void 0.10.13 → 0.20.0

package/dist/{auth-migrations-BTZ-ATvQ.mjs → auth-migrations-9vif1uj8.mjs}

@@ -1,6 +1,6 @@
 //#region src/runtime/auth-migrations.ts
-function quoteIdentifier(name) {
-	return `"${name.replaceAll("\"", "\"\"")}"`;
+function quoteIdentifier(name, dialect) {
+	return dialect === "mysql" ? `\`${name.replaceAll("`", "``")}\`` : `"${name.replaceAll("\"", "\"\"")}"`;
 }
 function quotePragmaArg(name) {
 	return `'${name.replaceAll("'", "''")}'`;
@@ -10,6 +10,17 @@ function createIndexName(tableName, fieldName, unique) {
 }
 function resolveColumnType(dialect, idStrategy, fieldName, field) {
 	const useIdType = fieldName === "id" || field.references?.field === "id";
+	if (dialect === "mysql") {
+		if (useIdType) {
+			if (fieldName === "id" && idStrategy === "serial") return "int AUTO_INCREMENT";
+			return idStrategy === "serial" ? "int" : idStrategy === "uuid" ? "varchar(36)" : "varchar(255)";
+		}
+		if (field.type === "boolean") return "boolean";
+		if (field.type === "date") return "datetime(3)";
+		if (field.type === "number") return field.bigint ? "bigint" : "int";
+		if (field.type === "json" || field.type === "string[]" || field.type === "number[]") return "json";
+		return field.unbounded ? "text" : "varchar(255)";
+	}
 	if (dialect === "postgresql") {
 		if (useIdType) {
 			if (fieldName === "id" && idStrategy === "serial") return "integer GENERATED BY DEFAULT AS IDENTITY";
@@ -29,10 +40,10 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 	return "TEXT";
 }
 function buildColumnDefinition(dialect, schema, fieldName, field, options = {}) {
-	const parts = [`${quoteIdentifier(fieldName)} ${resolveColumnType(dialect, schema.idStrategy, fieldName, field)}`];
+	const parts = [`${quoteIdentifier(fieldName, dialect)} ${resolveColumnType(dialect, schema.idStrategy, fieldName, field)}`];
 	if (options.primaryKey) parts.push("PRIMARY KEY");
 	if (field.required || options.primaryKey) parts.push("NOT NULL");
-	if (field.references) parts.push(`REFERENCES ${quoteIdentifier(field.references.table)}(${quoteIdentifier(field.references.field)}) ON DELETE ${String(field.references.onDelete ?? "cascade").toUpperCase()}`);
+	if (field.references) parts.push(`REFERENCES ${quoteIdentifier(field.references.table, dialect)}(${quoteIdentifier(field.references.field, dialect)}) ON DELETE ${String(field.references.onDelete ?? "cascade").toUpperCase()}`);
 	return parts.join(" ");
 }
 function buildCreateTableSql(schema, table) {
@@ -44,14 +55,17 @@ function buildCreateTableSql(schema, table) {
 		index: false,
 		bigint: false
 	}, { primaryKey: true }), ...Object.entries(table.fields).map(([fieldName, field]) => buildColumnDefinition(dialect, schema, fieldName, field))];
-	return `CREATE TABLE IF NOT EXISTS ${quoteIdentifier(table.name)} (${columns.join(", ")})`;
+	return `CREATE TABLE IF NOT EXISTS ${quoteIdentifier(table.name, dialect)} (${columns.join(", ")})`;
 }
 function buildAddColumnSql(schema, tableName, fieldName, field) {
-	const ifNotExists = schema.dialect === "postgresql" ? " IF NOT EXISTS" : "";
-	return `ALTER TABLE ${quoteIdentifier(tableName)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field)}`;
+	const ifNotExists = schema.dialect === "sqlite" ? "" : " IF NOT EXISTS";
+	return `ALTER TABLE ${quoteIdentifier(tableName, schema.dialect)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field)}`;
 }
-function buildCreateIndexSql(tableName, fieldName, unique) {
-	return `CREATE ${unique ? "UNIQUE " : ""}INDEX IF NOT EXISTS ${quoteIdentifier(createIndexName(tableName, fieldName, unique))} ON ${quoteIdentifier(tableName)} (${quoteIdentifier(fieldName)})`;
+function buildModifyMySqlColumnSql(schema, tableName, fieldName, field) {
