@void/platform 0.20.0 → 0.20.1

package/dist/runtime/proxy/index.js

@@ -28,22 +28,22 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/_internal/utils.mjs
+// ../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/_internal/utils.mjs
 // @__NO_SIDE_EFFECTS__
 function createNotImplementedError(name) {
   return new Error(`[unenv] ${name} is not implemented yet!`);
 }
 var init_utils = __esm({
-  "../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/_internal/utils.mjs"() {
+  "../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/_internal/utils.mjs"() {
     init_performance2();
     __name(createNotImplementedError, "createNotImplementedError");
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/internal/perf_hooks/performance.mjs
+// ../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/internal/perf_hooks/performance.mjs
 var _timeOrigin, _performanceNow, nodeTiming, PerformanceEntry, PerformanceMark, PerformanceMeasure, PerformanceResourceTiming, PerformanceObserverEntryList, Performance, PerformanceObserver, performance;
 var init_performance = __esm({
-  "../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/internal/perf_hooks/performance.mjs"() {
+  "../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/internal/perf_hooks/performance.mjs"() {
     init_performance2();
     init_utils();
     _timeOrigin = globalThis.performance?.timeOrigin ?? Date.now();
@@ -285,17 +285,17 @@ var init_performance = __esm({
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/perf_hooks.mjs
+// ../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/perf_hooks.mjs
 var init_perf_hooks = __esm({
-  "../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/perf_hooks.mjs"() {
+  "../../home/runner/work/void/void/node_modules/.pnpm/unenv@2.0.0-rc.24/node_modules/unenv/dist/runtime/node/perf_hooks.mjs"() {
     init_performance2();
     init_performance();
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/@cloudflare+unenv-preset@2.16.1_unenv@2.0.0-rc.24_workerd@1.20260910.1/node_modules/@cloudflare/unenv-preset/dist/runtime/polyfill/performance.mjs
+// ../../home/runner/work/void/void/node_modules/.pnpm/@cloudflare+unenv-preset@2.16.1_unenv@2.0.0-rc.24_workerd@1.20260910.1/node_modules/@cloudflare/unenv-preset/dist/runtime/polyfill/performance.mjs
 var init_performance2 = __esm({
-  "../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/@cloudflare+unenv-preset@2.16.1_unenv@2.0.0-rc.24_workerd@1.20260910.1/node_modules/@cloudflare/unenv-preset/dist/runtime/polyfill/performance.mjs"() {
+  "../../home/runner/work/void/void/node_modules/.pnpm/@cloudflare+unenv-preset@2.16.1_unenv@2.0.0-rc.24_workerd@1.20260910.1/node_modules/@cloudflare/unenv-preset/dist/runtime/polyfill/performance.mjs"() {
     init_perf_hooks();
     if (!("__unenv__" in performance)) {
       const proto = Performance.prototype;
@@ -319,9 +319,9 @@ var init_performance2 = __esm({
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/email-validator@2.0.4/node_modules/email-validator/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/email-validator@2.0.4/node_modules/email-validator/index.js
 var require_email_validator = __commonJS({
-  "../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/email-validator@2.0.4/node_modules/email-validator/index.js"(exports) {
+  "../../home/runner/work/void/void/node_modules/.pnpm/email-validator@2.0.4/node_modules/email-validator/index.js"(exports) {
     "use strict";
     init_performance2();
     var tester = /^[-!#$%&'*+\/0-9=?A-Z^_a-z{|}~](\.?[-!#$%&'*+\/0-9=?A-Z^_a-z`{|}~])*@[a-zA-Z0-9](-*\.?[a-zA-Z0-9])*\.[a-zA-Z](-?[a-zA-Z0-9])+$/;
@@ -346,19 +346,19 @@ var require_email_validator = __commonJS({
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/index.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/index.ts
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/index.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono-base.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono-base.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/compose.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/compose.js
 init_performance2();
 var compose = /* @__PURE__ */ __name((middleware, onError, onNotFound) => {
   return (context, next) => {
@@ -404,29 +404,29 @@ var compose = /* @__PURE__ */ __name((middleware, onError, onNotFound) => {
   };
 }, "compose");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/context.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/context.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/http-exception.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/http-exception.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request/constants.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request/constants.js
 init_performance2();
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/body.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/body.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/buffer.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/buffer.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/crypto.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/crypto.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/buffer.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/buffer.js
 var bufferToFormData = /* @__PURE__ */ __name((arrayBuffer, contentType) => {
   const response = new Response(arrayBuffer, {
     headers: {
@@ -437,7 +437,7 @@ var bufferToFormData = /* @__PURE__ */ __name((arrayBuffer, contentType) => {
   return response.formData();
 }, "bufferToFormData");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/body.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/body.js
 var MAX_NESTING_DEPTH = 32;
 var MAX_NESTED_OBJECTS = 1e4;
 var isRawRequest = /* @__PURE__ */ __name((request) => "headers" in request, "isRawRequest");
@@ -537,7 +537,7 @@ var throwNestingLimitExceeded = /* @__PURE__ */ __name(() => {
   throw new Error("Nesting limit exceeded");
 }, "throwNestingLimitExceeded");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/url.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/url.js
 init_performance2();
 var splitPath = /* @__PURE__ */ __name((path) => {
   const paths = path.split("/");
@@ -744,7 +744,7 @@ var getQueryParams = /* @__PURE__ */ __name((url, key) => {
 }, "getQueryParams");
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/request.js
 var HonoRequest = class {
   static {
     __name(this, "HonoRequest");
@@ -1028,7 +1028,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/html.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/html.js
 init_performance2();
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
@@ -1071,7 +1071,7 @@ var resolveCallback = /* @__PURE__ */ __name(async (str, phase, preserveCallback
   }
 }, "resolveCallback");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/context.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = /* @__PURE__ */ __name((contentType, headers) => {
   return {
@@ -1500,7 +1500,7 @@ var Context = class {
   }, "notFound");
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router.js
 init_performance2();
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
@@ -1512,11 +1512,11 @@ var UnsupportedPathError = class extends Error {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/constants.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/utils/constants.js
