void 0.21.9 → 0.23.0

package/dist/{wrangler-BymcxrRa.mjs → wrangler-7K-bW_DL.mjs}

@@ -1,228 +1,12 @@
-import { a as join, i as isAbsolute, n as dirname, o as normalize, t as basename } from "./dist-BVqXeR_h.mjs";
+import { a as join, n as dirname, o as normalize, t as basename } from "./dist-BVqXeR_h.mjs";
 import "./project-paths-GgcMozYz.mjs";
-import { m as readConfig } from "./config-CafTW6Cz.mjs";
-import { createRequire } from "node:module";
-import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { m as readConfig } from "./config-Br_JZD6u.mjs";
+import { a as hasSandboxSqliteMigration, c as resolveSandboxConfig, i as assertSandboxNamespaceConfig, l as sandboxContainerConfig, r as SANDBOX_MIGRATION_TAG } from "./config-C_XRIPx2.mjs";
+import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-Bktvwtpf.mjs";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { appendSqliteClassMigration } from "@void/deploy-core";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { SyntaxKind, applyEdits, createScanner, findNodeAtLocation, modify, parse, parseTree } from "jsonc-parser";
-import { isDeepStrictEqual } from "node:util";
-//#region src/cloudflare-config.ts
-const MATERIALIZED_CLOUDFLARE_FILE = ".void-wrangler.jsonc";
-const VOID_LOCK_FILE = "void.lock.json";
-const PREVIEW_POINTER_FILE = "preview-deploy-config.json";
-function isObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function arrayIdentity(value) {
-	if (isObject(value)) {
-		for (const key of [
-			"binding",
-			"name",
-			"tag",
-			"class_name",
-			"pattern",
-			"route"
-		]) if (typeof value[key] === "string") return `${key}:${value[key]}`;
-	}
-	return JSON.stringify(value) ?? String(value);
-}
-/** Keep authored values authoritative while retaining fields produced by Void. */
-function mergeConfig(previous, resolved, authored) {
-	if (isDeepStrictEqual(previous, authored)) return resolved;
-	if (Array.isArray(previous) && Array.isArray(resolved) && Array.isArray(authored)) {
-		const previousByIdentity = new Map(previous.map((item) => [arrayIdentity(item), item]));
-		const resolvedByIdentity = new Map(resolved.map((item) => [arrayIdentity(item), item]));
-		const authoredIdentities = new Set(authored.map(arrayIdentity));
-		return [...authored.map((item) => {
-			const identity = arrayIdentity(item);
-			return previousByIdentity.has(identity) && resolvedByIdentity.has(identity) ? mergeConfig(previousByIdentity.get(identity), resolvedByIdentity.get(identity), item) : item;
-		}), ...resolved.filter((item) => {
-			const identity = arrayIdentity(item);
-			return !previousByIdentity.has(identity) && !authoredIdentities.has(identity);
-		})];
-	}
-	if (isObject(previous) && isObject(resolved) && isObject(authored)) {
-		const result = {};
-		for (const key of /* @__PURE__ */ new Set([
-			...Object.keys(previous),
-			...Object.keys(resolved),
-			...Object.keys(authored)
-		])) {
-			if (!(key in authored)) {
-				if (!(key in previous) && key in resolved) Object.defineProperty(result, key, {
-					value: resolved[key],
-					enumerable: true,
-					writable: true,
-					configurable: true
-				});
-				continue;
-			}
-			const value = mergeConfig(previous[key], resolved[key], authored[key]);
-			Object.defineProperty(result, key, {
-				value,
-				enumerable: true,
-				writable: true,
-				configurable: true
-			});
-		}
-		return result;
-	}
-	return authored;
-}
-function parseCloudflareText(text, path) {
-	const errors = [];
-	const value = parse(text.replace(/^\uFEFF/, ""), errors, { allowTrailingComma: true });
-	if (errors.length > 0 || !isObject(value)) throw new Error(`config: ${path} must contain a valid JSON/JSONC object.`);
-	return value;
-}
-function readState(root) {
-	const path = join(root, VOID_LOCK_FILE);
-	if (!existsSync(path)) return;
-	let value;
-	try {
