void 0.25.0 → 0.26.0

package/dist/{project-token-CP01Jna6.mjs → project-token-BrtT2NkY.mjs}

@@ -1,8 +1,8 @@
-import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-D52yG7hl.mjs";
 import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { d as tablePrefix, i as dim } from "./output-BBsUwdyT.mjs";
+import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { f as tablePrefix, i as dim } from "./output-BvdaehtE.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/project-token.ts
 async function resolveTarget(root, args) {

package/dist/{project-zero-trust-BzkVgx35.mjs → project-zero-trust-nYJ2V2nc.mjs}

@@ -1,8 +1,8 @@
-import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
-import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { l as sanitizeTerminalText } from "./output-BBsUwdyT.mjs";
+import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-D52yG7hl.mjs";
+import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { l as note, u as sanitizeTerminalText } from "./output-BvdaehtE.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/project-zero-trust.ts
 async function resolveTarget(root, args) {

package/dist/{protocol-CjF_iI9X.d.mts → protocol-BX8t2jiw.d.mts}

@@ -1,5 +1,5 @@
 import { n as HeadDescriptor, t as HeadConfig } from "./head-Do8P4puT.mjs";
-import { n as CloudBindings, r as CloudContext } from "./handler-CZ4nAylQ.mjs";
+import { n as CloudBindings, r as CloudContext } from "./handler-BeK3weD4.mjs";
 import { a as PageRenderMode, t as DevCssAsset } from "./types-BAp5AEBU.mjs";
 //#region src/pages/protocol.d.ts
 /** Escape characters that are unsafe inside inline <script> tags to prevent XSS. */

package/dist/{provision-BEv0k-qz.mjs → provision-DMTPG8Rh.mjs}

@@ -1,3 +1,3 @@
 import { r as scanWranglerDotenvKeys } from "./dotenv-VQxupEUv.mjs";
-import { _ as resolvePinnedApiBaseUrl, a as checkCloudflareProvisionDrift, c as enableD1ReadReplicationViaApi, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionEnv, h as provisionCloudflareResources, i as assertValidResourceName, l as isAlreadyGoneKillError, m as normalizeRunWranglerResult, n as acquireProvisionLock, o as createDefaultRunWrangler, p as isRealKvId, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, t as WranglerQuarantineError, u as isQuarantineError, v as resolveProperLockfileKey } from "./provision-Btj1jppf.mjs";
+import { _ as resolvePinnedApiBaseUrl, a as checkCloudflareProvisionDrift, c as enableD1ReadReplicationViaApi, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionEnv, h as provisionCloudflareResources, i as assertValidResourceName, l as isAlreadyGoneKillError, m as normalizeRunWranglerResult, n as acquireProvisionLock, o as createDefaultRunWrangler, p as isRealKvId, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, t as WranglerQuarantineError, u as isQuarantineError, v as resolveProperLockfileKey } from "./provision-VeqAC77A.mjs";
 export { WranglerQuarantineError, acquireProvisionLock, assertNoTransportRedirectInProjectDotenv, assertValidResourceName, checkCloudflareProvisionDrift, createDefaultRunWrangler, deleteEnvVarCaseAware, enableD1ReadReplicationViaApi, isAlreadyGoneKillError, isQuarantineError, isQueueConfirmedAbsent, isRealD1Id, isRealKvId, normalizeRunWranglerResult, provisionCloudflareResources, provisionEnv, resolvePinnedApiBaseUrl, resolveProperLockfileKey, scanWranglerDotenvKeys };

package/dist/{provision-Btj1jppf.mjs → provision-VeqAC77A.mjs}

@@ -332,6 +332,17 @@ function provisionEnv(ctx) {
 		scrub("CLOUDFLARE_ACCOUNT_ID");
 		env.CLOUDFLARE_ACCOUNT_ID = ctx.accountId;
 	}
+	if (ctx?.apiToken) {
+		for (const name of [
+			"CLOUDFLARE_API_TOKEN",
+			"CF_API_TOKEN",
+			"CLOUDFLARE_API_KEY",
+			"CF_API_KEY",
+			"CLOUDFLARE_EMAIL",
+			"CF_EMAIL"
+		]) scrub(name);
+		env.CLOUDFLARE_API_TOKEN = ctx.apiToken;
+	}
 	return env;
 }
 /**
@@ -636,7 +647,8 @@ function createDefaultRunWrangler(root, options) {
 			env: {
 				...provisionEnv({
 					accountId: opts.accountId,
-					apiBaseUrl: opts.apiBaseUrl
+					apiBaseUrl: opts.apiBaseUrl,
+					apiToken: opts.apiToken
 				}),
 				...opts.suppressLogs ? { WRANGLER_WRITE_LOGS: "false" } : {}
 			},

