void 0.10.13 → 0.20.1

package/dist/platform-recovery-C_YO-tIs.mjs

@@ -0,0 +1,99 @@
+import { U as listInstallationManifests, et as savePlatformConnection, nt as writeInstallationManifest, z as acquirePlatformLifecycleLock } from "./output-tFQLLj26.mjs";
+import { t as cfAccessHeaders } from "./cf-access-AJ1ehiFR.mjs";
+import { d as createPlatformInstallPlan, t as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-DN4MzJF_.mjs";
+import { isPlatformManifestMonotonicExtension, recoverDurablyMarkedProvisionIntents, verifyPlatformInstallationOwnership } from "./platform-management-Db2PXw0B.mjs";
+import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
+//#region src/cli/platform-recovery.ts
+async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {
+	if (!(await client.listAccounts()).some((account) => account.id === accountId)) throw new Error(`platform: Cloudflare account ${JSON.stringify(accountId)} is unavailable.`);
+	const namespaces = await client.listKvNamespaces(accountId);
+	const recovered = [];
+	for (const namespace of namespaces) {
+		const value = await client.getKvValue(accountId, namespace.id, REMOTE_INSTALLATION_MANIFEST_KEY);
+		if (value === null) continue;
+		let manifest;
+		try {
+			manifest = parsePlatformInstallationManifest(JSON.parse(value));
+		} catch (error) {
+			throw new Error(`platform: Routing namespace ${namespace.name} contains invalid Void ownership metadata: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		if (selector && manifest.id !== selector && manifest.deployment.installationSlug !== selector && manifest.deployment.displayName.toLowerCase() !== selector.toLowerCase()) continue;
+		const routing = manifest.resources.find((resource) => resource.key === "routing-kv");
+		if (manifest.account.id !== accountId || routing?.kind !== "kv-namespace" || routing.id !== namespace.id || routing.name !== namespace.name || routing.ownership !== "created" || routing.state !== "ready") throw new Error(`platform: Routing namespace ${namespace.name} does not match its ownership manifest.`);
+		if (manifest.status === "uninstalled") continue;
+		manifest = await recoverDurablyMarkedProvisionIntents(client, manifest);
+		const deployment = manifest.deployment;
+		const plan = await createPlatformInstallPlan(client, {
+			accountId,
+			applicationDomain: deployment.application.baseDomain,
+			controlPlaneDomain: deployment.controlPlane.apiHostname ?? "",
+			dedicatedZone: deployment.application.dedicatedZone,
+			displayName: deployment.displayName,
+			installationSlug: deployment.installationSlug,
+			zoneName: deployment.application.zoneName
+		}, manifest, { repairMissing: true });
+		manifest = reconcileRecoveredEndpoints(manifest, plan);
+		await verifyPlatformInstallationOwnership(client, manifest);
+		if (!plan.actions.some((action) => action.action === "create") && manifest.desiredState === "enabled" && manifest.status === "installed") await verifyEndpoint(manifest);
+		recovered.push({
+			manifest,
+			plan
+		});
+	}
+	const resolved = [];
+	for (const { manifest: recoveredManifest, plan } of recovered) {
+		let manifest = recoveredManifest;
+		const release = acquirePlatformLifecycleLock(manifest.account.id, manifest.deployment.installationSlug);
+		try {
+			const collision = listInstallationManifests().find((entry) => entry.id === manifest.id);
+			if (collision && (collision.account.id !== manifest.account.id || collision.ownershipNonce !== manifest.ownershipNonce)) throw new Error(`platform: Local installation ${manifest.id} has conflicting ownership.`);
+			if (collision && JSON.stringify(collision) !== JSON.stringify(manifest)) {
