@voltro/cli 0.61.0 → 0.62.0

package/dist/{dev-dSH-Pkb2.js → dev-BfUG0jrD.js}

@@ -3430,7 +3430,16 @@ var qc = rn({ scope: "voltro:replica-observations" }), Jc = (e) => {
 				kind: "start",
 				payload: u.payload,
 				commit: async (n) => {
-					u.evict !== void 0 && (await e.cancelRun(a.workflowName, u.evict.executionId).catch((e) => {
+					u.evict !== void 0 && (await e.cancelRun({
+						workflowName: a.workflowName,
+						runId: u.evict.runId,
+						executionId: u.evict.executionId,
+						reason: "cancelled to make room for a newer start (singleton mode 'cancel')",
+						detail: {
+							source: "flow-control",
+							mode: "singleton"
+						}
+					}).catch((e) => {
 						i?.warn?.("workflow flow control: could not cancel a singleton incumbent", {
 							workflow: a.workflowName,
 							executionId: u.evict?.executionId,
@@ -3528,22 +3537,29 @@ var qc = rn({ scope: "voltro:replica-observations" }), Jc = (e) => {
 				runId: i.id
 			};
 		},
-		cancelRun: async (t, n) => {
-			let r = e.facade();
-			r !== void 0 && await r.cancel(t, n);
+		cancelRun: async ({ runId: t, reason: n, detail: r }) => {
+			let i = e.cancelRunWithReason();
+			return i !== void 0 && i({
+				runId: t,
+				reason: n,
+				...r === void 0 ? {} : { detail: r }
+			});
 		},
 		onAbandoned: e.onAbandoned ?? (async () => {}),
 		listRunningRuns: async (t) => {
 			let n = e.facade();
 			return n === void 0 ? [] : (await n.listRuns({
-				workflow: t,
+				workflowName: t,
 				status: "running"
 			})).flatMap((e) => {
-				if (e.executionId === null || e.executionId === void 0) return [];
-				let t = e.startedAt instanceof Date ? e.startedAt.getTime() : typeof e.startedAt == "number" ? e.startedAt : Date.parse(String(e.startedAt));
-				return Number.isFinite(t) ? [{
+				if (e.workflowName !== t || e.status !== "running") return [];
+				let n = e.startedAt instanceof Date ? e.startedAt.getTime() : typeof e.startedAt == "number" ? e.startedAt : Date.parse(String(e.startedAt));
+				return Number.isFinite(n) ? [{
+					runId: e.id,
+					workflowName: e.workflowName,
 					executionId: e.executionId,
-					startedAt: t
+					payload: e.payload,
+					startedAt: n
 				}] : [];
 			});
 		},
@@ -3974,10 +3990,14 @@ var qc = rn({ scope: "voltro:replica-observations" }), Jc = (e) => {
 		failedAt: (e.now ?? Date.now)()
 	};
 	try {
-		return await n.start(t, r), e.log?.info?.("workflow onFailure started", {
+		let i = await n.start(t, r);
+		return e.log?.info?.("workflow onFailure start resolved", {
 			workflow: e.workflowName,
 			onFailure: t,
-			reason: e.reason
+			reason: e.reason,
+			startStatus: i.status,
+			handlerRunId: i.id,
+			handlerExecutionId: i.executionId
 		}), !0;
 	} catch (n) {
 		return e.log?.error?.("workflow onFailure could not be started", {

package/dist/{dev-kn9-7RXZ.js → dev-BpMSAjMk.js}

@@ -1,3 +1,3 @@
-import { a as e, d as t, f as n, l as r, m as i, p as a, u as o } from "./dev-dSH-Pkb2.js";
+import { a as e, d as t, f as n, l as r, m as i, p as a, u as o } from "./dev-BfUG0jrD.js";
 import "./dialectDriver-czCHYpeH.js";
 export { e as buildStore, r as loadApiConfig, o as loadApiConfigDiagnosed, t as loadDiscovered, n as mergePluginRoutesInto, a as runDev, i as walk };

package/dist/doctorCommand-PHcqxpnx.js

@@ -0,0 +1,2 @@
+import { b as e, y as t } from "./doctorCommand-pxYq2bH5.js";
+export { t as runDoctorCommand, e as runServePreflight };