 init_performance2();
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono-base.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono-base.js
 var notFoundHandler = /* @__PURE__ */ __name((c) => {
   return c.text("404 Not Found", 404);
 }, "notFoundHandler");
@@ -1627,14 +1627,14 @@ var Hono = class _Hono {
    * app.route("/api", app2) // GET /api/user
    * ```
    */
-  route(path, app4) {
+  route(path, app5) {
     const subApp = this.basePath(path);
-    app4.routes.map((r) => {
+    app5.routes.map((r) => {
       let handler;
-      if (app4.errorHandler === errorHandler) {
+      if (app5.errorHandler === errorHandler) {
         handler = r.handler;
       } else {
-        handler = /* @__PURE__ */ __name(async (c, next) => (await compose([], app4.errorHandler)(c, () => r.handler(c, next))).res, "handler");
+        handler = /* @__PURE__ */ __name(async (c, next) => (await compose([], app5.errorHandler)(c, () => r.handler(c, next))).res, "handler");
         handler[COMPOSED_HANDLER] = r.handler;
       }
       subApp.#addRoute(r.method, r.path, handler, r.basePath);
@@ -1897,17 +1897,17 @@ var Hono = class _Hono {
   }, "fire");
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/index.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/router.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/utils.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/utils.js
 init_performance2();
 var createNullObject = /* @__PURE__ */ __name(() => /* @__PURE__ */ Object.create(null), "createNullObject");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/matcher.js
 init_performance2();
 var emptyParam = [];
 function match(method, path) {
@@ -1930,7 +1930,7 @@ function match(method, path) {
 }
 __name(match, "match");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/node.js
 init_performance2();
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
@@ -2042,7 +2042,7 @@ var Node = class _Node {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/trie.js
 init_performance2();
 var Trie = class {
   static {
@@ -2110,7 +2110,7 @@ var Trie = class {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/router.js
 var wildcardRegExpCache = createNullObject();
 function buildWildcardRegExp(path) {
   return wildcardRegExpCache[path] ??= new RegExp(
@@ -2236,13 +2236,13 @@ var RegExpRouter = class {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/smart-router/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/smart-router/index.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/smart-router/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/smart-router/router.js
 init_performance2();
 var SmartRouter = class {
   static {
@@ -2301,13 +2301,13 @@ var SmartRouter = class {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/index.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/router.js
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/node.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/node.js
 init_performance2();
 var emptyParams = createNullObject();
 var order = 0;
@@ -2471,7 +2471,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/router.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   static {
     __name(this, "TrieRouter");
@@ -2488,7 +2488,7 @@ var TrieRouter = class {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   static {
     __name(this, "Hono");
@@ -2506,7 +2506,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// ../../../../../../../Users/cnakazawa/Projects/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/middleware/cors/index.js
+// ../../home/runner/work/void/void/node_modules/.pnpm/hono@4.13.7/node_modules/hono/dist/middleware/cors/index.js
 init_performance2();
 var cors = /* @__PURE__ */ __name((options) => {
   const opts = {
@@ -2593,10 +2593,10 @@ var cors = /* @__PURE__ */ __name((options) => {
   }, "cors2");
 }, "cors");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/ai.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/ai.ts
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/body.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/body.ts
 init_performance2();
 function isProxyBody(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -2619,7 +2619,7 @@ function isQueryValue(value) {
 }
 __name(isQueryValue, "isQueryValue");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/ai.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/ai.ts
 var DEFAULT_GATEWAY_ID = "void";
 var PROVIDER_AUTH_DEFAULTS = {
   "google-ai-studio": { header: "x-goog-api-key", prefix: "" }
@@ -2983,7 +2983,7 @@ ai.post("/toMarkdown", async (context) => {
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/capabilities.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/capabilities.ts
 init_performance2();
 function proxyCapabilityEnabled(value, capability) {
   if (capability === "sandbox") {
@@ -3001,10 +3001,10 @@ function proxyCapabilityEnabled(value, capability) {
 }
 __name(proxyCapabilityEnabled, "proxyCapabilityEnabled");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/d1.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/d1.ts
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/dispatch.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/dispatch.ts
 init_performance2();
 async function resolveWorker(api, jwtSecret, projectId) {
   const token = await hmacSign(projectId, jwtSecret);
@@ -3092,7 +3092,7 @@ async function hmacSign(data, secret) {
 }
 __name(hmacSign, "hmacSign");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/resolve.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/resolve.ts
 init_performance2();
 var cache = /* @__PURE__ */ new Map();
 async function resolveResource(api, jwtSecret, projectId, type, bindingName) {
@@ -3179,7 +3179,7 @@ async function hmacSign2(data, secret) {
 }
 __name(hmacSign2, "hmacSign");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/d1.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/d1.ts
 var CF_API = "https://api.cloudflare.com/client/v4";
 var d1 = new Hono2();
 d1.post("/query", async (context) => {
@@ -3252,10 +3252,13 @@ d1.post("/batch", async (context) => {
   return context.json({ error: "atomic D1 batch unavailable for active deployment" }, 503);
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/email-router.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-relay.ts
 init_performance2();
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/api/src/reserved-slugs.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-router.ts
+init_performance2();
+
+// ../../home/runner/work/void/void/platform/packages/api/src/reserved-slugs.ts
 init_performance2();
 var EMAIL_RESERVED_SLUGS = /* @__PURE__ */ new Set([
   "abuse",
@@ -3269,11 +3272,101 @@ function isReservedEmailSlug(slug) {
 }
 __name(isReservedEmailSlug, "isReservedEmailSlug");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/email-router.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-router.ts
 var import_email_validator = __toESM(require_email_validator(), 1);
 import { EmailMessage as EmailMessage2 } from "cloudflare:email";
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/email.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-lease.ts
+init_performance2();
+var LEASE_CACHE_TTL_MS = 45 * 60 * 1e3;
+var leaseCache = /* @__PURE__ */ new Map();
