reproduce.((    Turning capture OFF still needs no declaration and never will — a declared(    table nobody writes to is harmless. Only turning it ON is a schema claim.((WHAT HAPPENS WITHOUT ANY ACTION:((  * On mariadb or mssql you will see ONE additive `create-table` in your next(    plan: `_voltro_cdc_offsets` is now declared by the DIALECT rather than by(    `CDC`, so it exists whether or not that process drives CDC. It is an(    offsets table — a handful of rows — and the alternative was leaving a(    runtime flag able to split your fleet.(  * On postgres/sqlite nothing changes: those dialects have no offsets table.((AND ONE THING WORTH DOING ANYWAY: if you are upgrading a deployment that has(a separate migrate job, diff that job's `env:` against your pods' once. The(framework can now guarantee its OWN tables do not depend on a runtime flag;(it cannot make the same guarantee for a plugin's `extendSchema.tables`, which(is app code and may read anything. A `prod-mismatch` refusal now prints which(tables this process decided and from which input, so the comparison is quick.".split("(")).join("\n")
-}), V = "session_expired", ti = w({
+}), V = "session_expired", ti = T({
 	version: "0.35.1",
 	id: "0.35.1/01_unauthorized-replaces-session-expired",
 	title: "A 401 is `code: 'unauthorized'`; the vault's own failure is `'credential_unusable'`",
@@ -5097,14 +5097,14 @@ var S = (e, t, n) => {
 		}
 		n.length !== 0 && t(`rewrote '${V}' to 'unauthorized' in ${n.length} file(s).\n  A 401 now means only "the credential was refused" — expired, revoked, wrong\n  scope and MALFORMED all produce that status, and the old name asserted the\n  first one. If a rewritten branch was meant to catch a credential your\n  CONNECTION VAULT could not produce (no grant, revoked grant, failed refresh),\n  change it to 'credential_unusable' — that is the code the vault raises, and it\n  is the one where re-auth is genuinely the right action.\n  A health check that logs the user out on this code should read 'unauthorized'\n  as "ask again", not as "the session is gone".\n` + n.map((e) => `    ${e}`).join("\n"));
 	}
-}), ni = /\(\s*\{[^}]*\.\.\./, ri = /\bquery\??\.?\(\s*['"`]/, ii = w({
+}), ni = /\(\s*\{[^}]*\.\.\./, ri = /\bquery\??\.?\(\s*['"`]/, ii = T({
 	version: "0.37.0",
 	id: "0.37.0/01_procedure-input-rejects-undeclared-fields",
 	title: "a procedure input rejects a field it does not declare (it used to drop it)",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return ni.test(t) || ri.test(t) || T("query").test(t);
+		return ni.test(t) || ri.test(t) || E("query").test(t);
 	}),
 	note: [
 		"A procedure call whose input carries a field the schema does not declare",
@@ -5166,33 +5166,33 @@ var S = (e, t, n) => {
 		"two, the only safe direction is to refuse — and a warning would have to be",
 		"read by someone, in a log, after the wrong rows were already served."
 	].join("\n")
-}), ai = "@voltro/plugin-auth", H = "@voltro/protocol", U = "IMPERSONATION_METADATA_KEY", oi = w({
+}), H = "@voltro/plugin-auth", U = "@voltro/protocol", W = "IMPERSONATION_METADATA_KEY", ai = T({
 	version: "0.38.0",
 	id: "0.38.0/01_impersonation-key-in-protocol",
-	title: `\`${U}\` is imported from @voltro/protocol`,
+	title: `\`${W}\` is imported from @voltro/protocol`,
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === ai && e.getNamedImports().some((e) => e.getName() === U))),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === H && e.getNamedImports().some((e) => e.getName() === W))),
 	transform: ({ project: e, log: t }) => {
 		let n = 0;
 		for (let t of e.getSourceFiles()) for (let e of t.getImportDeclarations()) {
-			if (e.getModuleSpecifierValue() !== ai) continue;
-			let r = e.getNamedImports().find((e) => e.getName() === U);
+			if (e.getModuleSpecifierValue() !== H) continue;
+			let r = e.getNamedImports().find((e) => e.getName() === W);
 			if (r === void 0) continue;
 			let i = r.getAliasNode()?.getText(), a = e.isTypeOnly() || r.isTypeOnly();
 			r.remove();
-			let o = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === H && e.isTypeOnly() === a), s = {
-				name: U,
+			let o = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === U && e.isTypeOnly() === a), s = {
+				name: W,
 				...i === void 0 ? {} : { alias: i }
 			};
 			o === void 0 ? t.addImportDeclaration({
-				moduleSpecifier: H,
+				moduleSpecifier: U,
 				isTypeOnly: a,
 				namedImports: [s]
 			}) : o.addNamedImport(s), e.getNamedImports().length === 0 && e.getDefaultImport() === void 0 && e.getNamespaceImport() === void 0 && e.remove(), n += 1;
 		}
-		n > 0 && t(`${U}: ${n} import(s) repointed to ${H}`);
+		n > 0 && t(`${W}: ${n} import(s) repointed to ${U}`);
 	}
-}), si = w({
+}), oi = T({
 	version: "0.38.0",
 	id: "0.38.0/02_startup-failure-refuses-boot",
 	title: "a `*.startup.ts` that fails refuses the boot (it used to warn and continue)",
@@ -5277,12 +5277,12 @@ var S = (e, t, n) => {
 		"long work after, so a failure in the long half cannot hide a missing",
 		"registration."
 	].join("\n")
-}), ci = /\bStruct\(\s*\{\s*\}\s*\)/, li = w({
+}), si = /\bStruct\(\s*\{\s*\}\s*\)/, ci = T({
 	version: "0.39.0",
 	id: "0.39.0/01_empty-input-schema-rejects-every-field",
 	title: "a procedure declaring `Schema.Struct({})` used to accept every field and now accepts none",
 	kind: "manual",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => ci.test(e.getFullText())),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => si.test(e.getFullText())),
 	note: [
 		"CHECK YOUR `Schema.Struct({})` PROCEDURES FIRST. They have been accepting",
 		"every field anyone sent them, and they now accept none — the one jump in",
@@ -5336,14 +5336,14 @@ var S = (e, t, n) => {
 		"A procedure that genuinely takes no input keeps `Schema.Struct({})` and is",
 		"correct as it stands — callers must send `{}` or nothing."
 	].join("\n")
-}), ui = w({
+}), li = T({
 	version: "0.40.0",
 	id: "0.40.0/01_cold-start-failure-is-its-own-state",
 	title: "a failed cold start is `failed: true`, not `loading: true`",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return T("useSubscription").test(t) || T("usePreloadedSubscription").test(t) || /\buseWorkflow\w*\(/.test(t);
+		return E("useSubscription").test(t) || E("usePreloadedSubscription").test(t) || /\buseWorkflow\w*\(/.test(t);
 	}),
 	note: [
 		"A subscription whose COLD START failed no longer reports `loading: true`.",
@@ -5401,14 +5401,14 @@ var S = (e, t, n) => {
 		"    reconnect discards the error and re-subscribes, so the entry returns to",
 		"    pending on its own."
 	].join("\n")
-}), di = w({
+}), ui = T({
 	version: "0.40.0",
 	id: "0.40.0/02_rejected-credential-widens-guard-results",
 	title: "a rejected credential answers `Unauthenticated`, widening three guard results",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return T("checkGuards").test(t) || T("checkGuardsEffect").test(t) || T("bindEvent").test(t);
+		return E("checkGuards").test(t) || E("checkGuardsEffect").test(t) || E("bindEvent").test(t);
 	}),
 	note: [
 		"A guard refusing a caller whose CREDENTIAL was rejected now answers",
@@ -5437,16 +5437,16 @@ var S = (e, t, n) => {
 		"`openAccess` procedures are untouched: the stamp only travels, and only a",
 		"guard that actually refuses ever spends it."
 	].join("\n")
-}), fi = "@voltro/web/middleware", pi = /(^|[\\/])middleware\.tsx?$/, mi = w({
+}), di = "@voltro/web/middleware", fi = /(^|[\\/])middleware\.tsx?$/, pi = T({
 	version: "0.41.0",
 	id: "0.41.0/01_middleware-defines-where-it-runs",
 	title: "`middleware.ts` exports `defineMiddleware(...)` and can say where it runs",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => pi.test(e.getFilePath()) ? e.getExportAssignment((e) => !e.isExportEquals()) !== void 0 || e.getFunctions().some((e) => e.isDefaultExport()) : !1),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => fi.test(e.getFilePath()) ? e.getExportAssignment((e) => !e.isExportEquals()) !== void 0 || e.getFunctions().some((e) => e.isDefaultExport()) : !1),
 	transform: ({ project: e, log: t }) => {
 		let n = 0;
 		for (let t of e.getSourceFiles()) {
-			if (!pi.test(t.getFilePath()) || t.getFullText().includes("defineMiddleware")) continue;
+			if (!fi.test(t.getFilePath()) || t.getFullText().includes("defineMiddleware")) continue;
 			let e = t.getExportAssignment((e) => !e.isExportEquals());
 			if (e !== void 0) {
 				let t = e.getExpression().getText();
@@ -5457,9 +5457,9 @@ var S = (e, t, n) => {
 				let r = e.getText().replace(/^\s*export\s+default\s+/, "");
 				e.replaceWithText(`export default defineMiddleware({ run: ${r} })`), n += 1;
 			}
-			let r = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === fi);
+			let r = t.getImportDeclarations().find((e) => e.getModuleSpecifierValue() === di);
 			r === void 0 ? t.insertImportDeclaration(0, {
-				moduleSpecifier: fi,
+				moduleSpecifier: di,
 				namedImports: [{ name: "defineMiddleware" }]
 			}) : r.getNamedImports().some((e) => e.getName() === "defineMiddleware") || r.addNamedImport({ name: "defineMiddleware" });
 		}
@@ -5496,7 +5496,7 @@ var S = (e, t, n) => {
 		"Non-page requests (assets, unknown paths) are NOT matched unless you ask with",
 		"`assets: true`. There is no render there, so only `setCookies` takes effect."
 	].join("\n")
-}), hi = w({
+}), mi = T({
 	version: "0.43.0",
 	id: "0.43.0/01_dangling-reference-to-rows-refused",
 	title: "`DanglingReferenceError` → `RowsRefusedError` (named for the outcome, not a guessed cause)",
@@ -5510,7 +5510,7 @@ var S = (e, t, n) => {
 		});
 		return r > 0 && n(`renamed ${r} import(s) of DanglingReferenceError → RowsRefusedError. A tag STRING (Effect.catchTag('DanglingReferenceError', …) or err._tag === '…') is NOT rewritten — change it to 'RowsRefusedError'. The payload also gained primaryCount, and each row a boolean derived.`), r;
 	}
-}), gi = w({
+}), hi = T({
 	version: "0.44.0",
 	id: "0.44.0/01_import-outcome",
 	title: "`runImport` returns an ImportOutcome — read `.manifest` for the bundle",
@@ -5531,7 +5531,7 @@ var S = (e, t, n) => {
 		"emptied of its old rows and holding part of the new ones. If you relied on per-table resume for a replace,",
 		"that is the non-atomic path."
 	].join("\n")
-}), _i = w({
+}), gi = T({
 	version: "0.45.0",
 	id: "0.45.0/01_typed-source-table-name",
 	title: "`source:` is typechecked against the app’s tables, from the next `voltro dev`",
@@ -5571,14 +5571,14 @@ var S = (e, t, n) => {
 		"To opt out entirely, delete `voltro-tables.generated.d.ts` and exclude it",
 		"from your tsconfig; `source:` widens back to `string`."