package/dist/{doctorCommand-ClB7Ucz5.js → doctorCommand-pxYq2bH5.js}

@@ -1,6 +1,6 @@
-import { Xt as e, Yt as t, Zt as n } from "./dev-dSH-Pkb2.js";
+import { Xt as e, Yt as t, Zt as n } from "./dev-BfUG0jrD.js";
 import { Bt as r, Ht as i, T as a, Ut as o, V as s, Vt as c, t as l, u } from "./webDev-CYjhmOTZ.js";
-import { r as d, u as f } from "./apiBuild-C5HhMAEm.js";
+import { r as d, u as f } from "./apiBuild-DwhySM-6.js";
 import { S as p } from "./frameworkTableAssembly-vfkzuzEo.js";
 import { n as m } from "./pageConvention-CMpfDN6r.js";
 import { n as h, r as g, t as ee } from "./cliOutput-D1tSBoRM.js";
@@ -1856,7 +1856,7 @@ var le = {
 	let t = xn.get(e);
 	if (t !== void 0) return t;
 	let n = (async () => {
-		let { walk: t, loadDiscovered: n } = await import("./dev-kn9-7RXZ.js"), r = await t(e);
+		let { walk: t, loadDiscovered: n } = await import("./dev-BpMSAjMk.js"), r = await t(e);
 		return {
 			files: r,
 			discovered: await n(r, { root: e })
@@ -1981,7 +1981,7 @@ var le = {
 	}
 }, J = async (r) => {
 	try {
-		let { loadApiConfig: i } = await import("./dev-kn9-7RXZ.js"), { discovered: a } = await U(r), o = e(await i(r)), s = {
+		let { loadApiConfig: i } = await import("./dev-BpMSAjMk.js"), { discovered: a } = await U(r), o = e(await i(r)), s = {
 			queries: a.queries,
 			mutations: a.mutations,
 			actions: a.actions,
@@ -2065,7 +2065,7 @@ var le = {
 }, Nn = async (e) => pt({
 	hasWorkflows: async () => (await U(e)).discovered.workflows.length > 0,
 	openStore: async () => {
-		let { loadApiConfig: t, buildStore: n } = await import("./dev-kn9-7RXZ.js"), r = await t(e);
+		let { loadApiConfig: t, buildStore: n } = await import("./dev-BpMSAjMk.js"), r = await t(e);
 		if (r === null) throw Error("no app.config.ts in this directory");
 		let i = await n(r, void 0);
 		return {
@@ -2145,7 +2145,7 @@ var le = {
 	}
 }, zn = async (e) => {
 	try {
-		let { loadApiConfig: t } = await import("./dev-kn9-7RXZ.js"), n = (await t(e))?.doctor?.scopeVocabulary;
+		let { loadApiConfig: t } = await import("./dev-BpMSAjMk.js"), n = (await t(e))?.doctor?.scopeVocabulary;
 		if (typeof n != "string") return [];
 		let [r, i] = n.split("#");
 		if (r === void 0 || i === void 0) return [];
@@ -2162,7 +2162,7 @@ var le = {
 		findings: []
 	});
 	try {
-		let { offlineManifest: n, toInput: r } = await import("./checkCommand-ByaOhdc8.js"), { buildAppGraph: i, checkAppGraph: a } = await import("./appGraph-CFmFKHb2.js"), o = await n(e), s = r(o.manifest, o.tables), c = await zn(e), l = [.../* @__PURE__ */ new Set([...s.scopes ?? [], ...c])];
+		let { offlineManifest: n, toInput: r } = await import("./checkCommand-nB68vIo_.js"), { buildAppGraph: i, checkAppGraph: a } = await import("./appGraph-CFmFKHb2.js"), o = await n(e), s = r(o.manifest, o.tables), c = await zn(e), l = [.../* @__PURE__ */ new Set([...s.scopes ?? [], ...c])];
 		if (l.length === 0) {
 			try {
 				let { loadAppSchemaInputs: t } = await import("./frameworkTableAssembly-B96WCNJA.js");
@@ -2252,7 +2252,7 @@ var le = {
 	if (n === void 0 || r.length === 0) return;
 	let i = [];
 	try {
-		let { loadApiConfig: t } = await import("./dev-kn9-7RXZ.js");
+		let { loadApiConfig: t } = await import("./dev-BpMSAjMk.js");
 		i = (await t(e))?.locales ?? [];
 	} catch {
 		return;
@@ -2314,7 +2314,7 @@ var le = {
 }, Kn = async (e) => {
 	let { discovered: t } = await U(e), n = [];
 	try {
-		let { loadApiConfig: t } = await import("./dev-kn9-7RXZ.js");
+		let { loadApiConfig: t } = await import("./dev-BpMSAjMk.js");
 		n = ((await t(e))?.plugins ?? []).map((e) => {
 			let t = (e.extendSchema?.tables ?? []).map((e) => {
 				let t = e;
@@ -2460,7 +2460,7 @@ var le = {
 	return n.unchecked.length > $ && console.log(`  … and ${n.unchecked.length - $} more — \`voltro doctor --json\` prints every one (\`authz.unchecked\`).`), i === void 0 ? (console.log(`\nNo ${X} yet, so this run is advisory. To start the ratchet:`), console.log("\n    voltro doctor --write-authz-allowlist\n"), console.log("That records today's unchecked handlers as DEBT and fails every run after on"), console.log("anything NEW. Fix a handler and its line stops mattering — the scan reports it as"), console.log("guarded whether or not the line is still there."), !1) : (console.log(`\n${n.unchecked.length} executor(s) with no access check are not in ${X}.`), console.log("Add a guard, or add the tag to that file if it is genuinely open."), console.log("\nBefore hand-rolling another check: `guards: [{ action, resourceType, resource }]`"), console.log("answers \"may this subject act on THIS row\" declaratively, and an app whose"), console.log("relationships live in its own tables registers its own tuple source rather than"), console.log("copying data into a framework table. See the authorization docs."), !0);
 }, Qn = async (e) => {
 	try {
-		let { loadApiConfig: t } = await import("./dev-kn9-7RXZ.js"), { decidedSchemaReport: n } = await import("./doctorDecidedSchema-BlbWgCD_.js"), r = await t(e);
+		let { loadApiConfig: t } = await import("./dev-BpMSAjMk.js"), { decidedSchemaReport: n } = await import("./doctorDecidedSchema-BlbWgCD_.js"), r = await t(e);
 		return r == null ? null : n({
 			...r.schema ? { declared: r.schema } : {},
 			...r.store === void 0 ? {} : { store: r.store },