-		value = JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		throw new Error(`config: Invalid ${VOID_LOCK_FILE}. Fix or restore it before continuing.`);
-	}
-	if (!isObject(value) || value.version !== 1 || !isObject(value.source) || !isObject(value.resolved) || typeof value.text !== "string") throw new Error(`config: Invalid ${VOID_LOCK_FILE}. Fix or restore it before continuing.`);
-	const state = value;
-	if (!isDeepStrictEqual(parseCloudflareText(state.text, "void.lock.json"), state.resolved)) state.text = `${provenance(state.text)}${JSON.stringify(state.resolved, null, 2)}\n`;
-	return state;
-}
-function writeAtomic(path, content) {
-	const temporary = `${path}.${randomUUID()}.tmp`;
-	writeFileSync(temporary, content, { flag: "wx" });
-	try {
-		renameSync(temporary, path);
-	} finally {
-		rmSync(temporary, { force: true });
-	}
-}
-function writeState(root, state) {
-	const path = join(root, VOID_LOCK_FILE);
-	const content = `${JSON.stringify(state, null, 2)}\n`;
-	if (existsSync(path)) try {
-		if (isDeepStrictEqual(JSON.parse(readFileSync(path, "utf8")), state)) return;
-	} catch {}
-	writeAtomic(path, content);
-}
-/** Keep Vite preview usable without leaving Wrangler's implicit deploy pointer after a build. */
-function stashCloudflareDeployPointer(root) {
-	const pointer = join(root, ".wrangler", "deploy", "config.json");
-	if (!existsSync(pointer)) return;
-	const directory = join(root, ".void");
-	mkdirSync(directory, { recursive: true });
-	writeAtomic(join(directory, PREVIEW_POINTER_FILE), readFileSync(pointer, "utf8"));
-	rmSync(pointer, { force: true });
-}
-function restoreCloudflarePreviewPointer(root) {
-	const saved = join(root, ".void", PREVIEW_POINTER_FILE);
-	if (!existsSync(saved)) return false;
-	const directory = join(root, ".wrangler", "deploy");
-	mkdirSync(directory, { recursive: true });
-	writeAtomic(join(directory, "config.json"), readFileSync(saved, "utf8"));
-	return true;
-}
-/** Preserve Void's JSONC provenance comments when authored settings change. */
-function provenance(text) {
-	const lines = text.match(/^\s*\/\/ void:(?:managed-queues|published-traffic):v1:[A-Za-z0-9_-]+\s*$/gm);
-	return lines ? `${lines.join("\n")}\n` : "";
-}
-/** Resolve the config file passed to Cloudflare tooling. Typed projects use a generated file. */
-function materializeCloudflareConfig(root) {
-	if (!existsSync(join(root, "void.config.ts"))) {
-		for (const name of ["wrangler.jsonc", "wrangler.json"]) if (existsSync(join(root, name))) return join(root, name);
-		return join(root, "wrangler.jsonc");
-	}
-	if (["wrangler.jsonc", "wrangler.json"].some((name) => existsSync(join(root, name)))) throw new Error("config: Run `void migrate` to move the root Wrangler config into void.config.ts.");
-	const authored = readConfig(root).cloudflare ?? {};
-	const state = readState(root);
-	const resolved = state ? mergeConfig(state.source, state.resolved, authored) : authored;
-	const text = state && isDeepStrictEqual(resolved, state.resolved) && isDeepStrictEqual(authored, state.source) ? state.text : `${provenance(state?.text ?? "")}${JSON.stringify(resolved, null, 2)}\n`;
-	const path = join(root, MATERIALIZED_CLOUDFLARE_FILE);
-	if (!existsSync(path) || readFileSync(path, "utf8") !== text) writeAtomic(path, text);
-	if (state) writeState(root, {
-		version: 1,
-		source: authored,
-		resolved,
-		text
-	});
-	return path;
-}
-/** Record Cloudflare settings written by Void so later builds reproduce them. */
-function persistCloudflareConfig(root) {
-	if (!existsSync(join(root, "void.config.ts"))) return;
-	const path = join(root, MATERIALIZED_CLOUDFLARE_FILE);
-	if (!existsSync(path)) throw new Error(`config: Missing generated ${MATERIALIZED_CLOUDFLARE_FILE}.`);
-	const text = readFileSync(path, "utf8");
-	const resolved = parseCloudflareText(text, path);
-	const authored = readConfig(root).cloudflare ?? {};
