@zitadel/cli 0.1.0-alpha.10 → 0.1.0-alpha.12

package/dist/{orca-BoTFU8SI.mjs → orca-DU8myWGm.mjs}

@@ -1,4 +1,4 @@
-import { C as isObject, E as ZitadelError, T as stableStringify, n as DEFAULT_SERVER, w as parseJsonObject, x as MANAGED_MARKER, y as npmDistTagForCliVersion } from "./oclif-B7lBzh3R.mjs";
+import { C as isObject, E as ZitadelError, T as stableStringify, n as DEFAULT_SERVER, w as parseJsonObject, x as MANAGED_MARKER, y as npmDistTagForCliVersion } from "./oclif-BoUVygsZ.mjs";
 import { basename, dirname, join } from "node:path";
 import { chmod, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { builders, generateCode, parseModule } from "magicast";
@@ -186,6 +186,28 @@ async function dirExists(path) {
 	return stat(path).then((s) => s.isDirectory(), () => false);
 }
 //#endregion
+//#region src/lib/orca/detectors/qwik.ts
+/**
+* Detects a Vite + Qwik single-page app: depends on `@builder.io/qwik` and
+* `vite` but NOT `@builder.io/qwik-city` (Qwik City is its own meta-framework
+* and ships Qwik). The source dir is `src`, the dev port comes from the
+* project, and the issuer is derived from it.
+*/
+var QwikDetector = class {
+	framework = "qwik";
+	async detect(cwd) {
+		const pkg = await readPackageJson(cwd).catch(() => void 0);
+		if (!pkg || hasDependency(pkg, "@builder.io/qwik-city") || !hasDependency(pkg, "@builder.io/qwik") || !hasDependency(pkg, "vite")) return null;
+		const devPort = await detectDevPort(cwd, pkg);
+		return {
+			id: "qwik",
+			appDir: "src",
+			devPort,
+			url: issuerFromPort(devPort)
+		};
+	}
+};
+//#endregion
 //#region src/lib/orca/detectors/react.ts
 /**
 * Detects a Vite + React single-page app and extracts its facts: the source
@@ -211,6 +233,50 @@ var ReactDetector = class {
 	}
 };
 //#endregion
+//#region src/lib/orca/detectors/solid.ts
+/**
+* Detects a Vite + Solid single-page app: depends on `solid-js` and `vite` but
+* NOT `@solidjs/start` (SolidStart is its own meta-framework and ships Solid).
+* The source dir is `src`, the dev port comes from the project, and the issuer
+* is derived from it.
+*/
+var SolidDetector = class {
+	framework = "solid";
+	async detect(cwd) {
+		const pkg = await readPackageJson(cwd).catch(() => void 0);
+		if (!pkg || hasDependency(pkg, "@solidjs/start") || !hasDependency(pkg, "solid-js") || !hasDependency(pkg, "vite")) return null;
+		const devPort = await detectDevPort(cwd, pkg);
+		return {
+			id: "solid",
+			appDir: "src",
+			devPort,
+			url: issuerFromPort(devPort)
+		};
+	}
+};
+//#endregion
+//#region src/lib/orca/detectors/svelte.ts
+/**
+* Detects a Vite + Svelte single-page app: depends on `svelte` and `vite` but
+* NOT `@sveltejs/kit` (SvelteKit is its own meta-framework and ships Svelte).
+* The source dir is `src`, the dev port comes from the project, and the issuer
+* is derived from it.
+*/
+var SvelteDetector = class {
+	framework = "svelte";
+	async detect(cwd) {
+		const pkg = await readPackageJson(cwd).catch(() => void 0);
+		if (!pkg || hasDependency(pkg, "@sveltejs/kit") || !hasDependency(pkg, "svelte") || !hasDependency(pkg, "vite")) return null;
+		const devPort = await detectDevPort(cwd, pkg);
+		return {
+			id: "svelte",
+			appDir: "src",
+			devPort,
+			url: issuerFromPort(devPort)
+		};
+	}
+};
+//#endregion
 //#region src/lib/orca/detectors/vue.ts
 /**
 * Detects a Vite + Vue single-page app: depends on `vue` and `vite` but NOT
@@ -245,6 +311,9 @@ const detectors = [
 	new NuxtDetector(),
 	new ReactDetector(),
 	new VueDetector(),
+	new SolidDetector(),
+	new SvelteDetector(),
+	new QwikDetector(),
 	new AngularDetector()
 ];
 //#endregion
@@ -613,6 +682,7 @@ var AbstractRulePatcher = class {
 				path: ".env.example",
 				entries: {
 					ZITADEL_PROJECT_ID: "",
+					ZITADEL_PROJECT_SECRET: "",
 					ZITADEL_ENVIRONMENT: "",
 					ZITADEL_ISSUER: "",
 					ZITADEL_URL: ""
@@ -623,6 +693,7 @@ var AbstractRulePatcher = class {
 				path: ".env.local",
 				entries: {
 					ZITADEL_PROJECT_ID: ctx.project.id,
+					ZITADEL_PROJECT_SECRET: ctx.project.projectSecret,
 					ZITADEL_ENVIRONMENT: "development",
 					ZITADEL_ISSUER: ctx.issuer,
 					ZITADEL_URL: ctx.server
@@ -855,8 +926,8 @@ const PROXY_PATH = "/__nextgen";
 * The managed root component `src/app/app.ts`: a standalone component that
 * renders the `@zitadel/sdk-angular` widgets based on the current path. The
 * project id (public, not secret) is inlined; the dev proxy in `proxy.conf.cjs`
-* attaches the `sk_<project_id>` bearer (derived from that public id)
-* server-side, and no secret reaches the browser.
+* attaches the project service-key secret as the bearer server-side (read from
+* `.env.local`), and no secret reaches the browser.