+				if (isPlatformManifestMonotonicExtension(manifest, collision)) {
+					await verifyPlatformInstallationOwnership(client, collision);
+					manifest = collision;
+				} else if (isPlatformManifestMonotonicExtension(collision, manifest)) writeInstallationManifest(manifest);
+				else throw new Error(`platform: Local installation ${manifest.id} differs from its remote checkpoint. Resolve or remove the local record before discovery; it was not overwritten.`);
+			}
+			manifest = reconcileRecoveredEndpoints(manifest, plan);
+			if (!collision) writeInstallationManifest(manifest);
+			else if (JSON.stringify(collision) !== JSON.stringify(manifest)) writeInstallationManifest(manifest);
+			if (manifest.endpoints.apiUrl !== null && manifest.endpoints.proxyUrl !== null) savePlatformConnection({
+				accountId: manifest.account.id,
+				apiUrl: manifest.endpoints.apiUrl,
+				applicationDomain: manifest.deployment.application.baseDomain,
+				displayName: manifest.deployment.displayName,
+				installationId: manifest.id,
+				kind: "installed",
+				proxyUrl: manifest.endpoints.proxyUrl
+			});
+			resolved.push(manifest);
+		} finally {
+			release();
+		}
+	}
+	return resolved;
+}
+function reconcileRecoveredEndpoints(manifest, plan) {
+	if (manifest.endpoints.apiUrl !== null && manifest.endpoints.apiUrl !== plan.apiUrl) throw new Error(`platform: Installation ${manifest.id} has inconsistent API metadata.`);
+	if (manifest.endpoints.proxyUrl !== null && manifest.endpoints.proxyUrl !== plan.proxyUrl) throw new Error(`platform: Installation ${manifest.id} has inconsistent proxy metadata.`);
+	if (manifest.endpoints.apiUrl !== null && manifest.endpoints.proxyUrl === null) return setInstallationEndpoints(manifest, {
+		...manifest.endpoints,
+		proxyUrl: plan.proxyUrl
+	}, manifest.updatedAt);
+	return manifest;
+}
+async function verifyInstallationEndpoint(manifest, fetcher = fetch) {
+	const apiUrl = manifest.endpoints.apiUrl;
+	if (!apiUrl) throw new Error(`platform: Installation ${manifest.id} has no API endpoint.`);
+	const response = await fetcher(`${apiUrl}/.well-known/void-platform`, {
+		headers: {
+			Accept: "application/json",
+			...cfAccessHeaders(process.env, apiUrl)
+		},
+		signal: AbortSignal.timeout(15e3)
+	});
+	if (!response.ok) throw new Error(`platform: Installation ${manifest.id} is not reachable (HTTP ${response.status}).`);
+	if ((await response.json()).installationId !== manifest.id) throw new Error(`platform: Installation ${manifest.id} endpoint identity does not match.`);
+}
+//#endregion
+export { recoverPlatformInstallations };

package/dist/{plugin-inference-DMeavIJ6.mjs → plugin-inference-BDRfZngg.mjs}

@@ -1,10 +1,10 @@
-import { a as join } from "./dist-DaKKDf8D.mjs";
-import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
-import { n as globSync } from "./dist-BuiRJkTd.mjs";
-import { c as isIdentifier, r as getSsrServerEntryPath, u as isMemberExpression } from "./entry-D7yy4xVH.mjs";
+import { o as join } from "./dist-BrsS7cai.mjs";
+import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
+import { n as globSync } from "./dist-m40_XgNh.mjs";
+import { c as isIdentifier, r as getSsrServerEntryPath, u as isMemberExpression } from "./entry-DU3oDoQ3.mjs";
 import { existsSync, readFileSync } from "node:fs";
-import { parseSync } from "vite";
 import { parse } from "es-module-lexer/js";
+import { parseSync } from "vite";
 //#region ../../node_modules/.pnpm/estree-walker@3.0.3/node_modules/estree-walker/src/walker.js
 /**
 * @typedef { import('estree').Node} Node
@@ -37,10 +37,12 @@ var WalkerBase = class {
 	* @param {Node} node
 	*/
 	replace(parent, prop, index, node) {
