void 0.10.12 → 0.10.13

package/dist/index.mjs

@@ -1,24 +1,24 @@
 import { r as __toESM } from "./rolldown-runtime-DJK8HYOj.mjs";
 import { a as join, n as dirname, s as relative } from "./dist-DaKKDf8D.mjs";
 import { M as require_picocolors } from "./agents-CtgBYqld.mjs";
-import { A as resolveAssetRoutingPolicy, C as syncWranglerBindings, D as resolveSandboxConfig, E as isSandboxEnabled, O as hasApiRoutes, S as resolveLiveBindingConfig, T as SANDBOX_MIGRATION_TAG, _ as nextDurableObjectMigrationTag, a as prerenderPagesNode, c as filterLoadedEnv, d as LIVE_MIGRATION_TAG, g as hasDurableObjectSqliteMigration, h as ensureWranglerNodejsAlsFlag, i as prerenderPages, k as hasDocumentRoutes, l as resolveRemoteMode, m as ensureWranglerCompatibilityDate, n as resolveDistDir, o as collectRevalidate, p as ensureWranglerCompat, r as resolveWorkerDirName, s as hasRevalidate, u as stripInternalEnvKeys, v as normalizeWranglerCompatibilityFlags, x as readWranglerCompat, y as readExistingLiveBindingConfig } from "./deploy-u7Rv9q_q.mjs";
+import { A as resolveAssetRoutingPolicy, C as syncWranglerBindings, D as resolveSandboxConfig, E as isSandboxEnabled, O as hasApiRoutes, S as resolveLiveBindingConfig, T as SANDBOX_MIGRATION_TAG, _ as nextDurableObjectMigrationTag, a as prerenderPagesNode, c as filterLoadedEnv, d as LIVE_MIGRATION_TAG, g as hasDurableObjectSqliteMigration, h as ensureWranglerNodejsAlsFlag, i as prerenderPages, k as hasDocumentRoutes, l as resolveRemoteMode, m as ensureWranglerCompatibilityDate, n as resolveDistDir, o as collectRevalidate, p as ensureWranglerCompat, r as resolveWorkerDirName, s as hasRevalidate, u as stripInternalEnvKeys, v as normalizeWranglerCompatibilityFlags, x as readWranglerCompat, y as readExistingLiveBindingConfig } from "./deploy-jBJT1fUT.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-BQd7OmIo.mjs";
-import { a as scanQueuesSync, c as loadVoidAuthConfig, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, s as findVoidAuthConfig, t as scanMiddlewareSync } from "./scan-DYXkrasO.mjs";
+import { a as scanQueuesSync, c as loadVoidAuthConfig, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, s as findVoidAuthConfig, t as scanMiddlewareSync } from "./scan-ChWt4pX1.mjs";
 import { b as readProjectConfig, f as getToken, m as isStagingMode } from "./client-Gb71-XkG.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-BkTvs43g.mjs";
+import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-qHGgPuWT.mjs";
 import { a as inferBindingsFromSource, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, o as walk, r as detectFramework, t as DEFAULT_SCAN_DIRS } from "./plugin-inference-DMeavIJ6.mjs";
 import { a as validateSsrEntries, c as isIdentifier, l as isLiteral, n as SSR_SERVER_ENTRY_RELATIVE_PATHS, o as validateSsrEntry, t as SSR_CLIENT_ENTRY_RELATIVE_PATHS, u as isMemberExpression } from "./entry-D7yy4xVH.mjs";
 import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-ChfPKsVd.mjs";
 import { l as parseDotenvFile } from "./preset-BjyR3lzz.mjs";
-import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, o as DRIZZLE_OPERATORS, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-COI2DsZv.mjs";
+import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, o as DRIZZLE_OPERATORS, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-z1jtHEi_.mjs";
 import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";
 import { t as MagicString } from "./magic-string.es-ZQjdJFFn.mjs";
 import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-QBj-ndax.mjs";
 import { h as loadUserEnvFile } from "./env-validation-Dea3v3ej.mjs";
-import { i as resolveLayoutIds } from "./scan-DEwlM_Xy.mjs";
+import { i as resolveLayoutIds, o as isRouteEnabledForEnvironment } from "./scan-NU4xKGci.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-D-3_D-Gl.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-nsHIFixA.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-ChAADPQu.mjs";
 import { n as INTERNAL_BINDING_PREFIXES, t as INTERNAL_BINDING_EXACT_NAMES } from "./env-raw-Cx8ElDdj.mjs";
 import { n as defer } from "./defer-YsYDUoii.mjs";
 import { VoidAssetRewriteError, basicAuth, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled } from "./runtime/handler.mjs";
@@ -1687,7 +1687,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 					if (applied.length > 0) voidLog(`Applied ${applied.length} migration(s): ${applied.join(", ")}`);
 				}
 				if (auth?.enabled) {
-					const { runLocalVoidAuthMigrations } = await import("./node-Da0UcsGA.mjs");
