void 0.20.2 → 0.21.0

package/dist/{cloudflare-auth-6M5llVPC.mjs → cloudflare-auth-BCmTc1X_.mjs}

@@ -1,5 +1,5 @@
-import { D as log } from "./output-B0cfNSx5.mjs";
-import { o as resolveWranglerArgv } from "./preset-lAy0B0BQ.mjs";
+import { j as log } from "./dist-Dn6nn2IU.mjs";
+import { o as resolveWranglerArgv } from "./preset-Dowh9tTt.mjs";
 import { execFile, spawn, spawnSync } from "node:child_process";
 //#region src/cli/cloudflare-auth.ts
 var CloudflareAuthenticationError = class extends Error {
@@ -40,25 +40,14 @@ async function ensureCloudflareAuthentication(options) {
 		return session ?? (options.forceLogin ? null : { accounts: [] });
 	};
 	const existing = options.forceLogin ? null : await readSession();
-	if (existing) {
-		if (existing.authType === "OAuth Token") await enableCloudflareKeyring(run);
-		return existing;
-	}
+	if (existing) return existing;
 	if (!(options.interactive ?? (process.stdin.isTTY && process.stdout.isTTY))) throw new CloudflareAuthenticationError("Cloudflare authentication is required. Set CLOUDFLARE_API_TOKEN in CI, or run `void cloudflare login` in an interactive terminal.", "not-authenticated");
-	await enableCloudflareKeyring(run);
 	announceCloudflareLogin();
-	if (!isCleanExit(await run(["login", "--use-keyring"], true))) throw new CloudflareAuthenticationError("Cloudflare browser sign-in did not complete. Run `void cloudflare login` to try again.", "login");
+	if (!isCleanExit(await run(["login"], false))) throw new CloudflareAuthenticationError("Cloudflare browser sign-in did not complete. Run `void cloudflare login` to try again.", "login");
 	const authenticated = await readSession();
 	if (!authenticated) throw new CloudflareAuthenticationError("Cloudflare sign-in completed without a usable session. Run `void cloudflare login` to try again.", "not-authenticated");
 	return authenticated;
 }
-async function enableCloudflareKeyring(run) {
-	if (!isCleanExit(await run([
-		"auth",
-		"keyring",
-		"enable"
-	], true))) throw new CloudflareAuthenticationError("Void could not enable secure Cloudflare credential storage in your operating-system keychain.", "keyring");
-}
 /** Credential names only: never include their values in diagnostics. */
 function cloudflareCredentialOverrides(source = process.env) {
 	const tokens = ["CLOUDFLARE_API_TOKEN", "CF_API_TOKEN"].filter((key) => Boolean(source[key]));
@@ -102,11 +91,7 @@ function createBundledCloudflareAuthRunner(root) {
 			env,
 			maxBuffer: 10485760,
 			shell: false,
-			stdio: cloudflareKeyringNeedsTerminal(args) ? [
-				"inherit",
-				"inherit",
-				"ignore"
-			] : capture ? [
+			stdio: cloudflareAuthNeedsTerminal(args) ? "inherit" : capture ? [
 				"ignore",
 				"pipe",
 				"pipe"
@@ -126,17 +111,13 @@ function createBundledCloudflareAuthRunner(root) {
 /** Run a captured auth command without blocking terminal input or exposing credentials. */
 function runCloudflareAuthCommand(root, args, signal) {
 	const [command, ...prefix] = resolveWranglerArgv(root);
-	if (cloudflareKeyringNeedsTerminal(args)) return new Promise((resolve) => {
+	if (cloudflareAuthNeedsTerminal(args)) return new Promise((resolve) => {
 		const child = spawn(command, [...prefix, ...args], {
 			cwd: root,
 			env: cloudflareAuthCommandEnvironment(args),
 			shell: false,
 			signal,
-			stdio: [
-				"inherit",
-				"inherit",
-				"ignore"
-			],
+			stdio: "inherit",
 			timeout: 6e5,
 			windowsHide: true
 		});
@@ -179,21 +160,11 @@ function runCloudflareAuthCommand(root, args, signal) {
 	});
 }
 function cloudflareAuthCommandEnvironment(args, source = process.env) {
-	const env = cloudflareAuthEnvironment(source);
-	if (args[0] === "login" || args[0] === "logout" || isCloudflareKeyringEnable(args)) env.WRANGLER_LOG = "none";
-	return env;
+	return cloudflareAuthEnvironment(source);
 }
-function isCloudflareKeyringEnable(args) {
-	return args.length === 3 && args[0] === "auth" && args[1] === "keyring" && args[2] === "enable";
-}
-/**
-* Wrangler installs its Windows keyring backend only when stdin AND stdout are
-* terminals. Capturing `auth keyring enable` makes first-time setup fail even
-* inside PowerShell. This command only configures storage; it never reads or
-* prints a credential. Keep every other auth command captured.
-*/
-function cloudflareKeyringNeedsTerminal(args) {
-	return process.platform === "win32" && process.stdin.isTTY === true && process.stdout.isTTY === true && isCloudflareKeyringEnable(args);
+/** Browser login must display cf's prompts before it completes. */
+function cloudflareAuthNeedsTerminal(args) {
+	return args[0] === "login";
 }
 function cloudflareAuthEnvironment(source = process.env) {
 	const env = { ...source };
@@ -203,15 +174,13 @@ function cloudflareAuthEnvironment(source = process.env) {
 		"WRANGLER_LOG_SANITIZE"
 	]);
 	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedWranglerKeys.has(key.toUpperCase())) delete env[key];
-	env.CLOUDFLARE_AUTH_USE_KEYRING = "true";
-	env.WRANGLER_LOG_SANITIZE = "true";
 	return env;
 }
 function isCleanExit(result) {
 	return result.status === 0 && result.signal == null && (result.error == null || result.error === "");
 }
 function announceCloudflareLogin() {
-	log.info("Opening Cloudflare login in your browser. Press Ctrl+C to cancel.");
+	log.info("Opening Cloudflare login in your browser. Compare the code below with the browser prompt. Press Ctrl+C to cancel.");
 }
 //#endregion
-export { createBundledCloudflareAuthRunner as a, parseCloudflareAuthSession as c, cloudflareKeyringNeedsTerminal as i, runCloudflareAuthCommand as l, announceCloudflareLogin as n, enableCloudflareKeyring as o, cloudflareCredentialOverrides as r, ensureCloudflareAuthentication as s, CloudflareAuthenticationError as t };
+export { createBundledCloudflareAuthRunner as a, runCloudflareAuthCommand as c, cloudflareCredentialOverrides as i, announceCloudflareLogin as n, ensureCloudflareAuthentication as o, cloudflareAuthNeedsTerminal as r, parseCloudflareAuthSession as s, CloudflareAuthenticationError as t };

