void 0.10.10 → 0.10.12

package/dist/requests-B8sZxaFM.mjs

@@ -0,0 +1,50 @@
+import { D as outro, T as log, a as cliTitle, s as dim, u as import_picocolors, w as intro } from "./agents-CtgBYqld.mjs";
+import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
+//#region src/cli/requests.ts
+async function runRequestsCommand(root, range, status) {
+	console.log();
+	intro(cliTitle("project requests"));
+	const token = getToken(root);
+	if (!token) {
+		log.error("Not logged in. Run `void auth login` first.");
+		process.exit(1);
+	}
+	if (!/^\d+(m|h|d)$/.test(range)) {
+		log.error(`requests: Invalid range '${range}'. Use a format like 15m, 2h, or 3d.`);
+		process.exit(1);
+	}
+	const linked = readProjectConfig(root);
+	if (!linked) {
+		log.error("No linked project. Run `void project link` first.");
+		process.exit(1);
+	}
+	const client = new PlatformClient(token, { root });
+	let entries;
+	try {
+		entries = await client.getRequests(linked.projectId, range, 200, status || void 0);
+	} catch (err) {
+		log.error(err instanceof Error ? err.message : String(err));
+		process.exit(1);
+	}
+	if (entries.length === 0) {
+		outro(`No requests found in the last ${range}${status ? ` matching status ${status}` : ""}.`);
+		return;
+	}
+	for (const entry of entries) printRequest(entry);
+	outro(dim(`${entries.length} requests`));
+}
+function printRequest(entry) {
+	const time = formatTime(entry.timestamp);
+	const method = (entry.method || "-").padEnd(4);
+	const status = entry.status || "-";
+	const statusNum = parseInt(status, 10);
+	const coloredStatus = statusNum >= 500 ? import_picocolors.default.red(status) : statusNum >= 400 ? import_picocolors.default.yellow(status) : status;
+	const duration = Number.isFinite(entry.durationMs) ? dim(`${Math.round(entry.durationMs)}ms`) : "";
+	console.log(`${dim(time)} ${method} ${coloredStatus} ${dim(entry.type)} ${duration}`.trimEnd());
+}
+function formatTime(ts) {
+	const d = /* @__PURE__ */ new Date(`${ts.replace(" ", "T")}Z`);
+	return Number.isNaN(d.getTime()) ? ts : d.toLocaleTimeString("en-GB", { hour12: false });
+}
+//#endregion
+export { runRequestsCommand };

package/dist/{resolve-project-D2HI3TrG.mjs → resolve-project-BBMtLLV9.mjs}

@@ -1,5 +1,5 @@
 import { n as __exportAll } from "./rolldown-runtime-DJK8HYOj.mjs";
-import { a as join } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
+import { a as join } from "./dist-DaKKDf8D.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/resolve-project.ts
 var resolve_project_exports = /* @__PURE__ */ __exportAll({

package/dist/{rollback-9dfmB-YZ.mjs → rollback-CkvTFXx5.mjs}

@@ -1,5 +1,5 @@
-import { D as outro, S as confirm, T as log, a as cliTitle, c as ensureUtc, j as isCancel, k as select, o as createSpinner, s as dim, u as import_picocolors, w as intro, x as cancel } from "./agents-Bmr5tFFb.mjs";
-import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-C9FG6Vzc.mjs";
+import { D as outro, S as confirm, T as log, a as cliTitle, c as ensureUtc, j as isCancel, k as select, o as createSpinner, s as dim, u as import_picocolors, w as intro, x as cancel } from "./agents-CtgBYqld.mjs";
+import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
 //#region src/cli/rollback.ts
 async function runRollbackCommand(root, deployId) {
 	console.log();

package/dist/{route-types-CfKfhbIg.mjs → route-types-COI2DsZv.mjs}

@@ -1,5 +1,5 @@
-import { a as join, s as relative } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
-import { r as writeFileIfChanged } from "./project-tsconfig-D9uSVVpA.mjs";
+import { a as join, s as relative } from "./dist-DaKKDf8D.mjs";
+import { r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
 import { a as isVoidSocialAuthProvider } from "./providers-CJlNS3kT.mjs";
 import { mkdirSync } from "node:fs";
 import { getAuthTables, getSchema } from "better-auth/db";

