@voltro/cli 0.7.0 → 0.8.0

package/dist/{commands-BHdc71DG.js → commands-DT4PipBz.js}

@@ -1,9 +1,9 @@
-import { _t as e, a as t, b as n, bt as r, c as i, d as a, dt as o, f as s, ft as c, g as l, gt as u, h as d, ht as f, i as p, l as m, mt as h, o as g, pt as _, u as v, ut as y, v as ee, vt as te, yt as ne } from "./inspectMetrics-BLUBAWLb.js";
-import { n as re, t as ie } from "./start-CWZW_4Et.js";
-import { $ as ae, B as oe, L as se, R as ce, V as le, ct as ue, i as de, l as fe, n as pe, o as me, ot as he, p as ge, tt as _e, ut as ve, z as ye } from "./dev-Bqyq62Ak.js";
+import { C as e, Ct as t, St as n, T as r, Tt as i, _ as a, _t as o, a as s, b as c, bt as l, d as u, f as d, gt as f, ht as p, l as m, o as h, s as g, u as _, vt as v, wt as y, x as ee, xt as te, yt as ne } from "./inspectMetrics-EK0CcHyu.js";
+import { n as re, t as ie } from "./start-DuyBQxW3.js";
+import { $ as ae, B as oe, L as se, R as ce, V as le, ct as ue, i as de, l as fe, n as pe, o as me, ot as he, p as ge, tt as _e, ut as ve, z as ye } from "./dev-Ga65K4jc.js";
 import { a as b, c as be, i as xe, o as Se, s as Ce } from "./devActivity-1WtIVyHc.js";
-import { a as we, t as Te } from "./apiBuild-deIjJKJm.js";
-import { n as Ee, r as De } from "./serveCommand-Dn6--0Bv.js";
+import { a as we, t as Te } from "./apiBuild-OrDkXGFX.js";
+import { n as Ee, r as De } from "./serveCommand-CR5xnYZt.js";
 import { basename as x, dirname as S, isAbsolute as Oe, join as C, relative as w, resolve as T } from "node:path";
 import { fileURLToPath as ke, pathToFileURL as Ae } from "node:url";
 import { FileSystem as je } from "@effect/platform";
@@ -344,35 +344,35 @@ external scheduler owns the once-only guarantee.
 	let n = e.replace("<div id=\"root\"></div>", `<div id="root">${t.body}</div>`), r = [
 		t.metaHtml,
 		`<meta name="voltro-interactive" content="${t.interactive}" />`,
-		`<script type="application/json" id="__voltro_state__">${t.stateJson}<\/script>`
+		t.stateScript
 	].filter((e) => e.length > 0).join("\n    ");
 	return n = n.replace("</head>", `    ${r}\n  </head>`), t.interactive === "none" && (n = In(n)), n;
-}, Rn = async (t) => {
-	let { root: n, distDir: r, pages: i, dirs: a, vite: o } = t, s = C(r, "index.html"), c = await M.readFile(s, "utf8"), l = C(r, "_voltro", "shell.html");
-	await M.mkdir(S(l), { recursive: !0 }), await M.writeFile(l, c, "utf8");
-	let u = C(n, "node_modules", "@voltro", "ui-shadcn"), d = A(C(u, "package.json")) ? u : null, f = [...d ? [
+}, Rn = async (e) => {
+	let { root: t, distDir: r, pages: i, dirs: a, vite: o } = e, c = C(r, "index.html"), l = await M.readFile(c, "utf8"), u = C(r, "_voltro", "shell.html");
+	await M.mkdir(S(u), { recursive: !0 }), await M.writeFile(u, l, "utf8");
+	let d = C(t, "node_modules", "@voltro", "ui-shadcn"), f = A(C(d, "package.json")) ? d : null, p = [...f ? [
 		{
 			find: "@voltro/ui-shadcn/tokens.css",
-			replacement: C(d, "src/tokens.css")
+			replacement: C(f, "src/tokens.css")
 		},
 		{
 			find: "@voltro/ui-shadcn/cn",
-			replacement: C(d, "src/cn.ts")
+			replacement: C(f, "src/cn.ts")
 		},
 		{
 			find: "@voltro/ui-shadcn/brand",
-			replacement: C(d, "src/brand/voltroLogo.tsx")
+			replacement: C(f, "src/brand/voltroLogo.tsx")
 		},
 		{
 			find: "@voltro/ui-shadcn",
-			replacement: C(d, "src/index.ts")
+			replacement: C(f, "src/index.ts")
 		}
-	] : [], ...e(n)], m = await o.createServer({
-		root: C(n, ".framework"),
+	] : [], ...n(t)], m = await o.createServer({
+		root: C(t, ".framework"),
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
 		plugins: [(await import("@vitejs/plugin-react")).default(), (await import("@tailwindcss/vite")).default()],
 		resolve: {
-			alias: f,
+			alias: p,
 			dedupe: ["react", "react-dom"]
 		},
 		ssr: { noExternal: ["react-intl"] },
@@ -383,122 +383,130 @@ external scheduler owns the once-only guarantee.
 		},
 		appType: "custom",
 		logLevel: "warn"
-	}), { renderPageToHtml: h, renderMetaToHtml: g, serialiseStateForInlining: _ } = await m.ssrLoadModule("@voltro/web/ssr"), v = /* @__PURE__ */ new Map();
-	if (t.locales && t.locales.length > 0 && t.defaultLocale) try {
-		let e = (await m.ssrLoadModule("@voltro/i18n")).makeSsgWrap;
-		if (typeof e != "function") throw Error("@voltro/i18n is installed but missing the `makeSsgWrap` export — upgrade @voltro/i18n to a version that ships SSG support.");
-		for (let r of t.locales) try {
-			let i = await m.ssrLoadModule(C(n, "src", "locales", `${r}.ts`)), a = i.default ?? i;
-			v.set(r, e(r, a, t.defaultLocale));
+	}), { renderPageToHtml: h, renderMetaToHtml: g, renderRouterStateScript: _, isDeferredLoaderResult: v, assertDeferralSupported: y } = await m.ssrLoadModule("@voltro/web/ssr"), ee = /* @__PURE__ */ new Map();
+	if (e.locales && e.locales.length > 0 && e.defaultLocale) try {
+		let n = (await m.ssrLoadModule("@voltro/i18n")).makeSsgWrap;
+		if (typeof n != "function") throw Error("@voltro/i18n is installed but missing the `makeSsgWrap` export — upgrade @voltro/i18n to a version that ships SSG support.");
+		for (let r of e.locales) try {
+			let i = await m.ssrLoadModule(C(t, "src", "locales", `${r}.ts`)), a = i.default ?? i;
+			ee.set(r, n(r, a, e.defaultLocale));
 		} catch (e) {
 			z.warn(`i18n catalog missing for locale '${r}' — pages rendered at /${r}/* will crash. Add src/locales/${r}.ts.`, {}, e);
 		}
 	} catch (e) {
 		z.warn("i18n wrapper unavailable for SSG — pages that call useT() will fail. Check that @voltro/i18n is installed.", {}, e);
 	}
-	let y = [], ee = {};
-	for (let e of i) {
-		let i = `${C(n, "src", "pages", e.file)}`, o = await m.ssrLoadModule(i);
-		ee[e.pattern] = re(o);
-		let s = o.renderMode ?? "static";
-		if (s !== "static") {
+	let te = [], ne = {};
+	for (let n of i) {
+		let i = `${C(t, "src", "pages", n.file)}`, o = await m.ssrLoadModule(i);
+		ne[n.pattern] = re(o);
+		let c = o.renderMode ?? "static";
+		if (c !== "static") {
 			z.debug("skip page", {
-				pattern: e.pattern,
-				reason: `renderMode=${s}`
+				pattern: n.pattern,
+				reason: `renderMode=${c}`
 			});
 			continue;
 		}
-		let l;
-		if (Nn(e.pattern)) {
+		let u;
+		if (Nn(n.pattern)) {
 			if (typeof o.getStaticPaths != "function") {
 				z.debug("skip page", {
-					pattern: e.pattern,
+					pattern: n.pattern,
 					reason: "no getStaticPaths export"
 				});
 				continue;
 			}
 			try {
-				let t = await o.getStaticPaths();
-				if (!Array.isArray(t)) {
-					z.warn("skip page — getStaticPaths did not return an array", { pattern: e.pattern });
+				let e = await o.getStaticPaths();
+				if (!Array.isArray(e)) {
+					z.warn("skip page — getStaticPaths did not return an array", { pattern: n.pattern });
 					continue;
 				}
-				l = t.map((t) => ({
-					params: t.params,
-					pathname: Pn(e.pattern, t.params)
+				u = e.map((e) => ({
+					params: e.params,
+					pathname: Pn(n.pattern, e.params)
 				}));
-			} catch (t) {
-				z.warn("skip page — getStaticPaths threw", { pattern: e.pattern }, t);
+			} catch (e) {
+				z.warn("skip page — getStaticPaths threw", { pattern: n.pattern }, e);
 				continue;
 			}
-			if (l.length === 0) {
+			if (u.length === 0) {
 				z.debug("skip page", {
-					pattern: e.pattern,
+					pattern: n.pattern,
 					reason: "getStaticPaths returned []"
 				});
 				continue;
 			}
-		} else l = [{
+		} else u = [{
 			params: {},
-			pathname: e.pattern
+			pathname: n.pattern
 		}];
-		let u = p(a, e.dirChain), d = await Promise.all(u.map(async (e) => {
-			let t = e.dir === "" ? C(n, "src", "pages") : C(n, "src", "pages", e.dir), r = {};
-			return e.hasLayout && (r.Layout = (await m.ssrLoadModule(C(t, "layout.tsx"))).default), e.hasError && (r.Error = (await m.ssrLoadModule(C(t, "error.tsx"))).default), e.hasPending && (r.Pending = (await m.ssrLoadModule(C(t, "loading.tsx"))).default), {
+		let d = s(a, n.dirChain), f = await Promise.all(d.map(async (e) => {
+			let n = e.dir === "" ? C(t, "src", "pages") : C(t, "src", "pages", e.dir), r = {};
+			return e.hasLayout && (r.Layout = (await m.ssrLoadModule(C(n, "layout.tsx"))).default), e.hasError && (r.Error = (await m.ssrLoadModule(C(n, "error.tsx"))).default), e.hasPending && (r.Pending = (await m.ssrLoadModule(C(n, "loading.tsx"))).default), {
 				id: e.dir || "/",
 				...r
 			};
-		})), f = {
-			pattern: e.pattern,
+		})), p = {
+			pattern: n.pattern,
 			Component: o.default,
 			meta: o.meta,
 			loader: o.loader,
 			ErrorBoundary: o.ErrorBoundary,
 			Pending: o.Pending,
-			renderMode: s,
-			chain: d
-		}, te = o.interactive ?? "full";
-		for (let e of l) {
+			renderMode: c,
+			chain: f
+		}, ie = o.interactive ?? "full";
+		for (let t of u) {
 			let n = null;
 			if (typeof o.loader == "function") {
-				let t = new AbortController();
+				let e = new AbortController();
 				try {
 					n = await o.loader({
-						params: e.params,
-						pathname: e.pathname,
-						signal: t.signal
+						params: t.params,
+						pathname: t.pathname,
+						signal: e.signal
 					});
-				} catch (t) {
-					if (t instanceof Error && t._voltroControl === "redirect") throw Error(`Static page "${e.pathname}" threw RedirectError at build time. Static pages can't redirect per-request — switch it to renderMode 'ssr'.`);
-					if (t instanceof Error && t._voltroControl === "not-found") {
-						z.warn("loader threw NotFoundError at build time — skipping artifact", { pathname: e.pathname });
+				} catch (e) {
+					if (e instanceof Error && e._voltroControl === "redirect") throw Error(`Static page "${t.pathname}" threw RedirectError at build time. Static pages can't redirect per-request — switch it to renderMode 'ssr'.`);
+					if (e instanceof Error && e._voltroControl === "not-found") {
+						z.warn("loader threw NotFoundError at build time — skipping artifact", { pathname: t.pathname });
 						continue;
 					}
-					z.warn("loader threw, falling back to null", { pathname: e.pathname }, t);
+					z.warn("loader threw, falling back to null", { pathname: t.pathname }, e);
 				}
 			}
-			let i = e.params.locale ?? t.defaultLocale ?? "en", a = v.get(i) ?? v.get(t.defaultLocale ?? ""), { html: s, meta: l } = h({
-				descriptor: f,
-				params: e.params,
-				pathname: e.pathname,
+			v(n) && y({
+				page: t.pathname,
+				renderMode: c,
+				interactive: ie
+			});
+			let i = t.params.locale ?? e.defaultLocale ?? "en", a = ee.get(i) ?? ee.get(e.defaultLocale ?? ""), { html: s, meta: u } = h({
+				descriptor: p,
+				params: t.params,
+				pathname: t.pathname,
 				loaderData: n,
 				...a ? { outerWrap: a } : {},
 				locale: i
-			}), u = Ln(c, {
+			}), d = Ln(l, {
 				body: s,
-				metaHtml: g(l),
-				stateJson: _(n),
-				interactive: te
-			}), d = Fn(r, e.pathname);
-			await M.mkdir(S(d), { recursive: !0 }), await M.writeFile(d, u, "utf8"), y.push({
-				pattern: e.pathname,
-				outPath: d
+				metaHtml: g(u),
+				stateScript: _({
+					loaderData: n,
+					pageLoaderRan: typeof o.loader == "function"
+				}),
+				interactive: ie
+			}), f = Fn(r, t.pathname);
+			await M.mkdir(S(f), { recursive: !0 }), await M.writeFile(f, d, "utf8"), te.push({
+				pattern: t.pathname,
+				outPath: f
 			});
 		}
 	}
 	return await m.close(), {
-		rendered: y,
-		pageMeta: ee
+		rendered: te,
+		pageMeta: ne
 	};
 }, zn = async (e, t, n, r, i, a) => {
 	let o = C(e, ".framework"), s = [];
@@ -530,12 +538,12 @@ external scheduler owns the once-only guarantee.
 		"  const locale = resolveLocale({ cookieHeader: cookieHeader ?? null, acceptLanguageHeader: acceptLanguageHeader ?? null, supported: __I18N_SUPPORTED, defaultLocale: __I18N_DEFAULT })",
 		"  return { locale, outerWrap: __i18nWraps[locale] ?? __i18nWraps[__I18N_DEFAULT] }",
 		"}"
-	] : [], g = p ? "export const helpers = { renderPageToHtml, renderMetaToHtml, serialiseStateForInlining, parseCookieHeader, i18n: { resolve: __resolveI18n } }" : "export const helpers = { renderPageToHtml, renderMetaToHtml, serialiseStateForInlining, parseCookieHeader }", _ = [
+	] : [], g = "renderPageToHtml, renderPageToStream, renderMetaToHtml, renderRouterStateScript, renderDeferredRegistryScript, prepareDeferredLoaderData, assertDeferralSupported, parseCookieHeader", _ = p ? `export const helpers = { ${g}, i18n: { resolve: __resolveI18n } }` : `export const helpers = { ${g} }`, v = [
 		"// GENERATED BY `voltro build` — do not edit; will be overwritten on next build.",
 		"// Entry for the pre-built SSR bundle. Imported by `voltro start`'s",
 		"// production runtime; bypasses Vite middleware-mode SSR loading.",
 		"",
-		"import { renderPageToHtml, renderMetaToHtml, serialiseStateForInlining, parseCookieHeader } from '@voltro/web/ssr'",
+		"import { renderPageToHtml, renderPageToStream, renderMetaToHtml, renderRouterStateScript, renderDeferredRegistryScript, prepareDeferredLoaderData, assertDeferralSupported, parseCookieHeader } from '@voltro/web/ssr'",
 		...m,
 		"",
 		"// Lazy page loaders — a page's module (and content) loads only when its",
@@ -557,20 +565,20 @@ external scheduler owns the once-only guarantee.
