alchemy 0.77.5 → 0.79.0

package/src/cloudflare/assets.ts

@@ -65,7 +65,7 @@ export namespace Assets {
    * @returns Metadata for all assets in the directory
    */
   export const read = async (root: string): Promise<FileMetadata[]> => {
-    const matcher = ignore().add(".assetsignore");
+    const matcher = ignore().add([".assetsignore", "_headers", "_redirects"]);
     const ignorePath = path.join(root, ".assetsignore");
     try {
       const content = await fs.readFile(ignorePath, "utf-8");

package/src/cloudflare/astro/plugin.ts

@@ -2,9 +2,16 @@ import cloudflare, { type Options } from "@astrojs/cloudflare";
 import type { AstroIntegration } from "astro";
 import { getPlatformProxyOptions } from "../cloudflare-env-proxy.ts";
 
+const isAstroCheck =
+  !!process.argv.find((arg) => arg.includes("astro")) &&
+  process.argv.includes("check");
+
 const alchemy = (options?: Options): AstroIntegration => {
   return cloudflare({
-    platformProxy: getPlatformProxyOptions(options?.platformProxy),
+    platformProxy: getPlatformProxyOptions(
+      options?.platformProxy,
+      !isAstroCheck,
+    ),
     ...options,
   });
 };

package/src/cloudflare/auth.ts

@@ -18,88 +18,106 @@ export namespace CloudflareAuth {
     name: string;
   };
   export const ALL_SCOPES = {
-    // TODO: Verify descriptions marked with `//*`
-    "access:read": "Read Cloudflare Access", //*
-    "access:write": "Write Cloudflare Access", //*
+    "access:read":
+      "See Cloudflare Access data such as zones, applications, certificates, device postures, groups, identity providers, login counts, organizations, policies, service tokens, and users",
+    "access:write":
+      "See and change Cloudflare Access data such as zones, applications, certificates, device postures, groups, identity providers, login counts, organizations, policies, service tokens, and users",
     "account:read":
-      "See your account info such as account details, analytics, and memberships.",
-    "agw:read": "Read API Gateway", //*
-    "agw:run": "Run API Gateway", //*
-    "ai:read": "Read access to Workers AI catalog and assets",
-    "ai:write": "See and change Workers AI catalog and assets",
-    "aiaudit:read": "Read AI Audit", //*
-    "aiaudit:write": "Write AI Audit", //*
-    "aig:read": "Read AI Gateway", //*
-    "aig:write": "Write AI Gateway", //*
-    "auditlogs:read": "Read audit logs", //*
-    "browser:read": "Read Browser", //*
-    "browser:write": "Write Browser", //*
-    "cfone:read": "Read Cloudflare One", //*
-    "cfone:write": "Write Cloudflare One", //*
-    "cloudchamber:write": "Manage Cloudchamber",
-    "constellation:write": "Write Constellation", //*
-    "containers:write": "Manage Workers Containers",
-    "d1:write": "See and change D1 Databases.",
-    "dex:read": "Read DEX", //*
-    "dex:write": "Write DEX", //*
-    "dns_analytics:read": "Read DNS analytics",
-    "dns_records:edit": "Edit DNS records",
-    "dns_records:read": "Read DNS records",
-    "dns_settings:read": "Read DNS settings",
-    "firstpartytags:write": "Write First Party Tags", //*
-    "lb:edit": "Edit Load Balancer", //*
-    "lb:read": "Read Load Balancer", //*
-    "logpush:read": "Read Logpush", //*
-    "logpush:write": "Write Logpush", //*
-    "notification:read": "Read Notifications", //*
-    "notification:write": "Write Notifications", //*
-    "pages:read": "Read access to Pages projects, settings, and deployments.",
-    "pages:write": "See and change Pages projects, settings, and deployments.",
-    "pipelines:read": "Read access to Pipelines configurations and data",
-    "pipelines:setup": "Setup access to Pipelines configurations and data",
-    "pipelines:write": "See and change Pipelines configurations and data",
-    "query_cache:write": "Write Query Cache", //*
-    "queues:write": "See and change Queues settings and data",
-    "r2_catalog:write": "Write R2 Catalog", //*
