void 0.20.3 → 0.21.0

package/dist/{domain-BxAyhxXN.mjs → domain-CITt8lC-.mjs}

@@ -1,6 +1,8 @@
-import { D as log, c as import_picocolors, k as note } from "./output-B0cfNSx5.mjs";
-import { S as readProjectConfig, l as getToken, x as readDeploymentPlatform } from "./auth-DPl6kck4.mjs";
-import { n as PlatformClient } from "./client-BQBrZoCX.mjs";
+import { c as import_picocolors } from "./output-urU86XeT.mjs";
+import { c as getToken } from "./auth-B9_D6ygs.mjs";
+import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-CWNIPoXc.mjs";
+import { N as note, j as log } from "./dist-Dn6nn2IU.mjs";
+import { n as PlatformClient } from "./client-PdAJ-F0t.mjs";
 //#region src/cli/domain.ts
 async function runDomainCommand(root, args) {
 	const platform = readDeploymentPlatform(root);
@@ -38,7 +40,7 @@ async function runDomainCommand(root, args) {
 }
 async function runCloudflareDomainCommand(root, args) {
 	if (args.projectSlug) throw new Error("domain: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
+	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-BHNJVDbN.mjs");
 	if (args.subcommand === "add") {
 		const result = await changeCloudflareDomain(root, args.hostname, "add");
 		log.success(result.modified ? `Domain ${args.hostname} added and activated on Cloudflare.` : `Domain ${args.hostname} is already configured.`);
@@ -64,7 +66,7 @@ async function runCloudflareDomainCommand(root, args) {
 		log.error(`domain: Domain '${args.hostname}' is not configured for this Worker.`);
 		process.exit(1);
 	}
-	const lines = [`Hostname: ${domain.pattern}`, "Status:   configured locally — present in wrangler.jsonc; remote certificate state is managed by Cloudflare."];
+	const lines = [`Hostname: ${domain.pattern}`, "Status:   configured locally — present in Void Cloudflare config; remote certificate state is managed by Cloudflare."];
 	if (args.verbose) lines.push("", "Details:", "  Type:        Cloudflare Custom Domain", "  TLS:         managed");
 	note(lines.join("\n"), "Domain Status");
 }