package/dist/{cloudflare-cmd-4RPGN3KB.mjs → cloudflare-cmd-D6PrKn7o.mjs}

@@ -1,7 +1,7 @@
-import { t as basename } from "./dist-BrsS7cai.mjs";
-import { D as log } from "./output-B0cfNSx5.mjs";
-import { v as readRootWranglerConfig } from "./wrangler--imS8n0d.mjs";
-import { a as createBundledCloudflareAuthRunner, c as parseCloudflareAuthSession, o as enableCloudflareKeyring, r as cloudflareCredentialOverrides, s as ensureCloudflareAuthentication } from "./cloudflare-auth-6M5llVPC.mjs";
+import { t as basename } from "./dist-4WkAWhWx.mjs";
+import { v as readRootWranglerConfig } from "./wrangler-D01qs6VB.mjs";
+import { j as log } from "./dist-Dn6nn2IU.mjs";
+import { a as createBundledCloudflareAuthRunner, i as cloudflareCredentialOverrides, o as ensureCloudflareAuthentication, s as parseCloudflareAuthSession } from "./cloudflare-auth-BCmTc1X_.mjs";
 //#region src/cli/cloudflare-cmd.ts
 async function runCloudflareCommand(root, args) {
 	const runWrangler = createBundledCloudflareAuthRunner(root);
@@ -18,12 +18,10 @@ async function runCloudflareCommand(root, args) {
 			const result = await runWrangler(["whoami", "--json"], true);
 			const session = result.status === 0 && !result.signal && !result.error ? parseCloudflareAuthSession(result.stdout) : null;
 			if (!session) throw new Error("Not signed in to Cloudflare. Run `void cloudflare login`.");
-			if (session.authType === "OAuth Token") await enableCloudflareKeyring(runWrangler);
 			log.info(formatSession(root, session));
 			return;
 		}
 		case "logout": {
-			await enableCloudflareKeyring(runWrangler);
 			if ((await runWrangler(["logout"], true)).status !== 0) throw new Error("Could not remove the local Cloudflare browser session.");
 			const overrides = cloudflareCredentialOverrides();
 			if (overrides.length > 0) log.warn(`Removed the local Cloudflare browser session. Environment credentials remain active: ${overrides.join(", ")}.`);
@@ -36,7 +34,6 @@ function formatSession(root, session) {
 	const lines = ["Signed in to Cloudflare."];
 	if (session.email) lines.push(`User: ${session.email}`);
 	if (session.authType) lines.push(`Authentication: ${session.authType}`);
-	if (session.authType === "OAuth Token") lines.push("Credential storage: encrypted file protected by the OS keychain.");
 	const overrides = cloudflareCredentialOverrides();
 	if (overrides.length > 0) lines.push(`Environment credentials: ${overrides.join(", ")}`);
 	lines.push("Accessible accounts:");