-    "radar:read": "Read Radar", //*
-    "rag:read": "Read RAG", //*
-    "rag:write": "Write RAG", //*
-    "secrets_store:read":
-      "Read access to secrets + stores within the Secrets Store",
-    "secrets_store:write":
-      "See and change secrets + stores within the Secrets Store",
-    "sso-connector:read": "Read SSO Connector", //*
-    "sso-connector:write": "Write SSO Connector", //*
-    "ssl_certs:write": "See and manage mTLS certificates for your account",
-    "teams:pii": "Read Teams PII", //*
-    "teams:read": "Read Teams", //*
-    "teams:secure_location": "Read Secure Location", //*
-    "teams:write": "Write Teams", //*
-    "url_scanner:read": "Read URL Scanner", //*
-    "url_scanner:write": "Write URL Scanner", //*
+      "See your account info such as account details, analytics, and memberships",
+    "agw:read": "Grants read level access to Agents Gateway",
+    "agw:run": "Grants run level access to Agents Gateway",
+    "agw:write": "Grants read and write level access to Agents Gateway",
+    "ai:read": "Grants read level access to Workers AI",
+    "ai:write": "Grants write level access to Workers AI",
+    "aiaudit:read": "Grants read level access to AI Audit",
+    "aiaudit:write": "Grants write level access to AI Audit",
+    "aig:read": "Grants read level access to AI Gateway",
+    "aig:write": "Grants write level access to AI Gateway",
+    "auditlogs:read": "View Cloudflare Account Audit Logs",
+    "browser:read": "Grants read level access to Browser Rendering",
+    "browser:write": "Grants write level access to Browser Rendering",
+    "cfone:read": "Grants read level access to Cloudforce One data",
+    "cfone:write": "Grants write level access to Cloudforce One data",
+    "cloudchamber:write": "See and make changes to Cloudchamber",
+    "connectivity:admin":
+      "See, change, and bind to Connectivity Directory services, including creating services targeting Cloudflare Tunnel",
+    "connectivity:bind":
+      "read, list, and bind to Connectivity Directory services, as well as read and list Cloudflare Tunnels",
+    "connectivity:read":
+      "See Connectivity Directory services and Cloudflare Tunnels",
+    "constellation:write":
+      "Grants write access to Constellation configuration and models",
+    "containers:write": "See and make changes to Workers Containers",
+    "d1:write": "See and make changes to D1",
+    "dex:read": "Grants read level access to Cloudflare DEX",
+    "dex:write": "Grants write level access to Cloudflare DEX",
+    "dns_analytics:read":
+      "Grants read level access to Cloudflare DNS Analytics",
+    "dns_records:edit": "Grants edit level access to dns records",
+    "dns_records:read": "Grants read level access to dns records",
+    "dns_settings:read": "Grants read level access to Cloudflare DNS Settings",
+    "firstpartytags:write":
+      "Can see, edit and publish Google tag gateway configuration.",
+    "lb:edit": "Grants edit level access to lb and lb pools",
+    "lb:read": "Grants read level access to lb and lb pools",
+    "logpush:read": "See Cloudflare Logpush data",
+    "logpush:write": "See and change Cloudflare Logpush data",
+    "notification:read": "View Cloudflare Notifications",
+    "notification:write": "View and Modify Cloudflare Notifications",
+    "pages:read": "See Cloudflare Pages projects, settings and deployments",
+    "pages:write":
+      "See and change Cloudflare Pages projects, settings and deployments",
+    "pipelines:read": "Grants read level access to Cloudflare Pipelines",
+    "pipelines:setup":
+      "Grants permission to generate R2 tokens for Workers Pipelines",
+    "pipelines:write": "Grants write level access to Cloudflare Pipelines",
+    "query_cache:write": "See and make changes to Hyperdrive",
+    "queues:write": "See and change Cloudflare Queues settings and data",
+    "r2_catalog:write": "Grants write level access to R2 Data Catalog",
