void 0.25.0 → 0.26.1

package/dist/{email-z3o2cwjH.mjs → email-CpuT42g7.mjs}

@@ -1,14 +1,14 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
-import { m as readConfig } from "./config-Br_JZD6u.mjs";
-import { a as scanEmailHandlersSync } from "./email--tEtMoj_.mjs";
-import { B as resolveDeployTransport, F as isWranglerNonInteractiveOrCI, G as deriveWorkerName, I as runWranglerAuthToken, N as createDeployWranglerRunner, d as applyEmailSetup, f as createNodeEmailDns, g as renderEmailChecklist, h as renderAddressMap, j as discoverRootWranglerConfig, m as preflightEmail, p as findEmailConfigConflicts, q as loadProvisionModule } from "./deploy-DfsAe-T0.mjs";
-import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { A as writeProvisionedWranglerConfig } from "./wrangler-DhUerFkW.mjs";
-import { c as getToken, u as openBrowser } from "./auth-7wuZ5ob8.mjs";
-import { A as confirm, B as note, L as log, U as password, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-RsPo8wsP.mjs";
-import { c as import_picocolors, r as createSpinner } from "./output-BBsUwdyT.mjs";
+import { m as readConfig } from "./config-DiowPT80.mjs";
+import { a as scanEmailHandlersSync } from "./email-d_Aux1vM.mjs";
+import { A as createDeployWranglerRunner, H as loadProvisionModule, L as resolveDeployTransport, M as isWranglerNonInteractiveOrCI, N as runWranglerAuthToken, O as discoverRootWranglerConfig, V as deriveWorkerName, d as applyEmailSetup, f as createNodeEmailDns, g as renderEmailChecklist, h as renderAddressMap, m as preflightEmail, p as findEmailConfigConflicts } from "./deploy-BsEvnlJl.mjs";
+import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { j as writeProvisionedWranglerConfig } from "./wrangler-D9KTuqnv.mjs";
+import { c as getToken, u as openBrowser } from "./auth-B5_tZLxT.mjs";
+import { A as confirm, L as log, U as password, tt as isCancel } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess, l as import_picocolors, r as createSpinner, u as note } from "./output-C50ag2r3.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-C2Prx_Bi.mjs";
 import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { execSync } from "node:child_process";
@@ -82,10 +82,10 @@ async function emailDestinations(client, projectId) {
 async function emailAllow(client, projectId, address) {
 	const dest = await client.addEmailDestination(projectId, address);
 	const sent = dest.verificationSent !== false && (dest.created || dest.platformVerificationPending);
-	if (dest.status === "verified") log.success(`${dest.address} is already verified.`);
+	if (dest.status === "verified") log.info(`${dest.address} is already verified.`);
 	else if (sent) {
-		log.success(`Verification email sent to ${dest.address}.`);
 		log.info("They click the link in their inbox — no Void or Cloudflare account needed. `void email destinations` to poll status.");
+		printSuccess(`Verification email sent to ${dest.address}.`);
 	} else if (dest.created) log.warn(`${dest.address} is on this project's list now, but Cloudflare already had the address pending (added by another project, or by hand), so no new verification email was sent — the link it mailed when the address was first added is the one to click. ${freshLinkHint(dest.address)}`);
 	else log.info(`${dest.address} is still pending — Cloudflare emailed them a verification link when the address was first added, and a repeat add sends nothing new. ${freshLinkHint(dest.address)}`);
 }
@@ -104,7 +104,7 @@ async function emailDisallow(client, projectId, address) {
 		process.exit(1);
 	}
 	await client.removeEmailDestination(projectId, dest.id);
-	log.success(`Removed ${dest.address}. New sends to it are refused immediately; already admitted attempts may finish.`);
+	printSuccess(`Removed ${dest.address}. New sends to it are refused immediately; already admitted attempts may finish.`);
 }
 async function emailLogs(client, projectId, limit) {
 	const result = await client.getEmailLogs(projectId, limit);
@@ -492,14 +492,18 @@ async function emailDomainAdd(client, projectId, rawDomain, subdomain, deps = {}
 			].join("\n"), "Email Setup");
 			if (operation.error) log.error(operation.error);