package/dist/{runner-h272wcPj.mjs → runner-kapo9aPs.mjs}

@@ -1,6 +1,6 @@
-import { a as join, n as dirname } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
-import { c as collectMigrations, o as classifyMigration } from "./validate-DT7nFMlf.mjs";
-import { n as hasPackageDependency, r as readNearestPackageJson } from "./package-json-B0NuUWGd.mjs";
+import { a as join, n as dirname } from "./dist-DaKKDf8D.mjs";
+import { c as collectMigrations, o as classifyMigration } from "./validate-Cw_RLeTj.mjs";
+import { n as hasPackageDependency, r as readNearestPackageJson } from "./package-json-Cx1osYo6.mjs";
 import { existsSync, mkdirSync } from "node:fs";
 import { createHash, createHmac } from "node:crypto";
 //#region src/migrations/runner.ts

package/dist/{runner-pg-waxJOnBb.mjs → runner-pg-CHM76xuC.mjs}

@@ -1,4 +1,4 @@
-import { c as collectMigrations } from "./validate-DT7nFMlf.mjs";
+import { c as collectMigrations } from "./validate-Cw_RLeTj.mjs";
 //#region src/migrations/runner-pg.ts
 /**
 * Apply unapplied SQL migrations via a connected PostgreSQL client.

package/dist/runtime/better-auth-pg.d.mts

@@ -1,4 +1,4 @@
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-BvnM9px6.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-DealXecJ.mjs";
 
 //#region src/runtime/better-auth-pg.d.ts
 declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];

package/dist/runtime/better-auth.d.mts

@@ -1,4 +1,4 @@
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-BvnM9px6.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-DealXecJ.mjs";
 
 //#region src/runtime/better-auth.d.ts
 declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];

