@voltro/cli 0.59.0 → 0.60.0

package/CHANGELOG.md

@@ -39,6 +39,64 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.60.0] — 2026-08-31
+
+### ⚠ BREAKING
+
+- **@voltro/plugin-sentry** — **A declared failure no longer reaches Sentry by default, and the source-map upload now injects debug ids.** Two separate defects, both found by the same deployment on its first day of real server-side events.
+
+  **1. The contract was being reported as an incident.** The rpc interceptor skipped only clean interrupts; everything else went to `captureException`. So a failure declared in a procedure's `error:` union — the thing the client gets typed and branches on — arrived as `level: error`, `handled: yes`. The first server-side issue a deployment ever received was a person clicking a team they are not a member of.
+
+  Effect separates a failure from a defect, this framework leans on that split deliberately (a store refusal was made typed so an app could branch on it; an unlookupable conflict key was deliberately left a defect, because it is a broken call rather than a condition in the data), and a descriptor carries it in `error:`. Reporting both as an incident discarded that one layer up.
+
+  `shouldCapture` now skips a cause that is failures-ONLY. A defect is reported as before, including a defect that travelled beside a failure — the rule is failures-only rather than "any failure present" precisely so one cannot hide the other. `captureFailures: true` restores the old behaviour; a predicate keeps the ones that are signal.
+
+  **The browser half moved with it**, or the option would have been half-wired: a rejected call is an rpc error on the client too, published to the client error bus and captured by the browser bridge. `initSentryBrowser` takes the same option and applies it to `rpc.*` events carrying a `_tag`. Route render failures and `reportClientError` calls are never filtered — nobody declared those.
+
+  **2. `sentry-cli sourcemaps upload` does NOT write debug ids.** `inject` is a separate subcommand; `upload` only uses ids that are already present, and falls back to matching on the artifact NAME when they are not. That fallback cannot work for a server bundle: the artifact is named from `--url-prefix` (`~/chunk- ABC.js`) while the frame carries the absolute path the node process loaded, and nothing rewrites either side.
+
+  Measured downstream: 4300 artifacts uploaded, release finalised, every frame still minified. Nothing was red — the exact shape this code's own header warns about, an upload that matched nothing looking like one that worked. The comment above the uploader asserted the injection happened, which made it a description standing where a check belonged.
+
+  `inject` now runs first, over the same directories, and `sourcemapDebugIds.test.ts` drives the real binary to assert an id lands in both the JS and the map. `--url-prefix` stays as the fallback for the browser bundle, whose frames really are URLs.
+
+  The boot line names the new setting (`sentry active … captureFailures=false`), because a default the framework picks for you is one nobody finds again.
+
+  **`voltro update` carries you across this** — codemod `0.60.0/01_declared_failures_are_not_incidents`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.60.0).
+
+### Added
+
+- **@voltro/cli, @voltro/plugin-sentry** — **The web server process now initialises Sentry and reports its own errors.**
+
+  A framework app runs two server processes. `voltro serve` is the api, where `sentryPlugin()` initialises the SDK through the plugin lifecycle. `voltro start` is the web server — SSR, loaders, ISR, the revalidation legs — and it has no plugin lifecycle, so it had none.
+
+  That was not a cosmetic difference in boot output. A web pod legitimately logs less than an api pod, because it has no store, no rpc, no scheduler, no workflows and no plugins. What it also had was **no error reporting**: an SSR shell throw is caught, logged and answered with a 500, so no browser ever renders it and the client-side ErrorBoundary bridge cannot see it either. Both ends of the integration worked and the middle was dark — while the docs' "React render error ✅ auto" row, true of the client path, read as covering all of them.
+
+  Set `SENTRY_DSN` on the web deployment and the boot says `sentry active` with the same message and the same field names as the api half, from the same function — `initSentryServer` in `@voltro/plugin-sentry/server`, which the api plugin now calls too. One init, because a copy of `skipOpenTelemetrySetup`, the traces default, the overrides-first spread and the degrade-on-missing-SDK path would have drifted the moment either half gained a case.
+
+  Three deliberate asymmetries, each because the two processes are not the same thing:
+
+  - **`traces: false` on the web side.** The api contributes a span processor to the framework's tracer; the web server has no tracer at all, so tracing on would put `traces: true` in a boot line while nothing produces a span. - **No DSN is SILENT here.** On the api side `sentryPlugin()` is a declaration and an inert one contradicts it. There is no declaration here. - **`@voltro/plugin-sentry` must be installed in the WEB app.** With a DSN set and the package missing, the boot names the command rather than failing — monitoring must never be what stops a deploy.
+
+  Measured against a real production `voltro start`, both branches. Note that production `voltro start` loads the app's precompiled start bundle, so a web deployment picks this up when that bundle is rebuilt — the framework version alone is not enough.
+
+### Fixed
+
+- **@voltro/workflow, @voltro/runtime, @voltro/database, @voltro/cli, @voltro/plugin-sentry** — **Six raw writes removed from production log streams — and the guard that was supposed to catch them rewritten, because it was green for two independent reasons.**
+
+  A pod tail showed `[voltro:workflow] shard-lock coordination: row-based (dialect=mariadb, mode=row)` sitting between JSON records. `@voltro/logger` is what makes a line JSON in a pod and pretty on a TTY; a `process.stderr.write` bypasses that decision at exactly the place nobody looks, because a dev terminal renders both the same.
+
+  Fixed at the source: the workflow cluster layer (2), `rpcServer`'s computed-cache warning, the subscription outbox's and the RYW store's `warn`/`onError` defaults — those two are not fallbacks, the callers pass nothing, so the default IS the production path — and the migration file discovery's skip notice, which lands in the migrate job's stream.
+
+  **The guard is the part worth reading.** `prodLogDiscipline.test.ts` existed for this exact class and reported clean, for two reasons that had to be fixed separately:
+
+  - Its file set was a hand-written list of five. A guard that opts files IN says nothing about any file added after it was written. - Its matcher was LINE-LOCAL, so `process.stderr.write(` on one line and the `` `[tag] `` on the next never matched — 4 of the 9 call sites in the repo are written that way, including one in a file that WAS on the list. The guard had been pointed straight at an offender and called it clean.
+
+  It is opt-OUT now: every server-side package's source is scanned, exceptions carry a reason, and a second test fails if an exception's call site disappears — an allowlist entry for code that is gone reads as a rule with a hole in it.
+
+  Verified against a real `voltro serve` under `NODE_ENV=production`: 35 records, zero framework lines that are not JSON.
+
+---
+
 ## [0.59.0] — 2026-08-30
 