 		"}",
 		...h,
 		"",
-		g,
+		_,
 		""
-	].join("\n"), v = C(o, "ssrEntry.ts");
-	return await M.writeFile(v, _, "utf8"), v;
-}, Bn = async (n) => {
-	let r = await t(n);
-	if (!r) {
-		let { loadApiConfig: e } = await import("./dev-BYfrYwrT.js"), t = await e(n);
-		if (t) {
-			z.info("building api app", { app: t.name ?? "(unnamed)" });
-			let { runApiBuild: e, runServeBundleBuild: r } = await import("./apiBuild-CSM74oEZ.js");
-			await e(n);
+	].join("\n"), y = C(o, "ssrEntry.ts");
+	return await M.writeFile(y, v, "utf8"), y;
+}, Bn = async (e) => {
+	let t = await h(e);
+	if (!t) {
+		let { loadApiConfig: t } = await import("./dev-Ca1jdwnt.js"), n = await t(e);
+		if (n) {
+			z.info("building api app", { app: n.name ?? "(unnamed)" });
+			let { runApiBuild: t, runServeBundleBuild: r } = await import("./apiBuild-CmtI6Ygh.js");
+			await t(e);
 			try {
-				await r(n);
+				await r(e);
 			} catch (e) {
 				return z.fatal("serve bundle build FAILED — refusing to ship a bundle-less image. Fix the error above (production serves from the bundle, never tsx).", {}, e), {
 					ran: !0,
@@ -587,82 +595,82 @@ external scheduler owns the once-only guarantee.
 			exitCode: 0
 		};
 	}
-	z.info("building web app", { app: r.name ?? "(unnamed)" });
-	let { resolved: i } = await _({
-		rawEnv: r.env,
+	z.info("building web app", { app: t.name ?? "(unnamed)" });
+	let { resolved: r } = await v({
+		rawEnv: t.env,
 		appType: "web",
-		root: n,
+		root: e,
 		log: z,
 		generateTypes: !0
 	});
-	await a(n, r, await g(n, r), i.publicValues);
-	let { pages: o } = await v(C(n, "src", "pages"));
-	await c({
-		appRoot: n,
-		pages: o,
+	await d(e, t, await g(e, t), r.publicValues);
+	let { pages: i } = await u(C(e, "src", "pages"));
+	await o({
+		appRoot: e,
+		pages: i,
 		mode: "prod"
 	});
-	let s = C(n, ".framework"), l = C(s, "dist"), d = C(n, "node_modules", "@voltro", "ui-shadcn"), f = A(C(d, "package.json")) ? d : null, p = [...f ? [
+	let a = C(e, ".framework"), s = C(a, "dist"), c = C(e, "node_modules", "@voltro", "ui-shadcn"), l = A(C(c, "package.json")) ? c : null, f = [...l ? [
 		{
 			find: "@voltro/ui-shadcn/tokens.css",
-			replacement: C(f, "src/tokens.css")
+			replacement: C(l, "src/tokens.css")
 		},
 		{
 			find: "@voltro/ui-shadcn/cn",
-			replacement: C(f, "src/cn.ts")
+			replacement: C(l, "src/cn.ts")
 		},
 		{
 			find: "@voltro/ui-shadcn/brand",
-			replacement: C(f, "src/brand/voltroLogo.tsx")
+			replacement: C(l, "src/brand/voltroLogo.tsx")
 		},
 		{
 			find: "@voltro/ui-shadcn",
-			replacement: C(f, "src/index.ts")
+			replacement: C(l, "src/index.ts")
 		}
-	] : [], ...e(n)];
+	] : [], ...n(e)];
 	z.info("running vite build");
-	let h = await u("vite", () => import("vite")), y = (await import("@vitejs/plugin-react")).default, ee = (await import("@tailwindcss/vite")).default;
-	await h.build({
-		root: s,
+	let p = await te("vite", () => import("vite")), m = (await import("@vitejs/plugin-react")).default, y = (await import("@tailwindcss/vite")).default;
+	await p.build({
+		root: a,
 		envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
-		plugins: [y(), ee()],
+		plugins: [m(), y()],
 		resolve: {
-			alias: p,
+			alias: f,
 			dedupe: ["react", "react-dom"]
 		},
-		publicDir: C(n, "public"),
+		publicDir: C(e, "public"),
 		build: {
 			outDir: "dist",
 			emptyOutDir: !0,
-			rollupOptions: { output: { manualChunks: m } }
+			rollupOptions: { output: { manualChunks: _ } }
 		},
 		logLevel: "warn"
 	});
-	let te = C(n, "src", "pages"), { pages: ne, dirs: re } = await v(te);
+	let ee = C(e, "src", "pages"), { pages: ne, dirs: re } = await u(ee);
 	if (ne.length === 0) return z.info("no pages found — client-only bundle written", {
-		pagesDir: te,
-		distDir: l
+		pagesDir: ee,
+		distDir: s
 	}), {
 		ran: !0,
 		exitCode: 0
 	};
 	let { rendered: ie, pageMeta: ae } = await Rn({
-		root: n,
-		distDir: l,
+		root: e,
+		distDir: s,
 		pages: ne,
 		dirs: re,
-		vite: h,
-		...r.locales ? { locales: r.locales } : {},
-		...r.defaultLocale ? { defaultLocale: r.defaultLocale } : {}
+		vite: p,
+		...t.locales ? { locales: t.locales } : {},
+		...t.defaultLocale ? { defaultLocale: t.defaultLocale } : {}
 	});
-	z.info("generating .framework/ssrEntry.ts"), await zn(n, ne, re, r.locales, r.defaultLocale, ae), z.info("vite build --ssr → dist/server/");
+	z.info("generating .framework/ssrEntry.ts"), await zn(e, ne, re, t.locales, t.defaultLocale, ae), z.info("vite build --ssr → dist/server/");
 	try {
-		await h.build({
-			root: s,
+		await p.build({
+			root: a,
 			envPrefix: "__VOLTRO_VITE_ENV_DISABLED__",
-			plugins: [y(), ee()],
+			plugins: [m(), y()],
 			resolve: {
-				alias: p,
+				alias: f,
 				dedupe: ["react", "react-dom"]
 			},
 			ssr: { noExternal: ["react-intl"] },
@@ -680,20 +688,20 @@ external scheduler owns the once-only guarantee.
 			exitCode: 1
 		};
 	}
-	let oe = C(n, "app.config.ts");
+	let oe = C(e, "app.config.ts");
 	if (A(oe)) {
 		z.info("precompiling app.config.ts → dist/server/appConfig.js");
 		try {
-			await (await u("esbuild", () => import("esbuild"))).build({
+			await (await te("esbuild", () => import("esbuild"))).build({
 				entryPoints: [oe],
-				outfile: C(l, "server", "appConfig.js"),
+				outfile: C(s, "server", "appConfig.js"),
 				bundle: !0,
 				format: "esm",
 				platform: "node",
 				packages: "external",
-				absWorkingDir: n,
+				absWorkingDir: e,
 				logLevel: "silent",
-				...A(C(n, "tsconfig.json")) ? { tsconfig: C(n, "tsconfig.json") } : {}
+				...A(C(e, "tsconfig.json")) ? { tsconfig: C(e, "tsconfig.json") } : {}
 			});
 		} catch (e) {
 			return z.fatal("app.config precompile FAILED — production `voltro start` would need the tsx loader to read it.", {}, e), {
@@ -707,19 +715,19 @@ external scheduler owns the once-only guarantee.
 		routes: ie.map((e) => e.pattern)
 	});
 	try {
-		let e = await jn(n);
-		await M.writeFile(C(l, ".voltro-build.json"), JSON.stringify({
+		let t = await jn(e);
+		await M.writeFile(C(s, ".voltro-build.json"), JSON.stringify({
 			version: 1,
-			profile: e
+			profile: t
 		}, null, 2), "utf8"), z.info("wrote deploy profile manifest", {
-			staticSafe: e.staticSafe,
-			ssr: e.counts.ssr,
-			isr: e.counts.isr
+			staticSafe: t.staticSafe,
+			ssr: t.counts.ssr,
+			isr: t.counts.isr
 		});
 	} catch (e) {
 		z.warn("could not write .voltro-build.json deploy manifest", {}, e);
 	}
-	return z.info("build complete", { distDir: l }), {
+	return z.info("build complete", { distDir: s }), {
 		ran: !0,
 		exitCode: 0
 	};
@@ -729,7 +737,7 @@ external scheduler owns the once-only guarantee.
 		catch: (e) => e
 	}).pipe(E.orDie);
 	return t.ran ? t.exitCode : (yield* E.logError("no web app found at this path", { hint: "looked for app.config.ts with `type: 'web'`" }), 1);
-}), Hn = async (e) => r(Vn(e.find((e) => !e.startsWith("-")) ?? process.cwd()), { scope: "voltro:build" }), Un = (e) => e.source === void 0 ? [] : typeof e.source == "string" ? [e.source] : e.source, Wn = (e) => ({
+}), Hn = async (e) => i(Vn(e.find((e) => !e.startsWith("-")) ?? process.cwd()), { scope: "voltro:build" }), Un = (e) => e.source === void 0 ? [] : typeof e.source == "string" ? [e.source] : e.source, Wn = (e) => ({
 	tables: new Set(e.tables),
 	procedures: new Map(e.procedures.map((e) => [e.tag, e])),
 	scopes: new Set(e.scopes ?? []),
@@ -998,7 +1006,7 @@ external scheduler owns the once-only guarantee.
 			error: t.message || String(t)
 		};
 	}
-}, lr = async (e) => (await n()).apps.filter((t) => t.kind === "api" && t.status === "live" && t.url.length > 0 && (e === void 0 || t.name === e)), ur = (e) => {
+}, lr = async (e) => (await r()).apps.filter((t) => t.kind === "api" && t.status === "live" && t.url.length > 0 && (e === void 0 || t.name === e)), ur = (e) => {
 	let t = "pretty", n = [];
 	for (let r = 0; r < e.length; r++) {
 		let i = e[r];
@@ -1070,10 +1078,10 @@ external scheduler owns the once-only guarantee.
 	let n = e.indexOf(t);
 	return n >= 0 ? e[n + 1] : void 0;
 }, _r = async (e) => {
-	process.env[s] = "1";
+	process.env[a] = "1";
 	let t = gr(e, "--port") ?? process.env.VOLTRO_DASHBOARD_PORT ?? "5179";
 	process.env.VOLTRO_DASHBOARD_PORT = t;
-	let n = d(process.cwd());
+	let n = c(process.cwd());
 	if (!n) return hr.error("dashboard app not found. Install it with `pnpm add @voltro/dashboard`, or set VOLTRO_DASHBOARD_PATH to a dashboard app directory."), 1;
 	let r = A(C(n, ".framework", "dist", "index.html"));
 	return hr.info(`serving the Voltro dashboard on :${t}`, {
@@ -1329,7 +1337,7 @@ external scheduler owns the once-only guarantee.
 		id: "hand-serialized-date",
 		scope: "server",
 		smell: "Date converted by hand on the way out of a handler",
-		use: "rowSchema(table) in the descriptor's output — `output` IS the serializer (it is the rpc success schema), so a Date column declared as a Date crosses as epoch ms on its own; declaring Schema.Number describes the WIRE type and leaves nothing to convert",
+		use: "timestampMs / timestampMsOrNull from @voltro/database/wire in the descriptor's output struct — `output` IS the serializer (it is the rpc success schema), so a Date field declared as timestampMs crosses as epoch ms on its own; declaring Schema.Number describes the WIRE type and leaves nothing to convert",
 		match: (e) => /\.(getTime|toISOString)\s*\(\s*\)/.test(e) && /\.map\s*\(|=>\s*\(\{/.test(e) && /\bexport\s+default\b/.test(e)
 	}
 ], jr = [
@@ -1607,7 +1615,7 @@ external scheduler owns the once-only guarantee.
 }, Yr = (e) => E.tryPromise({
 	try: () => Jr(e),
 	catch: (e) => e
-}).pipe(E.orDie), Xr = async (e) => r(Yr(T(e.find((e) => !e.startsWith("-")) ?? process.cwd())), { scope: "voltro:e2e" }), Zr = (e) => {
+}).pipe(E.orDie), Xr = async (e) => i(Yr(T(e.find((e) => !e.startsWith("-")) ?? process.cwd())), { scope: "voltro:e2e" }), Zr = (e) => {
 	let t = {
 		tail: 100,
 		since: void 0,
@@ -1700,9 +1708,9 @@ external scheduler owns the once-only guarantee.
 }, ei = async (e) => {
 	let t = Zr(e);
 	if ("error" in t) return t.error !== "help" && console.error(`voltro logs: ${t.error}`), $r(), t.error === "help" ? 0 : 2;
-	let r = await n(), i = t.process === void 0 ? r.apps : r.apps.filter((e) => e.name === t.process);
+	let n = await r(), i = t.process === void 0 ? n.apps : n.apps.filter((e) => e.name === t.process);
 	if (i.length === 0 && t.process !== void 0) {
-		let e = l(t.process);
+		let e = ee(t.process);
 		e !== void 0 && (i = [{
 			id: `orphan:${t.process}`,
 			name: t.process,
@@ -1718,7 +1726,7 @@ external scheduler owns the once-only guarantee.
 	if (i.length === 0) {
 		if (t.process !== void 0) {
 			console.error(`voltro logs: no running process named '${t.process}' and no orphan log file found`), console.error("  active processes:");
-			for (let e of r.apps) console.error(`    - ${e.name} (${e.kind} @ ${e.url})`);
+			for (let e of n.apps) console.error(`    - ${e.name} (${e.kind} @ ${e.url})`);
 			return 1;
 		}
 		return console.error("voltro logs: no running voltro process found"), console.error("  start one with 'voltro dev' (or 'voltro start') and try again."), 1;
@@ -1769,24 +1777,24 @@ external scheduler owns the once-only guarantee.
 	} catch (n) {
 		return ni(e, t, n.message || String(n));
 	}
-}, ni = async (e, t, n) => {
-	if (!e.logFile) return {
+}, ni = async (t, n, r) => {
+	if (!t.logFile) return {
 		kind: "err",
-		name: e.name,
-		error: `${n} (no logFile on entry)`
+		name: t.name,
+		error: `${r} (no logFile on entry)`
 	};
 	try {
-		let n = t.since, r = { max: t.tail };
-		n !== void 0 && (r.since = n);
-		let i = await ee(e.logFile, r), a = [], o = {
+		let r = n.since, i = { max: n.tail };
+		r !== void 0 && (i.since = r);
+		let a = await e(t.logFile, i), o = [], s = {
 			trace: 0,
 			debug: 1,
 			info: 2,
 			warn: 3,
 			error: 4,
 			fatal: 5
-		}, s = t.level === void 0 ? 0 : o[t.level], c = t.scope?.toLowerCase(), l = t.source, u = t.filter?.toLowerCase(), d = t.traceId;
-		for (let e of i) o[e.level] < s || l !== void 0 && e.source !== l || c !== void 0 && (e.scope === void 0 || !e.scope.toLowerCase().includes(c)) || u !== void 0 && !e.message.toLowerCase().includes(u) || d !== void 0 && e.fields.traceId !== d || a.push({
+		}, c = n.level === void 0 ? 0 : s[n.level], l = n.scope?.toLowerCase(), u = n.source, d = n.filter?.toLowerCase(), f = n.traceId;
+		for (let e of a) s[e.level] < c || u !== void 0 && e.source !== u || l !== void 0 && (e.scope === void 0 || !e.scope.toLowerCase().includes(l)) || d !== void 0 && !e.message.toLowerCase().includes(d) || f !== void 0 && e.fields.traceId !== f || o.push({
 			ts: e.ts,
 			level: e.level,
 			source: e.source,
@@ -1794,20 +1802,20 @@ external scheduler owns the once-only guarantee.
 			fields: e.fields,
 			...e.scope === void 0 ? {} : { scope: e.scope }
 		});
-		let f = a.length > t.tail ? a.slice(a.length - t.tail) : a;
+		let p = o.length > n.tail ? o.slice(o.length - n.tail) : o;
 		return {
 			kind: "ok",
-			name: e.name,
-			records: f.map((t) => ({
-				...t,
-				process: e.name
+			name: t.name,
+			records: p.map((e) => ({
+				...e,
+				process: t.name
 			}))
 		};
-	} catch (t) {
+	} catch (e) {
 		return {
 			kind: "err",
-			name: e.name,
-			error: `${n}; file read failed: ${t.message || String(t)}`
+			name: t.name,
+			error: `${r}; file read failed: ${e.message || String(e)}`
 		};
 	}
 }, ri = {
@@ -1903,7 +1911,7 @@ external scheduler owns the once-only guarantee.
 }, vi = async (e) => {
 	let t = await hi(e);
 	if (!t) return H.error("no app.config.ts found in the current directory"), 1;
-	let n = y(t.name, t.input), r = `${gi("KEY", 32)} ${gi("OWNER", 16)} ${gi("ACCESS", 8)} ${gi("REQ", 4)} SET`;
+	let n = p(t.name, t.input), r = `${gi("KEY", 32)} ${gi("OWNER", 16)} ${gi("ACCESS", 8)} ${gi("REQ", 4)} SET`;
 	H.info(`env manifest — ${n.app} (${n.summary.total} vars, ${n.summary.set} set)`), _i(r);
 	for (let e of n.entries) {
 		let t = e.isSet ? "✓" : e.satisfied ? "·" : "✗";
@@ -1913,7 +1921,7 @@ external scheduler owns the once-only guarantee.