package/dist/runtime/env-public.d.mts

@@ -1,142 +1,4 @@
 /// <reference types="@cloudflare/workers-types" />
-import { t as StandardSchemaV1 } from "../standard-schema-DJ0HW7QP.mjs";
 import { c as oneOf, i as email, l as string, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-z4stu8uc.mjs";
-
-//#region src/runtime/env-public.d.ts
-type AnyValidator = StandardSchemaV1<unknown, unknown>;
-type AnySchema = Record<string, AnyValidator>;
-/**
-* Type-only stub for the validated env shape. Augmented by the generated
-* `.void/env.d.ts` so `env.X` is typed per the user's schema. Includes an
-* index signature so untyped property access returns `unknown` (rather than
-* a hard error) for bindings and keys not declared in the schema.
-*/
-interface ValidatedEnv {
-  readonly [key: string]: unknown;
-}
-type InferEnv<S extends AnySchema> = { readonly [K in keyof S]: StandardSchemaV1.InferOutput<S[K]> };
-/**
-* Register an env schema and return the typed `env` proxy.
-*
-* Calling `defineEnv` is the only required step — Void auto-discovers
-* `env.ts` at project root, imports it, and uses the schema for runtime
-* validation, type generation, and deploy-time secret checks.
-*
-* The return value is identical to the `env` export from `void/env`.
-* Re-export it from your `env.ts` if you prefer the explicit
-* `import { env } from "~/env"` pattern.
-*/
-declare function defineEnv<S extends AnySchema>(schema: S): InferEnv<S>;
-/**
-* Internal: validate the entire schema against the worker's actual env on
-* the first request per isolate. Catches bad remote-secret values and
-* post-deploy drift that the deploy CLI can't see (it only knows secret
-* names, not their values).
-*
-* Spliced into the generated worker entry by `compileWorkerEntry`. Cached
-* after the first call so subsequent requests pay no cost.
-*
-* Async lifecycle: this function awaits any async Standard Schema
-* validators (zod `refine`, arktype async narrows, etc.) and seeds the
-* per-key cache with the resolved values. Subsequent reads via `env.X`
-* hit the sync cache — async work only happens here, at boot. If a user
-* accesses `env.X` for a key with an async validator *before* this
-* function has run (e.g. during module-top-level code), the proxy will
-* throw with guidance pointing back to this boot-time pre-validation.
-*/
-declare function _validateEnvOnce(envValues: unknown): Promise<void>;
-/** Internal: framework-only access to the registered schema (for plugin/CLI). */
-declare function _getRegisteredSchema(): AnySchema | null;
-/**
-* Internal: returns `true` once `defineEnv()` has been called at least once,
-* regardless of whether the caller passed an empty schema. Gives tooling a
-* reliable signal — `_getRegisteredSchema()` alone can't distinguish
-* `defineEnv({})` (an intentional empty schema) from "never called".
-*/
-declare function _hasRegisteredSchema(): boolean;
-/**
-* Internal: extract `.default(value)` values from the registered schema as
-* stringified env values. Used by the plugin and deploy CLI to seed worker
-* `vars` so `c.env.X` and `process.env.X` see the same fallback that the
-* typed `env.X` proxy returns.
-*
-* Detection is schema-agnostic: probe each validator with `undefined` and,
-* if it succeeds with a non-undefined value, that value is the default.
-* Works for our built-in `.default(...)` helpers and for any Standard
-* Schema validator with intrinsic default behaviour. Async validators are
-* skipped (we can't get a sync default).
-*
-* Keys with no default — required keys, plain `.optional()` — are omitted
-* from the result so they don't shadow user `.env*` entries with empty
-* strings.
-*/
-declare function _getSchemaDefaults(): Record<string, string>;
-declare class EnvValidationError extends Error {
-  readonly key: string;
-  readonly issues: Array<StandardSchemaV1.Issue>;
-  constructor(key: string, issues: Array<StandardSchemaV1.Issue>);
-}
-/**
-* Typed env proxy. Reads from the runtime env, validating declared keys
-* on first access and passing through bindings / unknown keys unchanged.
-*
-* Sync-only: the `get` trap must be synchronous, so validators that return
-* a `Promise` cannot be awaited here. For async Standard Schema validators,
-* `_validateEnvOnce()` pre-resolves them at worker boot and seeds the
-* per-env cache; property reads then serve the cached value synchronously.
-* If an async validator is encountered here without a prior pre-validation,
-* the trap throws with guidance on how to resolve it.
-*/
-declare const env: ValidatedEnv;
-/** Aggregate report from validating an entire env object against the schema. */
-type EnvValidationReport = {
-  valid: boolean;
-  missing: Array<string>;
-  invalid: Array<{
-    key: string;
-    messages: Array<string>;
-  }>;
-  /**
-  * Resolved values for keys that validated successfully. Used to seed the
-  * per-env cache after async pre-validation so sync `env.X` reads hit the
-  * cache.
-  */
-  values: Map<string, unknown>;
-};
-/**
-* Validate an env record (e.g. merged `.env*` + remote secret list) against
-* the registered schema. Used by the dev plugin (warnings), the deploy CLI
-* (hard error), and `_validateEnvOnce` at worker boot.
-*
-* Async: awaits any validators that return a `Promise` (zod async refines,
-* arktype narrows, etc.). Callers already run in async contexts.
-*/
-declare function validateAllEnv(envValues: Record<string, unknown>): Promise<EnvValidationReport>;
-declare global {
-  namespace Cloudflare {
-    interface Env {
-      DB: D1Database;
-      KV: KVNamespace;
-      STORAGE: R2Bucket;
-      AI: Ai;
-      SANDBOX: DurableObjectNamespace<import("@cloudflare/sandbox").Sandbox>;
-      /** @internal Service binding to proxy worker (AI, revalidation, future features) */
-      __VOID_PROXY?: Fetcher;
-      /** @internal Custom proxy URL override */
-      __VOID_PROXY_URL?: string;
-      /** @internal Auth token for HTTP proxy (local dev) */
-      __VOID_TOKEN?: string;
-      /** @internal Project ID for HTTP proxy (local dev) */
-      __VOID_PROJECT_ID?: string;
-      /** @internal Staging environment flag */
-      __VOID_STAGING?: string;
-      /** @internal Project ID (service binding path) */
-      __PROJECT_ID?: string;
-      /** @internal Proxy token (service binding path) */
-      __VOID_PROXY_TOKEN?: string;
-      [key: `QUEUE_${string}`]: Queue<unknown> | undefined;
-    }
-  }
-}
-//#endregion
+import { a as _getSchemaDefaults, c as defineEnv, i as _getRegisteredSchema, l as env, n as EnvValidationReport, o as _hasRegisteredSchema, r as ValidatedEnv, s as _validateEnvOnce, t as EnvValidationError, u as validateAllEnv } from "../env-public-BfiLcMBk.mjs";
 export { type EnvSchema, EnvValidationError, EnvValidationReport, ValidatedEnv, _getRegisteredSchema, _getSchemaDefaults, _hasRegisteredSchema, _validateEnvOnce, boolean, defineEnv, email, env, json, number, oneOf, string, url, validateAllEnv };