 */
 function appComponentTemplate(projectId) {
 	return `${MANAGED_MARKER}
@@ -888,40 +959,81 @@ export class App {
 */
 function appTemplateHtml() {
 	return `<!-- ${MANAGED_MARKER} -->
-@if (path.startsWith('/profile')) {
-  <zitadel-auth-logout [project]="project" [postSignOutUrl]="'/login'"></zitadel-auth-logout>
+@if (path === '/') {
+  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
+    <section style="width:100%;max-width:560px">
+      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
+      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
+      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
+        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
+        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
+        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
+      </div>
+    </section>
+  </main>
+} @else if (path.startsWith('/profile')) {
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <zitadel-auth-logout [project]="project" [postSignOutUrl]="'/login'"></zitadel-auth-logout>
+  </div>
 } @else if (path.startsWith('/register')) {
-  <zitadel-auth-login
-    [project]="project"
-    purpose="register"
-    [postSignInUrl]="'/profile'"
-  ></zitadel-auth-login>
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <zitadel-auth-login
+      [project]="project"
+      purpose="register"
+      [postSignInUrl]="'/profile'"
+    ></zitadel-auth-login>
+  </div>
 } @else {
-  <zitadel-auth-login
-    [project]="project"
-    purpose="login"
-    [postSignInUrl]="'/profile'"
-  ></zitadel-auth-login>
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <zitadel-auth-login
+      [project]="project"
+      purpose="login"
+      [postSignInUrl]="'/profile'"
+    ></zitadel-auth-login>
+  </div>
 }
 `;
 }
 /**
 * The managed `proxy.conf.cjs` for `ng serve`: forwards `/__nextgen/*` to the
-* backend (from `zitadel.json`), strips the prefix, and attaches the project's
-* `sk_<project_id>` bearer to every proxied request. The prefix strip and the
-* bearer are each provided in both the http-proxy-middleware form
-* (`pathRewrite`/`onProxyReq`) and the Vite form (`rewrite`/`configure`), so
-* both fire whichever proxy layer Angular's dev server uses.
+* backend and attaches the project's service-key secret as the bearer on every
+* proxied request. Both the backend URL (`ZITADEL_URL`) and the secret
+* (`ZITADEL_PROJECT_SECRET`) are read from `.env.local`, which `zitadel setup`
+* writes and `.gitignore` excludes — Angular's CLI does not auto-load env files
+* into the dev-server process, so this file does it itself with a small inline
+* parser. The prefix strip and the bearer are each provided in both the
+* http-proxy-middleware form (`pathRewrite`/`onProxyReq`) and the Vite form
+* (`rewrite`/`configure`), so both fire whichever proxy layer Angular's
+* dev server uses.
 */
 function proxyConfTemplate() {
 	return `${MANAGED_MARKER}
-const { readFileSync } = require("node:fs");
+const { readFileSync, existsSync } = require("node:fs");
 
-const config = JSON.parse(readFileSync("zitadel.json", "utf8"));
-if (!config.project || !config.server) {
-  throw new Error("zitadel.json is missing \\"project\\" or \\"server\\"; re-run zitadel setup.");
+function loadEnvLocal() {
+  if (!existsSync(".env.local")) return {};
+  const out = {};
+  for (const line of readFileSync(".env.local", "utf8").split(/\\r?\\n/)) {
+    const m = line.match(/^\\s*(?:export\\s+)?([A-Z_][A-Z0-9_]*)\\s*=\\s*(.*)$/);
+    if (m) {
+      const raw = m[2].trim();
+      const quoted = raw.match(/^(['"])(.*)\\1\\s*(?:#.*)?$/);
+      out[m[1]] = quoted ? quoted[2] : raw.replace(/\\s+#.*$/, "").trim();
+    }
+  }
+  return out;
 }
-const bearer = \`Bearer sk_\${config.project}\`;
+
+const env = loadEnvLocal();
+const server = process.env.ZITADEL_URL ?? env.ZITADEL_URL;
+const secret = process.env.ZITADEL_PROJECT_SECRET ?? env.ZITADEL_PROJECT_SECRET;
+if (!server) {
+  throw new Error("ZITADEL_URL is not set; add it to .env.local (zitadel setup writes it).");
+}
+if (!secret) {
+  throw new Error("ZITADEL_PROJECT_SECRET is not set; add it to .env.local (zitadel setup writes it).");
+}
+const bearer = \`Bearer \${secret}\`;
 
 function setBearer(proxyReq) {
   proxyReq.setHeader("authorization", bearer);
@@ -933,7 +1045,7 @@ function stripPrefix(path) {
 
 module.exports = {
   "${PROXY_PATH}": {
-    target: config.server,
+    target: server,
     changeOrigin: false,
     pathRewrite: stripPrefix,
     rewrite: stripPrefix,
@@ -945,7 +1057,7 @@ module.exports = {
 }
 //#endregion
 //#region src/lib/orca/patchers/rule/angular/index.ts
-const SDK_DEPENDENCY$3 = "@zitadel/sdk-angular";
+const SDK_DEPENDENCY$6 = "@zitadel/sdk-angular";
 /**
 * Adds a `dev: "ng serve"` script only when the project does not already define
 * one. `ng new` ships only a `start` script, but the CLI tells every framework
@@ -968,8 +1080,9 @@ function ensureDevScript(source) {
 * Rule-based patcher for an Angular app. Inherits the shared `.zitadel/` base
 * files from {@link AbstractRulePatcher} and contributes the managed root
 * component (`app.ts`/`app.html`) that renders the `@zitadel/sdk-angular`
-* widgets, a `proxy.conf.cjs` dev proxy (attaching the `sk_<project_id>` bearer
-* to every proxied request) wired into `angular.json`, and the SDK dep.
+* widgets, a `proxy.conf.cjs` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request) wired into `angular.json`,
+* and the SDK dep.