-		if (parent && prop) if (index != null)
+		if (parent && prop) {
+			if (index != null)
  /** @type {Array<Node>} */ parent[prop][index] = node;
-		else
+			else
  /** @type {Node} */ parent[prop] = node;
+		}
 	}
 	/**
 	* @template {Node} Parent
@@ -49,9 +51,11 @@ var WalkerBase = class {
 	* @param {number | null | undefined} index
 	*/
 	remove(parent, prop, index) {
-		if (parent && prop) if (index !== null && index !== void 0)
+		if (parent && prop) {
+			if (index !== null && index !== void 0)
  /** @type {Array<Node>} */ parent[prop].splice(index, 1);
-		else delete parent[prop];
+			else delete parent[prop];
+		}
 	}
 };
 //#endregion
@@ -207,12 +211,13 @@ function inferBindingsFromSource(code, filename) {
 		needsQueues: false,
 		needsAI: false,
 		needsSandbox: false,
-		needsLive: false
+		needsLive: false,
+		needsEmail: false
 	};
 	try {
 		const [imports] = parse(code);
 		for (const imp of imports) {
-			const source = imp.n;
+			const source = imp.specifier;
 			if (!source) continue;
 			switch (source) {
 				case "void/db":
@@ -236,15 +241,18 @@ function inferBindingsFromSource(code, filename) {
 				case "void/sandbox":
 					result.needsSandbox = true;
 					break;
+				case "void/email":
+					if (!isTypeOnlyImportStatement(code.slice(imp.importStart, imp.importEnd + 1))) result.needsEmail = true;
+					break;
 				case "void/live":
-					if (!isTypeOnlyImportStatement(code.slice(imp.ss, imp.se + 1))) result.needsLive = true;
+					if (!isTypeOnlyImportStatement(code.slice(imp.importStart, imp.importEnd + 1))) result.needsLive = true;
 					break;
 				case "void/client":
 				case "void/client/react":
 				case "void/client/vue":
 				case "void/client/svelte":
 				case "void/client/solid": {
-					const stmt = code.slice(imp.ss, imp.se + 1);
+					const stmt = code.slice(imp.importStart, imp.importEnd + 1);
 					if (/\bauth\b/.test(stmt)) result.needsAuth = true;
 					break;
 				}
@@ -258,6 +266,7 @@ function inferBindingsFromSource(code, filename) {
 		if (/\bfrom\s+["']void\/queue["']/.test(code)) result.needsQueues = true;
 		if (/\bfrom\s+["']void\/ai["']/.test(code)) result.needsAI = true;
 		if (/\bfrom\s+["']void\/sandbox["']/.test(code)) result.needsSandbox = true;
+		if (hasRuntimeImportFrom(code, "void/email")) result.needsEmail = true;
 		if (hasRuntimeImportFrom(code, "void/live")) result.needsLive = true;
 		if (/\bfrom\s+["']void\/client(?:\/(?:react|vue|svelte|solid))?["']/.test(code) && /\bauth\b/.test(code)) result.needsAuth = true;
 	}
@@ -296,9 +305,7 @@ function inferBindingsFromSource(code, filename) {
 			case "SANDBOX":
 				result.needsSandbox = true;
 				break;
-			default:
-				if (property.name.startsWith("QUEUE_")) result.needsQueues = true;
-				break;
+			default: if (property.name.startsWith("QUEUE_")) result.needsQueues = true;
 		}
 	} });
 	return result;
@@ -334,7 +341,8 @@ function mergeBindings(bindings) {
 		needsQueues: bindings.some((b) => b.needsQueues),
 		needsAI: bindings.some((b) => b.needsAI),
 		needsSandbox: bindings.some((b) => b.needsSandbox),
-		needsLive: bindings.some((b) => b.needsLive)
+		needsLive: bindings.some((b) => b.needsLive),
+		needsEmail: bindings.some((b) => b.needsEmail)
 	};
 }
 //#endregion
@@ -350,13 +358,20 @@ const FRAMEWORK_SCAN_DIRS = [
 	"crons",
 	"queues"
 ];
-/** Directories to scan for binding inference in Void app mode. */
+/**
+* Directories to scan for binding inference in Void app mode.
+*
+* `email` is included so a `sendEmail()` call from inside an inbound handler
+* (`email/<addr>.ts`) registers `needsEmail = true`. Otherwise the manifest
+* flag and the dev-inbox plugin would miss those callsites.