 			log.info(`Run \`void email domain status ${target.emailDomain}\` to inspect setup.`);
-			if (operation.status === "completed") return;
+			if (operation.status === "completed") {
+				printSuccess(`Email domain ${target.emailDomain} configured.`);
+				return;
+			}
 			return fail(`email: setup is ${operation.status}; operation ${operation.operationId} retains its confirmed progress on the platform.`);
 		}
 		return fail(`email: setup outcome is unknown (operation ${attemptId}). Nothing was revoked. Check \`void email domain status ${target.emailDomain}\` before starting another setup.`);
 	}
-	log.success("Token stored encrypted on the platform for this zone connection — nothing is kept on this machine.");
+	log.info("Token stored encrypted on the platform for this zone connection — nothing is kept on this machine.");
 	printEmailDomainOutcome(row);
 	if (row.operationStatus !== "completed") return exit(1);
+	printSuccess(`Email domain ${row.domain} configured.`);
 }
 function emailDomainStatusText(status) {
 	if (status === "ready") return import_picocolors.default.green("ready");
@@ -542,6 +546,7 @@ async function emailDomainSync(client, projectId, rawDomain) {
 	const row = await client.syncEmailDomain(projectId, domain);
 	printEmailDomainOutcome(row);
 	if (row.operationStatus !== "completed") throw new Error(`email: reconciliation ${row.operationStatus ?? "pending"}; inspect operation ${row.operationId ?? row.domain}`);
+	printSuccess(`Email domain ${domain} reconciled.`);
 }
 /** Rotation applies to every domain sharing this zone connection. */
 async function emailDomainRotateSecret(client, projectId, rawDomain, deps = {}) {
@@ -574,14 +579,14 @@ async function emailDomainRotateSecret(client, projectId, rawDomain, deps = {})
 				`Credential:  ${operation.readiness.management.status}`
 			].join("\n"), "Email Secret Rotation");
 			if (operation.status !== "completed") throw new Error(`email: secret rotation ${operation.status}; inspect operation ${operation.operationId}`);
-			log.success("Zone ingress secret rotated and verified on the deployed Worker.");
+			printSuccess("Zone ingress secret rotated and verified on the deployed Worker.");
 			return;
 		}
 		throw new Error(`email: secret rotation outcome is unknown (operation key ${attemptId}); inspect \`void email domain status ${domain}\` before starting another rotation.`);
 	}
 	printEmailDomainOutcome(row);
 	if (row.operationStatus !== "completed") throw new Error(`email: secret rotation ${row.operationStatus ?? "pending"}; inspect operation ${row.operationId ?? row.domain}`);
-	log.success("Zone ingress secret rotated and verified on the deployed Worker.");
+	printSuccess("Zone ingress secret rotated and verified on the deployed Worker.");
 }
 async function emailDomainRemove(client, projectId, rawDomain, options = {}) {
 	const domain = normalizeEmailDomainInput(rawDomain);
@@ -592,7 +597,7 @@ async function emailDomainRemove(client, projectId, rawDomain, options = {}) {
 		(options.exit ?? ((code) => process.exit(code)))(1);
 		return;
 	}
-	log.success(`Removed ${domain}. Zone resources still used by other domains were retained.`);
+	printSuccess(`Removed ${domain}. Zone resources still used by other domains were retained.`);
 }
 async function runEmailDomainCommand(client, projectId, args) {
 	switch (args.domainVerb) {
@@ -736,7 +741,7 @@ async function runEmailCloudflareCommandInConfig(root, args, project, configPath
 			pendingLabel: "(no rule yet)"
 		}));
 		if (pre.ready) {
-			log.success(`Email is set up on ${pre.domain}.`);
+			log.info(`Email is set up on ${pre.domain}.`);
 			return;
 		}
 		log.warn(`Email is not set up on ${pre.domain} yet — run \`void email setup --platform cloudflare\`.`);
@@ -776,7 +781,7 @@ async function runEmailCloudflareCommandInConfig(root, args, project, configPath
 		return exit(1);
 	}
 	if ((out.patch.addresses ?? []).length > 0) log.info("Routing rules are created by the next `void deploy --platform cloudflare`, which applies the Email Routing plan from `addresses`.");
-	log.success(`Email set up on ${pre.domain}.`);
+	printSuccess(`Email set up on ${pre.domain}.`);
 }
 //#endregion
 export { runEmailCommand };