 *
 * Unlike React/Vue (whose dev proxy lives in `vite.config.ts`), Angular owns its
 * Vite config, so the proxy is a separate `proxy.conf.cjs` referenced from the
@@ -1016,7 +1129,7 @@ var AngularPatcher = class extends AbstractRulePatcher {
 			},
 			{
 				kind: "add-dep",
-				name: SDK_DEPENDENCY$3,
+				name: SDK_DEPENDENCY$6,
 				version: npmDistTagForCliVersion(ctx.cliVersion)
 			}
 		];
@@ -1029,7 +1142,7 @@ var AngularPatcher = class extends AbstractRulePatcher {
 		];
 	}
 	routeDeps(_view) {
-		return [SDK_DEPENDENCY$3];
+		return [SDK_DEPENDENCY$6];
 	}
 	routeConfigEdits(_view) {
 		return [
@@ -1171,7 +1284,7 @@ const ${elementName} = dynamic(
 
 export default function ${componentName}() {
   return (
-    <main style={{ minHeight: "100vh", position: "relative", background: "#0f0f11" }}>
+    <main style={{ minHeight: "100vh", position: "relative", colorScheme: "dark", background: "#0f0f11" }}>
       <nav aria-label="Authentication" style={{ position: "absolute", top: "24px", right: "24px", zIndex: 1, display: "flex", gap: "12px" }}>
         <Link href="${mode === "login" ? "/register" : "/login"}" style={{ color: "#f4f4f6", fontWeight: 700, textDecoration: "none" }}>
           ${mode === "login" ? "Create account" : "Sign in"}
@@ -1247,28 +1360,30 @@ export default function ProfilePage() {
   }, []);
 
   return (
-    <main style={{ padding: "48px", maxWidth: "680px", margin: "0 auto" }}>
-      <div style={{ display: "flex", alignItems: "center", justifyContent: "space-between", marginBottom: "24px" }}>
-        <h1 style={{ fontSize: "24px", fontWeight: 700, margin: 0 }}>Signed in</h1>
-        <ZitadelLogout />
+    <main style={{ minHeight: "100vh", colorScheme: "dark", background: "#0f0f11", color: "#f4f4f6", padding: "48px", fontFamily: "system-ui, -apple-system, 'Segoe UI', Helvetica, Arial, sans-serif" }}>
+      <div style={{ maxWidth: "680px", margin: "0 auto" }}>
+        <div style={{ display: "flex", alignItems: "center", justifyContent: "space-between", marginBottom: "24px" }}>
+          <h1 style={{ fontSize: "24px", fontWeight: 700, margin: 0, color: "#f4f4f6" }}>Signed in</h1>
+          <ZitadelLogout />
+        </div>
+        <p style={{ color: "#33a779", fontWeight: 600 }}>Signed in profile loaded.</p>
+        {session ? (
+          <dl style={{ display: "grid", gap: "12px", marginTop: "24px" }}>
+            <div>
+              <dt style={{ color: "#bfbfcf", fontSize: "14px" }}>Session state</dt>
+              <dd style={{ margin: 0, fontWeight: 600, color: "#f4f4f6" }}>{session.state ?? "active"}</dd>
+            </div>
+            <div>
+              <dt style={{ color: "#bfbfcf", fontSize: "14px" }}>User id</dt>
+              <dd style={{ margin: 0, fontFamily: "monospace", color: "#f4f4f6" }}>{session.user_id ?? "available"}</dd>
+            </div>
+          </dl>
+        ) : (
+          <p style={{ color: sessionError ? "#ea4f70" : "#bfbfcf" }}>
+            {sessionError || "Checking session..."}
+          </p>
+        )}
       </div>
-      <p style={{ color: "#166534", fontWeight: 600 }}>Signed in profile loaded.</p>
-      {session ? (
-        <dl style={{ display: "grid", gap: "12px", marginTop: "24px" }}>
-          <div>
-            <dt style={{ color: "#6b7280", fontSize: "14px" }}>Session state</dt>
-            <dd style={{ margin: 0, fontWeight: 600 }}>{session.state ?? "active"}</dd>
-          </div>
-          <div>
-            <dt style={{ color: "#6b7280", fontSize: "14px" }}>User id</dt>
-            <dd style={{ margin: 0, fontFamily: "monospace" }}>{session.user_id ?? "available"}</dd>
-          </div>
-        </dl>
-      ) : (
-        <p style={{ color: sessionError ? "#b91c1c" : "#6b7280" }}>
-          {sessionError || "Checking session..."}
-        </p>
-      )}
     </main>
   );
 }
@@ -1474,18 +1589,18 @@ import Link from "next/link";
 
 export default function Home() {
   return (
-    <main style={{ minHeight: "100vh", padding: "48px", display: "flex", alignItems: "center", justifyContent: "center" }}>
+    <main style={{ position: "fixed", inset: 0, padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: 1.5, letterSpacing: "normal", textAlign: "center" }}>
       <section style={{ width: "100%", maxWidth: "560px" }}>
-        <p style={{ margin: "0 0 12px", color: "#4b5563", fontSize: "14px" }}>Zitadel auth</p>
-        <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: 1.15 }}>Sign in, create an account, or open your profile.</h1>
+        <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
+        <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: 1.15, fontWeight: 600, color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
         <div style={{ display: "flex", flexWrap: "wrap", gap: "12px" }}>
-          <Link href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#111827", color: "#ffffff", textDecoration: "none", fontWeight: 600 }}>
+          <Link href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
             Sign in
           </Link>
-          <Link href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #d1d5db", color: "#111827", textDecoration: "none", fontWeight: 600 }}>
+          <Link href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
             Create account
           </Link>
-          <Link href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #d1d5db", color: "#111827", textDecoration: "none", fontWeight: 600 }}>
+          <Link href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>
             Profile
           </Link>
         </div>
@@ -1606,7 +1721,7 @@ function nuxtConfigEdit(opts) {
 }
 //#endregion
 //#region src/lib/orca/patchers/rule/nuxt/templates.ts
-const MAIN_STYLE = "min-height: 100vh; background: #0f0f11";
+const MAIN_STYLE = "min-height: 100vh; background: #0f0f11; color: #f4f4f6; color-scheme: dark";
 /** `app.vue` — renders the page router. Marker in an HTML comment. */
 function appVueTemplate() {
 	return `<!-- ${MANAGED_MARKER} -->
@@ -1615,13 +1730,36 @@ function appVueTemplate() {
 </template>
 
 <style>
+:root {
+  color-scheme: dark;
+}
 body {
   margin: 0;
+  background: #0f0f11;
+  color: #f4f4f6;
   font-family: sans-serif;
 }
 </style>
 `;
 }
+/** `pages/index.vue` — the landing chooser linking to login/register/profile. */
+function indexPageTemplate() {
+	return `<!-- ${MANAGED_MARKER} -->
+<template>
+  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
+    <section style="width:100%;max-width:560px">
+      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
+      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
+      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
+        <NuxtLink to="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</NuxtLink>
+        <NuxtLink to="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</NuxtLink>
+        <NuxtLink to="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</NuxtLink>
+      </div>
+    </section>
+  </main>
+</template>
+`;
+}
 /** A login/register page rendering `<zitadel-login>` inside `<ClientOnly>`. */
 function authPage(purpose) {
 	return `<script setup lang="ts">
