ignotum 0.0.4 → 0.0.6

package/dist/cli/bin.mjs

@@ -29653,9 +29653,13 @@ Function$1.dual(2, (value, descriptor) => {
 //#endregion
 //#region ../contracts/dist/deployment.js
 const ArtifactPath = Schema.String.check(Schema.isPattern(/^(?!\/)(?![A-Za-z]:\/)(?!.*(?:^|\/)\.\.(?:\/|$))(?!.*(?:^|\/)\.(?:\/|$))(?!.*\/\/)[^\\\0]+$/)).pipe(Schema.brand("ignotum/deployment/ArtifactPath"));
+const ClientPath = Schema.String.check(Schema.isPattern(/^\/(?!_ignotum(?:\/|$))(?:(?:[A-Za-z0-9._~-]+\/)*[A-Za-z0-9._~-]+\/?)?$/)).pipe(Schema.brand("ignotum/deployment/ClientPath"));
 const Sha256 = Schema.String.check(Schema.isPattern(/^[0-9a-f]{64}$/)).pipe(Schema.brand("ignotum/deployment/Sha256"));
 const ArtifactKind = Schema.Literals([
 	"ClientAsset",
+	"ClientDocument",
+	"ClientManifest",
+	"ClientPublicFile",
 	"ClientShell",
 	"FunctionBundle",
 	"ServerManifest",
@@ -29675,10 +29679,28 @@ const ArtifactFile = Schema.Struct({
 	contentType: Schema.String,
 	contentEncoding: Schema.optional(Schema.String)
 });
+const ClientRoute = Schema.Struct({
+	pathname: ClientPath,
+	artifact: ArtifactReference
+});
 const DeploymentInventory = Schema.Struct({
 	formatVersion: Schema.Literal(1),
 	files: Schema.Array(ArtifactFile)
 });
+const ClientManifest = Schema.Struct({
+	formatVersion: Schema.Literal(1),
+	shell: ArtifactReference,
+	routes: Schema.Array(ClientRoute)
+});
+const ClientRoutingRoute = Schema.Struct({
+	pathname: ClientPath,
+	artifact: ArtifactPath
+});
+Schema.Struct({
+	formatVersion: Schema.Literal(1),
+	shell: ArtifactPath,
+	routes: Schema.Array(ClientRoutingRoute)
+});
 const SchemaSnapshotField = Schema.Struct({
 	name: Schema.String,
 	value: ValueDescriptor
@@ -29703,7 +29725,20 @@ const ServerBuildManifest = Schema.Struct({
 	functions: Schema.Array(ServerFunctionArtifact)
 });
 const deploymentInventoryPath = ArtifactPath.make("inventory.json");
-const clientShellPath = ArtifactPath.make("client/_shell.html");
+const clientManifestPath = ArtifactPath.make("client/manifest.json");
+const clientShellPath = ArtifactPath.make("client/shell.html");
+const clientAssetPathPrefix = `${ArtifactPath.make("client/assets")}/`;
+const clientRoutePathPrefix = `${ArtifactPath.make("client/routes")}/`;
+const clientPublicFileExtensions = [
+	".avif",
+	".gif",
+	".ico",
+	".jpeg",
+	".jpg",
+	".pdf",
+	".png",
+	".webp"
+];
 const serverManifestPath = ArtifactPath.make("server/manifest.json");
 const schemaSnapshotPath = ArtifactPath.make("server/schema.json");
 const deploymentArtifactLimits = {
@@ -29804,7 +29839,7 @@ var IdGenerator = class IdGenerator extends Context.Service()("@ignotum/shared/i
 };
 //#endregion
 //#region package.json
-var version = "0.0.4";
+var version = "0.0.6";
 //#endregion
 //#region src/cli/codegen.ts
 const generatedHeader = "// Generated by `ignotum codegen`. Do not edit.";
@@ -30161,19 +30196,19 @@ var InvalidDeploymentArtifact = class extends Schema.TaggedError()("InvalidDeplo
 	message: Schema.String,
 	path: Schema.optional(Schema.String)
 }) {};
-const invalid$2 = (message, path) => InvalidDeploymentArtifact.make(path === void 0 ? { message } : {
+const invalid$3 = (message, path) => InvalidDeploymentArtifact.make(path === void 0 ? { message } : {
 	message,
 	path
 });
 const normalizeArtifactPath = Effect.fn("Deployment.normalizeArtifactPath")(function* (input) {
 	const normalized = input.replaceAll("\\", "/");
-	return yield* Schema.decodeEffect(ArtifactPath)(normalized).pipe(Effect.mapError(() => invalid$2(`Invalid artifact path '${input}'.`, input)));
+	return yield* Schema.decodeEffect(ArtifactPath)(normalized).pipe(Effect.mapError(() => invalid$3(`Invalid artifact path '${input}'.`, input)));
 });
 const normalizeFiles = Effect.fn("Deployment.normalizeFiles")(function* (inputs) {
 	const paths = /* @__PURE__ */ new Set();
 	return yield* Effect.forEach(inputs, (input) => Effect.gen(function* () {
 		const path = yield* normalizeArtifactPath(input.path);
-		if (paths.has(path)) return yield* invalid$2(`Duplicate normalized artifact path '${path}'.`, path);
+		if (paths.has(path)) return yield* invalid$3(`Duplicate normalized artifact path '${path}'.`, path);
 		paths.add(path);
 		return {
 			path,
@@ -30182,22 +30217,31 @@ const normalizeFiles = Effect.fn("Deployment.normalizeFiles")(function* (inputs)
 	}));
 });
 const contentType = (path) => {
-	if (path.endsWith(".css")) return "text/css; charset=utf-8";
-	if (path.endsWith(".html")) return "text/html; charset=utf-8";
-	if (path.endsWith(".js") || path.endsWith(".mjs")) return "text/javascript; charset=utf-8";
-	if (path.endsWith(".json") || path.endsWith(".map")) return "application/json; charset=utf-8";
-	if (path.endsWith(".svg")) return "image/svg+xml";
-	if (path.endsWith(".png")) return "image/png";
-	if (path.endsWith(".jpg") || path.endsWith(".jpeg")) return "image/jpeg";
-	if (path.endsWith(".webp")) return "image/webp";
-	if (path.endsWith(".woff2")) return "font/woff2";
-	if (path.endsWith(".woff")) return "font/woff";
-	if (path.endsWith(".wasm")) return "application/wasm";
+	const lowerPath = path.toLowerCase();
+	if (lowerPath.endsWith(".css")) return "text/css; charset=utf-8";
+	if (lowerPath.endsWith(".html")) return "text/html; charset=utf-8";
+	if (lowerPath.endsWith(".js") || lowerPath.endsWith(".mjs")) return "text/javascript; charset=utf-8";
+	if (lowerPath.endsWith(".json") || lowerPath.endsWith(".map")) return "application/json; charset=utf-8";
+	if (lowerPath.endsWith(".svg")) return "image/svg+xml";
+	if (lowerPath.endsWith(".avif")) return "image/avif";
+	if (lowerPath.endsWith(".gif")) return "image/gif";
+	if (lowerPath.endsWith(".ico")) return "image/x-icon";
+	if (lowerPath.endsWith(".png")) return "image/png";
+	if (lowerPath.endsWith(".jpg") || lowerPath.endsWith(".jpeg")) return "image/jpeg";
+	if (lowerPath.endsWith(".webp")) return "image/webp";
+	if (lowerPath.endsWith(".pdf")) return "application/pdf";
+	if (lowerPath.endsWith(".woff2")) return "font/woff2";
+	if (lowerPath.endsWith(".woff")) return "font/woff";
+	if (lowerPath.endsWith(".wasm")) return "application/wasm";
 	return "application/octet-stream";
 };
+const isClientPublicFile = (path) => clientPublicFileExtensions.some((extension) => path.toLowerCase().endsWith(extension));
 const artifactKind = (path) => {
+	if (path === clientManifestPath) return "ClientManifest";
 	if (path === clientShellPath) return "ClientShell";
-	if (path.startsWith("client/")) return "ClientAsset";
+	if (path.startsWith(clientAssetPathPrefix)) return "ClientAsset";
+	if (path.startsWith(clientRoutePathPrefix) && path.endsWith(".html")) return "ClientDocument";
+	if (path.startsWith(clientRoutePathPrefix) && isClientPublicFile(path)) return "ClientPublicFile";
 	if (path === serverManifestPath) return "ServerManifest";
 	if (path === schemaSnapshotPath) return "SchemaSnapshot";
 	if (path.startsWith("server/functions/") && path.endsWith(".mjs.map")) return "SourceMap";
@@ -30205,7 +30249,7 @@ const artifactKind = (path) => {
 };
 const makeArtifactFile = Effect.fn("Deployment.makeArtifactFile")(function* (input) {
 	const kind = artifactKind(input.path);
-	if (kind === void 0) return yield* invalid$2(`Unexpected artifact file '${input.path}'.`, input.path);
+	if (kind === void 0) return yield* invalid$3(`Unexpected artifact file '${input.path}'.`, input.path);
 	return {
 		path: input.path,
 		size: input.bytes.byteLength,
@@ -30222,35 +30266,36 @@ const makeInventoryFromNormalized = Effect.fn("Deployment.makeInventoryFromNorma
 	};
 });
 const validateDeploymentInventory = Effect.fn("Deployment.validateDeploymentInventory")(function* (inventory) {
-	if (inventory.files.length > deploymentArtifactLimits.fileCount) return yield* invalid$2(`Deployment inventories may contain at most ${deploymentArtifactLimits.fileCount} files.`);
+	if (inventory.files.length > deploymentArtifactLimits.fileCount) return yield* invalid$3(`Deployment inventories may contain at most ${deploymentArtifactLimits.fileCount} files.`);
 	const paths = /* @__PURE__ */ new Set();
 	let previousPath;
 	let serverBytes = 0;
 	let totalBytes = 0;
 	for (const file of inventory.files) {
-		if (file.size > deploymentArtifactLimits.fileBytes) return yield* invalid$2(`Artifact file '${file.path}' exceeds the ${deploymentArtifactLimits.fileBytes} byte limit.`, file.path);
+		if (file.size > deploymentArtifactLimits.fileBytes) return yield* invalid$3(`Artifact file '${file.path}' exceeds the ${deploymentArtifactLimits.fileBytes} byte limit.`, file.path);
 		totalBytes += file.size;
-		if (totalBytes > deploymentArtifactLimits.totalBytes) return yield* invalid$2(`Deployment artifacts exceed the ${deploymentArtifactLimits.totalBytes} byte limit.`);
+		if (totalBytes > deploymentArtifactLimits.totalBytes) return yield* invalid$3(`Deployment artifacts exceed the ${deploymentArtifactLimits.totalBytes} byte limit.`);
 		if (file.path.startsWith("server/")) {
 			serverBytes += file.size;
-			if (serverBytes > deploymentArtifactLimits.serverBytes) return yield* invalid$2(`Server artifacts exceed the ${deploymentArtifactLimits.serverBytes} byte limit.`);
+			if (serverBytes > deploymentArtifactLimits.serverBytes) return yield* invalid$3(`Server artifacts exceed the ${deploymentArtifactLimits.serverBytes} byte limit.`);
 		}
-		if (paths.has(file.path)) return yield* invalid$2(`Duplicate deployment inventory path '${file.path}'.`, file.path);
+		if (paths.has(file.path)) return yield* invalid$3(`Duplicate deployment inventory path '${file.path}'.`, file.path);
 		paths.add(file.path);
-		if (previousPath !== void 0 && String$1.Order(previousPath, file.path) >= 0) return yield* invalid$2("Deployment inventory files must be sorted by path.", file.path);
+		if (previousPath !== void 0 && String$1.Order(previousPath, file.path) >= 0) return yield* invalid$3("Deployment inventory files must be sorted by path.", file.path);
 		previousPath = file.path;
 		const expectedKind = artifactKind(file.path);
-		if (expectedKind === void 0 || expectedKind !== file.kind) return yield* invalid$2(`Deployment inventory kind '${file.kind}' does not match '${file.path}'.`, file.path);
+		if (expectedKind === void 0 || expectedKind !== file.kind) return yield* invalid$3(`Deployment inventory kind '${file.kind}' does not match '${file.path}'.`, file.path);
 	}
 	for (const path of [
+		clientManifestPath,
 		clientShellPath,
 		serverManifestPath,
 		schemaSnapshotPath
-	]) if (!paths.has(path)) return yield* invalid$2(`Artifact file '${path}' is missing.`, path);
+	]) if (!paths.has(path)) return yield* invalid$3(`Artifact file '${path}' is missing.`, path);
 });
 const makeDeploymentInventory = Effect.fn("Deployment.makeDeploymentInventory")(function* (inputs) {
 	const files = yield* normalizeFiles(inputs);
-	if (files.some((file) => file.path === deploymentInventoryPath)) return yield* invalid$2(`${deploymentInventoryPath} cannot include itself in the deployment inventory.`, deploymentInventoryPath);