package/dist/{route-types-Da-DpyUp.mjs → drizzle-Beb2Am5S.mjs}

@@ -1,82 +1,5 @@
-import { c as relative, o as join } from "./dist-BrsS7cai.mjs";
 import { a as isVoidSocialAuthProvider } from "./providers-CJlNS3kT.mjs";
-import { r as writeFileIfChanged } from "./project-tsconfig-Ql2XsSQp.mjs";
-import { mkdirSync } from "node:fs";
 import { getAuthTables, getSchema } from "better-auth/db";
-//#region src/codegen/db-types.ts
-const DRIZZLE_OPERATORS = "sql, eq, ne, gt, gte, lt, lte, and, or, not, desc, asc, like, ilike, notLike, inArray, notInArray, isNull, isNotNull, between, notBetween, exists, notExists, count, sum, avg, min, max";
-/**
-* Generate `.void/db.d.ts` with Drizzle types referencing the user's schema.
-*
-* This is a proper module file (not `declare module`) whose types override
-* the base `void/db` package via a tsconfig `paths` redirect:
-*   "void/db": ["./.void/db.d.ts"]
-*
-* Imports reference `void/_db` (internal subpath pointing at the same
-* base module) to avoid circular resolution through the paths redirect.
-*/
-function generateDbDts(outDir, schema, dialect) {
-	mkdirSync(outDir, { recursive: true });
-	const lines = dialect === "mysql" ? schema ? [
-		"// Auto-generated by void — do not edit",
-		"import type { MySql2Database } from \"void/_db-mysql\";",
-		"import type * as schema from \"@schema\";",
-		"type Schema = typeof schema;",
-		"export declare const db: MySql2Database<Schema>;",
-		"export declare function createDb(connectionString: string): MySql2Database<Schema>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { MySql2Database } from \"void/_db-mysql\";",
-		""
-	] : [
-		"// Auto-generated by void — do not edit",
-		"import type { MySql2Database } from \"void/_db-mysql\";",
-		"export declare const db: MySql2Database<Record<string, never>>;",
-		"export declare function createDb(connectionString: string): MySql2Database<Record<string, never>>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { MySql2Database } from \"void/_db-mysql\";",
-		""
-	] : dialect === "postgresql" ? schema ? [
-		"// Auto-generated by void — do not edit",
-		"import type { NodePgDatabase } from \"void/_db-pg\";",
-		"import type * as schema from \"@schema\";",
-		"type Schema = typeof schema;",
-		"export declare const db: NodePgDatabase<Schema>;",
-		"export declare function createDb(connectionString: string): NodePgDatabase<Schema>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { NodePgDatabase } from \"void/_db-pg\";",
-		""
-	] : [
-		"// Auto-generated by void — do not edit",
-		"import type { NodePgDatabase } from \"void/_db-pg\";",
-		"export declare const db: NodePgDatabase<Record<string, never>>;",
-		"export declare function createDb(connectionString: string): NodePgDatabase<Record<string, never>>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { NodePgDatabase } from \"void/_db-pg\";",
-		""
-	] : schema ? [
-		"// Auto-generated by void — do not edit",
-		"/// <reference types=\"@cloudflare/workers-types\" />",
-		"import type { DrizzleD1Database } from \"void/_db\";",
-		"import type * as schema from \"@schema\";",
-		"type Schema = typeof schema;",
-		"export declare const db: DrizzleD1Database<Schema>;",
-		"export declare function createDb(d1: D1Database): DrizzleD1Database<Schema>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { DrizzleD1Database } from \"void/_db\";",
-		""
-	] : [
-		"// Auto-generated by void — do not edit",
-		"/// <reference types=\"@cloudflare/workers-types\" />",
-		"import type { DrizzleD1Database } from \"void/_db\";",
-		"export declare const db: DrizzleD1Database<Record<string, never>>;",
-		"export declare function createDb(d1: D1Database): DrizzleD1Database<Record<string, never>>;",
-		`export { ${DRIZZLE_OPERATORS} } from "void/_db";`,
-		"export type { DrizzleD1Database } from \"void/_db\";",
-		""
-	];
-	return writeFileIfChanged(join(outDir, "db.d.ts"), lines.join("\n"));
-}
-//#endregion
 //#region src/auth/drizzle.ts
 const DEFAULT_TABLE_ORDER = Number.MAX_SAFE_INTEGER;
 function resolveEmailAndPassword(configuredProviders) {
@@ -341,206 +264,4 @@ function generateVoidAuthDatabaseModule(options) {
 	].join("\n");
 }
 //#endregion
-//#region src/codegen/queue-types.ts
-/**
-* Generate .void/queues.d.ts content.
-*
-* Augments `void/queues` with a typed `QueueMap` interface
-* so `queues.emails.send(body)` is fully typed from the consumer's
-* `defineQueue<T>` phantom type.
-*/
-function generateQueueTypes(queues, queuesDir, outDir) {
-	const lines = [];
-	lines.push("// Auto-generated by void — do not edit");
-	lines.push("export interface QueueMap {");
-	for (const q of queues) {
-		const absPath = `${queuesDir}/${q.filePath}`;
-		const importPath = relative(outDir, absPath);