+function dropEmailDomainLease(domain) {
+  leaseCache.delete(domain);
+}
+__name(dropEmailDomainLease, "dropEmailDomainLease");
+function leaseBearer(lease) {
+  return lease.kind === "api_token" ? lease.token : lease.accessToken;
+}
+__name(leaseBearer, "leaseBearer");
+async function leaseEmailDomainCredential(env, domain) {
+  const cached = leaseCache.get(domain);
+  if (cached && cached.expiresAt > Date.now()) {
+    return cached.lease;
+  }
+  let res;
+  try {
+    const token = await hmacSign3(domain, env.JWT_SECRET);
+    res = await env.API.fetch("https://api/internal/email/domain-credential", {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        "x-void-internal": token
+      },
+      body: JSON.stringify({ domain })
+    });
+  } catch {
+    return null;
+  }
+  if (!res.ok) {
+    return null;
+  }
+  let data;
+  try {
+    data = await res.json();
+  } catch {
+    return null;
+  }
+  const lease = parseLease(data);
+  if (!lease) {
+    return null;
+  }
+  leaseCache.set(domain, { lease, expiresAt: Date.now() + LEASE_CACHE_TTL_MS });
+  return lease;
+}
+__name(leaseEmailDomainCredential, "leaseEmailDomainCredential");
+function parseLease(data) {
+  if (typeof data !== "object" || data === null) {
+    return null;
+  }
+  const kind = data.kind;
+  if (kind === "api_token") {
+    const token = data.token;
+    return typeof token === "string" && token.length > 0 ? { kind, token } : null;
+  }
+  if (kind === "oauth_grant") {
+    const accessToken = data.accessToken;
+    return typeof accessToken === "string" && accessToken.length > 0 ? { kind, accessToken } : null;
+  }
+  return null;
+}
+__name(parseLease, "parseLease");
+var encoder3 = new TextEncoder();
+var cachedSignKey3;
+var cachedKeySecret3;
+async function getSignKey3(secret) {
+  if (cachedSignKey3 && cachedKeySecret3 === secret) {
+    return cachedSignKey3;
+  }
+  cachedSignKey3 = await crypto.subtle.importKey(
+    "raw",
+    encoder3.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  cachedKeySecret3 = secret;
+  return cachedSignKey3;
+}
+__name(getSignKey3, "getSignKey");
+async function hmacSign3(data, secret) {
+  const key = await getSignKey3(secret);
+  const sig = await crypto.subtle.sign("HMAC", key, encoder3.encode(data));
+  const binary = String.fromCharCode(...new Uint8Array(sig));
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+__name(hmacSign3, "hmacSign");
+
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email.ts
 init_performance2();
 import { EmailMessage } from "cloudflare:email";
 var app = new Hono2();
@@ -3638,6 +3731,20 @@ app.post("/send", async (context) => {
       413
     );
   }
+  const fromAt = from.indexOf("@");
+  const fromDomain = fromAt === -1 ? "" : from.slice(fromAt + 1).toLowerCase();
+  if (fromDomain !== "" && fromDomain !== senderDomain) {
+    return sendViaCustomDomain(
+      context,
+      projectId,
+      from,
+      fromDomain,
+      senderDomain,
+      recipients,
+      raw2,
+      requestId
+    );
+  }
   const expectedSlug = await context.env.ROUTING.get(`email-slug:${projectId}`);
   if (!expectedSlug) {
     return context.json(
@@ -3858,6 +3965,276 @@ app.post("/send", async (context) => {
     }))
   });
 });
+function readSendRawAddressList(value) {
+  const out = /* @__PURE__ */ new Set();
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      if (typeof entry === "string") {
+        out.add(entry.toLowerCase());
+      }
+    }
+  }
+  return out;
+}
+__name(readSendRawAddressList, "readSendRawAddressList");
+async function sendViaCustomDomain(context, projectId, from, fromDomain, senderDomain, recipients, raw2, requestId) {
+  if (!/^[\x21-\x7e]+$/.test(from)) {
+    return context.json(
+      {
+        ok: false,
+        error: { code: "INVALID_FROM", message: "from address must be printable ASCII" }
+      },
+      403
+    );
+  }
+  const fromLower = from.toLowerCase();
+  const mirror = await readEmailDomainMirror(context.env.ROUTING, fromDomain, { cacheTtl: 60 });
+  if (!mirror || mirror.projectId !== projectId || mirror.status !== "active") {
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "INVALID_FROM",
+          message: `from address must be on the configured sender domain (${senderDomain}) or a domain registered to this project`
+        }
+      },
+      403
+    );
+  }
+  if (!mirror.accountId) {
+    return context.json(
+      {
+        ok: false,
+        error: { code: "UPSTREAM_ERROR", message: "email domain registration is incomplete" }
+      },
+      502
+    );
+  }
+  const mimeFrom = readMimeFromAddrSpec(raw2);
+  if (!mimeFrom.ok || mimeFrom.addrSpec.toLowerCase() !== fromLower) {
+    const detail = mimeFrom.ok ? "the From header address does not match the envelope sender" : MIME_FROM_REFUSALS[mimeFrom.reason];
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "INVALID_FROM",
+          message: `mime From must be the envelope sender ${from}: ${detail}`
+        }
+      },
+      403
+    );
+  }
+  const slug = await context.env.ROUTING.get(`email-slug:${projectId}`);
+  if (!slug) {
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "UPSTREAM_ERROR",
+          message: "project slug unknown \u2014 refusing to send"
+        }
+      },
+      502
+    );
+  }
+  if (!SLUG_RE.test(slug)) {
+    console.error(
+      `[email-send] project ${projectId} slug malformed in KV: ${sanitizeForLog(slug, 64)}`
+    );
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "UPSTREAM_ERROR",
+          message: "project slug malformed in routing"
+        }
+      },
+      502
+    );
+  }
+  const platformSuspension = await readRoutingSuspension(context.env.ROUTING, slug);
+  if (platformSuspension.kind === "corrupt") {
+    console.error(
+      `[email-send] project ${projectId} routing blob malformed in KV for slug ${sanitizeForLog(slug, 64)}`
+    );
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "UPSTREAM_ERROR",
+          message: "project routing entry malformed"
+        }
+      },
+      502
+    );
+  }
+  if (platformSuspension.kind === "suspended") {
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "QUOTA_EXCEEDED",
+          message: `project is suspended (${sanitizeForLog(platformSuspension.reason, 64)})`
+        }
+      },
+      200
+    );
+  }
+  if (await context.env.ROUTING.get(`email-suspended:${projectId}`)) {
+    return context.json(
+      { ok: false, error: { code: "QUOTA_EXCEEDED", message: "project email is suspended" } },
+      200
+    );
+  }
+  const now = /* @__PURE__ */ new Date();
+  const burstKey = `email-burst:${projectId}:${minuteBucket(now)}`;
+  const burstCurrent = readCounter(await context.env.ROUTING.get(burstKey));
+  const burstLimit = await getBurstLimit(context.env.ROUTING, projectId);
+  if (burstCurrent + recipients.length > burstLimit) {
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "QUOTA_EXCEEDED",
+          message: `outbound burst limit ${burstLimit}/min exceeded`
+        }
+      },
+      429
+    );
+  }
+  const counterKey = `email-sent:${projectId}:${monthBucket(now)}`;
+  const monthCurrent = readCounter(await context.env.ROUTING.get(counterKey));
+  const monthLimit = await getMonthlyLimit(context.env.ROUTING, projectId);
+  if (monthCurrent + recipients.length > monthLimit) {
+    return context.json(
+      {
+        ok: false,
+        error: {