package/dist/{cloudflare-connect-t1UU5svD.mjs → cloudflare-connect-DloREDlc.mjs}

@@ -1,18 +1,18 @@
-import { o as join, t as basename } from "./dist-BrsS7cai.mjs";
-import { D as log, I as isCancel, M as select } from "./output-B0cfNSx5.mjs";
-import { i as LATEST_KNOWN_COMPAT_DATE, k as writeProvisionedWranglerConfig, v as readRootWranglerConfig } from "./wrangler--imS8n0d.mjs";
-import { a as createBundledCloudflareAuthRunner, s as ensureCloudflareAuthentication } from "./cloudflare-auth-6M5llVPC.mjs";
+import { a as join, t as basename } from "./dist-4WkAWhWx.mjs";
+import { i as LATEST_KNOWN_COMPAT_DATE, k as writeProvisionedWranglerConfig, v as readRootWranglerConfig } from "./wrangler-D01qs6VB.mjs";
+import { I as select, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
+import { a as createBundledCloudflareAuthRunner, o as ensureCloudflareAuthentication } from "./cloudflare-auth-BCmTc1X_.mjs";
 import { existsSync } from "node:fs";
 //#region src/cli/cloudflare-connect.ts
 async function connectCloudflare(root, interactive = Boolean(process.stdin.isTTY)) {
 	if (process.env.CLOUDFLARE_ENV || process.env.CLOUDFLARE_VITE_WRANGLER_CONFIG_PATH) throw new Error("connect: Named Cloudflare environments and config overrides are not supported.");
-	const existingConfigPath = ["wrangler.jsonc", "wrangler.json"].map((name) => join(root, name)).find(existsSync);
 	let existingConfig;
 	try {
 		existingConfig = readRootWranglerConfig(root);
 	} catch {
-		throw new Error(`connect: Invalid ${basename(existingConfigPath)}. Fix it before connecting to Cloudflare.`);
+		throw new Error("connect: Invalid Cloudflare config. Fix it before connecting to Cloudflare.");
 	}
+	const existingConfigPath = existingConfig?.configPath;
 	const config = existingConfig?.config ?? {};
 	const envAccount = process.env.CLOUDFLARE_ACCOUNT_ID || process.env.CF_ACCOUNT_ID;
 	const configuredAccount = typeof config.account_id === "string" ? config.account_id : void 0;

package/dist/cloudflare-operations-BHNJVDbN.mjs

@@ -0,0 +1,2 @@
+import { _ as resolveCloudflareD1Context, b as tailCloudflareWorker, c as listCloudflareDomains, g as readCloudflareWorkerStatus, h as readCloudflareD1Migrations, l as listCloudflareSecrets, m as putCloudflareSecret, n as applyCloudflareD1Migrations, o as deleteCloudflareSecret, r as changeCloudflareDomain, s as executeCloudflareD1Sql, t as activateCloudflareExistingVersion, v as resolveCloudflareOperationContext, y as syncCloudflareSecrets } from "./cloudflare-operations-CPEdHYhM.mjs";
+export { activateCloudflareExistingVersion, applyCloudflareD1Migrations, changeCloudflareDomain, deleteCloudflareSecret, executeCloudflareD1Sql, listCloudflareDomains, listCloudflareSecrets, putCloudflareSecret, readCloudflareD1Migrations, readCloudflareWorkerStatus, resolveCloudflareD1Context, resolveCloudflareOperationContext, syncCloudflareSecrets, tailCloudflareWorker };

package/dist/{cloudflare-operations-BzWnlC1_.mjs → cloudflare-operations-CPEdHYhM.mjs}