-		lines.push(`  ${JSON.stringify(q.name)}: Queue<(typeof import(${JSON.stringify(importPath)}))["default"]["__payload"]>;`);
-	}
-	lines.push("}");
-	lines.push("");
-	lines.push("export declare const queues: QueueMap;");
-	lines.push("");
-	return lines.join("\n");
-}
-//#endregion
-//#region src/codegen/route-types.ts
-/**
-* Generate .void/routes.d.ts content.
-*
-* Uses `typeof import(...)` so TypeScript resolves all types.
-* The codegen generates scaffolding only — never analyzes types itself.
-*/
-function generateRouteTypes(scan, routesDir, outDir, pagesDir) {
-	const lines = [];
-	lines.push("// Auto-generated by void — do not edit");
-	lines.push("export {}");
-	lines.push("type StandardSchemaV1<Input = unknown, Output = Input> = {");
-	lines.push("  readonly \"~standard\": {");
-	lines.push("    readonly version: 1;");
-	lines.push("    readonly vendor: string;");
-	lines.push("    readonly validate: (value: unknown) => unknown;");
-	lines.push("    readonly types?: { readonly input: Input; readonly output: Output } | undefined;");
-	lines.push("  };");
-	lines.push("};");
-	lines.push("declare namespace StandardSchemaV1 {");
-	lines.push("  type InferInput<Schema extends StandardSchemaV1> = NonNullable<");
-	lines.push("    Schema[\"~standard\"][\"types\"]");
-	lines.push("  >[\"input\"];");
-	lines.push("  type InferOutput<Schema extends StandardSchemaV1> = NonNullable<");
-	lines.push("    Schema[\"~standard\"][\"types\"]");
-	lines.push("  >[\"output\"];");
-	lines.push("}");
-	lines.push("");
-	lines.push("type Serialize<T> =");
-	lines.push("  T extends Response ? never :");
-	lines.push("  T extends Date ? string :");
-	lines.push("  T extends bigint ? never :");
-	lines.push("  T extends Function ? never :");
-	lines.push("  T extends undefined ? never :");
-	lines.push("  T extends Array<infer U> ? Array<Serialize<U>> :");
-	lines.push("  T extends object ? { [K in keyof T as T[K] extends Function ? never : K]: Serialize<T[K]> } :");
-	lines.push("  T;");
-	lines.push("");
-	lines.push("type ExtractInput<V> = {");
-	lines.push("  [K in keyof V as V[K] extends StandardSchemaV1 ? K : never]:");
-	lines.push("    V[K] extends StandardSchemaV1 ? StandardSchemaV1.InferInput<V[K]> : never;");
-	lines.push("};");
-	lines.push("");
-	lines.push("type ExtractOutput<S> =");
-	lines.push("  S extends StandardSchemaV1 ? StandardSchemaV1.InferOutput<S> : never;");
-	lines.push("");
-	lines.push("type RouteParams<P extends readonly string[]> =");
-	lines.push("  P extends readonly [] ? Record<string, never> : { [K in P[number]]: string };");
-	lines.push("");
-	lines.push("declare module \"void/routes\" {");
-	lines.push("  export interface RouteMap {}");
-	lines.push("  export interface WebSocketRouteMap {}");
-	lines.push("  export interface PageActionMap {}");
-	lines.push("");
-	lines.push("  /** Union of known route patterns (keys of the generated RouteMap). */");
-	lines.push("  export type RouteName = keyof RouteMap;");
-	lines.push("");
-	lines.push("  /**");
-	lines.push("   * Destination type for rewrites / fallbacks / c.rewrite().");
-	lines.push("   *");
-	lines.push("   * The `string & {}` branch keeps IDE autocomplete of known routes while");
-	lines.push("   * still accepting arbitrary strings (needed for dynamic paths like");
-	lines.push("   * `/users/${id}`). When no routes are generated yet, `RouteName` is");
-	lines.push("   * `never` and this degenerates to `string & {}`, which is assignable");
-	lines.push("   * from any string.");
-	lines.push("   */");
-	lines.push("  export type RewriteDestination = RouteName | (string & {});");
-	lines.push("");
-	lines.push("  export type ParseActionUrl<U extends string> = U extends `${infer Base}?${infer Action}` ? {");
-	lines.push("    base: Base;");
-	lines.push("    action: Action;");
-	lines.push("  } : {");
-	lines.push("    base: U;");
-	lines.push("    action: never;");
-	lines.push("  };");
-	lines.push("");
-	lines.push("  export type ResolveActionBody<U extends string> =");
-	lines.push("    ParseActionUrl<U>[\"base\"] extends keyof PageActionMap");
-	lines.push("      ? ParseActionUrl<U>[\"action\"] extends never");
-	lines.push("        ? PageActionMap[ParseActionUrl<U>[\"base\"]] extends { body: infer B }");
-	lines.push("          ? B");
-	lines.push("          : Record<string, unknown>");
-	lines.push("        : PageActionMap[ParseActionUrl<U>[\"base\"]] extends { actions: infer A }");
-	lines.push("          ? ParseActionUrl<U>[\"action\"] extends keyof A");
-	lines.push("            ? A[ParseActionUrl<U>[\"action\"]] extends { body: infer B }");
-	lines.push("              ? B");
-	lines.push("              : Record<string, unknown>");
-	lines.push("            : never");
-	lines.push("          : never");