package/dist/{requests-B3PBuGlX.mjs → requests-TIz_jtSu.mjs}

@@ -1,8 +1,8 @@
-import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-D52yG7hl.mjs";
 import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { c as import_picocolors, i as dim } from "./output-BBsUwdyT.mjs";
+import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { c as import_picocolors, i as dim } from "./output-BvdaehtE.mjs";
 //#region src/cli/requests.ts
 async function runRequestsCommand(root, range, status) {
 	console.log();

package/dist/{rollback-DDub9GsO.mjs → rollback-dBqICPzj.mjs}

@@ -1,8 +1,8 @@
-import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-D52yG7hl.mjs";
 import { A as confirm, H as outro, K as select, L as log, O as cancel, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { a as ensureUtc, c as import_picocolors, i as dim, o as formatCount, r as createSpinner } from "./output-BBsUwdyT.mjs";
+import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { a as ensureUtc, c as import_picocolors, i as dim, o as formatCount, r as createSpinner } from "./output-BvdaehtE.mjs";
 //#region src/cli/rollback.ts
 async function runRollbackCommand(root, deployId) {
 	console.log();
@@ -82,7 +82,7 @@ async function runRollbackCommand(root, deployId) {
 	outro(dim("Traffic is now serving the rolled-back deployment."));
 }
 async function runCloudflareRollback(root, deployId) {
-	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BhbK6yTq.mjs");
+	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-DoQrVHAt.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	const status = await readCloudflareWorkerStatus(context);
 	const deployedVersionIds = new Set(status.deployedVersionIds);

package/dist/{runner-Ol0TNjk6.mjs → runner--2KF6Kua.mjs}

@@ -1,7 +1,7 @@
 import { a as join, n as dirname } from "./dist-BVqXeR_h.mjs";
 import { t as collectMigrations } from "./collect-DiTn9yr6.mjs";
 import { n as hasPackageDependency, r as readNearestPackageJson } from "./package-json-DXfiT1jV.mjs";
-import { r as classifyMigration } from "./plan-NPpwZ_kc.mjs";
+import { r as classifyMigration } from "./plan-CJGEeTEI.mjs";
 import { existsSync, mkdirSync } from "node:fs";
 import { createHash, createHmac } from "node:crypto";
 //#region src/migrations/runner.ts

package/dist/{runner-CXA9Fh8h.mjs → runner-voIltZrY.mjs}

@@ -1,2 +1,2 @@
-import { i as openSqliteDatabase, n as getAppliedMigrations, o as runMigrations, r as getMiniflareDatabasePath, t as getApplicationTables } from "./runner-Ol0TNjk6.mjs";
+import { i as openSqliteDatabase, n as getAppliedMigrations, o as runMigrations, r as getMiniflareDatabasePath, t as getApplicationTables } from "./runner--2KF6Kua.mjs";
 export { getApplicationTables, getAppliedMigrations, getMiniflareDatabasePath, openSqliteDatabase, runMigrations };