@@ -1,35 +1,13 @@
-import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { A as writeWranglerPublishedTrafficSnapshot, O as updateWranglerCustomDomain, S as readWranglerPublishedTrafficSnapshot, b as readWranglerCustomDomains } from "./wrangler--imS8n0d.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
+import { A as writeWranglerPublishedTrafficSnapshot, L as materializeCloudflareConfig, O as updateWranglerCustomDomain, R as persistCloudflareConfig, S as readWranglerPublishedTrafficSnapshot, b as readWranglerCustomDomains } from "./wrangler-D01qs6VB.mjs";
 import { r as scanWranglerDotenvKeys } from "./dotenv-VQxupEUv.mjs";
-import { o as resolveWranglerArgv } from "./preset-lAy0B0BQ.mjs";
-import { i as provisionEnv, o as resolvePinnedApiBaseUrl, r as deleteEnvVarCaseAware, t as assertNoTransportRedirectInProjectDotenv } from "./provision-CSJOjjQk.mjs";
+import { o as resolveWranglerArgv } from "./preset-Dowh9tTt.mjs";
+import { g as resolvePinnedApiBaseUrl, h as provisionEnv, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware } from "./provision-Cck2m3jJ.mjs";
 import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { spawnSync } from "node:child_process";
 import { deployCloudflareVersionTraffic, encodeCloudflareVersionMessage, parseCloudflareVersionMessage, parseRootWranglerConfig, readBindingFieldPresence, readCloudflareTriggerConfig, readWranglerTopLevelString, resolveD1MigrateTarget, stabilizeCloudflareVersionTriggers } from "@void/deploy-cloudflare";
 //#region src/cli/cloudflare-operations.ts
-var cloudflare_operations_exports = /* @__PURE__ */ __exportAll({
-	activateCloudflareExistingVersion: () => activateCloudflareExistingVersion,
-	applyCloudflareD1Migrations: () => applyCloudflareD1Migrations,
-	changeCloudflareDomain: () => changeCloudflareDomain,
-	createCloudflareEmptyDomainPublisher: () => createCloudflareEmptyDomainPublisher,
-	deleteCloudflareSecret: () => deleteCloudflareSecret,
-	executeCloudflareD1Sql: () => executeCloudflareD1Sql,
-	listCloudflareDomains: () => listCloudflareDomains,
-	listCloudflareSecrets: () => listCloudflareSecrets,
-	parseActiveVersionId: () => parseActiveVersionId,
-	parseCloudflareDeployedVersionIds: () => parseCloudflareDeployedVersionIds,
-	parseCloudflareVersions: () => parseCloudflareVersions,
-	publishEmptyCloudflareCustomDomainSet: () => publishEmptyCloudflareCustomDomainSet,
-	putCloudflareSecret: () => putCloudflareSecret,
-	readCloudflareD1Migrations: () => readCloudflareD1Migrations,
-	readCloudflareWorkerStatus: () => readCloudflareWorkerStatus,
-	resolveCloudflareD1Context: () => resolveCloudflareD1Context,
-	resolveCloudflareOperationContext: () => resolveCloudflareOperationContext,
-	syncCloudflareSecrets: () => syncCloudflareSecrets,
-	tailCloudflareWorker: () => tailCloudflareWorker
-});
 function resolveCloudflareOperationContext(root, runner) {
 	const configPath = discoverRootWranglerConfig(root);
 	if (!existsSync(configPath)) throw new Error(`No Cloudflare config found at "${configPath}". Run \`void init\` first.`);
@@ -39,7 +17,7 @@ function resolveCloudflareOperationContext(root, runner) {
 	const workerName = readWranglerTopLevelString(config, "name");
 	if (!workerName) throw new Error(`Cloudflare config "${configPath}" has no worker name. Run \`void init\` first.`);
 	const accountId = readWranglerTopLevelString(config, "account_id") ?? (process.env.CLOUDFLARE_ACCOUNT_ID?.trim() || void 0);
-	if (!accountId) throw new Error("No Cloudflare account is pinned. Set account_id in wrangler.jsonc or CLOUDFLARE_ACCOUNT_ID.");
+	if (!accountId) throw new Error("No Cloudflare account is pinned. Set cloudflare.account_id in void.config.ts or CLOUDFLARE_ACCOUNT_ID.");
 	const apiBaseUrl = resolvePinnedApiBaseUrl(process.env, readWranglerTopLevelString(config, "compliance_region"));
 	return {
 		accountId,
@@ -262,7 +240,8 @@ async function activateCloudflareExistingVersion(context, target, current) {
 		targetTriggerConfig,
 		previousTriggerConfig: currentTriggerConfig,
 		knownTriggerConfigs,
-		publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context)
+		publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context),
+		publishEmptyCrons: createCloudflareEmptyCronPublisher(context)
 	});
 	if (triggers.ok && triggers.targetOwnsTraffic) {
 		writeWranglerPublishedTrafficSnapshot(context.configPath, {
@@ -286,7 +265,8 @@ async function activateCloudflareExistingVersion(context, target, current) {
 			targetTriggerConfig,
 			previousTriggerConfig: currentTriggerConfig,
 			knownTriggerConfigs,
-			publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context)
+			publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context),
+			publishEmptyCrons: createCloudflareEmptyCronPublisher(context)
 		});
 		throw new Error(repair.ok ? `Cloudflare rollback to ${target.id} was superseded by ${repair.activeVersionId}; Void restored the active version's triggers. Refresh deployment status before retrying.` : `Cloudflare rollback to ${target.id} was superseded by ${ownerBeforeCompensation ?? "an unknown version"}, but Void could not restore the active triggers (${repair.reason}). Inspect the Worker immediately.`);