package/dist/{dormancyCommand-DZupfuq-.js → dormancyCommand-DZpSCWy9.js}

@@ -1,4 +1,4 @@
-import { a as e, l as t } from "./dev-dSH-Pkb2.js";
+import { a as e, l as t } from "./dev-BfUG0jrD.js";
 import { n, t as r } from "./cliArgs-D4p8n7EE.js";
 import { r as i } from "./appPort-B_HpJ_ck.js";
 import { resolve as a } from "node:path";

package/dist/{embeddingsCommand-D8_GquVX.js → embeddingsCommand-YR5Eif0k.js}

@@ -1,4 +1,4 @@
-import { a as e, l as t } from "./dev-dSH-Pkb2.js";
+import { a as e, l as t } from "./dev-BfUG0jrD.js";
 import { Effect as n } from "effect";
 import { embedMany as r } from "@voltro/ai";
 //#region src/embeddingsBackfill.ts

package/dist/{envCommand-DRjVSXRp.js → envCommand-Yl4TGM4h.js}

@@ -1,4 +1,4 @@
-import { l as e } from "./dev-dSH-Pkb2.js";
+import { l as e } from "./dev-BfUG0jrD.js";
 import { Jt as t, Xt as n, Zt as r, qt as i } from "./webDev-CYjhmOTZ.js";
 import { join as a } from "node:path";
 import { promises as o } from "node:fs";

package/dist/{evolveCommand-Cb0C2b3V.js → evolveCommand-B2iYAC9t.js}

@@ -1,6 +1,6 @@
 import { n as e } from "./cliOutput-D1tSBoRM.js";
-import { i as t } from "./checkCommand-CvSheSdb.js";
-import { i as n, n as r } from "./codemodRunner-Drb-H-jr.js";
+import { i as t } from "./checkCommand-zGYZtIkJ.js";
+import { i as n, n as r } from "./codemodRunner-D90bexh4.js";
 import { basename as i, join as a, resolve as o } from "node:path";
 import { branchNamespaceName as s, planBranchProvision as c } from "@voltro/database";
 import { readFile as l } from "node:fs/promises";

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-pCItjdHG.js";
+import { a as e, i as t, n, o as r, r as i, t as a } from "./commands-Dd6Cp7qs.js";
 import { r as o } from "./templates-BTWZkJJT.js";
 //#region src/index.ts
 var s = "framework";

package/dist/{infoCommand-BlKnoY2D.js → infoCommand-DjtMWLZl.js}

@@ -1,5 +1,5 @@
 import { n as e, r as t, t as n } from "./cliOutput-D1tSBoRM.js";
-import { o as r } from "./updateCommand-B18ZQNFg.js";
+import { o as r } from "./updateCommand-F6HFgz0i.js";
 import { join as i, resolve as a } from "node:path";
 import { readFileSync as o, readdirSync as s, statSync as c } from "node:fs";
 //#region src/infoCommand.ts

package/dist/{probeCommand-DYsOFm62.js → probeCommand-Dsu5if_4.js}

@@ -108,7 +108,7 @@ server and in this shell.`);
 }, m = async (e) => {
 	let t = /* @__PURE__ */ new Map();
 	try {
-		let { walk: n, loadDiscovered: r } = await import("./dev-kn9-7RXZ.js"), i = await r(await n(e), { root: e }), a = [
+		let { walk: n, loadDiscovered: r } = await import("./dev-BpMSAjMk.js"), i = await r(await n(e), { root: e }), a = [
 			...i.queries,
 			...i.mutations,
 			...i.actions,

package/dist/{runtimeTrace-BI3kdicc.js → runtimeTrace-CQcn26bI.js}

@@ -1,4 +1,4 @@
-import { n as e } from "./apiBuild-C5HhMAEm.js";
+import { n as e } from "./apiBuild-DwhySM-6.js";
 import { join as t, resolve as n, sep as r } from "node:path";
 import { existsSync as i, promises as a } from "node:fs";
 import { createLogger as o } from "@voltro/logger";

package/dist/{sdkgen-DZ4zCtV4.js → sdkgen-DJvyVw7B.js}

@@ -422,7 +422,7 @@ let package = Package(
 		await l.mkdir(o(e), { recursive: !0 }), await l.writeFile(e, n.content, "utf8");
 	}
 }, X = async (e) => {
-	let { offlineManifest: t } = await import("./checkCommand-ByaOhdc8.js"), { manifest: n } = await t(e);
+	let { offlineManifest: t } = await import("./checkCommand-nB68vIo_.js"), { manifest: n } = await t(e);
 	return n;
 }, Z = async (e) => {
 	let t = J(await (e.manifestProvider ?? X)(e.root), {

package/dist/serveCommand-CZ0kgfIX.js

@@ -0,0 +1,2 @@
+import { n as e } from "./serveCommand-CaLTTh68.js";
+export { e as runServeDispatch };