+	if (files.some((file) => file.path === deploymentInventoryPath)) return yield* invalid$3(`${deploymentInventoryPath} cannot include itself in the deployment inventory.`, deploymentInventoryPath);
 	const inventory = yield* makeInventoryFromNormalized(files);
 	const encoded = `${encodeCanonical(DeploymentInventory, inventory)}\n`;
 	return {
@@ -30267,35 +30312,53 @@ const artifactReference = Effect.fn("Deployment.artifactReference")(function* (p
 });
 const decodeJsonFile = (schema, file) => Effect.try({
 	try: () => utf8String(file.bytes),
-	catch: () => invalid$2(`Artifact file '${file.path}' is not valid UTF-8.`, file.path)
-}).pipe(Effect.flatMap(Schema.decodeEffect(Schema.fromJsonString(schema))), Effect.mapError(() => invalid$2(`Artifact file '${file.path}' has invalid JSON.`, file.path)));
+	catch: () => invalid$3(`Artifact file '${file.path}' is not valid UTF-8.`, file.path)
+}).pipe(Effect.flatMap(Schema.decodeEffect(Schema.fromJsonString(schema))), Effect.mapError(() => invalid$3(`Artifact file '${file.path}' has invalid JSON.`, file.path)));
 const findFile = (files, path) => {
 	const file = files.find((candidate) => candidate.path === path);
-	return file === void 0 ? Effect.fail(invalid$2(`Artifact file '${path}' is missing.`, path)) : Effect.succeed(file);
+	return file === void 0 ? Effect.fail(invalid$3(`Artifact file '${path}' is missing.`, path)) : Effect.succeed(file);
 };
 const sameReference = (entry, reference) => entry.path === reference.path && entry.size === reference.size && entry.sha256 === reference.sha256;
+const validateClientManifest = Effect.fn("Deployment.validateClientManifest")(function* (manifest, inventory) {
+	if (manifest.shell.path !== clientShellPath) return yield* invalid$3(`The client manifest must reference '${clientShellPath}' as its shell.`, manifest.shell.path);
+	const entries = new Map(inventory.files.map((file) => [file.path, file]));
+	const shellEntry = entries.get(manifest.shell.path);
+	if (shellEntry === void 0 || shellEntry.kind !== "ClientShell" || !sameReference(shellEntry, manifest.shell)) return yield* invalid$3(`The client shell reference for '${manifest.shell.path}' does not match the inventory.`, manifest.shell.path);
+	const referencedPaths = /* @__PURE__ */ new Set();
+	let previousRoute;
+	for (const route of manifest.routes) {
+		if (previousRoute !== void 0 && String$1.Order(previousRoute, route.pathname) >= 0) return yield* invalid$3("Client routes must be sorted by pathname.", route.pathname);
+		previousRoute = route.pathname;
+		if (referencedPaths.has(route.artifact.path)) return yield* invalid$3(`Client artifact path '${route.artifact.path}' is referenced more than once.`, route.artifact.path);
+		referencedPaths.add(route.artifact.path);
+		const entry = entries.get(route.artifact.path);
+		if (entry === void 0 || !sameReference(entry, route.artifact)) return yield* invalid$3(`The client route reference for '${route.artifact.path}' does not match the inventory.`, route.artifact.path);
+		if (entry.kind !== "ClientDocument" && entry.kind !== "ClientPublicFile") return yield* invalid$3(`Client route '${route.pathname}' cannot reference artifact kind '${entry.kind}'.`, route.artifact.path);
+	}
+	for (const file of inventory.files) if ((file.kind === "ClientDocument" || file.kind === "ClientPublicFile") && !referencedPaths.has(file.path)) return yield* invalid$3(`Client route artifact '${file.path}' has no route.`, file.path);
+});
 const validateManifest = Effect.fn("Deployment.validateManifest")(function* (manifest, inventory) {
-	if (manifest.schema.path !== schemaSnapshotPath) return yield* invalid$2(`The server manifest must reference '${schemaSnapshotPath}'.`, manifest.schema.path);
+	if (manifest.schema.path !== schemaSnapshotPath) return yield* invalid$3(`The server manifest must reference '${schemaSnapshotPath}'.`, manifest.schema.path);
 	const entries = new Map(inventory.files.map((file) => [file.path, file]));
 	const addresses = /* @__PURE__ */ new Set();
 	const referencedPaths = /* @__PURE__ */ new Set([serverManifestPath, schemaSnapshotPath]);
 	const references = [manifest.schema];
 	for (const definition of manifest.functions) {
-		if (addresses.has(definition.address)) return yield* invalid$2(`Duplicate function address '${definition.address}'.`);
+		if (addresses.has(definition.address)) return yield* invalid$3(`Duplicate function address '${definition.address}'.`);
 		addresses.add(definition.address);
 		references.push(definition.bundle, definition.sourceMap);
 		for (const reference of [definition.bundle, definition.sourceMap]) {
-			if (referencedPaths.has(reference.path)) return yield* invalid$2(`Server artifact path '${reference.path}' is referenced more than once.`, reference.path);
+			if (referencedPaths.has(reference.path)) return yield* invalid$3(`Server artifact path '${reference.path}' is referenced more than once.`, reference.path);
 			referencedPaths.add(reference.path);
 		}
-		if (!definition.bundle.path.endsWith(".mjs")) return yield* invalid$2("Function bundles must use the .mjs extension.", definition.bundle.path);
-		if (definition.sourceMap.path !== `${definition.bundle.path}.map`) return yield* invalid$2("A function source map must be adjacent to its bundle.", definition.sourceMap.path);
+		if (!definition.bundle.path.endsWith(".mjs")) return yield* invalid$3("Function bundles must use the .mjs extension.", definition.bundle.path);
+		if (definition.sourceMap.path !== `${definition.bundle.path}.map`) return yield* invalid$3("A function source map must be adjacent to its bundle.", definition.sourceMap.path);
 	}
 	for (const reference of references) {
 		const entry = entries.get(reference.path);
-		if (entry === void 0 || !sameReference(entry, reference)) return yield* invalid$2(`The server reference for '${reference.path}' does not match the inventory.`, reference.path);
+		if (entry === void 0 || !sameReference(entry, reference)) return yield* invalid$3(`The server reference for '${reference.path}' does not match the inventory.`, reference.path);
 	}
-	for (const file of inventory.files) if (file.path.startsWith("server/") && !referencedPaths.has(file.path)) return yield* invalid$2(`Unexpected server entrypoint '${file.path}'.`, file.path);
+	for (const file of inventory.files) if (file.path.startsWith("server/") && !referencedPaths.has(file.path)) return yield* invalid$3(`Unexpected server entrypoint '${file.path}'.`, file.path);
 });
 Effect.fn("Deployment.validateDeploymentMetadata")(function* (input) {
 	yield* validateDeploymentInventory(input.inventory);
@@ -30305,7 +30368,7 @@ Effect.fn("Deployment.validateDeploymentMetadata")(function* (input) {
 	};
 	const decodedInventory = yield* decodeJsonFile(DeploymentInventory, inventoryFile);
 	const expectedInventoryText = `${encodeCanonical(DeploymentInventory, input.inventory)}\n`;
-	if (encodeCanonical(DeploymentInventory, decodedInventory) !== encodeCanonical(DeploymentInventory, input.inventory) || utf8String(input.inventoryBytes) !== expectedInventoryText) return yield* invalid$2("The uploaded deployment inventory is not canonical.");
+	if (encodeCanonical(DeploymentInventory, decodedInventory) !== encodeCanonical(DeploymentInventory, input.inventory) || utf8String(input.inventoryBytes) !== expectedInventoryText) return yield* invalid$3("The uploaded deployment inventory is not canonical.");
 	const manifestFile = {
 		path: serverManifestPath,
 		bytes: input.manifestBytes
@@ -30314,17 +30377,28 @@ Effect.fn("Deployment.validateDeploymentMetadata")(function* (input) {
 		path: schemaSnapshotPath,
 		bytes: input.schemaBytes
 	};
-	const metadataFiles = [manifestFile, schemaFile];
+	const clientManifestFile = {
+		path: clientManifestPath,
+		bytes: input.clientManifestBytes
+	};
+	const metadataFiles = [
+		clientManifestFile,
+		manifestFile,
+		schemaFile
+	];
 	const entries = new Map(input.inventory.files.map((file) => [file.path, file]));
 	for (const file of metadataFiles) {
 		const entry = entries.get(file.path);
 		const actual = yield* makeArtifactFile(file);
-		if (entry === void 0 || encodeCanonical(ArtifactFile, actual) !== encodeCanonical(ArtifactFile, entry)) return yield* invalid$2(`Artifact file '${file.path}' does not match the deployment inventory.`, file.path);
+		if (entry === void 0 || encodeCanonical(ArtifactFile, actual) !== encodeCanonical(ArtifactFile, entry)) return yield* invalid$3(`Artifact file '${file.path}' does not match the deployment inventory.`, file.path);
 	}
+	const clientManifest = yield* decodeJsonFile(ClientManifest, clientManifestFile);
 	const manifest = yield* decodeJsonFile(ServerBuildManifest, manifestFile);
 	const schema = yield* decodeJsonFile(SchemaSnapshot, schemaFile);
+	yield* validateClientManifest(clientManifest, input.inventory);
 	yield* validateManifest(manifest, input.inventory);
 	return {
+		clientManifest,
 		inventory: input.inventory,
 		manifest,
 		schema
@@ -30337,14 +30411,17 @@ const validateDeploymentArtifact = Effect.fn("Deployment.validateDeploymentArtif
 	const inventory = yield* decodeJsonFile(DeploymentInventory, inventoryFile);
 	yield* validateDeploymentInventory(inventory);
 	const actualInventory = yield* makeInventoryFromNormalized(payloadFiles);
-	if (encodeCanonical(DeploymentInventory, inventory) !== encodeCanonical(DeploymentInventory, actualInventory)) return yield* invalid$2("The deployment inventory does not match the artifact files.");
+	if (encodeCanonical(DeploymentInventory, inventory) !== encodeCanonical(DeploymentInventory, actualInventory)) return yield* invalid$3("The deployment inventory does not match the artifact files.");
+	const clientManifestFile = yield* findFile(files, clientManifestPath);
 	const manifestFile = yield* findFile(files, serverManifestPath);
 	const schemaFile = yield* findFile(files, schemaSnapshotPath);
-	yield* findFile(files, clientShellPath);
+	const clientManifest = yield* decodeJsonFile(ClientManifest, clientManifestFile);
 	const manifest = yield* decodeJsonFile(ServerBuildManifest, manifestFile);
 	const schema = yield* decodeJsonFile(SchemaSnapshot, schemaFile);
+	yield* validateClientManifest(clientManifest, inventory);
 	yield* validateManifest(manifest, inventory);
 	return {
+		clientManifest,
 		inventory,
 		manifest,
 		schema
@@ -30364,7 +30441,7 @@ Effect.fn("Deployment.loadRuntimeDeploymentArtifact")(function* (read) {
 			bytes: yield* read(entry.path, entry.size)
 		};
 		const actual = yield* makeArtifactFile(input);
-		if (encodeCanonical(ArtifactFile, actual) !== encodeCanonical(ArtifactFile, entry)) return yield* invalid$2(`Artifact file '${entry.path}' does not match the deployment inventory.`, entry.path);
+		if (encodeCanonical(ArtifactFile, actual) !== encodeCanonical(ArtifactFile, entry)) return yield* invalid$3(`Artifact file '${entry.path}' does not match the deployment inventory.`, entry.path);
 		return input;
 	}), { concurrency: 4 });
 	const manifestFile = yield* findFile(serverFiles, serverManifestPath);
@@ -30420,7 +30497,7 @@ var AppConfigurationInvalid = class extends Schema.TaggedError()("AppConfigurati