-	lines.push("      : Record<string, unknown>;");
-	lines.push("");
-	lines.push("  export type ResolveActionParams<U extends string> =");
-	lines.push("    ParseActionUrl<U>[\"base\"] extends keyof PageActionMap");
-	lines.push("      ? PageActionMap[ParseActionUrl<U>[\"base\"]] extends { params: infer P }");
-	lines.push("        ? P");
-	lines.push("        : never");
-	lines.push("      : never;");
-	lines.push("");
-	lines.push("  export type HasActionParams<U extends string> =");
-	lines.push("    ResolveActionParams<U> extends Record<string, string> ? true : false;");
-	lines.push("");
-	lines.push("  export type ActionFormOptions<U extends string> =");
-	lines.push("    HasActionParams<U> extends true ? { params: ResolveActionParams<U> } : { params?: never };");
-	lines.push("");
-	lines.push("  export type ActionUrl =");
-	lines.push("    | {");
-	lines.push("        [K in keyof PageActionMap]: PageActionMap[K] extends { body: any } ? K : never;");
-	lines.push("      }[keyof PageActionMap]");
-	lines.push("    | {");
-	lines.push("        [K in keyof PageActionMap]: PageActionMap[K] extends { actions: infer A }");
-	lines.push("          ? `${K & string}?${keyof A & string}`");
-	lines.push("          : never;");
-	lines.push("      }[keyof PageActionMap]");
-	lines.push("");
-	lines.push("  interface RouteMap {");
-	for (const route of scan.routes) {
-		if (route.methods.length === 0) continue;
-		const absRoutePath = `${routesDir}/${route.filePath}`;
-		const importPath = relative(outDir, absRoutePath);
-		lines.push(`    ${JSON.stringify(route.pattern)}: {`);
-		for (const method of route.methods) {
-			lines.push(`      ${method}: {`);
-			lines.push(`        input: ExtractInput<(typeof import(${JSON.stringify(importPath)}))["${method}"]["__validators"]>;`);
-			lines.push(`        output: Serialize<Awaited<(typeof import(${JSON.stringify(importPath)}))["${method}"]["__output"]>>;`);
-			lines.push("      };");
-		}
-		lines.push("    };");
-	}
-	lines.push("  }");
-	lines.push("");
-	lines.push("  interface WebSocketRouteMap {");
-	for (const route of scan.websockets ?? []) {
-		const absRoutePath = `${routesDir}/${route.filePath}`;
-		const importPath = relative(outDir, absRoutePath);
-		lines.push(`    ${JSON.stringify(route.pattern)}: {`);
-		lines.push(`      params: RouteParams<${JSON.stringify(route.params)}>;`);
-		lines.push(`      client: ExtractInput<(typeof import(${JSON.stringify(importPath)}))["default"]["messages"]["client"]>;`);
-		lines.push(`      server: ExtractOutput<(typeof import(${JSON.stringify(importPath)}))["default"]["messages"]["server"]>;`);
-		lines.push("    };");
-	}
-	lines.push("  }");
-	const actionPages = scan.pages.pages.filter((p) => p.methods.includes("action") || p.methods.includes("actions"));
-	if (actionPages.length > 0 && pagesDir) {
-		lines.push("  interface PageActionMap {");
-		for (const page of actionPages) {
-			const hasAction = page.methods.includes("action");
-			const hasActions = page.methods.includes("actions");
-			if (hasAction && hasActions) throw new Error(`pages: Page '${page.pattern}' exports both "action" and "actions". Use one or the other.`);
-			lines.push(`    ${JSON.stringify(page.pattern)}: {`);
-			let importPath = null;
-			if (page.serverPath) {
-				const absPath = `${pagesDir}/${page.serverPath}`;
-				importPath = relative(outDir, absPath);
-			}
-			if (hasActions) {
-				if (importPath) {
-					const actionsImport = `(typeof import(${JSON.stringify(importPath)}))["actions"]`;
-					lines.push(`      actions: { [K in keyof ${actionsImport}]: {`);
-					lines.push(`        body: ExtractInput<${actionsImport}[K]["__validators"]> extends { body: infer B } ? B : Record<string, unknown>;`);
-					lines.push("      } };");
-				}
-			} else if (importPath) {
-				const importExpr = `(typeof import(${JSON.stringify(importPath)}))["action"]`;
-				lines.push(`      body: ExtractInput<${importExpr}["__validators"]> extends { body: infer B } ? B : Record<string, unknown>;`);
-			} else lines.push("      body: Record<string, unknown>;");
-			if (page.params.length > 0) {
-				const paramsType = page.params.map((p) => `${p}: string`).join("; ");
-				lines.push(`      params: { ${paramsType} };`);
-			}
-			lines.push("    };");
-		}
-		lines.push("  }");
-	}
-	lines.push("}");
-	lines.push("");
-	return { dts: lines.join("\n") };
-}
-//#endregion
-export { resolveVoidAuthMigrationSchema as a, generateVoidAuthDrizzleSchema as i, generateQueueTypes as n, DRIZZLE_OPERATORS as o, generateVoidAuthDatabaseModule as r, generateDbDts as s, generateRouteTypes as t };
+export { generateVoidAuthDrizzleSchema as n, resolveVoidAuthMigrationSchema as r, generateVoidAuthDatabaseModule as t };