package/dist/{serveCommand-DnxqCQ16.js → serveCommand-CaLTTh68.js}

@@ -4,12 +4,12 @@ import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
 import { n as s, t as c } from "./interruptedReplace-CwnkBb2X.js";
-import { $ as l, $t as u, A as d, At as f, B as ee, Bn as te, Bt as p, C as ne, Cn as m, Ct as re, D as ie, Dn as h, Dt as ae, E as oe, En as se, Et as g, F as _, Fn as ce, Ft as le, G as ue, Gt as de, H as fe, Hn as pe, Ht as me, I as he, In as v, It as ge, Jt as y, K as _e, Kt as ve, L as ye, Lt as b, M as be, Mn as xe, Mt as Se, N as Ce, Nn as we, Nt as Te, O as Ee, On as De, Ot as Oe, P as ke, Pn as Ae, Pt as x, Q as S, Qt as je, R as Me, Rn as Ne, Rt as Pe, S as Fe, Sn as Ie, St as Le, T as Re, Tn as ze, Tt as Be, U as Ve, Un as He, Ut as Ue, Vn as We, Vt as Ge, W as Ke, Wt as qe, X as Je, Xt as Ye, Y as Xe, Z as Ze, _ as Qe, _n as $e, _t as et, a as tt, an as nt, at as C, b as rt, bn as it, bt as at, cn as ot, ct as w, d as st, dn as T, dt as E, en as ct, et as lt, f as ut, fn as dt, ft, g as pt, gn as D, gt as mt, h as ht, hn as gt, ht as _t, i as vt, in as yt, it as bt, j as xt, jn as St, jt as Ct, k as O, kn as k, kt as wt, l as Tt, ln as Et, lt as Dt, m as Ot, mn as kt, mt as At, nn as jt, nt as Mt, on as Nt, ot as Pt, pn as Ft, pt as It, qt as Lt, rn as Rt, rt as zt, s as A, sn as Bt, st as Vt, t as j, tn as Ht, tt as Ut, un as Wt, ut as Gt, v as Kt, vn as qt, vt as Jt, w as Yt, wn as Xt, wt as Zt, x as Qt, xn as $t, xt as M, y as en, yn as tn, yt as nn, z as rn, zn as an, zt as on } from "./dev-dSH-Pkb2.js";
+import { $ as l, $t as u, A as d, At as f, B as ee, Bn as te, Bt as p, C as ne, Cn as m, Ct as re, D as ie, Dn as h, Dt as ae, E as oe, En as se, Et as g, F as _, Fn as ce, Ft as le, G as ue, Gt as de, H as fe, Hn as pe, Ht as me, I as he, In as v, It as ge, Jt as y, K as _e, Kt as ve, L as ye, Lt as b, M as be, Mn as xe, Mt as Se, N as Ce, Nn as we, Nt as Te, O as Ee, On as De, Ot as Oe, P as ke, Pn as Ae, Pt as x, Q as S, Qt as je, R as Me, Rn as Ne, Rt as Pe, S as Fe, Sn as Ie, St as Le, T as Re, Tn as ze, Tt as Be, U as Ve, Un as He, Ut as Ue, Vn as We, Vt as Ge, W as Ke, Wt as qe, X as Je, Xt as Ye, Y as Xe, Z as Ze, _ as Qe, _n as $e, _t as et, a as tt, an as nt, at as C, b as rt, bn as it, bt as at, cn as ot, ct as w, d as st, dn as T, dt as E, en as ct, et as lt, f as ut, fn as dt, ft, g as pt, gn as D, gt as mt, h as ht, hn as gt, ht as _t, i as vt, in as yt, it as bt, j as xt, jn as St, jt as Ct, k as O, kn as k, kt as wt, l as Tt, ln as Et, lt as Dt, m as Ot, mn as kt, mt as At, nn as jt, nt as Mt, on as Nt, ot as Pt, pn as Ft, pt as It, qt as Lt, rn as Rt, rt as zt, s as A, sn as Bt, st as Vt, t as j, tn as Ht, tt as Ut, un as Wt, ut as Gt, v as Kt, vn as qt, vt as Jt, w as Yt, wn as Xt, wt as Zt, x as Qt, xn as $t, xt as M, y as en, yn as tn, yt as nn, z as rn, zn as an, zt as on } from "./dev-BfUG0jrD.js";
 import { Yt as sn, en as cn, ft as ln, ht as un, lt as dn, mt as fn, pt as pn, qt as mn } from "./webDev-CYjhmOTZ.js";
 import { g as hn, s as gn } from "./inspect-PcC5J-Dl.js";
 import { n as _n } from "./cliArgs-D4p8n7EE.js";
 import { r as vn } from "./appPort-B_HpJ_ck.js";
-import { r as yn, u as bn } from "./apiBuild-C5HhMAEm.js";
+import { r as yn, u as bn } from "./apiBuild-DwhySM-6.js";
 import { r as xn } from "./dialectDriver-czCHYpeH.js";
 import { i as Sn, n as Cn } from "./connectionConfig-Bk9IC7D0.js";
 import { c as wn, n as Tn, o as En } from "./seedRunner-DISBKow-.js";

package/dist/serveEntry.js

@@ -1,4 +1,4 @@
-import { t as e } from "./serveCommand-DnxqCQ16.js";
+import { t as e } from "./serveCommand-CaLTTh68.js";
 import { t } from "./loadEnv-D9nEOClM.js";
 import { r as n } from "./appModuleLoader-C9r9mxZt.js";
 import { i as r } from "./dialectDriver-czCHYpeH.js";