 }, yi = async (e, t) => {
 	let n = await hi(e);
 	if (!n) return H.error("no app.config.ts found in the current directory"), 1;
-	let r = o(n.input, ["Environment for this app — generated from app.config.ts `env` + plugin declarations.", "Regenerate with `voltro env sync`. Copy to `.env` and fill in the blanks."]), i = C(e, ".env.example"), a = await M.readFile(i, "utf8").catch(() => null);
+	let r = f(n.input, ["Environment for this app — generated from app.config.ts `env` + plugin declarations.", "Regenerate with `voltro env sync`. Copy to `.env` and fill in the blanks."]), i = C(e, ".env.example"), a = await M.readFile(i, "utf8").catch(() => null);
 	if (a !== null && !a.startsWith(mi) && !t) {
 		let t = C(e, ".env.example.generated");
 		return await M.writeFile(t, r, "utf8"), H.warn(".env.example exists and is not framework-generated — wrote .env.example.generated instead", { hint: "merge it by hand, or pass --force to overwrite .env.example" }), 0;
@@ -1923,7 +1931,7 @@ external scheduler owns the once-only guarantee.
 	let t = await me(e).catch(() => null);
 	if (!t) return H.error("no app.config.ts found in the current directory"), 1;
 	let n = Ze(t.env) ? t.env : void 0;
-	return n ? (t.type === "web" ? (await h(e, n), H.info("wrote src/voltro-env.d.ts (publicEnv augmentation)", { app: t.name ?? "app" })) : (await f(e, n), H.info("wrote env.generated.d.ts (serverEnv augmentation)", { app: t.name ?? "app" })), 0) : (H.warn("no `defineEnv` declared in app.config.ts — nothing to generate", { hint: "add `env: defineEnv({ ... })` to app.config.ts (see @voltro/env)" }), 0);
+	return n ? (t.type === "web" ? (await ne(e, n), H.info("wrote src/voltro-env.d.ts (publicEnv augmentation)", { app: t.name ?? "app" })) : (await l(e, n), H.info("wrote env.generated.d.ts (serverEnv augmentation)", { app: t.name ?? "app" })), 0) : (H.warn("no `defineEnv` declared in app.config.ts — nothing to generate", { hint: "add `env: defineEnv({ ... })` to app.config.ts (see @voltro/env)" }), 0);
 }, xi = () => {
 	let e = Xe();
 	return H.info(`${e.length} framework env vars for turbo.json globalPassThroughEnv:`), _i(JSON.stringify([...e].sort(), null, 2)), H.info("merge these into the workspace turbo.json `globalPassThroughEnv` array (+ your own app vars)."), 0;
@@ -2205,12 +2213,12 @@ DB_DIALECT=mssql
 }, Zi = async (e) => {
 	let t = Yi(e);
 	if ("error" in t) return t.error !== "help" && console.error(`voltro traces: ${t.error}`), Xi(), t.error === "help" ? 0 : 2;
-	let r = (await n()).apps.filter((e) => e.kind === "api" && e.status === "live" && e.url.length > 0 && (t.process === void 0 || e.name === t.process));
-	if (r.length === 0) return console.error(t.process === void 0 ? "voltro traces: no running api processes found" : `voltro traces: no running api named '${t.process}'`), t.process === void 0 && console.error("  start one with 'voltro dev' and try again."), 1;
+	let n = (await r()).apps.filter((e) => e.kind === "api" && e.status === "live" && e.url.length > 0 && (t.process === void 0 || e.name === t.process));
+	if (n.length === 0) return console.error(t.process === void 0 ? "voltro traces: no running api processes found" : `voltro traces: no running api named '${t.process}'`), t.process === void 0 && console.error("  start one with 'voltro dev' and try again."), 1;
 	if (t.id !== void 0) {
-		let e = r.map((e) => $i(e, t.id)), n = await Promise.all(e), i = n.find((e) => e.kind === "ok" && e.spans.length > 0);
+		let e = n.map((e) => $i(e, t.id)), r = await Promise.all(e), i = r.find((e) => e.kind === "ok" && e.spans.length > 0);
 		if (!i || i.kind !== "ok") {
-			let e = n.filter((e) => e.kind === "err");
+			let e = r.filter((e) => e.kind === "err");
 			if (t.format === "json") console.log(JSON.stringify({
 				traceId: t.id,
 				spans: [],
@@ -2223,7 +2231,7 @@ DB_DIALECT=mssql
 				console.error(`voltro traces: no spans for trace ${t.id}`);
 				for (let t of e) console.error(`  # ${t.name}: ${t.error}`);
 			}
-			return +(e.length === r.length);
+			return +(e.length === n.length);
 		}
 		return t.format === "json" ? (console.log(JSON.stringify({
 			traceId: t.id,
@@ -2231,7 +2239,7 @@ DB_DIALECT=mssql
 			spans: i.spans
 		})), 0) : (ia(t.id, i.name, ea(i.spans, t), t.color), 0);
 	}
-	let i = r.map((e) => Qi(e, t)), a = await Promise.all(i), o = [], s = [];
+	let i = n.map((e) => Qi(e, t)), a = await Promise.all(i), o = [], s = [];
 	for (let e of a) e.kind === "ok" ? o.push(...e.traces.map((t) => ({
 		...t,
 		process: e.name
@@ -2246,14 +2254,14 @@ DB_DIALECT=mssql
 			traces: c,
 			fetchErrors: s
 		} : { traces: c };
-		return console.log(JSON.stringify(e)), +(s.length === r.length);
+		return console.log(JSON.stringify(e)), +(s.length === n.length);
 	}
 	ra(c, t.color), c.length === 0 && console.error("voltro traces: no traces matched the given filters.");
 	for (let e of s) {
 		let n = `# fetch failed: ${e.name}: ${e.error}`;
 		console.error(t.color ? O.dim(n) : n);
 	}
-	return +(s.length === r.length);
+	return +(s.length === n.length);
 }, Qi = async (e, t) => {
 	let n = new URLSearchParams();
 	n.set("max", String(t.tail)), t.since !== void 0 && n.set("since", String(t.since)), t.errors && n.set("onlyErrors", "1");
@@ -3496,48 +3504,48 @@ DB_DIALECT=mssql
 		projectName: i
 	};
 }, Zo = async (e) => {
-	let { positional: t, flags: n } = Fo(e), r = t[0];
-	if (!r) return W.error("add-app: <appName> required", { usage: "voltro add-app <appName> --template <templateId> [--to <projectName>]" }), 2;
-	if (!Po(r)) return W.error("add-app: invalid appName — use camelCase or kebab-case", { appName: r }), 2;
-	let i = n.template;
-	if (typeof i != "string") return W.error("add-app: --template <id> required", { hint: "run `voltro list-templates` to see available ids" }), 2;
-	let a = await qa(i);
-	if (!a) return W.error("add-app: unknown template", {
-		templateId: i,
+	let { positional: n, flags: r } = Fo(e), i = n[0];
+	if (!i) return W.error("add-app: <appName> required", { usage: "voltro add-app <appName> --template <templateId> [--to <projectName>]" }), 2;
+	if (!Po(i)) return W.error("add-app: invalid appName — use camelCase or kebab-case", { appName: i }), 2;
+	let a = r.template;
+	if (typeof a != "string") return W.error("add-app: --template <id> required", { hint: "run `voltro list-templates` to see available ids" }), 2;
+	let o = await qa(a);
+	if (!o) return W.error("add-app: unknown template", {
+		templateId: a,
 		hint: "run `voltro list-templates` to see available ids"
 	}), 2;
-	let o = No(process.cwd()), s = C(o, "apps");
-	if (!A(s)) return W.error("add-app: apps/ root not found — not in a voltro workspace?", { projectsRoot: s }), 2;
-	let c = Go(await Ko(s), typeof n.to == "string" ? n.to : void 0);
-	if (!c.ok) return W.error(`add-app: ${c.error}`, c.hint === void 0 ? {} : { hint: c.hint }), 2;
-	let l = c.project, u = C(s, l);
-	A(u) || (j(u, { recursive: !0 }), await Ho(u, l, Ro));
-	let d = Wa(r), f = C(u, d);
-	if (A(f)) return W.error("add-app: target directory already exists", { targetDir: f }), 1;
-	let p = null;
-	if (a.kind === "web" && (p = await Uo(u), p === null)) {
-		let e = (await Bo(u))?.portRange ?? Ro;
+	let s = No(process.cwd()), c = C(s, "apps");
+	if (!A(c)) return W.error("add-app: apps/ root not found — not in a voltro workspace?", { projectsRoot: c }), 2;
+	let l = Go(await Ko(c), typeof r.to == "string" ? r.to : void 0);
+	if (!l.ok) return W.error(`add-app: ${l.error}`, l.hint === void 0 ? {} : { hint: l.hint }), 2;
+	let u = l.project, d = C(c, u);
+	A(d) || (j(d, { recursive: !0 }), await Ho(d, u, Ro));
+	let f = Wa(i), p = C(d, f);
+	if (A(p)) return W.error("add-app: target directory already exists", { targetDir: p }), 1;
+	let m = null;
+	if (o.kind === "web" && (m = await Uo(d), m === null)) {
+		let e = (await Bo(d))?.portRange ?? Ro;
 		return W.error("add-app: project portRange is exhausted", {
-			project: l,
+			project: u,
 			range: `${e.start}-${e.end}`,
 			hint: "edit apps/<project>/project.json and widen portRange, or remove unused app entries"
 		}), 1;
 	}
-	let m = Qa(d, l, p ?? 0);
-	console.log(`→ scaffolding ${a.id} into ${f}${p === null ? "" : ` (port ${p})`}`);
-	let { written: h } = await Za({
-		template: a,
-		targetDir: f,
-		vars: m
+	let h = Qa(f, u, m ?? 0);
+	console.log(`→ scaffolding ${o.id} into ${p}${m === null ? "" : ` (port ${m})`}`);
+	let { written: g } = await Za({
+		template: o,
+		targetDir: p,
+		vars: h
 	});
-	for (let e of h) console.log(`  · ${e}`);
-	return await Wo(u, d, a.kind, p === null ? void 0 : p), await te(o, {
+	for (let e of g) console.log(`  · ${e}`);
+	return await Wo(d, f, o.kind, m === null ? void 0 : m), await t(s, {
 		appTemplates: [{
-			dir: f,
-			template: a.id
+			dir: p,
+			template: o.id
 		}],
 		preferPointer: !0
-	}).catch(() => void 0), console.log(), console.log(`✓ app '${d}' added to project '${l}' from template '${a.id}'.`), n["no-register"] !== !0 && await Yo(u, l), console.log(), console.log("Next steps:"), console.log("  pnpm install"), a.kind === "serverless" ? (console.log(`  voltro serverless list  apps/${l}/${d}      # what would deploy`), console.log(`  voltro serverless dev   apps/${l}/${d}/...  # run one locally`), console.log("  voltro serverless deploy --target node|cloudflare|scaleway")) : console.log(`  pnpm --filter @${l}/${d} dev`), 0;
+	}).catch(() => void 0), console.log(), console.log(`✓ app '${f}' added to project '${u}' from template '${o.id}'.`), r["no-register"] !== !0 && await Yo(d, u), console.log(), console.log("Next steps:"), console.log("  pnpm install"), o.kind === "serverless" ? (console.log(`  voltro serverless list  apps/${u}/${f}      # what would deploy`), console.log(`  voltro serverless dev   apps/${u}/${f}/...  # run one locally`), console.log("  voltro serverless deploy --target node|cloudflare|scaleway")) : console.log(`  pnpm --filter @${u}/${f} dev`), 0;
 }, Qo = (e) => {
 	if (typeof e != "string") return null;
 	let t = /^(\d+)\s*(?:-|:|\.\.)\s*(\d+)$/.exec(e.trim());
@@ -3594,23 +3602,23 @@ DB_DIALECT=mssql
 		t.close();
 	}
 }, ns = async (e) => {
-	let { positional: t, flags: n } = Fo(e), r = No(process.cwd()), i = C(r, "apps"), a = await Ko(i);
-	if (a.length > 0) return W.error("create-project: this monorepo already hosts a project — a monorepo has exactly one", {
-		existing: a,
+	let { positional: n, flags: r } = Fo(e), i = No(process.cwd()), a = C(i, "apps"), o = await Ko(a);
+	if (o.length > 0) return W.error("create-project: this monorepo already hosts a project — a monorepo has exactly one", {
+		existing: o,
 		hint: "use `voltro add-app <name> --template <id>` to add apps to the existing project"
 	}), 1;
-	A(i) || j(i, { recursive: !0 });
-	let o = $o(n), s = t[0] ?? "";
-	if (s && !Po(s)) return W.error("create-project: invalid name", { name: s }), 2;
-	if (!s) {
-		if (o.noInput) return W.error("create-project: name required (use positional arg or run interactively)"), 2;
-		s = await Io("Project name", "my-project");
-	}
-	s = Wa(s);
-	let c = C(i, s);
-	if (A(c)) return W.error("create-project: target directory already exists", { projectDir: c }), 1;
-	let l = o.api ?? null, u = o.web ?? null;
-	if (!l && !u) if (o.noInput) l = "api-backend", u = "frontend-blank";
+	A(a) || j(a, { recursive: !0 });
+	let s = $o(r), c = n[0] ?? "";
+	if (c && !Po(c)) return W.error("create-project: invalid name", { name: c }), 2;
+	if (!c) {
+		if (s.noInput) return W.error("create-project: name required (use positional arg or run interactively)"), 2;
+		c = await Io("Project name", "my-project");
+	}
+	c = Wa(c);
+	let l = C(a, c);
+	if (A(l)) return W.error("create-project: target directory already exists", { projectDir: l }), 1;
+	let u = s.api ?? null, d = s.web ?? null;
+	if (!u && !d) if (s.noInput) u = "api-backend", d = "frontend-blank";
 	else {
 		let e = Zt({
 			input: Qt,
@@ -3618,32 +3626,32 @@ DB_DIALECT=mssql
 		});
 		try {
 			let t = (await e.question("Scaffold apps/api (api-backend) and apps/web (frontend-blank)? [Y/n]: ")).trim().toLowerCase();
-			(t === "" || t === "y" || t === "yes") && (l = "api-backend", u = "frontend-blank");
+			(t === "" || t === "y" || t === "yes") && (u = "api-backend", d = "frontend-blank");
 		} finally {
 			e.close();
 		}
 	}
-	let d = l ? await qa(l) : null, f = u ? await qa(u) : null;
-	if (l && !d) return W.error("create-project: unknown api template", { template: l }), 2;
-	if (u && !f) return W.error("create-project: unknown web template", { template: u }), 2;
-	if (d && d.kind !== "api") return W.error("create-project: template kind mismatch", {
-		id: d.id,
-		kind: d.kind,
-		expected: "api"
-	}), 2;
-	if (f && f.kind !== "web") return W.error("create-project: template kind mismatch", {
+	let f = u ? await qa(u) : null, p = d ? await qa(d) : null;
+	if (u && !f) return W.error("create-project: unknown api template", { template: u }), 2;
+	if (d && !p) return W.error("create-project: unknown web template", { template: d }), 2;
+	if (f && f.kind !== "api") return W.error("create-project: template kind mismatch", {
 		id: f.id,
 		kind: f.kind,
+		expected: "api"
+	}), 2;
+	if (p && p.kind !== "web") return W.error("create-project: template kind mismatch", {
+		id: p.id,
+		kind: p.kind,
 		expected: "web"
 	}), 2;
-	if (!d && !f) return W.error("create-project: need at least one of --api or --web"), 2;
-	let p = Ro;
-	if (o.portRange ? p = o.portRange : o.noInput || (p = await ts(Ro)), !zo(p)) return W.error("create-project: invalid port range", { range: `${p.start}-${p.end}` }), 2;
-	console.log(`\n→ creating ${c}`), j(c, { recursive: !0 }), await Ho(c, s, p);
-	let m = async (e, t) => {
-		let n = C(c, e), r = null;