+					const { runLocalVoidAuthMigrations } = await import("./node-pRg81HqV.mjs");
 					await runLocalVoidAuthMigrations(root, dialect, persistRoot, databaseId, auth.configPath);
 					voidLog("Applied Better Auth migrations");
 				}
@@ -4252,6 +4252,7 @@ const RESOLVE_ID_FILTER = /^(virtual:void-(routes|client-worker(?::(react|vue|sv
 const LOAD_ID_FILTER = /^virtual:void-(routes|client-worker(?::(react|vue|svelte|solid))?|client-browser(?::(react|vue|svelte|solid))?)$/;
 function routingPlugin(root, options) {
 	let scan = null;
+	let routeEnvironment = "prod";
 	let ssr = null;
 	let authConfigPath = null;
 	const paths = readProjectPaths(root);
@@ -4286,7 +4287,8 @@ function routingPlugin(root, options) {
 	async function rescan() {
 		scan = await scanRoutes(root, {
 			output: options.output,
-			paths
+			paths,
+			environment: routeEnvironment
 		});
 		authConfigPath = findVoidAuthConfig(root, paths);
 		const entries = validateSsrEntries(root, paths);
@@ -4493,6 +4495,7 @@ function routingPlugin(root, options) {
 			}
 		},
 		config(_, env) {
+			routeEnvironment = env.command === "serve" && !env.isPreview ? "dev" : "prod";
 			if (env.command === "serve" && options.isAuthEnabled()) return { resolve: { alias: [
 				"client",
 				"react",
@@ -5063,6 +5066,7 @@ function voidPlugin(options) {
 	const devTriggerToken = isViteBuildOrPreview() ? crypto.randomUUID() : getOrCreateDevTriggerToken(root);
 	const config = readConfig(root);
 	const paths = resolveProjectPaths(root, config);
+	let routeEnvironment = "prod";
 	assertNoRootSourceConventionConflicts(paths);
 	const dialect = getDatabaseDialect(config);
 	const detected = detectFramework(root);
@@ -5224,6 +5228,7 @@ function voidPlugin(options) {
 	}
 	const remoteMode = resolveRemoteMode(config.remote);
 	const workerConfig = {};
+	let assetRouting;
 	if (config.worker?.vars) workerConfig.vars = { ...config.worker.vars };
 	let viteCommand = "build";
 	const wranglerCompat = isNodeTarget(config.target) ? void 0 : readWranglerCompat(root, config);
@@ -5231,17 +5236,18 @@ function voidPlugin(options) {
 		workerConfig.compatibility_date = wranglerCompat.compatibilityDate;
 		if (wranglerCompat.compatibilityFlags) workerConfig.compatibility_flags = wranglerCompat.compatibilityFlags;
 	}
+	if (config.worker?.limits?.cpu_ms) workerConfig.limits = { cpu_ms: config.worker.limits.cpu_ms };
 	const inspectorPortEnv = process.env.VOID_INSPECTOR_PORT;
 	const inspectorPort = inspectorPortEnv === "false" ? false : typeof inspectorPortEnv === "string" && inspectorPortEnv.length > 0 ? Number.parseInt(inspectorPortEnv, 10) : void 0;
 	const inspectorPortOption = inspectorPort === false ? { inspectorPort: false } : typeof inspectorPort === "number" ? { inspectorPort } : {};
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	function mergeBindings(resolved) {
+		const environmentWebsocketRoutes = websocketRoutes.filter((route) => isRouteEnabledForEnvironment(route, routeEnvironment));
 		const result = { ...workerConfig };
-		const generatedAssets = workerConfig.assets;
-		if (generatedAssets && resolved.assets) {
-			if (generatedAssets.not_found_handling !== void 0) delete resolved.assets.not_found_handling;
-			if (generatedAssets.run_worker_first !== void 0) delete resolved.assets.run_worker_first;
+		if (workerConfig.assets && resolved.assets) {
+			delete resolved.assets.not_found_handling;
+			delete resolved.assets.run_worker_first;
 		}
 		const d1Name = bindingNames?.d1 ?? "DB";
 		const d1 = [];
@@ -5282,16 +5288,16 @@ function voidPlugin(options) {
 				...q.retryDelay != null && { retry_delay: q.retryDelay }
 			}))
 		};
-		if (websocketRoutes.length > 0) {
+		if (environmentWebsocketRoutes.length > 0) {
 			const existingDurableObjectBindings = resolved.durable_objects?.bindings ?? [];
-			const missingDurableObjectBindings = websocketRoutes.filter((route) => !existingDurableObjectBindings.some((binding) => binding.name === route.bindingName)).map((route) => ({
+			const missingDurableObjectBindings = environmentWebsocketRoutes.filter((route) => !existingDurableObjectBindings.some((binding) => binding.name === route.bindingName)).map((route) => ({
 				name: route.bindingName,
 				class_name: route.className
 			}));
 			if (missingDurableObjectBindings.length > 0) result.durable_objects = { bindings: [...existingDurableObjectBindings, ...missingDurableObjectBindings] };
 			if (!Array.isArray(resolved.migrations)) result.migrations = [{
 				tag: "void-ws-v1",
-				new_classes: websocketRoutes.map((route) => route.className)