 	cause: Schema.optional(Schema.Defect()),
 	message: Schema.String
 }) {};
-const invalid$1 = (message, cause) => AppConfigurationInvalid.make(cause === void 0 ? { message } : {
+const invalid$2 = (message, cause) => AppConfigurationInvalid.make(cause === void 0 ? { message } : {
 	cause,
 	message
 });
@@ -30430,16 +30507,16 @@ const loadAppConfiguration = Effect.fn("AppConfiguration.load")(function* (appDi
 	const path = yield* Path$1.Path;
 	const configPath = appConfigurationPath(appDirectory, path);
 	if (!(yield* fileSystem.exists(configPath))) return void 0;
-	const text = yield* fileSystem.readFileString(configPath).pipe(Effect.mapError((cause) => invalid$1(`Could not read ${configPath}.`, cause)));
-	return yield* Schema.decodeEffect(Schema.fromJsonString(AppConfiguration))(text).pipe(Effect.mapError((cause) => invalid$1(`${configPath} is not a valid app configuration.`, cause)));
+	const text = yield* fileSystem.readFileString(configPath).pipe(Effect.mapError((cause) => invalid$2(`Could not read ${configPath}.`, cause)));
+	return yield* Schema.decodeEffect(Schema.fromJsonString(AppConfiguration))(text).pipe(Effect.mapError((cause) => invalid$2(`${configPath} is not a valid app configuration.`, cause)));
 });
 const writeAppConfiguration = Effect.fn("AppConfiguration.write")(function* (appDirectory, configuration) {
 	const fileSystem = yield* FileSystem.FileSystem;
 	const path = yield* Path$1.Path;
 	const stateDirectory = path.join(appDirectory, ".ignotum");
 	const configPath = appConfigurationPath(appDirectory, path);
-	const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(AppConfiguration))(configuration).pipe(Effect.mapError((cause) => invalid$1("Could not encode the app configuration.", cause)));
-	yield* fileSystem.makeDirectory(stateDirectory, { recursive: true }).pipe(Effect.mapError((cause) => invalid$1(`Could not create ${stateDirectory}.`, cause)));
+	const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(AppConfiguration))(configuration).pipe(Effect.mapError((cause) => invalid$2("Could not encode the app configuration.", cause)));
+	yield* fileSystem.makeDirectory(stateDirectory, { recursive: true }).pipe(Effect.mapError((cause) => invalid$2(`Could not create ${stateDirectory}.`, cause)));
 	yield* Effect.scoped(Effect.gen(function* () {
 		const temporaryPath = yield* fileSystem.makeTempFileScoped({
 			directory: stateDirectory,
@@ -30448,14 +30525,14 @@ const writeAppConfiguration = Effect.fn("AppConfiguration.write")(function* (app
 		});
 		yield* fileSystem.writeFileString(temporaryPath, `${encoded}\n`);
 		yield* fileSystem.rename(temporaryPath, configPath);
-	})).pipe(Effect.mapError((cause) => invalid$1(`Could not write ${configPath}.`, cause)));
+	})).pipe(Effect.mapError((cause) => invalid$2(`Could not write ${configPath}.`, cause)));
 });
 const promptForSlug = Effect.fn("AppConfiguration.promptForSlug")(function* () {
 	const value = yield* Prompt.run(Prompt.text({
 		message: "App slug",
 		validate: (input) => Schema.decodeEffect(AppSlug)(input).pipe(Effect.map(String), Effect.mapError(() => "Use lowercase letters, numbers, and hyphens, with no leading or trailing hyphen."))
 	}));
-	return yield* Schema.decodeEffect(AppSlug)(value).pipe(Effect.mapError((cause) => invalid$1("The app slug is invalid.", cause)));
+	return yield* Schema.decodeEffect(AppSlug)(value).pipe(Effect.mapError((cause) => invalid$2("The app slug is invalid.", cause)));
 });
 const sameApp = (configured, remote) => configured.appId === remote.id && configured.slug === remote.slug;
 const configureApp = Effect.fn("AppConfiguration.configure")(function* (appDirectory, requestedSlug) {
@@ -30463,10 +30540,10 @@ const configureApp = Effect.fn("AppConfiguration.configure")(function* (appDirec
 	const hosted = yield* HostedControlConfiguration;
 	const configured = yield* loadAppConfiguration(appDirectory);
 	if (configured !== void 0) {
-		if (configured.apiUrl.href !== hosted.apiUrl.href) return yield* invalid$1(`.ignotum/app.json belongs to ${configured.apiUrl.href}, not ${hosted.apiUrl.href}.`);
-		if (requestedSlug !== void 0 && requestedSlug !== configured.slug) return yield* invalid$1(`.ignotum/app.json is already linked to '${configured.slug}', not '${requestedSlug}'.`);
+		if (configured.apiUrl.href !== hosted.apiUrl.href) return yield* invalid$2(`.ignotum/app.json belongs to ${configured.apiUrl.href}, not ${hosted.apiUrl.href}.`);
+		if (requestedSlug !== void 0 && requestedSlug !== configured.slug) return yield* invalid$2(`.ignotum/app.json is already linked to '${configured.slug}', not '${requestedSlug}'.`);
 		const remote = yield* control.getApp(configured.appId);
-		if (!sameApp(configured, remote)) return yield* invalid$1("The stored app identity does not match the Ignotum API.");
+		if (!sameApp(configured, remote)) return yield* invalid$2("The stored app identity does not match the Ignotum API.");
 		return configured;
 	}
 	const slug = requestedSlug ?? (yield* promptForSlug());
@@ -30510,6 +30587,11 @@ const validateClientFiles = Effect.fn("ClientConfig.validateFiles")(function* (a
 	const fileSystem = yield* FileSystem.FileSystem;
 	const path = yield* Path$1.Path;
 	const clientDirectory = path.join(appDirectory, "client");
+	const nestedPublicDirectory = path.join(clientDirectory, "public");
+	if (yield* fileSystem.exists(nestedPublicDirectory)) return yield* InvalidClientFile.make({
+		message: `Client public files must be placed in the top-level public directory, not ${nestedPublicDirectory}.`,
+		path: nestedPublicDirectory
+	});
 	const entryPath = path.join(clientDirectory, clientEntryFileName);
 	if (!(yield* fileSystem.exists(entryPath))) return yield* ClientFileNotFound.make({
 		message: `Required client file not found: ${entryPath}`,
@@ -30584,7 +30666,7 @@ const location = (source, offset) => {
 		line
 	};
 };
-const invalid = (entry, node, detail) => {
+const invalid$1 = (entry, node, detail) => {
 	const position = location(entry.source, node.start);
 	return InvalidClientEntry.make({
 		...position,
@@ -30604,26 +30686,26 @@ const extractClientEntryTitle = (entry) => {
 	const parserError = parsed.errors[0];
 	if (parserError !== void 0) {
 		const label = parserError.labels[0];
-		return Result.fail(invalid(entry, { start: label?.start ?? 0 }, `The client entry is invalid: ${parserError.message}.`));
+		return Result.fail(invalid$1(entry, { start: label?.start ?? 0 }, `The client entry is invalid: ${parserError.message}.`));
 	}
-	if (!parsed.program.body.some((statement) => statement.type === "ImportDeclaration" && statement.source.value === "ignotum/client" && statement.importKind !== "type" && statement.specifiers.some((specifier) => specifier.type === "ImportSpecifier" && specifier.importKind !== "type" && specifier.imported.type === "Identifier" && specifier.imported.name === "app" && specifier.local.name === "app"))) return Result.fail(invalid(entry, parsed.program, "Import { app } from \"ignotum/client\" without an alias."));
+	if (!parsed.program.body.some((statement) => statement.type === "ImportDeclaration" && statement.source.value === "ignotum/client" && statement.importKind !== "type" && statement.specifiers.some((specifier) => specifier.type === "ImportSpecifier" && specifier.importKind !== "type" && specifier.imported.type === "Identifier" && specifier.imported.name === "app" && specifier.local.name === "app"))) return Result.fail(invalid$1(entry, parsed.program, "Import { app } from \"ignotum/client\" without an alias."));
 	const defaultExports = parsed.program.body.filter((statement) => statement.type === "ExportDefaultDeclaration");
 	const defaultExport = defaultExports[0];
-	if (defaultExports.length !== 1 || defaultExport === void 0) return Result.fail(invalid(entry, parsed.program, "The client entry needs one default export."));
+	if (defaultExports.length !== 1 || defaultExport === void 0) return Result.fail(invalid$1(entry, parsed.program, "The client entry needs one default export."));
 	const call = defaultExport.declaration;
-	if (call.type !== "CallExpression" || call.optional || call.typeArguments != null || call.callee.type !== "Identifier" || call.callee.name !== "app" || call.arguments.length !== 1) return Result.fail(invalid(entry, defaultExport, "The default export must be an app call."));
+	if (call.type !== "CallExpression" || call.optional || call.typeArguments != null || call.callee.type !== "Identifier" || call.callee.name !== "app" || call.arguments.length !== 1) return Result.fail(invalid$1(entry, defaultExport, "The default export must be an app call."));
 	const definition = call.arguments[0];
-	if (definition?.type !== "ObjectExpression" || definition.properties.length !== 2) return Result.fail(invalid(entry, call, "The app call needs exactly title and component properties."));
+	if (definition?.type !== "ObjectExpression" || definition.properties.length !== 2) return Result.fail(invalid$1(entry, call, "The app call needs exactly title and component properties."));
 	const properties = definition.properties;
-	if (!properties.every(isObjectProperty)) return Result.fail(invalid(entry, definition, "Spread properties are not supported."));
+	if (!properties.every(isObjectProperty)) return Result.fail(invalid$1(entry, definition, "Spread properties are not supported."));
 	const titleProperties = properties.filter((property) => isNamedProperty(property, "title"));
 	const componentProperties = properties.filter((property) => isNamedProperty(property, "component"));
-	if (titleProperties.length !== 1 || componentProperties.length !== 1) return Result.fail(invalid(entry, definition, "Use unquoted title and component properties with no extras."));
+	if (titleProperties.length !== 1 || componentProperties.length !== 1) return Result.fail(invalid$1(entry, definition, "Use unquoted title and component properties with no extras."));
 	const titleProperty = titleProperties[0];
-	if (titleProperty === void 0) return Result.fail(invalid(entry, definition, "The title property is missing."));
+	if (titleProperty === void 0) return Result.fail(invalid$1(entry, definition, "The title property is missing."));
 	const title = titleProperty.value;
-	if (title.type !== "Literal" || !Predicate.isString(title.value) || title.raw?.startsWith("\"") !== true && title.raw?.startsWith("'") !== true) return Result.fail(invalid(entry, title, "The title must be a quoted string literal."));
-	if (title.value.trim().length === 0) return Result.fail(invalid(entry, title, "The title must contain a non-whitespace character."));
+	if (title.type !== "Literal" || !Predicate.isString(title.value) || title.raw?.startsWith("\"") !== true && title.raw?.startsWith("'") !== true) return Result.fail(invalid$1(entry, title, "The title must be a quoted string literal."));
+	if (title.value.trim().length === 0) return Result.fail(invalid$1(entry, title, "The title must contain a non-whitespace character."));
 	return Result.succeed(title.value);
 };
 const loadClientEntryTitle = Effect.fn("ClientEntry.loadTitle")(function* (path) {