package/dist/runtime/ai.d.mts

@@ -1,4 +1,3 @@
-import { n as LimitOperation } from "../limits-Bq5LG8Id.mjs";
 //#region src/runtime/ai-types.d.ts
 type AiProviderName = "openai" | "anthropic" | "google-ai-studio" | "groq" | "mistral" | "grok" | "deepseek" | "openrouter" | "perplexity" | "cohere" | "cerebras" | "huggingface" | "replicate" | "baseten" | "cartesia" | "deepgram" | "elevenlabs" | "fal" | "ideogram" | "parallel";
 type AiProvider = AiProviderName | (string & {});
@@ -26,25 +25,25 @@ type AiProviderFetchInit = {
  * in a `Response` with SSE headers — ready to return from a route handler.
  */
 export type VoidAi = {
-  models(...args: Parameters<Ai["models"]>): LimitOperation<Awaited<ReturnType<Ai["models"]>>>;
-  toMarkdown(files: Array<Parameters<Ai["toMarkdown"]>[0]>, options?: Parameters<Ai["toMarkdown"]>[1]): LimitOperation<Array<Awaited<ReturnType<Ai["toMarkdown"]>>>>;
-  toMarkdown(...args: Parameters<Ai["toMarkdown"]>): LimitOperation<Awaited<ReturnType<Ai["toMarkdown"]>>>;
+  models(...args: Parameters<Ai["models"]>): Promise<Awaited<ReturnType<Ai["models"]>>>;
+  toMarkdown(files: Array<Parameters<Ai["toMarkdown"]>[0]>, options?: Parameters<Ai["toMarkdown"]>[1]): Promise<Array<Awaited<ReturnType<Ai["toMarkdown"]>>>>;
+  toMarkdown(...args: Parameters<Ai["toMarkdown"]>): Promise<Awaited<ReturnType<Ai["toMarkdown"]>>>;
   /** Workers AI inference (existing) */
-  run<Name extends keyof AiModels>(model: Name, inputs: AiModels[Name]["inputs"], options?: AiOptions): LimitOperation<AiModels[Name]["postProcessedOutputs"]>;
+  run<Name extends keyof AiModels>(model: Name, inputs: AiModels[Name]["inputs"], options?: AiOptions): Promise<AiModels[Name]["postProcessedOutputs"]>;
   /** Cloudflare AI Gateway model inference. Accepts Cloudflare model IDs unchanged. */
-  run(model: string, inputs: unknown, options?: AiOptions): LimitOperation<unknown>;
+  run(model: string, inputs: unknown, options?: AiOptions): Promise<unknown>;
   /** Image generation. Returns the proxy response so callers can return or parse it. */
-  image<Name extends keyof AiModels>(model: Name, inputs: AiModels[Name]["inputs"], options?: AiOptions): LimitOperation<Response>;
+  image<Name extends keyof AiModels>(model: Name, inputs: AiModels[Name]["inputs"], options?: AiOptions): Promise<Response>;
   /** Cloudflare AI Gateway model inference returned as a Response. */
-  image(model: string, inputs: unknown, options?: AiOptions): LimitOperation<Response>;
+  image(model: string, inputs: unknown, options?: AiOptions): Promise<Response>;
   /** Provider-native AI Gateway requests using a project secret for the provider API key. */
   provider(provider: AiProvider, options?: AiProviderOptions): {
-    fetch(path: string, init?: AiProviderFetchInit): LimitOperation<Response>;
+    fetch(path: string, init?: AiProviderFetchInit): Promise<Response>;
   };
   /** Stream Workers AI response as SSE */
-  stream<Name extends keyof AiModels>(model: Name, inputs: Omit<AiModels[Name]["inputs"], "stream">, options?: AiOptions): LimitOperation<Response>;
+  stream<Name extends keyof AiModels>(model: Name, inputs: Omit<AiModels[Name]["inputs"], "stream">, options?: AiOptions): Promise<Response>;
   /** Stream any Cloudflare AI Gateway model response as SSE */
-  stream(model: string, inputs: Record<string, unknown>, options?: AiOptions): LimitOperation<Response>;
+  stream(model: string, inputs: Record<string, unknown>, options?: AiOptions): Promise<Response>;
 };
 export declare const ai: VoidAi;
 //#endregion