+	return `ALTER TABLE ${quoteIdentifier(tableName, "mysql")} MODIFY COLUMN ${buildColumnDefinition("mysql", schema, fieldName, field)}`;
+}
+function buildCreateIndexSql(dialect, tableName, fieldName, unique) {
+	return `CREATE ${unique ? "UNIQUE " : ""}INDEX${dialect === "mysql" ? "" : " IF NOT EXISTS"} ${quoteIdentifier(createIndexName(tableName, fieldName, unique), dialect)} ON ${quoteIdentifier(tableName, dialect)} (${quoteIdentifier(fieldName, dialect)})`;
 }
 async function ensureSqliteIndexes(runner, table) {
 	const indexRows = await runner.all(`PRAGMA index_list(${quotePragmaArg(table.name)})`);
@@ -60,7 +74,7 @@ async function ensureSqliteIndexes(runner, table) {
 		if (!field.index && !field.unique) continue;
 		const indexName = createIndexName(table.name, fieldName, field.unique);
 		if (existingIndexes.has(indexName)) continue;
-		await runner.run(buildCreateIndexSql(table.name, fieldName, field.unique));
+		await runner.run(buildCreateIndexSql("sqlite", table.name, fieldName, field.unique));
 	}
 }
 async function ensurePgIndexes(runner, schemaName, table) {
@@ -70,7 +84,7 @@ async function ensurePgIndexes(runner, schemaName, table) {
 		if (!field.index && !field.unique) continue;
 		const indexName = createIndexName(table.name, fieldName, field.unique);
 		if (existingIndexes.has(indexName)) continue;
-		await runner.run(buildCreateIndexSql(table.name, fieldName, field.unique));
+		await runner.run(buildCreateIndexSql("postgresql", table.name, fieldName, field.unique));
 	}
 }
 async function applySqliteAuthMigrations(runner, schema) {
@@ -113,5 +127,32 @@ async function applyPgAuthMigrations(runner, schema) {
 		await ensurePgIndexes(runner, schemaName, table);
 	}
 }
+async function applyMySqlAuthMigrations(runner, schema) {
+	const databaseRows = await runner.all("SELECT DATABASE() AS database_name");
+	const databaseName = String(databaseRows[0]?.database_name ?? "");
+	const tableRows = await runner.all("SELECT table_name FROM information_schema.tables WHERE table_schema = ? AND table_type = 'BASE TABLE'", [databaseName]);
+	const existingTables = new Set(tableRows.map((row) => String(row.table_name)));
+	for (const table of schema.tables) {
+		if (!existingTables.has(table.name)) {
+			await runner.run(buildCreateTableSql(schema, table));
+			existingTables.add(table.name);
+		} else {
+			const columnRows = await runner.all("SELECT column_name, data_type, character_maximum_length FROM information_schema.columns WHERE table_schema = ? AND table_name = ?", [databaseName, table.name]);
+			const existingColumns = new Map(columnRows.map((row) => [String(row.column_name), row]));
+			for (const [fieldName, field] of Object.entries(table.fields)) {
+				const existingColumn = existingColumns.get(fieldName);
+				if (!existingColumn) await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));
+				else if (field.unbounded && String(existingColumn.data_type ?? "").toLowerCase() === "varchar") await runner.run(buildModifyMySqlColumnSql(schema, table.name, fieldName, field));
+			}
+		}
+		const indexRows = await runner.all("SELECT index_name FROM information_schema.statistics WHERE table_schema = ? AND table_name = ?", [databaseName, table.name]);
+		const existingIndexes = new Set(indexRows.map((row) => String(row.index_name)));
+		for (const [fieldName, field] of Object.entries(table.fields)) {
+			if (!field.index && !field.unique) continue;
+			const indexName = createIndexName(table.name, fieldName, field.unique);
+			if (!existingIndexes.has(indexName)) await runner.run(buildCreateIndexSql("mysql", table.name, fieldName, field.unique));
+		}
+	}
+}
 //#endregion
-export { applySqliteAuthMigrations as n, applyPgAuthMigrations as t };
+export { applyPgAuthMigrations as n, applySqliteAuthMigrations as r, applyMySqlAuthMigrations as t };