-		if (t.kind === "web" && (r = await Uo(c), r === null)) throw Error(`port range ${p.start}-${p.end} exhausted before app '${e}' could be allocated`);
-		let i = Qa(e, s, r ?? 0);
+	if (!f && !p) return W.error("create-project: need at least one of --api or --web"), 2;
+	let m = Ro;
+	if (s.portRange ? m = s.portRange : s.noInput || (m = await ts(Ro)), !zo(m)) return W.error("create-project: invalid port range", { range: `${m.start}-${m.end}` }), 2;
+	console.log(`\n→ creating ${l}`), j(l, { recursive: !0 }), await Ho(l, c, m);
+	let h = async (e, t) => {
+		let n = C(l, e), r = null;
+		if (t.kind === "web" && (r = await Uo(l), r === null)) throw Error(`port range ${m.start}-${m.end} exhausted before app '${e}' could be allocated`);
+		let i = Qa(e, c, r ?? 0);
 		console.log(`→ ${t.id} → ${e}/${r === null ? "" : ` (port ${r})`}`);
 		let { written: a } = await Za({
 			template: t,
@@ -3651,54 +3659,54 @@ DB_DIALECT=mssql
 			vars: i
 		});
 		for (let t of a) console.log(`  · ${e}/${t}`);
-		await Wo(c, e, t.kind, r === null ? void 0 : r);
+		await Wo(l, e, t.kind, r === null ? void 0 : r);
 	};
-	d && await m("api", d), f && await m("web", f), await te(r, {
-		appTemplates: [...d ? [{
-			dir: C(c, "api"),
-			template: d.id
-		}] : [], ...f ? [{
-			dir: C(c, "web"),
+	f && await h("api", f), p && await h("web", p), await t(i, {
+		appTemplates: [...f ? [{
+			dir: C(l, "api"),
 			template: f.id
+		}] : [], ...p ? [{
+			dir: C(l, "web"),
+			template: p.id
 		}] : []],
 		preferPointer: !0
 	}).catch(() => void 0);
-	let h = null;
-	if (o.baseline) {
-		let e = await ro(o.baseline);
-		e ? h = e.id : W.warn("unknown baseline — skipping baseline step", {
-			requested: o.baseline,
+	let g = null;
+	if (s.baseline) {
+		let e = await ro(s.baseline);
+		e ? g = e.id : W.warn("unknown baseline — skipping baseline step", {
+			requested: s.baseline,
 			available: (await no()).map((e) => e.id)
 		});
-	} else o.noInput || (h = await es());
-	if (h) {
-		console.log(), console.log(`→ applying baseline '${h}' at workspace root ${r}`);
+	} else s.noInput || (g = await es());
+	if (g) {
+		console.log(), console.log(`→ applying baseline '${g}' at workspace root ${i}`);
 		try {
 			let e = await xo({
-				root: r,
-				baselineId: h,
-				projectName: s,
+				root: i,
+				baselineId: g,
+				projectName: c,
 				quiet: !0
 			});
-			console.log(`  · ${e.written.length} files written, ${e.removed.length} removed`), e.backupDir && console.log(`  · backup: ${e.backupDir.replace(r + "/", "")}`), e.previousBaselineId && e.previousBaselineId !== h && console.log(`  · switched from previous baseline '${e.previousBaselineId}'`);
+			console.log(`  · ${e.written.length} files written, ${e.removed.length} removed`), e.backupDir && console.log(`  · backup: ${e.backupDir.replace(i + "/", "")}`), e.previousBaselineId && e.previousBaselineId !== g && console.log(`  · switched from previous baseline '${e.previousBaselineId}'`);
 		} catch (e) {
 			W.error("baseline apply failed", {
-				baselineId: h,
+				baselineId: g,
 				error: e instanceof Error ? e.message : String(e)
 			});
 		}
 	}
-	if (o.cache === "redis") {
+	if (s.cache === "redis") {
 		console.log(), console.log("→ enabling Redis cache backend");
 		try {
-			let e = await Pi(r);
+			let e = await Pi(i);
 			for (let t of e) console.log(`  ✓ ${t}`);
 		} catch (e) {
 			W.error("cache enable failed", { error: e instanceof Error ? e.message : String(e) });
 		}
 	}
-	return console.log(), console.log(`✓ project '${s}' scaffolded under apps/${s}/.`), h && console.log(`  baseline '${h}' applied at workspace root.`), n["no-register"] !== !0 && await Yo(c, s), console.log(), console.log("Next steps:"), console.log("  pnpm install"), d && console.log(`  pnpm --filter @${s}/api dev`), f && console.log(`  pnpm --filter @${s}/web dev`), h === "compose" ? (console.log("  pnpm db:up                  # postgres only (native dev)"), console.log("  pnpm dev:docker             # OR full-stack docker dev")) : h === "helm" && (console.log("  pnpm helm:lint              # verify the chart"), console.log("  pnpm helm:install:dev       # deploy to a dev cluster")), 0;
-}, rs = (e, t) => (n) => r(E.tryPromise({
+	return console.log(), console.log(`✓ project '${c}' scaffolded under apps/${c}/.`), g && console.log(`  baseline '${g}' applied at workspace root.`), r["no-register"] !== !0 && await Yo(l, c), console.log(), console.log("Next steps:"), console.log("  pnpm install"), f && console.log(`  pnpm --filter @${c}/api dev`), p && console.log(`  pnpm --filter @${c}/web dev`), g === "compose" ? (console.log("  pnpm db:up                  # postgres only (native dev)"), console.log("  pnpm dev:docker             # OR full-stack docker dev")) : g === "helm" && (console.log("  pnpm helm:lint              # verify the chart"), console.log("  pnpm helm:install:dev       # deploy to a dev cluster")), 0;
+}, rs = (e, t) => (n) => i(E.tryPromise({
 	try: () => e(n),
 	catch: (e) => e
 }).pipe(E.orDie), { scope: t }), is = rs(Lo, "voltro:list-templates"), as = rs(Zo, "voltro:add-app"), os = rs(ns, "voltro:create-project"), ss = Xt(tt), cs = (e) => new Promise((t) => setTimeout(t, e)), ls = () => {
@@ -4118,7 +4126,7 @@ replicas = 1
 	let e = (process.env.DB_DIALECT ?? "postgres").toLowerCase();
 	if (e === "memory") throw Error("Cannot migrate against an in-memory store. Set DB_DIALECT to one of: postgres, sqlite, mysql, mariadb, mssql, turso.");
 	return ue(e);
-}, Js = async (e) => r(Gs(T(e.find((e) => !e.startsWith("-")) ?? process.cwd())), { scope: "voltro:migrate" }), Ys = /\.migration\.ts$/, Xs = async (e, t) => {
+}, Js = async (e) => i(Gs(T(e.find((e) => !e.startsWith("-")) ?? process.cwd())), { scope: "voltro:migrate" }), Ys = /\.migration\.ts$/, Xs = async (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e;
@@ -5646,7 +5654,7 @@ replicas = 1
 	return yield* E.sync(() => {
 		for (let e of Xl(t)) console.log(e);
 	}), 0;
-}), Ql = (e) => r(Zl(process.cwd()), { scope: "voltro:deploy" }), $l = (e) => os(e), eu = {
+}), Ql = (e) => i(Zl(process.cwd()), { scope: "voltro:deploy" }), $l = (e) => os(e), eu = {
 	"data-transfer": {
 		env: "VOLTRO_DATA_TRANSFER_SECRET",
 		encoding: "base64url",
@@ -6308,7 +6316,140 @@ replicas = 1
 		"Alternatively, switch the annotation to `PartialUiStrings` if the object",
 		"was only ever an override bag."
 	].join("\n")
-}), Iu = /\bsetRowFilter\s*\(/, Lu = /\bresolveRowFilterScope\b/, Ru = [
+}), Iu = /\bsetRowFilter\s*\(/, Lu = /\bresolveRowFilterScope\b/, Ru = Z({
+	version: "0.7.0",
+	id: "0.7.0/01_row-filter-load-failure",
+	title: "A row filter that fails to load now errors instead of returning zero rows",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return Iu.test(t) || Lu.test(t);
+	}),
+	note: [
+		"Row-level security: a `load` failure is now an ERROR, and is retried first.",
+		"",
+		"What changed and why:",
+		"",
+		"  `setRowFilter({ load, predicate })` runs `load` once per request to resolve",
+		"  what the subject may see. Previously, ANY `load` failure was answered with a",
+		"  predicate matching zero rows — so a single transient DB blip denied every",
+		"  constrained table for that request, and the user saw an empty UI with a 200",
+		"  status and no error anywhere.",
+		"",
+		"  That was wrong in two separate ways, and both are fixed:",
+		"",
+		"    1. No retry. `load` reads your store — for team/shared visibility it MUST —",
+		"       which makes it exactly the call that blips. A reaped connection was being",
+		"       answered as if it were an authorization fact. `load` now runs under a",
+		"       bounded retry (3 attempts, exponential from 20ms) before any decision.",
+		"",
+		"    2. Refusal was expressed as an empty result, which is a lie. \"We could not",
+		"       determine your visibility\" and \"you may see nothing\" are different facts,",
+		"       and an empty list is byte-identical to legitimate emptiness — the user",
+		"       reads \"you have no tickets\", the operator reads a healthy 200, and the",
+		"       outage is invisible to both. Refusal is now a typed",
+		"       `RowFilterUnavailable` error.",
+		"",
+		"What to do:",
+		"",
+		"  1. DECIDE, per app, what an unresolvable filter should look like to a user.",
+		"     This is the one thing this codemod cannot do for you.",
+		"",
+		"       • Leave the default (`onLoadError: 'fail'`) if an empty screen would be",
+		"         mistaken for real data. This is the right answer for most apps.",
+		"         Handle `RowFilterUnavailable` in your UI as an error state (\"could not",
+		"         load — retry\"), the same as any other failed request.",
+		"",
+		"       • Set `onLoadError: 'deny'` ONLY if you have looked at the screen and",
+		"         are content for it to render as empty during an outage:",
+		"             setRowFilter({ load, predicate, onLoadError: 'deny' })",
+		"         Your `onError` reporter still fires, so the failure stays findable in",
+		"         logs even though the response is a 200.",
+		"",
+		"     There is deliberately no fail-OPEN option, and there will not be one.",
+		"     Serving unfiltered rows when the authorization filter is unavailable leaks",
+		"     data precisely when the system is under stress and nobody is watching, and",
+		"     it is only safe if every handler still carries the check the row filter",
+		"     existed to replace.",
+		"",
+		"  2. Tune the retry if your `load` is unusually slow or unusually cheap:",
+		"         setRowFilter({ load, predicate, retry: Schedule.recurs(5) })  // your own",
+		"         setRowFilter({ load, predicate, retry: false })               // one attempt",
+		"     The default is `DEFAULT_ROW_FILTER_RETRY` (exported from @voltro/runtime).",
+		"",
+		"  3. If you call `resolveRowFilterScope` directly — a custom entrypoint or a test",
+		"     harness — it now returns `Effect<RowFilterScope, RowFilterUnavailable>`",
+		"     instead of an infallible Effect. Your call sites must handle the error",
+		"     channel; `Effect.catchTag('RowFilterUnavailable', …)` or letting it",
+		"     propagate are both fine. TypeScript will point at every one.",
+		"",
+		"  4. Check any test that asserted \"a broken load yields an empty result\". Under",
+		"     the new default that test now fails with `RowFilterUnavailable` — which is",
+		"     the fix working, not a regression.",
+		"",
+		"  5. SUBSCRIPTIONS behave differently now, and this needs no code change but does",
+		"     need a client-side look: a re-resolve that fails mid-stream REVOKES the",
+		"     subscription and emits an error frame, rather than delivering an empty",
+		"     snapshot. An empty snapshot on a live subscription reads to a client as",
+		"     \"every row you could see was just deleted\". Make sure your subscription",
+		"     error handling surfaces this rather than swallowing it."
+	].join("\n")
+}), zu = Z({
+	version: "0.7.0",
+	id: "0.7.0/02_testing-invoke-effect-handlers",
+	title: "@voltro/testing: invoke() runs Effect handlers; executor types widened",
+	kind: "manual",
+	appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
+		let t = e.getFullText();
+		return t.includes("@voltro/testing") ? /\binvoke\s*\(/.test(t) || /\bProcedureExecutor\b/.test(t) : !1;
+	}),
+	note: [
+		"`invoke(descriptor, executor, input, ctx)` now DETECTS an Effect-returning",
+		"handler and runs it, the way the dispatcher does. Two consequences.",
+		"",
+		"1. Remove your run-the-Effect workaround.",
+		"",
+		"       // before — the shim apps wrote because invoke handed back the Effect",
+		"       const out = await invoke(d, handler, input, ctx)",
+		"       const value = Effect.isEffect(out) ? await Effect.runPromise(out) : out",
+		"",
+		"       // after",
+		"       const value = await invoke(d, handler, input, ctx)",
+		"",
+		"   Leaving the shim in place is not merely redundant: `out` is now the",
+		"   resolved VALUE, so `Effect.isEffect(out)` is false and the branch is",
+		"   dead — but if the value happens to be an Effect (a handler that returns",
+		"   a description of work on purpose) the shim will now run it a second",
+		"   time. Delete it.",
+		"",
+		"   Deleting it also RESTORES your typed errors. `Effect.runPromise` rejects",
+		"   with an opaque FiberFailure; `invoke` unwraps the failure and rejects",
+		"   with the tagged error itself, so `rejects.toMatchObject({ _tag: … })`",
+		"   works for an Effect handler exactly as for an async one.",
+		"",
+		"2. Two type signatures changed. Both accept strictly MORE than before, so",
+		"   handlers keep compiling — what can break is code that reads the type of",
+		"   a CALL:",
+		"",
+		"   • `ProcedureExecutor<Input, Output>` gained an `Effect<Output, E>` arm",
+		"     (and an optional third parameter `E`, defaulting to `never`). If you",
+		"     call a value typed `ProcedureExecutor<…>` yourself and assign the",
+		"     result to `Output`, it no longer narrows — call it through `invoke`,",
+		"     or handle the Effect arm.",
+		"",
+		"   • `invoke` now infers from the executor's whole return type instead of",
+		"     taking `Output` as its second type parameter. An EXPLICIT type",
+		"     argument list — `invoke<typeof d, Note>(…)` — now pins the executor's",
+		"     RETURN type (so an async handler no longer matches). Drop the explicit",
+		"     type arguments; inference gives the same result, and better:",
+		"",
+		"         await invoke(d, handler, input, ctx)   // resolves to Note",
+		"",
+		"Nothing else about `invoke` changed — guards, the input decode, the",
+		"transaction, the deadlock replay, `afterCommit` and the plugin interceptor",
+		"chain wrap an Effect handler exactly as they wrap an async one."