+*/
 const DEFAULT_SCAN_DIRS = [
 	"routes",
 	"middleware",
 	"queues",
 	"pages",
 	"crons",
+	"email",
 	"src"
 ];
 /**
@@ -444,7 +459,8 @@ function inferProjectBindings(root, options, scanDirs) {
 		needsQueues: false,
 		needsAI: Boolean(options.bindings.ai),
 		needsSandbox: false,
-		needsLive: false
+		needsLive: false,
+		needsEmail: Boolean(options.bindings.email)
 	};
 	const paths = options?.paths ?? readProjectPaths(root);
 	const dirs = scanDirs ?? (paths.sourceDir ? [paths.sourceDir] : DEFAULT_SCAN_DIRS);

package/dist/prepare-BfJvFUtJ.mjs

@@ -0,0 +1,14 @@
+import { D as log, E as intro, O as note, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
+import { prepareProject } from "./prepare-CBetXvsN.mjs";
+//#region src/cli/prepare.ts
+async function runPrepareCommand(root, _args) {
+	console.log();
+	intro(cliTitle("prepare"));
+	const result = await prepareProject(root);
+	if (result.written.length > 0) note(result.written.join("\n"), "Wrote");
+	if (result.removed.length > 0) note(result.removed.join("\n"), "Removed stale files");
+	if (result.written.length === 0 && result.removed.length === 0) log.info("No generated files changed.");
+	outro("Project codegen is ready.");
+}
+//#endregion
+export { runPrepareCommand };

package/dist/{prepare-BvvgAz-3.mjs → prepare-CBetXvsN.mjs}

@@ -1,16 +1,15 @@
-import { a as join } from "./dist-DaKKDf8D.mjs";
-import { D as outro, E as note, T as log, a as cliTitle, w as intro } from "./agents-CtgBYqld.mjs";
-import { i as resolveProjectPaths } from "./project-paths-BQd7OmIo.mjs";
-import { c as loadVoidAuthConfig, r as scanRoutes, s as findVoidAuthConfig } from "./scan-ChWt4pX1.mjs";
-import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-qHGgPuWT.mjs";
-import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
-import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-z1jtHEi_.mjs";
-import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-QBj-ndax.mjs";
+import { o as join } from "./dist-BrsS7cai.mjs";
+import { i as resolveProjectPaths } from "./project-paths-SK8nMHPp.mjs";
+import { c as loadVoidAuthConfig, r as scanRoutes, s as findVoidAuthConfig } from "./scan-BMH4rzlv.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-BQFq7QvD.mjs";
+import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-Ql2XsSQp.mjs";
+import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-BDRfZngg.mjs";
+import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-Da-DpyUp.mjs";
+import { t as discoverSchema } from "./discover-xvfrgJeo.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BNPhro-M.mjs";
+import { a as loadLocalEnv } from "./env-D4Emu-M_.mjs";
 import { existsSync, mkdirSync, rmSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { loadEnv } from "vite";
 //#region src/codegen/prepare.ts
 function writeGeneratedFile(outDir, fileName, content, written) {
 	mkdirSync(outDir, { recursive: true });
@@ -66,7 +65,10 @@ async function prepareProject(root) {
 			providers: config.auth?.providers ?? null,
 			userConfig: await loadVoidAuthConfig(authConfigPath)
 		};
-		const env = loadEnv("development", root, "");
+		const env = {
+			...loadLocalEnv(root),
+			...process.env
+		};
 		const schemaPath = join(outDir, "better-auth-schema.ts");
 		const databasePath = join(outDir, "better-auth-db.ts");
 		const drizzleAdapterPath = fileURLToPath(import.meta.resolve("better-auth/adapters/drizzle"));
@@ -87,15 +89,4 @@ async function prepareProject(root) {
 	};
 }
 //#endregion
-//#region src/cli/prepare.ts
-async function runPrepareCommand(root, _args) {
-	console.log();
-	intro(cliTitle("prepare"));
-	const result = await prepareProject(root);
-	if (result.written.length > 0) note(result.written.join("\n"), "Wrote");
-	if (result.removed.length > 0) note(result.removed.join("\n"), "Removed stale files");
-	if (result.written.length === 0 && result.removed.length === 0) log.info("No generated files changed.");
-	outro("Project codegen is ready.");