@@ -30877,6 +30959,104 @@ const sourceMapPathTransform = Effect.fn("Deploy.sourceMapPathTransform")(functi
 	};
 });
 //#endregion
+//#region src/cli/build/public.ts
+var InvalidPublicFile = class extends Schema.TaggedError()("InvalidPublicFile", {
+	message: Schema.String,
+	path: Schema.String
+}) {};
+const pathSegmentPattern = /^[A-Za-z0-9._~-]+$/;
+const startsWith = (bytes, signature, offset = 0) => signature.every((byte, index) => bytes[offset + index] === byte);
+const asciiAt = (bytes, value, offset = 0) => startsWith(bytes, globalThis.Array.from(value, (character) => character.charCodeAt(0)), offset);
+const hasValidSignature = (extension, bytes) => {
+	switch (extension) {
+		case ".avif": {
+			if (!asciiAt(bytes, "ftyp", 4)) return false;
+			const headerLength = Math.min(bytes.length, 64);
+			for (let offset = 8; offset + 4 <= headerLength; offset += 4) if (asciiAt(bytes, "avif", offset) || asciiAt(bytes, "avis", offset)) return true;
+			return false;
+		}
+		case ".gif": return asciiAt(bytes, "GIF87a") || asciiAt(bytes, "GIF89a");
+		case ".ico": return startsWith(bytes, [
+			0,
+			0,
+			1,
+			0
+		]);
+		case ".jpeg":
+		case ".jpg": return startsWith(bytes, [
+			255,
+			216,
+			255
+		]);
+		case ".pdf": return asciiAt(bytes, "%PDF-");
+		case ".png": return startsWith(bytes, [
+			137,
+			80,
+			78,
+			71,
+			13,
+			10,
+			26,
+			10
+		]);
+		case ".webp": return asciiAt(bytes, "RIFF") && asciiAt(bytes, "WEBP", 8);
+		default: return false;
+	}
+};
+const invalid = (path, message) => InvalidPublicFile.make({
+	message,
+	path
+});
+const copyPublicFiles = Effect.fn("Deploy.copyPublicFiles")(function* (appDirectory, outputDirectory) {
+	const fileSystem = yield* FileSystem.FileSystem;
+	const path = yield* Path$1.Path;
+	const publicDirectory = path.join(appDirectory, "public");
+	if (!(yield* fileSystem.exists(publicDirectory))) return {
+		files: 0,
+		routes: []
+	};
+	if (Option.isSome(yield* Effect.option(fileSystem.readLink(publicDirectory)))) return yield* invalid(publicDirectory, "The top-level public directory cannot be a symbolic link.");
+	if ((yield* fileSystem.stat(publicDirectory)).type !== "Directory") return yield* invalid(publicDirectory, "The top-level public path must be a directory.");
+	const entries = (yield* fileSystem.readDirectory(publicDirectory, { recursive: true })).toSorted();
+	const files = (yield* Effect.forEach(entries, (entry) => Effect.gen(function* () {
+		const relativePath = entry.replaceAll("\\", "/");
+		const source = path.join(publicDirectory, entry);
+		if (Option.isSome(yield* Effect.option(fileSystem.readLink(source)))) return yield* invalid(source, "Public entries cannot be symbolic links.");
+		const info = yield* fileSystem.stat(source);
+		if (info.type === "Directory") return void 0;
+		if (info.type !== "File") return yield* invalid(source, "Public entries must be regular files or directories.");
+		const segments = relativePath.split("/");
+		if (segments.some((segment) => !pathSegmentPattern.test(segment))) return yield* invalid(source, "Public file paths may only contain letters, numbers, dots, underscores, tildes, hyphens, and directory separators.");
+		if (segments[0] === "_ignotum") return yield* invalid(source, "The /_ignotum namespace is reserved by the platform.");
+		const extension = path.extname(relativePath).toLowerCase();
+		if (!clientPublicFileExtensions.some((allowedExtension) => allowedExtension === extension)) return yield* invalid(source, `Unsupported public file type '${extension || "(none)"}'. Allowed types: ${clientPublicFileExtensions.join(", ")}.`);
+		if (info.size > BigInt(deploymentArtifactLimits.fileBytes)) return yield* invalid(source, `Public files cannot exceed ${deploymentArtifactLimits.fileBytes} bytes.`);
+		const bytes = yield* fileSystem.readFile(source);
+		if (!hasValidSignature(extension, bytes)) return yield* invalid(source, `The contents do not match the '${extension}' file extension.`);
+		const pathname = `/${relativePath}`;
+		return {
+			bytes,
+			destination: path.join(outputDirectory, "routes", entry),
+			route: {
+				pathname: ClientPath.make(pathname),
+				artifact: yield* artifactReference(ArtifactPath.make(`client/routes/${relativePath}`), bytes)
+			},
+			source
+		};
+	}))).filter((file) => file !== void 0);
+	yield* Effect.forEach(files, (file) => Effect.gen(function* () {
+		if (yield* fileSystem.exists(file.destination)) return yield* invalid(file.source, `Public route '${file.route.pathname}' overlaps generated client output.`);
+	}));
+	yield* Effect.forEach(files, (file) => Effect.gen(function* () {
+		yield* fileSystem.makeDirectory(path.dirname(file.destination), { recursive: true });
+		yield* fileSystem.writeFile(file.destination, file.bytes);
+	}), { discard: true });
+	return {
+		files: files.length,
+		routes: files.map((file) => file.route)
+	};
+});
+//#endregion
 //#region src/cli/build/client.ts
 const buildClient = Effect.fn("Deploy.buildClient")(function* (appDirectory, outputDirectory) {
 	const fileSystem = yield* FileSystem.FileSystem;
@@ -30896,9 +31076,9 @@ const buildClient = Effect.fn("Deploy.buildClient")(function* (appDirectory, out
 			rolldownOptions: {
 				input: clientEntryId,
 				output: {
-					assetFileNames: "assets/[name]-[hash][extname]",
-					chunkFileNames: "assets/[name]-[hash].js",
-					entryFileNames: "assets/[name]-[hash].js"
+					assetFileNames: (asset) => asset.names.some((name) => name.endsWith(".css")) ? "assets/styles-[hash][extname]" : "assets/[name]-[hash][extname]",
+					chunkFileNames: "assets/chunks/[name]-[hash].js",
+					entryFileNames: "assets/main-[hash].js"
 				}
 			},
 			sourcemap: false
@@ -30934,25 +31114,35 @@ const buildClient = Effect.fn("Deploy.buildClient")(function* (appDirectory, out
 	let icon;
 	if (clientFiles.iconPath !== void 0) {
 		const bytes = yield* fileSystem.readFile(clientFiles.iconPath);
-		const fileName = `icon-${yield* sha256(bytes)}.svg`;
+		const fileName = `icon-${(yield* sha256(bytes)).slice(0, 16)}.svg`;
 		const assetsDirectory = path.join(outputDirectory, "assets");
 		yield* fileSystem.makeDirectory(assetsDirectory, { recursive: true });
 		yield* fileSystem.writeFile(path.join(assetsDirectory, fileName), bytes);
-		icon = `/assets/${fileName}`;
+		icon = `/_ignotum/assets/${fileName}`;
 	}
-	const shellPath = path.join(outputDirectory, "_shell.html");
+	const shellPath = path.join(outputDirectory, "shell.html");
 	const document = renderClientDocument({
 		icon,
 		scripts: [{
-			source: entryFile,
+			source: `_ignotum/${entryFile}`,
 			type: "External"
 		}],
-		styles,
+		styles: styles.map((style) => `_ignotum/${style}`),
 		title
 	});
-	yield* fileSystem.writeFileString(shellPath, document);
+	const shellBytes = utf8Bytes(document);
+	yield* fileSystem.writeFile(shellPath, shellBytes);
+	const publicBuild = yield* copyPublicFiles(appDirectory, outputDirectory);
+	const manifest = {
+		formatVersion: 1,
+		shell: yield* artifactReference(clientShellPath, shellBytes),
+		routes: publicBuild.routes
+	};
+	const manifestPath = path.join(outputDirectory, "manifest.json");
+	yield* fileSystem.writeFileString(manifestPath, `${encodeCanonical(ClientManifest, manifest)}\n`);
 	return {
-		assets: output.length + (icon === void 0 ? 0 : 1),
+		assets: output.length + (icon === void 0 ? 0 : 1) + publicBuild.files,
+		manifestPath,
 		shellPath
 	};
 });
@@ -31235,6 +31425,7 @@ const buildServerFunction = Effect.fn("Deploy.buildServerFunction")(function* (a
 		logLevel: "warn",
 		mode: "production",
 		plugins: [boundaries, serverFunctionEntryPlugin(definition)],
+		publicDir: false,
 		resolve: {
 			conditions: [...conditions],
 			noExternal: true,
@@ -31882,7 +32073,7 @@ var QueryInvalidation = class extends Context.Service()("@ignotum/runtime/sync/Q
 //#region ../contracts/dist/runtime/transport.js
 const runtimeInvocationPath = "/v1/invoke";
 const runtimeRevisionPath = "/v1/revision";
-const appSyncPath = "/_ignotum/v1/sync";
+const appSyncPath = `/_ignotum/v1/sync`;
 const RuntimeRequestPath = Schema.Literals([runtimeInvocationPath, runtimeRevisionPath]);
 const RuntimeRequestTimestamp = Schema.FiniteFromString.pipe(Schema.check(Schema.isInt(), Schema.isGreaterThanOrEqualTo(0)), Schema.brand("ignotum/runtime/RequestTimestamp"));
 const RuntimeRequestSignature = Sha256.pipe(Schema.brand("ignotum/runtime/RequestSignature"));
@@ -32810,13 +33001,13 @@ const agentAppFiles = [
 		path: ".agents/skills/ignotum/SKILL.md"
 	},
 	...[
-		["client.md", "# Client\n\nIgnotum apps use JSX, hooks from `ignotum/client`, and Tailwind CSS. The required\n`client/index.tsx` file defines the browser title and root component:\n\n```tsx\nimport { app, Query, Result, useMutation, useQuery } from \"ignotum/client\";\n\nimport { api } from \"@/_generated/api.js\";\n\nfunction App() {\n  return <main>My App</main>;\n}\n\nexport default app({\n  title: \"My App\",\n  component: App,\n});\n```\n\nThe title must be a non-empty quoted string in the `app(...)` definition so Ignotum can include it\nin the first HTML response.\n\n## Tailwind CSS\n\nIgnotum loads Tailwind CSS automatically. App code does not need to import a framework stylesheet.\n\nStyle JSX with Tailwind utility classes. Use the JSX `class` attribute:\n\n```tsx\nfunction App() {\n  return (\n    <main class=\"mx-auto max-w-xl px-6 py-16\">\n      <h1 class=\"text-2xl font-semibold text-zinc-950\">Todos</h1>\n    </main>\n  );\n}\n```\n\nThe app does not need a Tailwind configuration file. Custom CSS files are ordinary client modules:\ngive them any filename and import them from app code when needed.\n\n## Run a query\n\n`useQuery` takes a generated query reference. Pass the typed arguments when the query declares\nthem:\n\n```tsx\nconst todos = useQuery(api.todos.list);\nconst todo = useQuery(api.todos.get, { id });\nconst selectedTodo = useQuery(api.todos.get, id === undefined ? Query.skip : { id });\n```\n\n`Query.skip` keeps a query pending without opening a subscription. Use it when the arguments are\nnot available yet.\n\nThe first value is pending. Match every state with `Result.match`:\n\n```tsx\nreturn Result.match(todos, {\n  pending: () => <p class=\"text-zinc-500\">Loading...</p>,\n  value: (items) => (\n    <ul>\n      {items.map((todo) => (\n        <li key={todo.id}>{todo.text}</li>\n      ))}\n    </ul>\n  ),\n});\n```\n\nIgnotum keeps an active query up to date. A successful mutation refreshes affected subscribed\nqueries in every open client. Queries that did not read the changed documents or tables do not run\nagain.\n\n## Run a mutation\n\n`useMutation` takes a generated mutation reference and returns a function:\n\n```tsx\nconst createTodo = useMutation(api.todos.create);\n\nvoid createTodo({ text }).then(\n  Result.match({\n    value: (id) => console.log(id),\n    error: {\n      InvalidTodoText: ({ text }) => console.log(`Invalid text: ${text}`),\n      TodoLimitReached: ({ limit }) => console.log(`The limit is ${limit}`),\n    },\n    internalError: ({ requestId }) => console.log(`Request ${requestId} failed.`),\n  }),\n);\n```\n\nAn argument-free mutation returns a zero-argument function:\n\n```tsx\nconst clearTodos = useMutation(api.todos.clear);\nvoid clearTodos();\n```\n\nThe client `Result` API only inspects completed server responses. Server-only operations such as\n`Result.fail`, `Result.succeed`, `Result.try`, `yield*`, and `.catch()` are not available here.\n\nApplication errors are handled by `error`, either with one function or an exhaustive map keyed by\n`_tag`. An `InternalServerError` contains a request ID and is thrown when `Result.match` has no\n`internalError` handler. During rendering, it reaches the nearest UI error boundary. A mutation can\nhandle it locally with `internalError`, as above. Operation-scoped protocol failures reject mutation\npromises or reach the nearest query UI error boundary. Ignotum retries transient connection failures,\nkeeps the latest query state, and replays pending mutations after the next connection handshake.\n\nHosted apps limit connections, subscriptions, active unique queries, and mutation traffic. See\n[Limits](limits.md) for the current values and retry retention.\n"],