+          code: "QUOTA_EXCEEDED",
+          message: `monthly outbound limit ${monthLimit} exceeded`
+        }
+      },
+      429
+    );
+  }
+  let mimeMessage;
+  try {
+    mimeMessage = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false }).decode(raw2);
+  } catch {
+    return context.json(
+      { ok: false, error: { code: "MIME_ERROR", message: "mime must be valid UTF-8" } },
+      400
+    );
+  }
+  const lease = await leaseEmailDomainCredential(context.env, fromDomain);
+  if (!lease) {
+    return context.json(
+      {
+        ok: false,
+        error: { code: "UPSTREAM_ERROR", message: "could not lease the domain credential" }
+      },
+      502
+    );
+  }
+  await Promise.all([
+    context.env.ROUTING.put(counterKey, String(monthCurrent + recipients.length), {
+      expirationTtl: monthTtlSeconds(now)
+    }).catch((e) => {
+      console.error(`[email-send] monthly counter put failed for ${projectId}:`, e);
+    }),
+    context.env.ROUTING.put(burstKey, String(burstCurrent + recipients.length), {
+      expirationTtl: 5 * 60
+    }).catch((e) => {
+      console.error(`[email-send] burst counter put failed for ${projectId}:`, e);
+    })
+  ]);
+  let failure = null;
+  let messageId = "";
+  let bounced = /* @__PURE__ */ new Set();
+  let suppressed = /* @__PURE__ */ new Set();
+  let cfRes = null;
+  try {
+    cfRes = await fetch(
+      `https://api.cloudflare.com/client/v4/accounts/${mirror.accountId}/email/sending/send_raw`,
+      {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${leaseBearer(lease)}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({ from, recipients, mime_message: mimeMessage })
+      }
+    );
+  } catch {
+    failure = { code: "UPSTREAM_ERROR", message: "email sending request failed" };
+  }
+  if (cfRes) {
+    if (!cfRes.ok) {
+      if (cfRes.status === 401 || cfRes.status === 403) {
+        dropEmailDomainLease(fromDomain);
+      }
+      failure = {
+        code: cfRes.status === 429 ? "QUOTA_EXCEEDED" : "UPSTREAM_ERROR",
+        message: `email sending API returned ${cfRes.status}`
+      };
+    } else {
+      let data = null;
+      try {
+        data = await cfRes.json();
+      } catch {
+        data = null;
+      }
+      const success = typeof data === "object" && data !== null && data.success === true;
+      if (!success) {
+        failure = { code: "UPSTREAM_ERROR", message: "email sending API refused the message" };
+      } else {
+        const result = data.result;
+        const id = result?.message_id;
+        messageId = typeof id === "string" ? id : "";
+        bounced = readSendRawAddressList(result?.permanent_bounces);
+        suppressed = readSendRawAddressList(result?.suppressed_recipients);
+      }
+    }
+  }
+  const deliveries = [];
+  for (const r of recipients) {
+    if (failure) {
+      deliveries.push({ recipient: r, ok: false, error: failure });
+    } else if (bounced.has(r)) {
+      deliveries.push({
+        recipient: r,
+        ok: false,
+        error: {
+          code: "UNVERIFIED_DESTINATION",
+          message: `recipient '${r}' permanently bounced`
+        }
+      });
+    } else if (suppressed.has(r)) {
+      deliveries.push({
+        recipient: r,
+        ok: false,
+        error: {
+          code: "UNVERIFIED_DESTINATION",
+          message: `recipient '${r}' is on the suppression list`
+        }
+      });
+    } else {
+      deliveries.push({ recipient: r, ok: true, messageId });
+    }
+  }
+  logSend(projectId, requestId, deliveries);
+  if (deliveries.some((d) => !d.ok)) {
+    return context.json({ ok: false, deliveries }, 200);
+  }
+  return context.json({
+    ok: true,
+    ids: deliveries.map((d) => ({
+      recipient: d.recipient,
+      messageId: d.messageId
+    }))
+  });
+}
+__name(sendViaCustomDomain, "sendViaCustomDomain");
 async function recordInboundDelivery(env, projectId, info) {
   const now = /* @__PURE__ */ new Date();
   const counterKey = `email-recv:${projectId}:${monthBucket(now)}`;
@@ -3927,6 +4304,35 @@ async function readAllowlist(kv2, projectId) {
   }
 }
 __name(readAllowlist, "readAllowlist");
+async function readEmailDomainMirror(kv2, domain, options) {
+  const raw2 = await kv2.get(`email-domain:${domain}`, options);
+  if (!raw2) {
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    return null;
+  }
+  const entry = parsed;
+  if (typeof entry.projectId !== "string" || entry.projectId === "" || typeof entry.status !== "string" || typeof entry.relaySecretSha256 !== "string") {
+    return null;
+  }
+  return {
+    projectId: entry.projectId,
+    status: entry.status,
+    relaySecretSha256: entry.relaySecretSha256,
+    relayWorkerName: typeof entry.relayWorkerName === "string" ? entry.relayWorkerName : null,
+    accountId: typeof entry.accountId === "string" ? entry.accountId : null,
+    zoneId: typeof entry.zoneId === "string" ? entry.zoneId : null,
+    mode: typeof entry.mode === "string" ? entry.mode : null
+  };
+}
+__name(readEmailDomainMirror, "readEmailDomainMirror");
 function readCounter(raw2) {
   if (!raw2) {
     return 0;
@@ -4029,7 +4435,7 @@ app.post("/internal/send", async (context) => {
   }
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/email-router.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-router.ts
 var CONTROL_CHARS_RE2 = new RegExp("[\\u0000-\\u001f\\u007f]+", "g");
 function sanitize(value, maxLen) {
   return value.slice(0, maxLen).replace(CONTROL_CHARS_RE2, " ");
@@ -4129,7 +4535,7 @@ function forwardHeadersWithinBounds(headers) {
   return true;
 }
 __name(forwardHeadersWithinBounds, "forwardHeadersWithinBounds");
-function isPermittedReplySender(from, pin) {
+async function isPermittedReplySender(from, pin) {
   if (!/^[\x21-\x7e]+$/.test(from)) {
     return false;
   }
@@ -4138,13 +4544,32 @@ function isPermittedReplySender(from, pin) {
   if (at <= 0) {
     return false;
   }
-  if (lower.slice(at + 1) !== pin.domain) {
-    return false;
+  const fromDomain = lower.slice(at + 1);
+  if (fromDomain === pin.domain) {
+    const localPrefix = lower.slice(0, at).split("+")[0] ?? "";
+    if (localPrefix.length > 0 && localPrefix === pin.slug) {
+      return true;
+    }
   }
-  const localPrefix = lower.slice(0, at).split("+")[0] ?? "";
-  return localPrefix.length > 0 && localPrefix === pin.slug;
+  return isRegisteredDomainSender(fromDomain, pin);
 }
 __name(isPermittedReplySender, "isPermittedReplySender");
+async function isRegisteredDomainSender(fromDomain, pin) {
+  if (!pin.projectId) {
+    return false;
+  }
+  const cached = pin.registeredDomains.get(fromDomain);
+  if (cached !== void 0) {
+    return cached;
+  }
+  const mirror = await readEmailDomainMirror(pin.kv, fromDomain, { cacheTtl: 60 }).catch(
+    () => null
+  );
+  const registered = mirror !== null && mirror.projectId === pin.projectId && mirror.status === "active";
+  pin.registeredDomains.set(fromDomain, registered);
+  return registered;
+}
+__name(isRegisteredDomainSender, "isRegisteredDomainSender");
 function readCounter2(raw2) {
   if (!raw2) {
     return 0;
@@ -4310,6 +4735,7 @@ async function routeInbound(message, env, ctx) {
     );
     gate = {
       projectId: routing.projectId,
+      skipAllowlist: false,
       allowlist: /* @__PURE__ */ new Set(),
       burstKey: "",
       burstLimit: 0,