+				new_classes: environmentWebsocketRoutes.map((route) => route.className)
 			}];
 		}
 		if (bindings.needsSandbox && sandboxConfig) {
@@ -5361,8 +5367,13 @@ function voidPlugin(options) {
 	const envPlugin = {
 		name: "void:env",
 		api: { getVoidDeployBuildConfig: () => voidDeployBuildConfig },
-		config(userConfig, { mode, command }) {
+		config(userConfig, { mode, command, isPreview }) {
 			viteCommand = command;
+			routeEnvironment = command === "serve" && !isPreview ? "dev" : "prod";
+			if (!framework && !isNodeTarget(config.target)) {
+				assetRouting = resolveConfiguredAssetRoutingPolicy();
+				applyAssetRoutingPolicy(assetRouting);
+			}
 			const ignored = ["**/.void/**"];
 			const rawEnvDir = typeof userConfig.envDir === "string" && userConfig.envDir.length > 0 ? userConfig.envDir : void 0;
 			voidDeployBuildConfig = {
@@ -5376,7 +5387,7 @@ function voidPlugin(options) {
 				...env
 			};
 			const assets = workerConfig.assets;
-			if (command === "serve" && assets?.run_worker_first?.includes("/**")) assets.run_worker_first = [...DEV_ASSET_ROUTING_EXCLUSIONS, "/**"];
+			if (command === "serve" && !isPreview && assets?.run_worker_first?.includes("/**")) assets.run_worker_first = [...DEV_ASSET_ROUTING_EXCLUSIONS, "/**"];
 			const watchConfig = { server: { watch: { ignored } } };
 			if (!isNodeTarget(config.target) && config.output !== "static") {
 				const envNames = framework === "vinext-app" ? ["rsc", "ssr"] : ["ssr"];
@@ -5478,18 +5489,15 @@ function voidPlugin(options) {
 	};
 	if (framework) {
 		workerConfig.main = getFrameworkEntry(framework, root, devTriggerToken, config.routing?.notFound);
+		let notFoundIgnoredWarned = false;
 		const frameworkBuildWrapperPlugin = {
 			name: "void:framework-build-wrapper",
-			config(_userConfig, env) {
-				const notFound = config.routing?.notFound;
-				if (env.command !== "build" || notFound === void 0) return;
-				workerConfig.assets = {
-					...workerConfig.assets,
-					not_found_handling: notFound
-				};
-			},
 			configResolved(resolved) {
 				if (resolved.command !== "build") return;
+				if (config.routing?.notFound !== void 0 && !process.env.VOID_DEPLOY_BUILD && !notFoundIgnoredWarned) {
+					notFoundIgnoredWarned = true;
+					voidWarn(`Void generates no asset routing policy for a ${framework} build, so "routing.notFound" in void.json is not written to the built worker config. On a self-hosted \`vite build && wrangler deploy\` it takes effect only if your own wrangler config declares a complete \`assets\` policy (\`binding\`, \`directory\`, \`not_found_handling\`, \`run_worker_first\`); otherwise Cloudflare's default applies. Managed \`void deploy\` supplies the policy for you.`);
+				}
 				generateClassATriggerWrapper(root, framework, getOriginalFrameworkEntry(framework, root), true, resolved.build.assetsDir, config.routing?.notFound);
 			}
 		};
@@ -5580,20 +5588,22 @@ function voidPlugin(options) {
 	const ssrEntry = validateSsrEntry(root, paths);
 	const hasPages = existsSync(paths.pagesDir);
 	const hasMiddleware = scanMiddlewareSync(root, paths).length > 0;
-	const routePatterns = scanRoutePatternsSync(root, paths);
-	const hasDocumentRoutes$1 = hasDocumentRoutes(routePatterns);
-	const hasApiRoutes$1 = hasApiRoutes(routePatterns) || hasApiRoutes(websocketRoutes) || authEnabled;
-	let assetRouting = resolveAssetRoutingPolicy({
-		isSsr: Boolean(ssrEntry),
-		hasPages,
-		hasApiRoutes: hasApiRoutes$1,
-		hasDocumentRoutes: hasDocumentRoutes$1,
-		hasMiddleware,
-		hasWebSockets: hasDocumentRoutes(websocketRoutes),
-		authEnabled,
-		liveEnabled: liveConfig !== void 0,
-		notFound: config.routing?.notFound
-	});
+	function resolveConfiguredAssetRoutingPolicy() {
+		const routePatterns = scanRoutePatternsSync(root, paths, routeEnvironment);
+		const environmentWebsocketRoutes = websocketRoutes.filter((route) => isRouteEnabledForEnvironment(route, routeEnvironment));
+		return resolveAssetRoutingPolicy({
+			isSsr: Boolean(ssrEntry),
+			hasPages,
+			hasApiRoutes: hasApiRoutes(routePatterns) || hasApiRoutes(environmentWebsocketRoutes) || authEnabled,
+			hasDocumentRoutes: hasDocumentRoutes(routePatterns),
+			hasMiddleware,
+			hasWebSockets: hasDocumentRoutes(environmentWebsocketRoutes),
+			authEnabled,
+			liveEnabled: liveConfig !== void 0,
+			notFound: config.routing?.notFound
+		});
+	}
+	assetRouting = resolveConfiguredAssetRoutingPolicy();
 	workerConfig.main = join(root, ".void", "entry.ts");
 	if (jobs.length > 0) workerConfig.triggers = { crons: jobs.flatMap((job) => job.crons) };
 	function applyAssetRoutingPolicy(policy) {