-}
-//#endregion
-export { runPrepareCommand };
+export { prepareProject };

package/dist/{preset-BjyR3lzz.mjs → preset-lAy0B0BQ.mjs}

@@ -1,207 +1,10 @@
-import { a as join, c as resolve, n as dirname, s as relative } from "./dist-DaKKDf8D.mjs";
-import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
-import { i as hasSsrEntry, r as getSsrServerEntryPath } from "./entry-D7yy4xVH.mjs";
-import { i as readPackageJson, n as hasPackageDependency, t as getPackageDependencies } from "./package-json-Cx1osYo6.mjs";
+import { c as relative, l as resolve, n as dirname, o as join } from "./dist-BrsS7cai.mjs";
+import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
+import { i as hasSsrEntry, r as getSsrServerEntryPath } from "./entry-DU3oDoQ3.mjs";
+import { i as readPackageJson, n as hasPackageDependency, t as getPackageDependencies } from "./package-json-CPoWX79C.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-//#region src/shared/dotenv.ts
-/**
-* Shared dotenv parser + variable expander used by every CLI path that reads
-* `.env*` files (`void env check`, `void deploy`, `void init` scaffold
-* inference). A single source of truth avoids the drift we hit when two
-* hand-rolled parsers diverged on quoting / expansion semantics.
-*
-* Expansion supports `${VAR}` and `$VAR`, a `\$VAR` literal-escape, and
-* transitive references across earlier entries in the same record. Cycles
-* are detected and fall through to the raw literal rather than looping.
-*
-* Security note: expansion is deliberately scoped to the in-file record.
-* We do NOT consult `process.env` the way `dotenv-expand` does — a shell
-* env leaking into an `.env.example` via expansion would silently reveal
-* developer machine state in committed output, and `void env check` /
-* `void deploy` would then pass with values that aren't present in CI.
-*
-* The runtime path (Vite's own `loadEnv`) DOES consult `process.env` for
-* expansion. That's a deliberate Vite choice; `filterLoadedEnv` strips
-* shell pollution from the final worker vars so the two sides agree on
-* the observable surface even when expansion sources differ.
-*
-* This module is a leaf — it must not import from `../log` or any non-leaf
-* module so that the prerender subprocess's worker bundle doesn't pick up
-* unwanted transitive dependencies. Warnings are surfaced through the
-* `onWarn` callback and left for the caller to route.
-*/
-/** Valid dotenv key — ASCII letter/underscore followed by letters/digits/underscore. */
-const VALID_KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
-/**
-* Parse a single `KEY=VALUE` line into `{ key, value }`, stripping matching
-* single/double quotes around the value. Returns `null` for blanks, comments,
-* and non-assignment lines.
-*/
-function parseDotenvLine(line) {
-	const trimmed = line.trim();
-	if (!trimmed || trimmed.startsWith("#")) return null;
-	const equalsIndex = trimmed.indexOf("=");
-	if (equalsIndex === -1) return null;
-	const key = trimmed.slice(0, equalsIndex).trim();
-	let value = trimmed.slice(equalsIndex + 1).trim();
-	if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
-	return {
-		key,
-		value
-	};
-}
-/**
-* Parse the raw contents of a dotenv file into a record, optionally
-* expanding `${VAR}` / `$VAR` references against earlier entries.
-*/
-function parseDotenv(content, options = {}) {
-	const { expand: shouldExpand = true, skipInvalidKeys = true, onWarn } = options;
-	const env = {};
-	for (const line of content.split("\n")) {
-		const parsed = parseDotenvLine(line);
-		if (!parsed) continue;
-		if (!VALID_KEY.test(parsed.key)) {
-			if (skipInvalidKeys) continue;
-			throw new Error(`dotenv: Invalid key '${parsed.key}'.`);
-		}
-		env[parsed.key] = parsed.value;
-	}
-	return shouldExpand ? expandDotenv(env, { onWarn }) : env;
-}
-/**
-* Read and parse a dotenv file. Returns `{}` when the file is missing so
-* callers can treat "no file" and "empty file" identically.