@@ -4353,14 +4779,228 @@ async function routeInbound(message, env, ctx) {
     );
     return;
   }
-  await enactActions(env, message, actions, gate, { slug, domain: receivedDomain });
+  await enactActions(env, message, actions, gate, {
+    slug,
+    domain: receivedDomain,
+    projectId: routing.projectId,
+    kv: env.ROUTING,
+    registeredDomains: /* @__PURE__ */ new Map()
+  });
   ctx.waitUntil(logRecv(env, routing.projectId, message, actions));
 }
 __name(routeInbound, "routeInbound");
-async function loadOutboundGate(env, projectId) {
+async function routeRelayed(env, ctx, input) {
+  const { projectId, domain, envelope } = input;
+  const slug = await env.ROUTING.get(`email-slug:${projectId}`);
+  if (!slug) {
+    console.error(`[email-relay] no slug mirror for project ${sanitize(projectId, 64)}`);
+    return { reject: true };
+  }
+  const routingJson = await env.ROUTING.get(slug);
+  if (!routingJson) {
+    console.error(
+      `[email-relay] no routing entry for slug ${sanitize(slug, 64)} (project ${sanitize(projectId, 64)})`
+    );
+    return { reject: true };
+  }
+  let parsedRouting;
+  try {
+    parsedRouting = JSON.parse(routingJson);
+  } catch {
+    console.error(`[email-relay] routing data corrupt for slug ${sanitize(slug, 64)}`);
+    return { reject: true };
+  }
+  if (typeof parsedRouting !== "object" || parsedRouting === null) {
+    console.error(`[email-relay] routing data corrupt for slug ${sanitize(slug, 64)}`);
+    return { reject: true };
+  }
+  const routing = parsedRouting;
+  if (routing.projectId !== projectId) {
+    console.error(
+      `[email-relay] routing blob names another project for slug ${sanitize(slug, 64)}`
+    );
+    return { reject: true };
+  }
+  if (routing.suspended) {
+    console.error(`[email-relay] project ${sanitize(projectId, 64)} is suspended`);
+    return { reject: true };
+  }
+  const workerName = routing.workerName;
+  if (!workerName || typeof workerName !== "string") {
+    console.error(`[email-relay] project ${sanitize(projectId, 64)} has no worker (static deploy)`);
+    return { reject: true };
+  }
+  if (await env.ROUTING.get(`email-suspended:${projectId}`)) {
+    console.error(`[email-relay] project ${sanitize(projectId, 64)} inbound is suspended`);
+    return { reject: true };
+  }
+  let stub;
+  try {
+    stub = routing.limits ? env.DISPATCH.get(workerName, {}, { limits: routing.limits }) : env.DISPATCH.get(workerName);
+  } catch (e) {
+    console.error(`[email-relay] DISPATCH.get(${sanitize(workerName, 320)}) failed:`, e);
+    return { reject: true };
+  }
+  const relayed = createRelayedMessage(env, envelope, { domain, projectId });
+  let gate;
+  try {
+    gate = await loadOutboundGate(env, projectId, { skipAllowlist: true });
+  } catch (e) {
+    console.error(`[email-relay] failed to load outbound gate for ${sanitize(projectId, 64)}:`, e);
+    gate = {
+      projectId,
+      skipAllowlist: true,
+      allowlist: /* @__PURE__ */ new Set(),
+      burstKey: "",
+      burstLimit: 0,
+      burstCurrent: 0,
+      monthKey: "",
+      monthLimit: 0,
+      monthCurrent: 0,
+      quotaExhausted: true
+    };
+  }
+  let actions;
+  try {
+    const result = await stub.email(envelope);
+    if (result === void 0 || result === null) {
+      actions = [];
+    } else if (Array.isArray(result)) {
+      actions = result;
+    } else {
+      console.warn(
+        `[email-relay] ${sanitize(workerName, 320)} email handler returned non-array; treating as no-op`
+      );
+      actions = [];
+    }
+  } catch (e) {
+    const msg = e instanceof Error ? e.message.slice(0, 320) : describeUntrusted(e, 320);
+    if (RPC_METHOD_MISSING.test(msg)) {
+      console.error(
+        `[email-relay] ${sanitize(workerName, 320)} has no .email() (needs redeploy):`,
+        sanitize(msg, 320)
+      );
+      ctx.waitUntil(
+        logRecv(env, projectId, relayed.message, [{ type: "reject", reason: "no-handler" }])
+      );
+      return { reject: true };
+    }
+    console.error(`[email-relay] dispatch to ${sanitize(workerName, 320)} failed:`, msg);
+    ctx.waitUntil(
+      logRecv(env, projectId, relayed.message, [{ type: "reject", reason: "dispatch-error" }])
+    );
+    return { reject: true };
+  }
+  await enactActions(env, relayed.message, actions, gate, {
+    slug: slug.toLowerCase(),
+    domain,
+    projectId,
+    kv: env.ROUTING,
+    registeredDomains: /* @__PURE__ */ new Map()
+  });
+  ctx.waitUntil(logRecv(env, projectId, relayed.message, actions));
+  return { reject: relayed.rejectedReason() !== null };
+}
+__name(routeRelayed, "routeRelayed");
+function createRelayedMessage(env, envelope, relay) {
+  let reason = null;
+  async function sendRaw(from, to, raw2) {
+    const senderDomain = from.slice(from.indexOf("@") + 1).toLowerCase();
+    const mirror = await readEmailDomainMirror(env.ROUTING, senderDomain);
+    if (!mirror || mirror.projectId !== relay.projectId || mirror.status !== "active") {
+      throw new Error("email domain registration is no longer active");
+    }
+    if (!mirror.accountId) {
+      throw new Error("email domain registration is incomplete");
+    }
+    const lease = await leaseEmailDomainCredential(env, senderDomain);
+    if (!lease) {
+      throw new Error("could not lease the domain credential");
+    }
+    const mimeMessage = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false }).decode(raw2);
+    let res;
+    try {
+      res = await fetch(
+        `https://api.cloudflare.com/client/v4/accounts/${mirror.accountId}/email/sending/send_raw`,
+        {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${leaseBearer(lease)}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({ from, recipients: [to], mime_message: mimeMessage })
+        }
+      );
+    } catch {
+      throw new Error("email sending request failed");
+    }
+    if (res.status === 401 || res.status === 403) {
+      dropEmailDomainLease(senderDomain);
+    }
+    if (!res.ok) {
+      throw new Error(`email sending API returned ${res.status}`);
+    }
+    let data = null;
+    try {
+      data = await res.json();
+    } catch {
+      data = null;
+    }
+    const success = typeof data === "object" && data !== null && data.success === true;
+    if (!success) {
+      throw new Error("email sending API refused the message");
+    }
+    const result = data.result;
+    const target = to.toLowerCase();
+    if (readSendRawAddressList(result?.permanent_bounces).has(target)) {
+      throw new Error("recipient permanently bounced");
+    }
+    if (readSendRawAddressList(result?.suppressed_recipients).has(target)) {
+      throw new Error("recipient is on the suppression list");
+    }
+  }
+  __name(sendRaw, "sendRaw");
+  const message = {
+    from: envelope.from,
+    to: envelope.to,
+    rawSize: envelope.rawSize,
+    headers: new Headers(envelope.headers),
+    raw: envelopeRawStream(envelope.raw),
+    setReject(r) {
+      reason = r;
+    },
+    async forward(to, _headers) {
+      await sendRaw(envelope.to, to, envelope.raw);
+    },
+    // The reply channel `enactSanitized` prefers when present. A native
+    // reply needs both the CF email event this lane never had and a genuine
+    // EmailMessage — whose class exposes no body accessor, so the recorded
+    // reply bytes could not cross it anyway; they arrive on the action.