+    "radar:read": "Grants access to read Cloudflare Radar data",
+    "rag:read": "Grants read level access to Auto Rag",
+    "rag:write": "Grants write level access to Auto Rag",
+    "secrets_store:read": "Grants read level access to Secrets Store",
+    "secrets_store:write": "Grants write level access to Secrets Store",
+    "ssl_certs:write":
+      "Grants read and write access to SSL MTLS certificates or Certificate Store",
+    "sso-connector:read": "See Cloudflare SSO connectors",
+    "sso-connector:write":
+      "See Cloudflare SSO connectors to toggle activation and deactivation of SSO",
+    "teams:pii": "See personally identifiable Cloudflare Teams data",
+    "teams:read":
+      "See Cloudflare Teams data such as zones, gateway, and argo tunnel details",
+    "teams:secure_location":
+      "See all DNS Location data but can only change secure DNS Locations",
+    "teams:write":
+      "See and change Cloudflare Teams data such as zones, gateway, and argo tunnel details",
+    "url_scanner:read": "Grants read level access to URL Scanner",
+    "url_scanner:write": "Grants write level access to URL Scanner",
     "user:read":
-      "See your user info such as name, email address, and account memberships.",
-    "vectorize:write": "Write Vectorize", //*
+      "See your user info such as name, email address, and account memberships",
+    "vectorize:write": "See and make changes to Vectorize",
+    "workers:read":
+      "See Cloudflare Workers data such as zones, KV storage, R2 storage, scripts, and routes",
     "workers:write":
-      "See and change Cloudflare Workers data such as zones, KV storage, namespaces, scripts, and routes.",
-    "workers_builds:read": "Read Workers Builds", //*
-    "workers_builds:write": "Write Workers Builds", //*
+      "See and change Cloudflare Workers data such as zones, KV storage, R2 storage, scripts, and routes",
+    "workers_builds:read":
+      "See Cloudflare Workers Builds data such as builds, build configuration, and build logs",
+    "workers_builds:write":
+      "See and change Cloudflare Workers Builds data such as builds, build configuration, and build logs",
     "workers_kv:write":
-      "See and change Cloudflare Workers KV Storage data such as keys and namespaces.",
-    "workers_observability:read": "Read Workers Observability", //*
-    "workers_observability:write": "Write Workers Observability", //*
+      "See and change Cloudflare Workers KV Storage data such as keys and namespaces",
+    "workers_observability:read":
+      "Grants read access to Cloudflare Workers Observability",
     "workers_observability_telemetry:write":
-      "Write Workers Observability Telemetry", //*
+      "Grants write access to Cloudflare Workers Observability Telemetry API",
     "workers_routes:write":
-      "See and change Cloudflare Workers data such as filters and routes.",
+      "See and change Cloudflare Workers data such as filters and routes",
     "workers_scripts:write":
-      "See and change Cloudflare Workers scripts, durable objects, subdomains, triggers, and tail data.",
-    "workers_tail:read": "See Cloudflare Workers tail and script data.",
-    "zone:read": "Grants read level access to account zone.",
-    // Not granted yet
-    // "connectivity:admin":
-    //   "See, change, and bind to Connectivity Directory services, including creating services targeting Cloudflare Tunnel.",
-  };
+      "See and change Cloudflare Workers scripts, durable objects, subdomains, triggers, and tail data",
+    "workers_tail:read": "See Cloudflare Workers tail and script data",
+    "zone:read": "Grants read level access to account zone",
+  } as const;
+  export type Scope = keyof typeof ALL_SCOPES;
   export const DEFAULT_SCOPES = [
     "account:read",
     "user:read",
@@ -119,6 +137,7 @@ export namespace CloudflareAuth {
     "containers:write",
     "cloudchamber:write",
     "vectorize:write",
+    "connectivity:admin",
   ];
 