package/dist/{init-3rgHKBVi.mjs → init-7JCAcKNQ.mjs}

@@ -3,7 +3,7 @@ import { A as text, D as outro, E as note, S as confirm, T as log, a as cliTitle
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { S as writeProjectConfig, b as readProjectConfig, f as getToken, m as isStagingMode, n as PlatformClient } from "./client-Gb71-XkG.mjs";
 import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-BkTvs43g.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-qHGgPuWT.mjs";
 import { r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
 import { l as parseDotenvFile, r as formatProjectCommand, s as expandDotenv } from "./preset-BjyR3lzz.mjs";
 import { t as MagicString } from "./magic-string.es-ZQjdJFFn.mjs";

package/dist/{node-Da0UcsGA.mjs → node-pRg81HqV.mjs}

@@ -1,7 +1,7 @@
 import { a as join } from "./dist-DaKKDf8D.mjs";
-import { c as loadVoidAuthConfig, s as findVoidAuthConfig } from "./scan-DYXkrasO.mjs";
-import { f as readConfig } from "./config-BkTvs43g.mjs";
-import { a as resolveVoidAuthMigrationSchema } from "./route-types-COI2DsZv.mjs";
+import { c as loadVoidAuthConfig, s as findVoidAuthConfig } from "./scan-ChWt4pX1.mjs";
+import { f as readConfig } from "./config-qHGgPuWT.mjs";
+import { a as resolveVoidAuthMigrationSchema } from "./route-types-z1jtHEi_.mjs";
 import { n as applySqliteAuthMigrations, t as applyPgAuthMigrations } from "./auth-migrations-BTZ-ATvQ.mjs";
 import { getMiniflareDatabasePath } from "./runner-kapo9aPs.mjs";
 import { loadEnv } from "vite";

package/dist/pages/index.mjs

@@ -1,8 +1,8 @@
 import { a as join } from "../dist-DaKKDf8D.mjs";
 import { r as resolvePagesDir } from "../project-paths-BQd7OmIo.mjs";
-import { f as readConfig } from "../config-BkTvs43g.mjs";
-import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, r as resolveLayoutChain, t as scanPages } from "../scan-DEwlM_Xy.mjs";
-import { i as parseRedirectsFile } from "../headers-nsHIFixA.mjs";
+import { f as readConfig } from "../config-qHGgPuWT.mjs";
+import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, r as resolveLayoutChain, t as scanPages } from "../scan-NU4xKGci.mjs";
+import { i as parseRedirectsFile } from "../headers-ChAADPQu.mjs";
 import { renderBodyAttrs, renderHeadToString, renderHtmlAttrs, resolveHead } from "./head.mjs";
 import { serializePageData } from "./serialize.mjs";
 //#region src/pages/manifest.ts

package/dist/pages/islands-plugin.mjs

@@ -1,5 +1,5 @@
 import { c as resolve, n as dirname } from "../dist-DaKKDf8D.mjs";
-import { n as resolveEffectiveLayoutChain, t as scanPages } from "../scan-DEwlM_Xy.mjs";
+import { n as resolveEffectiveLayoutChain, t as scanPages } from "../scan-NU4xKGci.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { normalizePath } from "vite";
 //#region src/pages/islands-plugin.ts

package/dist/{prepare-BoKHgMNx.mjs → prepare-BvvgAz-3.mjs}

@@ -1,11 +1,11 @@
 import { a as join } from "./dist-DaKKDf8D.mjs";
 import { D as outro, E as note, T as log, a as cliTitle, w as intro } from "./agents-CtgBYqld.mjs";
 import { i as resolveProjectPaths } from "./project-paths-BQd7OmIo.mjs";
-import { c as loadVoidAuthConfig, r as scanRoutes, s as findVoidAuthConfig } from "./scan-DYXkrasO.mjs";
+import { c as loadVoidAuthConfig, r as scanRoutes, s as findVoidAuthConfig } from "./scan-ChWt4pX1.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-BkTvs43g.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-qHGgPuWT.mjs";
 import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
-import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-COI2DsZv.mjs";
+import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-z1jtHEi_.mjs";
 import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";
 import { r as generateEnvTypes, t as findEnvFile } from "./env-types-QBj-ndax.mjs";
 import { existsSync, mkdirSync, rmSync } from "node:fs";

package/dist/{provision-rShh6MKY.mjs → provision-CPx2ZxsH.mjs}

@@ -1,5 +1,5 @@
 import { a as join, c as resolve, n as dirname, o as normalize, t as basename } from "./dist-DaKKDf8D.mjs";
-import { b as readProvisionedBindingEntry, f as assertNoDuplicateMembers, w as writeProvisionedWranglerConfig } from "./deploy-u7Rv9q_q.mjs";
+import { b as readProvisionedBindingEntry, f as assertNoDuplicateMembers, w as writeProvisionedWranglerConfig } from "./deploy-jBJT1fUT.mjs";
 import { i as voidWarn, r as voidLog } from "./log-ChfPKsVd.mjs";
 import { o as resolveWranglerArgv, u as scanWranglerDotenvKeys } from "./preset-BjyR3lzz.mjs";
 import { createRequire } from "node:module";