-	if (readState(root) || !isDeepStrictEqual(resolved, authored) || text !== `${JSON.stringify(authored, null, 2)}\n`) writeState(root, {
-		version: 1,
-		source: authored,
-		resolved,
-		text
-	});
-}
-/** Seed the checked-in lock from a root Wrangler file during migration. */
-function seedCloudflareConfig(root, source, text) {
-	const existing = readState(root);
-	if (existing) {
-		if (isDeepStrictEqual(existing.source, source) && isDeepStrictEqual(existing.resolved, source)) return;
-		throw new Error(`migrate: ${VOID_LOCK_FILE} already exists with different settings. Resolve it before migrating.`);
-	}
-	if (!isDeepStrictEqual(parseCloudflareText(text, ".void-wrangler.jsonc"), source)) throw new Error("migrate: The Cloudflare config changed during migration. Retry.");
-	writeState(root, {
-		version: 1,
-		source,
-		resolved: source,
-		text
-	});
-}
-const SANDBOX_MIGRATION_TAG = "void-sandbox-v1";
-const require = createRequire(import.meta.url);
-function isSandboxEnabled(config) {
-	return config.sandbox !== void 0 && config.sandbox !== false;
-}
-function getDefaultSandboxImage() {
-	return getDefaultSandboxPlatformImage();
-}
-function getDefaultSandboxPlatformImage() {
-	return `docker.io/cloudflare/sandbox:${JSON.parse(readFileSync(join(getSandboxPackageRoot(), "package.json"), "utf-8")).version ?? "latest"}`;
-}
-function isLocalSandboxImage(image) {
-	const lowerImage = image.toLowerCase();
-	return isAbsolute(image) || image.startsWith("./") || image.startsWith("../") || lowerImage === "dockerfile" || lowerImage.includes("dockerfile") || lowerImage.endsWith("/dockerfile") || lowerImage.endsWith("\\dockerfile");
-}
-function requiresSandboxPlatformImage(config) {
-	if (typeof config.sandbox !== "object" || config.sandbox === null) return false;
-	return typeof config.sandbox.image === "string" && isLocalSandboxImage(config.sandbox.image) && config.sandbox.platformImage === void 0;
-}
-function resolveSandboxConfig(config, root = process.cwd()) {
-	const raw = typeof config.sandbox === "object" ? config.sandbox : {};
-	const image = raw.image ?? getDefaultSandboxImage();
-	const imageBuildContext = raw.imageBuildContext;
-	const platformImage = raw.platformImage ?? (raw.image && !isLocalSandboxImage(raw.image) ? raw.image : getDefaultSandboxPlatformImage());
-	return {
-		binding: raw.binding ?? "SANDBOX",
-		className: raw.className ?? "Sandbox",
-		containerName: raw.containerName ?? "void-sandbox",
-		image: resolveSandboxImage(image, root),
-		platformImage,
-		...imageBuildContext && { imageBuildContext: isAbsolute(imageBuildContext) ? imageBuildContext : join(root, imageBuildContext) },
-		...raw.instanceType && { instanceType: raw.instanceType },
-		...raw.maxInstances != null && { maxInstances: raw.maxInstances }
-	};
-}
-function getSandboxPackageRoot() {
-	return join(dirname(require.resolve("@cloudflare/sandbox")), "..");
-}
-function resolveSandboxImage(image, root) {
-	if (!isLocalSandboxImage(image) || isAbsolute(image)) return image;
-	return join(root, image);
-}
-//#endregion
 //#region src/cli/wrangler.ts
 const COMPAT_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 /** UTF-8 byte-order mark. Node's utf-8 read preserves a leading one. */
@@ -588,7 +372,8 @@ function syncWranglerBindings(root, bindings, options) {
 	if (bindings.needsSandbox) {
 		const sandbox = options?.sandbox ?? resolveSandboxConfig({ sandbox: true }, root);
 		const bindingName = options?.bindingNames?.sandbox ?? sandbox?.binding ?? "SANDBOX";
-		const className = sandbox?.className ?? "Sandbox";
+		const className = sandbox.className;
+		assertSandboxNamespaceConfig(parsed, sandbox);
 		const existingDurableObjectBindings = parsed.durable_objects?.bindings ?? [];
 		if (!existingDurableObjectBindings.some((binding) => binding.name === bindingName)) {
 			parsed.durable_objects = { bindings: [...existingDurableObjectBindings, {
@@ -598,19 +383,13 @@ function syncWranglerBindings(root, bindings, options) {