 	}
@@ -309,7 +289,8 @@ async function activateCloudflareExistingVersion(context, target, current) {
 			targetTriggerConfig: currentTriggerConfig,
 			previousTriggerConfig: targetTriggerConfig,
 			knownTriggerConfigs,
-			publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context)
+			publishEmptyCustomDomains: createCloudflareEmptyDomainPublisher(context),
+			publishEmptyCrons: createCloudflareEmptyCronPublisher(context)
 		});
 		if (!restoredTriggers.ok) recoveryFailure = "previous trigger synchronization failed";
 		else if (!restoredTriggers.targetOwnsTraffic) recoveryFailure = `recovery was superseded by ${restoredTriggers.activeVersionId}`;
@@ -357,7 +338,8 @@ async function changeCloudflareDomain(root, hostname, action, runner, emptyDomai
 	if (!update.modified) return update;
 	if (update.domains.length === 0 && !emptyDomainPublisher && !resolveCloudflareApiToken()) {
 		writeFileSync(before.configPath, original);
-		throw new Error("Deleting the final Cloudflare custom domain requires CLOUDFLARE_API_TOKEN because Wrangler cannot reconcile an empty custom-domain set. Export a scoped token with Workers Scripts: Edit permission and retry. No local or remote state changed.");
+		persistCloudflareConfig(root);
+		throw new Error("Deleting the final Cloudflare custom domain requires CLOUDFLARE_API_TOKEN for the empty-domain API update. Export a scoped token with Workers Scripts: Edit permission and retry. No local or remote state changed.");
 	}
 	const triggerConfigDir = mkdtempSync(join(tmpdir(), "void-domain-triggers-"));
 	const triggerConfigPath = join(triggerConfigDir, "wrangler.json");
@@ -381,6 +363,7 @@ async function changeCloudflareDomain(root, hostname, action, runner, emptyDomai
 		await deployRoutes();
 	} catch (error) {
 		writeFileSync(before.configPath, original);
+		persistCloudflareConfig(root);
 		try {
 			await deployRoutes();
 		} catch (restoreError) {
@@ -410,7 +393,7 @@ async function changeCloudflareDomain(root, hostname, action, runner, emptyDomai
 */
 async function publishEmptyCloudflareCustomDomainSet(context) {
 	const token = resolveCloudflareApiToken();
-	if (!token) throw new Error("CLOUDFLARE_API_TOKEN is required to restore an empty custom-domain set after Wrangler failed.");
+	if (!token) throw new Error("CLOUDFLARE_API_TOKEN is required to restore an empty custom-domain set after the Cloudflare trigger update failed.");
 	const response = await fetch(`${context.apiBaseUrl}/accounts/${context.accountId}/workers/scripts/${context.workerName}/domains/records`, {
 		method: "PUT",
 		headers: {
@@ -454,6 +437,25 @@ function createCloudflareEmptyDomainPublisher(context) {
 		}
 	};
 }
+/** Publish an explicit empty Cron Trigger set through Void's pinned cf transport. */
+function createCloudflareEmptyCronPublisher(context) {
+	return async () => {
+		try {
+			return await run(context, [
+				"triggers",
+				"clear-crons",
+				...targetArgs(context)
+			]);
+		} catch (error) {
+			return {
+				status: 1,
+				stdout: "",
+				stderr: errorMessage(error),
+				error: errorMessage(error)
+			};
+		}
+	};
+}
 function resolveCloudflareApiToken() {
 	return process.env.CLOUDFLARE_API_TOKEN || process.env.CF_API_TOKEN || void 0;
 }
@@ -493,7 +495,7 @@ async function run(context, args, options) {
 	}));
 	if (result.status !== 0 || result.signal != null || result.error !== void 0 && result.error !== null && result.error !== "") {
 		const detail = result.stderr.trim() || result.stdout.trim() || result.error || "unknown error";
-		throw new Error(`Wrangler failed (${args.slice(0, 2).join(" ")}, exit ${result.status}): ${detail}`);
+		throw new Error(`Cloudflare command failed (${args.slice(0, 2).join(" ")}, exit ${result.status}): ${detail}`);
 	}
 	return result;
 }
@@ -533,11 +535,7 @@ function createCloudflareOperationRunner(root, accountId, apiBaseUrl) {
 	};
 }
 function discoverRootWranglerConfig(root) {
-	for (const name of ["wrangler.jsonc", "wrangler.json"]) {
-		const path = join(root, name);
-		if (existsSync(path)) return path;
-	}
-	return join(root, "wrangler.jsonc");
+	return materializeCloudflareConfig(root);
 }
 function assertNoOperationConfigOverride(root) {
 	if (process.env.CLOUDFLARE_ENV?.trim()) throw new Error("CLOUDFLARE_ENV is set. Void Cloudflare operations target the top-level config only.");
@@ -563,4 +561,4 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-export { createCloudflareEmptyDomainPublisher as n, cloudflare_operations_exports as t };
+export { resolveCloudflareD1Context as _, createCloudflareEmptyDomainPublisher as a, tailCloudflareWorker as b, listCloudflareDomains as c, parseCloudflareDeployedVersionIds as d, parseCloudflareVersions as f, readCloudflareWorkerStatus as g, readCloudflareD1Migrations as h, createCloudflareEmptyCronPublisher as i, listCloudflareSecrets as l, putCloudflareSecret as m, applyCloudflareD1Migrations as n, deleteCloudflareSecret as o, publishEmptyCloudflareCustomDomainSet as p, changeCloudflareDomain as r, executeCloudflareD1Sql as s, activateCloudflareExistingVersion as t, parseActiveVersionId as u, resolveCloudflareOperationContext as v, syncCloudflareSecrets as y };