package/dist/{route-types-COI2DsZv.mjs → route-types-z1jtHEi_.mjs}

@@ -283,7 +283,14 @@ function generateVoidAuthDatabaseModule(options) {
 		`import { db as __voidDb } from "void/db";`,
 		`import { schema as __voidAuthSchema } from ${schemaImport};`,
 		"",
-		`export const __voidAuthDatabase = drizzleAdapter(__voidDb, { provider: ${JSON.stringify(provider)}, schema: __voidAuthSchema });`,
+		"// Better Auth reads Drizzle metadata while creating the adapter.",
+		"// Defer that work until request handling, when runtime bindings are available.",
+		"let __voidAuthDatabaseInstance: ReturnType<typeof drizzleAdapter> | undefined;",
+		"",
+		"export const __voidAuthDatabase: ReturnType<typeof drizzleAdapter> = (options) => {",
+		`  __voidAuthDatabaseInstance ??= drizzleAdapter(__voidDb, { provider: ${JSON.stringify(provider)}, schema: __voidAuthSchema });`,
+		"  return __voidAuthDatabaseInstance(options);",
+		"};",
 		""
 	].join("\n");
 }

package/dist/{scan-DYXkrasO.mjs → scan-ChWt4pX1.mjs}

@@ -2,7 +2,7 @@ import { a as join, i as isAbsolute, t as basename } from "./dist-DaKKDf8D.mjs";
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { n as globSync, t as glob } from "./dist-BuiRJkTd.mjs";
 import { c as isIdentifier, d as isObjectExpression, l as isLiteral, s as isCallExpression } from "./entry-D7yy4xVH.mjs";
-import { o as parseRouteFilename, s as parseWebSocketFilename, t as scanPages } from "./scan-DEwlM_Xy.mjs";
+import { c as parseWebSocketFilename, o as isRouteEnabledForEnvironment, s as parseRouteFilename, t as scanPages } from "./scan-NU4xKGci.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { parseSync } from "vite";
@@ -261,19 +261,19 @@ function buildWebSocketRoute(root, filePath, paths = readProjectPaths(root)) {
 		hasAuthGate: info?.hasAuthGate ?? false
 	};
 }
-function parseWebSocketFiles(root, files, paths = readProjectPaths(root)) {
-	return files.filter((f) => isWebSocketRouteFile(f)).filter((f) => !f.split("/").some((segment) => segment.startsWith("_"))).map((filePath) => buildWebSocketRoute(root, filePath, paths)).sort((a, b) => {
+function parseWebSocketFiles(root, files, paths = readProjectPaths(root), environment) {
+	return files.filter((f) => isWebSocketRouteFile(f)).filter((f) => !f.split("/").some((segment) => segment.startsWith("_"))).filter((filePath) => isRouteEnabledForEnvironment(parseWebSocketFilename(filePath), environment)).map((filePath) => buildWebSocketRoute(root, filePath, paths)).sort((a, b) => {
 		if (a.catchAll !== b.catchAll) return a.catchAll ? 1 : -1;
 		return a.pattern.localeCompare(b.pattern);
 	});
 }
-async function scanWebSocketRoutes(root, paths = readProjectPaths(root)) {
+async function scanWebSocketRoutes(root, paths = readProjectPaths(root), environment) {
 	return parseWebSocketFiles(root, await glob(`**/*.{${HANDLER_EXTENSIONS.join(",")}}`, {
 		cwd: paths.routesDir,
 		absolute: false
-	}).catch(() => []), paths);
+	}).catch(() => []), paths, environment);
 }
-function scanWebSocketRoutesSync(root, paths = readProjectPaths(root)) {
+function scanWebSocketRoutesSync(root, paths = readProjectPaths(root), environment) {
 	const pattern = `**/*.{${HANDLER_EXTENSIONS.join(",")}}`;
 	let files;
 	try {
@@ -284,7 +284,7 @@ function scanWebSocketRoutesSync(root, paths = readProjectPaths(root)) {
 	} catch {
 		files = [];
 	}
-	return parseWebSocketFiles(root, files, paths);
+	return parseWebSocketFiles(root, files, paths, environment);
 }
 function isWebSocketPatternFile(filePath) {
 	return isWebSocketRouteFile(filePath);
@@ -329,7 +329,7 @@ async function scanRoutes(root, options) {
 			cwd: paths.routesDir,
 			absolute: false
 		}),
-		scanWebSocketRoutes(root, paths),
+		scanWebSocketRoutes(root, paths, options?.environment),
 		glob(ROUTE_PATTERN, {
 			cwd: paths.middlewareDir,
 			absolute: false
@@ -343,9 +343,8 @@ async function scanRoutes(root, options) {
 	]);
 	const routesDir = paths.routesDir;
 	return {
-		routes: routeFiles.filter((f) => !isWebSocketPatternFile(f)).filter((f) => !f.split("/").some((s) => s.startsWith("_"))).map((f) => {
-			const route = parseRouteFilename(f);
-			route.methods = detectHttpExports(join(routesDir, f));
+		routes: routeFiles.filter((f) => !isWebSocketPatternFile(f)).filter((f) => !f.split("/").some((s) => s.startsWith("_"))).map((file) => parseRouteFilename(file)).filter((route) => isRouteEnabledForEnvironment(route, options?.environment)).map((route) => {
+			route.methods = detectHttpExports(join(routesDir, route.filePath));
 			return route;
 		}).sort(compareRouteSpecificity),
 		websockets,
@@ -367,7 +366,7 @@ function scanMiddlewareSync(root, paths = readProjectPaths(root)) {
 	}
 	return parseMiddlewareDefinitions(middlewareFiles);
 }
-function scanRoutePatternsSync(root, paths = readProjectPaths(root)) {
+function scanRoutePatternsSync(root, paths = readProjectPaths(root), environment) {
 	let routeFiles;
 	try {
 		routeFiles = globSync(ROUTE_PATTERN, {
@@ -377,7 +376,7 @@ function scanRoutePatternsSync(root, paths = readProjectPaths(root)) {
 	} catch {
 		routeFiles = [];
 	}
-	return routeFiles.filter((f) => !isWebSocketPatternFile(f)).filter((f) => !f.split("/").some((s) => s.startsWith("_"))).map((f) => parseRouteFilename(f)).sort(compareRouteSpecificity);
+	return routeFiles.filter((f) => !isWebSocketPatternFile(f)).filter((f) => !f.split("/").some((s) => s.startsWith("_"))).map((f) => parseRouteFilename(f)).filter((route) => isRouteEnabledForEnvironment(route, environment)).sort(compareRouteSpecificity);
 }
 //#endregion
 export { scanQueuesSync as a, loadVoidAuthConfig as c, scanWebSocketRoutesSync as i, scanRoutePatternsSync as n, scanJobsSync as o, scanRoutes as r, findVoidAuthConfig as s, scanMiddlewareSync as t };