@@ -1659,7 +1797,7 @@ const project = useZitadelProject();
 <\/script>
 
 <template>
-  <main style="padding: 24px">
+  <main style="${MAIN_STYLE}; padding: 24px">
     <h1>Signed in (Nuxt)</h1>
     <ClientOnly>
       <zitadel-logout :project="project" post-sign-out-url="/login" />
@@ -1710,7 +1848,7 @@ export default defineNuxtPlugin(() => {
 }
 //#endregion
 //#region src/lib/orca/patchers/rule/nuxt/index.ts
-const SDK_DEPENDENCY$2 = "@zitadel/sdk-nuxt";
+const SDK_DEPENDENCY$5 = "@zitadel/sdk-nuxt";
 const NUXT_CONFIG_PATHS = configCandidates("nuxt.config");
 /**
 * Rule-based patcher for a Nuxt app. Like Next.js, Nuxt proxies the backend and
@@ -1731,6 +1869,11 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 				path: src("app.vue"),
 				contents: appVueTemplate()
 			},
+			{
+				kind: "write",
+				path: src("pages/index.vue"),
+				contents: indexPageTemplate()
+			},
 			{
 				kind: "write",
 				path: src("pages/login.vue"),
@@ -1776,7 +1919,7 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 			},
 			{
 				kind: "add-dep",
-				name: SDK_DEPENDENCY$2,
+				name: SDK_DEPENDENCY$5,
 				version: npmDistTagForCliVersion(ctx.cliVersion)
 			}
 		];
@@ -1785,6 +1928,7 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 		const src = (rel) => join(view.framework.appDir, rel);
 		return [
 			src("app.vue"),
+			src("pages/index.vue"),
 			src("pages/login.vue"),
 			src("pages/register.vue"),
 			src("pages/profile.vue"),
@@ -1793,7 +1937,7 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 		];
 	}
 	routeDeps(_view) {
-		return [SDK_DEPENDENCY$2];
+		return [SDK_DEPENDENCY$5];
 	}
 	routeConfigEdits(_view) {
 		return ["nuxt.config.*"];
@@ -1801,7 +1945,7 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 	summary(_ctx) {
 		return {
 			title: "Nuxt integration",
-			detail: "Wrote login/register/profile pages + plugins and registered @zitadel/sdk-nuxt in nuxt.config.*."
+			detail: "Wrote landing/login/register/profile pages + plugins and registered @zitadel/sdk-nuxt in nuxt.config.*."
 		};
 	}
 };
@@ -1809,9 +1953,13 @@ var NuxtPatcher = class extends AbstractRulePatcher {
 //#region src/lib/orca/patchers/rule/vite-support.ts
 /**
 * Shared Vite dev-server proxy merged into the project's Vite config for the SPA
-* frameworks (React, Vue). It forwards same-origin `/__nextgen/*` calls to the
-* backend, strips the prefix, and attaches the project's `sk_<project_id>`
-* bearer (read from `ZITADEL_PROJECT_ID` in the env) to every proxied request.
+* frameworks (React, Vue, Solid, Svelte, Qwik). It forwards same-origin
+* `/__nextgen/*` calls to the
+* backend, strips the prefix, and attaches the project's service-key secret
+* (read from `ZITADEL_PROJECT_SECRET` in `.env.local`) as the bearer on every
+* proxied request. The secret stays server-side: Vite only exposes vars with the
+* configured `envPrefix` (default `VITE_`) to client bundles, so this server-only
+* key never leaks into the browser.
 */
 function proxyEntryCode(server) {
 	return `{
@@ -1819,11 +1967,11 @@ function proxyEntryCode(server) {
   changeOrigin: false,
   rewrite: (path) => path.replace(/^\\${PROXY_PATH}/, "").replace(/^(?!\\/)/, "/"),
   configure: (proxy) => {
-    const projectId = loadEnv("development", process.cwd(), "ZITADEL_").ZITADEL_PROJECT_ID;
-    if (!projectId) {
-      throw new Error("ZITADEL_PROJECT_ID is not set; add it to .env.local (zitadel setup writes it).");
+    const secret = loadEnv("development", process.cwd(), "ZITADEL_").ZITADEL_PROJECT_SECRET;
+    if (!secret) {
+      throw new Error("ZITADEL_PROJECT_SECRET is not set; add it to .env.local (zitadel setup writes it).");
     }
-    const bearer = \`Bearer sk_\${projectId}\`;
+    const bearer = \`Bearer \${secret}\`;
     proxy.on("proxyReq", (proxyReq) => {
       proxyReq.setHeader("authorization", bearer);
     });
@@ -1891,17 +2039,143 @@ function buildViteProxyOp(devPort, server) {
 	};
 }
 //#endregion
+//#region src/lib/orca/patchers/rule/qwik/templates.ts
+/**
+* The managed `src/app.tsx`: a minimal path-based router that renders the
+* `@zitadel/sdk-qwik` widgets — a landing chooser at `/`, login at `/login`,
+* register at `/register`, and the logout widget at `/profile`. Exports a named `App`
+* (`component$`) to match the create-vite Qwik entry (`main.tsx` imports
+* `{ App }`). The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret
+* reaches the browser: the dev proxy in `vite.config.*` attaches the project
+* service-key secret (from `ZITADEL_PROJECT_SECRET`) server-side.
+*/
+function appTemplate$4() {
+	return `${MANAGED_MARKER}
+import { component$ } from "@builder.io/qwik";
+import { ZitadelLogin, ZitadelLogout, configureZitadel } from "@zitadel/sdk-qwik";
+
+const project = configureZitadel({
+  projectId: import.meta.env.VITE_ZITADEL_PROJECT_ID,
+  proxyPath: "${PROXY_PATH}",
+});
+
+export const App = component$(() => {
+  const path = window.location.pathname;
+
+  if (path === "/") {
+    return (
+      <main style={{ position: "fixed", inset: "0", padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: "1.5", letterSpacing: "normal", textAlign: "center" }}>
+        <section style={{ width: "100%", maxWidth: "560px" }}>
+          <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
+          <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: "1.15", fontWeight: "600", color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
+          <div style={{ display: "flex", flexWrap: "wrap", gap: "12px", justifyContent: "center" }}>
+            <a href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Sign in</a>
+            <a href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Create account</a>
+            <a href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: "600", fontSize: "14px" }}>Profile</a>
+          </div>
+        </section>
+      </main>
+    );
+  }
+  if (path.startsWith("/profile")) {
+    return (
+      <div style={{ position: "fixed", inset: "0", overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+        <ZitadelLogout project={project} postSignOutUrl="/login" />
+      </div>
+    );
+  }
+  if (path.startsWith("/register")) {
+    return (
+      <div style={{ position: "fixed", inset: "0", overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+        <ZitadelLogin project={project} purpose="register" postSignInUrl="/profile" />
+      </div>
+    );
+  }
+  return (
+    <div style={{ position: "fixed", inset: "0", overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+      <ZitadelLogin project={project} purpose="login" postSignInUrl="/profile" />
+    </div>
+  );
+});
+`;
+}
+//#endregion
+//#region src/lib/orca/patchers/rule/qwik/index.ts
+const SDK_DEPENDENCY$4 = "@zitadel/sdk-qwik";
+/**
+* Rule-based patcher for a Vite + Qwik single-page app. Inherits the shared
+* `.zitadel/` base files from {@link AbstractRulePatcher} and contributes the
+* managed `src/app.tsx` auth entry, a non-destructive `vite.config.*` merge
+* that adds the `/__nextgen` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request), the `VITE_`-prefixed
+* project id, and the SDK dep.