package/dist/cloudflare-user-output-Q-k0QoNQ.mjs

@@ -0,0 +1,20 @@
+//#region src/cli/cloudflare-user-output.ts
+/**
+* Keep Void's public CLI vocabulary at the product level while preserving real
+* Cloudflare config filenames and environment variables that users may need to
+* inspect. The underlying implementation remains available in source and deploy
+* diagnostics, but normal remediation always points back to Void commands.
+*/
+function formatCloudflareUserMessage(message) {
+	const preserved = [];
+	const protect = (value) => {
+		return `\uE000VOID_CF_TERM_${preserved.push(value) - 1}\uE001`;
+	};
+	let result = message.replace(/(?:[A-Za-z]:)?[^\s`"']*wrangler\.jsonc?/gi, protect).replace(/\bWRANGLER_[A-Z0-9_]+\b/g, protect).replace(/\.wrangler\b/gi, protect).replace(/`wrangler deploy`/gi, "`void deploy --platform cloudflare`").replace(/`wrangler secret list[^`]*`/gi, "`void secret list`").replace(/`wrangler secret put\s+([^`]*)`/gi, "`void secret put $1`").replace(/`wrangler d1 migrations apply[^`]*`/gi, "`void db migrate --remote`").replace(/`wrangler d1 migrations list[^`]*`/gi, "`void db status`").replace(/`wrangler[^`]*`/gi, "the underlying Cloudflare operation").replace(/"wrangler[^"\n]*"/gi, "\"Cloudflare operation\"").replace(/\bwrangler uploader\b/gi, "Cloudflare deployment tool").replace(/\bwrangler (?:CLI|binary|process|child)\b/gi, "Cloudflare deployment tool").replace(/\bwrangler config\b/gi, "Cloudflare config").replace(/\bwrangler\b/gi, "Cloudflare tooling");
+	result = result.replace(/\uE000VOID_CF_TERM_(\d+)\uE001/g, (_match, index) => {
+		return preserved[Number(index)] ?? "";
+	});
+	return result;
+}
+//#endregion
+export { formatCloudflareUserMessage as t };

package/dist/collect-DAUItMDS.mjs

@@ -0,0 +1,2 @@
+import { t as collectMigrations } from "./collect-DXHNWHcT.mjs";
+export { collectMigrations };