 ### ⚠ BREAKING

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as e } from "./commands-cu34ENUT.js";
+import { r as e } from "./commands-Ro4hYBHD.js";
 import { a as t } from "./nodeEnvironment-cGFAj1J8.js";
 import { t as n } from "./loadEnv-D9nEOClM.js";
 import { n as r } from "./cliError-BmdYnghb.js";

package/dist/{build-uRMZrT8z.js → build-BxAsLzyU.js}

@@ -118,21 +118,25 @@ var X = W({ scope: "voltro:build" }), ie = async (e, t = {}) => {
 		n.set(e, [...n.get(e) ?? [], r.dir]);
 	}
 	return [...n];
-}, ce = (e) => async (t, n, r) => {
-	let i = new (await (ue(e)))(null, {
-		authToken: t.authToken,
-		org: t.org,
-		project: t.project,
-		...t.url === void 0 ? {} : { url: t.url },
+}, ce = (e, t = ue) => async (n, r, i) => {
+	let a = new (await (t(e)))(null, {
+		authToken: n.authToken,
+		org: n.org,
+		project: n.project,
+		...n.url === void 0 ? {} : { url: n.url },
 		silent: !1
 	});
-	await i.releases.new(t.release);
-	for (let [e, n] of Q(r, t.urlPrefix)) await i.releases.uploadSourceMaps(t.release, {
-		include: n,
+	await a.execute([
+		"sourcemaps",
+		"inject",
+		...i.map((e) => e.dir)
+	], !0), await a.releases.new(n.release);
+	for (let [e, t] of Q(i, n.urlPrefix)) await a.releases.uploadSourceMaps(n.release, {
+		include: t,
 		urlPrefix: e,
 		rewrite: !0
 	});
-	await i.releases.finalize(t.release);
+	await a.releases.finalize(n.release);
 }, le = (e) => {
 	let t = e, n = [
 		t?.SentryCli,