-		["deploy.md", "# Deploy\n\nSet your API token in your shell:\n\n```sh\nexport IGNOTUM_API_TOKEN=your-token\n```\n\nDo not put the token in the app directory or commit it to source control.\n\nOn the first deploy, pass the app slug:\n\n```sh\nnpx ignotum deploy --app my-app\n```\n\nIf the slug belongs to one of your apps, Ignotum links it. Otherwise, Ignotum creates the app.\nWithout `--app`, the first deploy asks for the slug interactively.\n\nIgnotum stores the app ID, slug, and API URL in `.ignotum/app.json`. It never stores the access\ntoken there. Later deploys reuse the saved app, so the command has no app flag:\n\n```sh\nnpx ignotum deploy\n```\n\nThere is no separate build command. `deploy` generates the current bindings and builds both parts\nof the application, uploads the artifact, and makes the new deployment active.\n\nThe client output contains `_shell.html` and its static assets. The server output contains one\nbundle for every exported query or mutation. Ignotum writes both under `.ignotum/build` only after\nthe complete build succeeds. If a rebuild fails, the previous successful output stays in place.\n\nUploads stream from disk. If an upload is interrupted after it begins, Ignotum leaves the active\ndeployment unchanged and prints the incomplete deployment ID. A rejected upload reports the\nAPI's reason. A successful deploy prints the app URL and deployment ID.\n\nThe CLI uses `https://api.ignotum.cloud` by default. Set `IGNOTUM_API_URL` only when targeting a\ndifferent Ignotum API, such as a local or development deployment.\n\nIgnotum rejects deployments that exceed the hosted file or artifact size limits. It also removes\nunfinished uploads and older inactive deployments after their retention periods. See\n[Limits](limits.md) for the current values.\n"],
+		["client.md", "# Client\n\nIgnotum apps use JSX, hooks from `ignotum/client`, and Tailwind CSS. The required\n`client/index.tsx` file defines the browser title and root component:\n\n```tsx\nimport { app, Query, Result, useMutation, useQuery } from \"ignotum/client\";\n\nimport { api } from \"@/_generated/api.js\";\n\nfunction App() {\n  return <main>My App</main>;\n}\n\nexport default app({\n  title: \"My App\",\n  component: App,\n});\n```\n\nThe title must be a non-empty quoted string in the `app(...)` definition so Ignotum can include it\nin the first HTML response.\n\n## Tailwind CSS\n\nIgnotum loads Tailwind CSS automatically. App code does not need to import a framework stylesheet.\n\nStyle JSX with Tailwind utility classes. Use the JSX `class` attribute:\n\n```tsx\nfunction App() {\n  return (\n    <main class=\"mx-auto max-w-xl px-6 py-16\">\n      <h1 class=\"text-2xl font-semibold text-zinc-950\">Todos</h1>\n    </main>\n  );\n}\n```\n\nThe app does not need a Tailwind configuration file. Custom CSS files are ordinary client modules:\ngive them any filename and import them from app code when needed.\n\n## Public files\n\nPut files that need their own URL in a top-level `public` directory next to `client` and `server`.\nThe directory structure becomes the URL structure. For example, `public/documents/manual.pdf` is\navailable at `/documents/manual.pdf` after deployment.\n\nPublic files are limited to AVIF, GIF, ICO, JPEG, PNG, WebP, and PDF. Ignotum checks that a file's\ncontents match its extension and rejects symbolic links, executable or code formats, and paths\nunder the reserved `_ignotum` name. Use `client/icon.svg` for the app favicon; arbitrary SVG files\nare not accepted in `public`. Put the directory at the app root—`client/public` is rejected.\n\n## Run a query\n\n`useQuery` takes a generated query reference. Pass the typed arguments when the query declares\nthem:\n\n```tsx\nconst todos = useQuery(api.todos.list);\nconst todo = useQuery(api.todos.get, { id });\nconst selectedTodo = useQuery(api.todos.get, id === undefined ? Query.skip : { id });\n```\n\n`Query.skip` keeps a query pending without opening a subscription. Use it when the arguments are\nnot available yet.\n\nThe first value is pending. Match every state with `Result.match`:\n\n```tsx\nreturn Result.match(todos, {\n  pending: () => <p class=\"text-zinc-500\">Loading...</p>,\n  value: (items) => (\n    <ul>\n      {items.map((todo) => (\n        <li key={todo.id}>{todo.text}</li>\n      ))}\n    </ul>\n  ),\n});\n```\n\nIgnotum keeps an active query up to date. A successful mutation refreshes affected subscribed\nqueries in every open client. Queries that did not read the changed documents or tables do not run\nagain.\n\n## Run a mutation\n\n`useMutation` takes a generated mutation reference and returns a function:\n\n```tsx\nconst createTodo = useMutation(api.todos.create);\n\nvoid createTodo({ text }).then(\n  Result.match({\n    value: (id) => console.log(id),\n    error: {\n      InvalidTodoText: ({ text }) => console.log(`Invalid text: ${text}`),\n      TodoLimitReached: ({ limit }) => console.log(`The limit is ${limit}`),\n    },\n    internalError: ({ requestId }) => console.log(`Request ${requestId} failed.`),\n  }),\n);\n```\n\nAn argument-free mutation returns a zero-argument function:\n\n```tsx\nconst clearTodos = useMutation(api.todos.clear);\nvoid clearTodos();\n```\n\nThe client `Result` API only inspects completed server responses. Server-only operations such as\n`Result.fail`, `Result.succeed`, `Result.try`, `yield*`, and `.catch()` are not available here.\n\nApplication errors are handled by `error`, either with one function or an exhaustive map keyed by\n`_tag`. An `InternalServerError` contains a request ID and is thrown when `Result.match` has no\n`internalError` handler. During rendering, it reaches the nearest UI error boundary. A mutation can\nhandle it locally with `internalError`, as above. Operation-scoped protocol failures reject mutation\npromises or reach the nearest query UI error boundary. Ignotum retries transient connection failures,\nkeeps the latest query state, and replays pending mutations after the next connection handshake.\n\nHosted apps limit connections, subscriptions, active unique queries, and mutation traffic. See\n[Limits](limits.md) for the current values and retry retention.\n"],
+		["deploy.md", "# Deploy\n\nSet your API token in your shell:\n\n```sh\nexport IGNOTUM_API_TOKEN=your-token\n```\n\nDo not put the token in the app directory or commit it to source control.\n\nOn the first deploy, pass the app slug:\n\n```sh\nnpx ignotum deploy --app my-app\n```\n\nIf the slug belongs to one of your apps, Ignotum links it. Otherwise, Ignotum creates the app.\nWithout `--app`, the first deploy asks for the slug interactively.\n\nIgnotum stores the app ID, slug, and API URL in `.ignotum/app.json`. It never stores the access\ntoken there. Later deploys reuse the saved app, so the command has no app flag:\n\n```sh\nnpx ignotum deploy\n```\n\nThere is no separate build command. `deploy` generates the current bindings and builds both parts\nof the application, uploads the artifact, and makes the new deployment active.\n\nThe client output contains the SPA shell, generated assets, and validated files from the top-level\n`public` directory. The server output contains one bundle for every exported query or mutation.\nIgnotum writes both under `.ignotum/build` only after the complete build succeeds. If a rebuild\nfails, the previous successful output stays in place.\n\nUploads stream from disk. If an upload is interrupted after it begins, Ignotum leaves the active\ndeployment unchanged and prints the incomplete deployment ID. A rejected upload reports the\nAPI's reason. A successful deploy prints the app URL and deployment ID.\n\nThe CLI uses `https://api.ignotum.cloud` by default. Set `IGNOTUM_API_URL` only when targeting a\ndifferent Ignotum API, such as a local or development deployment.\n\nIgnotum rejects deployments that exceed the hosted file or artifact size limits. It also removes\nunfinished uploads and older inactive deployments after their retention periods. See\n[Limits](limits.md) for the current values.\n"],
 		["dev-server.md", "# Dev server\n\nRun the dev server from the app root:\n\n```sh\nnpx ignotum dev\n```\n\nIt expects these files:\n\n```text\nclient/index.tsx\nserver/schema.ts\n```\n\nThe dev server generates the client and server bindings, reads the `app(...)` definition from\n`client/index.tsx`, loads Tailwind automatically, and serves the app at\n<http://127.0.0.1:3210>. It reloads client and server changes and updates active queries after\nserver changes and successful mutations.\n\nYou do not need an HTML file, Vite configuration, Tailwind configuration, or framework stylesheet.\nAdd an optional `client/icon.svg` and Ignotum uses it as the favicon automatically. With no icon\nfile, the HTML contains no favicon link.\n\n## Flags\n\nUse flags to change the address or open the browser:\n\n```sh\nnpx ignotum dev --host 0.0.0.0 --port 3000 --open\n```\n\nThe defaults are host `127.0.0.1`, port `3210`, and no automatic browser opening.\n\n## Code generation\n\nThe dev server runs code generation when it starts. It updates generated files when you add or\nremove a server function file.\n\nRun code generation before typechecking without the dev server:\n\n```sh\nnpx ignotum codegen\nnpx tsc --noEmit\n```\n\nIgnotum creates:\n\n- `_generated/server.ts` with schema-bound `query`, `mutation`, and `values` exports;\n- `_generated/api.ts` with client references such as `api.todos.list`;\n- `_generated/types.ts` with `DataModel`, `Doc`, and `Id`.\n\nDo not edit generated files.\n\n## Local data\n\nData persists between dev-server restarts. Stop the server and reset that data with:\n\n```sh\nnpx ignotum dev db reset\n```\n"],