package/dist/collect-DXHNWHcT.mjs

@@ -0,0 +1,48 @@
+import { a as join, n as dirname } from "./dist-4WkAWhWx.mjs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+//#region src/migrations/collect.ts
+/**
+* Collect all .sql migration files from the migrations directory,
+* sorted by filename (lexicographic order).
+*/
+function collectMigrations(migrationsDir) {
+	if (!existsSync(migrationsDir)) return [];
+	return readdirSync(migrationsDir).filter((f) => f.endsWith(".sql") && f !== "seed.sql").sort().map((name) => ({
+		name,
+		sql: readFileSync(join(migrationsDir, name), "utf-8")
+	}));
+}
+/**
+* Read `db/migrations/meta/_journal.json` if it exists. Drizzle maintains
+* this file whenever `drizzle-kit generate` runs; every `.sql` migration
+* under `db/migrations/` should correspond to an entry whose `tag` is the
+* filename without the `.sql` suffix.
+*/
+function readJournal(migrationsDir) {
+	const journalPath = join(migrationsDir, "meta", "_journal.json");
+	if (!existsSync(journalPath)) return;
+	try {
+		return JSON.parse(readFileSync(journalPath, "utf-8"));
+	} catch (err) {
+		throw new Error(`db: Failed to parse db/migrations/meta/_journal.json: '${err.message}'.`);
+	}
+}
+/**
+* Write `db/migrations/meta/_journal.json` with pretty-printed JSON and a
+* trailing newline, matching the format Drizzle itself emits. Creates the
+* `meta/` directory if it does not yet exist.
+*/
+function writeJournal(migrationsDir, journal) {
+	const journalPath = join(migrationsDir, "meta", "_journal.json");
+	mkdirSync(dirname(journalPath), { recursive: true });
+	writeFileSync(journalPath, JSON.stringify(journal, null, 2) + "\n");
+}
+/**
+* Drop the `.sql` extension from a migration filename, leaving any other
+* suffix untouched. Used to line filenames up with journal `tag` values.
+*/
+function stripSqlExt(name) {
+	return name.endsWith(".sql") ? name.slice(0, -4) : name;
+}
+//#endregion
+export { writeJournal as i, readJournal as n, stripSqlExt as r, collectMigrations as t };

package/dist/config--T87TD8T.mjs

@@ -0,0 +1,2 @@
+import { m as readConfig, u as getDatabaseDialect } from "./config-Dxr6cTXn.mjs";
+export { getDatabaseDialect, readConfig };

package/dist/{config-NOG_U1aK.mjs → config-BSe70f4T.mjs}

@@ -1,10 +1,8 @@
-import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
-import { c as relative, o as join } from "./dist-BrsS7cai.mjs";
-import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
-import { r as schemaSpecifier, t as discoverSchema } from "./discover-xvfrgJeo.mjs";
+import { a as join, l as relative } from "./dist-4WkAWhWx.mjs";
+import { n as readProjectPaths } from "./project-paths-CKQ-Q5JS.mjs";
+import { n as schemaSpecifier, t as discoverSchema } from "./discover-C4O6YxVS.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/drizzle/config.ts
-var config_exports = /* @__PURE__ */ __exportAll({ writeDrizzleConfig: () => writeDrizzleConfig });
 /**
 * Write a temporary drizzle-kit config to `.void/drizzle.config.json`.
 * All paths are relative to the project root (drizzle-kit resolves
@@ -31,4 +29,4 @@ function writeDrizzleConfig(root, dbPath, dialect = "sqlite", options) {
 	return configPath;
 }
 //#endregion
-export { writeDrizzleConfig as n, config_exports as t };
+export { writeDrizzleConfig as t };

package/dist/config-DDIFxQYx.mjs

@@ -0,0 +1,2 @@
+import { t as writeDrizzleConfig } from "./config-BSe70f4T.mjs";
+export { writeDrizzleConfig };