package/dist/{better-auth-shared-BQooDxbw.mjs → better-auth-shared-CYw1T3k4.mjs}

@@ -22,7 +22,7 @@ const PASSWORD_SALT_LENGTH = 16;
 const SCRYPT_KEY_LENGTH = 64;
 const SCRYPT_OPTIONS = {
 	N: 16384,
-	maxmem: 128 * 16384 * 16 * 2,
+	maxmem: 67108864,
 	p: 1,
 	r: 16
 };
@@ -46,8 +46,9 @@ const voidAuthPassword = {
 		const [salt, key, ...extra] = hash.split(":");
 		if (!salt || !key || extra.length > 0) return false;
 		const storedKey = Buffer.from(key, "hex");
-		if (key.length !== SCRYPT_KEY_LENGTH * 2 || storedKey.length !== SCRYPT_KEY_LENGTH) return false;
-		return timingSafeEqual(await derivePasswordKey(password, salt), storedKey);
+		if (key.length !== 128 || storedKey.length !== SCRYPT_KEY_LENGTH) return false;
+		const targetKey = await derivePasswordKey(password, salt);
+		return timingSafeEqual(targetKey, storedKey);
 	}
 };
 function resolveEmailAndPassword(configuredProviders) {
@@ -79,14 +80,10 @@ function resolveSocialProviders(env, configuredProviders) {
 	}
 	return Object.keys(providers).length > 0 ? providers : void 0;
 }
-function appendAuthHeaders(target, source) {
+function appendAuthHeaders(c, source) {
 	if (!source) return;
 	source.forEach((value, key) => {
-		if (key.toLowerCase() === "set-cookie") {
-			target.append(key, value);
-			return;
-		}
-		target.set(key, value);
+		c.header(key, value, { append: key.toLowerCase() === "set-cookie" });
 	});
 }
 function resolveUserConfig(userConfig, defaults, request, env, dialect) {
@@ -181,7 +178,7 @@ function createVoidAuthRuntime(dialect, resolveDatabase, runVoidAuthMigrations)
 			}, async () => {
 				await next();
 			});
-			appendAuthHeaders(c.res.headers, result.headers);
+			appendAuthHeaders(c, result.headers);
 		} finally {
 			await dispose();
 		}

package/dist/{better-auth-shared-DealXecJ.d.mts → better-auth-shared-DSCeohOK.d.mts}

@@ -1,9 +1,13 @@
-import { t as VoidAuthProvider } from "./providers-BNKRacMr.mjs";
-import { i as VoidAuthConfig, n as AuthState } from "./auth-qgMlYp7Z.mjs";
+import { i as VoidAuthConfig, n as AuthState } from "./auth-DkcFflXV.mjs";
 import { DBFieldAttribute } from "better-auth/db";
 import { BetterAuthOptions, betterAuth } from "better-auth";
 import { Context } from "hono";
-
+//#region src/auth/providers.d.ts
+declare const VOID_SOCIAL_AUTH_PROVIDERS: readonly ["apple", "atlassian", "cognito", "discord", "dropbox", "facebook", "figma", "github", "gitlab", "google", "huggingface", "kakao", "kick", "line", "linear", "linkedin", "microsoft", "naver", "notion", "paybin", "paypal", "polar", "railway", "reddit", "roblox", "salesforce", "slack", "spotify", "tiktok", "twitch", "twitter", "vercel", "vk", "zoom"];
+declare const VOID_EMAIL_AUTH_PROVIDER = "email";
+declare const VOID_AUTH_PROVIDERS: readonly [typeof VOID_EMAIL_AUTH_PROVIDER, ...typeof VOID_SOCIAL_AUTH_PROVIDERS];
+type VoidAuthProvider = (typeof VOID_AUTH_PROVIDERS)[number];
+//#endregion
 //#region src/auth/drizzle.d.ts
 type AuthIdStrategy = "serial" | "text" | "uuid";
 type VoidAuthMigrationField = {
@@ -12,6 +16,7 @@ type VoidAuthMigrationField = {
   unique: boolean;
   index: boolean;
   bigint: boolean;
+  unbounded?: boolean;
   references?: {
     table: string;
     field: string;
@@ -24,13 +29,13 @@ type VoidAuthMigrationTable = {
   fields: Record<string, VoidAuthMigrationField>;
 };
 type VoidAuthMigrationSchema = {
-  dialect: "sqlite" | "postgresql";
+  dialect: "sqlite" | "postgresql" | "mysql";
   idStrategy: AuthIdStrategy;
   tables: Array<VoidAuthMigrationTable>;
 };
 //#endregion
 //#region src/runtime/better-auth-shared.d.ts
-type VoidAuthDialect = "sqlite" | "postgresql";
+type VoidAuthDialect = "sqlite" | "postgresql" | "mysql";
 type VoidAuthRuntimeOptions = {
   dialect: VoidAuthDialect;
   providers: Array<VoidAuthProvider> | null;