package/dist/runtime/ai.mjs

@@ -1,6 +1,6 @@
 import { t as cfAccessHeaders } from "../cf-access-TWNzXltp.mjs";
 import { a as getRawRuntimeEnv } from "../env-raw-Cx8ElDdj.mjs";
-import { a as readUsageLimit, i as limitOperation, r as limitFromResponse, t as UsageLimit } from "../limits-Cjuk2VPm.mjs";
+import { r as limitFromResponse, t as UsageLimit } from "../limits-D0vD1M9A.mjs";
 //#region src/runtime/ai-types.ts
 /** Maps provider prefix to expected env var name for the API key */
 const PROVIDER_KEY_MAP = {
@@ -491,19 +491,20 @@ function backend() {
 	return _backend ??= resolveBackend();
 }
 /** Normalize provider 429 responses and binding quota failures before they reach callers. */
-function aiOperation(execute, rawStream = false) {
-	return limitOperation(async () => {
-		const value = await execute();
+async function aiOperation(execute, rawStream = false) {
+	let value;
+	try {
+		value = await execute();
 		if (value instanceof Response) {
 			const limit = await limitFromResponse(value, "ai");
 			if (limit) throw limit;
 		}
-		return value;
-	}, classifyAiLimit, (value, limited) => {
-		if (value instanceof Response && value.body && value.headers.get("content-type")?.includes("text/event-stream")) return new Response(streamResponse(value.body, limited).body, value);
-		if (rawStream && value instanceof ReadableStream) return streamResponse(value, limited).body;
-		return value;
-	});
+	} catch (error) {
+		throw classifyAiLimit(error) ?? error;
+	}
+	if (value instanceof Response && value.body && value.headers.get("content-type")?.includes("text/event-stream")) return new Response(streamResponse(value.body).body, value);
+	if (rawStream && value instanceof ReadableStream) return streamResponse(value).body;
+	return value;
 }
 function classifyAiLimit(error) {
 	if (error instanceof UsageLimit) return error;
@@ -515,7 +516,7 @@ function classifyAiLimit(error) {
 	}) : null;
 }
 /** Streaming failures after headers are sent end with an explicit terminal SSE event. */
-function streamResponse(body, limited) {
+function streamResponse(body) {
 	const reader = body.getReader();
 	return new Response(new ReadableStream({
 		async pull(controller) {
@@ -526,13 +527,7 @@ function streamResponse(body, limited) {
 			} catch (error) {
 				const limit = classifyAiLimit(error);
 				let data = { message: "Generation was interrupted. Please try again." };
-				if (limit) {
-					data = await limit.response().json();
-					try {
-						const fallback = await limited(limit);
-						if (fallback instanceof Response) data = readUsageLimit(await fallback.json().catch(() => null)) ?? data;
-					} catch {}
-				}
+				if (limit) data = await limit.response().json();
 				controller.enqueue(new TextEncoder().encode(`event: ${limit ? "void:limit" : "void:error"}\ndata: ${JSON.stringify(data)}\n\n`));
 				controller.close();
 			}

package/dist/runtime/client-react.mjs

@@ -1,5 +1,5 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
 import { t as fetch } from "../fetch-BIZJh7vR.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-react-CMLwT2xI.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-solid.mjs

@@ -1,5 +1,5 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
 import { t as fetch } from "../fetch-BIZJh7vR.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-solid-UoreJWZG.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-svelte.mjs

@@ -1,5 +1,5 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
 import { t as fetch } from "../fetch-BIZJh7vR.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-svelte-Cv_WvrRk.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-vue.mjs

@@ -1,5 +1,5 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
 import { t as fetch } from "../fetch-BIZJh7vR.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-vue-CFk7Xbv3.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client.mjs

@@ -1,5 +1,5 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
 import { t as fetch } from "../fetch-BIZJh7vR.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-BWBT8HLp.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/env-public.d.mts

@@ -1,4 +1,4 @@
 /// <reference types="@cloudflare/workers-types" />
 import { a as number, c as url, i as json, n as boolean, o as oneOf, r as email, s as string, t as EnvSchema } from "../env-helpers-CyKtOBpj.mjs";
-import { a as _getSchemaDefaults, c as defineEnv, i as _getRegisteredSchema, l as env, n as EnvValidationReport, o as _hasRegisteredSchema, r as ValidatedEnv, s as _validateEnvOnce, t as EnvValidationError, u as validateAllEnv } from "../env-public-BX_r8HR6.mjs";
+import { a as _getSchemaDefaults, c as defineEnv, i as _getRegisteredSchema, l as env, n as EnvValidationReport, o as _hasRegisteredSchema, r as ValidatedEnv, s as _validateEnvOnce, t as EnvValidationError, u as validateAllEnv } from "../env-public-DR7ZM6d-.mjs";
 export { type EnvSchema, EnvValidationError, EnvValidationReport, ValidatedEnv, _getRegisteredSchema, _getSchemaDefaults, _hasRegisteredSchema, _validateEnvOnce, boolean, defineEnv, email, env, json, number, oneOf, string, url, validateAllEnv };

package/dist/runtime/fetch-stream.mjs

@@ -1,3 +1,3 @@
 import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetchStream } from "../fetch-stream-IvCYKyQL.mjs";
+import { t as fetchStream } from "../fetch-stream-Nm3hkZbT.mjs";
 export { FetchError as StreamError, fetchStream };

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-CZ4nAylQ.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-BeK3weD4.mjs";
 export { BasicAuthOptions, CloudBindings, CloudContext, CloudContextVariables, CloudEnv, type Deferred, type HandlerInput, type InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, type ValidatorSlots, VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/limits.d.mts