package/dist/{scan-DEwlM_Xy.mjs → scan-NU4xKGci.mjs}

@@ -74,6 +74,9 @@ function parseRouteFilename(relativePath) {
 function parseWebSocketFilename(relativePath) {
 	return parsePath(relativePath, true);
 }
+function isRouteEnabledForEnvironment(route, environment) {
+	return environment === void 0 || route.env === null || route.env === environment;
+}
 //#endregion
 //#region src/pages/layout-resolution.ts
 function isNamedLayout(layout) {
@@ -348,4 +351,4 @@ function extractFrontmatterLayout(source) {
 	return value;
 }
 //#endregion
-export { resolveNamedLayout as a, resolveLayoutIds as i, resolveEffectiveLayoutChain as n, parseRouteFilename as o, resolveLayoutChain as r, parseWebSocketFilename as s, scanPages as t };
+export { resolveNamedLayout as a, parseWebSocketFilename as c, resolveLayoutIds as i, resolveEffectiveLayoutChain as n, isRouteEnabledForEnvironment as o, resolveLayoutChain as r, parseRouteFilename as s, scanPages as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.12",
+  "version": "0.10.13",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -356,7 +356,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.12"
+    "@void/md": "0.10.13"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/schema.json

@@ -360,6 +360,19 @@
           "type": "object",
           "description": "Environment variables (plain text, not secrets)",
           "additionalProperties": { "type": "string" }
+        },
+        "limits": {
+          "type": "object",
+          "description": "Worker resource limit overrides.",
+          "properties": {
+            "cpu_ms": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 300000,
+              "description": "Caps Workers CPU time per request, in milliseconds (max 300000 = 5 minutes). The platform plan may cap it lower."
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false

package/skills/migrate-vite-cloudflare-to-void/SKILL.md

@@ -103,7 +103,7 @@ Apply these filename rules exactly when mapping old handlers to `routes/`:
 1. Extension and suffix parsing order
 
 - Strip extension (`.ts`, `.js`, `.mts`, `.mjs`).
-- Strip env suffix (`.dev`, `.prod`).
+- Strip env suffix (`.dev`, `.prod`). The suffix restricts the route to that environment, so only use it for handlers that must not ship to the other one.
 - Strip HTTP method suffix (`.get`, `.post`, `.put`, `.delete`, `.patch`).
 - Strip trailing `index` segment.
 - Remove route group segments `(group-name)` from URL path.

package/skills/void/docs/guide/deployment.md

@@ -62,10 +62,77 @@ If your CI pipeline runs typechecking or other static analysis before deploy, ru
 | `VOID_TOKEN`   | Auth token (for CI, skips OAuth) |
 | `VOID_PROJECT` | Project slug override            |
 
-## GitHub Actions
+## GitHub
 
 You can deploy from a GitHub repo on every push to `main`. Running `void init --github` generates `.github/workflows/void-deploy.yml` in your project.
 