+	].join("\n")
+}), Bu = /\bpasswordHash\b/, Vu = /\b(UserStore|UserRecord|memoryUserStore|postgresUserStore)\b/, Hu = [
 	_u,
 	vu,
 	xu,
@@ -6320,156 +6461,155 @@ replicas = 1
 	Au,
 	Pu,
 	Fu,
+	Ru,
+	zu,
 	Z({
-		version: "0.7.0",
-		id: "0.7.0/01_row-filter-load-failure",
-		title: "A row filter that fails to load now errors instead of returning zero rows",
+		version: "0.8.0",
+		id: "0.8.0/01_optional-password-hash",
+		title: "`UserRecord.passwordHash` is optional — password-less identities are now first-class",
 		kind: "manual",
 		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
 			let t = e.getFullText();
-			return Iu.test(t) || Lu.test(t);
+			return Bu.test(t) || Vu.test(t);
 		}),
 		note: [
-			"Row-level security: a `load` failure is now an ERROR, and is retried first.",
+			"`UserRecord.passwordHash` is now `string | null | undefined`, not `string`.",
 			"",
 			"What changed and why:",
 			"",
-			"  `setRowFilter({ load, predicate })` runs `load` once per request to resolve",
-			"  what the subject may see. Previously, ANY `load` failure was answered with a",
-			"  predicate matching zero rows — so a single transient DB blip denied every",
-			"  constrained table for that request, and the user saw an empty UI with a 200",
-			"  status and no error anywhere.",
+			"  `passwordHash` was required, which quietly asserted that every identity has",
+			"  a password. SSO-only, magic-link-only, passkey-only and provider-PAT apps",
+			"  have none — and the only way they could use `subjectFromUser(...)` was to",
+			"  invent a fake hash. That is strictly worse than storing nothing: a fake hash",
+			"  is a real value sitting in the column a verifier compares against. Several",
+			"  apps chose instead to hand-build the `Subject`, losing the helper entirely.",
+			"",
+			"  The `users` table column is now nullable to match. That side needs NO action",
+			"  from you — it rides the declarative differ on `voltro db apply` / next boot.",
+			"",
+			"Why this can break your build even though nothing was removed:",
+			"",
+			"  Widening a type is additive for code that WRITES a `UserRecord` and breaking",
+			"  for code that READS one. These compiled before and do not now:",
+			"",
+			"      const h: string = user.passwordHash          // TS2322",
+			"      user.passwordHash.length                     // TS18048/TS2531",
+			"      verifyPassword(pw, user.passwordHash)        // TS2345",
 			"",
-			"  That was wrong in two separate ways, and both are fixed:",
+			"What to do — TypeScript will point at every site; decide per site:",
 			"",
-			"    1. No retry. `load` reads your store — for team/shared visibility it MUST —",
-			"       which makes it exactly the call that blips. A reaped connection was being",
-			"       answered as if it were an authorization fact. `load` now runs under a",
-			"       bounded retry (3 attempts, exponential from 20ms) before any decision.",
+			"  1. A site that VERIFIES a password. Treat an absent hash as a REFUSAL, and",
+			"     make it indistinguishable from a wrong password — same status, same body,",
+			"     and still burn the same work so the latency does not reveal which accounts",
+			"     are password-less:",
 			"",
-			"    2. Refusal was expressed as an empty result, which is a lie. \"We could not",
-			"       determine your visibility\" and \"you may see nothing\" are different facts,",
-			"       and an empty list is byte-identical to legitimate emptiness — the user",
-			"       reads \"you have no tickets\", the operator reads a healthy 200, and the",
-			"       outage is invisible to both. Refusal is now a typed",
-			"       `RowFilterUnavailable` error.",
+			"         const stored = user?.passwordHash",
+			"         const hasPassword = typeof stored === 'string' && stored.length > 0",
+			"         const verdict = hasPassword",
+			"           ? yield* verifyPasswordWithRehash(input.password, stored)",
+			"           : yield* /* decoy hash + verify */ Effect.succeed({ valid: false as const })",
+			"         if (!user || !verdict.valid) return json(401, { error: 'invalid credentials' })",
 			"",
-			"What to do:",
+			"     Note `''` is treated as absent too. The framework's own `handleSignIn`",
+			"     already does exactly this; if you use it, you need no change here.",
 			"",
-			"  1. DECIDE, per app, what an unresolvable filter should look like to a user.",
-			"     This is the one thing this codemod cannot do for you.",
+			"  2. A site that WRITES a hash (sign-up, password reset, set-password). Nothing",
+			"     to do — assigning a hash to a previously password-less user works",
+			"     unchanged and promotes them to a password user.",
 			"",
-			"       • Leave the default (`onLoadError: 'fail'`) if an empty screen would be",
-			"         mistaken for real data. This is the right answer for most apps.",
-			"         Handle `RowFilterUnavailable` in your UI as an error state (\"could not",
-			"         load — retry\"), the same as any other failed request.",
+			"  3. A site that only ever runs for password users. Narrow explicitly and let",
+			"     the impossible case be loud, rather than silencing it:",
 			"",
-			"       • Set `onLoadError: 'deny'` ONLY if you have looked at the screen and",
-			"         are content for it to render as empty during an outage:",
-			"             setRowFilter({ load, predicate, onLoadError: 'deny' })",
-			"         Your `onError` reporter still fires, so the failure stays findable in",
-			"         logs even though the response is a 200.",
+			"         if (!user.passwordHash) throw new Error('expected a password user')",
 			"",
-			"     There is deliberately no fail-OPEN option, and there will not be one.",
-			"     Serving unfiltered rows when the authorization filter is unavailable leaks",
-			"     data precisely when the system is under stress and nobody is watching, and",
-			"     it is only safe if every handler still carries the check the row filter",
-			"     existed to replace.",
+			"What NOT to do, and this is the whole point of a manual note:",
 			"",
-			"  2. Tune the retry if your `load` is unusually slow or unusually cheap:",
-			"         setRowFilter({ load, predicate, retry: Schedule.recurs(5) })  // your own",
-			"         setRowFilter({ load, predicate, retry: false })               // one attempt",
-			"     The default is `DEFAULT_ROW_FILTER_RETRY` (exported from @voltro/runtime).",
+			"  • Do NOT write `user.passwordHash!`. It re-asserts the invariant that just",
+			"    stopped holding, and the failure surfaces at runtime instead of here.",
 			"",
-			"  3. If you call `resolveRowFilterScope` directly — a custom entrypoint or a test",
-			"     harness — it now returns `Effect<RowFilterScope, RowFilterUnavailable>`",
-			"     instead of an infallible Effect. Your call sites must handle the error",
-			"     channel; `Effect.catchTag('RowFilterUnavailable', …)` or letting it",
-			"     propagate are both fine. TypeScript will point at every one.",
+			"  • Do NOT write `user.passwordHash ?? ''` (or any placeholder). You are then",
+			"    comparing a submitted password against a value you invented. Whether that",
+			"    refuses depends on the verifier, and a verifier that returns true for a",
+			"    degenerate hash means ANY password signs in as a password-less user. If you",
+			"    take one thing from this note: an absent hash must be a refusal decision,",
+			"    never a default value.",
 			"",
-			"  4. Check any test that asserted \"a broken load yields an empty result\". Under",
-			"     the new default that test now fails with `RowFilterUnavailable` — which is",
-			"     the fix working, not a regression.",
+			"  • Do NOT add a `NOT NULL` back to your own users table to dodge the change —",
+			"    it forces the fake hash back in at insert time.",
 			"",
-			"  5. SUBSCRIPTIONS behave differently now, and this needs no code change but does",
-			"     need a client-side look: a re-resolve that fails mid-stream REVOKES the",
-			"     subscription and emits an error frame, rather than delivering an empty",
-			"     snapshot. An empty snapshot on a live subscription reads to a client as",
-			"     \"every row you could see was just deleted\". Make sure your subscription",
-			"     error handling surfaces this rather than swallowing it."
+			"  4. If you implement your OWN `UserStore`, widen the field on your record type",
+			"     to match and make sure your read path maps a NULL column to `null`/",
+			"     `undefined` rather than to `''`-by-coercion."
 		].join("\n")
 	}),
 	Z({
-		version: "0.7.0",
-		id: "0.7.0/02_testing-invoke-effect-handlers",
-		title: "@voltro/testing: invoke() runs Effect handlers; executor types widened",
+		version: "0.8.0",
+		id: "0.8.0/02_ssr-streams-and-loaderdata",
+		title: "`ssr` pages stream; `useLoaderData<T>()` returns `LoaderData<T>`",
 		kind: "manual",
-		appliesTo: ({ project: e }) => e.getSourceFiles().some((e) => {
-			let t = e.getFullText();
-			return t.includes("@voltro/testing") ? /\binvoke\s*\(/.test(t) || /\bProcedureExecutor\b/.test(t) : !1;
-		}),
 		note: [
-			"`invoke(descriptor, executor, input, ctx)` now DETECTS an Effect-returning",
-			"handler and runs it, the way the dispatcher does. Two consequences.",
+			"Two things changed for server-rendered pages.",
 			"",
-			"1. Remove your run-the-Effect workaround.",
+			"1. `renderMode: 'ssr'` responses are now STREAMED.",
 			"",
-			"       // before — the shim apps wrote because invoke handed back the Effect",
-			"       const out = await invoke(d, handler, input, ctx)",
-			"       const value = Effect.isEffect(out) ? await Effect.runPromise(out) : out",
+			"   `voltro dev` and `voltro start` send the <head> + page shell first and",
+			"   flush each <Suspense> boundary as its data settles. Consequences:",
 			"",
-			"       // after",
-			"       const value = await invoke(d, handler, input, ctx)",
+			"     • Re-run `voltro build` before `voltro start`. The prebuilt SSR bundle",
+			"       (.framework/dist/server/ssrEntry.js) now has to export the streaming",
+			"       helpers; a bundle built by an older CLI will fail at request time.",
+			"       If your deploy already runs `voltro build` before `voltro start`,",
+			"       nothing to do.",
+			"     • `ssr` responses are chunked and carry no `content-length`. If a",
+			"       reverse proxy in front of the app buffers responses (nginx",
+			"       `proxy_buffering on`, some CDNs), turn buffering off for these",
+			"       routes or the streaming win is absorbed by the proxy.",
+			"     • Pages with `interactive: 'none'` or `'islands'`, and `isr` /",
+			"       `static` pages, are unchanged — still rendered as one buffered",
+			"       document.",
 			"",
-			"   Leaving the shim in place is not merely redundant: `out` is now the",
-			"   resolved VALUE, so `Effect.isEffect(out)` is false and the branch is",
-			"   dead — but if the value happens to be an Effect (a handler that returns",
-			"   a description of work on purpose) the shim will now run it a second",
-			"   time. Delete it.",
+			"2. `useLoaderData<T>()` now returns `LoaderData<T>`.",
 			"",
-			"   Deleting it also RESTORES your typed errors. `Effect.runPromise` rejects",
-			"   with an opaque FiberFailure; `invoke` unwraps the failure and rejects",
-			"   with the tagged error itself, so `rejects.toMatchObject({ _tag: … })`",
-			"   works for an Effect handler exactly as for an async one.",
+			"   For every concrete `T`, `LoaderData<T>` IS `T` — the overwhelming",
+			"   majority of call sites need no change. It differs only for a loader that",
+			"   returns the new `defer()`, where it flattens to eager fields as values",
+			"   plus deferred fields as promises.",
 			"",
-			"2. Two type signatures changed. Both accept strictly MORE than before, so",
-			"   handlers keep compiling — what can break is code that reads the type of",
-			"   a CALL:",
+			"   The one shape that can stop compiling is a call that passes an",
+			"   UNRESOLVED generic through, e.g.",
 			"",
-			"   • `ProcedureExecutor<Input, Output>` gained an `Effect<Output, E>` arm",
-			"     (and an optional third parameter `E`, defaulting to `never`). If you",
-			"     call a value typed `ProcedureExecutor<…>` yourself and assign the",
-			"     result to `Output`, it no longer narrows — call it through `invoke`,",
-			"     or handle the Effect arm.",
+			"     const usePageData = <D,>(): D => useLoaderData<D>()",
 			"",
-			"   • `invoke` now infers from the executor's whole return type instead of",
-			"     taking `Output` as its second type parameter. An EXPLICIT type",
-			"     argument list — `invoke<typeof d, Note>(…)` — now pins the executor's",
-			"     RETURN type (so an async handler no longer matches). Drop the explicit",
-			"     type arguments; inference gives the same result, and better:",
+			"   `LoaderData<D>` cannot be assigned to `D` while `D` is still a type",
+			"   parameter. Fix by propagating the mapped type instead of `D`:",
 			"",
-			"         await invoke(d, handler, input, ctx)   // resolves to Note",
+			"     const usePageData = <D,>(): LoaderData<D> => useLoaderData<D>()",
 			"",
-			"Nothing else about `invoke` changed — guards, the input decode, the",
-			"transaction, the deadlock replay, `afterCommit` and the plugin interceptor",
-			"chain wrap an Effect handler exactly as they wrap an async one."
+			"   Run your app's `typecheck` after upgrading — that is the only reliable",
+			"   way to find these, which is why this step is written out rather than",
+			"   applied automatically.",
+			"",
+			"New in the same release: `defer()` + `<Await>` for streaming one slow field",
+			"of a loader instead of blocking the whole response. See the Loaders & meta",
+			"docs. `defer()` requires `renderMode: 'ssr'` and `interactive: 'full'`;",
+			"every other combination is a hard error naming the page."
 		].join("\n")
 	})
-], zu = (e) => [
+], Uu = (e) => [
 	`${e}/**/*.ts`,
 	`${e}/**/*.tsx`,
 	`!${e}/**/node_modules/**`,
 	`!${e}/**/dist/**`,
 	`!${e}/**/.framework/**`,
 	`!${e}/**/*.d.ts`
-], Bu = (e, t) => {
+], Wu = (e, t) => {
 	let n = e.split(".").map(Number), r = t.split(".").map(Number);
 	for (let e = 0; e < 3; e++) {
 		let t = (n[e] ?? 0) - (r[e] ?? 0);
 		if (t !== 0) return t;
 	}
 	return 0;
-}, Vu = (e, t, n = Ru) => n.filter((n) => Bu(e, n.version) < 0 && Bu(n.version, t) <= 0).slice().sort(gu), Hu = (e, t, n = () => {}) => {
+}, Gu = (e, t, n = Hu) => n.filter((n) => Wu(e, n.version) < 0 && Wu(n.version, t) <= 0).slice().sort(gu), Ku = (e, t, n = () => {}) => {
 	let r = [], i = [], a = [];
 	for (let o of t) {
 		if (!(!o.appliesTo || o.appliesTo({ project: e }))) {