 			modified = true;
 		}
 		const existingContainers = parsed.containers ?? [];
-		if (!existingContainers.some((container) => container.class_name === className)) {
-			parsed.containers = [...existingContainers, {
-				name: sandbox?.containerName ?? "void-sandbox",
-				class_name: className,
-				image: sandbox?.image,
-				...sandbox?.imageBuildContext && { image_build_context: sandbox.imageBuildContext },
-				...sandbox?.instanceType && { instance_type: sandbox.instanceType },
-				...sandbox?.maxInstances != null && { max_instances: sandbox.maxInstances }
-			}];
+		const containers = [...existingContainers.filter((container) => container.class_name !== className), sandboxContainerConfig(sandbox)];
+		if (JSON.stringify(containers) !== JSON.stringify(existingContainers)) {
+			parsed.containers = containers;
 			modified = true;
 		}
 		const migrations = Array.isArray(parsed.migrations) ? parsed.migrations : [];
-		if (!migrations.some((migration) => migration.tag === "void-sandbox-v1" || migration.new_sqlite_classes?.includes(className))) {
+		if (!hasSandboxSqliteMigration(migrations, className)) {
 			parsed.migrations = [...migrations, {
 				tag: SANDBOX_MIGRATION_TAG,
 				new_sqlite_classes: [className]
@@ -675,7 +454,7 @@ function readWranglerWebSocketTombstones(root, websockets) {
 	if (!configPath) return [];
 	const parsed = parseJsonc(readFileSync(configPath, "utf-8"));
 	const migrations = Array.isArray(parsed.migrations) ? parsed.migrations : [];
-	const historicalClasses = new Set(migrations.filter((migration) => /^void-ws-v1(?:-\d+)?$/.test(migration.tag ?? "")).flatMap((migration) => [...migration.new_classes ?? [], ...migration.new_sqlite_classes ?? []]));
+	const historicalClasses = new Set(migrations.flatMap((migration) => /^void-ws-v1(?:-\d+)?$/.test(migration.tag ?? "") ? [...migration.new_classes ?? [], ...migration.new_sqlite_classes ?? []] : []));
 	const currentClasses = new Set(websockets.map((route) => route.className));
 	const bindings = parsed.durable_objects?.bindings;
 	return [...new Set((Array.isArray(bindings) ? bindings : []).flatMap((binding) => typeof binding.class_name === "string" && historicalClasses.has(binding.class_name) && !currentClasses.has(binding.class_name) ? [binding.class_name] : []))].sort();
@@ -1981,4 +1760,4 @@ function canonicalize(value) {
 	return value;
 }
 //#endregion
-export { writeWranglerPublishedTrafficSnapshot as A, seedCloudflareConfig as B, readWranglerWebSocketTombstones as C, syncWranglerWebSockets as D, syncWranglerDurableObjects as E, MATERIALIZED_CLOUDFLARE_FILE as F, VOID_LOCK_FILE as I, materializeCloudflareConfig as L, isSandboxEnabled as M, requiresSandboxPlatformImage as N, updateWranglerCustomDomain as O, resolveSandboxConfig as P, persistCloudflareConfig as R, readWranglerPublishedTrafficSnapshot as S, syncWranglerBindings as T, stashCloudflareDeployPointer as V, readProvisionedBindingEntry as _, LIVE_MIGRATION_TAG as a, readWranglerCustomDomains as b, bindingEntriesForField as c, ensureWranglerNodejsAlsFlag as d, findBindingNameOwner as f, readExistingLiveBindingConfig as g, normalizeWranglerCompatibilityFlags as h, LATEST_KNOWN_COMPAT_DATE as i, SANDBOX_MIGRATION_TAG as j, writeProvisionedWranglerConfig as k, ensureWranglerCompat as l, nextDurableObjectMigrationTag as m, DEFAULT_LIVE_CLASS as n, acknowledgeWranglerManagedQueueRemovals as o, hasDurableObjectSqliteMigration as p, FRIENDLY_BINDING_NAMES as r, assertNoDuplicateMembers as s, DEFAULT_LIVE_BINDING as t, ensureWranglerCompatibilityDate as u, readRootWranglerConfig as v, resolveLiveBindingConfig as w, readWranglerManagedQueueCleanupCandidates as x, readWranglerCompat as y, restoreCloudflarePreviewPointer as z };