package/dist/{email-Ce6SQq-i.mjs → email-C5kaZXzJ.mjs}

@@ -1,5 +1,5 @@
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { n as globSync, t as glob } from "./dist-m40_XgNh.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
+import { n as globSync, t as glob } from "./dist-Bn8Kodjp.mjs";
 //#region src/router/email.ts
 /**
 * Scan `email/` for inbound email handlers.

package/dist/{email-Bj7Cvdwp.mjs → email-_8VmyX7V.mjs}

@@ -1,12 +1,14 @@
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { D as log, I as isCancel, c as import_picocolors, i as createSpinner, j as password, k as note, w as confirm } from "./output-B0cfNSx5.mjs";
-import { C as renderAddressMap, S as preflightEmail, a as isWranglerNonInteractiveOrCI, b as createNodeEmailDns, i as discoverRootWranglerConfig, o as loadProvisionModule, r as deriveWorkerName, s as resolveDeployTransport, t as createDeployWranglerRunner, u as runWranglerAuthToken, w as renderEmailChecklist, x as findEmailConfigConflicts, y as applyEmailSetup } from "./deploy-BAhhcg5q.mjs";
-import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
-import { S as readProjectConfig, f as openBrowser, l as getToken } from "./auth-DPl6kck4.mjs";
-import { k as writeProvisionedWranglerConfig } from "./wrangler--imS8n0d.mjs";
-import { f as readConfig } from "./config-uNGuFsI2.mjs";
-import { a as scanEmailHandlersSync } from "./email-Ce6SQq-i.mjs";
-import { n as PlatformClient, t as PlatformApiError } from "./client-BQBrZoCX.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
+import { c as import_picocolors, i as createSpinner } from "./output-urU86XeT.mjs";
+import { I as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, Y as runWranglerAuthToken, _ as deriveWorkerName, _t as preflightEmail, gt as findEmailConfigConflicts, h as createDeployWranglerRunner, ht as createNodeEmailDns, k as loadProvisionModule, mt as applyEmailSetup, v as discoverRootWranglerConfig, vt as renderAddressMap, yt as renderEmailChecklist } from "./deploy-H968Lo4T.mjs";
+import { n as readProjectPaths } from "./project-paths-CKQ-Q5JS.mjs";
+import { c as getToken, d as openBrowser } from "./auth-B9_D6ygs.mjs";
+import { o as readProjectConfig } from "./project-CWNIPoXc.mjs";
+import { m as readConfig } from "./config-Dxr6cTXn.mjs";
+import { k as writeProvisionedWranglerConfig } from "./wrangler-D01qs6VB.mjs";
+import { E as confirm, F as password, N as note, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
+import { a as scanEmailHandlersSync } from "./email-C5kaZXzJ.mjs";
+import { n as PlatformClient, t as PlatformApiError } from "./client-PdAJ-F0t.mjs";
 import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { execSync } from "node:child_process";
@@ -665,7 +667,7 @@ async function runEmailCloudflareCommand(root, args, deps = {}) {
 	const rawExit = deps.exit ?? ((code) => process.exit(code));
 	const from = readConfig(root).email?.from;
 	if (!from) {
-		log.error("email: no sender configured. Add \"email\": { \"from\": \"you@mail.acme.com\" } to void.json — its host is the domain email is set up on.");
+		log.error("email: no sender configured. Set email.from to \"you@mail.acme.com\" in void.config.ts — its host is the domain email is set up on.");
 		return rawExit(1);
 	}
 	const paths = readProjectPaths(root);
@@ -706,7 +708,7 @@ async function runEmailCloudflareCommandInConfig(root, args, project, configPath
 	const accountId = readWranglerTopLevelString(rootConfig, "account_id") ?? (process.env.CLOUDFLARE_ACCOUNT_ID?.trim() || void 0);
 	if (!accountId) return fail([
 		"email: no Cloudflare account is pinned.",
-		"Set `account_id` in your root wrangler.jsonc, or export CLOUDFLARE_ACCOUNT_ID —",
+		"Set `cloudflare.account_id` in void.config.ts, or export CLOUDFLARE_ACCOUNT_ID —",
 		"the same pin `void deploy --platform cloudflare` needs."
 	].join("\n"));
 	const workerName = readWranglerTopLevelString(rootConfig, "name") ?? deriveWorkerName(root);
@@ -757,7 +759,7 @@ async function runEmailCloudflareCommandInConfig(root, args, project, configPath
 	}
 	if (pre.blockers.some((b) => b.scope === "all")) return fail("email: nothing was changed — fix the ✘ rows above and rerun.");
 	if (!pre.ready || pre.sendingRetryable) {
-		if (!(deps.isInteractive ?? !isWranglerNonInteractiveOrCI())) return fail("email: `void email setup` changes your Cloudflare account, so it needs an interactive terminal. Run it locally once, commit wrangler.jsonc, then redeploy.");
+		if (!(deps.isInteractive ?? !isWranglerNonInteractiveOrCI())) return fail("email: `void email setup` changes your Cloudflare account, so it needs an interactive terminal. Run it locally once, commit void.lock.json, then redeploy.");
 		if (!await (deps.confirm ?? (async (message) => {
 			const answer = await confirm({
 				message,