+*
+* The create-vite Qwik template uses a lowercase `src/app.tsx` exporting a named
+* `App` (mounted by `main.tsx`), so this patcher writes that exact entry. Unlike
+* Next.js — whose middleware runs the proxy server-side — a SPA has no server,
+* so the dev proxy stands in for `@zitadel/edge-proxy` locally. Production
+* deployments still need that proxy.
+*/
+var QwikPatcher = class extends AbstractRulePatcher {
+	canPatch(framework) {
+		return framework === "qwik";
+	}
+	viteProxyOp(devPort, server) {
+		return buildViteProxyOp(devPort, server);
+	}
+	routeOps(ctx) {
+		return [
+			{
+				kind: "write",
+				path: "src/app.tsx",
+				contents: appTemplate$4()
+			},
+			this.viteProxyOp(ctx.framework.devPort, ctx.server),
+			{
+				kind: "merge-env",
+				path: ".env.example",
+				entries: { VITE_ZITADEL_PROJECT_ID: "" }
+			},
+			{
+				kind: "merge-env",
+				path: ".env.local",
+				entries: { VITE_ZITADEL_PROJECT_ID: ctx.project.id }
+			},
+			{
+				kind: "add-dep",
+				name: SDK_DEPENDENCY$4,
+				version: npmDistTagForCliVersion(ctx.cliVersion)
+			}
+		];
+	}
+	routeFiles(_view) {
+		return ["src/app.tsx"];
+	}
+	routeDeps(_view) {
+		return [SDK_DEPENDENCY$4];
+	}
+	routeConfigEdits(_view) {
+		return ["vite.config.*"];
+	}
+	summary(_ctx) {
+		return {
+			title: "Qwik (Vite) integration",
+			detail: "Wrote src/app.tsx auth entry and merged the /__nextgen dev proxy into vite.config.*."
+		};
+	}
+};
+//#endregion
 //#region src/lib/orca/patchers/rule/react/templates.ts
 /**
 * The managed `src/App.tsx`: a minimal path-based router that renders the
-* `@zitadel/sdk-react` widgets — login at `/login` (and `/`), register at
-* `/register`, and the logout widget at `/profile`. The project id comes from
+* `@zitadel/sdk-react` widgets — a landing chooser at `/`, login at `/login`,
+* register at `/register`, and the logout widget at `/profile`. The project id comes from
 * `VITE_ZITADEL_PROJECT_ID` (Vite only exposes `VITE_`-prefixed env to the
 * client). No secret reaches the browser: the dev proxy in `vite.config.*`
-* attaches the `sk_<project_id>` bearer (derived from the public project id)
+* attaches the project service-key secret (from `ZITADEL_PROJECT_SECRET`)
 * server-side.
 */
-function appTemplate$1() {
+function appTemplate$3() {
 	return `${MANAGED_MARKER}
 import { ZitadelLogin, ZitadelLogout, configureZitadel } from "@zitadel/sdk-react";
 
@@ -1913,25 +2187,52 @@ const project = configureZitadel({
 export default function App() {
   const path = window.location.pathname;
 
+  if (path === "/") {
+    return (
+      <main style={{ position: "fixed", inset: 0, padding: "48px", boxSizing: "border-box", display: "flex", alignItems: "center", justifyContent: "center", background: "#0f0f11", colorScheme: "dark", color: "#f4f4f6", fontFamily: "system-ui, -apple-system, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif", lineHeight: 1.5, letterSpacing: "normal", textAlign: "center" }}>
+        <section style={{ width: "100%", maxWidth: "560px" }}>
+          <p style={{ margin: "0 0 12px", color: "#9ca3af", fontSize: "14px" }}>Zitadel auth</p>
+          <h1 style={{ margin: "0 0 24px", fontSize: "32px", lineHeight: 1.15, fontWeight: 600, color: "#f4f4f6" }}>Sign in, create an account, or open your profile.</h1>
+          <div style={{ display: "flex", flexWrap: "wrap", gap: "12px", justifyContent: "center" }}>
+            <a href="/login" style={{ padding: "10px 16px", borderRadius: "8px", background: "#f4f4f6", color: "#0f0f11", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Sign in</a>
+            <a href="/register" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Create account</a>
+            <a href="/profile" style={{ padding: "10px 16px", borderRadius: "8px", border: "1px solid #3f3f46", color: "#f4f4f6", textDecoration: "none", fontWeight: 600, fontSize: "14px" }}>Profile</a>
+          </div>
+        </section>
+      </main>
+    );
+  }
   if (path.startsWith("/profile")) {
-    return <ZitadelLogout project={project} postSignOutUrl="/login" />;
+    return (
+      <div style={{ position: "fixed", inset: 0, overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+        <ZitadelLogout project={project} postSignOutUrl="/login" />
+      </div>
+    );
   }
   if (path.startsWith("/register")) {
-    return <ZitadelLogin project={project} purpose="register" postSignInUrl="/profile" />;
+    return (
+      <div style={{ position: "fixed", inset: 0, overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+        <ZitadelLogin project={project} purpose="register" postSignInUrl="/profile" />
+      </div>
+    );
   }
-  return <ZitadelLogin project={project} purpose="login" postSignInUrl="/profile" />;
+  return (
+    <div style={{ position: "fixed", inset: 0, overflow: "auto", background: "#0f0f11", colorScheme: "dark" }}>
+      <ZitadelLogin project={project} purpose="login" postSignInUrl="/profile" />
+    </div>
+  );
 }
 `;
 }
 //#endregion
 //#region src/lib/orca/patchers/rule/react/index.ts
-const SDK_DEPENDENCY$1 = "@zitadel/sdk-react";
+const SDK_DEPENDENCY$3 = "@zitadel/sdk-react";
 /**
 * Rule-based patcher for a Vite + React single-page app. Inherits the shared
 * `.zitadel/` base files from {@link AbstractRulePatcher} and contributes the
 * managed `src/App.tsx` auth entry, a non-destructive `vite.config.*` merge
-* that adds the `/__nextgen` dev proxy (attaching the `sk_<project_id>` bearer
-* from `ZITADEL_PROJECT_ID` to every proxied request), the `VITE_`-prefixed
+* that adds the `/__nextgen` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request), the `VITE_`-prefixed
 * project id, and the SDK dep.