@@ -1,2 +1,2 @@
-import { a as asUsageLimit, c as readUsageLimit, i as UsageLimitData, n as LimitOperation, o as limitFromResponse, r as UsageLimit, s as limitOperation, t as LimitHandlers } from "../limits-Bq5LG8Id.mjs";
-export { LimitHandlers, LimitOperation, UsageLimit, type UsageLimitData, asUsageLimit, limitFromResponse, limitOperation, readUsageLimit };
+import { a as readUsageLimit, i as limitFromResponse, n as UsageLimitData, r as asUsageLimit, t as UsageLimit } from "../limits-CFsDKQvU.mjs";
+export { UsageLimit, type UsageLimitData, asUsageLimit, limitFromResponse, readUsageLimit };

package/dist/runtime/limits.mjs

@@ -1,2 +1,2 @@
-import { a as readUsageLimit, i as limitOperation, n as asUsageLimit, r as limitFromResponse, t as UsageLimit } from "../limits-Cjuk2VPm.mjs";
-export { UsageLimit, asUsageLimit, limitFromResponse, limitOperation, readUsageLimit };
+import { i as readUsageLimit, n as asUsageLimit, r as limitFromResponse, t as UsageLimit } from "../limits-D0vD1M9A.mjs";
+export { UsageLimit, asUsageLimit, limitFromResponse, readUsageLimit };

package/dist/runtime/live-client.d.mts

@@ -1,4 +1,4 @@
-import { t as LiveClientEvent } from "../live-Chw1eIMv.mjs";
+import { t as LiveClientEvent } from "../live-iAuEH1hd.mjs";
 //#region src/runtime/live-client.d.ts
 export type LiveSubscribeOptions<Data = unknown> = {
   id: string;

package/dist/runtime/live.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { _ as __getLiveBindingName, a as LiveControlErrorCode, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as defineLiveStream } from "../live-Chw1eIMv.mjs";
+import { _ as __getLiveBindingName, a as LiveControlErrorCode, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as defineLiveStream } from "../live-iAuEH1hd.mjs";
 export { LiveClientEvent, LiveConnectHookContext, LiveConnectOptions, LiveControlError, LiveControlErrorCode, LiveControlOperation, LiveControlOperationResult, LiveControlOptions, LiveControlRequest, LiveControlResponse, LiveHookContext, LiveLimits, LivePublishOptions, LiveStream, LiveStreamOptions, LiveSubscribeHookContext, __getLiveBindingName, __setLiveBindingName, defineLiveStream };