package/dist/runtime/env-public.mjs

@@ -1,95 +1,7 @@
+import { boolean, email, getSecretOverride, json, number, oneOf, string, url } from "./env-helpers.mjs";
+import { n as isUnmaskActive, r as redactMessage } from "../env-mask-Dd47NbR6.mjs";
 import { a as getRawRuntimeEnv } from "../env-raw-Cx8ElDdj.mjs";
 import { getRuntimeEnv, isInternalBinding } from "./env.mjs";
-import { boolean, email, getSecretOverride, json, number, oneOf, string, url } from "./env-helpers.mjs";
-//#region src/shared/env-mask.ts
-/**
-* Secret redaction helpers for env-validation output.
-*
-* Values are redacted (replaced with `<redacted>`) whenever they flow into
-* a user-visible string — `EnvValidationError` messages, CLI reports, the
-* dev-server warning block. The key name is never masked (the user needs
-* it to locate the offending entry).
-*
-* Redaction is belt-and-braces:
-*   1. An explicit `.secret()` / `.public()` flag on a schema entry wins.
-*   2. Otherwise, a key-name regex (`KEY|TOKEN|SECRET|…`) redacts anything
-*      that looks like credentials.
-*   3. Even on non-secret keys, a value that itself looks high-entropy
-*      (`sk_…`, `ghp_…`, ≥24 characters of mixed alphanumerics) is redacted
-*      — catches wrong-file typos like `PORT=sk_live_abc123`.
-*
-* Users can opt out of the guard for local debugging via
-* `VOID_ENV_UNMASK=1` in the environment; that path prints a one-shot
-* notice on stderr so the loosened output is visibly attributed.
-*
-* This module is a leaf — no imports from non-leaf modules, safe to reach
-* from both the runtime (worker bundle) and the CLI host.
-*/
-/** Sentinel emitted in place of a redacted value. */
-const REDACTED = "<redacted>";
-/** Environment variable that disables redaction when set to `1`. */
-const UNMASK_ENV_VAR = "VOID_ENV_UNMASK";
-/**
-* Regex matching env key names that almost always carry secrets.
-* Case-insensitive; matched as a substring anywhere in the key.
-*/
-const SECRET_KEY_RE = /KEY|TOKEN|SECRET|PASSWORD|PASS(WD)?|CREDENTIAL|PRIVATE|AUTH|BEARER|APIKEY|DSN/i;
-/** Common secret value prefixes (Stripe, GitHub, Slack, AWS, …). */
-const SECRET_VALUE_PREFIX_RE = /^(sk|pk|ghp|xoxb|AKIA)/i;
-/** High-entropy alphanumeric string of ≥24 chars. */
-const HIGH_ENTROPY_RE = /^[A-Za-z0-9_\-+/=.:]{24,}$/;
-/** `true` when the key name heuristically denotes a secret. */
-function isLikelySecretKey(name) {
-	return SECRET_KEY_RE.test(name);
-}
-/**
-* `true` when the value looks like a credential regardless of key name.
-* Err on the side of redacting — a false positive hides one non-secret
-* debugging hint, a false negative pastes a token into a GitHub issue.
-*/
-function isLikelySecretValue(value) {
-	if (typeof value !== "string" || value.length === 0) return false;
-	return SECRET_VALUE_PREFIX_RE.test(value) || HIGH_ENTROPY_RE.test(value);
-}
-/**
-* Redact every occurrence of `raw` inside a validator-produced `message`
-* when the key should be masked. Built-in helpers embed the raw value in
-* their error strings (e.g. `Expected a number, got "not-a-number"`); we
-* scrub those after the fact so third-party Standard Schema libraries —
-* which have their own message format — also get reasonable redaction as
-* long as the offending value was a secret-looking literal.
-*/
-function redactMessage(key, rawValue, message, options = {}) {
-	if (options.unmask) return message;
-	if (!(options.override === "secret" || options.override !== "public" && (isLikelySecretKey(key) || isLikelySecretValue(rawValue)))) return message;
-	if (typeof rawValue !== "string" || rawValue.length === 0) return message;
-	return message.split(rawValue).join(REDACTED);
-}
-let unmaskResolved = null;
-let unmaskNoticeShown = false;
-/**
-* Resolve the effective unmask flag, consulting `process.env` exactly once
-* per process. On the first affirmative read, we print a one-shot notice to
-* stderr so CI logs clearly show the guard is off.
-*/
-function isUnmaskActive() {
-	if (unmaskResolved !== null) return unmaskResolved;
-	let active = false;
-	try {
-		active = globalThis.process?.env?.[UNMASK_ENV_VAR] === "1";
-	} catch {
-		active = false;
-	}
-	unmaskResolved = active;
-	if (active && !unmaskNoticeShown) {
-		unmaskNoticeShown = true;
-		try {
-			console.error(`[void/env] ${UNMASK_ENV_VAR}=1 is set — env validation errors will include raw values. Unset it before sharing logs.`);
-		} catch {}
-	}
-	return active;
-}
-//#endregion
 //#region src/runtime/env-public.ts
 /**
 * Public env API — `void/env`.