 *
 * Unlike Next.js — whose middleware runs the proxy and token exchange
@@ -1950,7 +2251,7 @@ var ReactPatcher = class extends AbstractRulePatcher {
 			{
 				kind: "write",
 				path: "src/App.tsx",
-				contents: appTemplate$1()
+				contents: appTemplate$3()
 			},
 			this.viteProxyOp(ctx.framework.devPort, ctx.server),
 			{
@@ -1965,7 +2266,7 @@ var ReactPatcher = class extends AbstractRulePatcher {
 			},
 			{
 				kind: "add-dep",
-				name: SDK_DEPENDENCY$1,
+				name: SDK_DEPENDENCY$3,
 				version: npmDistTagForCliVersion(ctx.cliVersion)
 			}
 		];
@@ -1974,7 +2275,7 @@ var ReactPatcher = class extends AbstractRulePatcher {
 		return ["src/App.tsx"];
 	}
 	routeDeps(_view) {
-		return [SDK_DEPENDENCY$1];
+		return [SDK_DEPENDENCY$3];
 	}
 	routeConfigEdits(_view) {
 		return ["vite.config.*"];
@@ -1987,15 +2288,252 @@ var ReactPatcher = class extends AbstractRulePatcher {
 	}
 };
 //#endregion
+//#region src/lib/orca/patchers/rule/solid/templates.ts
+/**
+* The managed `src/App.tsx`: a minimal path-based router that renders the
+* `@zitadel/sdk-solid` widgets — a landing chooser at `/`, login at `/login`,
+* register at `/register`, and the logout widget at `/profile`. The project id comes from
+* `VITE_ZITADEL_PROJECT_ID` (Vite only exposes `VITE_`-prefixed env to the
+* client). No secret reaches the browser: the dev proxy in `vite.config.*`
+* attaches the project service-key secret (from `ZITADEL_PROJECT_SECRET`)
+* server-side.
+*/
+function appTemplate$2() {
+	return `${MANAGED_MARKER}
+import { ZitadelLogin, ZitadelLogout, configureZitadel } from "@zitadel/sdk-solid";
+
+const project = configureZitadel({
+  projectId: import.meta.env.VITE_ZITADEL_PROJECT_ID,
+  proxyPath: "${PROXY_PATH}",
+});
+
+export default function App() {
+  const path = window.location.pathname;
+
+  if (path === "/") {
+    return (
+      <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
+        <section style="width:100%;max-width:560px">
+          <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
+          <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
+          <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
+            <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
+            <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
+            <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
+          </div>
+        </section>
+      </main>
+    );
+  }
+  if (path.startsWith("/profile")) {
+    return (
+      <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+        <ZitadelLogout project={project} postSignOutUrl="/login" />
+      </div>
+    );
+  }
+  if (path.startsWith("/register")) {
+    return (
+      <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+        <ZitadelLogin project={project} purpose="register" postSignInUrl="/profile" />
+      </div>
+    );
+  }
+  return (
+    <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+      <ZitadelLogin project={project} purpose="login" postSignInUrl="/profile" />
+    </div>
+  );
+}
+`;
+}
+//#endregion
+//#region src/lib/orca/patchers/rule/solid/index.ts
+const SDK_DEPENDENCY$2 = "@zitadel/sdk-solid";
+/**
+* Rule-based patcher for a Vite + Solid single-page app. Inherits the shared
+* `.zitadel/` base files from {@link AbstractRulePatcher} and contributes the
+* managed `src/App.tsx` auth entry, a non-destructive `vite.config.*` merge
+* that adds the `/__nextgen` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request), the `VITE_`-prefixed
+* project id, and the SDK dep.
+*
+* Unlike Next.js — whose middleware runs the proxy and token exchange
+* server-side — a SPA has no server, so the dev proxy stands in for
+* `@zitadel/edge-proxy` locally. Production deployments still need that proxy.
+*/
+var SolidPatcher = class extends AbstractRulePatcher {
+	canPatch(framework) {
+		return framework === "solid";
+	}
+	viteProxyOp(devPort, server) {
+		return buildViteProxyOp(devPort, server);
+	}
+	routeOps(ctx) {
+		return [
+			{
+				kind: "write",
+				path: "src/App.tsx",
+				contents: appTemplate$2()
+			},
+			this.viteProxyOp(ctx.framework.devPort, ctx.server),
+			{
+				kind: "merge-env",
+				path: ".env.example",
+				entries: { VITE_ZITADEL_PROJECT_ID: "" }
+			},
+			{
+				kind: "merge-env",
+				path: ".env.local",
+				entries: { VITE_ZITADEL_PROJECT_ID: ctx.project.id }
+			},
+			{
+				kind: "add-dep",
+				name: SDK_DEPENDENCY$2,
+				version: npmDistTagForCliVersion(ctx.cliVersion)
+			}
+		];
+	}
+	routeFiles(_view) {
+		return ["src/App.tsx"];
+	}
+	routeDeps(_view) {
+		return [SDK_DEPENDENCY$2];
+	}
+	routeConfigEdits(_view) {
+		return ["vite.config.*"];
+	}
+	summary(_ctx) {
+		return {
+			title: "Solid (Vite) integration",
+			detail: "Wrote src/App.tsx auth entry and merged the /__nextgen dev proxy into vite.config.*."