package/dist/{codemodRunner-kNnh1I7_.js → codemodRunner-ClUqkhvR.js}

@@ -6550,7 +6550,55 @@ var C = (e, t, n) => {
 		}
 		n > 0 && (t?.(`sourcemaps: moved out of \`web:\` in ${n} config file(s)`), t?.("  → it now covers the SSR, start and serve bundles too, not only the browser bundle")), r > 0 && t?.(`sourcemaps: ${r} case(s) left for you — listed above`), n === 0 && r === 0 && t?.("sourcemaps: no `web.sourcemaps` found — nothing to move");
 	}
-}), pa = (e) => /\bcostSource\b|\bCostBreakdown\b|\bestimateCostUsd\b|\b_voltro_ai_usage\b|\bMeteredUsage\b/.test(e.getFullText()), ma = [
+}), pa = (e) => /\bsentryPlugin\b|@voltro\/plugin-sentry/.test(e.getFullText()), ma = T({
+	version: "0.60.0",
+	id: "0.60.0/01_declared_failures_are_not_incidents",
+	title: "Sentry no longer reports declared failures by default",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some(pa),
+	note: [
+		"A DECLARED FAILURE IS NO LONGER A SENTRY ISSUE BY DEFAULT.",
+		"",
+		"WHAT CHANGED. The rpc interceptor skipped only clean interrupts; every",
+		"other cause went to `captureException`, so a failure declared in a",
+		"procedure's `error:` union arrived as `level: error`. It now skips a cause",
+		"that is failures-ONLY. Defects are reported exactly as before, including a",
+		"defect that travelled beside a failure.",
+		"",
+		"WHY. A declared failure is a contract: somebody wrote the outcome down, the",
+		"client gets it typed and branches on it, and it describes a state of the",
+		"world. `AccessDeniedError` on a team you are not in is the system working.",
+		"A defect is the opposite — nobody foresaw it — and that is what Sentry is",
+		"built for. Effect separates the two, this framework leans on that split",
+		"deliberately, and a descriptor carries it in `error:`; reporting both as an",
+		"incident discarded it one layer up. A deployment measured the result: its",
+		"first server-side issue was a person clicking a team they are not in.",
+		"",
+		"THE BROWSER HALF MOVED WITH IT. A rejected call is an rpc error on the",
+		"client too, so `initSentryBrowser` applies the same rule to `rpc.*` events",
+		"that carry a `_tag`. Route render failures and `reportClientError` calls",
+		"are never filtered — nobody declared those.",
+		"",
+		"WHAT TO DO — one of these, deliberately:",
+		"",
+		"1) NOTHING, if Sentry is where you look for the unforeseen. Your issue list",
+		"   gets quieter; the trace still shows the failure.",
+		"",
+		"2) KEEP THEM, if Sentry is where you see errors at all:",
+		"",
+		"     sentryPlugin({ captureFailures: true })",
+		"     initSentryBrowser({ captureFailures: true })",
+		"",
+		"3) KEEP THE ONES THAT ARE SIGNAL:",
+		"",
+		"     sentryPlugin({",
+		"       captureFailures: (e) => e._tag === 'PaymentDeclined',",
+		"     })",
+		"",
+		"The boot line now names the setting — `sentry active … captureFailures=false`",
+		"— so the choice is visible where the decision takes effect."
+	].join("\n")
+}), ha = (e) => /\bcostSource\b|\bCostBreakdown\b|\bestimateCostUsd\b|\b_voltro_ai_usage\b|\bMeteredUsage\b/.test(e.getFullText()), ga = [
 	he,
 	ge,
 	ve,
@@ -6694,12 +6742,13 @@ var C = (e, t, n) => {
 	oa,
 	ca,
 	fa,
+	ma,
 	T({
 		version: "0.59.0",
 		id: "0.59.0/02_costsource_gained_unpriced",
 		title: "`costSource` gained `unpriced`, and AI usage is counted in a unit",
 		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some(pa),
+		appliesTo: ({ project: e }) => e.getSourceFiles().some(ha),
 		note: [
 			"AI COST NOW HAS A THIRD SOURCE, AND USAGE HAS A UNIT.",
 			"",
@@ -6736,12 +6785,12 @@ var C = (e, t, n) => {
 	".turbo",
 	".cache",
 	".output"
-]), ha = () => [...[...J].map((e) => `**/${e}/**`), "**/.voltro-*/**"], Y = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, X = /\.(?:tsx?|jsx?|mjs|cjs)$/, ga = (e) => g(e).replace(X, ""), _a = (e) => {