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-imD0UVDT.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-Cjh8uM3Y.mjs";
 export { BasicAuthOptions, CloudBindings, CloudContext, CloudContextVariables, CloudEnv, type Deferred, type HandlerInput, type InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, type ValidatorSlots, VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/live.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="@cloudflare/workers-types" />
 import { r as AuthUser } from "../auth-qgMlYp7Z.mjs";
-import { a as CloudEnv, r as CloudContext } from "../handler-imD0UVDT.mjs";
+import { a as CloudEnv, r as CloudContext } from "../handler-Cjh8uM3Y.mjs";
 
 //#region src/runtime/live.d.ts
 type MaybePromise<T> = T | Promise<T>;

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-imD0UVDT.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-Cjh8uM3Y.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState } from "../auth-qgMlYp7Z.mjs";
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-BvnM9px6.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-DealXecJ.mjs";
 import { AnyWebSocketDefinition } from "./ws.mjs";
 
 //#region src/runtime/ws-server.d.ts

package/dist/runtime/ws.d.mts

@@ -1,6 +1,6 @@
-import { r as AuthUser } from "../auth-qgMlYp7Z.mjs";
 import { t as StandardSchemaV1 } from "../standard-schema-DJ0HW7QP.mjs";
-import { a as CloudEnv } from "../handler-imD0UVDT.mjs";
+import { r as AuthUser } from "../auth-qgMlYp7Z.mjs";
+import { a as CloudEnv } from "../handler-Cjh8uM3Y.mjs";
 import { WebSocketRouteMap } from "void/routes";
 
 //#region src/runtime/ws.d.ts

package/dist/{scan-Dp_Gyzs3.mjs → scan-DEwlM_Xy.mjs}

@@ -1,5 +1,5 @@
-import { a as join, n as dirname, r as extname, t as basename } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
-import { n as readProjectPaths } from "./project-paths-tpdR1mJR.mjs";
+import { a as join, n as dirname, r as extname, t as basename } from "./dist-DaKKDf8D.mjs";
+import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { t as glob } from "./dist-BuiRJkTd.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/router/parse-filename.ts

package/dist/{scan-i7Yz54fv.mjs → scan-DYXkrasO.mjs}

@@ -1,8 +1,8 @@
-import { a as join, i as isAbsolute, t as basename } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
-import { n as readProjectPaths } from "./project-paths-tpdR1mJR.mjs";
+import { a as join, i as isAbsolute, t as basename } from "./dist-DaKKDf8D.mjs";
+import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { n as globSync, t as glob } from "./dist-BuiRJkTd.mjs";
-import { d as isCallExpression, f as isIdentifier, h as isObjectExpression, p as isLiteral } from "./plugin-inference-CJxi_fWI.mjs";
-import { o as parseRouteFilename, s as parseWebSocketFilename, t as scanPages } from "./scan-Dp_Gyzs3.mjs";
+import { c as isIdentifier, d as isObjectExpression, l as isLiteral, s as isCallExpression } from "./entry-D7yy4xVH.mjs";
+import { o as parseRouteFilename, s as parseWebSocketFilename, t as scanPages } from "./scan-DEwlM_Xy.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { parseSync } from "vite";

package/dist/{secret-DeMnMcV0.mjs → secret-Dt32J6RI.mjs}

@@ -1,6 +1,6 @@
-import { D as outro, E as note, O as password, S as confirm, T as log, a as cliTitle, j as isCancel, w as intro, x as cancel } from "./agents-Bmr5tFFb.mjs";
-import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-C9FG6Vzc.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D2HI3TrG.mjs";
+import { D as outro, E as note, O as password, S as confirm, T as log, a as cliTitle, j as isCancel, w as intro, x as cancel } from "./agents-CtgBYqld.mjs";
+import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
+import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BBMtLLV9.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {

package/dist/{skills-DsdNDtX3.mjs → skills-CLjN0uUO.mjs}

@@ -1,5 +1,5 @@
-import { a as join, s as relative } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
-import { T as log, r as getPackageDir } from "./agents-Bmr5tFFb.mjs";
+import { a as join, s as relative } from "./dist-DaKKDf8D.mjs";
+import { T as log, r as getPackageDir } from "./agents-CtgBYqld.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, symlinkSync } from "node:fs";
 //#region src/cli/skills.ts
 function parseSkills(skillsDir) {