package/dist/updateCommand-DA4OMF7u.js

@@ -0,0 +1,2 @@
+import { m as e, p as t } from "./updateCommand-F6HFgz0i.js";
+export { t as runApplyCodemods, e as runUpdateCommand };

package/dist/{updateCommand-B18ZQNFg.js → updateCommand-F6HFgz0i.js}

@@ -1,4 +1,4 @@
-import { n as e, r as t, t as n } from "./codemodRunner-Drb-H-jr.js";
+import { n as e, r as t, t as n } from "./codemodRunner-D90bexh4.js";
 import { basename as r, dirname as i, join as a, relative as o, resolve as s } from "node:path";
 import { existsSync as c, readFileSync as l, readdirSync as u, statSync as d, writeFileSync as f } from "node:fs";
 import { totalmem as p } from "node:os";

package/dist/{webhooksCommand-Bs-HZ4wY.js → webhooksCommand-Bgdli8dI.js}

@@ -222,7 +222,7 @@ createVerifier({ secret: [process.env.WEBHOOK_SECRET, process.env.WEBHOOK_SECRET
 		...t === void 0 ? {} : { payload: t }
 	};
 }, S = u({ scope: "voltro:webhooks" }), C = ["--out", "--name"], w = async (e) => {
-	let { walk: t, loadDiscovered: n } = await import("./dev-kn9-7RXZ.js"), { outgoingFromEvents: r } = await import("./webhookDiscovery-il9ti-HE.js");
+	let { walk: t, loadDiscovered: n } = await import("./dev-BpMSAjMk.js"), { outgoingFromEvents: r } = await import("./webhookDiscovery-il9ti-HE.js");
 	return r((await n(await t(e), { root: e })).events.map((e) => ({
 		file: e.file,
 		descriptor: e.descriptor

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/cli",
-  "version": "0.61.0",
+  "version": "0.62.0",
   "description": "The `voltro` CLI — dev server, codegen, migrations, project scaffolding, agent-docs seeding, and production serve.",
   "keywords": [
     "voltro",
@@ -910,6 +910,12 @@
         "title": "Sentry rpc spans now join the active browser transaction",
         "kind": "manual"
       },
+      {
+        "version": "0.62.0",
+        "id": "0.62.0/01_finish_timeout_uses_durable_cancellation",
+        "title": "Finish timeouts use durable, once-only cancellation",
+        "kind": "manual"
+      },
       {
         "version": "0.7.0",
         "id": "0.7.0/01_row-filter-load-failure",
@@ -956,24 +962,24 @@
     "@effect/platform-node": "^0.108.0",
     "@effect/sql": "^0.52.0",
     "@effect/workflow": "^0.19.0",
-    "@voltro/ai": "0.61.0",
-    "@voltro/cache": "0.61.0",
-    "@voltro/client": "0.61.0",
-    "@voltro/content": "0.61.0",
-    "@voltro/data-transfer": "0.61.0",
-    "@voltro/database": "0.61.0",
-    "@voltro/env": "0.61.0",
-    "@voltro/kv": "0.61.0",
-    "@voltro/logger": "0.61.0",
-    "@voltro/plugin-auth": "0.61.0",
-    "@voltro/plugin-broadcast": "0.61.0",
-    "@voltro/plugin-mail": "0.61.0",
-    "@voltro/plugin-storage": "0.61.0",
-    "@voltro/plugin-webhooks": "0.61.0",
-    "@voltro/protocol": "0.61.0",
-    "@voltro/runtime": "0.61.0",
-    "@voltro/serverless": "0.61.0",
-    "@voltro/workflow": "0.61.0",
+    "@voltro/ai": "0.62.0",
+    "@voltro/cache": "0.62.0",
+    "@voltro/client": "0.62.0",
+    "@voltro/content": "0.62.0",
+    "@voltro/data-transfer": "0.62.0",
+    "@voltro/database": "0.62.0",
+    "@voltro/env": "0.62.0",
+    "@voltro/kv": "0.62.0",
+    "@voltro/logger": "0.62.0",
+    "@voltro/plugin-auth": "0.62.0",
+    "@voltro/plugin-broadcast": "0.62.0",
+    "@voltro/plugin-mail": "0.62.0",
+    "@voltro/plugin-storage": "0.62.0",
+    "@voltro/plugin-webhooks": "0.62.0",
+    "@voltro/protocol": "0.62.0",
+    "@voltro/runtime": "0.62.0",
+    "@voltro/serverless": "0.62.0",
+    "@voltro/workflow": "0.62.0",
     "chokidar": "^5.0.0",
     "ioredis": "^5.11.1",
     "tinyglobby": "^0.2.17",

package/templates/AGENTS.md

@@ -749,7 +749,7 @@ each plugin's own README.
 