@@ -6506,8 +6646,8 @@ replicas = 1
 		manual: i,
 		skipped: a
 	};
-}, Uu = async (e) => {
-	let t = e.log ?? (() => {}), n = Vu(e.from, e.to, e.codemods ?? Ru);
+}, qu = async (e) => {
+	let t = e.log ?? (() => {}), n = Gu(e.from, e.to, e.codemods ?? Hu);
 	if (n.length === 0) return {
 		applied: [],
 		manual: [],
@@ -6518,24 +6658,24 @@ replicas = 1
 		manipulationSettings: { quoteKind: tn.Single }
 	}), i = /* @__PURE__ */ new Set();
 	for (let t of n) {
-		let n = t.scope ? t.scope.flatMap((t) => t.startsWith("!") ? [`!${e.root}/${t.slice(1)}`] : [`${e.root}/${t}`]) : zu(e.root);
+		let n = t.scope ? t.scope.flatMap((t) => t.startsWith("!") ? [`!${e.root}/${t.slice(1)}`] : [`${e.root}/${t}`]) : Uu(e.root);
 		for (let e of n) i.add(e);
 	}
 	r.addSourceFilesAtPaths([...i]);
-	let a = Hu(r, n, t);
+	let a = Ku(r, n, t);
 	return e.dryRun || await r.save(), a;
-}, Wu = /^(workspace:|catalog:|link:|file:|npm:|portal:)/, Gu = /* @__PURE__ */ new Set([
+}, Ju = /^(workspace:|catalog:|link:|file:|npm:|portal:)/, Yu = /* @__PURE__ */ new Set([
 	"pnpm",
 	"npm",
 	"yarn",
 	"bun"
-]), Ku = [
+]), Xu = [
 	["pnpm-lock.yaml", "pnpm"],
 	["yarn.lock", "yarn"],
 	["bun.lock", "bun"],
 	["bun.lockb", "bun"],
 	["package-lock.json", "npm"]
-], qu = (e) => {
+], Zu = (e) => {
 	let t = [], n = T(e);
 	for (; t.push(n), !A(C(n, ".git"));) {
 		let e = S(n);
@@ -6543,20 +6683,20 @@ replicas = 1
 		n = e;
 	}
 	return t;
-}, Ju = (e) => {
-	for (let t of qu(e)) {
+}, Qu = (e) => {
+	for (let t of Zu(e)) {
 		let e = C(t, "package.json");
 		if (A(e)) try {
 			let t = JSON.parse(N(e, "utf8")).packageManager;
 			if (typeof t == "string") {
 				let e = t.split("@")[0]?.trim();
-				if (e && Gu.has(e)) return e;
+				if (e && Yu.has(e)) return e;
 			}
 		} catch {}
-		for (let [e, n] of Ku) if (A(C(t, e))) return n;
+		for (let [e, n] of Xu) if (A(C(t, e))) return n;
 	}
 	return "npm";
-}, Yu = /* @__PURE__ */ new Set([
+}, $u = /* @__PURE__ */ new Set([
 	"node_modules",
 	".git",
 	"dist",
@@ -6568,8 +6708,8 @@ replicas = 1
 	".turbo",
 	".cache",
 	".output"
-]), Xu = 4, Zu = (e) => {
-	for (let t of qu(e)) {
+]), ed = 4, td = (e) => {
+	for (let t of Zu(e)) {
 		if (A(C(t, "pnpm-workspace.yaml")) || A(C(t, "pnpm-workspace.yml"))) return t;
 		let e = C(t, "package.json");
 		if (A(e)) try {
@@ -6577,10 +6717,10 @@ replicas = 1
 			if (Array.isArray(n) ? n.length > 0 : typeof n == "object" && n) return t;
 		} catch {}
 	}
-}, Qu = (e) => {
+}, nd = (e) => {
 	let t = [], n = (e, r) => {
 		let i = C(e, "package.json");
-		if (A(i) && t.push(i), r >= Xu) return;
+		if (A(i) && t.push(i), r >= ed) return;
 		let a;
 		try {
 			a = Fe(e);
@@ -6588,7 +6728,7 @@ replicas = 1
 			return;
 		}
 		for (let t of a) {
-			if (t.startsWith(".") || Yu.has(t)) continue;
+			if (t.startsWith(".") || $u.has(t)) continue;
 			let i = C(e, t);
 			try {
 				if (!Ie(i).isDirectory()) continue;
@@ -6599,7 +6739,7 @@ replicas = 1
 		}
 	};
 	return n(T(e), 0), t;
-}, $u = (e) => {
+}, rd = (e) => {
 	try {
 		return nt("git", ["status", "--porcelain"], {
 			cwd: e,
@@ -6608,7 +6748,7 @@ replicas = 1
 	} catch {
 		return !1;
 	}
-}, ed = /^\d+\.\d+\.\d+/, td = (e, t) => {
+}, id = /^\d+\.\d+\.\d+/, ad = (e, t) => {
 	try {
 		let n = nt(e, [...t], {
 			encoding: "utf8",
@@ -6621,14 +6761,14 @@ replicas = 1
 		if (!n) return;
 		if (n.startsWith("{")) {
 			let e = JSON.parse(n).version;
-			return typeof e == "string" && ed.test(e) ? e : void 0;
+			return typeof e == "string" && id.test(e) ? e : void 0;
 		}
 		let r = n.split("\n").map((e) => e.trim()).filter(Boolean).pop();
-		return r && ed.test(r) ? r : void 0;
+		return r && id.test(r) ? r : void 0;
 	} catch {
 		return;
 	}
-}, nd = () => {
+}, od = () => {
 	try {
 		let e = nt("yarn", ["--version"], {
 			encoding: "utf8",
@@ -6642,7 +6782,7 @@ replicas = 1
 	} catch {
 		return 1;
 	}
-}, rd = (e, t, n) => [...t === "pnpm" ? [["pnpm", [
+}, sd = (e, t, n) => [...t === "pnpm" ? [["pnpm", [
 	"view",
 	e,
 	"version"
@@ -6667,17 +6807,17 @@ replicas = 1
 	"view",
 	e,
 	"version"
-]]], id = (e, t = "npm") => {
-	for (let [n, r] of rd(e, t, t === "yarn" ? nd() : 1)) {
-		let e = td(n, r);
+]]], cd = (e, t = "npm") => {
+	for (let [n, r] of sd(e, t, t === "yarn" ? od() : 1)) {
+		let e = ad(n, r);
 		if (e) return e;
 	}
-}, ad = (e) => JSON.parse(N(e, "utf8")), od = (e) => {
+}, ld = (e) => JSON.parse(N(e, "utf8")), ud = (e) => {
 	let t = C(e, "node_modules", "@voltro", "cli", "package.json");
 	if (!A(t)) return;
-	let n = ad(t).version;
+	let n = ld(t).version;
 	return typeof n == "string" ? n : void 0;
-}, sd = (e) => {
+}, dd = (e) => {
 	let t = [];
 	for (let n of ["dependencies", "devDependencies"]) {
 		let r = e[n];
@@ -6688,7 +6828,7 @@ replicas = 1
 		});
 	}
 	return t;
-}, cd = (e, t, n) => sd(e).map(({ name: e, spec: r }) => Wu.test(r) ? {
+}, fd = (e, t, n) => dd(e).map(({ name: e, spec: r }) => Ju.test(r) ? {
 	name: e,
 	from: r,
 	to: r,
@@ -6697,22 +6837,22 @@ replicas = 1
 	name: e,
 	from: r,
 	to: `${n ? "" : /^[\^~]/.exec(r)?.[0] ?? ""}${t}`
-}), ld = (e, t) => {
+}), pd = (e, t) => {
 	for (let n of t) if (!n.skipped) for (let t of ["dependencies", "devDependencies"]) {
 		let r = e[t];
 		r && n.name in r && (r[n.name] = n.to);
 	}
-}, ud = (e, t, n) => e.map(({ path: e, pkg: r }) => ({
+}, md = (e, t, n) => e.map(({ path: e, pkg: r }) => ({
 	path: e,
-	entries: cd(r, t, n)
-})).filter((e) => e.entries.length > 0), dd = (e, t) => {
+	entries: fd(r, t, n)
+})).filter((e) => e.entries.length > 0), hd = (e, t) => {
 	let n = new Map(e.map((e) => [e.path, e])), r = [];
 	for (let e of t) {
 		let t = n.get(e.path);
-		t && (ld(t.pkg, e.entries), r.push(t));
+		t && (pd(t.pkg, e.entries), r.push(t));
 	}
 	return r;
-}, fd = (e) => {
+}, gd = (e) => {
 	let t, n, r = process.cwd(), i = [];
 	for (let a = 0; a < e.length; a++) {
 		let o = e[a];
@@ -6741,22 +6881,22 @@ replicas = 1
 		...t === void 0 ? {} : { to: t },
 		...n === void 0 ? {} : { from: n }
 	};
-}, pd = "voltro update [app] [flags]\n\nUpgrade an app to a newer framework release: bump every @voltro/* dependency,\ninstall, and run the codemods shipped with the target version.\n\nIn a workspace (pnpm-workspace.yaml, or a package.json \"workspaces\" field),\nEVERY member package.json that declares @voltro/* is bumped in lockstep and the\ninstall runs once at the workspace root — so api / web / shared packages never\nend up on different framework versions.\n\nFlags:\n  --to <version>     Target version (default: the latest published version).\n  --from <version>   Source version — overrides the detected installed version.\n                     Use it after a hand-edited bump so the codemods for the\n                     delta you actually crossed still run.\n  --root <dir>       App directory to update (default: the current directory).\n                     A positional [app] does the same.\n  --dry-run          Print the plan — every package.json that would be bumped —\n                     and write nothing. Allowed on a dirty tree.\n  --force            Proceed on a dirty working tree, and re-run even when the\n                     installed version already equals the target.\n  --exact            Pin exact versions (drop the ^ / ~ range prefix).\n  --codemods-only    Run ONLY the codemods for [from, to] against the installed\n                     tree — no version bump, no install. The recovery path after\n                     a manual bump, or after a failed install. Alias:\n                     --run-codemods.\n  -h, --help         Print this help.\n\nExamples:\n  voltro update\n  voltro update --to 0.6.0 --dry-run\n  voltro update --codemods-only --from 0.5.0 --to 0.6.0\n\nAfter updating: run `voltro db apply` (NOT db migrate) to reconcile changed\nframework tables, then your typecheck.", md = (e) => e.includes("--help") || e.includes("-h"), hd = async (e, t = {}) => {
-	let n = t.latestVersion ?? id, r = t.isGitClean ?? $u, i = t.install ?? ((e, t) => it(e, ["install"], {
+}, _d = "voltro update [app] [flags]\n\nUpgrade an app to a newer framework release: bump every @voltro/* dependency,\ninstall, and run the codemods shipped with the target version.\n\nIn a workspace (pnpm-workspace.yaml, or a package.json \"workspaces\" field),\nEVERY member package.json that declares @voltro/* is bumped in lockstep and the\ninstall runs once at the workspace root — so api / web / shared packages never\nend up on different framework versions.\n\nFlags:\n  --to <version>     Target version (default: the latest published version).\n  --from <version>   Source version — overrides the detected installed version.\n                     Use it after a hand-edited bump so the codemods for the\n                     delta you actually crossed still run.\n  --root <dir>       App directory to update (default: the current directory).\n                     A positional [app] does the same.\n  --dry-run          Print the plan — every package.json that would be bumped —\n                     and write nothing. Allowed on a dirty tree.\n  --force            Proceed on a dirty working tree, and re-run even when the\n                     installed version already equals the target.\n  --exact            Pin exact versions (drop the ^ / ~ range prefix).\n  --codemods-only    Run ONLY the codemods for [from, to] against the installed\n                     tree — no version bump, no install. The recovery path after\n                     a manual bump, or after a failed install. Alias:\n                     --run-codemods.\n  -h, --help         Print this help.\n\nExamples:\n  voltro update\n  voltro update --to 0.6.0 --dry-run\n  voltro update --codemods-only --from 0.5.0 --to 0.6.0\n\nAfter updating: run `voltro db apply` (NOT db migrate) to reconcile changed\nframework tables, then your typecheck.", vd = (e) => e.includes("--help") || e.includes("-h"), yd = async (e, t = {}) => {
+	let n = t.latestVersion ?? cd, r = t.isGitClean ?? rd, i = t.install ?? ((e, t) => it(e, ["install"], {
 		cwd: t,
 		stdio: "inherit"
 	}).status ?? 1);
-	if (md(e)) return console.log(pd), 0;
-	let a = fd(e), o = C(a.root, "package.json");
+	if (vd(e)) return console.log(_d), 0;
+	let a = gd(e), o = C(a.root, "package.json");
 	if (!A(o)) return console.error(`voltro update: no package.json at ${a.root}`), 1;
-	let s = ad(o), c = sd(s);
+	let s = ld(o), c = dd(s);
 	if (c.length === 0) return console.error("voltro update: no @voltro/* dependencies here — not a Voltro app."), 1;
 	if (!a.dryRun && !a.force && !r(a.root)) return console.error("voltro update: working tree is not clean. Commit/stash first so you can review the"), console.error("  codemod diff — or re-run with --force (not recommended) or --dry-run (preview only)."), 1;
-	let l = Zu(a.root), u = l ?? a.root, d = () => od(a.root) ?? (l ? od(l) : void 0), f = a.from ?? d() ?? /^\d+\.\d+\.\d+$/.exec(c.find((e) => e.name === "@voltro/cli")?.spec.replace(/^[\^~]/, "") ?? "")?.[0];
+	let l = td(a.root), u = l ?? a.root, d = () => ud(a.root) ?? (l ? ud(l) : void 0), f = a.from ?? d() ?? /^\d+\.\d+\.\d+$/.exec(c.find((e) => e.name === "@voltro/cli")?.spec.replace(/^[\^~]/, "") ?? "")?.[0];
 	if (!f) return console.error("voltro update: could not determine the source framework version."), console.error("  Run your package manager install first, or pass --from <version>."), 1;
-	let p = Ju(a.root), m = a.to ?? (a.codemodsOnly ? d() : void 0) ?? n("@voltro/cli", p);
+	let p = Qu(a.root), m = a.to ?? (a.codemodsOnly ? d() : void 0) ?? n("@voltro/cli", p);
 	if (!m) return console.error(`voltro update: could not resolve the latest @voltro/cli version via ${p}.`), console.error("  Pin an explicit target with --to <version>."), 1;
-	if (a.codemodsOnly) return f === m ? (console.log(`voltro update: --codemods-only with from === to (${m}) — no delta, nothing to apply.`), console.log("  Pass --from <earlier-version> to re-run the codemods you skipped."), 0) : (console.log(`voltro update: re-applying codemods ${f} → ${m} (no version bump)…`), _d([
+	if (a.codemodsOnly) return f === m ? (console.log(`voltro update: --codemods-only with from === to (${m}) — no delta, nothing to apply.`), console.log("  Pass --from <earlier-version> to re-run the codemods you skipped."), 0) : (console.log(`voltro update: re-applying codemods ${f} → ${m} (no version bump)…`), xd([
 		"--root",
 		a.root,
 		"--from",
@@ -6766,7 +6906,7 @@ replicas = 1
 		...a.dryRun ? ["--dry-run"] : []
 	]));
 	if (f === m && !a.force) return console.log(`voltro update: already on ${m} — nothing to do.`), console.log("  (Bumped @voltro/* by hand? Re-run the skipped codemods with"), console.log("   `voltro update --codemods-only --from <earlier-version>`.)"), 0;
-	let h = [o, ...l ? Qu(l) : []], g = [], _ = /* @__PURE__ */ new Set();
+	let h = [o, ...l ? nd(l) : []], g = [], _ = /* @__PURE__ */ new Set();
 	for (let e of h) if (!_.has(e)) {
 		if (_.add(e), e === o) {
 			g.push({
@@ -6778,11 +6918,11 @@ replicas = 1
 		try {
 			g.push({
 				path: e,
-				pkg: ad(e)
+				pkg: ld(e)
 			});
 		} catch {}
 	}
-	let v = ud(g, m, a.exact);
+	let v = md(g, m, a.exact);
 	console.log(`voltro update: ${f} → ${m}`);
 	let y = v.length > 1;
 	l && console.log(`  workspace: ${l} (${v.length} package.json with @voltro/* deps)`);
@@ -6793,7 +6933,7 @@ replicas = 1
 		for (let n of e.entries.filter((e) => e.skipped)) console.log(`${t}${n.name}: kept (${n.skipped})`);
 	}
 	if (console.log(`  package manager: ${p}`), console.log(`  install runs in: ${u}`), console.log(`  codemods: applied from ${m} after install`), a.dryRun) return console.log("\n(dry-run — nothing written. Codemods are resolved from the target version and"), console.log(" only listed/applied after install; re-run without --dry-run to upgrade.)"), 0;
-	for (let e of dd(g, v)) Le(e.path, JSON.stringify(e.pkg, null, 2) + "\n");
+	for (let e of hd(g, v)) Le(e.path, JSON.stringify(e.pkg, null, 2) + "\n");
 	console.log(`\nInstalling with ${p} in ${u}…`);
 	let ee = i(p, u);
 	if (ee !== 0) return console.error(`\nvoltro update: ${p} install failed in ${u}.`), console.error(`  • package.json was bumped to ${m} (${v.length} file${v.length === 1 ? "" : "s"}).`), console.error("  • CODEMODS WERE NOT APPLIED — they ship inside the target version, which the"), console.error("    failed install did not put on disk, so there was nothing to run."), console.error("  Fix the install, re-run it, then apply the codemods you are missing:"), console.error(`    voltro update --codemods-only --from ${f} --to ${m}`), ee;
@@ -6813,7 +6953,7 @@ replicas = 1
 			stdio: "inherit"
 		});
 		if (e.status !== 0) return e.status ?? 1;
-	} else console.log("\nApplying codemods (in-process — installed bin not found)…"), await _d([