package/dist/runtime/migration-handler.mjs

@@ -1,4 +1,4 @@
-import { canonicalJson } from "@void/deploy-core";
+import { canonicalJson, splitSqlStatements } from "@void/deploy-core";
 //#region src/runtime/migration-handler.ts
 const SUPPORTED_CLASSIFIER_VERSION = 1;
 function createMigrationHandler(env, migrations, _dialect, runAuthMigrations, planBundle) {
@@ -139,12 +139,13 @@ async function runD1AppMigrations(db, migrations, planBundle, attempt) {
 	const migrationResults = [];
 	const confirmedApplied = [];
 	const confirmedSkipped = [];
-	const warnings = verified.plans.flatMap((plan) => plan.warnings ?? []);
+	let warnings = verified.plans.flatMap((plan) => plan.warnings ?? []);
 	let stability = "stable";
 	try {
 		await createTrackingTable(db);
 		await upgradeTrackingTable(db, fenced ? attempt.attemptId : void 0);
 		const applied = await readAppliedSet(db);
+		warnings = verified.plans.flatMap((plan, index) => applied.has(migrations[index].name) ? [] : plan.warnings ?? []);
 		for (let index = 0; index < migrations.length; index++) {
 			const migration = migrations[index];
 			const plan = verified.plans[index];
@@ -274,8 +275,26 @@ async function executeMigrationPlan(db, migration, plan, fencedAttemptId) {
 		]);
 		return;
 	}
+	await runUnsplitMigration(db, migration, appliedAt, fencedAttemptId);
+}
+/**
+* D1 `exec()` treats each line as its own statement, so multi-line statements
+* fail there. Run each top-level statement through one batch instead, and keep
+* `exec()` only for SQL the splitter cannot divide safely (trigger bodies).
+*/
+async function runUnsplitMigration(db, migration, appliedAt, fencedAttemptId) {
+	const record = db.prepare("INSERT OR IGNORE INTO _void_migrations (name, applied_at) VALUES (?, ?)").bind(migration.name, appliedAt);
+	const statements = splitSqlStatements(migration.sql);
+	if (statements) {
+		await db.batch([
+			...ownershipFence(db, fencedAttemptId),
+			...statements.map((statement) => db.prepare(statement)),
+			record
+		]);
+		return;
+	}
 	await db.exec(migration.sql);
-	await db.prepare("INSERT OR IGNORE INTO _void_migrations (name, applied_at) VALUES (?, ?)").bind(migration.name, appliedAt).run();
+	await record.run();
 }
 /** Fail the whole D1 batch if recovery has revoked this executor's ownership. */
 function ownershipFence(db, attemptId) {
@@ -393,10 +412,14 @@ async function runD1LegacyMigrations(db, migrations) {
 		try {
 			const statements = splitMigrationSql(migration.sql);
 			if (statements.length === 1) {
-				if (isSingleSqlStatement(statements[0])) await db.prepare(statements[0]).run();
-				else await db.exec(migration.sql);
-			} else for (const statement of statements) await db.prepare(statement).run();
-			await db.prepare("INSERT OR IGNORE INTO _void_migrations (name, applied_at) VALUES (?, ?)").bind(migration.name, (/* @__PURE__ */ new Date()).toISOString()).run();
+				if (isSingleSqlStatement(statements[0])) {
+					await db.prepare(statements[0]).run();
+					await recordLegacyMigration(db, migration.name);
+				} else await runUnsplitMigration(db, migration, (/* @__PURE__ */ new Date()).toISOString());
+			} else {
+				for (const statement of statements) await db.prepare(statement).run();
+				await recordLegacyMigration(db, migration.name);
+			}
 			migrationResults.push({
 				name: migration.name,
 				applied: true,
@@ -421,6 +444,9 @@ async function runD1LegacyMigrations(db, migrations) {
 		migrations: migrationResults
 	};
 }
+async function recordLegacyMigration(db, name) {
+	await db.prepare("INSERT OR IGNORE INTO _void_migrations (name, applied_at) VALUES (?, ?)").bind(name, (/* @__PURE__ */ new Date()).toISOString()).run();
+}
 function splitMigrationSql(sql) {
 	const lines = sql.split(/\r?\n/);
 	if (!lines.some((line) => isStatementBreakpointLine(line) || hasInlineStatementBreakpoint(line))) return [sql];

package/dist/runtime/routing.d.mts

@@ -1,5 +1,5 @@
 import { t as DevCssAsset } from "../types-BAp5AEBU.mjs";
-import { a as handlePageMutation, i as handlePageGet } from "../protocol-CjF_iI9X.mjs";
+import { a as handlePageMutation, i as handlePageGet } from "../protocol-BX8t2jiw.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Context, ExecutionContext, Hono, MiddlewareHandler } from "hono";
 //#region src/runtime/routing-errors.d.ts

package/dist/runtime/sandbox.d.mts

@@ -1,5 +1,5 @@
 /// <reference types="@cloudflare/workers-types" />
 import { i as SandboxExecOptions, s as SandboxOptions } from "../sandbox-container-Bo0eiFKz.mjs";
-import { a as SandboxFiles, c as SandboxUnavailableError, d as __setSandboxBindingName, f as getSandbox, i as SandboxClient, l as VoidPlatformSandbox, n as DEFAULT_SANDBOX_ID, o as SandboxLimitError, p as sandbox, r as SANDBOX_SERVICE_BINDING, s as SandboxProcess, t as DEFAULT_SANDBOX_BINDING, u as VoidSandboxOptions } from "../sandbox-XZAqzFlG.mjs";
+import { a as SandboxFiles, c as SandboxUnavailableError, d as __setSandboxBindingName, f as getSandbox, i as SandboxClient, l as VoidPlatformSandbox, n as DEFAULT_SANDBOX_ID, o as SandboxLimitError, p as sandbox, r as SANDBOX_SERVICE_BINDING, s as SandboxProcess, t as DEFAULT_SANDBOX_BINDING, u as VoidSandboxOptions } from "../sandbox-C5LFoJMf.mjs";
 export * from "@cloudflare/sandbox";
 export { DEFAULT_SANDBOX_BINDING, DEFAULT_SANDBOX_ID, SANDBOX_SERVICE_BINDING, SandboxClient, type SandboxExecOptions, SandboxFiles, SandboxLimitError, type SandboxOptions, SandboxProcess, SandboxUnavailableError, VoidPlatformSandbox, VoidSandboxOptions, __setSandboxBindingName, getSandbox, sandbox };