+    async __voidRelayReply(from, to, raw2) {
+      await sendRaw(from, to, raw2);
+    }
+  };
+  return {
+    message,
+    rejectedReason: /* @__PURE__ */ __name(() => reason, "rejectedReason")
+  };
+}
+__name(createRelayedMessage, "createRelayedMessage");
+function envelopeRawStream(bytes) {
+  return new ReadableStream({
+    start(controller) {
+      controller.enqueue(bytes);
+      controller.close();
+    }
+  });
+}
+__name(envelopeRawStream, "envelopeRawStream");
+async function loadOutboundGate(env, projectId, opts) {
+  const skipAllowlist = opts?.skipAllowlist ?? false;
   if (!projectId) {
     return {
       projectId: void 0,
+      skipAllowlist,
       allowlist: /* @__PURE__ */ new Set(),
       burstKey: "",
       burstLimit: 0,
@@ -4371,7 +5011,7 @@ async function loadOutboundGate(env, projectId) {
       quotaExhausted: true
     };
   }
-  const allowlist = await readAllowlist2(env.ROUTING, projectId);
+  const allowlist = skipAllowlist ? /* @__PURE__ */ new Set() : await readAllowlist2(env.ROUTING, projectId);
   const now = /* @__PURE__ */ new Date();
   const burstKey = `email-burst:${projectId}:${minuteBucket2(now)}`;
   const monthKey = `email-sent:${projectId}:${monthBucket2(now)}`;
@@ -4383,6 +5023,7 @@ async function loadOutboundGate(env, projectId) {
   ]);
   return {
     projectId,
+    skipAllowlist,
     allowlist,
     burstKey,
     burstLimit,
@@ -4490,7 +5131,7 @@ async function readStreamToBytes(stream) {
   return out;
 }
 __name(readStreamToBytes, "readStreamToBytes");
-function validateActions(actions, replySender) {
+async function validateActions(actions, replySender) {
   if (actions.length > MAX_ACTIONS) {
     console.error(
       `[email-router] action list dropped: ${actions.length} actions returned (max ${MAX_ACTIONS})`
@@ -4540,7 +5181,7 @@ function validateActions(actions, replySender) {
         );
         continue;
       }
-      if (!isPermittedReplySender(action.from, replySender)) {
+      if (!await isPermittedReplySender(action.from, replySender)) {
         console.error(
           `[email-router] reply dropped: sender not owned by project "${sanitize(replySender.slug, 64)}" (from=${logAddress(action.from)})`
         );
@@ -4584,7 +5225,7 @@ function validateActions(actions, replySender) {
 }
 __name(validateActions, "validateActions");
 async function enactActions(env, message, actions, gate, replySender) {
-  const sanitized = validateActions(actions, replySender);
+  const sanitized = await validateActions(actions, replySender);
   if (sanitized === null) {
     return;
   }
@@ -4621,14 +5262,19 @@ async function enactSanitized(env, message, actions, gate) {
         continue;
       }
       try {
-        const stream = new ReadableStream({
-          start(controller) {
-            controller.enqueue(action.raw);
-            controller.close();
-          }
-        });
-        const reply = new EmailMessage2(action.from, action.to, stream);
-        await message.reply(reply);
+        const relayReply = message.__voidRelayReply;
+        if (relayReply !== void 0) {
+          await relayReply(action.from, action.to, action.raw);
+        } else {
+          const stream = new ReadableStream({
+            start(controller) {
+              controller.enqueue(action.raw);
+              controller.close();
+            }
+          });
+          const reply = new EmailMessage2(action.from, action.to, stream);
+          await message.reply(reply);
+        }
         gate.burstCurrent += 1;
         gate.monthCurrent += 1;
         counterDirty = true;
@@ -4659,7 +5305,7 @@ function checkOutboundGate(gate, target, kind) {
     return false;
   }
   const lowered = target.toLowerCase();
-  if (!gate.allowlist.has(lowered)) {
+  if (!gate.skipAllowlist && !gate.allowlist.has(lowered)) {
     console.error(
       `[email-router] ${kind} dropped: recipient not in project allowlist (target=${sanitize(target, 320)})`
     );
@@ -4679,7 +5325,180 @@ function checkOutboundGate(gate, target, kind) {
 }
 __name(checkOutboundGate, "checkOutboundGate");
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/kv.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/email-relay.ts
+var app2 = new Hono2();
+app2.post("/relay", async (context) => {
+  const projectId = context.get("projectId");
+  const from = context.req.header("X-Void-Email-From") ?? "";
+  const to = context.req.header("X-Void-Email-To") ?? "";
+  const domain = to.slice(to.lastIndexOf("@") + 1).toLowerCase();
+  const body = context.req.raw.body;
+  if (!body) {
+    return context.json({ error: "mime body required" }, 400);
+  }
+  const raw2 = await readMimeBody(body);
+  if (raw2 === null) {
+    return context.json({ error: "mime too large" }, 413);
+  }
+  const headers = parseRelayedHeaders(raw2);
+  if (headers === null) {
+    return context.json({ error: "too many headers" }, 413);
+  }
+  const envelope = {
+    from,
+    to,
+    headers,
+    raw: raw2,
+    rawSize: raw2.byteLength,
+    viaDomain: domain
+  };
+  const pending = [];
+  let ctx = {
+    waitUntil(p) {
+      pending.push(p);
+    },
+    passThroughOnException() {
+    }
+  };
+  try {
+    ctx = context.executionCtx;
+  } catch {
+  }
+  const outcome = await routeRelayed(context.env, ctx, { projectId, domain, envelope });
+  if (pending.length > 0) {
+    await Promise.allSettled(pending);
+  }
+  if (outcome.reject) {
+    return context.json({ error: "message rejected" }, 403);
+  }
+  return context.json({ ok: true });
+});
+async function readMimeBody(stream) {
+  const reader = stream.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { value, done } = await reader.read();
+    if (done) {
+      break;
+    }
+    total += value.byteLength;
+    if (total > MAX_MIME_BYTES) {
+      try {
+        await reader.cancel();
+      } catch {
+      }
+      return null;
+    }
+    chunks.push(value);
+  }
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const c of chunks) {