package/dist/{subcommand-prompt-DtES-oP6.mjs → subcommand-prompt-BzV8iQZo.mjs}

@@ -1,4 +1,4 @@
-import { _ as S_RADIO_ACTIVE, b as S_STEP_SUBMIT, g as S_CHECKBOX_INACTIVE, h as S_CHECKBOX_ACTIVE, m as S_BAR_END, p as S_BAR, u as import_picocolors, v as S_RADIO_INACTIVE, y as S_STEP_ACTIVE } from "./agents-Bmr5tFFb.mjs";
+import { _ as S_RADIO_ACTIVE, b as S_STEP_SUBMIT, g as S_CHECKBOX_INACTIVE, h as S_CHECKBOX_ACTIVE, m as S_BAR_END, p as S_BAR, u as import_picocolors, v as S_RADIO_INACTIVE, y as S_STEP_ACTIVE } from "./agents-CtgBYqld.mjs";
 //#region src/cli/subcommand-prompt.ts
 function promptSubcommand(command, subcommands) {
 	return new Promise((resolve) => {

package/dist/sveltekit.mjs

@@ -1,4 +1,4 @@
-import { a as join, c as resolve, i as isAbsolute, s as relative } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
+import { a as join, c as resolve, i as isAbsolute, s as relative } from "./dist-DaKKDf8D.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/sveltekit.ts
 /**

package/dist/{validate-DT7nFMlf.mjs → validate-Cw_RLeTj.mjs}

@@ -1,5 +1,5 @@
 import { n as __exportAll } from "./rolldown-runtime-DJK8HYOj.mjs";
-import { a as join, n as dirname } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
+import { a as join, n as dirname } from "./dist-DaKKDf8D.mjs";
 import { t as canonicalJson } from "./canonical-json-DuDiiUsQ.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";

package/dist/{yarn-pnp-CW8LB6g_.mjs → yarn-pnp-DJn3SAHF.mjs}

@@ -1,4 +1,4 @@
-import { a as join, n as dirname } from "./pathe.M-eThtNZ-CQzLbt4c.mjs";
+import { a as join, n as dirname } from "./dist-DaKKDf8D.mjs";
 import { existsSync, readdirSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 //#region src/cli/yarn-pnp.ts

package/getting-started-prompt.txt

@@ -15,11 +15,13 @@ At the end of the interactive flow, `void init` can also log you in and link or
 
 void deploy
 
+To deploy to your OWN Cloudflare account instead of the Void platform, use `void deploy --backend cloudflare` (add `--provision` on the first deploy to create the D1/KV/R2/Queues/Hyperdrive resources your app needs). Pin an account first (`account_id` in `wrangler.jsonc` or `CLOUDFLARE_ACCOUNT_ID`) and keep real secrets in `wrangler secret put` — `.env` values ship as plaintext worker vars. v1 deploys full Void apps on the Cloudflare Workers target only (D1/KV/R2/Queues/Hyperdrive; auth and ISR on D1/SQLite); framework SSR of every kind (TanStack Start, React Router, vinext, SvelteKit, Nuxt, Analog, Astro), static/SPA/SSG apps (including output: "static"), WebSocket/Durable Object apps (*.ws.ts), a custom migrations_pattern, node/bun/deno targets, and PostgreSQL apps with auth all fail closed with guidance, and auth apps need checked-in migrations that produce the Better Auth schema. `--provision` is a single-operator, dev-machine step and is disabled in CI.
+
 Database workflow: define Drizzle tables in `db/schema.ts`, import `db` from `void/db` and tables from `@schema`. Use `void db push` to prototype (applies schema directly, no migration files). Use `void db generate` when ready to create production migration files in `db/migrations/`. `drizzle-orm` and `drizzle-kit` ship with void — no extra install needed. Scaffold new tables with `void gen model <name> [columns...]`.
 
 Routing extras: declare static redirects/rewrites/fallbacks in `void.json` under `routing.*`, or in a `public/_redirects` file. For dynamic rewrites, call `c.rewrite(path)` in a `defineMiddleware`.
 
-Logs: surface app-level errors via `import { logger } from "void/log"` and `logger.error(msg, fields?)` (also `.warn` / `.info`) so they appear under `void project logs --level error`. Errors only persisted to your own DB are invisible to Cloudflare Tail.
+Logs: surface app-level errors via `import { logger } from "void/log"` and `logger.error(msg, fields?)` (also `.warn` / `.info`) so they appear under `void project logs --level error`. Errors only persisted to your own DB are invisible to Cloudflare Tail. Logs only exist where a worker ran — for 5xx generated by the edge router or on static/SPA projects, use `void project requests --status 5xx` instead.
 