 		["getting-started.md", "# Getting started\n\nIgnotum requires Node.js 22.18 or newer.\n\nCreate an app:\n\n```sh\nnpx ignotum new my-app\ncd my-app\nnpx ignotum dev\n```\n\nOpen <http://127.0.0.1:3210>. The generated app is a small counter with a schema, a query, a\nmutation, and a JSX client.\n\n`ignotum new` installs dependencies with pnpm when it is available. It falls back to npm only when\npnpm is not installed. It generates `_generated`, initializes a Git repository, and creates an\n`Init` commit containing the generated files after the rest of the setup finishes.\n\nPass `.` to create the app in the current directory. The directory must be empty:\n\n```sh\nnpx ignotum new .\n```\n\nUse `--no-git` to skip Git or `--no-install` to skip dependency installation. You can install the\ndependencies later with the same pnpm and npm fallback behavior:\n\n```sh\nnpx ignotum install\n```\n\nRead [schema syntax](schema.md), [server functions](server-functions.md), and the\n[client guide](client.md) to build the app. The [manual setup](manual-setup.md) recreates the counter\napp without `ignotum new`. When it is ready, follow the [deploy guide](deploy.md) to create or link\nthe hosted app and publish it.\n"],
 		["index.md", "# Ignotum\n\nAn Ignotum app has a schema, server functions, and a client. Ignotum is opinionated about the\nclient tooling. Every app uses JSX, hooks from `ignotum/client`, and Tailwind CSS.\n\nThe current release supports local development and hosted deployment.\n\n- [Getting started](getting-started.md) creates and runs a counter app with `ignotum new`.\n- [Manual setup](manual-setup.md) recreates the generated counter app by hand.\n- [Schema syntax](schema.md) covers tables, fields, IDs, and generated document types.\n- [Values](values.md) lists every value validator and its TypeScript type.\n- [Server functions](server-functions.md) covers queries, mutations, database access, and errors.\n- [Client](client.md) covers queries, mutations, results, and Tailwind styling.\n- [Dev server](dev-server.md) covers local development, code generation, flags, and data reset.\n- [Deploy](deploy.md) creates or links an app, then uploads and activates a deployment.\n- [Limits](limits.md) lists hosted limits for functions, data, realtime updates, and deployments.\n"],
 		["limits.md", "# Limits\n\nThese limits apply to hosted Ignotum apps. The local dev server does not reproduce every hosted\nlimit, so an operation that works locally can still be rejected after deployment.\n\nIgnotum reports connection, traffic, time, result, and storage-quota failures as\n`ResourceLimitExceeded`. A database read or write that crosses a document or collection limit can\nappear as a temporary function failure. A deployment that exceeds a limit fails before activation,\nso the current deployment stays active.\n\n## Server functions\n\n| Limit                                   |      Value |\n| --------------------------------------- | ---------: |\n| Function arguments                      |     16 KiB |\n| Function result                         |      1 MiB |\n| Execution time                          | 10 seconds |\n| Memory                                  |     32 MiB |\n| Stack                                   |    512 KiB |\n| Ignotum operations during one execution |      1,000 |\n\nArgument and result sizes use their JSON representation. The result limit applies to successful\nresults and application errors.\n\nAn Ignotum operation is a call through the function context, such as a database read or write. A\nfunction stops when it reaches the execution time or operation limit.\n\nIgnotum retries one query execution when app data changes while it runs. That execution makes at\nmost four attempts and stops after 15 seconds. The query fails temporarily if it cannot read a\nconsistent result in that time.\n\n## App data\n\n| Limit                                   |          Value |\n| --------------------------------------- | -------------: |\n| Stored fields in one document           |        256 KiB |\n| Documents returned by `collect()`       |          1,000 |\n| Document fields returned by `collect()` |          1 MiB |\n| Stored app data                         | 64 MiB per app |\n\nThe 1 MiB function-result limit still applies to `collect()`. Document IDs and timestamps take some\nspace in that result, so a collection can reach the result limit before its fields reach 1 MiB.\n\nIf a mutation would take the app over its storage limit, Ignotum rolls back the whole mutation.\nThe quota covers stored documents and the records Ignotum keeps to process mutations safely.\nDeployment files do not count as stored app data.\n\n## Realtime connections and calls\n\n| Limit                     |                        Value |\n| ------------------------- | ---------------------------: |\n| Live connections          |                  256 per app |\n| Incoming realtime message |                       64 KiB |\n| Subscriptions             |           128 per connection |\n| Active unique queries     |                   64 per app |\n| Realtime query refresh    | 4 attempts within 15 seconds |\n| Concurrent operations     |                   32 per app |\n| Mutation execution        |          1 at a time per app |\n| Unresolved mutations      |                   32 per app |\n| Mutation calls            |        60 per minute per app |\n\nA unique query is one function and argument combination. Several components or browser tabs can\nsubscribe to the same unique query without using another unique-query slot.\n\nA realtime refresh can repeat a query execution when app data changes again during the refresh.\n\nThe unresolved-mutation limit protects calls whose outcome is not known yet, such as a call waiting\nfor a retry after a connection failure. Once Ignotum receives a final result, that call no longer\ncounts toward the limit.\n\nIgnotum runs mutations for the same app one at a time. Queries and other live calls can still use\nthe remaining concurrent-operation slots.\n\n## Mutation retries\n\nThe client keeps the ID of a pending mutation and reuses it after a reconnect. Ignotum remembers up\nto 10,000 mutation results per app for seven days. During that period, a retry returns the recorded\nresult instead of running the mutation again.\n\nDo not treat this as permanent duplicate protection. A mutation may run again after its record has\nexpired or fallen outside the 10,000 most recent results.\n\n## Deployments\n\n| Limit                          |   Value |\n| ------------------------------ | ------: |\n| Files listed in one deployment |     512 |\n| One listed file                |  16 MiB |\n| Deployment inventory           |   1 MiB |\n| Server files combined          |  64 MiB |\n| Listed files combined          | 128 MiB |\n\nIgnotum never deletes the active deployment. It also protects the three newest deployments that\ncompleted successfully. An older inactive deployment becomes eligible for deletion after seven\ndays. An unfinished upload becomes eligible after 24 hours.\n"],
-		["manual-setup.md", "# Manual setup\n\nIgnotum requires Node.js 22.18 or newer. This guide recreates the counter app from `ignotum new`\nwithout running the app generator. It uses pnpm to install dependencies.\n\nCreate the app directory:\n\n```sh\nmkdir my-ignotum-app\ncd my-ignotum-app\n```\n\nCreate this structure:\n\n```text\nmy-ignotum-app/\n  client/\n    index.tsx\n    icon.svg\n  server/\n    counter.ts\n    schema.ts\n  shared/\n    utils.ts\n  package.json\n  tsconfig.json\n```\n\n## Configure the package\n\nAdd `package.json`:\n\n```json\n{\n  \"name\": \"my-ignotum-app\",\n  \"private\": true,\n  \"version\": \"1.0.0\",\n  \"type\": \"module\",\n  \"scripts\": {\n    \"typecheck\": \"ignotum codegen && tsc --noEmit\"\n  },\n  \"dependencies\": {\n    \"ignotum\": \"latest\"\n  },\n  \"devDependencies\": {\n    \"typescript\": \"^7.0.2\"\n  },\n  \"engines\": {\n    \"node\": \">=22.18.0\"\n  }\n}\n```\n\nInstall the dependencies:\n\n```sh\npnpm install\n```\n\n## Configure TypeScript\n\nAdd `tsconfig.json`:\n\n```json\n{\n  \"compilerOptions\": {\n    \"target\": \"ES2023\",\n    \"lib\": [\"ES2023\", \"DOM\", \"DOM.Iterable\"],\n    \"module\": \"NodeNext\",\n    \"moduleResolution\": \"NodeNext\",\n    \"jsx\": \"react-jsx\",\n    \"jsxImportSource\": \"ignotum/client\",\n    \"strict\": true,\n    \"noEmit\": true,\n    \"skipLibCheck\": true,\n    \"paths\": {\n      \"@/*\": [\"./*\"]\n    }\n  },\n  \"include\": [\"_generated\", \"client\", \"server\", \"shared\"]\n}\n```\n\n## Add shared code\n\nAdd `shared/utils.ts`:\n\n```ts\nexport const counterIncrement = 1;\n```\n\nBoth the client and server can import files in `shared` through `@/shared`.\n\n## Define the schema\n\nAdd `server/schema.ts`:\n\n```ts\nimport { defineSchema } from \"ignotum/server\";\n\nexport default defineSchema(({ table, values }) => ({\n  counters: table({\n    value: values.number(),\n  }),\n}));\n```\n\n## Add the server functions\n\nAdd `server/counter.ts`:\n\n```ts\nimport { mutation, query, values } from \"@/_generated/server.js\";\nimport { counterIncrement } from \"@/shared/utils.js\";\n\nexport const get = query({\n  returns: values.number(),\n\n  handler: function* (ctx) {\n    const counters = yield* ctx.db.query(\"counters\").collect();\n    return counters[0]?.value ?? 0;\n  },\n});\n\nexport const increment = mutation({\n  returns: values.number(),\n\n  handler: function* (ctx) {\n    const counters = yield* ctx.db.query(\"counters\").collect();\n    const counter = counters[0];\n    const value = (counter?.value ?? 0) + counterIncrement;\n\n    if (counter === undefined) {\n      yield* ctx.db.insert(\"counters\", { value });\n    } else {\n      yield* ctx.db.patch(\"counters\", counter.id, { value });\n    }\n\n    return value;\n  },\n});\n```\n\nKeep the `.js` suffix on imports from `@/_generated`, even though the generated files use\nTypeScript.\n\n## Add the client\n\nAdd `client/index.tsx`:\n\n```tsx\nimport { app, Result, useMutation, useQuery } from \"ignotum/client\";\n\nimport { api } from \"@/_generated/api.js\";\nimport { counterIncrement } from \"@/shared/utils.js\";\n\nfunction App() {\n  const count = useQuery(api.counter.get);\n  const increment = useMutation(api.counter.increment);\n\n  return (\n    <main class=\"mx-auto max-w-sm px-6 py-20 text-center\">\n      <h1 class=\"text-2xl font-semibold\">Counter</h1>\n      {Result.match(count, {\n        pending: () => <p class=\"mt-6\">Loading...</p>,\n        value: (value) => (\n          <>\n            <p class=\"my-6 text-5xl tabular-nums\">{value}</p>\n            <button\n              class=\"rounded bg-zinc-900 px-4 py-2 text-white\"\n              type=\"button\"\n              onClick={() => void increment()}\n            >\n              Increment by {counterIncrement}\n            </button>\n          </>\n        ),\n      })}\n    </main>\n  );\n}\n\nexport default app({\n  title: \"Counter\",\n  component: App,\n});\n```\n\nIgnotum loads Tailwind automatically. You do not need an HTML file, Vite configuration, Tailwind\nconfiguration, or framework stylesheet. Custom CSS files are ordinary client modules and can use\nany filename when imported from app code.\n\nThe `client/icon.svg` file is optional. When present, Ignotum discovers it automatically and uses it\nas the favicon. When absent, the app has no favicon link.\n\n## Run the app\n\nStart the dev server:\n\n```sh\nnpx ignotum dev\n```\n\nOpen <http://127.0.0.1:3210>. Ignotum creates `_generated` before starting the app.\n\nRead [schema syntax](schema.md), [server functions](server-functions.md), and the\n[client guide](client.md) to continue building the app.\n"],