+	} else console.log("\nApplying codemods (in-process — installed bin not found)…"), await xd([
 		"--root",
 		a.root,
 		"--from",
@@ -6822,7 +6962,7 @@ replicas = 1
 		m
 	]);
 	return console.log("\n✓ update complete. Next:"), console.log("  • voltro db apply      # reconcile any changed framework tables (NOT db migrate)"), console.log("  • <your typecheck>     # verify the codemods + your code compile against the new API"), 0;
-}, gd = (e) => {
+}, bd = (e) => {
 	let t = (t) => {
 		let n = e.indexOf(t);
 		return n >= 0 ? e[n + 1] : void 0;
@@ -6833,8 +6973,8 @@ replicas = 1
 		to: t("--to") ?? "0.0.0",
 		dryRun: e.includes("--dry-run")
 	};
-}, _d = async (e) => {
-	let t = gd(e), n = await Uu({
+}, xd = async (e) => {
+	let t = bd(e), n = await qu({
 		root: t.root,
 		from: t.from,
 		to: t.to,
@@ -6851,18 +6991,18 @@ replicas = 1
 		}
 	}
 	return t.dryRun && console.log("\n(dry-run — no files written)"), 0;
-}, vd = k({ scope: "voltro:test" }), yd = async (e) => {
+}, Sd = k({ scope: "voltro:test" }), Cd = async (e) => {
 	let t = T(e.find((e) => !e.startsWith("-")) ?? process.cwd());
-	vd.info("running vitest", { root: t });
+	Sd.info("running vitest", { root: t });
 	let n = await (await import("vitest/node")).startVitest("test", [], {
 		root: t,
 		watch: !1,
 		passWithNoTests: !0
 	});
 	return n ? (await n.close(), +!n.state.getFiles().every((e) => e.result?.state !== "fail")) : 1;
-}, bd = class extends Me.TaggedError("BundleError") {}, xd = 0, Sd = (e) => C(at(), `voltro-sls-${e}-${process.pid}-${xd++}.mjs`), Cd = (e) => E.tryPromise({
+}, wd = class extends Me.TaggedError("BundleError") {}, Td = 0, Ed = (e) => C(at(), `voltro-sls-${e}-${process.pid}-${Td++}.mjs`), Dd = (e) => E.tryPromise({
 	try: async () => {
-		let t = Sd(x(e).replace(/\W+/g, "-"));
+		let t = Ed(x(e).replace(/\W+/g, "-"));
 		await nn.build({
 			entryPoints: [e],
 			outfile: t,
@@ -6879,12 +7019,12 @@ replicas = 1
 			await Je(t, { force: !0 });
 		}
 	},
-	catch: (t) => new bd({
+	catch: (t) => new wd({
 		file: e,
 		message: t instanceof Error ? t.message : String(t)
 	})
-}), wd = (e) => e === "browser" ? "browser" : e === "neutral" ? "neutral" : "node", Td = (e) => E.gen(function* () {
-	let t = yield* Cd(e.sourceFile), n = C(e.outDir, t.name), r = C(n, e.platform.esbuild.entryFile ?? (e.platform.esbuild.format === "esm" ? "index.mjs" : "index.js"));
+}), Od = (e) => e === "browser" ? "browser" : e === "neutral" ? "neutral" : "node", kd = (e) => E.gen(function* () {
+	let t = yield* Dd(e.sourceFile), n = C(e.outDir, t.name), r = C(n, e.platform.esbuild.entryFile ?? (e.platform.esbuild.format === "esm" ? "index.mjs" : "index.js"));
 	return yield* E.tryPromise({
 		try: async () => {
 			await Ge(n, { recursive: !0 }), await nn.build({
@@ -6896,7 +7036,7 @@ replicas = 1
 				},
 				outfile: r,
 				bundle: !0,
-				platform: wd(e.platform.esbuild.platform),
+				platform: Od(e.platform.esbuild.platform),
 				format: e.platform.esbuild.format,
 				...e.platform.esbuild.targetEs ? { target: e.platform.esbuild.targetEs } : {},
 				...e.platform.esbuild.conditions ? { conditions: [...e.platform.esbuild.conditions] } : {},
@@ -6905,7 +7045,7 @@ replicas = 1
 				logLevel: "silent"
 			});
 		},
-		catch: (t) => new bd({
+		catch: (t) => new wd({
 			file: e.sourceFile,
 			message: t instanceof Error ? t.message : String(t)
 		})
@@ -6915,32 +7055,32 @@ replicas = 1
 		dir: n,
 		...t.runtime ? { runtime: t.runtime } : {}
 	};
-}), Ed = (e, t = {}) => E.async((n) => {
+}), Ad = (e, t = {}) => E.async((n) => {
 	let r;
 	return rn(e, t).then((t) => {
 		r = t, console.log(`Serving ${e.length} function(s) on http://${t.host}:${t.port}`);
 		for (let e of t.routes) console.log(`  ▸ ${e.name}  ${e.method} http://${t.host}:${t.port}${e.path}`);
 		console.log("  (Ctrl-C to stop)");
 	}).catch((e) => n(E.fail(e instanceof Error ? e : Error(String(e))))), E.promise(() => r ? r.close() : Promise.resolve());
-}), Dd = (e) => JSON.stringify(e), Od = (e, t) => {
+}), jd = (e) => JSON.stringify(e), Md = (e, t) => {
 	let n = [
-		`name = ${Dd(e.name)}`,
-		`main = ${Dd(x(e.file))}`,
-		`compatibility_date = ${Dd(t.compatibilityDate ?? "2024-09-23")}`
+		`name = ${jd(e.name)}`,
+		`main = ${jd(x(e.file))}`,
+		`compatibility_date = ${jd(t.compatibilityDate ?? "2024-09-23")}`
 	];
 	t.nodeCompat && n.push("compatibility_flags = [\"nodejs_compat\"]"), n.push(`workers_dev = ${t.workersDev === !1 ? "false" : "true"}`);
 	let r = t.vars ?? {}, i = Object.keys(r);
 	if (i.length > 0) {
 		n.push("", "[vars]");
-		for (let e of i) n.push(`${e} = ${Dd(r[e])}`);
+		for (let e of i) n.push(`${e} = ${jd(r[e])}`);
 	}
 	return n.join("\n") + "\n";
-}, kd = /https:\/\/[^\s'"()<>]+workers\.dev[^\s'"()<>]*/, Ad = (e) => ({
+}, Nd = /https:\/\/[^\s'"()<>]+workers\.dev[^\s'"()<>]*/, Pd = (e) => ({
 	...an,
 	deploy: (t, n) => E.gen(function* () {
 		let r = n.options ?? {}, i = C(t.dir, "wrangler.toml");
 		yield* E.tryPromise({
-			try: () => Ye(i, Od(t, r), "utf8"),
+			try: () => Ye(i, Md(t, r), "utf8"),
 			catch: (e) => new L({
 				target: "cloudflare",
 				message: `failed to write wrangler.toml: ${String(e)}`
@@ -6979,17 +7119,17 @@ replicas = 1
 			target: "cloudflare",
 			message: `wrangler deploy failed (exit ${e.exitCode})`,
 			detail: e.stderr
-		}))), l = kd.exec(c.stdout)?.[0];
+		}))), l = Nd.exec(c.stdout)?.[0];
 		return {
 			target: "cloudflare",
 			name: t.name,
 			...l ? { url: l } : {}
 		};
 	})
-}), jd = /https:\/\/[^\s'"()<>]+\.fnc\.[a-z0-9-]+\.scw\.cloud[^\s'"()<>]*/, Md = "handler.handle", Nd = (e, t) => {
-	let n = [`handler=${Md}`, "http-option=enabled"], r = e.runtime;
+}), Fd = /https:\/\/[^\s'"()<>]+\.fnc\.[a-z0-9-]+\.scw\.cloud[^\s'"()<>]*/, Id = "handler.handle", Ld = (e, t) => {
+	let n = [`handler=${Id}`, "http-option=enabled"], r = e.runtime;
 	return r?.memoryMb !== void 0 && n.push(`memory-limit=${r.memoryMb}`), r?.timeoutSeconds !== void 0 && n.push(`timeout=${r.timeoutSeconds}s`), r?.minScale !== void 0 && n.push(`min-scale=${r.minScale}`), r?.maxScale !== void 0 && n.push(`max-scale=${r.maxScale}`), t && n.push(`privacy=${t}`), n;
-}, Pd = (e, t) => E.try({
+}, Rd = (e, t) => E.try({
 	try: () => {
 		let n = e.trim();
 		if (!n) return;
@@ -7001,14 +7141,14 @@ replicas = 1
 		message: "could not parse `scw function list` output",
 		detail: e instanceof Error ? e.message : String(e)
 	})
-}), Fd = (e) => ({
+}), zd = (e) => ({
 	...sn,
 	deploy: (t, n) => E.gen(function* () {
 		let r = n.options ?? {}, i = C(t.dir, "function.zip"), a = r.runtime ?? "node22", o = r.namespaceId;
 		if (n.dryRun) return yield* E.logInfo("dry-run: would deploy Scaleway Function", {
 			name: t.name,
 			zip: `zip -r -q ${i} . (cwd ${t.dir})`,
-			ensure: `scw function function create|update name=${t.name} runtime=${a} ${Nd(t, r.privacy).join(" ")}`,
+			ensure: `scw function function create|update name=${t.name} runtime=${a} ${Ld(t, r.privacy).join(" ")}`,
 			deploy: `scw function deploy name=${t.name} runtime=${a} zip-file=${i}${o ? ` namespace-id=${o}` : ""}`
 		}), {
 			target: "scaleway",
@@ -7037,7 +7177,7 @@ replicas = 1
 			i,
 			"."
 		], { cwd: t.dir }).pipe(E.mapError(s("zip")));
-		let c = yield* Pd((yield* e.exec("scw", [
+		let c = yield* Rd((yield* e.exec("scw", [
 			"function",
 			"function",
 			"list",
@@ -7052,7 +7192,7 @@ replicas = 1
 			"update",
 			c,
 			`runtime=${a}`,
-			...Nd(t, r.privacy)
+			...Ld(t, r.privacy)
 		], { env: n.env }).pipe(E.mapError(s("scw function update"))) : yield* e.exec("scw", [
 			"function",
 			"function",
@@ -7060,7 +7200,7 @@ replicas = 1
 			`namespace-id=${o}`,
 			`name=${t.name}`,
 			`runtime=${a}`,
-			...Nd(t, r.privacy)
+			...Ld(t, r.privacy)
 		], { env: n.env }).pipe(E.mapError(s("scw function create")));
 		let l = yield* e.exec("scw", [
 			"function",
@@ -7069,7 +7209,7 @@ replicas = 1
 			`namespace-id=${o}`,
 			`runtime=${a}`,
 			`zip-file=${i}`
-		], { env: n.env }).pipe(E.mapError(s("scw function deploy"))), u = jd.exec(l.stdout)?.[0];
+		], { env: n.env }).pipe(E.mapError(s("scw function deploy"))), u = Fd.exec(l.stdout)?.[0];
 		return {
 			target: "scaleway",
 			name: t.name,
@@ -7077,14 +7217,14 @@ replicas = 1
 			...u ? { url: u } : {}
 		};
 	})
-}), Id = (e, t) => `# AUTO-GENERATED by @voltro/serverless — self-hosted Node function image.
+}), Bd = (e, t) => `# AUTO-GENERATED by @voltro/serverless — self-hosted Node function image.
 FROM node:22-slim
 WORKDIR /app
 COPY ${e} ./
 ENV PORT=${t}
 EXPOSE ${t}
 CMD ["node", "${e}"]
-`, Ld = (e, t, n) => `# ${e} — self-hosted serverless function
+`, Vd = (e, t, n) => `# ${e} — self-hosted serverless function
 
 Built by \`voltro serverless\`. This folder is a complete, runnable artifact — the
 same handler that would run on Cloudflare/Scaleway, on your own infra.
@@ -7127,16 +7267,16 @@ ${e}.example.com {
 
 To run ALL of a project's functions in ONE process instead of a per-function
 image, use \`voltro serverless serve\` from the project root.
-`, Rd = (e, t) => E.tryPromise({
+`, Hd = (e, t) => E.tryPromise({
 	try: async () => {
 		let n = x(e.file);
-		return await Ye(C(e.dir, "Dockerfile"), Id(n, t), "utf8"), await Ye(C(e.dir, "README.md"), Ld(e.name, n, t), "utf8"), ["Dockerfile", "README.md"];
+		return await Ye(C(e.dir, "Dockerfile"), Bd(n, t), "utf8"), await Ye(C(e.dir, "README.md"), Vd(e.name, n, t), "utf8"), ["Dockerfile", "README.md"];
 	},
 	catch: (e) => new L({
 		target: "node",
 		message: `failed to write self-host kit: ${String(e)}`
 	})
-}), zd = () => ({
+}), Ud = () => ({
 	...on,
 	deploy: (e, t) => E.gen(function* () {
 		let n = (t.options ?? {}).port ?? 8910, r = x(e.file), i = {
@@ -7148,23 +7288,23 @@ image, use \`voltro serverless serve\` from the project root.
 		return t.dryRun ? (yield* E.logInfo("dry-run: would emit self-hosted Node artifact + kit (Dockerfile, README)", i), {
 			target: "node",
 			name: e.name
-		}) : (yield* Rd(e, n), yield* E.logInfo("self-hosted Node artifact + kit ready", i), {
+		}) : (yield* Hd(e, n), yield* E.logInfo("self-hosted Node artifact + kit ready", i), {
 			target: "node",
 			name: e.name,
 			url: `http://localhost:${n}`
 		});
 	})
-}), Bd = [
+}), Wd = [
 	"node",
 	"cloudflare",
 	"scaleway"
-], Vd = (e) => Bd.includes(e), Hd = (e, t) => {
+], Gd = (e) => Wd.includes(e), Kd = (e, t) => {
 	switch (e) {
-		case "node": return zd();
-		case "cloudflare": return Ad(t);
-		case "scaleway": return Fd(t);
+		case "node": return Ud();
+		case "cloudflare": return Pd(t);
+		case "scaleway": return zd(t);
 	}
-}, Ud = class extends Me.TaggedError("CommandError") {}, Wd = (e, t) => [e, ...t].join(" "), Gd = {
+}, qd = class extends Me.TaggedError("CommandError") {}, Jd = (e, t) => [e, ...t].join(" "), Yd = {
 	exec: (e, t, n) => E.async((r) => {
 		let i = rt(e, [...t], {
 			cwd: n?.cwd,
@@ -7182,8 +7322,8 @@ image, use \`voltro serverless serve\` from the project root.
 			a += String(e);
 		}), i.stderr?.on("data", (e) => {
 			o += String(e);
-		}), i.on("error", (n) => r(E.fail(new Ud({
-			command: Wd(e, t),
+		}), i.on("error", (n) => r(E.fail(new qd({
+			command: Jd(e, t),
 			exitCode: -1,
 			stderr: n.message
 		})))), i.on("close", (n) => {
@@ -7192,8 +7332,8 @@ image, use \`voltro serverless serve\` from the project root.
 				exitCode: i,
 				stdout: a,
 				stderr: o
-			}) : E.fail(new Ud({
-				command: Wd(e, t),
+			}) : E.fail(new qd({
+				command: Jd(e, t),
 				exitCode: i,
 				stderr: o || a
 			})));
@@ -7205,7 +7345,7 @@ image, use \`voltro serverless serve\` from the project root.
 		let n = rt(process.platform === "win32" ? "where" : "which", [e], { stdio: "ignore" });
 		n.on("error", () => t(E.succeed(!1))), n.on("close", (e) => t(E.succeed(e === 0)));
 	})
-}, Q = (e) => E.sync(() => console.log(e)), Kd = (e, t) => {
+}, Q = (e) => E.sync(() => console.log(e)), Xd = (e, t) => {
 	let n = "node", r = C(t, ".voltro", "serverless"), i = !1, a = {}, o = [], s;
 	for (let c = 0; c < e.length; c++) {
 		let l = e[c];
@@ -7240,7 +7380,7 @@ image, use \`voltro serverless serve\` from the project root.
 			default: l.startsWith("-") ? s = `unknown flag '${l}'` : o.push(l);
 		}
 	}
-	return Vd(n) || (s = `unknown --target '${n}' (one of: ${Bd.join(", ")})`, n = "node"), {
+	return Gd(n) || (s = `unknown --target '${n}' (one of: ${Wd.join(", ")})`, n = "node"), {
 		target: n,
 		out: r,
 		dryRun: i,
@@ -7248,7 +7388,7 @@ image, use \`voltro serverless serve\` from the project root.
 		positional: o,
 		error: s
 	};
-}, qd = (e, t) => e.length > 0 ? E.succeed(e.map((e) => T(t, e))) : Hl(t), Jd = () => Q([
+}, Zd = (e, t) => e.length > 0 ? E.succeed(e.map((e) => T(t, e))) : Hl(t), Qd = () => Q([
 	"voltro serverless <list|dev|serve|build|deploy> [options] [files…]",
 	"",
 	"  list                       discover *.serverless.ts files",
@@ -7258,7 +7398,7 @@ image, use \`voltro serverless serve\` from the project root.
 	"  deploy  [--target <id>]    ship: node → self-host artifact, cloudflare/scaleway → vendor",
 	"",
 	"Options:",
-	`  --target <id>              ${Bd.join(" | ")}  (default node)`,
+	`  --target <id>              ${Wd.join(" | ")}  (default node)`,
 	"  --out <dir>                artifact dir (default .voltro/serverless)",
 	"  --dry-run                  bundle, then print the deploy plan",
 	"  --port <n>                 dev/serve: listen port (default 8910)",
@@ -7268,7 +7408,7 @@ image, use \`voltro serverless serve\` from the project root.
 	"  --node-compat              Cloudflare: add nodejs_compat flag",
 	"  --compat-date <date>       Cloudflare: compatibility_date",
 	"  --runtime <r>              Scaleway: node20 | node22"
-].join("\n")).pipe(E.as(0)), Yd = (e) => {
+].join("\n")).pipe(E.as(0)), $d = (e) => {
 	let t = 8910, n, r = [], i;
 	for (let a = 0; a < e.length; a++) {
 		let o = e[a];
@@ -7280,13 +7420,13 @@ image, use \`voltro serverless serve\` from the project root.
 		files: r,
 		error: i
 	};
-}, Xd = (e, t, n) => E.gen(function* () {
-	let { port: r, host: i, files: a, error: o } = Yd(e);
+}, ef = (e, t, n) => E.gen(function* () {
+	let { port: r, host: i, files: a, error: o } = $d(e);
 	if (o) return yield* Q(`voltro serverless ${n.label}: ${o}`), 2;
 	let s = a.length > 0 ? a.map((e) => T(t, e)) : yield* Hl(t);
 	if (s.length === 0) return yield* Q("No *.serverless.ts function found."), 0;
 	if (n.single && s.length > 1) return yield* Q(`voltro serverless dev: multiple functions found — name one (or use \`serve\`):\n${s.map((e) => `  ${w(t, e)}`).join("\n")}`), 2;
-	let c = yield* E.forEach(s, (e) => Cd(e).pipe(E.map((e) => ({
+	let c = yield* E.forEach(s, (e) => Dd(e).pipe(E.map((e) => ({
 		ok: !0,
 		d: e
 	})), E.catchAll((e) => E.succeed({
@@ -7297,36 +7437,36 @@ image, use \`voltro serverless serve\` from the project root.