package/dist/{config-uNGuFsI2.mjs → config-Dxr6cTXn.mjs}

@@ -1,27 +1,7 @@
-import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { a as validateSourceDir } from "./project-paths-SK8nMHPp.mjs";
+import { a as validateSourceDir, c as loadVoidConfig } from "./project-paths-CKQ-Q5JS.mjs";
 import { i as isVoidAuthProvider, t as VOID_AUTH_PROVIDERS } from "./providers-CJlNS3kT.mjs";
 import { a as parseAddress, n as MimeError } from "./mime-D5Nmdzf7.mjs";
-import { readFileSync } from "node:fs";
 //#region src/config.ts
-var config_exports = /* @__PURE__ */ __exportAll({
-	VALID_NOT_FOUND_HANDLING: () => VALID_NOT_FOUND_HANDLING,
-	VALID_REDIRECT_STATUSES: () => VALID_REDIRECT_STATUSES,
-	assertSingleSplat: () => assertSingleSplat,
-	assertUniqueCaptureNames: () => assertUniqueCaptureNames,
-	convertFallbacksConfig: () => convertFallbacksConfig,
-	convertHeadersConfig: () => convertHeadersConfig,
-	convertRedirectsConfig: () => convertRedirectsConfig,
-	convertRewritesConfig: () => convertRewritesConfig,
-	countSplats: () => countSplats,
-	getDatabaseDialect: () => getDatabaseDialect,
-	isNodeTarget: () => isNodeTarget,
-	isProtocolRelative: () => isProtocolRelative,
-	parseHostPrefixedSource: () => parseHostPrefixedSource,
-	readConfig: () => readConfig,
-	resolveBindingNames: () => resolveBindingNames
-});
 const CONFIG_FILE = "void.json";
 const VALID_TARGETS = /* @__PURE__ */ new Set([
 	"cloudflare",
@@ -220,24 +200,21 @@ const MIGRATION_ERRORS = {
 	mode: "\"mode\" has been renamed to \"inference.appType\"",
 	revalidate: "\"revalidate\" has moved to \"routing.revalidate\""
 };
-/**
-* Read and validate the `void.json` config file from the project root.
-* Returns an empty config object if no file exists.
-*/
+/** Read and validate the project's typed config, with legacy JSON compatibility. */
 function readConfig(root) {
-	const filePath = join(root, CONFIG_FILE);
-	let raw;
-	try {
-		raw = readFileSync(filePath, "utf-8");
-	} catch {
-		return {};
-	}
-	let config;
+	const loaded = loadVoidConfig(root);
+	return loaded ? validateConfig(loaded.value, loaded.source) : {};
+}
+/** Runtime validation also applies to TypeScript configs, whose types may be bypassed. */
+function validateConfig(config, source = CONFIG_FILE) {
 	try {
-		config = JSON.parse(raw);
-	} catch {
-		throw new Error(`config: Invalid JSON in ${CONFIG_FILE}.`);
+		return validateConfigObject(config);
+	} catch (error) {
+		if (source !== CONFIG_FILE && error instanceof Error) throw new Error(error.message.replaceAll(CONFIG_FILE, source), { cause: error });
+		throw error;
 	}
+}
+function validateConfigObject(config) {
 	if (typeof config !== "object" || config === null || Array.isArray(config)) throw new Error(`config: ${CONFIG_FILE} must be a JSON object.`);
 	const obj = config;
 	for (const [key, message] of Object.entries(MIGRATION_ERRORS)) if (obj[key] !== void 0) throw new Error(`config: ${message} in ${CONFIG_FILE}.`);
@@ -457,6 +434,9 @@ function readConfig(root) {
 			}
 		}
 	}
+	if (obj.cloudflare !== void 0) {
+		if (typeof obj.cloudflare !== "object" || obj.cloudflare === null || Array.isArray(obj.cloudflare)) throw new Error(`config: "cloudflare" in ${CONFIG_FILE} must be an object.`);
+	}
 	if (obj.database !== void 0) {
 		if (typeof obj.database !== "string" || !VALID_DATABASE_VALUES.has(obj.database)) throw new Error(`config: "database" in ${CONFIG_FILE} must be "pg" or "mysql".`);
 	}
@@ -472,6 +452,11 @@ function readConfig(root) {
 		for (const key of Object.keys(emailCfg)) if (key !== "from") throw new Error(`config: Unknown key 'email.${key}' in ${CONFIG_FILE}. Valid: from.`);
 		if (emailCfg.from !== void 0) parseEmailFrom(emailCfg.from);
 	}
+	if ("$schema" in obj) {
+		const resolved = { ...obj };
+		delete resolved.$schema;
+		return resolved;
+	}
 	return obj;
 }
 /**
@@ -642,4 +627,4 @@ function convertFallbacksConfig(fallbacks) {
 	return rules.length > 0 ? rules : void 0;
 }
 //#endregion
-export { convertRedirectsConfig as a, getDatabaseDialect as c, parseHostPrefixedSource as d, readConfig as f, convertHeadersConfig as i, isNodeTarget as l, config_exports as n, convertRewritesConfig as o, resolveBindingNames as p, convertFallbacksConfig as r, countSplats as s, VALID_REDIRECT_STATUSES as t, isProtocolRelative as u };
+export { convertFallbacksConfig as a, convertRewritesConfig as c, isNodeTarget as d, isProtocolRelative as f, validateConfig as g, resolveBindingNames as h, assertUniqueCaptureNames as i, countSplats as l, readConfig as m, VALID_REDIRECT_STATUSES as n, convertHeadersConfig as o, parseHostPrefixedSource as p, assertSingleSplat as r, convertRedirectsConfig as s, VALID_NOT_FOUND_HANDLING as t, getDatabaseDialect as u };