   /**

package/src/cloudflare/cloudflare-env-proxy.ts

@@ -16,6 +16,7 @@ export const getCloudflareEnvProxy = async <E>(
 
 export const getPlatformProxyOptions = (
   input: GetPlatformProxyOptions = {},
+  throws: boolean = true,
 ): GetPlatformProxyOptions => {
   const persist =
     input.persist === false
@@ -37,7 +38,10 @@ export const getPlatformProxyOptions = (
   }
   return {
     ...input,
-    configPath: validateConfigPath(input.configPath ?? getDefaultConfigPath()),
+    configPath: validateConfigPath(
+      input.configPath ?? getDefaultConfigPath(),
+      throws,
+    ),
     persist,
   };
 };

package/src/cloudflare/compatibility-date.gen.ts

@@ -4,4 +4,4 @@
 /**
  * The default Cloudflare Workers compatibility date, set based on the latest workerd release at the time of build.
  */
-export const DEFAULT_COMPATIBILITY_DATE = "2025-11-11";
+export const DEFAULT_COMPATIBILITY_DATE = "2025-11-28";

package/src/cloudflare/container.ts

@@ -221,6 +221,11 @@ export async function Container<T>(
       ...props,
       name: `cloudflare-dev/${name}`, // prefix used by Miniflare
       tag,
+      build: props.build ?? {
+        dockerfile: "Dockerfile",
+        platform: "linux/amd64",
+        context: process.cwd(),
+      },
     } as ImageProps);
 
     return {
@@ -240,7 +245,11 @@ export async function Container<T>(
           platform: props.build?.platform ?? "linux/amd64",
           ...props.build,
         }
-      : undefined,
+      : {
+          dockerfile: "Dockerfile",
+          platform: "linux/amd64",
+          context: process.cwd(),
+        },
     image: props.image,
     registry: {
       server: "registry.cloudflare.com",
@@ -562,9 +571,6 @@ export const ContainerApplication = Resource(
         logs: {
           enabled: true,
         },
-        logging: {
-          enabled: true,
-        },
       },
     };
     if (this.phase === "update" && this.output?.id) {
@@ -1039,9 +1045,6 @@ interface CreateRolloutApplicationResponse {
       logs?: {
         enabled: boolean;
       };
-      logging?: {
-        enabled: boolean;
-      };
     };
   };
   target_configuration: DeploymentConfiguration;

package/src/cloudflare/d1-database.ts

@@ -386,7 +386,10 @@ const _D1Database = Resource(
           `Cannot update primaryLocationHint from '${this.output.primaryLocationHint}' to '${props.primaryLocationHint}' after database creation.`,
         );
       }
-      if (props.jurisdiction !== this.output?.jurisdiction) {
+      if (
+        (props.jurisdiction ?? "default") !==
+        (this.output?.jurisdiction ?? "default")
+      ) {
         throw new Error(
           `Cannot update jurisdiction from '${this.output.jurisdiction}' to '${props.jurisdiction}' after database creation.`,
         );
@@ -468,7 +471,8 @@ export async function createDatabase(
   // Create new D1 database
   const createPayload: any = {
     name: databaseName,
-    jurisdiction: props.jurisdiction,
+    jurisdiction:
+      props.jurisdiction !== "default" ? props.jurisdiction : undefined,
   };
 
   if (props.primaryLocationHint) {

package/src/cloudflare/index.ts

@@ -69,11 +69,11 @@ export * from "./vectorize-metadata-index.ts";
 export * from "./version-metadata.ts";
 export * from "./vite/vite.ts";
 export * from "./website.ts";
-export { WorkerLoader } from "./worker-loader.ts";
+export * from "./worker-loader.ts";
 export * from "./worker-ref.ts";
 export * from "./worker-stub.ts";
 export * from "./worker-subdomain.ts";
 export * from "./worker.ts";
-export { Workflow } from "./workflow.ts";
+export * from "./workflow.ts";
 export * from "./wrangler.json.ts";
 export * from "./zone.ts";

package/src/cloudflare/permission-groups.ts

@@ -359,6 +359,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants write access to Account Rulesets",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "ece81d7757ff406cad61f221a4920d55",
+    name: "Account Security Center Insights Read",
+    description: "Grants read access to Security Center Insights",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "cfa2e2893226455c9b945914969dff7c",
+    name: "Account Security Center Insights Write",
+    description: "Grants write access to Security Center Insights",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "c1fde68c7bcc44588cbb6ddbc16d6480",
     name: "Account Settings Read",
@@ -527,6 +539,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants write access to Browser Rendering API",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "da5fe84b9c5446a0a5955b673fafa288",
+    name: "CASB Read",
+    description: "Grants read access to Cloudflare CASB",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "b9ed086b20864ad89c5aac24cdd02365",
+    name: "CASB Write",
+    description: "Grants write access to Cloudflare CASB",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "47b936e2027140c0a474cac8887b8c29",
     name: "CF Agents Read",
@@ -970,6 +994,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants full access to Email Security dmarc reports\n",
     scopes: ["com.cloudflare.api.account.zone"],
   },
+  {
+    id: "2d5b4b1f6c89487bb7184c2c1dcd3bf1",
+    name: "Email Sending Read",
+    description: "Grants access to reading data from Email Sending",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "5df633d6b41c42bcaf5b4a62b9d14b64",
+    name: "Email Sending Write",
+    description: "Grants access to reading and writing data from Email Sending",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "4ec32dfcb35641c5bb32d5ef1ab963b4",
     name: "Firewall Services Read",
@@ -1426,6 +1462,12 @@ export const PERMISSION_GROUPS = [
     description: "Grants admin access to Realtime configuration",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "9bb90620717647a39679e1d951f140d6",
+    name: "Registrar Domains Read",
+    description: "Grants read access to Cloudflare Registrar domains",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "93ae59e7a40c4287a57ff6e501186a63",
     name: "Response Compression Read",