 	].join("\n")
-}), vi = w({
+}), _i = T({
 	version: "0.46.0",
 	id: "0.46.0/01_typed-aggregate-source",
 	title: "an aggregate’s `incremental.source` is typechecked against the app’s tables",
 	kind: "manual",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /\bincremental\s*:/.test(e.getFullText())),
 	note: (/* @__PURE__ */ "An aggregate that opts into incremental maintenance names the table whose(CDC deltas drive it:((    incremental: { source: 'tasks', op: 'count' }((That name is now checked against your app’s tables, the same way a query’s(`source:` has been since 0.45.0.((WHY IT MATTERS MORE HERE((A name matching no table does not error. The runner subscribes to something(nothing writes, no delta ever arrives, and the aggregate quietly stops(tracking its input — while every read of it still succeeds and still returns(a number. There is no failing request to notice.((WHEN IT STARTS APPLYING((At your next `voltro dev` or `voltro codegen`, not at this upgrade — those(write `voltro-tables.generated.d.ts`, and that file is what narrows the type.(Until it exists the field is `string`, exactly as it is today.((WHAT TO DO((Boot once and read what `tsc` flags. A flagged name is either misspelled or(renamed away — a real defect, and that aggregate has not been maintaining —(or it is computed at runtime, in which case annotate it `string`.((The boot also warns now: an aggregate whose CDC source resolves to no table(is named in the same stale-`source:` warning queries and streams appear in.".split("(")).join("\n")
-}), yi = w({
+}), vi = T({
 	version: "0.49.0",
 	id: "0.49.0/01_data-imports-to-transfers",
 	title: "`voltro data imports` → `voltro data transfers`",
@@ -5611,7 +5611,7 @@ var S = (e, t, n) => {
 		"marker, so `voltro db apply` (or a `voltro dev` boot) moves it with its rows on",
 		"every dialect. If you query it directly, the new name is the one to use."
 	].join("\n")
-}), bi = ["@voltro/database", "voltro/database"], W = [
+}), yi = ["@voltro/database", "voltro/database"], bi = [
 	["ImportRun", "DataTransferRun"],
 	["describeImportRun", "describeTransferRun"],
 	["IMPORT_RUNS_TABLE", "DATA_TRANSFERS_TABLE"],
@@ -5619,25 +5619,25 @@ var S = (e, t, n) => {
 ], G = "_voltro_data_imports", xi = "_voltro_data_transfers", Si = (e) => {
 	let t = 0;
 	for (let n of e.getSourceFiles()) n.getFullText().includes(G) && n.forEachDescendant((e) => {
-		if (b.isStringLiteral(e) || b.isNoSubstitutionTemplateLiteral(e) || b.isTemplateHead(e) || b.isTemplateMiddle(e) || b.isTemplateTail(e) || b.isRegularExpressionLiteral(e)) {
+		if (x.isStringLiteral(e) || x.isNoSubstitutionTemplateLiteral(e) || x.isTemplateHead(e) || x.isTemplateMiddle(e) || x.isTemplateTail(e) || x.isRegularExpressionLiteral(e)) {
 			let n = e.getText();
 			if (!n.includes(G)) return;
 			e.replaceWithText(n.split(G).join(xi)), t++;
 		}
 	});
 	return t;
-}, Ci = w({
+}, Ci = T({
 	version: "0.49.0",
 	id: "0.49.0/02_import-run-symbols",
 	title: "`ImportRun` / `describeImportRun` / `IMPORT_RUNS_TABLE` → their `…TransferRun` names",
 	kind: "transform",
 	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 		let t = e.getFullText();
-		return t.includes(G) ? !0 : bi.some((e) => t.includes(e)) ? W.some(([e]) => t.includes(e)) : !1;
+		return t.includes(G) ? !0 : yi.some((e) => t.includes(e)) ? bi.some(([e]) => t.includes(e)) : !1;
 	}),
 	transform: ({ project: e, helpers: t, log: n }) => {
 		let r = 0;
-		for (let n of bi) for (let [i, a] of W) r += t.renameImport(e, {
+		for (let n of yi) for (let [i, a] of bi) r += t.renameImport(e, {
 			module: n,
 			from: i,
 			to: a
@@ -5647,7 +5647,7 @@ var S = (e, t, n) => {
 		let a = [];
 		r > 0 && a.push(`${r} import(s) renamed to their \`…TransferRun\` names`), i > 0 && a.push(`${i} hand-spelled \`${G}\` → \`${xi}\``), n(`data-transfer run history: ${a.join("; ")}. An export writes to this record now, so the old names described half of what the table holds. The table itself carries a rename marker — \`voltro db apply\` (or a \`voltro dev\` boot) moves it with its rows on every dialect, so no data is lost and nothing is required of you there.`);
 	}
-}), wi = w({
+}), wi = T({
 	version: "0.50.0",
 	id: "0.50.0/01_transfer-runs-endpoint",
 	title: "`GET /_voltro/admin/imports` → `GET /_voltro/admin/transfers`",
@@ -5671,7 +5671,7 @@ var S = (e, t, n) => {
 		"hand is anything that calls it directly — a monitoring check, an uptime probe,",
 		"a curl in a runbook, a dashboard datasource."
 	].join("\n")
-}), Ti = w({
+}), Ti = T({
 	version: "0.50.0",
 	id: "0.50.0/02_reissue-data-imports-rename",
 	title: "RE-CHECK: `voltro data imports` → `voltro data transfers` (0.49.0's note could not see your scripts)",
@@ -5703,7 +5703,7 @@ var S = (e, t, n) => {
 		"`voltro db apply` moved `_voltro_data_imports` → `_voltro_data_transfers`",
 		"with its rows."
 	].join("\n")
-}), Ei = w({
+}), Ei = T({
 	version: "0.50.0",
 	id: "0.50.0/03_interrupted-replace-tables-nullable",
 	title: "`InterruptedReplace.tables` is `number | null`",
@@ -5725,7 +5725,7 @@ var S = (e, t, n) => {
 		"not to do is coerce it, because `Number(null)` is `0` and the sentence then",
 		"reports a measurement that was never taken."
 	].join("\n")
-}), Di = w({
+}), Di = T({
 	version: "0.51.0",
 	id: "0.51.0/01_computed-source-keeps-its-names",
 	title: "A COMPUTED `source:` can keep its typed names — do not widen the whole registry",
@@ -5779,7 +5779,7 @@ var S = (e, t, n) => {
 		"literal — a name read from a config file, or one assembled at runtime. Use it",
 		"when there is no key set to keep, not when recovering one takes two lines."
 	].join("\n")
-}), Oi = w({
+}), Oi = T({
 	version: "0.51.0",
 	id: "0.51.0/02_restore-refuses-without-marker",
 	title: "`voltro data restore` refuses when it cannot write the in-progress marker",
@@ -5787,7 +5787,7 @@ var S = (e, t, n) => {
 	reach: "beyond-source",
 	appliesTo: ({ text: e }) => e.find("voltro data restore").length > 0,
 	note: (/* @__PURE__ */ "`voltro data restore` now REFUSES when it cannot write the in-progress(marker, instead of restoring without one. A run that used to exit 0 can now(exit 1.((WHY((The marker is one row written before the first destructive statement, so a(restore that dies half-way refuses the next boot instead of serving a(half-loaded database. When it could not be written, the restore proceeded —(and then reported \"the next boot will REFUSE, by design\" over a database(with no marker at all. The next boot did not refuse.((WHICH RUNS CHANGE((  • the bookkeeping store will not open — wrong credentials, an unreachable(    database, a missing env var, a server configuration the driver refuses;(  • there is no `app.config.ts` from the working directory.((The second one surprises people: `restore` reads its TARGET from the(environment, so it looks like it needs no project. It does not, for the dump.(It needs one for the marker.((WHAT TO DO((Check every place you invoke it — cron entries, CI jobs, Makefiles, runbooks:((       grep -rn \"voltro data restore\" .((For each one, decide which it is. If the connection or the working directory(is wrong, fix that — the refusal names the reason on its own line. If the run(genuinely means to restore without the guard, say so:((       voltro data restore <dir> --no-marker((It warns every time and names why the marker was unavailable. Do not add it(everywhere as a migration step: it turns the refusal back off, which is the(behaviour this change removed.".split("(")).join("\n")
-}), ki = w({
+}), ki = T({
 	version: "0.51.0",
 	id: "0.51.0/03_restore-assets-returns-counts",
 	title: "`restoreAssetsFromCas` returns `{ count, objects }`, not a number",
@@ -5821,35 +5821,35 @@ var S = (e, t, n) => {
 		"with `totalBytes` and `objectBytes` beside them), so a report can state all",
 		"three rather than implying one."
 	].join("\n")
-}), Ai = "@voltro/i18n", ji = "I18nProvider", Mi = (e) => {
+}), K = "@voltro/i18n", Ai = "I18nProvider", ji = (e) => {
 	let t = [];
 	for (let n of e.getImportDeclarations()) {
 		let e = n.getModuleSpecifierValue();
-		if (e === Ai || e === `${Ai}/server`) for (let e of n.getNamedImports()) e.getName() === ji && t.push(e.getAliasNode()?.getText() ?? e.getName());
+		if (e === K || e === `${K}/server`) for (let e of n.getNamedImports()) e.getName() === Ai && t.push(e.getAliasNode()?.getText() ?? e.getName());
 	}
 	return t;
-}, Ni = (e, t) => [...e.getDescendantsOfKind(x.JsxOpeningElement), ...e.getDescendantsOfKind(x.JsxSelfClosingElement)].filter((e) => t.includes(e.getTagNameNode().getText())), Pi = w({
+}, Mi = (e, t) => [...e.getDescendantsOfKind(S.JsxOpeningElement), ...e.getDescendantsOfKind(S.JsxSelfClosingElement)].filter((e) => t.includes(e.getTagNameNode().getText())), Ni = T({
 	version: "0.51.0",
 	id: "0.51.0/04_i18n-timezone-prop",
 	title: "`<I18nProvider>`: `timeZone` is its own prop, not an `intlConfig` member",
 	kind: "transform",
-	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => Mi(e).length > 0),
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => ji(e).length > 0),
 	transform: ({ project: e, log: t }) => {
 		let n = 0, r = 0;
 		for (let i of e.getSourceFiles()) {
-			let e = Mi(i);
-			if (e.length !== 0) for (let a of Ni(i, e)) {
+			let e = ji(i);
+			if (e.length !== 0) for (let a of Mi(i, e)) {
 				let e = a.getAttribute("intlConfig");
-				if (!e || !b.isJsxAttribute(e)) continue;
+				if (!e || !x.isJsxAttribute(e)) continue;
 				let o = e.getInitializer();
-				if (!o || !b.isJsxExpression(o)) continue;
+				if (!o || !x.isJsxExpression(o)) continue;
 				let s = o.getExpression();
-				if (!s || !b.isObjectLiteralExpression(s)) {
+				if (!s || !x.isObjectLiteralExpression(s)) {
 					r++, t(`  ? ${i.getBaseName()}:${a.getStartLineNumber()} — intlConfig is not an object literal; check it by hand for a \`timeZone\``);
 					continue;
 				}
 				let c = s.getProperty("timeZone");
-				if (!c || !b.isPropertyAssignment(c)) continue;
+				if (!c || !x.isPropertyAssignment(c)) continue;
 				if (a.getAttribute("timeZone")) {
 					c.remove(), n++;
 					continue;
@@ -5863,16 +5863,620 @@ var S = (e, t, n) => {
 		}
 		n > 0 && (t(`I18nProvider: moved ${n} \`timeZone\` out of \`intlConfig\` onto its own prop`), t("  → it now reaches useFormatDate/useRelativeTime too, not only react-intl")), r > 0 && t(`I18nProvider: ${r} \`intlConfig\` value(s) could not be read — listed above`), n === 0 && r === 0 && (t("I18nProvider: no `intlConfig.timeZone` found — nothing to move"), t("  → if this app renders dates under SSR, set `timeZone` in the web app.config.ts"));
 	}
-}), K = "@voltro/plugin-versioning", q = "@voltro/plugin-row-history", Fi = [
+}), q = "@voltro/plugin-versioning", J = "@voltro/plugin-row-history", Pi = T({
+	version: "0.52.0",
+	id: "0.52.0/01_plugin-versioning-to-row-history",
+	title: "@voltro/plugin-versioning → @voltro/plugin-row-history (the name now says what it does)",
+	kind: "transform",
+	appliesTo: ({ project: e, text: t }) => t.find(q).length > 0 || e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === q)),
+	transform: ({ project: e, helpers: t, log: n }) => {
+		let r = t.renameImport(e, {
+			module: q,
+			from: "versioningPlugin",
+			to: "rowHistoryPlugin"
+		}) + t.renameImport(e, {
+			module: q,
+			from: "VersioningPluginOptions",
+			to: "RowHistoryPluginOptions"
+		});
+		n(`${q} → ${J}: repointed ${t.renameModuleSpecifier(e, {
+			from: q,
+			to: J
+		})} import(s)` + (r > 0 ? `, renamed ${r} versioningPlugin call site(s) to rowHistoryPlugin` : "") + `. Replace the dependency in package.json ("${q}" → "${J}") and reinstall — the table (_voltro_row_history) and VOLTRO_ROW_HISTORY_TTL_HOURS already carry the new name, so nothing else changes. If you passed an explicit alias: to the plugin it is kept as-is; only the DEFAULT alias moved from 'versioning' to 'row-history' (inspect endpoint paths + boot log lines).`);
+	}
+}), Fi = T({
+	version: "0.52.0",
+	id: "0.52.0/02_http-interceptor-fail-closed",
+	title: "A throwing `onHttpRequest` interceptor now refuses the request (500) instead of being ignored",
+	kind: "manual",
+	appliesTo: ({ text: e }) => e.find("onHttpRequest").length > 0,
+	note: [
+		"The HTTP interceptor chain is fail-closed now: if your `onHttpRequest`",
+		"implementation throws, the request is REFUSED with 500 (previously the",
+		"throw was swallowed and the request continued — a crashed security gate",
+		"silently stopped guarding).",
+		"",
+		"Decide, per interceptor, what a failure of YOUR dependency should mean:",
+		"",
+		"  · a security gate (auth fence, tenant guard): let the throw propagate —",
+		"    fail-closed is exactly what you want;",
+		"  · protection with a dependency (a rate-limit store, a lookup cache):",
+		"    catch INSIDE the interceptor and degrade loudly, e.g.",
+		"",
+		"        try { decision = await store.consume(…) }",
+		"        catch (cause) { console.warn(\"… ALLOWED without limit\", cause); return next() }",
+		"",
+		"    (that is what plugin-ratelimit's httpShield does now — a Redis outage",
+		"    must not become a self-inflicted API outage)."