+    out.set(c, offset);
+    offset += c.byteLength;
+  }
+  return out;
+}
+__name(readMimeBody, "readMimeBody");
+var LF2 = 10;
+var CR2 = 13;
+var HEADER_NAME_RE = /^[!#$%&'*+\-.^_`|~0-9a-z]+$/;
+var MAX_INBOUND_HEADER_LINES = 4096;
+function parseRelayedHeaders(raw2) {
+  const block = new TextDecoder().decode(raw2.subarray(0, headerBlockEnd(raw2)));
+  const folded = /* @__PURE__ */ new Map();
+  let totalPieces = 0;
+  let current = null;
+  let pos = 0;
+  while (pos < block.length) {
+    let nl = block.indexOf("\n", pos);
+    if (nl === -1) {
+      nl = block.length;
+    }
+    let line = block.slice(pos, nl);
+    pos = nl + 1;
+    if (line.endsWith("\r")) {
+      line = line.slice(0, -1);
+    }
+    if (line === "") {
+      break;
+    }
+    if (line.startsWith(" ") || line.startsWith("	")) {
+      if (current !== null && headerValueSafe(line)) {
+        totalPieces += 1;
+        if (totalPieces > MAX_INBOUND_HEADER_LINES) {
+          return null;
+        }
+        const pieces2 = folded.get(current) ?? [];
+        pieces2.push(` ${line.trim()}`);
+        folded.set(current, pieces2);
+      }
+      continue;
+    }
+    const colon = line.indexOf(":");
+    if (colon === -1) {
+      current = null;
+      continue;
+    }
+    const name = line.slice(0, colon).trim().toLowerCase();
+    const value = line.slice(colon + 1).trim();
+    if (!HEADER_NAME_RE.test(name) || !headerValueSafe(value)) {
+      current = null;
+      continue;
+    }
+    const pieces = folded.get(name);
+    totalPieces += 1;
+    if (totalPieces > MAX_INBOUND_HEADER_LINES) {
+      return null;
+    }
+    if (pieces !== void 0) {
+      pieces.push(`, ${value}`);
+    } else {
+      if (folded.size >= MAX_INBOUND_HEADERS) {
+        return null;
+      }
+      folded.set(name, [value]);
+    }
+    current = name;
+  }
+  return Object.fromEntries(
+    Array.from(folded, ([name, pieces]) => [name, pieces.join("")])
+  );
+}
+__name(parseRelayedHeaders, "parseRelayedHeaders");
+function headerBlockEnd(raw2) {
+  let lineStart = 0;
+  while (lineStart < raw2.length) {
+    const lf = raw2.indexOf(LF2, lineStart);
+    const lineEnd = lf === -1 ? raw2.length : lf;
+    let contentEnd = lineEnd;
+    if (contentEnd > lineStart && raw2[contentEnd - 1] === CR2) {
+      contentEnd--;
+    }
+    if (contentEnd === lineStart) {
+      return lineStart;
+    }
+    lineStart = lf === -1 ? raw2.length : lf + 1;
+  }
+  return raw2.length;
+}
+__name(headerBlockEnd, "headerBlockEnd");
+function headerValueSafe(value) {
+  for (let i = 0; i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 9) {
+      continue;
+    }
+    if (code < 32 || code === 127 || code > 255) {
+      return false;
+    }
+  }
+  return true;
+}
+__name(headerValueSafe, "headerValueSafe");
+
+// ../../home/runner/work/void/void/platform/packages/proxy/src/kv.ts
 init_performance2();
 var CF_API2 = "https://api.cloudflare.com/client/v4";
 var kv = new Hono2();
@@ -4861,12 +5680,12 @@ kv.post("/list", async (context) => {
   });
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/platform-lifecycle.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/platform-lifecycle.ts
 init_performance2();
 var PLATFORM_DISABLED_KEY = "__void/platform/disabled/v1";
 var PLATFORM_DISABLED_VALUE = "disabled";
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/r2.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/r2.ts
 init_performance2();
 var CF_API3 = "https://api.cloudflare.com/client/v4";
 var r2 = new Hono2();
@@ -5128,10 +5947,10 @@ r2.post("/head", async (context) => {
   });
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/revalidate.ts
+// ../../home/runner/work/void/void/platform/packages/proxy/src/revalidate.ts
 init_performance2();
-var app2 = new Hono2();
-app2.post("/", async (context) => {
+var app3 = new Hono2();
+app3.post("/", async (context) => {
   const projectId = context.get("projectId");
   const body = context.get("body");
   const response = await context.env.API.fetch(`https://api/internal/revalidate/${projectId}`, {
@@ -5151,9 +5970,9 @@ app2.post("/", async (context) => {
   });
 });
 
-// ../../../../../../../Users/cnakazawa/Projects/void/platform/packages/proxy/src/index.ts
-var app3 = new Hono2();
-app3.use("/*", async (context, next) => {
+// ../../home/runner/work/void/void/platform/packages/proxy/src/index.ts
+var app4 = new Hono2();
+app4.use("/*", async (context, next) => {
   const healthProbeToken = context.env.PLATFORM_HEALTH_PROBE_TOKEN;
   const installerProbe = healthProbeToken !== void 0 && healthProbeToken !== "" && context.req.path === "/health" && context.req.header("X-Void-Platform-Probe") === healthProbeToken;
   if (!installerProbe && (context.env.PLATFORM_TRAFFIC_STATE === "staging" || context.env.PLATFORM_TRAFFIC_STATE === "sandbox-drain" || context.env.PLATFORM_INSTALLATION_ID && await context.env.ROUTING.get(PLATFORM_DISABLED_KEY) === PLATFORM_DISABLED_VALUE)) {
@@ -5161,7 +5980,7 @@ app3.use("/*", async (context, next) => {
   }
   await next();
 });
-app3.use(
+app4.use(
   "/*",
   cors({
     origin: "*",
@@ -5169,7 +5988,7 @@ app3.use(
     allowHeaders: ["content-type", "authorization"]
   })
 );
-app3.get(
+app4.get(
   "/health",
   (context) => context.json({
     ok: true,
@@ -5183,7 +6002,7 @@ app3.get(
     }
   })
 );
-app3.all("/*", async (context, next) => {
+app4.all("/*", async (context, next) => {
   if (context.req.method !== "POST") {
     return context.json({ error: "method not allowed" }, 405);
   }
@@ -5193,7 +6012,53 @@ var PLATFORM_INTERNAL_EMAIL_SENTINEL = "void-platform-internal-email-v1";
 var MAX_PLATFORM_MIME_BASE64_LENGTH = Math.ceil(10 * 1024 * 1024 * 4 / 3) + 4;
 var PLATFORM_TOKEN_MAX_SKEW_SECONDS = 5 * 60;
 var PLATFORM_TOKEN_LENGTH = 43;
-app3.post("/*", async (context, next) => {
+app4.post("/*", async (context, next) => {
+  const path = new URL(context.req.url).pathname;
+  if (path === "/email/relay") {