package/dist/{entry-DU3oDoQ3.mjs → entry-DdRFGK0y.mjs}

@@ -1,5 +1,5 @@
-import { c as relative, o as join } from "./dist-BrsS7cai.mjs";
-import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
+import { a as join, l as relative } from "./dist-4WkAWhWx.mjs";
+import { n as readProjectPaths } from "./project-paths-CKQ-Q5JS.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
 //#region src/shared/ast.ts

package/dist/{env-DP_EErve.mjs → env-DV4r3nHz.mjs}

@@ -1,9 +1,11 @@
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { A as outro, D as log, E as intro, k as note, r as cliTitle } from "./output-B0cfNSx5.mjs";
-import { S as readProjectConfig, l as getToken, x as readDeploymentPlatform } from "./auth-DPl6kck4.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BNPhro-M.mjs";
-import { c as fetchRemoteSecretNames, l as formatEnvReport, p as validateProdEnv } from "./env-validation-CF6KvTRf.mjs";
-import { n as PlatformClient } from "./client-BQBrZoCX.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
+import { r as cliTitle } from "./output-urU86XeT.mjs";
+import { c as getToken } from "./auth-B9_D6ygs.mjs";
+import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-CWNIPoXc.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-CWDtqHgw.mjs";
+import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-BsFEXps5.mjs";
+import { N as note, O as intro, P as outro, j as log } from "./dist-Dn6nn2IU.mjs";
+import { n as PlatformClient } from "./client-PdAJ-F0t.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
@@ -24,7 +26,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BHNJVDbN.mjs");
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);

package/dist/{env-DBKmK4vc.mjs → env-DX_v-Q-v.mjs}

@@ -1,4 +1,4 @@
-import { o as join } from "./dist-BrsS7cai.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
 import { n as parseDotenvFile } from "./dotenv-VQxupEUv.mjs";
 import { readdirSync } from "node:fs";
 //#region src/shared/env.ts