+]), _a = () => [...[...J].map((e) => `**/${e}/**`), "**/.voltro-*/**"], Y = /(?:from|import)\s*\(?\s*['"]([^'"]+)['"]|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g, X = /\.(?:tsx?|jsx?|mjs|cjs)$/, va = (e) => g(e).replace(X, ""), ya = (e) => {
 	let t = e.split("/").filter((e) => e.length > 0).pop();
 	if (t === void 0 || t === "." || t === "..") return;
 	let n = t.replace(X, "");
 	return n.length > 0 ? n : void 0;
-}, va = (e) => {
+}, ba = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e;
@@ -6752,24 +6801,24 @@ var C = (e, t, n) => {
 		}
 		Y.lastIndex = 0;
 		for (let r = Y.exec(e); r !== null; r = Y.exec(e)) {
-			let e = _a(r[1] ?? r[2] ?? "");
+			let e = ya(r[1] ?? r[2] ?? "");
 			if (e === void 0) continue;
 			let i = t.get(e);
 			i === void 0 ? t.set(e, /* @__PURE__ */ new Set([n])) : i.add(n);
 		}
 	}
 	return t;
-}, ya = (e, t) => {
+}, xa = (e, t) => {
 	let n = new Set(e);
-	for (let r of e) for (let e of [ga(r), g(_(r))]) {
+	for (let r of e) for (let e of [va(r), g(_(r))]) {
 		let r = t.get(e);
 		if (r !== void 0) for (let e of r) n.add(e);
 	}
 	return n;
-}, ba = /* @__PURE__ */ ".ts,.tsx,.mts,.cts,.js,.jsx,.mjs,.cjs,.yml,.yaml,.toml,.json,.jsonc,.ini,.cfg,.conf,.sh,.bash,.zsh,.fish,.ps1,.bat,.cmd,.md,.mdx,.rst,.txt,.adoc,Makefile,makefile,GNUmakefile,Justfile,justfile,Dockerfile,Containerfile,Procfile,Jenkinsfile,Rakefile,Taskfile".split(","), xa = 2097152, Sa = 4e4, Ca = (e) => {
+}, Sa = /* @__PURE__ */ ".ts,.tsx,.mts,.cts,.js,.jsx,.mjs,.cjs,.yml,.yaml,.toml,.json,.jsonc,.ini,.cfg,.conf,.sh,.bash,.zsh,.fish,.ps1,.bat,.cmd,.md,.mdx,.rst,.txt,.adoc,Makefile,makefile,GNUmakefile,Justfile,justfile,Dockerfile,Containerfile,Procfile,Jenkinsfile,Rakefile,Taskfile".split(","), Ca = 2097152, wa = 4e4, Ta = (e) => {
 	let t = e.slice(e.lastIndexOf("/") + 1);
-	return ba.some((e) => e.startsWith(".") ? t.endsWith(e) : t === e);
-}, wa = (e) => {
+	return Sa.some((e) => e.startsWith(".") ? t.endsWith(e) : t === e);
+}, Ea = (e) => {
 	try {
 		let t = b("git", [
 			"ls-files",
@@ -6790,19 +6839,19 @@ var C = (e, t, n) => {
 	} catch {
 		return;
 	}
-}, Z = (e, t = wa) => {
+}, Z = (e, t = Ea) => {
 	let n = t(e);
-	if (n === void 0) return Ta;
+	if (n === void 0) return Da;
 	let r = /* @__PURE__ */ new Map(), i = [];
 	for (let t of n) {
-		if (t.split("/").some((e) => J.has(e)) || !Ca(t)) continue;
-		if (r.size >= Sa) {
+		if (t.split("/").some((e) => J.has(e)) || !Ta(t)) continue;
+		if (r.size >= wa) {
 			i.push(t);
 			continue;
 		}
 		let n = v(e, t);
 		try {
-			if (ne(n).size > xa) {
+			if (ne(n).size > Ca) {
 				i.push(t);
 				continue;
 			}
@@ -6826,45 +6875,45 @@ var C = (e, t, n) => {
 		scanned: r.size,
 		skipped: i
 	};
-}, Ta = {
+}, Da = {
 	find: () => [],
 	scanned: 0,
 	skipped: []
-}, Ea = [
+}, Oa = [
 	"**/*.ts",
 	"**/*.tsx",
 	"!**/node_modules/**",
 	"!**/dist/**",
 	"!**/.framework/**",
 	"!**/*.d.ts"
-], Q = (e, t, n = ka) => {
+], Q = (e, t, n = ja) => {
 	let r = /* @__PURE__ */ new Set();
-	for (let e of t) for (let t of e.scope ?? Ea) r.add(t);
+	for (let e of t) for (let t of e.scope ?? Oa) r.add(t);
 	let i = n(e);
 	if (i !== void 0) {
-		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => Oa(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => Oa(e.slice(1))), a = [...J], o = [];
+		let t = [...r].filter((e) => !e.startsWith("!")).map((e) => Aa(e)), n = [...r].filter((e) => e.startsWith("!")).map((e) => Aa(e.slice(1))), a = [...J], o = [];
 		for (let r of i) {
 			if (a.some((e) => r === e || r.startsWith(`${e}/`) || r.includes(`/${e}/`)) || !t.some((e) => e(r)) || n.some((e) => e(r))) continue;
 			let i = v(e, r);
 			y(i) && o.push(i);
 		}
-		return Da(o.length, e), o;
+		return ka(o.length, e), o;
 	}
 	let a = ae([...r], {
 		cwd: e,
 		absolute: !0,
 		expandDirectories: !1,
 		followSymbolicLinks: !1,
-		ignore: [...ha()]
+		ignore: [..._a()]
 	});
-	return Da(a.length, e), a;
-}, Da = (e, t) => {