+		};
+	}
+};
+//#endregion
+//#region src/lib/orca/patchers/rule/svelte/templates.ts
+/**
+* The managed `src/App.svelte`: a minimal path-based router that renders the
+* `@zitadel/sdk-svelte` widgets — a landing chooser at `/`, login at `/login`,
+* register at `/register`, and the logout widget at `/profile`. The managed marker lives in
+* the `<script lang="ts">` block (a JS comment) so eject/doctor stay
+* marker-aware. The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret
+* reaches the browser: the dev proxy in `vite.config.*` attaches the project
+* service-key secret (from `ZITADEL_PROJECT_SECRET`) server-side.
+*/
+function appTemplate$1() {
+	return `<script lang="ts">
+${MANAGED_MARKER}
+import { ZitadelLogin, ZitadelLogout, configureZitadel } from "@zitadel/sdk-svelte";
+
+const project = configureZitadel({
+  projectId: import.meta.env.VITE_ZITADEL_PROJECT_ID,
+  proxyPath: "${PROXY_PATH}",
+});
+
+const path = window.location.pathname;
+<\/script>
+
+{#if path === "/"}
+  <main style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center">
+    <section style="width:100%;max-width:560px">
+      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
+      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
+      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
+        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
+        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
+        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
+      </div>
+    </section>
+  </main>
+{:else if path.startsWith("/profile")}
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <ZitadelLogout {project} postSignOutUrl="/login" />
+  </div>
+{:else if path.startsWith("/register")}
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <ZitadelLogin {project} purpose="register" postSignInUrl="/profile" />
+  </div>
+{:else}
+  <div style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <ZitadelLogin {project} purpose="login" postSignInUrl="/profile" />
+  </div>
+{/if}
+`;
+}
+//#endregion
+//#region src/lib/orca/patchers/rule/svelte/index.ts
+const SDK_DEPENDENCY$1 = "@zitadel/sdk-svelte";
+/**
+* Rule-based patcher for a Vite + Svelte single-page app. Inherits the shared
+* `.zitadel/` base files from {@link AbstractRulePatcher} and contributes the
+* managed `src/App.svelte` auth entry, a non-destructive `vite.config.*` merge
+* that adds the `/__nextgen` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request), the `VITE_`-prefixed
+* project id, and the SDK dep.
+*
+* Unlike Next.js — whose middleware runs the proxy and token exchange
+* server-side — a SPA has no server, so the dev proxy stands in for
+* `@zitadel/edge-proxy` locally. Production deployments still need that proxy.
+*/
+var SveltePatcher = class extends AbstractRulePatcher {
+	canPatch(framework) {
+		return framework === "svelte";
+	}
+	viteProxyOp(devPort, server) {
+		return buildViteProxyOp(devPort, server);
+	}
+	routeOps(ctx) {
+		return [
+			{
+				kind: "write",
+				path: "src/App.svelte",
+				contents: appTemplate$1()
+			},
+			this.viteProxyOp(ctx.framework.devPort, ctx.server),
+			{
+				kind: "merge-env",
+				path: ".env.example",
+				entries: { VITE_ZITADEL_PROJECT_ID: "" }
+			},
+			{
+				kind: "merge-env",
+				path: ".env.local",
+				entries: { VITE_ZITADEL_PROJECT_ID: ctx.project.id }
+			},
+			{
+				kind: "add-dep",
+				name: SDK_DEPENDENCY$1,
+				version: npmDistTagForCliVersion(ctx.cliVersion)
+			}
+		];
+	}
+	routeFiles(_view) {
+		return ["src/App.svelte"];
+	}
+	routeDeps(_view) {
+		return [SDK_DEPENDENCY$1];
+	}
+	routeConfigEdits(_view) {
+		return ["vite.config.*"];
+	}
+	summary(_ctx) {
+		return {
+			title: "Svelte (Vite) integration",
+			detail: "Wrote src/App.svelte auth entry and merged the /__nextgen dev proxy into vite.config.*."
+		};
+	}
+};
+//#endregion
 //#region src/lib/orca/patchers/rule/vue/templates.ts
 /**
 * The managed `src/App.vue`: a minimal path-based router that renders the
-* `@zitadel/sdk-vue` widgets — login at `/login` (and `/`), register at
-* `/register`, and the logout widget at `/profile`. The managed marker lives in
+* `@zitadel/sdk-vue` widgets — a landing chooser at `/`, login at `/login`,
+* register at `/register`, and the logout widget at `/profile`. The managed marker lives in
 * the `<script setup>` block (a JS comment) so eject/doctor stay marker-aware.
 * The project id comes from `VITE_ZITADEL_PROJECT_ID`. No secret reaches the
-* browser: the dev proxy in `vite.config.*` attaches the `sk_<project_id>`
-* bearer (derived from the public project id) server-side.
+* browser: the dev proxy in `vite.config.*` attaches the project service-key
+* secret (from `ZITADEL_PROJECT_SECRET`) server-side.
 */
 function appTemplate() {
 	return `<script setup lang="ts">
@@ -2011,18 +2549,35 @@ const path = window.location.pathname;
 <\/script>
 
 <template>
-  <ZitadelLogout
-    v-if="path.startsWith('/profile')"
-    :project="project"
-    postSignOutUrl="/login"
-  />
-  <ZitadelLogin
+  <main
+    v-if="path === '/'"
+    style="position:fixed;inset:0;padding:48px;box-sizing:border-box;display:flex;align-items:center;justify-content:center;background:#0f0f11;color-scheme:dark;color:#f4f4f6;font-family:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;line-height:1.5;letter-spacing:normal;text-align:center"
+  >
+    <section style="width:100%;max-width:560px">
+      <p style="margin:0 0 12px;color:#9ca3af;font-size:14px">Zitadel auth</p>
+      <h1 style="margin:0 0 24px;font-size:32px;line-height:1.15;font-weight:600;color:#f4f4f6">Sign in, create an account, or open your profile.</h1>
+      <div style="display:flex;flex-wrap:wrap;gap:12px;justify-content:center">
+        <a href="/login" style="padding:10px 16px;border-radius:8px;background:#f4f4f6;color:#0f0f11;text-decoration:none;font-weight:600;font-size:14px">Sign in</a>
+        <a href="/register" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Create account</a>
+        <a href="/profile" style="padding:10px 16px;border-radius:8px;border:1px solid #3f3f46;color:#f4f4f6;text-decoration:none;font-weight:600;font-size:14px">Profile</a>
+      </div>
+    </section>
+  </main>
+  <div
+    v-else-if="path.startsWith('/profile')"
+    style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark"
+  >
+    <ZitadelLogout :project="project" postSignOutUrl="/login" />
+  </div>
+  <div
     v-else-if="path.startsWith('/register')"
-    :project="project"
-    purpose="register"
-    postSignInUrl="/profile"
-  />
-  <ZitadelLogin v-else :project="project" purpose="login" postSignInUrl="/profile" />
+    style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark"
+  >
+    <ZitadelLogin :project="project" purpose="register" postSignInUrl="/profile" />
+  </div>
+  <div v-else style="position:fixed;inset:0;overflow:auto;background:#0f0f11;color-scheme:dark">
+    <ZitadelLogin :project="project" purpose="login" postSignInUrl="/profile" />
+  </div>
 </template>
 `;
 }
@@ -2033,8 +2588,8 @@ const SDK_DEPENDENCY = "@zitadel/sdk-vue";
 * Rule-based patcher for a Vite + Vue single-page app. Inherits the shared
 * `.zitadel/` base files from {@link AbstractRulePatcher} and contributes the
 * managed `src/App.vue` auth entry, a non-destructive `vite.config.*` merge
-* that adds the `/__nextgen` dev proxy (attaching the `sk_<project_id>` bearer
-* from `ZITADEL_PROJECT_ID` to every proxied request), the `VITE_`-prefixed
+* that adds the `/__nextgen` dev proxy (attaching the project secret from
+* `ZITADEL_PROJECT_SECRET` to every proxied request), the `VITE_`-prefixed
 * project id, and the SDK dep.