+	].join("\n")
+}), Ii = T({
+	version: "0.53.0",
+	id: "0.53.0/01_conflict-columns-take-the-table",
+	title: "`missingConflictColumns` takes the table and classifies absent vs NULL",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("missingConflictColumns")),
+	note: [
+		"`missingConflictColumns(conflictColumns, row)` is now",
+		"`missingConflictColumns(table, conflictColumns, row)`, and it returns",
+		"`{ column, reason: \"absent\" | \"null\" }` entries instead of bare names.",
+		"",
+		"Pass the table definition (the same value `missingRequiredColumns` takes).",
+		"With it, DB-generated columns (`generatedAs`) are skipped: the database",
+		"computes those and rejects an explicit value, so their absence from a",
+		"payload is correct — the old signature could not know that and flagged",
+		"them. Pass `undefined` only when no definition is available; nothing is",
+		"skipped then.",
+		"",
+		"The `reason` field separates two different bugs the old flat list merged:",
+		"`absent` (the payload never set the key) and `null` (the key is present but",
+		"NULL — and NULL never matches a unique conflict target, so the write would",
+		"always INSERT; use a plain insert for NULL-keyed rows, or make the column",
+		"NOT NULL)."
+	].join("\n")
+}), Li = T({
+	version: "0.53.0",
+	id: "0.53.0/02_empty-struct-input-flipped",
+	title: "`input: Schema.Struct({})` procedures flipped from accept-everything to reject-everything in 0.37.0",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /input:\s*Schema\.Struct\(\{\s*\}\)/.test(e.getFullText())),
+	note: [
+		"This repository declares procedures with `input: Schema.Struct({})`. Since",
+		"0.37.0 (an undeclared input field rejects the call), that shape flipped",
+		"HARDER than any other: an empty struct used to accept every payload, and",
+		"now rejects every non-empty one. A caller that always sent a field —",
+		"a table hook sending `{ limit }`, say — fails on the live subscription and",
+		"the SSR seed of the same page at once.",
+		"",
+		"Check those procedures first — the list takes a minute to produce and",
+		"yields the most expensive hits:",
+		"",
+		"  grep -rn 'input: Schema.Struct({})' <api root>",
+		"",
+		"For each: either the callers genuinely send nothing (fine — the empty",
+		"struct is the strongest declaration a procedure can make), or a caller",
+		"sends fields the schema must now declare."
+	].join("\n")
+}), Ri = T({
+	version: "0.53.0",
+	id: "0.53.0/03_validation-messages-are-ids",
+	title: "Form validation messages are ids + catalog now, not effect developer text",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return /Expected .*, actual|is missing/.test(t) || /\.errors\[|useFormBinding\(/.test(t);
+	}),
+	note: [
+		"Form validation messages changed shape:",
+		"",
+		"- `errors[field]` values are TRANSLATED texts from a message catalog",
+		"  (built-in en/de, locale from `<html lang>` or the `locale:` option),",
+		"  no longer effect developer sentences. If you laid regexes over",
+		"  \"Expected string, actual undefined\" to derive translation keys,",
+		"  delete them and wire your catalog instead:",
+		"",
+		"    useFormBinding('users.create', { messages: (id, params) => t(id, params) })",
+		"",
+		"- `errors` keys are the FULL dotted path now (`address.city`,",
+		"  `entries.0.startsAt`) — a nested issue no longer collapses to its",
+		"  top-level segment. Code reading `errors.address` for a nested struct",
+		"  must read the leaf path it renders.",
+		"",
+		"- `validateFields` also returns `issues` — `{ path, id, params, fallback }`",
+		"  per failure — for widget kits that resolve messages themselves."
+	].join("\n")
+}), zi = T({
+	version: "0.53.0",
+	id: "0.53.0/04_widget-kind-gained-array",
+	title: "WidgetKind gained 'array' and 'reference' — total widget registries need two new entries",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
+	note: [
+		"This repository types a widget registry as `Record<WidgetKind, …>`.",
+		"`WidgetKind` gained `'array'` (arrays of structs are field arrays now)",
+		"and `'reference'` (a formField({ reference }) table picker), so the total",
+		"map needs two new entries. With no dedicated UI yet, map both to your",
+		"custom/render-prop widget — that is what the built-in registry does:",
+		"",
+		"  array: CustomWidget,",
+		"  reference: CustomWidget,",
+		"",
+		"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
+		"need nothing."
+	].join("\n")
+}), Bi = T({
+	version: "0.55.0",
+	id: "0.55.0/01_target-relations-declare-columns",
+	title: "A target's `relations:` names the junction's two columns now, not just the table",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return /relations:\s*\{[^}{]*:\s*['"`]/.test(t);
+	}),
+	note: [
+		"A write target declares its many-to-many relations as objects now:",
+		"",
+		"    // before",
+		"    target: { table: 'employees', op: 'update',",
+		"      relations: { assignedStores: 'employee_assigned_stores' } }",
+		"",
+		"    // after",
+		"    target: { table: 'employees', op: 'update',",
+		"      relations: { assignedStores: {",
+		"        junction: 'employee_assigned_stores',",
+		"        anchorColumn: 'employeeId',   // the junction reference() pointing at `employees`",
+		"        targetColumn: 'storeId',      // the junction's other reference()",
+		"      } } }",
+		"",
+		"Take both column names from the junction table's own `reference()`",
+		"columns in your `db/` schema — `anchorColumn` is the one pointing at the",
+		"target's table, `targetColumn` is the other one.",
+		"",
+		"Why: the SAME declaration now drives the optimistic update in the browser,",
+		"so a multi-reference field flips as instantly as a scalar one instead of",
+		"waiting for the server delta. The browser cannot import your schema, so the",
+		"columns have to be stated. They are not taken on trust: before it writes,",
+		"the server compares them against the junction's real reference columns and",
+		"refuses — naming the correct pair — if they disagree."
+	].join("\n")
+}), Vi = T({
+	version: "0.55.0",
+	id: "0.55.0/02_widget-kind-gained-rich-text",
+	title: "WidgetKind gained 'rich-text' — total widget registries need one new entry",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
+	note: [
+		"This repository types a widget registry as `Record<WidgetKind, …>`.",
+		"`WidgetKind` gained `'rich-text'`, so the total map needs one new entry.",
+		"The framework ships a default you can point at:",
+		"",
+		"    import { RichTextWidget } from '@voltro/web'",
+		"    // …",
+		"    'rich-text': RichTextWidget,",
+		"",
+		"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
+		"need nothing."
+	].join("\n")
+}), Hi = T({
+	version: "0.56.0",
+	id: "0.56.0/01_inspect_answers_are_observations",
+	title: "inspect answers are `Observation`s — the payload is `.data`",
+	kind: "manual",
+	reach: "beyond-source",
+	appliesTo: ({ text: e }) => e.find("/_voltro/inspect").length > 0,
+	note: [
+		"Every 2xx `/_voltro/inspect/*` response is now an envelope:",
+		"",
+		"    { data, scope, origin, completeness, capturedAt }",
+		"",
+		"What you read before is `.data`. So:",
+		"",
+		"    curl …/_voltro/inspect/subscriptions | jq .resume",
+		"    curl …/_voltro/inspect/subscriptions | jq .data.resume     # now",
+		"",
+		"The other four fields are the point of the change, not decoration:",
+		"",
+		"  • `scope.kind` — `process` (this replica only), `shared-store` (every",
+		"    replica would answer the same), `fleet` (assembled), `declaration`",
+		"    (from the source tree). A `process` answer on a multi-replica",
+		"    deployment is a SAMPLE, and it used to look identical to a fleet-wide",
+		"    one.",
+		"  • `origin.replicaId` / `origin.instanceId` — which process answered, and",
+		"    which generation of it. Query twice and you can now tell whether you",
+		"    reached the same one.",
+		"  • `completeness.fleetSize` — how many replicas exist. ABSENT when it",
+		"    could not be determined; never `1` as a guess.",
+		"  • `capturedAt` — the ORIGIN’s clock. Do not compare it with another",
+		"    replica’s.",
+		"",
+		"Check anything that reads these endpoints outside your TypeScript sources:",
+		"dashboards, `jq` filters in alerts, runbook commands, CI health checks,",
+		"scrape configs. A reader that pulls a field straight off the top level now",
+		"reads `undefined` — which in a health check is the failure mode worth",
+		"looking for first, because `undefined` and \"zero\" render the same in most",
+		"alerting rules."