-	let n = Aa();
+	return ka(a.length, e), a;
+}, ka = (e, t) => {
+	let n = Ma();
 	if (!(e <= n)) throw Error(`voltro update: the codemod scan matched ${e} files under ${t}, past the ${n} ceiling.\n  Every matched file is parsed into one ts-morph project, so the heap needed grows with\n  this number — past the ceiling it runs out of memory, and V8 aborts without naming a\n  limit, which is why this stops here instead. Three ways out, in order:\n    • put non-source directories in .gitignore (inside a git repo the scan then never\n      sees them at all — a build cache, a data dump, a virtualenv),\n    • run \`voltro update\` from the app directory rather than the workspace root, or\n    • take one codemod at a time: \`voltro update --dry-run\` lists the ids, then\n      \`voltro update --codemods-only --only <id>\` runs a single one.\n  If every one of those files really is source this pass must rewrite, raise the ceiling\n  with VOLTRO_CODEMOD_MAX_FILES and give node room: NODE_OPTIONS=--max-old-space-size=8192.`);
-}, Oa = (e) => {
+}, Aa = (e) => {
 	let t = e.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "\0").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*").replace(/\u0000/g, "(?:.*/)?").replace(/\\\{([^}]*)\\\}/g, (e, t) => `(?:${t.split(",").join("|")})`);
 	return (e) => RegExp(`^${t}$`).test(e);
-}, ka = (e) => {
+}, ja = (e) => {
 	try {
 		let t = b("git", [
 			"ls-files",
@@ -6885,7 +6934,7 @@ var C = (e, t, n) => {
 	} catch {
 		return;
 	}
-}, Aa = () => {
+}, Ma = () => {
 	let e = Number(process.env.VOLTRO_CODEMOD_MAX_FILES);
 	return Number.isInteger(e) && e > 0 ? e : 2e4;
 }, $ = (e, t) => {
@@ -6895,7 +6944,7 @@ var C = (e, t, n) => {
 		if (t !== 0) return t;
 	}
 	return 0;
-}, ja = (e, t, n = ma) => n.filter((n) => $(e, n.version) < 0 && $(n.version, t) <= 0).slice().sort(me), Ma = (e, t, n = () => {}, r = Ta) => {
+}, Na = (e, t, n = ga) => n.filter((n) => $(e, n.version) < 0 && $(n.version, t) <= 0).slice().sort(me), Pa = (e, t, n = () => {}, r = Da) => {
 	let i = [], a = [], o = [];
 	for (let s of t) {
 		let t = !s.appliesTo || s.appliesTo({
@@ -6946,8 +6995,8 @@ var C = (e, t, n) => {
 		manual: a,
 		skipped: o
 	};
-}, Na = async (e) => {
-	let t = e.log ?? (() => {}), n = ja(e.from, e.to, e.codemods ?? ma), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
+}, Fa = async (e) => {
+	let t = e.log ?? (() => {}), n = Na(e.from, e.to, e.codemods ?? ga), r = e.only === void 0 || e.only.length === 0 ? n : (() => {
 		let t = n.filter((t) => e.only.includes(t.id)), r = e.only.filter((e) => !n.some((t) => t.id === e));
 		if (r.length > 0) throw Error(`voltro update --only: no codemod in ${e.from} → ${e.to} has id ${r.map((e) => `"${e}"`).join(", ")}.\n  Available for this jump:\n${n.map((e) => `    ${e.id}`).join("\n")}`);
 		return t;
@@ -6974,15 +7023,15 @@ var C = (e, t, n) => {
 		get skipped() {
 			return (p ??= Z(e.root)).skipped;
 		}
-	}, h = c.length > 0 ? va(Q(e.root, [{
+	}, h = c.length > 0 ? ba(Q(e.root, [{
 		...c[0],
-		scope: Ea
+		scope: Oa
 	}])) : void 0;
 	for (let n of r) {
 		if (c.includes(n)) {
 			let r = a(), i = Q(e.root, [n]);
-			for (let e of ya(i, h)) y(e) && r.addSourceFileAtPath(e);
-			let s = Ma(r, [n], t, m);
+			for (let e of xa(i, h)) y(e) && r.addSourceFileAtPath(e);
+			let s = Pa(r, [n], t, m);
 			e.dryRun || await r.save(), l.push(...s.applied), u.push(...s.manual), d.push(...s.skipped), o = void 0;
 			continue;
 		}
@@ -6991,7 +7040,7 @@ var C = (e, t, n) => {
 			for (let t of s) y(t) && e.addSourceFileAtPath(t);
 			return e;
 		})();
-		let r = Ma(o, [n], t, m);
+		let r = Pa(o, [n], t, m);
 		e.dryRun || await o.save(), l.push(...r.applied), u.push(...r.manual), d.push(...r.skipped);
 	}
 	return {
@@ -7001,4 +7050,4 @@ var C = (e, t, n) => {
 	};
 };
 //#endregion
-export { T as i, Na as n, J as r, $ as t };
+export { T as i, Fa as n, J as r, $ as t };