 CI / fresh clones: run `void prepare` after install to generate `.void/routes.d.ts`, `.void/db.d.ts`, `.void/queues.d.ts`, `.void/env.d.ts`, and `.void/tsconfig.json` without booting Vite. `vite dev` / `vite build` populate these during normal app workflows.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.10",
+  "version": "0.10.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -327,6 +327,7 @@
     "ignore": "^7.0.5",
     "jsonc-parser": "3.3.1",
     "pg": "8.22.0",
+    "proper-lockfile": "^4.1.2",
     "wrangler": "^4.107.0"
   },
   "devDependencies": {
@@ -335,12 +336,13 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^26.1.0",
     "@types/pg": "^8.20.0",
+    "@types/proper-lockfile": "^4.1.4",
     "@typescript/native-preview": "7.0.0-dev.20260507.1",
     "arktype": "^2.2.2",
     "estree-walker": "^3.0.3",
     "magic-string": "^0.30.21",
     "ofetch": "2.0.0-alpha.3",
-    "pathe": "^2.0.3",
+    "pathslash": "^0.1.0",
     "pglite-server": "0.1.5",
     "picocolors": "^1.1.1",
     "tinyglobby": "^0.2.17",
@@ -354,7 +356,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.10"
+    "@void/md": "0.10.12"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/schema.json

@@ -144,6 +144,11 @@
       "type": "object",
       "description": "Routing configuration — headers, redirects, rewrites, fallbacks, revalidation, prerendering.",
       "properties": {
+        "notFound": {
+          "type": "string",
+          "enum": ["single-page-application", "404-page", "none"],
+          "description": "Override how the asset layer answers a request that matched no asset and no worker route. Void infers \"single-page-application\" when the worker does not own HTML routing; set \"404-page\" for a static-site-generator build so unknown URLs serve 404.html with a real HTTP 404 instead of index.html with a 200. Does not change run_worker_first. Ignored for SvelteKit, Nuxt, Analog, and Astro deploys, which pin not_found_handling to \"none\" because the framework's own worker owns unmatched HTML."
+        },
         "revalidate": {
           "description": "Edge caching TTL in seconds. A number sets a global TTL for all SSR pages. An object maps URL patterns to TTLs (first match wins). Set to 0 to disable caching for a path.",
           "oneOf": [

package/skills/void/SKILL.md

@@ -32,39 +32,40 @@ Then ask what to do next.
 