+	].join("\n")
+}), Ui = T({
+	version: "0.56.0",
+	id: "0.56.0/02_broadcast_gap_is_one_object",
+	title: "attachBroadcastBus's onGap now receives a single BroadcastGap object",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("attachBroadcastBus")),
+	note: [
+		"`attachBroadcastBus({ onGap })` now receives ONE argument — a `BroadcastGap`",
+		"— instead of `(origin, missed)`.",
+		"",
+		"  before:  onGap: (origin, missed) => refreshAll(`missed ${missed} from ${origin}`)",
+		"  after:   onGap: (gap) => refreshAll(gap.reason)",
+		"",
+		"`gap.reason` is a ready-made sentence for your log line. `gap.origin` and",
+		"`gap.missed` are still there and still EXACT — but they are optional now,",
+		"because the bus reports two kinds of hole and only one of them has a peer",
+		"to blame:",
+		"",
+		"  • a peer's serial jumped → `{ reason, origin, missed }`",
+		"  • this replica was not subscribed for a while, or the transport re-dialled",
+		"    → `{ reason }` alone",
+		"",
+		"The recovery is the same for both: re-run every live query. If your handler",
+		"reads `origin`/`missed`, guard them — a hole with no peer is now reachable.",
+		"",
+		"Related, and needing no change from you: `attachBroadcastBus` no longer",
+		"rejects when the broker is unreachable at attach time. It warns, keeps the",
+		"local path working, retries in the background, and reports the time it spent",
+		"unsubscribed as a gap. If you wrapped the call in a try/catch to survive a",
+		"restarting broker, that catch is now dead code."
+	].join("\n")
+}), Wi = T({
+	version: "0.56.0",
+	id: "0.56.0/03_outbox_drain_needs_an_identity",
+	title: "drainOutbox now requires claimedBy — the fleet-wide exactly-once gate",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("drainOutbox")),
+	note: [
+		"`drainOutbox({ … })` now requires a `claimedBy: string`.",
+		"",
+		"Why: the drain used to read every `pending` row and run its handler. Every",
+		"replica runs the drain, so every effect was dispatched once PER REPLICA — on",
+		"the happy path, every time. Rows are now claimed atomically",
+		"(`pending → delivering`) and a racing replica loses the row instead of",
+		"duplicating the side effect.",
+		"",
+		"What to pass: an id for this PROCESS, not for the replica. A replica name",
+		"survives a restart (`POD_NAME` on a StatefulSet, `VOLTRO_REPLICA_ID` by",
+		"definition) while the work does not, so a pod that died mid-delivery would",
+		"look like it still held its own claim:",
+		"",
+		"    import { instanceId } from '@voltro/protocol/identity'",
+		"    await drainOutbox({ store, handlers, claimedBy: instanceId() })",
+		"",
+		"Also new and optional: `claimLeaseMs` (default 5 minutes) — how long a claim",
+		"stands before another replica may take the row. Set it ABOVE your slowest",
+		"handler. A lease shorter than a real delivery hands the same row to a second",
+		"replica while the first is still working, which is the duplicate this",
+		"mechanism removes, reintroduced by a number.",
+		"",
+		"If you do NOT call `drainOutbox` yourself, there is nothing to do: `voltro",
+		"dev` and `voltro serve` pass the identity for you."
+	].join("\n")
+}), Gi = T({
+	version: "0.56.0",
+	id: "0.56.0/04_reaction_dedupe_is_one_claim",
+	title: "runReaction's dedupe is a single atomic claim",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return t.includes("runReaction") || t.includes("ReactionRunDeps");
+	}),
+	note: [
+		"`ReactionRunDeps.dedupe` changed from `{ has, add }` to `{ claim }`:",
+		"",
+		"    // before",
+		"    dedupe: { has: (k) => seen.has(k), add: (k) => { seen.add(k) } }",
+		"    // after",
+		"    dedupe: { claim: (k) => (seen.has(k) ? false : (seen.add(k), true)) }",
+		"",
+		"Why it is not a rename. `has` then `add` is a read followed by a write, and",
+		"two callers both read \"not seen\" before either writes — so `dedupeKey`, the",
+		"field `defineReaction` refuses to boot without, let the same change act once",
+		"per replica. Every single-instance run confirmed it worked, which is why it",
+		"survived: the gate was real in exactly the configuration that cannot observe",
+		"it.",
+		"",
+		"The claim is also taken BEFORE the act now, not after. That is what makes it",
+		"a gate rather than a report, and it has a cost worth knowing: an act that",
+		"THROWS has already consumed its key and is not re-run by a later duplicate.",
+		"Durability belongs to the workflow the act starts, not to the trigger.",
+		"",
+		"If you do NOT call `runReaction` yourself, there is nothing to do. `voltro",
+		"dev` and `voltro serve` now pass a durable, fleet-wide claimer",
+		"(`_voltro_change_claims`), so a reaction acts once across the whole fleet",
+		"instead of once per replica — no code change on your side."
+	].join("\n")
+}), Ki = T({
+	version: "0.56.0",
+	id: "0.56.0/05_plugin_bind_context_claims_a_change",
+	title: "PluginBindContext requires claimChange; change identity moved to @voltro/database",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return t.includes("PluginBindContext") || t.includes("changeDigest") || t.includes("OccurrenceCounter") || t.includes("composeChangeKey") || t.includes("parseChangeKey");
+	}),
+	note: [
+		"Two changes, both narrow.",
+		"",
+		"1. `PluginBindContext` now has a REQUIRED `claimChange(scope, key) =>",
+		"   Promise<boolean>`. The framework supplies it on both boot paths, so a",
+		"   plugin only READS it — nothing to do unless you construct a",
+		"   `PluginBindContext` yourself, which in practice means a unit-test",
+		"   harness:",
+		"",
+		"       const ctx: PluginBindContext = {",
+		"         scheduleCoordinated: …,",
+		"         claimChange: () => Promise.resolve(true),   // add this",
+		"       }",
+		"",
+		"   In a real harness, decide what the case is testing before reaching for",
+		"   `true`: a stub that always claims asserts the SINGLE-replica behaviour.",
+		"   To exercise a fleet, share one claim ledger across the stubs — a `Set`",
+		"   of `${scope}/${key}` is enough.",
+		"",
+		"   Why it is required rather than optional: an absent gate reads exactly",
+		"   like a gate that passed, and every consumer of this field is counting or",
+		"   sending something. `plugin-billing` accrued a usage unit per metered row",
+		"   change on EVERY replica, so a tenant on two pods was invoiced twice.",
+		"",
+		"2. The change-identity helpers moved from `@voltro/plugin-cdc-out` to",
+		"   `@voltro/database`, beside `ChangeEvent` itself:",
+		"",
+		"       -import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/plugin-cdc-out'",
+		"       +import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/database'",
+		"",
+		"   `parseChangeKey` moved with them. `canonicalJson` did NOT become public:",
+		"   it is internal to the digest, and `@voltro/runtime` already exports a",
+		"   different function of that name."
+	].join("\n")
+}), qi = T({
+	version: "0.56.0",
+	id: "0.56.0/06_serve_is_api_only",
+	title: "`voltro serve` on a WEB app now refuses — use `voltro start`",
+	kind: "manual",
+	reach: "beyond-source",
+	appliesTo: (e) => e.text.scanned === 0 || e.text.find("voltro serve").length > 0,
+	note: [
+		"`voltro serve` is the production server for an API app. On a WEB app it now",
+		"refuses with a one-line message instead of what it used to do.",
+		"",
+		"       web app, production      voltro start .      (unchanged)",
+		"       web app, development     voltro dev .        (unchanged)",
+		"       api app                  voltro serve .      (unchanged)",
+		"",
+		"Nothing changes for an api. For a web app the old behaviour was not a working",
+		"alternative that is being taken away:",
+		"",
+		"  • In production it already failed — the serve fast path requires an api",
+		"    serve bundle, which a web build never produces, so it exited 1 pointing",
+		"    at an artefact that cannot exist.",
+		"  • Below production it ran a SECOND vite build without Tailwind, without the",
+		"    image pipeline and without the islands entries, then served it through",
+		"    `vite preview`. With Tailwind that build aborts. Without it, it succeeds",
+		"    and DELETES `dist/server`, the island shells and every pre-rendered page —",
+		"    after which `voltro start` cannot boot at all.",
+		"",
+		"Search your Dockerfiles, compose files, CI jobs, Procfiles and runbooks:",
+		"",
+		"       grep -rn \"voltro serve\" .",
+		"",
+		"and change the ones that point at a WEB app to `voltro start`. An api entry",
+		"stays as it is. (The shipped Dockerfiles already run the precompiled bundle",
+		"directly — `node .framework/dist-web/startBundle/startEntry.js` for web,",
+		"`node .framework/dist-api/serveBundle/serveEntry.js` for an api — which is",
+		"faster still and needs no CLI in the runtime image.)"
+	].join("\n")
+}), Ji = (e) => /\brunAsSystem\b/.test(e.getFullText()), Yi = T({
+	version: "0.58.0",
+	id: "0.58.0/01_system_writes_stamp_no_actor",
+	title: "A `runAsSystem` write stamps no actor id instead of \"system\"",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(Ji),
+	note: [
+		"A WRITE MADE BY THE FRAMEWORK ACTING AS ITSELF NOW ATTRIBUTES TO NOBODY.",
+		"",
+		"WHAT CHANGED. Inside `runAsSystem`, the `audit()` mixin stamped",
+		"`createdBy` / `updatedBy` with the subject id — `'system'` by default, or",
+		"the job name you passed. It now stamps `null`, and `ChangeEvent.subjectId`",
+		"carries `null` for the same writes.",
+		"",
+		"WHY. `createdBy` in the audit mixin is `reference(requireActors())` — a",
+		"foreign key into YOUR `actors` table. The framework seeds no row for itself,",
+		"so any id it stamps there is an id nothing points at. On a schema that",
+		"declares that reference the insert fails outright; on one that does not, the",
+		"column holds a value no join resolves. `null` is the answer the write-",
+		"attribution contract already stated for this case: \"a resolved subject with",
+		"no acting user (an anonymous or system call)\".",
+		"",
+		"WHAT TO DO:",
+		"",
+		"1) IF YOU QUERY FOR SYSTEM-WRITTEN ROWS BY THAT VALUE — a report, a filter,",
+		"   a cleanup — it stops matching new rows. Rows written before this release",
+		"   keep whatever id was stamped then; nothing rewrites them, so a query that",
+		"   must cover both reads `createdBy IS NULL OR createdBy = 'system'`.",
+		"",
+		"2) IF YOU NEED TO KNOW WHICH SYSTEM JOB WROTE A ROW, the identity is not",
+		"   lost, it is just not in the row stamp: the audit sink row sharing the",
+		"   write's `traceId` names it. That is the same place an API key's identity",
+		"   has always been recovered from rather than duplicated into the row.",
+		"",
+		"3) IF YOU SEEDED AN `actors` ROW WITH ID 'system' to make the foreign key",
+		"   resolve, it is no longer referenced by new writes. Keep it for the",
+		"   historical rows above, or drop it once those are gone."