package/dist/{build-cmd-Bujrv5q-.mjs → build-cmd-CkVD1uOh.mjs}

@@ -1,6 +1,7 @@
-import { D as outro, T as log, a as cliTitle, s as dim, u as import_picocolors, w as intro } from "./agents-CtgBYqld.mjs";
-import { b as readProjectConfig, f as getToken, n as PlatformClient, t as PlatformApiError } from "./client-Gb71-XkG.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BBMtLLV9.mjs";
+import { D as log, E as intro, a as dim, c as import_picocolors, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
+import { c as getToken, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
+import { n as PlatformClient, t as PlatformApiError } from "./client-CyCHWSO_.mjs";
+import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project--Vxawf7z.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";
 //#region src/cli/build-cmd.ts
 const POLL_MS = 1e3;
@@ -69,7 +70,8 @@ async function runBuildLogsCommand(root, args) {
 	let projectId;
 	const requestedSlug = getRequestedProjectSlug({ projectSlug: args.projectName });
 	if (requestedSlug) {
-		const resolved = resolveProjectBySlug(await client.listProjects(), requestedSlug);
+		const projects = await client.listProjects();
+		const resolved = resolveProjectBySlug(projects, requestedSlug);
 		if (!resolved) {
 			log.error(`build: No project found with slug '${requestedSlug}'.`);
 			process.exit(1);

package/dist/{cache-C11V8Fxq.mjs → cache-QcUfR-ff.mjs}

@@ -1,6 +1,7 @@
-import { D as outro, T as log, a as cliTitle, o as createSpinner, s as dim, w as intro } from "./agents-CtgBYqld.mjs";
-import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BBMtLLV9.mjs";
+import { D as log, E as intro, a as dim, i as createSpinner, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
+import { c as getToken, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
+import { n as PlatformClient } from "./client-CyCHWSO_.mjs";
+import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project--Vxawf7z.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {
 	console.log();
@@ -10,11 +11,13 @@ async function runPurgeCacheCommand(root, projectSlug) {
 		log.error("Not logged in. Run `void auth login` first.");
 		process.exit(1);
 	}
-	const client = new PlatformClient(token, { root });
 	const requestedSlug = getRequestedProjectSlug({ projectSlug });
 	let projectId;
+	let client;
 	if (requestedSlug) {
-		const config = resolveProjectBySlug(await client.listProjects(), requestedSlug);
+		client = new PlatformClient(token, { root });
+		const projects = await client.listProjects();
+		const config = resolveProjectBySlug(projects, requestedSlug);
 		if (!config) {
 			log.error(`project: No project found with slug '${requestedSlug}'.`);
 			process.exit(1);
@@ -27,6 +30,7 @@ async function runPurgeCacheCommand(root, projectSlug) {
 			process.exit(1);
 		}
 		projectId = linked.projectId;
+		client = new PlatformClient(token, { root });
 	}
 	const s = createSpinner();
 	s.start("Purging cache...");

package/dist/{cancel-deploy-fwFYF04b.mjs → cancel-deploy-DsvWKFTe.mjs}

@@ -1,5 +1,6 @@
-import { D as outro, S as confirm, T as log, a as cliTitle, j as isCancel, w as intro } from "./agents-CtgBYqld.mjs";
-import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
+import { D as log, E as intro, F as isCancel, k as outro, r as cliTitle, w as confirm } from "./output-tFQLLj26.mjs";
+import { c as getToken, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
+import { n as PlatformClient } from "./client-CyCHWSO_.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([
 	"pending",