+export { writeProvisionedWranglerConfig as A, readWranglerPublishedTrafficSnapshot as C, syncWranglerDurableObjects as D, syncWranglerBindings as E, syncWranglerWebSockets as O, readWranglerManagedQueueCleanupCandidates as S, resolveLiveBindingConfig as T, readExistingLiveBindingConfig as _, LIVE_MIGRATION_TAG as a, readWranglerCompat as b, bindingEntriesForField as c, ensureWranglerCompatibilityDate as d, ensureWranglerNodejsAlsFlag as f, normalizeWranglerCompatibilityFlags as g, nextDurableObjectMigrationTag as h, LATEST_KNOWN_COMPAT_DATE as i, writeWranglerPublishedTrafficSnapshot as j, updateWranglerCustomDomain as k, bindingNamesForField as l, hasDurableObjectSqliteMigration as m, DEFAULT_LIVE_CLASS as n, acknowledgeWranglerManagedQueueRemovals as o, findBindingNameOwner as p, FRIENDLY_BINDING_NAMES as r, assertNoDuplicateMembers as s, DEFAULT_LIVE_BINDING as t, ensureWranglerCompat as u, readProvisionedBindingEntry as v, readWranglerWebSocketTombstones as w, readWranglerCustomDomains as x, readRootWranglerConfig as y };

package/dist/{ws-BwcqizuH.d.mts → ws-CL1w7GXU.d.mts}

@@ -1,10 +1,13 @@
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { a as CloudEnv } from "./handler-BXJTXd02.mjs";
+import { a as CloudEnv } from "./handler-CZ4nAylQ.mjs";
 import { WebSocketRouteMap } from "void/routes";
 //#region src/runtime/ws.d.ts
 type MaybePromise<T> = T | Promise<T>;
 type ParamsRecord = Record<string, string>;
+type WebSocketInstanceKey = (context: {
+  params: ParamsRecord;
+}) => string;
 type WsEntry<P extends keyof WebSocketRouteMap> = WebSocketRouteMap[P];
 type ParamsOf<P extends keyof WebSocketRouteMap> = WsEntry<P> extends {
   params: infer T;
@@ -45,6 +48,10 @@ type SocketContext<ServerEvent = unknown> = WebSocketBaseContext & {
 };
 type RoomDefinition<ClientSchema extends StandardSchemaV1 = StandardSchemaV1, ServerSchema extends StandardSchemaV1 = StandardSchemaV1> = {
   readonly __kind: "room";
+  /** Optional persistent resource name. Pin the name reported by `void info` before moving this route. */
+  readonly name?: string;
+  /** Optional instance key; preserve existing keys when renaming route parameters. */
+  readonly key?: WebSocketInstanceKey;
   readonly messages: {
     client: ClientSchema;
     server: ServerSchema;
@@ -61,6 +68,10 @@ type RoomDefinition<ClientSchema extends StandardSchemaV1 = StandardSchemaV1, Se
 };
 type SocketDefinition<ClientSchema extends StandardSchemaV1 = StandardSchemaV1, ServerSchema extends StandardSchemaV1 = StandardSchemaV1> = {
   readonly __kind: "socket";
+  /** Optional persistent resource name. Pin the name reported by `void info` before moving this route. */
+  readonly name?: string;
+  /** Optional instance key; preserve existing keys when renaming route parameters. */
+  readonly key?: WebSocketInstanceKey;
   readonly messages: {
     client: ClientSchema;
     server: ServerSchema;
@@ -119,4 +130,4 @@ declare class VoidSocket<P extends keyof WebSocketRouteMap & string> {
 declare function connect<P extends keyof WebSocketRouteMap & string>(path: HasParams<P> extends false ? P : never): VoidSocket<P>;
 declare function connect<P extends keyof WebSocketRouteMap & string>(path: P, options: ConnectOptions<P>): VoidSocket<P>;
 //#endregion
-export { RoomDefinition as a, VoidSocket as c, WebSocketConnection as d, connect as f, RoomController as i, VoidSocketCloseEvent as l, defineWebSocket as m, ConnectCommonOptions as n, SocketContext as o, defineRoom as p, RoomContext as r, SocketDefinition as s, AnyWebSocketDefinition as t, WebSocketBaseContext as u };
+export { RoomDefinition as a, VoidSocket as c, WebSocketConnection as d, WebSocketInstanceKey as f, defineWebSocket as h, RoomController as i, VoidSocketCloseEvent as l, defineRoom as m, ConnectCommonOptions as n, SocketContext as o, connect as p, RoomContext as r, SocketDefinition as s, AnyWebSocketDefinition as t, WebSocketBaseContext as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.21.9",
+  "version": "0.23.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -14,7 +14,8 @@