 	let u = c.flatMap((e) => e.ok ? [e.d] : []);
 	if (u.length === 0) return 1;
 	let d = i ?? n.defaultHost;
-	return yield* Ed(u, {
+	return yield* Ad(u, {
 		port: r,
 		...d ? { host: d } : {}
 	}).pipe(E.catchAll((e) => E.as(Q(`server error: ${e.message}`), void 0))), 0;
-}), Zd = (e) => E.gen(function* () {
+}), tf = (e) => E.gen(function* () {
 	let [t, ...n] = e, r = process.cwd();
-	if (t === void 0 || t === "help" || t === "--help" || t === "-h") return yield* Jd();
-	if (t === "dev") return yield* Xd(n, r, {
+	if (t === void 0 || t === "help" || t === "--help" || t === "-h") return yield* Qd();
+	if (t === "dev") return yield* ef(n, r, {
 		single: !0,
 		defaultHost: "127.0.0.1",
 		label: "dev"
 	});
-	if (t === "serve") return yield* Xd(n, r, {
+	if (t === "serve") return yield* ef(n, r, {
 		single: !1,
 		defaultHost: "0.0.0.0",
 		label: "serve"
 	});
 	if (t !== "list" && t !== "build" && t !== "deploy") return yield* Q(`voltro serverless: unknown subcommand '${t}'`), 2;
-	let i = Kd(n, r);
+	let i = Xd(n, r);
 	if (i.error) return yield* Q(`voltro serverless: ${i.error}`), 2;
-	let a = yield* qd(i.positional, r);
+	let a = yield* Zd(i.positional, r);
 	if (a.length === 0) return yield* Q("No *.serverless.ts functions found."), 0;
 	if (t === "list") {
 		yield* Q(`Found ${a.length} serverless function(s):`);
 		for (let e of a) yield* Q(`  ${w(r, e)}`);
 		return 0;
 	}
-	let o = Gd, s = Hd(i.target, o), c = C(i.out, s.id), l = 0;
+	let o = Yd, s = Kd(i.target, o), c = C(i.out, s.id), l = 0;
 	for (let e of a) {
-		let n = yield* Td({
+		let n = yield* kd({
 			platform: s,
 			sourceFile: e,
 			outDir: c
@@ -7344,7 +7484,7 @@ image, use \`voltro serverless serve\` from the project root.
 		if (t === "build") {
 			if (s.id === "node") {
 				let e = typeof i.options.port == "number" ? i.options.port : 8910;
-				yield* Rd(n.b, e).pipe(E.catchAll(() => E.void));
+				yield* Hd(n.b, e).pipe(E.catchAll(() => E.void));
 			}
 			yield* Q(`  ✓ bundled ${n.b.name} → ${w(r, n.b.file)} [${s.id}]`);
 			continue;
@@ -7368,25 +7508,25 @@ image, use \`voltro serverless serve\` from the project root.
 		yield* Q(`  ✓ ${t === "deploy" ? "deployed" : "built"} ${n.b.name} [${s.id}]${u}`);
 	}
 	return +(l > 0);
-}), Qd = (e) => r(Zd(e), { scope: "voltro:serverless" }), $d = async (e) => {
+}), nf = (e) => i(tf(e), { scope: "voltro:serverless" }), rf = async (e) => {
 	try {
 		return await We(e), !0;
 	} catch {
 		return !1;
 	}
-}, ef = "# AUTO-GENERATED by @voltro/cli — hashed assets are immutable for a year.\n/assets/*\n  Cache-Control: public, max-age=31536000, immutable\n", tf = "# AUTO-GENERATED by @voltro/cli — single-page-app fallback.\n/*  /index.html  200\n", nf = (e, t) => E.promise(async () => {
+}, af = "# AUTO-GENERATED by @voltro/cli — hashed assets are immutable for a year.\n/assets/*\n  Cache-Control: public, max-age=31536000, immutable\n", of = "# AUTO-GENERATED by @voltro/cli — single-page-app fallback.\n/*  /index.html  200\n", sf = (e, t) => E.promise(async () => {
 	let n = [], r = C(e, "_headers");
-	if (await $d(r) || (await Ye(r, ef, "utf8"), n.push("_headers")), t) {
+	if (await rf(r) || (await Ye(r, af, "utf8"), n.push("_headers")), t) {
 		let t = C(e, "_redirects");
-		await $d(t) || (await Ye(t, tf, "utf8"), n.push("_redirects"));
+		await rf(t) || (await Ye(t, of, "utf8"), n.push("_redirects"));
 	}
 	return n;
-}), rf = /https:\/\/[^\s'"()<>]+\.pages\.dev[^\s'"()<>]*/, af = (e) => ({
+}), cf = /https:\/\/[^\s'"()<>]+\.pages\.dev[^\s'"()<>]*/, lf = (e) => ({
 	id: "cloudflare-pages",
 	label: "Cloudflare Pages",
 	deploy: (t, n) => E.gen(function* () {
 		let r = n.options ?? {};
-		yield* nf(t, n.spaFallback ?? !1);
+		yield* sf(t, n.spaFallback ?? !1);
 		let i = [
 			"pages",
 			"deploy",
@@ -7419,7 +7559,7 @@ image, use \`voltro serverless serve\` from the project root.
 			host: "cloudflare-pages",
 			message: `wrangler pages deploy failed (exit ${e.exitCode})`,
 			detail: e.stderr
-		}))), c = rf.exec(s.stdout)?.[0];
+		}))), c = cf.exec(s.stdout)?.[0];
 		return {
 			host: "cloudflare-pages",
 			filesUploaded: 0,
@@ -7427,7 +7567,7 @@ image, use \`voltro serverless serve\` from the project root.
 			...c ? { url: c } : {}
 		};
 	})
-}), of = (e) => (e.match(/^upload:/gm) ?? []).length, sf = (e) => ({
+}), uf = (e) => (e.match(/^upload:/gm) ?? []).length, df = (e) => ({
 	id: "s3",
 	label: "S3-compatible bucket (aws s3 sync)",
 	deploy: (t, n) => E.gen(function* () {
@@ -7484,24 +7624,24 @@ image, use \`voltro serverless serve\` from the project root.
 		}))), u = yield* l(s, "aws s3 sync (assets)"), d = yield* l(c, "aws s3 sync (html)");
 		return {
 			host: "s3",
-			filesUploaded: of(u.stdout) + of(d.stdout),
+			filesUploaded: uf(u.stdout) + uf(d.stdout),
 			filesSkipped: 0,
 			...r.websiteUrl ? { url: r.websiteUrl } : {}
 		};
 	})
-}), cf = (e) => {
+}), ff = (e) => {
 	try {
 		let t = JSON.parse(e);
 		return t.ssl_url ?? t.url ?? t.deploy_url;
 	} catch {
 		return;
 	}
-}, lf = (e) => ({
+}, pf = (e) => ({
 	id: "netlify",
 	label: "Netlify",
 	deploy: (t, n) => E.gen(function* () {
 		let r = n.options ?? {};
-		yield* nf(t, n.spaFallback ?? !1);
+		yield* sf(t, n.spaFallback ?? !1);
 		let i = [
 			"deploy",
 			"--dir",
@@ -7524,7 +7664,7 @@ image, use \`voltro serverless serve\` from the project root.
 			host: "netlify",
 			message: "`netlify` CLI not found on PATH (install: npm i -g netlify-cli)"
 		}));
-		let a = cf((yield* e.exec("netlify", i, { env: n.env }).pipe(E.mapError((e) => new R({
+		let a = ff((yield* e.exec("netlify", i, { env: n.env }).pipe(E.mapError((e) => new R({
 			host: "netlify",
 			message: `netlify deploy failed (exit ${e.exitCode})`,
 			detail: e.stderr
@@ -7536,17 +7676,17 @@ image, use \`voltro serverless serve\` from the project root.
 			...a ? { url: a } : {}
 		};
 	})
-}), uf = [
+}), mf = [
 	"cloudflare-pages",
 	"s3",
 	"netlify"
-], df = (e) => uf.includes(e), ff = (e, t) => {
+], hf = (e) => mf.includes(e), gf = (e, t) => {
 	switch (e) {
-		case "cloudflare-pages": return af(t);
-		case "s3": return sf(t);
-		case "netlify": return lf(t);
+		case "cloudflare-pages": return lf(t);
+		case "s3": return df(t);
+		case "netlify": return pf(t);
 	}
-}, $ = (e) => E.sync(() => console.log(e)), pf = (e) => E.promise(() => We(e).then(() => !0, () => !1)), mf = (e, t) => {
+}, $ = (e) => E.sync(() => console.log(e)), _f = (e) => E.promise(() => We(e).then(() => !0, () => !1)), vf = (e, t) => {
 	let n = "", r = T(t, "dist"), i = t, a = !1, o = !1, s = !1, c = {}, l;
 	for (let u = 0; u < e.length; u++) {
 		let d = e[u];
@@ -7600,7 +7740,7 @@ image, use \`voltro serverless serve\` from the project root.
 		options: c,
 		error: l
 	};
-}, hf = (e, t) => E.gen(function* () {
+}, yf = (e, t) => E.gen(function* () {
 	return (yield* E.promise(() => Ke(C(e, ".voltro-build.json"), "utf8").then((e) => {
 		try {
 			let t = JSON.parse(e).profile;
@@ -7609,14 +7749,14 @@ image, use \`voltro serverless serve\` from the project root.
 			return;
 		}
 	}, () => void 0))) ?? (yield* Mn(t));
-}), gf = () => $([
+}), bf = () => $([
 	"voltro static <hosts|deploy> [options]",
 	"",
 	"  hosts                      list supported static hosts",
 	"  deploy --host <id>         deploy ./dist to a host",
 	"",
 	"Options:",
-	`  --host <id>                ${uf.join(" | ")}`,
+	`  --host <id>                ${mf.join(" | ")}`,
 	"  --dir <dir>                static dir to deploy (default dist)",
 	"  --app <dir>                web app source root for the render-mode gate (default cwd)",
 	"  --allow-dynamic            deploy even with ssr/isr pages (they become client-rendered)",
@@ -7628,25 +7768,25 @@ image, use \`voltro serverless serve\` from the project root.
 	"  --branch <name>            cloudflare-pages: branch",
 	"  --site-id <id>             netlify: site",
 	"  --website-url <url>        s3: public URL to report"
-].join("\n")).pipe(E.as(0)), _f = (e) => E.gen(function* () {
+].join("\n")).pipe(E.as(0)), xf = (e) => E.gen(function* () {
 	let [t, ...n] = e, r = process.cwd();
-	if (t === void 0 || t === "help" || t === "--help" || t === "-h") return yield* gf();
+	if (t === void 0 || t === "help" || t === "--help" || t === "-h") return yield* bf();
 	if (t === "hosts") {
 		yield* $("Supported static hosts:");
-		for (let e of uf) yield* $(`  ${e}`);
+		for (let e of mf) yield* $(`  ${e}`);
 		return 0;
 	}
 	if (t !== "deploy") return yield* $(`voltro static: unknown subcommand '${t}'`), 2;
-	let i = mf(n, r);
+	let i = vf(n, r);
 	if (i.error) return yield* $(`voltro static: ${i.error}`), 2;
-	if (!df(i.host)) return yield* $(`voltro static deploy: --host must be one of ${uf.join(", ")}`), 2;
-	if (!(yield* pf(i.dir))) return yield* $(`voltro static deploy: directory not found: ${i.dir} (run \`voltro build\` first?)`), 1;
-	let a = yield* hf(i.dir, i.app);
+	if (!hf(i.host)) return yield* $(`voltro static deploy: --host must be one of ${mf.join(", ")}`), 2;
+	if (!(yield* _f(i.dir))) return yield* $(`voltro static deploy: directory not found: ${i.dir} (run \`voltro build\` first?)`), 1;
+	let a = yield* yf(i.dir, i.app);
 	if (!a.staticSafe) {
 		if (!i.allowDynamic) return yield* $(`voltro static deploy: "${w(process.cwd(), i.app) || "."}" is NOT pure-static —`), a.counts.ssr > 0 && (yield* $(`  • ${a.counts.ssr} ssr page(s): need a runtime; a CDN can't render them`)), a.counts.isr > 0 && (yield* $(`  • ${a.counts.isr} isr page(s): need a runtime for revalidation`)), a.dynamicMissing.length > 0 && (yield* $(`  • ${a.dynamicMissing.length} dynamic route(s) without getStaticPaths → no artifact built (missing on a CDN): ${a.dynamicMissing.join(", ")}`)), yield* $("  → Serve those on a runtime (`voltro start` / a container), OR add getStaticPaths /"), yield* $("    set the pages to `static` / `spa`. To ship anyway (ssr/isr become client-rendered), pass --allow-dynamic."), 2;
 		yield* $("  ⚠ --allow-dynamic: ssr/isr pages will be client-rendered only (no server first-paint).");
 	}
-	let o = ff(i.host, Gd), s = {
+	let o = gf(i.host, Yd), s = {
 		env: process.env,
 		options: i.options,
 		spaFallback: i.spaFallback,
@@ -7661,7 +7801,7 @@ image, use \`voltro serverless serve\` from the project root.
 	if (!c.ok) return yield* $(`  ✗ ${o.label}: ${c.message}`), 1;
 	let l = c.r.url ? ` → ${c.r.url}` : i.dryRun ? " (dry-run)" : "", u = i.dryRun ? "" : ` (${c.r.filesUploaded} uploaded)`;
 	return yield* $(`  ✓ deployed ${i.dir} to ${o.label}${u}${l}`), 0;
-}), vf = [
+}), Sf = [
 	{
 		name: "list-templates",
 		summary: "List available app templates (kind, summary, tags).",
@@ -7732,7 +7872,7 @@ image, use \`voltro serverless serve\` from the project root.
 		name: "test",
 		summary: "Run vitest against the app at the cwd (auto-discovers *.test.ts/tsx).",
 		status: "wired",
-		run: yd
+		run: Cd
 	},
 	{
 		name: "cache",
@@ -7759,7 +7899,7 @@ image, use \`voltro serverless serve\` from the project root.
 		run: async (e) => {
 			let t = e.find((e) => !e.startsWith("-")) ?? process.cwd();
 			if (e.includes("--preflight")) return Or(T(t), !0);
-			let n = await i(T(t));
+			let n = await m(T(t));
 			return n.ran ? n.exitCode : Ee(e);
 		}
 	},
@@ -7809,13 +7949,13 @@ image, use \`voltro serverless serve\` from the project root.
 		name: "serverless",
 		summary: "Bundle + deploy standalone *.serverless.ts functions to a function host. Subcommands: list, build, deploy [--target cloudflare|scaleway] [--dry-run].",
 		status: "wired",
-		run: Qd
+		run: nf
 	},
 	{
 		name: "static",
 		summary: "Deploy a pre-built static site (./dist) to a cheap external host. Subcommands: hosts, deploy --host cloudflare-pages|s3|netlify [--spa] [--dry-run].",
 		status: "wired",
-		run: (e) => r(_f(e), { scope: "voltro:static" })
+		run: (e) => i(xf(e), { scope: "voltro:static" })
 	},
 	{
 		name: "db",
@@ -7857,14 +7997,14 @@ image, use \`voltro serverless serve\` from the project root.
 		name: "update",
 		summary: "Upgrade the app to the latest framework: bump every @voltro/* dependency (across ALL workspace members, install once at the workspace root), then run the codemods shipped with the target version. Flags: --to <version>, --from <version>, --codemods-only, --dry-run, --force, --exact, --help. After: run `voltro db apply`.",
 		status: "wired",
-		run: hd
+		run: yd
 	},
 	{
 		name: "_apply-codemods",
 		summary: "Internal: apply shipped codemods for a framework version jump (re-exec target of `voltro update`).",
 		status: "wired",
 		hidden: !0,
-		run: _d
+		run: xd
 	},
 	{
 		name: "embeddings",
@@ -7882,7 +8022,7 @@ image, use \`voltro serverless serve\` from the project root.
 		name: "agents-md",
 		summary: "Write the framework-tailored AGENTS.md into the project root (use --force to overwrite).",
 		status: "wired",
-		run: ne
+		run: y
 	},
 	{
 		name: "schedule-manifest",
@@ -7936,7 +8076,7 @@ image, use \`voltro serverless serve\` from the project root.
 		name: "help",
 		summary: "Print this help.",
 		status: "wired",
-		run: async (e) => (yf(), 0)
+		run: async (e) => (Cf(), 0)
 	},
 	{
 		name: "version",
@@ -7944,18 +8084,18 @@ image, use \`voltro serverless serve\` from the project root.
 		status: "wired",
 		run: async () => (console.log("framework cli v0.0.0 (scaffold)"), 0)
 	}
-], yf = () => {
-	let e = vf.filter((e) => !e.hidden), t = e.reduce((e, t) => Math.max(e, t.name.length), 0);
+], Cf = () => {
+	let e = Sf.filter((e) => !e.hidden), t = e.reduce((e, t) => Math.max(e, t.name.length), 0);
 	console.log("framework <command> [args]"), console.log(), console.log("Commands:");
 	for (let n of e) {
 		let e = " ".repeat(t - n.name.length + 2);
 		console.log(`    ${n.name}${e}${n.summary}`);
 	}
-}, bf = async (e) => {
+}, wf = async (e) => {
 	let [t, ...n] = e;
-	if (!t) return yf(), 0;
-	let r = vf.find((e) => e.name === t);
+	if (!t) return Cf(), 0;
+	let r = Sf.find((e) => e.name === t);
 	return r ? r.run(n) : (console.error(`framework: unknown command '${t}'`), console.error("run 'voltro help' for available commands"), 2);
 };
 //#endregion
-export { Ka as i, bf as n, yf as r, vf as t };
+export { Ka as i, wf as n, Cf as r, Sf as t };