+	].join("\n")
+}), Xi = (e) => /\bResolvedWorkflowCallerContext\b/.test(e.getFullText()), Zi = T({
+	version: "0.58.0",
+	id: "0.58.0/02_workflow_caller_context_carries_a_scope",
+	title: "ResolvedWorkflowCallerContext carries the run's resolved row-filter scope",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(Xi),
+	note: [
+		"A WORKFLOW RUN'S CALLER CONTEXT NOW CARRIES THE ROW-FILTER SCOPE ITS STEPS",
+		"READ THROUGH.",
+		"",
+		"WHAT CHANGED. `ResolvedWorkflowCallerContext` has a required `rowFilter`,",
+		"resolved for the run's subject at EXECUTION time — beside `subject`, which",
+		"`resolveAuthority` already re-resolves there. Authority is what a three-day-",
+		"old run may DO; this is what it may SEE. Restoring either from the start-",
+		"context row would be a fact frozen at start time and made durable.",
+		"",
+		"WHY IT HAD TO BE REQUIRED. The store refuses a context carrying neither a",
+		"resolved scope nor a system subject. A BOOTSTRAP run is the system and",
+		"passed; a run started BY A USER is not, so in any app that calls",
+		"`setRowFilter` every workflow step threw before its executor ran. Making the",
+		"field optional would leave that reachable from any future boot path.",
+		"",
+		"WHAT TO DO. Only code that CONSTRUCTS one of these needs a change — in",
+		"practice a test double for a context builder. Nothing that merely receives",
+		"the object is affected.",
+		"",
+		"    // a double standing in for SYSTEM work (a bootstrap/resumed run)",
+		"    { subject: SYSTEM_SUBJECT, traceId: 't', rowFilter: NO_ROW_FILTER }",
+		"",
+		"    // a double standing in for a USER's run — resolve it, do not bypass it",
+		"    { subject: caller, traceId: 't',",
+		"      rowFilter: await Effect.runPromise(resolveRowFilterScopeFor(getRowFilter(), caller)) }",
+		"",
+		"Reaching for `NO_ROW_FILTER` in the second case makes the test assert",
+		"unfiltered reads while claiming to cover a filtered run."
+	].join("\n")
+}), Qi = (e) => /\bFleetMergeResult\b|\bfleetObservations\b/.test(e.getFullText()), $i = T({
+	version: "0.58.0",
+	id: "0.58.0/03_fleet_view_reports_departed_replicas",
+	title: "A fleet view separates DEPARTED replicas from stale ones",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(Qi),
+	note: (/* @__PURE__ */ "A FLEET VIEW NOW SEPARATES ROWS LEFT BY PROCESSES THAT ARE GONE FROM(ANSWERS THAT ARE MERELY OLD.((WHAT CHANGED. `FleetMergeResult` has a required `departed`, and the(`/_voltro/inspect/...?scope=fleet` envelope carries it beside `stale`.((WHY THEY ARE NOT THE SAME FACT. A STALE row belongs to a replica the(membership roster still lists: it is running and has stopped refreshing,(which is a fault worth reporting and a reason for `complete: false`. A(DEPARTED row belongs to a replica the roster no longer lists: that process(is gone, which is what a scale-down looks like, and it is not a reason for(anything. Counting the second as the first made `complete` unreachable(after any replica had ever exited, and — worse — let a dead process's(framework version report a version SPLIT across a fleet that had none.((They are still REPORTED. Dropping them would leave a reader unable to tell(a fleet that scaled down from a table being written by something nobody is(tracking.((WHAT TO DO. Only code that CONSTRUCTS a fleet result needs a change — in(practice a test double for `fleetObservations`. Add `departed: []`, or a(row when that is what the double is there to exercise:((    { byReplica, missing: [], responded: 2, expected: 2, stale: [],(      departed: [], versions: undefined }((If you assert on `complete` or on `stale` in a test that leaves a replica(out of its membership roster, that replica is now DEPARTED and those(assertions move accordingly.".split("(")).join("\n")
+}), ea = (e) => /\bsubscribeClientErrors\b|\bClientErrorEvent\b/.test(e.getFullText()), ta = T({
+	version: "0.58.0",
+	id: "0.58.0/04_rpc_errors_reach_reporters",
+	title: "rpc failures are published on the client error bus",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(ea),
+	note: [
+		"AN RPC CALL THAT FAILS IN THE CLIENT NOW REACHES YOUR ERROR REPORTERS.",
+		"",
+		"WHAT CHANGED. `RpcErrorBus.emit` also publishes on `clientErrorBus`, the",
+		"module-global seam a reporter subscribes to (the Sentry browser",
+		"integration listens there, and so does anything you wired with",
+		"`subscribeClientErrors`). `ClientErrorEvent.source` therefore gained",
+		"`'rpc.mutation' | 'rpc.action' | 'rpc.subscription'`.",
+		"",
+		"WHY. The two buses had different subscriber sets, so a call that failed in",
+		"the client reached cross-cutting POLICY (`useOnRpcError`) and never reached",
+		"REPORTING. A rejected subscription is the expensive one: it leaves",
+		"`data: undefined`, `loading: false` and an empty list — which is what",
+		"\"nothing matched\" looks like too, so there is nothing in the UI to notice.",
+		"",
+		"WHAT TO DO:",
+		"",
+		"1) IF YOU SWITCH EXHAUSTIVELY ON `event.source`, add the three members. A",
+		"   `default: assertNever(source)` is where the compiler will point.",
+		"",
+		"2) IF YOU BRIDGED THE TWO BUSES BY HAND — a `useOnRpcError` listener that",
+		"   calls `reportClientError` — DELETE it, or you will report twice. Keep any",
+		"   throttling you put around it: the framework publishes everything, and a",
+		"   ceiling is the reporter's policy, not the bus's.",
+		"",
+		"3) EXPECT MORE EVENTS. A reconnect storm now produces one per failed call.",
+		"   If that is too loud for your reporter, gate it in the subscriber — where",
+		"   you can see which failures matter to you."
+	].join("\n")
+}), na = (e) => /\bsentryPlugin\b|@voltro\/plugin-sentry/.test(e.getFullText()), ra = T({
+	version: "0.58.0",
+	id: "0.58.0/05_sentry_traces_on_by_default",
+	title: "Sentry performance traces are on by default",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(na),
+	note: [
+		"SENTRY PERFORMANCE TRACES ARE NOW ON BY DEFAULT ON THE API.",
+		"",
+		"WHAT CHANGED. `sentryPlugin({ traces })` defaulted to `false`; it defaults",
+		"to `true`. With a DSN, the framework's OTel spans are routed to Sentry as",
+		"transactions at `tracesSampleRate` (default 1.0).",
+		"",
+		"WHY. The BROWSER half already defaulted to tracing every page load,",
+		"navigation and rpc call at 1.0. With the api half off, each of those spans",
+		"was emitted and paid for and belonged to a trace with no server side — a",
+		"browser hop hanging off nothing. Both-off would have been coherent;",
+		"both-on is what the two halves were built for, and the docs already told",
+		"you to pass `traces: true` to get it.",
+		"",
+		"WHAT TO DO — one of these, deliberately:",
+		"",
+		"1) NOTHING, if you want end-to-end traces. Watch your Sentry quota on the",
+		"   first day: 1.0 means every request becomes a transaction.",
+		"",
+		"2) LOWER THE RATE, which is the usual production answer:",
+		"",
+		"       sentryPlugin({ tracesSampleRate: 0.1 })",
+		"",
+		"3) TURN THEM OFF and keep errors + breadcrumbs, which is the whole of the",
+		"   plugin for an app with no trace budget:",
+		"",
+		"       sentryPlugin({ traces: false })",
+		"",
+		"The boot line names both, so a first boot after upgrading shows what the",
+		"app is about to send: `sentry active traces=true tracesSampleRate=1`.",
+		"",
+		"ALSO: the web entry now initialises browser Sentry whenever",
+		"`@voltro/plugin-sentry` is a dependency of the web app — a `sentry:` block",
+		"in app.config.ts is only for overrides. Without a DSN from either that block",
+		"or `VOLTRO_PUBLIC_SENTRY_DSN`, the init returns immediately, so this changes",
+		"nothing for an app that has not set one."
+	].join("\n")
+}), ia = (e) => /\bjwtSecret\b/.test(e.getFullText()), aa = T({
+	version: "0.58.0",
+	id: "0.58.0/06_jwt_secret_may_be_a_function",
+	title: "jwtSecret may be a function, so a build needs no production credential",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(ia),
+	note: [
+		"`jwtSecret` NOW ACCEPTS A FUNCTION — AND YOU PROBABLY WANT ONE.",
+		"",
+		"WHY IT EXISTS. `voltro build` imports `app.config.ts`, so everything the",
+		"config CONSTRUCTS runs at build time. That made",
+		"`jwtSecret: process.env.SUPABASE_JWT_SECRET` require a PRODUCTION credential",
+		"to build an image that will not contain one — and a placeholder is not an",
+		"option, since the framework ships no secret values and an",
+		"`ARG SUPABASE_JWT_SECRET` in a Dockerfile is exactly that.",
+		"",
+		"WHAT TO WRITE:",
+		"",
+		"    supabaseStrategy({ jwtSecret: () => process.env.SUPABASE_JWT_SECRET })",
+		"",
+		"The build never calls it. The BOOT does, once, through the strategy pass",
+		"`voltro dev` and `voltro serve` share — so an unset variable still refuses",
+		"to start, naming the strategy. Deferring the read does NOT defer the failure",
+		"to the first request: a strategy that cannot verify a token accepts nobody,",
+		"and a process that started anyway serves a login that can never succeed.",
+		"",
+		"WHAT MIGHT STOP COMPILING. Only code that READS the field off a typed",
+		"config:",
+		"",
+		"    const cfg: JwtBearerSecretConfig = { … }",
+		"    useSecret(cfg.jwtSecret)      // string | (() => string | undefined)",
+		"",
+		"Narrow it where you read it (`typeof s === 'function' ? s() : s`), or pass",
+		"the config along instead of the field. A `jwtSecret: 'literal'` you wrote",
+		"yourself is unaffected — its own inferred type never widened."