 | Topic | Open | Summary |
 |---|---|---|
-| **What's new in 0.61.0** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
+| **What's new in 0.62.0** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
 | AI | `node_modules/@voltro/cli/templates/agent-docs/ai.md` | How Voltro treats AI — agents, tools, streaming, RAG — all primitives over the same WebSocket as the rest of the framework. |
 | Authentication | `node_modules/@voltro/cli/templates/agent-docs/authentication.md` | How @voltro/plugin-auth wires password + session-cookie auth across api + web, plus the pluggable identity-strategy protocol. |
 | Caching | `node_modules/@voltro/cli/templates/agent-docs/caching.md` | Voltro's caching layer (@voltro/cache) — an always-on memory default, swappable Redis-compatible backends, a low-level wrap primitive, and automatic query-result invalidation. |

package/templates/agent-docs/_index.md

@@ -9,7 +9,7 @@ each plugin's own README.
 
 | Topic | Open | Summary |
 |---|---|---|
-| **What's new in 0.61.0** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
+| **What's new in 0.62.0** | `node_modules/@voltro/cli/templates/agent-docs/whats-new.md` | Everything that changed in this version. Read it before hand-rolling something the framework may now ship. |
 | AI | `node_modules/@voltro/cli/templates/agent-docs/ai.md` | How Voltro treats AI — agents, tools, streaming, RAG — all primitives over the same WebSocket as the rest of the framework. |
 | Authentication | `node_modules/@voltro/cli/templates/agent-docs/authentication.md` | How @voltro/plugin-auth wires password + session-cookie auth across api + web, plus the pluggable identity-strategy protocol. |
 | Caching | `node_modules/@voltro/cli/templates/agent-docs/caching.md` | Voltro's caching layer (@voltro/cache) — an always-on memory default, swappable Redis-compatible backends, a low-level wrap primitive, and automatic query-result invalidation. |

package/templates/agent-docs/ai.md

@@ -1303,6 +1303,38 @@ export default (input: { message: string }) =>
 
 `streamText` emits `AgentEvent` elements. The `_tag`s are: `token` (text delta), `reasoning` (the model's thinking, separate from the answer), `toolCall`, `toolResult`, `source` (a cited RAG/web source — `url` or `document` variant), `file` (an inline file the model produced, usually an image: `mediaType` + base64 `data`), `message`, `error` (carries `retryable`), and `done`. The stream NEVER fails — an upstream error arrives as a terminal `error` event.
 
+## Smooth Streaming
+
+Provider chunks are transport artifacts: one provider may send a word at a time while another releases a whole paragraph in a burst. Opt into server-side semantic smoothing when the UI should receive predictable word or line chunks:
+
+```ts
+streamText({
+  prompt: input.message,
+  smooth: {
+    chunking: 'word', // default; alternatively 'line'
+    delayMs: 10,      // default; null rechunks without adding delay
+  },
+})
+```
+
+`smooth` is framework-owned and deliberately narrower than the AI SDK's experimental transform surface. It smooths both text and reasoning, flushes pending content before tool/source/file/error/done events, and shares the stream's abort signal. Omit it or set `smooth: false` to preserve provider-native chunks and latency.
+
+With `resumableStreamText`, put `smooth` inside `options`. Smoothing happens before `AgentEvent` conversion and before the append-only journal, so a reconnect replays the exact same `SeqEvent` boundaries seen live:
+
+```ts
+resumableStreamText({
+  streamId: input.streamId,
+  store,
+  options: {
+    prompt: input.message,
+    smooth: { chunking: 'word', delayMs: 10 },
+  },
+  fromSeq: input.fromSeq,
+})
+```
+
+Smoothing changes only text/reasoning boundaries and timing. Content, usage, finish reason, tool ids, and cost accounting stay unchanged. The client should still batch rendering (for example, at most once per animation frame); server smoothing normalizes semantics, it does not replace UI backpressure.
+
 ## Cancel, retry
 
 A "Stop" button needs to end an in-flight run out of band. Pass a `streamId` and call `cancelStream(streamId)` from a separate action/mutation — it aborts the provider call (token spend stops) and the stream ends on a terminal, non-retryable `cancelled` error.

package/templates/agent-docs/observability.md

@@ -292,7 +292,9 @@ _Inspect traces and logs from the shell — flags, the --trace <id> end-to-end c
 