package/dist/env-Yz4HcvHs.mjs

@@ -0,0 +1,78 @@
+import { a as getRawRuntimeEnv, i as envContext, n as INTERNAL_BINDING_PREFIXES, o as isIsrActive, r as asEnv, t as INTERNAL_BINDING_EXACT_NAMES } from "./env-raw-Cx8ElDdj.mjs";
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/runtime/env.ts
+/**
+* Public runtime env API — exposed via "void/_env".
+*
+* All exports from this module are accessible to user code.
+* Internal platform bindings (__VOID_*, __PROJECT_*) are filtered
+* from getRuntimeEnv() and blocked in getRuntimeBinding().
+*/
+const runtimeRequestContext = new AsyncLocalStorage();
+/** @internal Reuse a resource only within the current runtime request. */
+function getRuntimeRequestResource(key, initialize) {
+	const scope = runtimeRequestContext.getStore();
+	if (!scope) throw new Error("env: Request-scoped resource is unavailable outside a runtime handler.");
+	if (scope.resources.has(key)) return scope.resources.get(key);
+	const resource = initialize();
+	scope.resources.set(key, resource);
+	return resource;
+}
+function withRuntimeEnv(env, fn) {
+	const resolved = asEnv(env);
+	if (!resolved) return fn();
+	if (runtimeRequestContext.getStore()) return envContext.run(resolved, fn);
+	const scope = { resources: /* @__PURE__ */ new Map() };
+	return envContext.run(resolved, () => runtimeRequestContext.run(scope, fn));
+}
+/**
+* Shared internal-binding predicate. A binding is framework-internal — and must
+* never be exposed to user code — when it carries an internal prefix
+* (`__VOID_`, `__PROJECT_`; always hidden) or is an exact-name internal (e.g.
+* `ISR_CACHE`; hidden ONLY while ISR is active for the isolate). `rawEnv` is the
+* unfiltered runtime env, consulted via {@link isIsrActive} to gate the
+* exact-name check so a non-ISR app's own `ISR_CACHE` binding stays visible —
+* matching the build-time `isr` gate on the generated `c.env` filter.
+*
+* Single source of truth for the runtime `env` filter here and the public
+* `void/env` proxy (`env-public.ts`).
+*/
+function isInternalBinding(name, rawEnv) {
+	if (INTERNAL_BINDING_PREFIXES.some((p) => name.startsWith(p))) return true;
+	return isIsrActive(rawEnv) && INTERNAL_BINDING_EXACT_NAMES.includes(name);
+}
+function filterEnvProxy(env) {
+	return new Proxy(env, {
+		get(target, prop, receiver) {
+			if (typeof prop === "string" && isInternalBinding(prop, target)) return;
+			return Reflect.get(target, prop, receiver);
+		},
+		has(target, prop) {
+			if (typeof prop === "string" && isInternalBinding(prop, target)) return false;
+			return Reflect.has(target, prop);
+		},
+		ownKeys(target) {
+			return Reflect.ownKeys(target).filter((key) => typeof key !== "string" || !isInternalBinding(key, target));
+		},
+		getOwnPropertyDescriptor(target, prop) {
+			if (typeof prop === "string" && isInternalBinding(prop, target)) return;
+			return Reflect.getOwnPropertyDescriptor(target, prop);
+		}
+	});
+}
+/** Returns the runtime env with internal platform bindings hidden. */
+function getRuntimeEnv() {
+	return filterEnvProxy(getRawRuntimeEnv());
+}
+function getRuntimeBinding(name) {
+	const raw = getRawRuntimeEnv();
+	if (isInternalBinding(name, raw)) return;
+	return raw[name];
+}
+function requireRuntimeBinding(name) {
+	const value = getRuntimeBinding(name);
+	if (value !== void 0 && value !== null) return value;
+	throw new Error(`env: Missing Cloudflare binding '${name}'.`);
+}
+//#endregion
+export { requireRuntimeBinding as a, isInternalBinding as i, getRuntimeEnv as n, withRuntimeEnv as o, getRuntimeRequestResource as r, getRuntimeBinding as t };