+	].join("\n")
+}), oa = (e) => /\brerank\s*\(/.test(e.getFullText()), sa = [
+	he,
 	ge,
-	_e,
+	ve,
 	ye,
 	be,
-	xe,
-	we,
+	Ce,
+	Te,
 	Ee,
 	De,
-	Oe,
 	je,
 	Me,
 	Fe,
@@ -5880,8 +6484,6 @@ var S = (e, t, n) => {
 	ze,
 	Be,
 	Ue,
-	We,
-	Ge,
 	Ke,
 	qe,
 	Je,
@@ -5893,66 +6495,68 @@ var S = (e, t, n) => {
 	et,
 	tt,
 	nt,
-	st,
 	rt,
-	ot,
-	pt,
-	vt,
-	yt,
-	bt,
+	it,
+	ut,
+	at,
+	lt,
+	gt,
+	xt,
+	St,
 	Ct,
-	wt,
-	kt,
-	jt,
-	Nt,
-	Ft,
-	Lt,
-	zt,
-	Vt,
-	Ut,
-	Gt,
-	qt,
-	Yt,
-	Zt,
-	$t,
-	rn,
+	Et,
+	Dt,
+	Mt,
+	Pt,
+	It,
+	Rt,
+	Bt,
+	Ht,
+	Wt,
+	Kt,
+	Jt,
+	Xt,
+	Qt,
+	en,
+	nn,
 	sn,
-	cn,
 	ln,
+	un,
 	dn,
 	pn,
 	hn,
 	_n,
 	yn,
-	Tn,
-	Dn,
-	kn,
-	jn,
-	Nn,
+	xn,
+	En,
+	On,
+	An,
+	Mn,
 	Pn,
 	Fn,
 	In,
 	Ln,
-	zn,
-	Un,
-	Gn,
-	qn,
+	Rn,
+	Bn,
+	Wn,
+	Kn,
 	Jn,
 	Yn,
 	Xn,
-	$n,
-	or,
+	Zn,
 	er,
-	ir,
-	cr,
-	ur,
+	sr,
+	tr,
+	ar,
+	lr,
 	dr,
 	fr,
-	hr,
-	_r,
+	pr,
+	gr,
+	vr,
 	wr,
 	Er,
-	xr,
+	Sr,
 	kr,
 	Mr,
 	Pr,
@@ -5966,17 +6570,17 @@ var S = (e, t, n) => {
 	ei,
 	ti,
 	ii,
+	ai,
 	oi,
-	si,
+	ci,
 	li,
 	ui,
-	di,
+	pi,
 	mi,
 	hi,
 	gi,
 	_i,
 	vi,
-	yi,
 	Ci,
 	wi,
 	Ti,
@@ -5984,431 +6588,59 @@ var S = (e, t, n) => {
 	Di,
 	Oi,
 	ki,
+	Ni,
 	Pi,
-	w({
-		version: "0.52.0",
-		id: "0.52.0/01_plugin-versioning-to-row-history",
-		title: "@voltro/plugin-versioning → @voltro/plugin-row-history (the name now says what it does)",
-		kind: "transform",
-		appliesTo: ({ project: e, text: t }) => t.find(K).length > 0 || e.getSourceFiles().some((e) => e.getImportDeclarations().some((e) => e.getModuleSpecifierValue() === K)),
-		transform: ({ project: e, helpers: t, log: n }) => {
-			let r = t.renameImport(e, {
-				module: K,
-				from: "versioningPlugin",
-				to: "rowHistoryPlugin"
-			}) + t.renameImport(e, {
-				module: K,
-				from: "VersioningPluginOptions",
-				to: "RowHistoryPluginOptions"
-			});
-			n(`${K} → ${q}: repointed ${t.renameModuleSpecifier(e, {
-				from: K,
-				to: q
-			})} import(s)` + (r > 0 ? `, renamed ${r} versioningPlugin call site(s) to rowHistoryPlugin` : "") + `. Replace the dependency in package.json ("${K}" → "${q}") and reinstall — the table (_voltro_row_history) and VOLTRO_ROW_HISTORY_TTL_HOURS already carry the new name, so nothing else changes. If you passed an explicit alias: to the plugin it is kept as-is; only the DEFAULT alias moved from 'versioning' to 'row-history' (inspect endpoint paths + boot log lines).`);
-		}
-	}),
-	w({
-		version: "0.52.0",
-		id: "0.52.0/02_http-interceptor-fail-closed",
-		title: "A throwing `onHttpRequest` interceptor now refuses the request (500) instead of being ignored",
-		kind: "manual",
-		appliesTo: ({ text: e }) => e.find("onHttpRequest").length > 0,
-		note: [
-			"The HTTP interceptor chain is fail-closed now: if your `onHttpRequest`",
-			"implementation throws, the request is REFUSED with 500 (previously the",
-			"throw was swallowed and the request continued — a crashed security gate",
-			"silently stopped guarding).",
-			"",
-			"Decide, per interceptor, what a failure of YOUR dependency should mean:",
-			"",
-			"  · a security gate (auth fence, tenant guard): let the throw propagate —",
-			"    fail-closed is exactly what you want;",
-			"  · protection with a dependency (a rate-limit store, a lookup cache):",
-			"    catch INSIDE the interceptor and degrade loudly, e.g.",
-			"",
-			"        try { decision = await store.consume(…) }",
-			"        catch (cause) { console.warn(\"… ALLOWED without limit\", cause); return next() }",
-			"",
-			"    (that is what plugin-ratelimit's httpShield does now — a Redis outage",
-			"    must not become a self-inflicted API outage)."
-		].join("\n")
-	}),
-	w({
-		version: "0.53.0",
-		id: "0.53.0/01_conflict-columns-take-the-table",
-		title: "`missingConflictColumns` takes the table and classifies absent vs NULL",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("missingConflictColumns")),
-		note: [
-			"`missingConflictColumns(conflictColumns, row)` is now",
-			"`missingConflictColumns(table, conflictColumns, row)`, and it returns",
-			"`{ column, reason: \"absent\" | \"null\" }` entries instead of bare names.",
-			"",
-			"Pass the table definition (the same value `missingRequiredColumns` takes).",
-			"With it, DB-generated columns (`generatedAs`) are skipped: the database",
-			"computes those and rejects an explicit value, so their absence from a",
-			"payload is correct — the old signature could not know that and flagged",
-			"them. Pass `undefined` only when no definition is available; nothing is",
-			"skipped then.",
-			"",
-			"The `reason` field separates two different bugs the old flat list merged:",
-			"`absent` (the payload never set the key) and `null` (the key is present but",
-			"NULL — and NULL never matches a unique conflict target, so the write would",
-			"always INSERT; use a plain insert for NULL-keyed rows, or make the column",
-			"NOT NULL)."
-		].join("\n")
-	}),
-	w({
-		version: "0.53.0",
-		id: "0.53.0/02_empty-struct-input-flipped",
-		title: "`input: Schema.Struct({})` procedures flipped from accept-everything to reject-everything in 0.37.0",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /input:\s*Schema\.Struct\(\{\s*\}\)/.test(e.getFullText())),
-		note: [
-			"This repository declares procedures with `input: Schema.Struct({})`. Since",
-			"0.37.0 (an undeclared input field rejects the call), that shape flipped",
-			"HARDER than any other: an empty struct used to accept every payload, and",
-			"now rejects every non-empty one. A caller that always sent a field —",
-			"a table hook sending `{ limit }`, say — fails on the live subscription and",
-			"the SSR seed of the same page at once.",
-			"",
-			"Check those procedures first — the list takes a minute to produce and",
-			"yields the most expensive hits:",
-			"",
-			"  grep -rn 'input: Schema.Struct({})' <api root>",
-			"",
-			"For each: either the callers genuinely send nothing (fine — the empty",
-			"struct is the strongest declaration a procedure can make), or a caller",
-			"sends fields the schema must now declare."
-		].join("\n")
-	}),
-	w({
-		version: "0.53.0",
-		id: "0.53.0/03_validation-messages-are-ids",
-		title: "Form validation messages are ids + catalog now, not effect developer text",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
-			let t = e.getFullText();
-			return /Expected .*, actual|is missing/.test(t) || /\.errors\[|useFormBinding\(/.test(t);
-		}),
-		note: [
-			"Form validation messages changed shape:",
-			"",
-			"- `errors[field]` values are TRANSLATED texts from a message catalog",
-			"  (built-in en/de, locale from `<html lang>` or the `locale:` option),",
-			"  no longer effect developer sentences. If you laid regexes over",
-			"  \"Expected string, actual undefined\" to derive translation keys,",
-			"  delete them and wire your catalog instead:",
-			"",
-			"    useFormBinding('users.create', { messages: (id, params) => t(id, params) })",
-			"",
-			"- `errors` keys are the FULL dotted path now (`address.city`,",
-			"  `entries.0.startsAt`) — a nested issue no longer collapses to its",
-			"  top-level segment. Code reading `errors.address` for a nested struct",
-			"  must read the leaf path it renders.",
-			"",
-			"- `validateFields` also returns `issues` — `{ path, id, params, fallback }`",
-			"  per failure — for widget kits that resolve messages themselves."
-		].join("\n")
-	}),
-	w({
-		version: "0.53.0",
-		id: "0.53.0/04_widget-kind-gained-array",
-		title: "WidgetKind gained 'array' and 'reference' — total widget registries need two new entries",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
-		note: [
-			"This repository types a widget registry as `Record<WidgetKind, …>`.",
-			"`WidgetKind` gained `'array'` (arrays of structs are field arrays now)",
-			"and `'reference'` (a formField({ reference }) table picker), so the total",
-			"map needs two new entries. With no dedicated UI yet, map both to your",
-			"custom/render-prop widget — that is what the built-in registry does:",
-			"",
-			"  array: CustomWidget,",
-			"  reference: CustomWidget,",
-			"",
-			"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
-			"need nothing."
-		].join("\n")
-	}),
-	w({
-		version: "0.55.0",
-		id: "0.55.0/01_target-relations-declare-columns",
-		title: "A target's `relations:` names the junction's two columns now, not just the table",
+	Fi,
+	Ii,
+	Li,
+	Ri,
+	zi,
+	Bi,
+	Vi,
+	Hi,
+	Ui,
+	Wi,
+	Gi,
+	Ki,
+	qi,
+	Yi,
+	Zi,
+	$i,
+	ta,
+	ra,
+	aa,
+	T({
+		version: "0.58.0",
+		id: "0.58.0/07_rerank_takes_a_provider_config",
+		title: "rerank reaches the gateway through a ProviderConfig",
 		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
-			let t = e.getFullText();
-			return /relations:\s*\{[^}{]*:\s*['"`]/.test(t);
-		}),
+		appliesTo: ({ project: e }) => e.getSourceFiles().some(oa),
 		note: [
-			"A write target declares its many-to-many relations as objects now:",
-			"",
-			"    // before",
-			"    target: { table: 'employees', op: 'update',",
-			"      relations: { assignedStores: 'employee_assigned_stores' } }",
-			"",
-			"    // after",
-			"    target: { table: 'employees', op: 'update',",
-			"      relations: { assignedStores: {",
-			"        junction: 'employee_assigned_stores',",
-			"        anchorColumn: 'employeeId',   // the junction reference() pointing at `employees`",
-			"        targetColumn: 'storeId',      // the junction's other reference()",
-			"      } } }",
-			"",
-			"Take both column names from the junction table's own `reference()`",
-			"columns in your `db/` schema — `anchorColumn` is the one pointing at the",
-			"target's table, `targetColumn` is the other one.",
-			"",
-			"Why: the SAME declaration now drives the optimistic update in the browser,",
-			"so a multi-reference field flips as instantly as a scalar one instead of",
-			"waiting for the server delta. The browser cannot import your schema, so the",
-			"columns have to be stated. They are not taken on trust: before it writes,",
-			"the server compares them against the junction's real reference columns and",
-			"refuses — naming the correct pair — if they disagree."