-*/
-function parseDotenvFile(filePath, options = {}) {
-	if (!existsSync(filePath)) return {};
-	return parseDotenv(readFileSync(filePath, "utf-8"), options);
-}
-/**
-* Expand `${VAR}` / `$VAR` references in every value of a record against
-* the other entries in that same record. Matches the surface of
-* `dotenv-expand` minus the `process.env` fallback.
-*
-* Semantics:
-*   - `${VAR}` and `$VAR` both resolve (bare form stops at the first
-*     non-identifier character).
-*   - `\$VAR` stays literal; the backslash is consumed.
-*   - Nested refs resolve transitively — `A=${B}`, `B=${C}`, `C=v` → `A=v`.
-*   - Cycles are detected; the offending value keeps its raw literal and
-*     `onWarn` fires once per cycle seen.
-*   - Missing refs expand to the empty string, matching dotenv-expand.
-*
-* The input record is not mutated; a fresh object is returned.
-*/
-function expandDotenv(input, options = {}) {
-	const out = {};
-	const resolving = /* @__PURE__ */ new Set();
-	const warned = /* @__PURE__ */ new Set();
-	function resolveKey(key) {
-		if (!(key in input)) return "";
-		if (key in out) return out[key];
-		if (resolving.has(key)) {
-			if (!warned.has(key) && options.onWarn) {
-				warned.add(key);
-				options.onWarn(`dotenv expansion cycle detected at "${key}" — leaving raw value in place`);
-			}
-			return input[key];
-		}
-		resolving.add(key);
-		const expanded = expandValue(input[key], resolveKey);
-		resolving.delete(key);
-		out[key] = expanded;
-		return expanded;
-	}
-	for (const key of Object.keys(input)) resolveKey(key);
-	return out;
-}
-/**
-* Expand a single value string. `resolve` returns the fully-expanded value
-* for a referenced key (or `''` when missing). Backslash-escapes (`\$VAR`,
-* `\${VAR}`) keep the `$...` literal and consume the backslash.
-*/
-function expandValue(value, resolve) {
-	let result = "";
-	let cursor = 0;
-	while (cursor < value.length) {
-		const character = value[cursor];
-		if (character === "\\" && cursor + 1 < value.length && value[cursor + 1] === "$") {
-			result += "$";
-			cursor += 2;
-			continue;
-		}
-		if (character !== "$") {
-			result += character;
-			cursor++;
-			continue;
-		}
-		const next = value[cursor + 1];
-		if (next === "{") {
-			const endIndex = value.indexOf("}", cursor + 2);
-			if (endIndex === -1) {
-				result += character;
-				cursor++;
-				continue;
-			}
-			const key = value.slice(cursor + 2, endIndex);
-			if (VALID_KEY.test(key)) result += resolve(key);
-			else result += value.slice(cursor, endIndex + 1);
-			cursor = endIndex + 1;
-			continue;
-		}
-		if (next && /[A-Za-z_]/.test(next)) {
-			let keyEndIndex = cursor + 1;
-			while (keyEndIndex < value.length && /[A-Za-z0-9_]/.test(value[keyEndIndex])) keyEndIndex++;
-			const key = value.slice(cursor + 1, keyEndIndex);
-			result += resolve(key);
-			cursor = keyEndIndex;
-			continue;
-		}
-		result += character;
-		cursor++;
-	}
-	return result;
-}
-/**
-* Merge multiple parsed dotenv records with later-entries-win semantics,
-* then expand across the combined set. This is the recommended path for
-* callers reading multiple `.env*` files (Vite-style precedence), since
-* expansion sees every earlier file's keys at once.