+### Void GitHub App (recommended)
+
+No `.github/workflows/void-deploy.yml` or repository `VOID_TOKEN` is required.
+
+1. Initialize your Void project
+
+```bash
+void init
+# Or, for existing Void project:
+void project link
+```
+
+2. Install the Void GitHub app
+
+```bash
+void github install
+```
+
+You should receive GitHub url asking you to install and authorize `Void Deploy`.
+
+In the browser, select the GitHub account/organization and grant access to the repository.
+
+:::details If someone already installed the App for your organization
+Join that installation instead:
+
+```bash
+void github join
+```
+
+:::
+
+3. Link your repository to your project
+
+```bash
+void github connect --executor container
+```
+
+4. Verify the connection
+
+```bash
+void github status
+```
+
+You should receive an output like:
+
+```bash
+Repository      <owner/repository>
+Branch          main
+Build executor  container
+Deploy workflow .github/workflows/void-deploy.yml (unused for container builds)
+
+```
+
+5. Push to the configured branch to trigger a new deploy
+
+```bash
+git push origin main
+```
+
+6. Follow the build
+
+```bash
+void build logs --follow
+```
+
+### GitHub Actions
+
 The workflow authenticates with [GitHub OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) — there is **no long-lived `VOID_TOKEN` secret to store or rotate**. `void deploy` detects GitHub Actions and does the exchange itself: it requests a short-lived OIDC token from GitHub (audience `void`), exchanges it at `POST $VOID_API_URL/auth/github-oidc` for a short-lived project-scoped deploy token (about 15 minutes on the free tier; longer on higher plans, capped at ~60 minutes), and deploys — so the workflow is a single `void deploy` step. `permissions: id-token: write` is still required: it is what lets the job (and the CLI) mint the OIDC token.
 
 ```yaml

package/skills/void/docs/guide/edge/static-assets.md

@@ -118,11 +118,24 @@ The SPA fallback is right for a single-page app, where deep links must boot the
 
 Accepted values are `"single-page-application"`, `"404-page"`, and `"none"`. `run_worker_first` keeps its inferred value, so API routes, auth, and `/__void/*` still reach the worker first. Setting anything other than `"single-page-application"` also turns off the worker-side `index.html` fallback described above — otherwise it would answer the request before `not_found_handling` was ever consulted. With `"404-page"` the worker serves whatever the asset binding returns for the unmatched path, which is Cloudflare's nearest `404.html` — but only for HTML navigations (requests whose `Accept` includes `text/html`), so an API route that deliberately returns a 404 keeps its own body, status and headers. If the build has no `404.html`, the worker's own 404 is kept.
 
-The last row is the exception: `routing.notFound` is **ignored** for SvelteKit, Nuxt, Analog, and Astro deploys, and `void deploy` warns when you set it. Those deploys emit no `run_worker_first`, so the asset layer already answers first and real prerendered files win — `not_found_handling` would only change what the framework's own `env.ASSETS.fetch()` delegation returns, where `"single-page-application"` turns genuine 404s into the prerendered home page at 200 and `"404-page"` takes the 404 away from the framework's own error route. TanStack Start and React Router deploys are not affected; they follow the rows above.
+The last row is the exception: `routing.notFound` is **ignored** for SvelteKit, Nuxt, Analog, and Astro deploys, and `void deploy` warns when you set it. Those deploys emit no `run_worker_first`, so the asset layer already answers first and real prerendered files win — `not_found_handling` would only change what the framework's own `env.ASSETS.fetch()` delegation returns, where `"single-page-application"` turns genuine 404s into the prerendered home page at 200 and `"404-page"` takes the 404 away from the framework's own error route.
+
+TanStack Start, React Router, and vinext follow the rows above on a managed `void deploy` — that path resolves the asset config itself and applies it to the uploaded worker. Void writes no `assets` policy into their generated worker wrangler config:
+
+| Framework      | Generated worker config      |
+| -------------- | ---------------------------- |
+| TanStack Start | `dist/server/wrangler.json`  |
+| React Router   | `build/server/wrangler.json` |
+| vinext (App)   | `dist/server/wrangler.json`  |
+| vinext (Pages) | `dist/ssr/wrangler.json`     |
+
+So on a self-hosted `wrangler deploy` the setting takes effect only if that config declares a complete `assets` policy of its own — `binding`, `directory`, `not_found_handling`, and `run_worker_first`. Void leaves those fields alone, so a policy you write yourself is honored by the generated wrapper; with no policy at all, Cloudflare's default applies. `vite build` warns when `routing.notFound` is set so the choice is not silent.
 
 ### Generated config
 
-Void owns the generated asset routing policy during dev and build. If a root `wrangler.jsonc` contains stale `not_found_handling` or `run_worker_first` values, Void replaces those fields so generated config cannot accidentally change which layer sees a request first.
+Void owns the generated asset routing policy during dev and build for Void apps. If a root `wrangler.jsonc` contains stale `not_found_handling` or `run_worker_first` values, Void replaces those fields so generated config cannot accidentally change which layer sees a request first.