+		["manual-setup.md", "# Manual setup\n\nIgnotum requires Node.js 22.18 or newer. This guide recreates the counter app from `ignotum new`\nwithout running the app generator. It uses pnpm to install dependencies.\n\nCreate the app directory:\n\n```sh\nmkdir my-ignotum-app\ncd my-ignotum-app\n```\n\nCreate this structure:\n\n```text\nmy-ignotum-app/\n  client/\n    index.tsx\n    icon.svg\n  public/\n    manual.pdf\n  server/\n    counter.ts\n    schema.ts\n  shared/\n    utils.ts\n  package.json\n  tsconfig.json\n```\n\n## Configure the package\n\nAdd `package.json`:\n\n```json\n{\n  \"name\": \"my-ignotum-app\",\n  \"private\": true,\n  \"version\": \"1.0.0\",\n  \"type\": \"module\",\n  \"scripts\": {\n    \"typecheck\": \"ignotum codegen && tsc --noEmit\"\n  },\n  \"dependencies\": {\n    \"ignotum\": \"latest\"\n  },\n  \"devDependencies\": {\n    \"typescript\": \"^7.0.2\"\n  },\n  \"engines\": {\n    \"node\": \">=22.18.0\"\n  }\n}\n```\n\nInstall the dependencies:\n\n```sh\npnpm install\n```\n\n## Configure TypeScript\n\nAdd `tsconfig.json`:\n\n```json\n{\n  \"compilerOptions\": {\n    \"target\": \"ES2023\",\n    \"lib\": [\"ES2023\", \"DOM\", \"DOM.Iterable\"],\n    \"module\": \"NodeNext\",\n    \"moduleResolution\": \"NodeNext\",\n    \"jsx\": \"react-jsx\",\n    \"jsxImportSource\": \"ignotum/client\",\n    \"strict\": true,\n    \"noEmit\": true,\n    \"skipLibCheck\": true,\n    \"paths\": {\n      \"@/*\": [\"./*\"]\n    }\n  },\n  \"include\": [\"_generated\", \"client\", \"server\", \"shared\"]\n}\n```\n\n## Add shared code\n\nAdd `shared/utils.ts`:\n\n```ts\nexport const counterIncrement = 1;\n```\n\nBoth the client and server can import files in `shared` through `@/shared`.\n\n## Define the schema\n\nAdd `server/schema.ts`:\n\n```ts\nimport { defineSchema } from \"ignotum/server\";\n\nexport default defineSchema(({ table, values }) => ({\n  counters: table({\n    value: values.number(),\n  }),\n}));\n```\n\n## Add the server functions\n\nAdd `server/counter.ts`:\n\n```ts\nimport { mutation, query, values } from \"@/_generated/server.js\";\nimport { counterIncrement } from \"@/shared/utils.js\";\n\nexport const get = query({\n  returns: values.number(),\n\n  handler: function* (ctx) {\n    const counters = yield* ctx.db.query(\"counters\").collect();\n    return counters[0]?.value ?? 0;\n  },\n});\n\nexport const increment = mutation({\n  returns: values.number(),\n\n  handler: function* (ctx) {\n    const counters = yield* ctx.db.query(\"counters\").collect();\n    const counter = counters[0];\n    const value = (counter?.value ?? 0) + counterIncrement;\n\n    if (counter === undefined) {\n      yield* ctx.db.insert(\"counters\", { value });\n    } else {\n      yield* ctx.db.patch(\"counters\", counter.id, { value });\n    }\n\n    return value;\n  },\n});\n```\n\nKeep the `.js` suffix on imports from `@/_generated`, even though the generated files use\nTypeScript.\n\n## Add the client\n\nAdd `client/index.tsx`:\n\n```tsx\nimport { app, Result, useMutation, useQuery } from \"ignotum/client\";\n\nimport { api } from \"@/_generated/api.js\";\nimport { counterIncrement } from \"@/shared/utils.js\";\n\nfunction App() {\n  const count = useQuery(api.counter.get);\n  const increment = useMutation(api.counter.increment);\n\n  return (\n    <main class=\"mx-auto max-w-sm px-6 py-20 text-center\">\n      <h1 class=\"text-2xl font-semibold\">Counter</h1>\n      {Result.match(count, {\n        pending: () => <p class=\"mt-6\">Loading...</p>,\n        value: (value) => (\n          <>\n            <p class=\"my-6 text-5xl tabular-nums\">{value}</p>\n            <button\n              class=\"rounded bg-zinc-900 px-4 py-2 text-white\"\n              type=\"button\"\n              onClick={() => void increment()}\n            >\n              Increment by {counterIncrement}\n            </button>\n          </>\n        ),\n      })}\n    </main>\n  );\n}\n\nexport default app({\n  title: \"Counter\",\n  component: App,\n});\n```\n\nIgnotum loads Tailwind automatically. You do not need an HTML file, Vite configuration, Tailwind\nconfiguration, or framework stylesheet. Custom CSS files are ordinary client modules and can use\nany filename when imported from app code.\n\nThe `client/icon.svg` file is optional. When present, Ignotum discovers it automatically and uses it\nas the favicon. When absent, the app has no favicon link.\n\nThe top-level `public` directory is optional. Its AVIF, GIF, ICO, JPEG, PNG, WebP, and PDF files keep\ntheir relative paths as public URLs. Do not put this directory inside `client`.\n\n## Run the app\n\nStart the dev server:\n\n```sh\nnpx ignotum dev\n```\n\nOpen <http://127.0.0.1:3210>. Ignotum creates `_generated` before starting the app.\n\nRead [schema syntax](schema.md), [server functions](server-functions.md), and the\n[client guide](client.md) to continue building the app.\n"],
 		["schema.md", "# Schema syntax\n\nDefine the data model in `server/schema.ts`. The keys returned from `defineSchema` are table\nnames, and each `table` call defines that table's fields:\n\n```ts\nimport { defineSchema } from \"ignotum/server\";\n\nexport default defineSchema(({ table, values }) => ({\n  users: table({\n    name: values.string(),\n  }),\n  todos: table({\n    text: values.string(),\n    completed: values.boolean(),\n    ownerId: values.optional(values.id(\"users\")),\n  }),\n}));\n```\n\n## Field values\n\nRead [values](values.md) for the complete validator list and the TypeScript type produced by each\none. `values.id` only accepts a table declared in the same schema. Arrays and objects can be nested,\nand their contents can use any value validator.\n\n## System fields\n\nIgnotum adds three fields to every stored document:\n\n| Field       | Type                      |\n| ----------- | ------------------------- |\n| `id`        | The ID type for its table |\n| `createdAt` | `Date`                    |\n| `updatedAt` | `Date`                    |\n\nDo not declare these fields in a table. Do not pass them to `insert`, `patch`, or `replace`.\n\n## Generated types\n\n`_generated/types.ts` exports the data model, document, and ID types:\n\n```ts\nimport type { DataModel, Doc, Id } from \"@/_generated/types.js\";\n\ntype Todo = Doc<\"todos\">;\ntype TodoId = Id<\"todos\">;\n```\n\n`Doc<\"todos\">` includes the fields from the `todos` table and its three system fields. An\n`Id<\"todos\">` cannot be passed where an `Id<\"users\">` is required.\n"],
 		["server-functions.md", "# Server functions\n\nPut queries and mutations in `.ts` files directly inside `server`. The file name becomes the API\nmodule, and each exported function keeps its export name:\n\n```text\nserver/todos.ts -> api.todos.list\nserver/users.ts -> api.users.get\n```\n\nIgnotum ignores `schema.ts`, `index.ts`, test files, and names beginning with `_`.\n\nImport schema-bound builders from the generated server file. Import `Result` only when the module\nintroduces or catches typed errors:\n\n```ts\nimport { Result } from \"ignotum/server\";\n\nimport { mutation, query, values } from \"@/_generated/server.js\";\n```\n\nKeep the `.js` suffix on generated imports.\n\n## Define a function\n\nA function has optional argument, return, and public error schemas, plus a generator handler:\n\n```ts\nexport const getTitle = query({\n  args: {\n    id: values.id(\"todos\"),\n  },\n  returns: values.string(),\n\n  handler: function* (ctx, args) {\n    const todo = yield* ctx.db.get(\"todos\", args.id);\n    return todo.text;\n  },\n});\n```\n\nOmit `args` when the function takes no arguments. Omit `returns` when it returns nothing. An\nomitted `returns` only permits a `void` handler; Ignotum never infers an unchecked return schema.\n`yield*` waits for an Ignotum operation and propagates its typed application errors. Return\nsuccessful values with ordinary `return`.\n\nIgnotum validates arguments before running the handler. It also validates returned values and\npublic application errors before sending them to a client.\n\nAn argument-free query and a mutation with no return value can stay small:\n\n```ts\nconst Todo = values.doc(\"todos\");\n\nexport const list = query({\n  returns: values.array(Todo),\n\n  handler: function* (ctx) {\n    return yield* ctx.db.query(\"todos\").collect();\n  },\n});\n\nexport const remove = mutation({\n  args: { id: values.id(\"todos\") },\n\n  handler: function* (ctx, args) {\n    yield* ctx.db.delete(\"todos\", args.id);\n  },\n});\n```\n\nCall an argument-free query as `useQuery(api.todos.list)`. An argument-free mutation returns a\nzero-argument function:\n\n```ts\nconst clear = useMutation(api.todos.clear);\nvoid clear();\n```\n\n## Database reads\n\nUse `find` when a missing document is a normal result:\n\n```ts\nconst todo = yield * ctx.db.find(\"todos\", args.id);\n// Todo | undefined\n```\n\nUse `get` when the document should exist:\n\n```ts\nconst todo = yield * ctx.db.get(\"todos\", args.id);\n// Todo\n```\n\nA missing `get` fails with a typed `DocumentNotFound` value containing `table` and `id`. Collect a\nwhole table through a query:\n\n```ts\nconst todos = yield * ctx.db.query(\"todos\").collect();\n```\n\nQuery handlers only receive read methods.\n\nHosted apps limit document size, collection reads, function runtime, and stored app data. See\n[Limits](limits.md) for the current values.\n\n## Database writes\n\nMutation handlers receive the read methods and these writes:\n\n```ts\nconst id =\n  yield *\n  ctx.db.insert(\"todos\", {\n    text: \"Learn Ignotum\",\n    completed: false,\n  });\n\nyield * ctx.db.patch(\"todos\", id, { completed: true });\n\nyield *\n  ctx.db.replace(\"todos\", id, {\n    text: \"Build an app\",\n    completed: false,\n  });\n\nyield * ctx.db.delete(\"todos\", id);\n```\n\n`patch` changes only supplied fields. `replace` requires every non-optional table field. Ignotum\nrolls back a mutation when its handler fails with a typed application error or encounters an\ninternal failure.