package/dist/cf-access-AJ1ehiFR.mjs

@@ -0,0 +1,42 @@
+//#region src/shared/cf-access.ts
+/**
+* Resolve Cloudflare Access headers from an env-like object.
+*
+* Priority:
+*   1. Service token pair (`CF_ACCESS_CLIENT_ID` + `CF_ACCESS_CLIENT_SECRET`) — CI path
+*   2. User JWT (`CF_ACCESS_TOKEN`) — dev path, typically populated via `cloudflared access token`
+*   3. No headers — prod, or unprotected hostnames
+*/
+function isVoidAccessGatedUrl(targetUrl) {
+	try {
+		const url = new URL(targetUrl);
+		return url.protocol === "https:" && (url.hostname.endsWith(".staging.void.cloud") || url.hostname.endsWith(".staging.void.app"));
+	} catch {
+		return false;
+	}
+}
+function accessHeaders(env) {
+	const id = env.CF_ACCESS_CLIENT_ID;
+	const secret = env.CF_ACCESS_CLIENT_SECRET;
+	if (typeof id === "string" && typeof secret === "string" && id.length > 0 && secret.length > 0) return {
+		"CF-Access-Client-Id": id,
+		"CF-Access-Client-Secret": secret
+	};
+	const token = env.CF_ACCESS_TOKEN;
+	if (typeof token === "string" && token.length > 0) return { "cf-access-token": token };
+	return {};
+}
+/** Attach shared Void Access credentials only to known hosted staging origins. */
+function cfAccessHeaders(env, targetUrl) {
+	return isVoidAccessGatedUrl(targetUrl) ? accessHeaders(env) : {};
+}
+/**
+* Capture credentials for a Cloudflare Worker readiness request whose target
+* is resolved and constrained by the direct-deploy adapter rather than a
+* user-connected Void platform URL.
+*/
+function trustedCloudflareWorkerAccessHeaders(env) {
+	return accessHeaders(env);
+}
+//#endregion
+export { isVoidAccessGatedUrl as n, trustedCloudflareWorkerAccessHeaders as r, cfAccessHeaders as t };

package/dist/cf-access-DsSsZUPr.mjs

@@ -0,0 +1,67 @@
+import { n as isVoidAccessGatedUrl } from "./cf-access-AJ1ehiFR.mjs";
+import { spawnSync } from "node:child_process";
+//#region src/cli/cf-access.ts
+const probedHosts = /* @__PURE__ */ new Set();
+/**
+* If the CLI is about to talk to a Cloudflare-Access-gated staging host,
+* probe the locally-installed `cloudflared` binary for a cached user JWT
+* and export it as `CF_ACCESS_TOKEN`. On interactive shells with no cached
+* token, open a browser login flow to populate the cache, then re-read it.
+*
+* Cached per-host so that an early non-gated call (e.g. prod) does not
+* permanently disable the probe for a later gated call (e.g. staging) in
+* the same process. Noop when:
+*   - a service-token pair is already set (CI path)
+*   - `CF_ACCESS_TOKEN` is already set (manual override or prior probe)
+*   - the target host is not gated
+*   - `cloudflared` is not installed
+*/
+function ensureCloudflaredToken(apiUrl) {
+	if (process.env.CF_ACCESS_CLIENT_ID && process.env.CF_ACCESS_CLIENT_SECRET) return;
+	if (process.env.CF_ACCESS_TOKEN) return;
+	if (!isVoidAccessGatedUrl(apiUrl)) return;
+	const host = new URL(apiUrl).hostname;
+	if (probedHosts.has(host)) return;
+	probedHosts.add(host);
+	let token = runCloudflared([
+		"access",
+		"token",
+		`-app=${apiUrl}`
+	]);
+	if (!token && process.stdin.isTTY && process.stdout.isTTY) {
+		runCloudflared([
+			"access",
+			"login",
+			apiUrl
+		], {
+			inherit: true,
+			timeoutMs: 12e4
+		});
+		token = runCloudflared([
+			"access",
+			"token",
+			`-app=${apiUrl}`
+		]);
+	}
+	if (token) process.env.CF_ACCESS_TOKEN = token;
+}
+function runCloudflared(args, opts) {
+	try {
+		const result = spawnSync("cloudflared", args, {
+			encoding: "utf-8",
+			stdio: opts?.inherit ? "inherit" : [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			timeout: opts?.timeoutMs ?? 5e3
+		});
+		if (result.error || result.status !== 0) return null;
+		const out = (result.stdout ?? "").trim();
+		return out.length > 0 ? out : null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { ensureCloudflaredToken as t };

package/dist/cli/cli.d.mts

@@ -1 +1 @@
-export { };
+export {}