+
+TanStack Start and React Router are the exception: Void generates no asset policy for them and leaves both fields to your own wrangler config. Writing `not_found_handling` alone would make the asset layer answer unmatched requests and the framework worker would never run, and completing the policy needs `assets.binding` and `assets.directory` that the framework owns, not Void.
 
 ## API routes and SSR pages
 

package/skills/void/docs/guide/server-routing.md

@@ -14,7 +14,27 @@ Create route handlers in `routes/**/*.ts`. Each file maps to a URL path based on
 
 Dynamic segments use brackets: `[id]` becomes a route parameter and `[...slug]` becomes a catch-all. Files or directories starting with `_` are ignored. Directories wrapped in parentheses like `(admin)` are route groups. They help organize files without changing the URL.
 
-You can add a `.dev` or `.prod` suffix before the extension (e.g. `debug.dev.ts`) to include a route only in that environment.
+### Environment-only routes
+
+Add a `.dev` or `.prod` suffix before the extension to include a route in only one environment:
+
+```
+routes/
+  api/health.ts        →  always
+  api/debug.dev.ts     →  development only
+  api/metrics.prod.ts  →  production only
+```
+
+`dev` is the Vite dev server. `prod` is every build, `void deploy`, and `vite preview` — preview serves a production build, so it uses the production routes.
+
+An excluded route is stripped from the worker bundle, from the generated types, and from the generated route and WebSocket config. It is not compiled and it is not deployed.
+
+Two things do not follow the suffix:
+
+- `void prepare` boots no Vite, so it has no environment to read. It generates types for every route in both environments.
+- [Binding inference](../reference/resource-inference.md) scans your source for imports and does not read the suffix. A `void/storage` import inside `api/debug.dev.ts` still adds an R2 binding to your production config, and `void deploy` still provisions the bucket. Set the binding explicitly with [`inference.bindings`](../reference/config.md#inference-bindings) if you do not want it.
+
+The suffix applies to files in `routes/` only. It has no effect in `pages/`, `middleware/`, `crons/`, or `queues/`.
 
 Each file exports named HTTP method constants to handle specific methods:
 

package/skills/void/docs/guide/websockets.md

@@ -28,6 +28,9 @@ Filename rules match regular server routes:
 - `[id].ws.ts` becomes `:id`
 - `[...slug].ws.ts` becomes a catch-all
 - route groups like `(marketing)/chat.ws.ts` are ignored in the URL
+- `chat.dev.ws.ts` / `chat.prod.ws.ts` restrict the route to one environment
+
+The environment suffix goes **before** `.ws`. `chat.ws.dev.ts` is not recognised.
 
 ## `defineRoom()`
 

package/skills/void/docs/node_modules/void/CLAUDE.md

@@ -144,7 +144,7 @@ Build output uses `.mjs` / `.d.mts` extensions (`vp pack` / tsdown default).
 Applied in order to a path relative to `routes/`:
 
 1. Strip extension (`.ts`, `.js`, `.mts`, `.mjs`)
-2. Strip env suffix (`.dev`, `.prod`)
+2. Strip env suffix (`.dev`, `.prod`) and record it on `RouteDefinition.env`
 3. Strip trailing `index`
 4. Remove route group dirs `(groupname)`
 5. Convert `[param]` → `:param`, `[...param]` → `:param{.+}`, `[...]` → `*`
@@ -152,6 +152,8 @@ Applied in order to a path relative to `routes/`:
 
 HTTP methods are determined by **named exports** in each file (detected by `detect-exports.ts` via `parseSync`), not by filename suffixes. Files/dirs starting with `_` are ignored by the scanner.
 
+The recorded `env` is enforced by `isRouteEnabledForEnvironment()`. The scanners take an optional `environment` (`'dev' | 'prod'`); when it is omitted no filtering happens. `dev` is the Vite dev server, `prod` is every build, `void deploy`, and `vite preview`. A dev-only route is absent from the production bundle, types, and generated route/WebSocket config. Two paths do not follow it: `void prepare` boots no Vite, passes no `environment`, and so generates types for both environments; and `inferProjectBindings()` (`plugin-inference.ts`) globs source files without parsing route filenames, so a `void/storage` import in a `.dev.ts` route still emits and provisions an R2 binding in production. Over-emitting is the deliberate safe direction — under-emitting would drop a binding the running code needs — and the environment is not knowable at the `inferProjectBindings()` call site anyway (`index.ts:678`, versus `routeEnvironment` at `index.ts:1324`). The suffix is honoured in `routes/` only, not in `pages/`, `middleware/`, `crons/`, or `queues/`.
+
 ## Code Generation (`void gen`)
 
 Rails/Laravel-style scaffolding commands for common boilerplate:

package/skills/void/docs/node_modules/void/skills/migrate-vite-cloudflare-to-void/SKILL.md

@@ -103,7 +103,7 @@ Apply these filename rules exactly when mapping old handlers to `routes/`:
 1. Extension and suffix parsing order
 
 - Strip extension (`.ts`, `.js`, `.mts`, `.mjs`).
-- Strip env suffix (`.dev`, `.prod`).
+- Strip env suffix (`.dev`, `.prod`). The suffix restricts the route to that environment, so only use it for handlers that must not ship to the other one.
 - Strip HTTP method suffix (`.get`, `.post`, `.put`, `.delete`, `.patch`).
 - Strip trailing `index` segment.
 - Remove route group segments `(group-name)` from URL path.