 ## `voltro logs`
 
-Every `voltro dev` / `voltro start` instance buffers the last **2000** server-side `@voltro/logger` records **and** every browser console line that the dev console bridge forwarded.
+Every `voltro dev` / `voltro start` instance buffers the last **2000** server-side `@voltro/logger` records. During `voltro dev`, the browser console bridge also forwards browser console lines into that buffer.
+
+The browser-to-inspect bridges are deliberately limited to development builds. Setting `localStorage.framework_debug = '1'` in a production bundle enables the local `[fw …]` connection timeline only; it never starts `clientLog` POSTs or an inspect `EventSource`. In development, both diagnostic transports are single-flight, rate-limited, and bounded: permanent `4xx` responses disable them for the page, while transient failures use exponential backoff and open a circuit after five consecutive failures. The SSE relay probes status and content type before creating an `EventSource`, then explicitly closes a failed source before a bounded retry.
 
 ```sh
 voltro logs                                # last 100 from every running process
@@ -630,6 +632,13 @@ proxy path, cleared the moment the stream opens; the proxy moves it into an
 `Authorization` header. Nothing about the token ever appears in a URL, and the
 app receives a header like any other caller.
 
+That dashboard proxy is also why a production app page must not open the
+inspect stream merely because `localStorage.framework_debug` is set. The app
+page has no bearer-capable `EventSource` transport and no authority to mint the
+dashboard cookie. Voltro therefore keeps its in-page console and SSE relays
+development-only; the persisted production flag affects local framework
+console output, not inspect traffic.
+
 ## In the dashboards
 
 Both dashboards unwrap `.data` in their fetch layer and keep the envelope. A

package/templates/agent-docs/whats-new.md

@@ -1,4 +1,4 @@
-# What's new in 0.61.0
+# What's new in 0.62.0
 
 Read this FIRST when a task touches an area you have not worked in recently.
 It is the cheapest way to notice that the framework grew the thing you were
@@ -9,21 +9,14 @@ BREAKING entries name a codemod; run `voltro update` to apply it.
 
 ### ⚠ BREAKING
 
-- **@voltro/client, @voltro/web, @voltro/cli** — `RpcError.kind` now distinguishes transport, handler, client, and unknown failures; manually emitted events must add the field, while `useConnectionStatus` now degrades only for transport failures and clears on the next rpc success.
+- **@voltro/workflow, @voltro/cli, @voltro/voltro** — `timeouts.finish` now filters running rows by the declared workflow, durably cancels each run before notification, and emits `onFailure` only for the successful terminal transition. Finish-timeout reports carry the run's stable `runId`, `executionId`, and original payload; handler-start logs expose the returned status instead of unconditionally claiming a new start.
 
-  **`voltro update` carries you across this** — codemod `0.61.0/01_rpc_errors_have_kinds`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.61.0).
-- **@voltro/plugin-sentry, @voltro/cli** — Browser RPC spans now join the active page/navigation transaction and link to the Effect/server trace instead of creating one root transaction per call; `tracesSampleRate`, `browserTracing`, and the new `rpcSpans` switch control the resulting browser trace volume.
+  Low-level adapters that construct `AdmissionDrainDeps` must update `cancelRun` to accept the run object and return whether it made the terminal transition, and return the run identity, workflow name, and payload from `listRunningRuns`. Ordinary workflow declarations need no source change; `voltro update` prints the adapter migration only when the project references this low-level surface.
 
-  **`voltro update` carries you across this** — codemod `0.61.0/02_sentry_rpc_spans_join_page`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.61.0).
+### Added
 
-### Fixed
-
-- **@voltro/cli** — **Six SSR failure sites report to Sentry, not three.**
-
-  0.60.0 gave the web server its own Sentry and wired the three loud sites: the SSR shell throw, the SPA layout shell throw, and the general render error (which covers a loader throw). The docs said "shell throw, loader throw, PPR/SWR refresh" — and an enumeration in a claim is read as exhaustive.
+- **@voltro/ai** — `streamText` and `resumableStreamText` now accept an opt-in `smooth` configuration for word- or line-based text and reasoning chunks. Smoothing runs before resumable journaling, preserves provider-native behavior when omitted, and shares the stream abort signal so cancellation also stops a pending smoothing delay.
 
-  The other three were `warn`-level and reported to nobody: a failed PPR hole pass, a failed background SWR refresh, and a `not-found.tsx` that throws while rendering. They are quieter because the request still serves something — stale HTML, an unfilled hole, a plain 404 — which says something about the REQUEST and nothing about who else could find out. The answer to that is nobody: none of them reaches a browser boundary, so the pod's stdout was the only record.
-
-  They carry their own `voltro.stage` (`not-found-render`, `ppr-holes`, `swr-refresh`), so a quota-conscious project can drop them by stage without losing the three that fail the request.
+### Fixed
 
-  `webSentry.test.ts` now fails if a render-path `log.error`/`log.warn` gains no reporter beside it — the property, rather than the six call sites.
+- **@voltro/web** — Production `framework_debug` now enables local framework diagnostics without opening browser-to-inspect HTTP or SSE transports. Development log relays are single-flight and rate-limited, classify permanent response failures, back off transient failures, expose dropped-log counts, and open a page-scoped circuit after repeated failure; the SSE relay also probes the endpoint before creating an `EventSource` and closes failed sources before retrying.

package/templates/agent-docs/workflows.md

@@ -1459,7 +1459,7 @@ timeouts: { start: '1 hour', finish: '10 minutes' }
 - **`start`** bounds how long a start may sit in the admission queue, measured from the **first** arrival in its group. A debounced run that never gets a quiet moment is a job that silently did not happen.
 - **`finish`** bounds the run itself once admitted, and also tightens the crash backstop on its concurrency slot.
 
-Both expire into the same path as an exhausted retry: the run is recorded failed and `onFailure` fires. Declaring `timeouts.start` on a workflow that cannot defer is a boot error — it would never fire.
+Both reach the same `onFailure` signal as an exhausted retry. `timeouts.start` removes the queued intent before a run exists. `timeouts.finish` durably changes the running row to `cancelled`; only the sweep call that wins that terminal transition emits `onFailure`. Seeing the same old row again does not emit another report. Declaring `timeouts.start` on a workflow that cannot defer is a boot error — it would never fire.
 
 ## onFailure — the signal that replaces the sweep
 
@@ -1494,10 +1494,15 @@ export const narrationFailed = workflow({
     failedAt: Schema.Number,
   }),
   success: Schema.Void,
-  idempotencyKey: ({ runId, failedAt }) => `failed:${runId ?? 'none'}:${failedAt}`,
+  idempotencyKey: ({ workflow, runId, failedAt }) =>
+    runId === null ? `failed-before-run:${workflow}:${failedAt}` : `failed-run:${runId}`,
 })
 ```
 