-*/
-function mergeAndExpand(records, options = {}) {
-	const merged = {};
-	for (const record of records) Object.assign(merged, record);
-	return expandDotenv(merged, options);
-}
-/**
-* Wrangler 4.107's bundled `dotenv` LINE regex (verbatim), used ONLY to detect the
-* declared KEYS wrangler would load — including the OPTIONAL `export ` prefix, the `KEY: val`
-* form, and single/double/backtick quoting — so a transport-redirect / config-override fence
-* sees exactly what wrangler's per-command dotenv reload would. We read keys, never values.
-*/
-const WRANGLER_DOTENV_LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/gm;
-/**
-* The set of declared dotenv KEYS in `filePath`, parsed the way wrangler does.
-* Lives in this leaf module (no `proper-lockfile` / lifecycle side effects) so both
-* the provisioner's transport fence and the deploy orchestrator's config-override
-* fence can read keys exactly as wrangler's per-command reload would, without either
-* caller pulling in the provision lifecycle just to parse dotenv keys.
-*/
-function scanWranglerDotenvKeys(filePath) {
-	const keys = /* @__PURE__ */ new Set();
-	if (!existsSync(filePath)) return keys;
-	const content = readFileSync(filePath, "utf-8");
-	WRANGLER_DOTENV_LINE.lastIndex = 0;
-	let match;
-	while ((match = WRANGLER_DOTENV_LINE.exec(content)) !== null) {
-		if (match[1]) keys.add(match[1]);
-		if (match.index === WRANGLER_DOTENV_LINE.lastIndex) WRANGLER_DOTENV_LINE.lastIndex++;
-	}
-	return keys;
-}
-//#endregion
 //#region src/cli/preset.ts
 /**
 * Known output conventions for SSGs.
@@ -240,30 +43,36 @@ const SSG_PRESETS = {
 */
 const FRAMEWORK_PRESETS = {
 	"tanstack-start": {
+		cloudflareArtifact: "vite-plugin",
 		buildCommand: "vite build",
 		workerDir: "dist/server",
 		workerMain: "index.js",
 		assetsDir: "dist/client"
 	},
 	"react-router": {
+		cloudflareArtifact: "vite-plugin",
 		buildCommand: "vite build",
 		workerDir: "build/server",
 		workerMain: "index.js",
 		assetsDir: "build/client"
 	},
 	"vinext-app": {
+		cloudflareArtifact: "vite-plugin",
 		buildCommand: "vite build",
-		workerDir: "dist/rsc",
+		workerDir: "dist/server",
 		workerMain: "index.js",
 		assetsDir: "dist/client"
 	},
 	"vinext-pages": {
+		cloudflareArtifact: "vite-plugin",
 		buildCommand: "vite build",
 		workerDir: "dist/ssr",
 		workerMain: "index.js",
 		assetsDir: "dist/client"
 	},
 	sveltekit: {
+		cloudflareArtifact: "worker-output",
+		cloudflareCompatibilityFlags: ["nodejs_als"],
 		buildCommand: "vite build",
 		workerDir: ".svelte-kit/cloudflare",
 		workerMain: "_worker.js",
@@ -272,6 +81,8 @@ const FRAMEWORK_PRESETS = {
 		bundle: true
 	},
 	nuxt: {
+		cloudflareArtifact: "worker-output",
+		cloudflareCompatibilityFlags: ["nodejs_als"],
 		buildCommand: "nuxt build",
 		workerDir: ".output/server",
 		workerMain: "index.mjs",
@@ -279,6 +90,8 @@ const FRAMEWORK_PRESETS = {
 		hashedAssetsPrefix: "_nuxt"
 	},
 	analog: {
+		cloudflareArtifact: "worker-output",
+		cloudflareCompatibilityFlags: ["nodejs_compat", "nodejs_als"],
 		buildCommand: "vite build",
 		workerDir: "dist/analog/server",
 		workerMain: "index.mjs",
@@ -286,6 +99,8 @@ const FRAMEWORK_PRESETS = {
 		hashedAssetsPrefix: "assets"
 	},
 	astro: {
+		cloudflareArtifact: "worker-output",
+		cloudflareCompatibilityFlags: ["nodejs_als"],
 		buildCommand: "astro build",
 		workerDir: "dist/server",
 		workerMain: "entry.mjs",
@@ -323,18 +138,14 @@ function shellQuoteExecutable(value) {
 * `[executable, ...prefixArgs]` meant to be spawned with `shell: false` and the
 * real wrangler subcommand appended as further DISCRETE argv elements.