package/dist/{commands-cu34ENUT.js → commands-Ro4hYBHD.js}

@@ -109,7 +109,7 @@ var u = () => {
 		name: "dashboard",
 		summary: "Serve the DevTools dashboard standalone (from @voltro/dashboard). Targets via VOLTRO_DASHBOARD_APPS; --port to override.",
 		status: "wired",
-		run: (e) => import("./dashboardCommand-gG1y4PFG.js").then((t) => t.runDashboardCommand(e)),
+		run: (e) => import("./dashboardCommand-t8Qsebjr.js").then((t) => t.runDashboardCommand(e)),
 		help: {
 			usage: "[--port <n>]",
 			flags: [["--port <n>", "port to serve the dashboard on"]],
@@ -171,7 +171,7 @@ var u = () => {
 		name: "evolve",
 		summary: "Schema-evolution copilot: propose an observed-graph-driven codemod + a branch-verified backfill for a schema change (rename/retype/split/drop a column, rename a table). Dry-run by default; --write applies. Usage: voltro evolve rename-column <table>.<col> --to <newName> [--write] [--json].",
 		status: "wired",
-		run: (e) => import("./evolveCommand-8CuFBlbQ.js").then((t) => t.runEvolveCommand(e)),
+		run: (e) => import("./evolveCommand-CThb0EZZ.js").then((t) => t.runEvolveCommand(e)),
 		help: {
 			usage: "<rename-column|rename-table|retype-column|split-column|drop-column> <target> [--to <new>] [--write]",
 			flags: [
@@ -281,7 +281,7 @@ var u = () => {
 		name: "info",
 		summary: "Report versions (CLI, node, every installed @voltro/* — flags lockstep skew), package manager, and dialect. --json for CI. Exits 1 on version skew.",
 		status: "wired",
-		run: (e) => import("./infoCommand-D02A4WI2.js").then((t) => t.runInfoCommand(e)),
+		run: (e) => import("./infoCommand-a0WkKcUY.js").then((t) => t.runInfoCommand(e)),
 		help: {
 			usage: "[--json]",
 			flags: [["--json", "machine-readable report"]],
@@ -370,7 +370,7 @@ var u = () => {
 		name: "build",
 		summary: "Production build for a web app (vite build + per-page SSG pre-render).",
 		status: "wired",
-		run: (e) => import("./build-uRMZrT8z.js").then((t) => t.runBuildCommand(e)),
+		run: (e) => import("./build-BxAsLzyU.js").then((t) => t.runBuildCommand(e)),
 		help: {
 			usage: "[app] [--target <t>]",
 			flags: [["--target <t>", "build target"], ["--report", "print what a visitor downloads: first load, chunks, server artefacts"]],
@@ -421,7 +421,7 @@ var u = () => {
 		name: "start",
 		summary: "Production runtime: serves dist + SSR-on-demand for ssr/isr pages.",
 		status: "wired",
-		run: (e) => import("./start-C75w6ftA.js").then((t) => t.runStartCommand(e)),
+		run: (e) => import("./start-BhoDQ25C.js").then((t) => t.runStartCommand(e)),
 		help: {
 			usage: "[app]",
 			examples: [["voltro start", "serve a built web app (dist + SSR-on-demand)"]],
@@ -555,14 +555,14 @@ var u = () => {
 		handlesHelp: !0,
 		summary: "Upgrade the app to the latest framework: bump every @voltro/* dependency (across ALL workspace members, install once at the workspace root), then run the codemods shipped with the target version. Flags: --to <version>, --from <version>, --codemods-only, --dry-run, --force, --exact, --help. After: run `voltro db apply`.",
 		status: "wired",
-		run: (e) => import("./updateCommand-inInBIAh.js").then((t) => t.runUpdateCommand(e))
+		run: (e) => import("./updateCommand-QMOirvXC.js").then((t) => t.runUpdateCommand(e))
 	},
 	{
 		name: "_apply-codemods",
 		summary: "Internal: apply shipped codemods for a framework version jump (re-exec target of `voltro update`).",
 		status: "wired",
 		hidden: !0,
-		run: (e) => import("./updateCommand-inInBIAh.js").then((t) => t.runApplyCodemods(e))
+		run: (e) => import("./updateCommand-QMOirvXC.js").then((t) => t.runApplyCodemods(e))
 	},
 	{
 		name: "embeddings",