 */
 var VuePatcher = class extends AbstractRulePatcher {
@@ -2101,6 +2656,9 @@ const patchers = [
 	new NuxtPatcher(),
 	new ReactPatcher(),
 	new VuePatcher(),
+	new SolidPatcher(),
+	new SveltePatcher(),
+	new QwikPatcher(),
 	new AngularPatcher()
 ];
 //#endregion
@@ -2262,6 +2820,36 @@ var NuxtScaffolder = class extends AbstractCLIScaffolder {
 	}
 };
 //#endregion
+//#region src/lib/orca/scaffolders/qwik.ts
+/**
+* Scaffolds a new Vite + Qwik (TypeScript) single-page app with `create-vite`,
+* then removes the starter `app.tsx`/`app.css` demo so the patcher can write the
+* managed `src/app.tsx` without colliding with boilerplate. The create-vite Qwik
+* template uses a lowercase `app.tsx` (named `App` export, mounted by `main.tsx`)
+* — the patched file keeps that same entry.
+*/
+var QwikScaffolder = class extends AbstractCLIScaffolder {
+	displayName = "Qwik (Vite)";
+	supportedFrameworks = ["qwik"];
+	async scaffold(cwd, _framework) {
+		this.runCommand("npm", [
+			"create",
+			"vite@latest",
+			".",
+			"--",
+			"--template",
+			"qwik-ts"
+		], cwd);
+		await rm(join(cwd, "src/app.tsx"), { force: true });
+		await rm(join(cwd, "src/app.css"), { force: true });
+		this.runCommand("npm", [
+			"pkg",
+			"set",
+			"devDependencies.vite=^7.3.5"
+		], cwd);
+	}
+};
+//#endregion
 //#region src/lib/orca/scaffolders/react.ts
 /**
 * Scaffolds a new Vite + React (TypeScript) single-page app with `create-vite`,
@@ -2286,6 +2874,55 @@ var ReactScaffolder = class extends AbstractCLIScaffolder {
 	}
 };
 //#endregion
+//#region src/lib/orca/scaffolders/solid.ts
+/**
+* Scaffolds a new Vite + Solid (TypeScript) single-page app with `create-vite`,
+* then removes the starter `App.tsx`/`App.css` demo so the patcher can write the
+* managed `src/App.tsx` without colliding with boilerplate. `index.css` and
+* `index.tsx` are left in place — the patched `App.tsx` keeps the same entry.
+*/
+var SolidScaffolder = class extends AbstractCLIScaffolder {
+	displayName = "Solid (Vite)";
+	supportedFrameworks = ["solid"];
+	async scaffold(cwd, _framework) {
+		this.runCommand("npm", [
+			"create",
+			"vite@latest",
+			".",
+			"--",
+			"--template",
+			"solid-ts"
+		], cwd);
+		await rm(join(cwd, "src/App.tsx"), { force: true });
+		await rm(join(cwd, "src/App.css"), { force: true });
+	}
+};
+//#endregion
+//#region src/lib/orca/scaffolders/svelte.ts
+/**
+* Scaffolds a new Vite + Svelte (TypeScript) single-page app with `create-vite`,
+* then removes the starter `App.svelte`/`lib/Counter.svelte` demo so the patcher
+* can write the managed `src/App.svelte` without colliding with boilerplate.
+* `app.css` and `main.ts` are left in place — the patched `App.svelte` keeps the
+* same entry.
+*/
+var SvelteScaffolder = class extends AbstractCLIScaffolder {
+	displayName = "Svelte (Vite)";
+	supportedFrameworks = ["svelte"];
+	async scaffold(cwd, _framework) {
+		this.runCommand("npm", [
+			"create",
+			"vite@latest",
+			".",
+			"--",
+			"--template",
+			"svelte-ts"
+		], cwd);
+		await rm(join(cwd, "src/App.svelte"), { force: true });
+		await rm(join(cwd, "src/lib/Counter.svelte"), { force: true });
+	}
+};
+//#endregion
 //#region src/lib/orca/scaffolders/vue.ts
 /**
 * Scaffolds a new Vite + Vue (TypeScript) single-page app with `create-vite`,
@@ -2320,6 +2957,9 @@ const scaffolders = [
 	new NuxtScaffolder(),
 	new ReactScaffolder(),
 	new VueScaffolder(),
+	new SolidScaffolder(),
+	new SvelteScaffolder(),
+	new QwikScaffolder(),
 	new AngularScaffolder()
 ];
 //#endregion
@@ -2578,4 +3218,4 @@ function isErrno(error, code) {
 //#endregion
 export { issuerFromPort as i, inspectScaffoldTarget as n, RENDERER_IDS as r, createOrca as t };
 
-//# sourceMappingURL=orca-BoTFU8SI.mjs.map
+//# sourceMappingURL=orca-DU8myWGm.mjs.map