+    const relayDomain = context.req.header("X-Void-Email-Domain");
+    const relayFrom = context.req.header("X-Void-Email-From");
+    const relayTo = context.req.header("X-Void-Email-To");
+    const relayAuth = context.req.header("Authorization");
+    if (!relayDomain || !relayFrom || !relayTo || !relayAuth) {
+      return context.json({ error: "relay envelope required" }, 400);
+    }
+    if (relayDomain.length > 256 || relayFrom.length > 256 || relayTo.length > 256 || relayAuth.length > 256) {
+      return context.json({ error: "relay envelope required" }, 400);
+    }
+    const contentLengthRaw = context.req.header("content-length");
+    if (!contentLengthRaw) {
+      return context.json({ error: "content-length required" }, 400);
+    }
+    const contentLength = Number(contentLengthRaw);
+    if (!Number.isInteger(contentLength) || contentLength < 0) {
+      return context.json({ error: "content-length required" }, 400);
+    }
+    if (contentLength > MAX_MIME_BYTES) {
+      return context.json({ error: "mime too large" }, 413);
+    }
+    const relaySecret = relayAuth.startsWith("Bearer ") ? relayAuth.slice(7) : null;
+    if (!relaySecret) {
+      return context.json({ error: "invalid relay credentials" }, 403);
+    }
+    const recipientDomain = relayTo.slice(relayTo.lastIndexOf("@") + 1).toLowerCase();
+    if (recipientDomain.length === 0 || recipientDomain !== relayDomain.toLowerCase()) {
+      return context.json({ error: "relay domain mismatch" }, 403);
+    }
+    const mirror = await readEmailDomainMirror(context.env.ROUTING, recipientDomain);
+    if (!mirror) {
+      return context.json({ error: "invalid relay credentials" }, 403);
+    }
+    const presented = await sha256Hex(relaySecret);
+    if (!constantTimeEqual(presented, mirror.relaySecretSha256)) {
+      return context.json({ error: "invalid relay credentials" }, 403);
+    }
+    if (mirror.status !== "active") {
+      return context.json({ error: "email domain is not active" }, 403);
+    }
+    context.set("projectId", mirror.projectId);
+    await next();
+    return;
+  }
   let body;
   try {
     const json = await context.req.json();
@@ -5205,7 +6070,6 @@ app3.post("/*", async (context, next) => {
     return context.json({ error: "invalid JSON body" }, 400);
   }
   context.set("body", body);
-  const path = new URL(context.req.url).pathname;
   if (path.startsWith("/email/internal/")) {
     const platformToken = asString(body.platformToken);
     const platformTimestamp = asNumber(body.platformTimestamp);
@@ -5287,13 +6151,13 @@ app3.post("/*", async (context, next) => {
   }
   await next();
 });
-app3.post("/ai/*", async (context, next) => {
+app4.post("/ai/*", async (context, next) => {
   if (await context.env.ROUTING.get(`ai-block:${context.get("projectId")}`, { cacheTtl: 60 })) {
     return context.json({ error: "AI usage limit exceeded" }, 429);
   }
   await next();
 });
-app3.post(
+app4.post(
   "/sandbox/*",
   (context) => context.json(
     {
@@ -5304,7 +6168,7 @@ app3.post(
     501
   )
 );
-app3.post("/email/*", async (context, next) => {
+app4.post("/email/*", async (context, next) => {
   if (!proxyCapabilityEnabled(context.env.PLATFORM_CAPABILITIES, "email")) {
     return context.json(
       {
@@ -5317,14 +6181,15 @@ app3.post("/email/*", async (context, next) => {
   }
   await next();
 });
-app3.route("/ai", ai);
-app3.route("/d1", d1);
-app3.route("/kv", kv);
-app3.route("/r2", r2);
-app3.route("/revalidate", app2);
-app3.route("/email", app);
+app4.route("/ai", ai);
+app4.route("/d1", d1);
+app4.route("/kv", kv);
+app4.route("/r2", r2);
+app4.route("/revalidate", app3);
+app4.route("/email", app);
+app4.route("/email", app2);
 var index_default = {
-  fetch: app3.fetch,
+  fetch: app4.fetch,
   /**
    * Inbound email entry point — bound as the catch-all CF Email Routing rule
    * on the platform mail zone. See `email-router.ts`.
@@ -5333,27 +6198,27 @@ var index_default = {
     await routeInbound(message, env, ctx);
   }
 };
-var encoder3 = new TextEncoder();
+var encoder4 = new TextEncoder();
 var decoder = new TextDecoder();
 var cachedVerifyKey;
-var cachedKeySecret3;
+var cachedKeySecret4;
 async function getVerifyKey(secret) {
-  if (cachedVerifyKey && cachedKeySecret3 === secret) {
+  if (cachedVerifyKey && cachedKeySecret4 === secret) {
     return cachedVerifyKey;
   }
   cachedVerifyKey = await crypto.subtle.importKey(
     "raw",
-    encoder3.encode(secret),
+    encoder4.encode(secret),
     { name: "HMAC", hash: "SHA-256" },
     false,
     ["verify"]
   );
-  cachedKeySecret3 = secret;
+  cachedKeySecret4 = secret;
   return cachedVerifyKey;
 }
 __name(getVerifyKey, "getVerifyKey");
 async function sha256Hex(input) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder3.encode(input));
+  const digest = await crypto.subtle.digest("SHA-256", encoder4.encode(input));
   const bytes = new Uint8Array(digest);
   let out = "";
   for (const b of bytes) {
@@ -5362,11 +6227,22 @@ async function sha256Hex(input) {
   return out;
 }
 __name(sha256Hex, "sha256Hex");
+function constantTimeEqual(a, b) {
+  if (a.length !== b.length) {
+    return false;
+  }
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) {
+    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return diff === 0;
+}
+__name(constantTimeEqual, "constantTimeEqual");
 async function verifyHmac(data, signature, secret) {
   try {
     const key = await getVerifyKey(secret);
     const sigBytes = base64urlDecode(signature);
-    return crypto.subtle.verify("HMAC", key, sigBytes.buffer, encoder3.encode(data));
+    return crypto.subtle.verify("HMAC", key, sigBytes.buffer, encoder4.encode(data));
   } catch {
     return false;
   }
@@ -5391,7 +6267,7 @@ async function verifyJwt(token, secret) {
       "HMAC",
       key,
       sigBytes.buffer,
-      encoder3.encode(`${header}.${body}`)
+      encoder4.encode(`${header}.${body}`)
     );
     if (!valid) {
       return null;