 ## Task Routing
 
-| User intent                               | Docs file(s)                                                                              |
-| ----------------------------------------- | ----------------------------------------------------------------------------------------- |
-| CLI command syntax, flags, env vars       | `docs/reference/cli.md`                                                                   |
-| Initial setup, onboarding, first app      | `docs/guide/quickstart.md`, `docs/reference/cli.md`                                       |
-| App type detection and mode behavior      | `docs/guide/app-types.md`, `docs/reference/config.md`                                     |
-| Server/API routing and middleware         | `docs/guide/server-routing.md`, `docs/integrations/hono.md`                               |
-| Pages mode, loader/action, forms, layouts | `docs/guide/pages-routing/*.md`, `docs/guide/type-safety.md`                              |
-| Database and migrations                   | `docs/guide/database.md`, `docs/guide/type-safety.md`                                     |
-| Typed fetch and end-to-end typing         | `docs/guide/typed-fetch.md`, `docs/guide/type-safety.md`                                  |
-| Authentication                            | `docs/guide/auth.md`, `docs/guide/env-vars.md`                                            |
-| Cloudflare runtime bindings and config    | `docs/integrations/cloudflare.md`, `docs/reference/config.md`, `docs/guide/env-vars.md`   |
-| AI inference (Workers AI, providers)      | `docs/guide/ai.md`                                                                        |
-| KV / storage / queues / cron jobs         | `docs/guide/kv.md`, `docs/guide/storage.md`, `docs/guide/queues.md`, `docs/guide/jobs.md` |
-| SSR and caching                           | `docs/guide/ssr.md`, `docs/guide/edge/*.md`                                               |
-| Rewrites, redirects, fallbacks            | `docs/guide/edge/rewrites.md`, `docs/guide/edge/redirects.md`, `docs/reference/config.md` |
-| Static site generation                    | `docs/guide/ssg.md`                                                                       |
-| Deployment and CI                         | `docs/guide/deployment.md`, `docs/reference/cli.md`                                       |
-| Project status, deployment history        | `docs/reference/cli.md`                                                                   |
-| Cache purging                             | `docs/reference/cli.md`                                                                   |
-| Project logs, runtime errors              | `docs/reference/cli.md`                                                                   |
-| Secrets management (put/sync/delete)      | `docs/reference/cli.md`, `docs/guide/env-vars.md`                                         |
-| Typed env vars (`defineEnv`, `env.ts`)    | `docs/guide/env-vars.md`                                                                  |
-| Custom domain setup                       | `docs/reference/cli.md`                                                                   |
-| Database status, reset, seed, export      | `docs/reference/cli.md`, `docs/guide/database.md`                                         |
-| Auth login/logout/whoami                  | `docs/reference/cli.md`                                                                   |
-| Overview / introduction                   | `docs/guide/index.md`                                                                     |
-| API surface details                       | `docs/reference/api.md`                                                                   |
-| Meta framework integration                | `docs/integrations/frameworks/*.md`                                                       |
-| Coding agent setup                        | `docs/integrations/agents.md`                                                             |
-| Node.js / Bun / Deno targets              | `docs/integrations/nodejs-bun-deno.md`                                                    |
-| ORMs and external databases               | `docs/integrations/orms-and-external-dbs.md`                                              |
-| Project structure and conventions         | `docs/reference/structure.md`                                                             |
-| Resource/binding inference                | `docs/reference/resource-inference.md`                                                    |
+| User intent                                | Docs file(s)                                                                              |
+| ------------------------------------------ | ----------------------------------------------------------------------------------------- |
+| CLI command syntax, flags, env vars        | `docs/reference/cli.md`                                                                   |
+| Initial setup, onboarding, first app       | `docs/guide/quickstart.md`, `docs/reference/cli.md`                                       |
+| App type detection and mode behavior       | `docs/guide/app-types.md`, `docs/reference/config.md`                                     |
+| Server/API routing and middleware          | `docs/guide/server-routing.md`, `docs/integrations/hono.md`                               |
+| Pages mode, loader/action, forms, layouts  | `docs/guide/pages-routing/*.md`, `docs/guide/type-safety.md`                              |
+| Database and migrations                    | `docs/guide/database.md`, `docs/guide/type-safety.md`                                     |
+| Typed fetch and end-to-end typing          | `docs/guide/typed-fetch.md`, `docs/guide/type-safety.md`                                  |
+| Authentication                             | `docs/guide/auth.md`, `docs/guide/env-vars.md`                                            |
+| Cloudflare runtime bindings and config     | `docs/integrations/cloudflare.md`, `docs/reference/config.md`, `docs/guide/env-vars.md`   |
+| AI inference (Workers AI, providers)       | `docs/guide/ai.md`                                                                        |
+| KV / storage / queues / cron jobs          | `docs/guide/kv.md`, `docs/guide/storage.md`, `docs/guide/queues.md`, `docs/guide/jobs.md` |
+| SSR and caching                            | `docs/guide/ssr.md`, `docs/guide/edge/*.md`                                               |
+| Rewrites, redirects, fallbacks             | `docs/guide/edge/rewrites.md`, `docs/guide/edge/redirects.md`, `docs/reference/config.md` |
+| Static site generation                     | `docs/guide/ssg.md`                                                                       |
+| Deployment and CI                          | `docs/guide/deployment.md`, `docs/reference/cli.md`                                       |
+| Self-host deploy to own Cloudflare account | `docs/integrations/cloudflare.md`, `docs/reference/cli.md`                                |
+| Project status, deployment history         | `docs/reference/cli.md`                                                                   |
+| Cache purging                              | `docs/reference/cli.md`                                                                   |
+| Project logs, runtime errors               | `docs/reference/cli.md`                                                                   |
+| Secrets management (put/sync/delete)       | `docs/reference/cli.md`, `docs/guide/env-vars.md`                                         |
+| Typed env vars (`defineEnv`, `env.ts`)     | `docs/guide/env-vars.md`                                                                  |
+| Custom domain setup                        | `docs/reference/cli.md`                                                                   |
+| Database status, reset, seed, export       | `docs/reference/cli.md`, `docs/guide/database.md`                                         |
+| Auth login/logout/whoami                   | `docs/reference/cli.md`                                                                   |
+| Overview / introduction                    | `docs/guide/index.md`                                                                     |
+| API surface details                        | `docs/reference/api.md`                                                                   |
+| Meta framework integration                 | `docs/integrations/frameworks/*.md`                                                       |
+| Coding agent setup                         | `docs/integrations/agents.md`                                                             |
+| Node.js / Bun / Deno targets               | `docs/integrations/nodejs-bun-deno.md`                                                    |
+| ORMs and external databases                | `docs/integrations/orms-and-external-dbs.md`                                              |
+| Project structure and conventions          | `docs/reference/structure.md`                                                             |
+| Resource/binding inference                 | `docs/reference/resource-inference.md`                                                    |
 
 ## Working Rules