package/dist/env-helpers--wFmQ_5Q.mjs

@@ -0,0 +1,136 @@
+//#region src/runtime/env-helpers.ts
+function build(parse, state) {
+	return {
+		"~standard": {
+			version: 1,
+			vendor: "void",
+			validate(value) {
+				if (value === void 0 || value === null || value === "") {
+					if (state.defaultValue !== void 0) return { value: state.defaultValue };
+					if (state.optional) return { value: void 0 };
+					return { issues: [{ message: "Required" }] };
+				}
+				const result = parse(typeof value === "string" ? value : String(value));
+				if (result.ok) return { value: result.value };
+				return { issues: [{ message: result.message }] };
+			}
+		},
+		optional() {
+			return build(parse, {
+				optional: true,
+				defaultValue: state.defaultValue
+			});
+		},
+		default(value) {
+			return build(parse, {
+				optional: false,
+				defaultValue: value
+			});
+		}
+	};
+}
+const empty = () => ({
+	optional: false,
+	defaultValue: void 0
+});
+/** Required string env value. */
+function string() {
+	return build((raw) => ({
+		ok: true,
+		value: raw
+	}), empty());
+}
+/** Numeric env value. Parses with `Number(raw)`; rejects NaN. */
+function number() {
+	return build((raw) => {
+		const n = Number(raw);
+		if (Number.isNaN(n)) return {
+			ok: false,
+			message: `Expected a number, got "${raw}"`
+		};
+		return {
+			ok: true,
+			value: n
+		};
+	}, empty());
+}
+/** Boolean env value. Accepts "true"/"false"/"1"/"0" (case-insensitive). */
+function boolean() {
+	return build((raw) => {
+		const lowercased = raw.toLowerCase();
+		if (lowercased === "true" || lowercased === "1") return {
+			ok: true,
+			value: true
+		};
+		if (lowercased === "false" || lowercased === "0") return {
+			ok: true,
+			value: false
+		};
+		return {
+			ok: false,
+			message: `Expected boolean (true/false/1/0), got "${raw}"`
+		};
+	}, empty());
+}
+/** URL string — validated via `new URL(raw)`. */
+function url() {
+	return build((raw) => {
+		try {
+			new URL(raw);
+			return {
+				ok: true,
+				value: raw
+			};
+		} catch {
+			return {
+				ok: false,
+				message: `Expected a valid URL, got "${raw}"`
+			};
+		}
+	}, empty());
+}
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+/** Email string — basic shape validation. */
+function email() {
+	return build((raw) => {
+		if (!EMAIL_RE.test(raw)) return {
+			ok: false,
+			message: `Expected a valid email, got "${raw}"`
+		};
+		return {
+			ok: true,
+			value: raw
+		};
+	}, empty());
+}
+/** One of a fixed set of literal string values. */
+function oneOf(values) {
+	return build((raw) => {
+		if (values.includes(raw)) return {
+			ok: true,
+			value: raw
+		};
+		return {
+			ok: false,
+			message: `Expected one of ${values.join(", ")}, got "${raw}"`
+		};
+	}, empty());
+}
+/** JSON-parsed env value. Specify `T` to type the parsed result. */
+function json() {
+	return build((raw) => {
+		try {
+			return {
+				ok: true,
+				value: JSON.parse(raw)
+			};
+		} catch (e) {
+			return {
+				ok: false,
+				message: `Invalid JSON: ${e.message}`
+			};
+		}
+	}, empty());
+}
+//#endregion
+export { oneOf as a, number as i, email as n, string as o, json as r, url as s, boolean as t };

package/dist/{env-types-BNPhro-M.mjs → env-types-CWDtqHgw.mjs}

@@ -1,5 +1,5 @@
-import { c as relative } from "./dist-BrsS7cai.mjs";
-import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
+import { l as relative } from "./dist-4WkAWhWx.mjs";
+import { n as readProjectPaths } from "./project-paths-CKQ-Q5JS.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
 import { existsSync } from "node:fs";
 //#region src/codegen/env-types.ts
@@ -43,6 +43,10 @@ function generateEnvTypes(envFileAbs, outDir) {
 	lines.push("  interface ValidatedEnv extends _VoidEnvShape {}");
 	lines.push("}");
 	lines.push("");
+	lines.push("declare global {");
+	lines.push("  interface VoidGeneratedEnvBindings extends _VoidEnvShape {}");
+	lines.push("}");
+	lines.push("");
 	lines.push("declare module \"void/handler\" {");
 	lines.push("  interface CloudBindings extends _VoidEnvShape {}");
 	lines.push("}");