package/src/cloudflare/worker-assets.ts

@@ -1,4 +1,5 @@
 import fs from "node:fs/promises";
+import path from "pathe";
 import { AsyncQueue } from "../util/async-queue.ts";
 import { withExponentialBackoff } from "../util/retry.ts";
 import { extractCloudflareResult } from "./api-response.ts";
@@ -38,7 +39,10 @@ export async function uploadAssets(
   },
 ): Promise<AssetUploadResult> {
   // Process the assets configuration once at the beginning
-  const processedConfig = createAssetConfig(assetConfig);
+  const processedConfig = await createAssetConfigWithFiles(
+    assets.path,
+    assetConfig,
+  );
 
   const manifest: Record<string, FileMetadata> = {};
   const filesByHash = new Map<string, Assets.FileMetadata>();
@@ -95,6 +99,35 @@ export async function uploadAssets(
   };
 }
 
+async function createAssetConfigWithFiles(
+  assetsPath: string,
+  config: AssetsConfig = {},
+): Promise<AssetsConfig> {
+  const [_headers, _redirects] = await Promise.all([
+    readFileOrProperty("_headers"),
+    readFileOrProperty("_redirects"),
+  ]);
+  return createAssetConfig({
+    ...config,
+    _headers,
+    _redirects,
+  });
+
+  async function readFileOrProperty(
+    property: "_headers" | "_redirects",
+  ): Promise<string | undefined> {
+    const content = await fs
+      .readFile(path.join(assetsPath, property), "utf-8")
+      .catch(() => undefined);
+    if (content && config[property]) {
+      throw new Error(
+        `Cannot use both ${property} file and ${property} property`,
+      );
+    }
+    return content ?? config[property];
+  }
+}
+
 /**
  * Creates asset configuration object from provided config or defaults
  */

package/src/cloudflare/worker-bundle.ts

@@ -351,6 +351,7 @@ export namespace WorkerBundleSource {
           ".js": "jsx",
           ".mjs": "jsx",
           ".cjs": "jsx",
+          ".sql": "text",
         },
         format,
         sourceRoot: this.props.outdir,

package/src/cloudflare/worker.ts

@@ -51,11 +51,17 @@ import {
 import {
   type WorkerScriptMetadata,
   bumpMigrationTagVersion,
+  getWorkerSettings,
   prepareWorkerMetadata,
 } from "./worker-metadata.ts";
 import { WorkerSubdomain, disableWorkerSubdomain } from "./worker-subdomain.ts";
 import { createTail } from "./worker-tail.ts";
-import { Workflow, isWorkflow, upsertWorkflow } from "./workflow.ts";
+import {
+  Workflow,
+  deleteWorkflow,
+  isWorkflow,
+  upsertWorkflow,
+} from "./workflow.ts";
 
 // Previous versions of `Worker` used the `Bundle` resource.
 // This import is here to avoid errors when destroying the `Bundle` resource.
@@ -71,11 +77,13 @@ import { createEmptyWorker, exists } from "./worker-stub.ts";
 export interface AssetsConfig {
   /**
    * The contents of a _headers file (used to attach custom headers on asset responses)
+   * @default the `_headers` file in the assets directory, if present
    */
   _headers?: string;
 
   /**
    * The contents of a _redirects file (used to apply redirects or proxy paths ahead of asset serving)
+   * @default the `_redirects` file in the assets directory, if present
    */
   _redirects?: string;
 
@@ -949,7 +957,10 @@ const _Worker = Resource(
             await createEmptyWorker(api, options.name, props.version);
           }
         } else {
-          await deleteQueueConsumers(api, options.name);
+          await Promise.all([
+            deleteQueueConsumers(api, options.name),
+            deleteWorkflows(api, options.name),
+          ]);
           await deleteWorker(api, {
             scriptName: options.name,
             dispatchNamespace: options.dispatchNamespace,
@@ -1706,6 +1717,20 @@ async function deleteQueueConsumers(api: CloudflareApi, scriptName: string) {
   );
 }
 