+For failures of an existing run — including `timeouts.finish` — `runId`, `executionId`, and the original `payload` are populated. Use `runId` as the stable idempotency identity. Pre-run failures (`timeouts.start` and a queued start whose workflow was removed) have both IDs set to `null`; they are emitted once when their durable pending row is consumed.
+
+The framework logs the result of starting the handler as `workflow onFailure start resolved`. Its metadata includes `startStatus`, `handlerRunId`, and `handlerExecutionId`, so a queued, dropped, or singleton-skipped start is not mislabeled as newly started.
+
 There is no `onFailure` for an `onFailure` — a handler that fails is logged and not re-notified, because the alternative is one run per failure per level with no floor.
 
 ## encryptSteps

package/templates/apps/api-ai/package.json

@@ -12,12 +12,12 @@
   "dependencies": {
     "@effect/platform": "^0.97.0",
     "@effect/rpc": "^0.76.0",
-    "@voltro/ai": "0.61.0",
-    "@voltro/cli": "0.61.0",
-    "@voltro/database": "0.61.0",
-    "@voltro/env": "0.61.0",
-    "@voltro/protocol": "0.61.0",
-    "@voltro/runtime": "0.61.0",
+    "@voltro/ai": "0.62.0",
+    "@voltro/cli": "0.62.0",
+    "@voltro/database": "0.62.0",
+    "@voltro/env": "0.62.0",
+    "@voltro/protocol": "0.62.0",
+    "@voltro/runtime": "0.62.0",
     "effect": "^3.22.0"
   },
   "devDependencies": {

package/templates/apps/api-auth/package.json

@@ -13,17 +13,17 @@
   "dependencies": {
     "@effect/platform": "^0.97.0",
     "@effect/rpc": "^0.76.0",
-    "@voltro/cli": "0.61.0",
-    "@voltro/database": "0.61.0",
-    "@voltro/env": "0.61.0",
-    "@voltro/plugin-auth": "0.61.0",
-    "@voltro/protocol": "0.61.0",
-    "@voltro/runtime": "0.61.0",
-    "@voltro/sql-postgres": "0.61.0",
+    "@voltro/cli": "0.62.0",
+    "@voltro/database": "0.62.0",
+    "@voltro/env": "0.62.0",
+    "@voltro/plugin-auth": "0.62.0",
+    "@voltro/protocol": "0.62.0",
+    "@voltro/runtime": "0.62.0",
+    "@voltro/sql-postgres": "0.62.0",
     "effect": "^3.22.0"
   },
   "devDependencies": {
-    "@voltro/testing": "0.61.0",
+    "@voltro/testing": "0.62.0",
     "typescript": "^6.0.3",
     "@vitest/coverage-v8": "^4.1.10",
     "vitest": "^4.1.10"

package/templates/apps/api-backend/package.json

@@ -16,16 +16,16 @@
   "dependencies": {
     "@effect/platform": "^0.97.0",
     "@effect/rpc": "^0.76.0",
-    "@voltro/cli": "0.61.0",
-    "@voltro/database": "0.61.0",
-    "@voltro/env": "0.61.0",
-    "@voltro/plugin-multitenancy": "0.61.0",
-    "@voltro/protocol": "0.61.0",
-    "@voltro/runtime": "0.61.0",
+    "@voltro/cli": "0.62.0",
+    "@voltro/database": "0.62.0",
+    "@voltro/env": "0.62.0",
+    "@voltro/plugin-multitenancy": "0.62.0",
+    "@voltro/protocol": "0.62.0",
+    "@voltro/runtime": "0.62.0",
     "effect": "^3.22.0"
   },
   "devDependencies": {
-    "@voltro/testing": "0.61.0",
+    "@voltro/testing": "0.62.0",
     "typescript": "^6.0.3",
     "@vitest/coverage-v8": "^4.1.10",
     "vitest": "^4.1.10"

package/templates/apps/api-backend-deactivation/package.json

@@ -13,16 +13,16 @@
   "dependencies": {
     "@effect/platform": "^0.97.0",
     "@effect/rpc": "^0.76.0",
-    "@voltro/cli": "0.61.0",
-    "@voltro/database": "0.61.0",
-    "@voltro/env": "0.61.0",
-    "@voltro/plugin-deactivation": "0.61.0",
-    "@voltro/protocol": "0.61.0",
-    "@voltro/runtime": "0.61.0",
+    "@voltro/cli": "0.62.0",
+    "@voltro/database": "0.62.0",
+    "@voltro/env": "0.62.0",
+    "@voltro/plugin-deactivation": "0.62.0",
+    "@voltro/protocol": "0.62.0",
+    "@voltro/runtime": "0.62.0",
     "effect": "^3.22.0"
   },
   "devDependencies": {
-    "@voltro/testing": "0.61.0",
+    "@voltro/testing": "0.62.0",
     "typescript": "^6.0.3",
     "@vitest/coverage-v8": "^4.1.10",
     "vitest": "^4.1.10"