\n\n## Application errors\n\nDefine an application error with `values.error`. Its name becomes `_tag`:\n\n```ts\nconst TodoNotFound = values.error(\"TodoNotFound\", {\n  id: values.id(\"todos\"),\n});\n```\n\n`Result.fail` deliberately stops the operation with a typed error:\n\n```ts\nyield * Result.fail(TodoNotFound({ id: args.id }));\n```\n\nThe `errors` field is optional. If omitted, Ignotum infers the handler's remaining application\nerrors. If supplied, it is the public contract and the handler must conform to it:\n\n```ts\nexport const toggle = mutation({\n  args: {\n    id: values.id(\"todos\"),\n  },\n  returns: values.boolean(),\n  errors: TodoNotFound,\n\n  handler: function* (ctx, args) {\n    const todo = yield* ctx.db.get(\"todos\", args.id).catch({\n      DocumentNotFound: (error) => Result.fail(TodoNotFound({ id: error.id })),\n    });\n\n    const completed = !todo.completed;\n    yield* ctx.db.patch(\"todos\", args.id, { completed });\n    return completed;\n  },\n});\n```\n\nCombine public errors with `values.union`:\n\n```ts\nerrors: values.union(InvalidTodoText, TodoLimitReached),\n```\n\n## Catch and recover\n\nEvery Result operation has a partial, tag-based `catch`. Handlers receive the narrowed error type.\nUnmatched errors continue through the channel:\n\n```ts\nconst settings =\n  yield *\n  loadSettings().catch({\n    SettingsNotFound: () => defaultSettings,\n  });\n```\n\nReturn a plain value to recover. Return `Result.fail(...)` to map one error to another. Unknown tag\nnames fail the TypeScript check.\n\nUse `Result.try` for one catch boundary around several operations:\n\n```ts\nconst author =\n  yield *\n  Result.try(function* () {\n    const membership = yield* ctx.db.get(\"memberships\", topic.membershipId);\n    return yield* ctx.db.get(\"users\", membership.userId);\n  }).catch({\n    DocumentNotFound: () => Result.fail(InvalidAuthor({ topicId: topic.id })),\n  });\n```\n\nThere is no async variant. Ignotum operations always use `yield*` in server code.\n\n## Standalone results\n\n`Result.succeed` remains useful for helpers that return a Result:\n\n```ts\nfunction validateName(name: string) {\n  if (name.length === 0) {\n    return Result.fail(InvalidName({}));\n  }\n\n  return Result.succeed(name.trim());\n}\n```\n\nA handler can use the helper with `const name = yield* validateName(args.name)`. Normal handlers do\nnot wrap successful returns in `Result.succeed`.\n\n## Internal failures and defects\n\nDatabase outages, internal runtime failures, and thrown JavaScript exceptions are not application\nerrors. Ignotum logs their full cause and sends only:\n\n```ts\n{\n  _tag: \"InternalServerError\",\n  requestId: \"...\",\n}\n```\n\nEvery generated client function includes `InternalServerError` in its Result error union. The\nrequest ID links the client-visible failure to server logs without exposing private details.\n`InternalServerError` is reserved by Ignotum: never define it with `values.error` or include it in a\nfunction's `errors` schema.\n"],
 		["values.md", "# Values\n\nUse `values` validators to describe table fields, function arguments, return values, and application\nerrors. Each validator checks values at runtime and supplies the matching TypeScript type.\n\n| Validator                                 | TypeScript type                       | Notes                                                                                                |\n| ----------------------------------------- | ------------------------------------- | ---------------------------------------------------------------------------------------------------- |\n| `values.string()`                         | `string`                              |                                                                                                      |\n| `values.number()`                         | `number`                              | Accepts finite JavaScript numbers, including integers.                                               |\n| `values.integer()`                        | `number`                              | Accepts safe integers.                                                                               |\n| `values.boolean()`                        | `boolean`                             |                                                                                                      |\n| `values.date()`                           | `Date`                                | Accepts valid JavaScript dates.                                                                      |\n| `values.null()`                           | `null`                                | Accepts only `null`.                                                                                 |\n| `values.literal(value)`                   | The exact type of `value`             | Accepts one string, finite number, or boolean value.                                                 |\n| `values.literals(first, second, ...rest)` | A union of the supplied literal types | Requires at least two string, finite number, or boolean values.                                      |\n| `values.id(\"todos\")`                      | `Id<\"todos\">`                         | Accepts an ID for a table declared in the same schema. IDs for different tables are different types. |\n| `values.doc(\"todos\")`                     | `Doc<\"todos\">`                        | Accepts a complete document, including its `id`, `createdAt`, and `updatedAt` system fields.         |\n| `values.optional(value)`                  | `T \\| undefined`                      | Makes an object or table field optional. The field may be omitted.                                   |\n| `values.nullable(value)`                  | `T \\| null`                           | The value remains required unless it is also wrapped with `optional`.                                |\n| `values.array(value)`                     | `ReadonlyArray<T>`                    | Every item must match `value`.                                                                       |\n| `values.object(fields)`                   | An object matching `fields`           | Defines an object with known field names.                                                            |\n| `values.record(value)`                    | `Readonly<Record<string, T>>`         | Defines an object with dynamic string keys whose values all match `value`.                           |\n| `values.union(...values)`                 | A union of the supplied types         | Accepts a value matching any supplied validator.                                                     |\n| `values.never()`                          | `never`                               | No value can pass this validator.                                                                    |\n| `values.error(\"Name\", fields)`            | A tagged error object                 | Defines an application error whose `_tag` is the supplied name.                                      |\n\n`T` means the TypeScript type produced by the wrapped validator.\n\n`values.doc` is available on the schema-bound `values` exported by `_generated/server.ts`. It is\nnot available while defining `server/schema.ts`, because the table definitions are still being\ncreated there.\n\n## Object transforms\n\nValidators created by `values.object(fields)` and `values.doc(\"table\")` support these chainable\nmethods:\n\n| Method              | Result                                                               |\n| ------------------- | -------------------------------------------------------------------- |\n| `.pick(...keys)`    | Keeps the listed fields. Every key must exist.                       |\n| `.omit(...keys)`    | Removes the listed fields. Every key must exist.                     |\n| `.extend(fields)`   | Adds fields. It rejects names that already exist.                    |\n| `.override(fields)` | Replaces validators for existing fields. It rejects new field names. |\n| `.partial()`        | Makes every current field optional.                                  |\n\nEach method works from the result of the previous method. Added fields can be picked, omitted, or\noverridden immediately. An omitted name can be added again with a different validator.\n\n```ts\nconst TodoInput = values.doc(\"todos\").omit(\"id\", \"createdAt\", \"updatedAt\").partial().extend({\n  requestId: values.string(),\n});\n```\n\nUse `override` when changing an existing field. This makes replacements visible in the definition\nand prevents `extend` from silently weakening fields such as `id`:\n\n```ts\nconst EditableTodo = values.doc(\"todos\").override({\n  title: values.optional(values.string()),\n});\n```\n\nThese methods are only available on fixed object validators. Arrays, records, unions, errors, and\nprimitive validators do not expose them. After transforming a document validator, its inferred type\nmatches the current fields in the chain rather than the complete document type.\n\n### Reuse embedded objects in the schema\n\nCreate a fixed object validator inside the `defineSchema` callback when several stored fields share\nan object shape. A transform can derive a stored variant without repeating its fields:\n\n```ts\ndefineSchema(({ table, values }) => {\n  const Contact = values.object({\n    email: values.string(),\n    phone: values.string(),\n  });\n\n  return {\n    users: table({\n      contact: Contact,\n    }),\n    publicProfiles: table({\n      contact: Contact.omit(\"phone\"),\n    }),\n  };\n});\n```\n\nThis pattern suits embedded objects stored by more than one table, including full and reduced\nversions of the same object. The base validator stays inside `defineSchema`, where `values.id` can\ncheck its table references against the completed schema.\n\n### Derive server function validators from documents\n\nUse the schema-bound `values` from `_generated/server.ts` when a function input or output follows a\nstored document. These validators know every table name and the complete document fields, including\n`id`, `createdAt`, and `updatedAt`.\n\nReusable server validators can live in an ignored server module such as `server/_validators.ts`:\n\n```ts\nimport { values } from \"@/_generated/server.js\";\n\nexport const TodoInput = values.doc(\"todos\").omit(\"id\", \"createdAt\", \"updatedAt\").partial();\n\nexport const PublicTodo = values.doc(\"todos\").omit(\"updatedAt\");\n```\n\nImport these validators into queries and mutations that need the same contract. This works well for\npatch inputs and document projections. Do not import generated validators into `server/schema.ts`.\nDocument validators depend on the schema, so importing them while defining that schema would create\na cycle.\n\n## Examples\n\n```ts\nconst TodoStatus = values.literals(\"pending\", \"completed\");\n\nconst Todo = values.doc(\"todos\");\n\nexport const list = query({\n  returns: values.array(Todo),\n  handler: function* (ctx) {\n    return yield* ctx.db.query(\"todos\").collect();\n  },\n});\n```\n\nUse the other validators to define reusable values that do not represent a stored document:\n\n```ts\nconst TodoInput = values.object({\n  status: TodoStatus,\n  scheduledAt: values.nullable(values.date()),\n  scores: values.record(values.integer()),\n  title: values.string(),\n});\n```\n\nUse `optional` when a field may be absent. Use `nullable` when a present field may contain `null`:\n\n```ts\nvalues.object({\n  nickname: values.optional(values.string()),\n  deletedAt: values.nullable(values.date()),\n});\n```\n"]