-		].join("\n")
-	}),
-	w({
-		version: "0.55.0",
-		id: "0.55.0/02_widget-kind-gained-rich-text",
-		title: "WidgetKind gained 'rich-text' — total widget registries need one new entry",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => /Record<WidgetKind/.test(e.getFullText())),
-		note: [
-			"This repository types a widget registry as `Record<WidgetKind, …>`.",
-			"`WidgetKind` gained `'rich-text'`, so the total map needs one new entry.",
-			"The framework ships a default you can point at:",
-			"",
-			"    import { RichTextWidget } from '@voltro/web'",
-			"    // …",
-			"    'rich-text': RichTextWidget,",
-			"",
-			"Partial registries (`Partial<Record<WidgetKind, …>>` or per-kind lookups)",
-			"need nothing."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/01_inspect_answers_are_observations",
-		title: "inspect answers are `Observation`s — the payload is `.data`",
-		kind: "manual",
-		reach: "beyond-source",
-		appliesTo: ({ text: e }) => e.find("/_voltro/inspect").length > 0,
-		note: [
-			"Every 2xx `/_voltro/inspect/*` response is now an envelope:",
-			"",
-			"    { data, scope, origin, completeness, capturedAt }",
-			"",
-			"What you read before is `.data`. So:",
-			"",
-			"    curl …/_voltro/inspect/subscriptions | jq .resume",
-			"    curl …/_voltro/inspect/subscriptions | jq .data.resume     # now",
-			"",
-			"The other four fields are the point of the change, not decoration:",
-			"",
-			"  • `scope.kind` — `process` (this replica only), `shared-store` (every",
-			"    replica would answer the same), `fleet` (assembled), `declaration`",
-			"    (from the source tree). A `process` answer on a multi-replica",
-			"    deployment is a SAMPLE, and it used to look identical to a fleet-wide",
-			"    one.",
-			"  • `origin.replicaId` / `origin.instanceId` — which process answered, and",
-			"    which generation of it. Query twice and you can now tell whether you",
-			"    reached the same one.",
-			"  • `completeness.fleetSize` — how many replicas exist. ABSENT when it",
-			"    could not be determined; never `1` as a guess.",
-			"  • `capturedAt` — the ORIGIN’s clock. Do not compare it with another",
-			"    replica’s.",
-			"",
-			"Check anything that reads these endpoints outside your TypeScript sources:",
-			"dashboards, `jq` filters in alerts, runbook commands, CI health checks,",
-			"scrape configs. A reader that pulls a field straight off the top level now",
-			"reads `undefined` — which in a health check is the failure mode worth",
-			"looking for first, because `undefined` and \"zero\" render the same in most",
-			"alerting rules."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/02_broadcast_gap_is_one_object",
-		title: "attachBroadcastBus's onGap now receives a single BroadcastGap object",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("attachBroadcastBus")),
-		note: [
-			"`attachBroadcastBus({ onGap })` now receives ONE argument — a `BroadcastGap`",
-			"— instead of `(origin, missed)`.",
-			"",
-			"  before:  onGap: (origin, missed) => refreshAll(`missed ${missed} from ${origin}`)",
-			"  after:   onGap: (gap) => refreshAll(gap.reason)",
-			"",
-			"`gap.reason` is a ready-made sentence for your log line. `gap.origin` and",
-			"`gap.missed` are still there and still EXACT — but they are optional now,",
-			"because the bus reports two kinds of hole and only one of them has a peer",
-			"to blame:",
-			"",
-			"  • a peer's serial jumped → `{ reason, origin, missed }`",
-			"  • this replica was not subscribed for a while, or the transport re-dialled",
-			"    → `{ reason }` alone",
-			"",
-			"The recovery is the same for both: re-run every live query. If your handler",
-			"reads `origin`/`missed`, guard them — a hole with no peer is now reachable.",
-			"",
-			"Related, and needing no change from you: `attachBroadcastBus` no longer",
-			"rejects when the broker is unreachable at attach time. It warns, keeps the",
-			"local path working, retries in the background, and reports the time it spent",
-			"unsubscribed as a gap. If you wrapped the call in a try/catch to survive a",
-			"restarting broker, that catch is now dead code."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/03_outbox_drain_needs_an_identity",
-		title: "drainOutbox now requires claimedBy — the fleet-wide exactly-once gate",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => e.getFullText().includes("drainOutbox")),
-		note: [
-			"`drainOutbox({ … })` now requires a `claimedBy: string`.",
-			"",
-			"Why: the drain used to read every `pending` row and run its handler. Every",
-			"replica runs the drain, so every effect was dispatched once PER REPLICA — on",
-			"the happy path, every time. Rows are now claimed atomically",
-			"(`pending → delivering`) and a racing replica loses the row instead of",
-			"duplicating the side effect.",
-			"",
-			"What to pass: an id for this PROCESS, not for the replica. A replica name",
-			"survives a restart (`POD_NAME` on a StatefulSet, `VOLTRO_REPLICA_ID` by",
-			"definition) while the work does not, so a pod that died mid-delivery would",
-			"look like it still held its own claim:",
-			"",
-			"    import { instanceId } from '@voltro/protocol/identity'",
-			"    await drainOutbox({ store, handlers, claimedBy: instanceId() })",
-			"",
-			"Also new and optional: `claimLeaseMs` (default 5 minutes) — how long a claim",
-			"stands before another replica may take the row. Set it ABOVE your slowest",
-			"handler. A lease shorter than a real delivery hands the same row to a second",
-			"replica while the first is still working, which is the duplicate this",
-			"mechanism removes, reintroduced by a number.",
-			"",
-			"If you do NOT call `drainOutbox` yourself, there is nothing to do: `voltro",
-			"dev` and `voltro serve` pass the identity for you."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/04_reaction_dedupe_is_one_claim",
-		title: "runReaction's dedupe is a single atomic claim",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
-			let t = e.getFullText();
-			return t.includes("runReaction") || t.includes("ReactionRunDeps");
-		}),
-		note: [
-			"`ReactionRunDeps.dedupe` changed from `{ has, add }` to `{ claim }`:",
-			"",
-			"    // before",
-			"    dedupe: { has: (k) => seen.has(k), add: (k) => { seen.add(k) } }",
-			"    // after",
-			"    dedupe: { claim: (k) => (seen.has(k) ? false : (seen.add(k), true)) }",
-			"",
-			"Why it is not a rename. `has` then `add` is a read followed by a write, and",
-			"two callers both read \"not seen\" before either writes — so `dedupeKey`, the",
-			"field `defineReaction` refuses to boot without, let the same change act once",
-			"per replica. Every single-instance run confirmed it worked, which is why it",
-			"survived: the gate was real in exactly the configuration that cannot observe",
-			"it.",
-			"",
-			"The claim is also taken BEFORE the act now, not after. That is what makes it",
-			"a gate rather than a report, and it has a cost worth knowing: an act that",
-			"THROWS has already consumed its key and is not re-run by a later duplicate.",
-			"Durability belongs to the workflow the act starts, not to the trigger.",
-			"",
-			"If you do NOT call `runReaction` yourself, there is nothing to do. `voltro",
-			"dev` and `voltro serve` now pass a durable, fleet-wide claimer",
-			"(`_voltro_change_claims`), so a reaction acts once across the whole fleet",
-			"instead of once per replica — no code change on your side."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/05_plugin_bind_context_claims_a_change",
-		title: "PluginBindContext requires claimChange; change identity moved to @voltro/database",
-		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
-			let t = e.getFullText();
-			return t.includes("PluginBindContext") || t.includes("changeDigest") || t.includes("OccurrenceCounter") || t.includes("composeChangeKey") || t.includes("parseChangeKey");
-		}),
-		note: [
-			"Two changes, both narrow.",
-			"",
-			"1. `PluginBindContext` now has a REQUIRED `claimChange(scope, key) =>",
-			"   Promise<boolean>`. The framework supplies it on both boot paths, so a",
-			"   plugin only READS it — nothing to do unless you construct a",
-			"   `PluginBindContext` yourself, which in practice means a unit-test",
-			"   harness:",
-			"",
-			"       const ctx: PluginBindContext = {",
-			"         scheduleCoordinated: …,",
-			"         claimChange: () => Promise.resolve(true),   // add this",
-			"       }",
-			"",
-			"   In a real harness, decide what the case is testing before reaching for",
-			"   `true`: a stub that always claims asserts the SINGLE-replica behaviour.",
-			"   To exercise a fleet, share one claim ledger across the stubs — a `Set`",
-			"   of `${scope}/${key}` is enough.",
-			"",
-			"   Why it is required rather than optional: an absent gate reads exactly",
-			"   like a gate that passed, and every consumer of this field is counting or",
-			"   sending something. `plugin-billing` accrued a usage unit per metered row",
-			"   change on EVERY replica, so a tenant on two pods was invoiced twice.",
-			"",
-			"2. The change-identity helpers moved from `@voltro/plugin-cdc-out` to",
-			"   `@voltro/database`, beside `ChangeEvent` itself:",
-			"",
-			"       -import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/plugin-cdc-out'",
-			"       +import { changeDigest, composeChangeKey, OccurrenceCounter } from '@voltro/database'",
-			"",
-			"   `parseChangeKey` moved with them. `canonicalJson` did NOT become public:",
-			"   it is internal to the digest, and `@voltro/runtime` already exports a",
-			"   different function of that name."
-		].join("\n")
-	}),
-	w({
-		version: "0.56.0",
-		id: "0.56.0/06_serve_is_api_only",
-		title: "`voltro serve` on a WEB app now refuses — use `voltro start`",
-		kind: "manual",
-		reach: "beyond-source",
-		appliesTo: (e) => e.text.scanned === 0 || e.text.find("voltro serve").length > 0,
-		note: [
-			"`voltro serve` is the production server for an API app. On a WEB app it now",
-			"refuses with a one-line message instead of what it used to do.",
-			"",
-			"       web app, production      voltro start .      (unchanged)",
-			"       web app, development     voltro dev .        (unchanged)",
-			"       api app                  voltro serve .      (unchanged)",
+			"`rerank` NOW TAKES A `ProviderConfig`, LIKE EVERY OTHER PRIMITIVE.",
 			"",
-			"Nothing changes for an api. For a web app the old behaviour was not a working",
-			"alternative that is being taken away:",
+			"WHY. Its `provider` was `'mock' | 'cohere' | 'voyage'` — the same two",
+			"vendors the gateway serves, addressed by their OWN keys, with no way to say",
+			"\"through the gateway\". So five reranking models in the catalog",
+			"(`cohere/rerank-v3.5`, `-v4-fast`, `-v4-pro`, `voyage/rerank-2.5`,",
+			"`-2.5-lite`) were unreachable with a gateway key.",
 			"",
-			"  • In production it already failed — the serve fast path requires an api",
-			"    serve bundle, which a web build never produces, so it exited 1 pointing",
-			"    at an artefact that cannot exist.",
-			"  • Below production it ran a SECOND vite build without Tailwind, without the",
-			"    image pipeline and without the islands entries, then served it through",
-			"    `vite preview`. With Tailwind that build aborts. Without it, it succeeds",
-			"    and DELETES `dist/server`, the island shells and every pre-rendered page —",
-			"    after which `voltro start` cannot boot at all.",
+			"WHAT TO WRITE, if you want the gateway route:",
 			"",
-			"Search your Dockerfiles, compose files, CI jobs, Procfiles and runbooks:",
+			"    rerank({ query, documents, provider: {",
+			"      name: 'gateway', model: 'cohere/rerank-v4-pro',",
+			"    }})",
 			"",
-			"       grep -rn \"voltro serve\" .",
+			"The string shorthands stay for the direct-key route, and are deliberately",
+			"NOT folded into `ProviderConfig`: that union is shared with `generateText`,",
+			"and adding `cohere` there would let you name a provider with no language",
+			"model — a config error the type currently catches.",
 			"",
-			"and change the ones that point at a WEB app to `voltro start`. An api entry",
-			"stays as it is. (The shipped Dockerfiles already run the precompiled bundle",
-			"directly — `node .framework/dist-web/startBundle/startEntry.js` for web,",
-			"`node .framework/dist-api/serveBundle/serveEntry.js` for an api — which is",
-			"faster still and needs no CLI in the runtime image.)"
+			"WHAT MIGHT STOP COMPILING. Only code that READS the field off a typed",
+			"options object, which is now `string | ProviderConfig`. Narrow it where you",
+			"read it (`typeof p === 'string'`)."