package/dist/runtime/sandbox.mjs

@@ -1,6 +1,6 @@
 import { a as getRawRuntimeEnv } from "../env-raw-Cx8ElDdj.mjs";
+import { t as UsageLimit } from "../limits-D0vD1M9A.mjs";
 import { a as requireRuntimeBinding } from "../env-D5liuQYR.mjs";
-import { i as limitOperation, t as UsageLimit } from "../limits-Cjuk2VPm.mjs";
 import { n as SandboxContainer, r as validateSandboxOptions } from "../sandbox-container-C6ItmVuN.mjs";
 export * from "@cloudflare/sandbox";
 //#region src/runtime/sandbox.ts
@@ -95,7 +95,7 @@ function client(capability) {
 		if (typeof method !== "string" || method === "then") return;
 		return (...args) => {
 			const index = method === "writeFile" || method === "rename" ? 3 : 2;
-			return limitOperation(() => callWithOptions("files", [method, ...args], index));
+			return callWithOptions("files", [method, ...args], index);
 		};
 	} });
 	const execute = async (argv, options) => {
@@ -109,26 +109,21 @@ function client(capability) {
 			stdout: wire.stdout,
 			stderr: wire.stderr,
 			get exitCode() {
-				return exitCode ??= limitOperation(async () => {
+				return exitCode ??= (async () => {
 					try {
 						return await wire.capability.invoke("exitCode", []);
 					} catch (error) {
 						rethrowSandboxError(error);
 					}
-				});
+				})();
 			},
 			output() {
-				return output ??= limitOperation(async () => {
+				return output ??= (async () => {
 					try {
 						return await Promise.all([
 							wire.stdout ? new Response(wire.stdout).arrayBuffer() : /* @__PURE__ */ new ArrayBuffer(0),
 							wire.stderr ? new Response(wire.stderr).arrayBuffer() : /* @__PURE__ */ new ArrayBuffer(0),
-							process.exitCode.match({
-								ok: (code) => code,
-								limited: (limit) => {
-									throw limit;
-								}
-							})
+							process.exitCode
 						]).then(([stdout, stderr, exitCode]) => ({
 							stdout,
 							stderr,
@@ -137,7 +132,7 @@ function client(capability) {
 					} catch (error) {
 						rethrowSandboxError(error);
 					}
-				});
+				})();
 			},
 			kill: async (signal) => {
 				await wire.capability.invoke("kill", [signal]);
@@ -150,16 +145,11 @@ function client(capability) {
 	};
 	return {
 		files,
-		exec: (argv, options) => limitOperation(() => execute(argv, options)),
-		run: (argv, options) => limitOperation(async () => {
-			return (await execute(argv, options)).output().match({
-				ok: (result) => result,
-				limited: (limit) => {
-					throw limit;
-				}
-			});
-		}),
-		fetch: (port, request) => limitOperation(async () => await call("fetch", [port, request])),
+		exec: execute,
+		run: async (argv, options) => {
+			return (await execute(argv, options)).output();
+		},
+		fetch: async (port, request) => await call("fetch", [port, request]),
 		running: async () => await call("running", []),
 		destroy: async () => {
 			await call("destroy", []);

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-CZ4nAylQ.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-BeK3weD4.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,6 +1,6 @@
 import { n as AuthState } from "../auth-DkcFflXV.mjs";
 import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-BVkjZ3vM.mjs";
-import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-CL1w7GXU.mjs";
+import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-C79j4aED.mjs";
 //#region src/runtime/ws-server.d.ts
 export type WebSocketRouteMeta = {
   name?: string;

package/dist/runtime/ws.d.mts

@@ -1,2 +1,2 @@
-import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-CL1w7GXU.mjs";
+import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-C79j4aED.mjs";
 export { AnyWebSocketDefinition, ConnectCommonOptions, RoomContext, RoomController, RoomDefinition, SocketContext, SocketDefinition, VoidSocket, VoidSocketCloseEvent, WebSocketBaseContext, WebSocketConnection, WebSocketInstanceKey, connect, defineRoom, defineWebSocket };