+async function deleteWorkflows(api: CloudflareApi, scriptName: string) {
+  const settings = await getWorkerSettings(api, scriptName);
+  await Promise.all(
+    (settings?.bindings ?? []).map(async (binding) => {
+      if (
+        binding.type === "workflow" &&
+        (binding.script_name === scriptName || !binding.script_name)
+      ) {
+        await deleteWorkflow(api, binding.workflow_name);
+      }
+    }),
+  );
+}
+
 export async function deleteWorker(
   api: CloudflareApi,
   props: {

package/src/cloudflare/workflow.ts

@@ -116,3 +116,12 @@ export async function upsertWorkflow(
 
   return body.result;
 }
+
+export async function deleteWorkflow(api: CloudflareApi, name: string) {
+  const response = await api.delete(
+    `/accounts/${api.accountId}/workflows/${name}`,
+  );
+  if (!response.ok && response.status !== 404) {
+    await handleApiError(response, "delete", "workflow", name);
+  }
+}

package/src/docker/api.ts

@@ -134,7 +134,8 @@ export class DockerApi {
     } catch (error: any) {
       const message = stderr || error.message || "Command failed";
       if (
-        message.includes("unexpected status from HEAD request") &&
+        (message.includes("unexpected status from HEAD request") ||
+          message.includes("502 Bad Gateway")) &&
         remainingAttempts > 0
       ) {
         await new Promise((resolve) => setTimeout(resolve, 1000));

package/src/util/camel-to-snake.ts

@@ -2,26 +2,41 @@ export interface LogPushProps {
   maxFooBar: string;
 }
 
-export function camelToSnakeObjectDeep<T extends object | undefined>(
+export function camelToSnakeObjectDeep<T>(
   obj: T,
-): T extends undefined ? undefined : CamelToSnake<T> {
-  return (
-    obj
-      ? Object.fromEntries(
-          Object.entries(obj).map(([key, value]) => [
-            key
-              .replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2") // Handle consecutive capitals: "FOOBar" -> "FOO_Bar"
-              .replace(/([a-z])([A-Z])/g, "$1_$2") // Handle normal camelCase: "fooBar" -> "foo_Bar"
-              .toLowerCase(),
-            Array.isArray(value)
-              ? value.map(camelToSnakeObjectDeep)
-              : typeof value === "object" && value !== null
-                ? camelToSnakeObjectDeep(value)
-                : value,
-          ]),
-        )
-      : undefined
-  ) as T extends undefined ? undefined : CamelToSnake<T>;
+): T extends undefined ? undefined : T extends object ? CamelToSnake<T> : T {
+  if (obj === undefined || obj === null) {
+    return obj as any;
+  }
+
+  // If it's not an object (primitive types), return as-is
+  if (typeof obj !== "object") {
+    return obj as any;
+  }
+
+  if (obj instanceof RegExp) {
+    return obj as any;
+  }
+
+  // Handle arrays
+  if (Array.isArray(obj)) {
+    return obj.map(camelToSnakeObjectDeep) as any;
+  }
+
+  // Handle objects
+  return Object.fromEntries(
+    Object.entries(obj).map(([key, value]) => [
+      key
+        .replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2") // Handle consecutive capitals: "FOOBar" -> "FOO_Bar"
+        .replace(/([a-z])([A-Z])/g, "$1_$2") // Handle normal camelCase: "fooBar" -> "foo_Bar"
+        .toLowerCase(),
+      Array.isArray(value)
+        ? value.map(camelToSnakeObjectDeep)
+        : typeof value === "object" && value !== null
+          ? camelToSnakeObjectDeep(value)
+          : value,
+    ]),
+  ) as any;
 }
 
 // Helper to check if a character is uppercase

package/src/util/detect-node-runtime.ts

@@ -6,7 +6,5 @@ export type Runtime = "bun" | "deno" | "node";
 export function detectRuntime(): Runtime {
   if (typeof Bun !== "undefined" && Bun !== null) return "bun";
   if (typeof Deno !== "undefined" && Deno !== null) return "deno";
-  if (typeof process !== "undefined" && process.release?.name === "node")
-    return "node";
   return "node";
 }