     "schema.json",
     "skills",
     "AGENTS_TEMPLATE.md",
-    "README.md"
+    "README.md",
+    "sandbox.Dockerfile"
   ],
   "type": "module",
   "imports": {
@@ -38,10 +39,12 @@
     "#self/runtime/live-server": "./dist/runtime/live-server.mjs",
     "#self/runtime/fetch": "./dist/runtime/fetch.mjs",
     "#self/runtime/fetch-stream": "./dist/runtime/fetch-stream.mjs",
+    "#self/runtime/route-url": "./dist/runtime/route-url.mjs",
     "#self/runtime/migration-handler": "./dist/runtime/migration-handler.mjs",
     "#self/runtime/migration-handler-pg": "./dist/runtime/migration-handler-pg.mjs",
     "#self/runtime/migration-handler-mysql": "./dist/runtime/migration-handler-mysql.mjs",
-    "#self/runtime/ws-server": "./dist/runtime/ws-server.mjs"
+    "#self/runtime/ws-server": "./dist/runtime/ws-server.mjs",
+    "#self/runtime/routing": "./dist/runtime/routing.mjs"
   },
   "exports": {
     ".": {
@@ -316,57 +319,69 @@
       "types": "./dist/runtime/db-mysql.d.mts",
       "import": "./dist/runtime/db-mysql.mjs",
       "require": "./dist/runtime/db-mysql.mjs"
+    },
+    "./_sandbox-container": {
+      "types": "./dist/runtime/sandbox-container.d.mts",
+      "import": "./dist/runtime/sandbox-container.mjs"
+    },
+    "./limits": {
+      "types": "./dist/runtime/limits.d.mts",
+      "import": "./dist/runtime/limits.mjs",
+      "require": "./dist/runtime/limits.mjs"
     }
   },
   "dependencies": {
-    "@cloudflare/build-output-utils": "0.8.2",
-    "@cloudflare/config": "0.20.0",
-    "@cloudflare/sandbox": "^0.12.9",
-    "@cloudflare/vite-plugin": "1.54.7",
+    "@cloudflare/build-output-utils": "0.8.4",
+    "@cloudflare/codemods": "0.3.0",
+    "@cloudflare/config": "0.22.0",
+    "@cloudflare/sandbox": "1.0.0",
+    "@cloudflare/vite-plugin": "1.62.2",
+    "@cloudflare/workers-auth": "0.9.5",
     "@cloudflare/workers-types": "^4.20260702.1",
-    "@napi-rs/keyring": "2.0.0",
-    "@void/deploy-cloudflare": "0.21.9",
-    "@void/deploy-core": "0.21.9",
-    "@void/edge": "0.21.9",
-    "@void/isr": "0.21.9",
-    "@void/platform": "0.21.9",
-    "acorn": "^8.15.0",
-    "better-auth": "^1.7.3",
+    "@napi-rs/keyring": "2.1.0",
+    "@void/deploy-cloudflare": "0.23.0",
+    "@void/deploy-core": "0.23.0",
+    "@void/edge": "0.23.0",
+    "@void/isr": "0.23.0",
+    "@void/platform": "0.23.0",
+    "acorn": "^8.18.0",
+    "better-auth": "^1.7.6",
     "better-sqlite3": "^13.0.3",
     "blake3-jit": "^1.1.0",
-    "cf": "1.0.0-beta.5",
+    "cf": "1.0.0-beta.9",
     "drizzle-arktype": "^0.1.3",
-    "drizzle-kit": "^0.31.10",
-    "drizzle-orm": "^0.45.2",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.3",
     "drizzle-valibot": "^0.4.2",
     "drizzle-zod": "^0.8.3",
     "email-validator": "^2.0.4",
     "es-module-lexer": "^3.0.2",
-    "hono": "^4.13.7",
-    "ignore": "^7.0.9",
+    "hono": "^4.13.11",
+    "ignore": "^7.0.10",
     "jiti": "^2.7.0",
     "jsonc-parser": "3.3.1",
-    "miniflare": "5.20260926.0-alpha",
+    "mime": "4.1.0",
+    "miniflare": "5.20260926.1-alpha",
     "minimatch": "^10.2.6",
-    "mysql2": "3.24.4",
+    "mysql2": "3.24.5",
     "pg": "8.23.0",
-    "postal-mime": "^2.7.4",
+    "postal-mime": "^4.0.0",
     "proper-lockfile": "^4.1.2",
-    "undici": "7.29.0"
+    "undici": "8.11.2"
   },
   "devDependencies": {
-    "@clack/core": "1.5.0",
-    "@clack/prompts": "^1.8.0",
+    "@clack/core": "^1.5.1",
+    "@clack/prompts": "^1.8.1",
     "@electric-sql/pglite": "0.5.8",
     "@types/better-sqlite3": "^9.6.0",
-    "@types/node": "^26.5.1",
+    "@types/node": "^26.6.3",
     "@types/pg": "^8.23.1",
     "@types/proper-lockfile": "^4.1.4",
-    "arktype": "^2.2.3",
+    "arktype": "^2.2.5",
     "ci-info": "^4.4.0",
     "estree-walker": "^3.0.3",
     "fast-wrap-ansi": "^0.2.2",
-    "magic-string": "^1.3.1",