 		].join("\n")
 	})
-], J = /* @__PURE__ */ new Set([
+], Y = /* @__PURE__ */ new Set([
 	"node_modules",
 	".git",
 	"dist",
@@ -6420,42 +6652,42 @@ var S = (e, t, n) => {
 	".turbo",
 	".cache",
 	".output"
-]), Ii = () => [...[...J].map((e) => `**/${e}/**`), "**/.voltro-*/**"], Y = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, Li = /\.(?:tsx?|jsx?|mjs|cjs)$/, Ri = (e) => g(e).replace(Li, ""), zi = (e) => {
+]), ca = () => [...[...Y].map((e) => `**/${e}/**`), "**/.voltro-*/**"], X = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, la = /\.(?:tsx?|jsx?|mjs|cjs)$/, ua = (e) => g(e).replace(la, ""), da = (e) => {
 	let t = e.split("/").filter((e) => e.length > 0).pop();
 	if (t === void 0 || t === "." || t === "..") return;
-	let n = t.replace(Li, "");
+	let n = t.replace(la, "");
 	return n.length > 0 ? n : void 0;
-}, Bi = (e) => {
+}, fa = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e;
 		try {
-			e = te(n, "utf8");
+			e = ee(n, "utf8");
 		} catch {
 			continue;
 		}
-		Y.lastIndex = 0;
-		for (let r = Y.exec(e); r !== null; r = Y.exec(e)) {
-			let e = zi(r[1] ?? r[2] ?? "");
+		X.lastIndex = 0;
+		for (let r = X.exec(e); r !== null; r = X.exec(e)) {
+			let e = da(r[1] ?? r[2] ?? "");
 			if (e === void 0) continue;
 			let i = t.get(e);
 			i === void 0 ? t.set(e, /* @__PURE__ */ new Set([n])) : i.add(n);
 		}
 	}
 	return t;
-}, Vi = (e, t) => {
+}, pa = (e, t) => {
 	let n = new Set(e);
-	for (let r of e) for (let e of [Ri(r), g(_(r))]) {
+	for (let r of e) for (let e of [ua(r), g(_(r))]) {
 		let r = t.get(e);
 		if (r !== void 0) for (let e of r) n.add(e);
 	}
 	return n;
-}, Hi = /* @__PURE__ */ ".ts,.tsx,.mts,.cts,.js,.jsx,.mjs,.cjs,.yml,.yaml,.toml,.json,.jsonc,.ini,.cfg,.conf,.sh,.bash,.zsh,.fish,.ps1,.bat,.cmd,.md,.mdx,.rst,.txt,.adoc,Makefile,makefile,GNUmakefile,Justfile,justfile,Dockerfile,Containerfile,Procfile,Jenkinsfile,Rakefile,Taskfile".split(","), Ui = 2097152, Wi = 4e4, Gi = (e) => {
+}, ma = /* @__PURE__ */ ".ts,.tsx,.mts,.cts,.js,.jsx,.mjs,.cjs,.yml,.yaml,.toml,.json,.jsonc,.ini,.cfg,.conf,.sh,.bash,.zsh,.fish,.ps1,.bat,.cmd,.md,.mdx,.rst,.txt,.adoc,Makefile,makefile,GNUmakefile,Justfile,justfile,Dockerfile,Containerfile,Procfile,Jenkinsfile,Rakefile,Taskfile".split(","), ha = 2097152, ga = 4e4, _a = (e) => {
 	let t = e.slice(e.lastIndexOf("/") + 1);
-	return Hi.some((e) => e.startsWith(".") ? t.endsWith(e) : t === e);
-}, Ki = (e) => {
+	return ma.some((e) => e.startsWith(".") ? t.endsWith(e) : t === e);
+}, va = (e) => {
 	try {
-		let t = re("git", [
+		let t = ne("git", [
 			"ls-files",
 			"--cached",
 			"--others",
@@ -6474,23 +6706,23 @@ var S = (e, t, n) => {
 	} catch {
 		return;
 	}
-}, X = (e, t = Ki) => {
+}, Z = (e, t = va) => {
 	let n = t(e);
-	if (n === void 0) return qi;
+	if (n === void 0) return ya;
 	let r = /* @__PURE__ */ new Map(), i = [];
 	for (let t of n) {
-		if (t.split("/").some((e) => J.has(e)) || !Gi(t)) continue;
-		if (r.size >= Wi) {
+		if (t.split("/").some((e) => Y.has(e)) || !_a(t)) continue;
+		if (r.size >= ga) {
 			i.push(t);
 			continue;
 		}
 		let n = v(e, t);
 		try {
-			if (ne(n).size > Ui) {
+			if (te(n).size > ha) {
 				i.push(t);
 				continue;
 			}
-			let e = te(n, "utf8");
+			let e = ee(n, "utf8");
 			if (e.includes("\0")) {
 				i.push(t);
 				continue;
@@ -6510,47 +6742,47 @@ var S = (e, t, n) => {
 		scanned: r.size,
 		skipped: i
 	};
-}, qi = {
+}, ya = {
 	find: () => [],
 	scanned: 0,
 	skipped: []
-}, Ji = [
+}, ba = [
 	"**/*.ts",
 	"**/*.tsx",
 	"!**/node_modules/**",
 	"!**/dist/**",
 	"!**/.framework/**",
 	"!**/*.d.ts"
-], Z = (e, t, n = Zi) => {
+], Q = (e, t, n = Ca) => {
 	let r = /* @__PURE__ */ new Set();
-	for (let e of t) for (let t of e.scope ?? Ji) r.add(t);
+	for (let e of t) for (let t of e.scope ?? ba) r.add(t);
 	let i = n(e);
 	if (i !== void 0) {
-		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => Xi(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => Xi(e.slice(1))), a = [...J], o = [];
+		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => Sa(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => Sa(e.slice(1))), a = [...Y], o = [];
 		for (let r of i) {
 			if (a.some((e) => r === e || r.startsWith(`${e}/`) || r.includes(`/${e}/`)) || !t.some((e) => e(r)) || n.some((e) => e(r))) continue;
 			let i = v(e, r);
-			y(i) && o.push(i);
+			b(i) && o.push(i);
 		}
-		return Yi(o.length, e), o;
+		return xa(o.length, e), o;
 	}
-	let a = oe([...r], {
+	let a = ae([...r], {
 		cwd: e,
 		absolute: !0,
 		expandDirectories: !1,
 		followSymbolicLinks: !1,
-		ignore: [...Ii()]
+		ignore: [...ca()]
 	});
-	return Yi(a.length, e), a;
-}, Yi = (e, t) => {
-	let n = Qi();
+	return xa(a.length, e), a;
+}, xa = (e, t) => {
+	let n = wa();
 	if (!(e <= n)) throw Error(`voltro update: the codemod scan matched ${e} files under ${t}, past the ${n} ceiling.\n  Every matched file is parsed into one ts-morph project, so the heap needed grows with\n  this number — past the ceiling it runs out of memory, and V8 aborts without naming a\n  limit, which is why this stops here instead. Three ways out, in order:\n    • put non-source directories in .gitignore (inside a git repo the scan then never\n      sees them at all — a build cache, a data dump, a virtualenv),\n    • run \`voltro update\` from the app directory rather than the workspace root, or\n    • take one codemod at a time: \`voltro update --dry-run\` lists the ids, then\n      \`voltro update --codemods-only --only <id>\` runs a single one.\n  If every one of those files really is source this pass must rewrite, raise the ceiling\n  with VOLTRO_CODEMOD_MAX_FILES and give node room: NODE_OPTIONS=--max-old-space-size=8192.`);
-}, Xi = (e) => {
+}, Sa = (e) => {
 	let t = e.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "\0").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*").replace(/\u0000/g, "(?:.*/)?").replace(/\\\{([^}]*)\\\}/g, (e, t) => `(?:${t.split(",").join("|")})`);
 	return (e) => RegExp(`^${t}$`).test(e);
-}, Zi = (e) => {
+}, Ca = (e) => {
 	try {
-		let t = re("git", [
+		let t = ne("git", [
 			"ls-files",
 			"--cached",
 			"--others",
@@ -6569,17 +6801,17 @@ var S = (e, t, n) => {
 	} catch {
 		return;
 	}
-}, Qi = () => {
+}, wa = () => {
 	let e = Number(process.env.VOLTRO_CODEMOD_MAX_FILES);
 	return Number.isInteger(e) && e > 0 ? e : 2e4;
-}, Q = (e, t) => {
+}, $ = (e, t) => {
 	let n = e.split(".").map(Number), r = t.split(".").map(Number);
 	for (let e = 0; e < 3; e++) {
 		let t = (n[e] ?? 0) - (r[e] ?? 0);
 		if (t !== 0) return t;
 	}
 	return 0;
-}, $i = (e, t, n = Fi) => n.filter((n) => Q(e, n.version) < 0 && Q(n.version, t) <= 0).slice().sort(he), $ = (e, t, n = () => {}, r = qi) => {
+}, Ta = (e, t, n = sa) => n.filter((n) => $(e, n.version) < 0 && $(n.version, t) <= 0).slice().sort(me), Ea = (e, t, n = () => {}, r = ya) => {
 	let i = [], a = [], o = [];
 	for (let s of t) {
 		let t = !s.appliesTo || s.appliesTo({
@@ -6602,7 +6834,7 @@ var S = (e, t, n) => {
 		let l = new Map(e.getSourceFiles().map((e) => [e.getFilePath(), e.getFullText()]));
 		s.transform?.({
 			project: e,
-			helpers: pe,
+			helpers: fe,
 			log: n
 		});
 		let u = new Map(e.getSourceFiles().map((e) => [e.getFilePath(), e.getFullText()])), d = /* @__PURE__ */ new Map();
@@ -6630,8 +6862,8 @@ var S = (e, t, n) => {
 		manual: a,
 		skipped: o
 	};
-}, ea = async (e) => {
-	let t = e.log ?? (() => {}), n = $i(e.from, e.to, e.codemods ?? Fi), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
+}, Da = async (e) => {
+	let t = e.log ?? (() => {}), n = Ta(e.from, e.to, e.codemods ?? sa), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
 		let t = n.filter((t) => e.only.includes(t.id)), r = e.only.filter((e) => !n.some((t) => t.id === e));
 		if (r.length > 0) throw Error(`voltro update --only: no codemod in ${e.from} → ${e.to} has id ${r.map((e) => `"${e}"`).join(", ")}.\n  Available for this jump:\n${n.map((e) => `    ${e.id}`).join("\n")}`);
 		return t;
@@ -6643,39 +6875,39 @@ var S = (e, t, n) => {
 	};
 	let i = f(e.root);
 	i !== void 0 && t(`path aliases: ${Object.keys(i.paths).join(", ")}`);
-	let a = () => new ie({
+	let a = () => new re({
 		skipAddingFilesFromTsConfig: !0,
-		manipulationSettings: { quoteKind: ae.Single },
+		manipulationSettings: { quoteKind: ie.Single },
 		...i === void 0 ? {} : { compilerOptions: {
 			baseUrl: i.baseUrl,
 			paths: i.paths
 		} }
-	}), o, s = Z(e.root, r), c = r.filter((e) => e.needsImporters === !0 && e.scope !== void 0), l = [], u = [], d = [], p, m = {
-		find: (t) => (p ??= X(e.root)).find(t),
+	}), o, s = Q(e.root, r), c = r.filter((e) => e.needsImporters === !0 && e.scope !== void 0), l = [], u = [], d = [], p, m = {
+		find: (t) => (p ??= Z(e.root)).find(t),
 		get scanned() {
-			return (p ??= X(e.root)).scanned;
+			return (p ??= Z(e.root)).scanned;
 		},
 		get skipped() {
-			return (p ??= X(e.root)).skipped;
+			return (p ??= Z(e.root)).skipped;
 		}
-	}, h = c.length > 0 ? Bi(Z(e.root, [{
+	}, h = c.length > 0 ? fa(Q(e.root, [{
 		...c[0],
-		scope: Ji
+		scope: ba
 	}])) : void 0;
 	for (let n of r) {
 		if (c.includes(n)) {
-			let r = a(), i = Z(e.root, [n]);
-			for (let e of Vi(i, h)) y(e) && r.addSourceFileAtPath(e);
-			let s = $(r, [n], t, m);
+			let r = a(), i = Q(e.root, [n]);
+			for (let e of pa(i, h)) b(e) && r.addSourceFileAtPath(e);
+			let s = Ea(r, [n], t, m);
 			e.dryRun || await r.save(), l.push(...s.applied), u.push(...s.manual), d.push(...s.skipped), o = void 0;
 			continue;
 		}
 		o ??= (() => {
 			let e = a();
-			for (let t of s) y(t) && e.addSourceFileAtPath(t);
+			for (let t of s) b(t) && e.addSourceFileAtPath(t);
 			return e;
 		})();
-		let r = $(o, [n], t, m);
+		let r = Ea(o, [n], t, m);
 		e.dryRun || await o.save(), l.push(...r.applied), u.push(...r.manual), d.push(...r.skipped);
 	}
 	return {
@@ -6685,4 +6917,4 @@ var S = (e, t, n) => {
 	};
 };
 //#endregion
-export { w as i, ea as n, J as r, Q as t };
+export { T as i, Da as n, Y as r, $ as t };