package/dist/{sandbox-XZAqzFlG.d.mts → sandbox-C5LFoJMf.d.mts}

@@ -1,4 +1,4 @@
-import { n as LimitOperation, r as UsageLimit } from "./limits-Bq5LG8Id.mjs";
+import { t as UsageLimit } from "./limits-CFsDKQvU.mjs";
 import { i as SandboxExecOptions, r as SandboxContainer, s as SandboxOptions } from "./sandbox-container-Bo0eiFKz.mjs";
 import { Files } from "@cloudflare/sandbox";
 //#region src/runtime/sandbox.d.ts
@@ -15,17 +15,17 @@ type SandboxProcess = {
   stdin: WritableStream | null;
   stdout: ReadableStream | null;
   stderr: ReadableStream | null;
-  readonly exitCode: LimitOperation<number>;
-  output(): LimitOperation<ExecOutput>;
+  readonly exitCode: Promise<number>;
+  output(): Promise<ExecOutput>;
   kill(signal?: number): Promise<void>;
   resize(cols: number, rows: number): Promise<void>;
 };
-type SandboxFiles = { [K in keyof Files]: Files[K] extends ((...args: infer A) => Promise<infer R>) ? (...args: A) => LimitOperation<R> : never; };
+type SandboxFiles = { [K in keyof Files]: Files[K] extends ((...args: infer A) => Promise<infer R>) ? (...args: A) => Promise<R> : never; };
 type SandboxClient = {
-  exec(argv: Array<string>, options?: SandboxExecOptions): LimitOperation<SandboxProcess>;
-  run(argv: Array<string>, options?: SandboxExecOptions): LimitOperation<ExecOutput>;
+  exec(argv: Array<string>, options?: SandboxExecOptions): Promise<SandboxProcess>;
+  run(argv: Array<string>, options?: SandboxExecOptions): Promise<ExecOutput>;
   files: SandboxFiles;
-  fetch(port: number, request: Request): LimitOperation<Response>;
+  fetch(port: number, request: Request): Promise<Response>;
   running(): Promise<boolean>;
   destroy(): Promise<void>;
 };

package/dist/{scan-C7okrLyM.mjs → scan-C8dA7iM4.mjs}

@@ -312,11 +312,15 @@ async function scanPages(root, options) {
 		namedLayouts
 	};
 }
+const LEADING_SCRIPT_RE = /^<script\b[^>]*>[\s\S]*?<\/script>\s*\n?/;
+/** Return the raw YAML frontmatter of markdown source, after any leading <script> block. */
+function markdownFrontmatter(source) {
+	return source.replace(LEADING_SCRIPT_RE, "").match(/^---\r?\n([\s\S]*?)\r?\n---/)?.[1];
+}
 /** Extract title and description from YAML frontmatter in markdown source. */
 function extractFrontmatterMeta(source) {
-	const match = source.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-	if (!match) return;
-	const yaml = match[1];
+	const yaml = markdownFrontmatter(source);
+	if (yaml === void 0) return;
 	const title = yaml.match(/^title:\s*(.+)$/m)?.[1]?.trim().replace(/^["']|["']$/g, "");
 	const description = yaml.match(/^description:\s*(.+)$/m)?.[1]?.trim().replace(/^["']|["']$/g, "");
 	if (!title && !description) return;
@@ -327,9 +331,9 @@ function extractFrontmatterMeta(source) {
 }
 /** Extract layout field from YAML frontmatter in markdown source. */
 function extractFrontmatterLayout(source) {
-	const match = source.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-	if (!match) return;
-	const value = match[1].match(/^layout:\s*(.+)$/m)?.[1]?.trim().replace(/^["']|["']$/g, "");
+	const yaml = markdownFrontmatter(source);
+	if (yaml === void 0) return;
+	const value = yaml.match(/^layout:\s*(.+)$/m)?.[1]?.trim().replace(/^["']|["']$/g, "");
 	if (!value) return;
 	if (value === "false") return false;
 	return value;

package/dist/{secret-3c72lY1U.mjs → secret-AKnNXNP5.mjs}

@@ -1,9 +1,9 @@
-import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-D52yG7hl.mjs";
 import { _ as validateSecretValues } from "./env-validation-vBSQ8gw5.mjs";
-import { A as confirm, B as note, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { o as formatCount } from "./output-BBsUwdyT.mjs";
+import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { l as note, o as formatCount } from "./output-BvdaehtE.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
@@ -77,7 +77,7 @@ async function runSecretCommand(root, args) {
 }
 async function runCloudflareSecretCommand(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-BhbK6yTq.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-DoQrVHAt.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	if (args.action === "list") {
 		const secrets = await listCloudflareSecrets(context);