package/dist/{dashboardCommand-gG1y4PFG.js → dashboardCommand-t8Qsebjr.js}

@@ -1,6 +1,6 @@
 import { p as e } from "./dev-Ce2gEziv.js";
 import { it as t, st as n } from "./webDev-CBN9KkyQ.js";
-import { t as r } from "./start-DNtIlBcn.js";
+import { t as r } from "./start-CcdPRG8L.js";
 import { join as i } from "node:path";
 import { existsSync as a } from "node:fs";
 import { createLogger as o } from "@voltro/logger";

package/dist/{evolveCommand-8CuFBlbQ.js → evolveCommand-CThb0EZZ.js}

@@ -1,6 +1,6 @@
 import { n as e } from "./cliOutput-D1tSBoRM.js";
 import { i as t } from "./checkCommand-DC7k1_hP.js";
-import { i as n, n as r } from "./codemodRunner-kNnh1I7_.js";
+import { i as n, n as r } from "./codemodRunner-ClUqkhvR.js";
 import { basename as i, join as a, resolve as o } from "node:path";
 import { branchNamespaceName as s, planBranchProvision as c } from "@voltro/database";
 import { readFile as l } from "node:fs/promises";

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-cu34ENUT.js";
+import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-Ro4hYBHD.js";
 import { r as o } from "./templates-BTWZkJJT.js";
 //#region src/index.ts
 var s = "framework";

package/dist/{infoCommand-D02A4WI2.js → infoCommand-a0WkKcUY.js}

@@ -1,5 +1,5 @@
 import { n as e, r as t, t as n } from "./cliOutput-D1tSBoRM.js";
-import { o as r } from "./updateCommand-Bw3mCUDT.js";
+import { o as r } from "./updateCommand-D9avpQFT.js";
 import { join as i, resolve as a } from "node:path";
 import { readFileSync as o, readdirSync as s, statSync as c } from "node:fs";
 //#region src/infoCommand.ts

package/dist/{start-C75w6ftA.js → start-BhoDQ25C.js}

@@ -1,3 +1,3 @@
 import "./renderModeScan-43yQ2opo.js";
-import { t as e } from "./start-DNtIlBcn.js";
+import { t as e } from "./start-CcdPRG8L.js";
 export { e as runStartCommand };