 *
-* Unlike {@link resolveWranglerCommand} (which returns a shell-quoted STRING for
-* `shell: true` callers), this never builds a shell command line, so untrusted
-* values — resource names, a Postgres connection string riddled with `&`/`$`/`;`,
-* a config path containing spaces — can be passed as their own argv elements and
-* are IMMUNE to shell metacharacter injection/splitting.
+* Values are passed as discrete argv elements without shell expansion.
 *
 * Resolution order — ALWAYS launches the resolved JS entry as
 * `[process.execPath, <wrangler-dist/cli.js>]`, which is shell-free AND
 * cross-platform (it sidesteps the Windows `.cmd`/`.ps1` shim that Node cannot
 * spawn with `shell: false`):
 *   1. MODULE RESOLUTION of `wrangler/package.json` relative to THIS module (the
-*      `void` package). The provisioner targets wrangler 4.107's EXACT flags,
+*      `void` package). The provisioner targets wrangler 4.131's EXACT flags,
 *      `--json` shapes, and error strings, so void's own pinned wrangler must be
 *      PREFERRED — an app that hoists an older, incompatible wrangler at its root
 *      must not shadow it. Under strict pnpm (void + consumers use pnpm) void's
@@ -365,7 +176,7 @@ function shellQuoteExecutable(value) {
 function resolveWranglerArgv(root, resolveWranglerPackageJson = defaultResolveWranglerPackageJson) {
 	const jsBin = resolveLocalWranglerJsBin(root, resolveWranglerPackageJson);
 	if (jsBin) return [process.execPath, jsBin];
-	throw new Error("provision: could not resolve the \"wrangler\" package. wrangler ships as a dependency of \"void\"; reinstall dependencies (e.g. `pnpm install`) so it is present, then retry.");
+	throw new Error("provision: Void's bundled Cloudflare tooling is unavailable. Reinstall the project's dependencies from its trusted lockfile, then retry.");
 }
 /**
 * Resolve `wrangler/package.json` via Node module resolution, relative to THIS
@@ -418,7 +229,7 @@ function wranglerCliEntryFromPackageJson(pkgPath) {
 	}
 }
 /**
-* The relative CLI entry from a wrangler manifest: `main` first (wrangler 4.107 sets it
+* The relative CLI entry from a wrangler manifest: `main` first (wrangler 4.131 sets it
 * to `wrangler-dist/cli.js`, which equals `exports["."].default`), then the `.` export
 * (`{ default: string }` or a bare string). Returns `undefined` when neither is a string.
 */
@@ -569,7 +380,8 @@ function findBackendSources(root) {
 		paths.pagesDir,
 		paths.middlewareDir,
 		paths.cronsDir,
-		paths.queuesDir
+		paths.queuesDir,
+		paths.emailDir
 	]) if (existsSync(dir)) found.push(`${relative(root, dir)}/`);
 	const ssrEntry = getSsrServerEntryPath(root, paths);
 	if (ssrEntry) found.push(relative(root, ssrEntry));
@@ -585,8 +397,9 @@ function hasBackendFiles(root) {
 	if (existsSync(paths.middlewareDir)) return true;
 	if (existsSync(paths.cronsDir)) return true;
 	if (existsSync(paths.queuesDir)) return true;
+	if (existsSync(paths.emailDir)) return true;
 	if (hasSsrEntry(root, paths)) return true;
 	return false;
 }
 //#endregion
-export { resolveProjectCommand as a, mergeAndExpand as c, hasBackendFiles as i, parseDotenvFile as l, detectPreset as n, resolveWranglerArgv as o, formatProjectCommand as r, expandDotenv as s, FRAMEWORK_PRESETS as t, scanWranglerDotenvKeys as u };
+export { resolveProjectCommand as a, hasBackendFiles as i, detectPreset as n, resolveWranglerArgv as o, formatProjectCommand as r, FRAMEWORK_PRESETS as t };