+    "magic-string": "^1.4.2",
     "ofetch": "2.0.0-alpha.3",
     "pathslash": "^0.1.0",
     "pglite-server": "0.1.5",
@@ -374,12 +389,12 @@
     "tinyglobby": "^0.2.17",
     "typescript": "7.0.2",
     "valibot": "^1.5.0",
-    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.1",
-    "vite-plus": "0.3.1",
-    "zod": "^4.6.1"
+    "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
+    "vite-plus": "1.0.0",
+    "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@void/md": "0.21.9",
+    "@void/md": "0.23.0",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/sandbox.Dockerfile

@@ -0,0 +1,4 @@
+FROM node:24.21.0-trixie-slim
+COPY --from=docker.io/cloudflare/sandbox:1.0.0 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
+WORKDIR /workspace
+CMD ["sleep", "infinity"]

package/schema.json

@@ -297,9 +297,11 @@
       "description": "Connect to remote D1/KV/R2 bindings during local development. Can also be set via VOID_REMOTE=1 environment variable."
     },
     "sandbox": {
-      "description": "Enable Cloudflare Sandboxes. `true` uses the default SANDBOX binding and Cloudflare sandbox image; an object customizes the Durable Object binding, container image, and scaling.",
+      "description": "Enable Cloudflare Sandboxes. `true` uses the default SANDBOX binding and Node.js environment; an object customizes the Durable Object binding, container image, and instance size.",
       "oneOf": [
-        { "type": "boolean" },
+        {
+          "type": "boolean"
+        },
         {
           "type": "object",
           "properties": {
@@ -309,42 +311,28 @@
             },
             "className": {
               "type": "string",
-              "description": "Durable Object class name. Defaults to Sandbox."
+              "description": "Durable Object class name. Defaults to SandboxV1."
             },
             "containerName": {
               "type": "string",
-              "description": "Cloudflare Container application name. Defaults to void-sandbox."
+              "description": "Cloudflare Container application name. Defaults to void-sandbox-v1."
             },
             "image": {
               "type": "string",
-              "description": "Container image or Dockerfile path used by local Wrangler development."
+              "description": "Dockerfile path or digest-pinned Cloudflare managed registry image for local and native Cloudflare use."
             },
             "imageBuildContext": {
               "type": "string",
-              "description": "Optional Docker build context path for local Wrangler development."
+              "description": "Optional Docker build context path for local development and native Cloudflare deploys."
             },
             "platformImage": {
               "type": "string",
-              "description": "Registry image reference used by `void deploy`. Required when `image` is a custom local Dockerfile path."
+              "description": "Cloudflare managed registry image pinned by digest, containing the SDK 1.0 sandbox-shim. Defaults to Cloudflare’s managed Node.js image."
             },
             "instanceType": {
               "type": "string",
-              "enum": [
-                "dev",
-                "lite",
-                "basic",
-                "standard",
-                "standard-1",
-                "standard-2",
-                "standard-3",
-                "standard-4"
-              ],
+              "enum": ["lite", "standard-1", "standard-2", "standard-3", "standard-4"],
               "description": "Cloudflare Container instance type."
-            },
-            "maxInstances": {
-              "type": "integer",
-              "minimum": 1,
-              "description": "Maximum number of sandbox container instances."
             }
           },
           "additionalProperties": false