package/dist/{email--tEtMoj_.mjs → email-d_Aux1vM.mjs}

@@ -4,7 +4,7 @@ import { n as globSync, t as glob } from "./dist-Bn8Kodjp.mjs";
 /**
 * Scan `email/` for inbound email handlers.
 *
-* The `email/` directory sits at the project root alongside `crons/` and
+* The `email/` directory sits at the source root alongside `crons/` and
 * `queues/` — non-HTTP handlers all live at the top level, since each is
 * wired into a separate worker export (`scheduled`, `queue`, `email`).
 *

package/dist/{entry-CF5wvH4w.mjs → entry-CMAkqBmU.mjs}

@@ -4,8 +4,10 @@ import { n as isIdentifier } from "./ast-CPGPjb0V.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
 //#region src/ssr/entry.ts
-const SSR_SERVER_ENTRY_RELATIVE_PATHS = ["src/main.ssr.ts", "src/main.ssr.tsx"];
-const SSR_CLIENT_ENTRY_RELATIVE_PATHS = ["src/main.client.ts", "src/main.client.tsx"];
+const SSR_SERVER_ENTRY_NAMES = ["main.ssr.ts", "main.ssr.tsx"];
+const SSR_CLIENT_ENTRY_NAMES = ["main.client.ts", "main.client.tsx"];
+const SSR_SERVER_ENTRY_RELATIVE_PATHS = SSR_SERVER_ENTRY_NAMES.map((name) => `src/${name}`);
+const SSR_CLIENT_ENTRY_RELATIVE_PATHS = SSR_CLIENT_ENTRY_NAMES.map((name) => `src/${name}`);
 function resolveSingleEntry(root, entries, label, paths = readProjectPaths(root)) {
 	const matches = entries.map((entryName) => ({
 		relativePath: relative(root, join(paths.ssrDir, entryName)),
@@ -18,8 +20,6 @@ function resolveSingleEntry(root, entries, label, paths = readProjectPaths(root)
 	}
 	return matches[0];
 }
-const SSR_SERVER_ENTRY_NAMES = ["main.ssr.ts", "main.ssr.tsx"];
-const SSR_CLIENT_ENTRY_NAMES = ["main.client.ts", "main.client.tsx"];
 function getSsrServerEntryPath(root, paths = readProjectPaths(root)) {
 	return resolveSingleEntry(root, SSR_SERVER_ENTRY_NAMES, "SSR", paths)?.absolutePath ?? null;
 }
@@ -68,8 +68,8 @@ function validateSsrEntries(root, paths = readProjectPaths(root)) {
 	const server = resolveSingleEntry(root, SSR_SERVER_ENTRY_NAMES, "SSR", paths);
 	const client = resolveSingleEntry(root, SSR_CLIENT_ENTRY_NAMES, "SSR client", paths);
 	if (!server && !client) return null;
-	if (server && !client) throw new Error(`ssr: Missing client entry. Add one of: ${SSR_CLIENT_ENTRY_RELATIVE_PATHS.join(", ")}.`);
-	if (!server && client) throw new Error(`ssr: Missing server entry. Add one of: ${SSR_SERVER_ENTRY_RELATIVE_PATHS.join(", ")}.`);
+	if (!client) throw new Error(`ssr: Missing client entry. Add one of: ${SSR_CLIENT_ENTRY_RELATIVE_PATHS.join(", ")}.`);
+	if (!server) throw new Error(`ssr: Missing server entry. Add one of: ${SSR_SERVER_ENTRY_RELATIVE_PATHS.join(", ")}.`);
 	validateServerRenderExport(server);
 	return {
 		server,

package/dist/{env-_v349JBd.mjs → env-BxocywBB.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { n as parseDotenvFile } from "./dotenv-VQxupEUv.mjs";
+import { t as parseDotenvFile } from "./dotenv-BfU6eqFt.mjs";
 import { readdirSync } from "node:fs";
 //#region src/shared/env.ts
 /** Void's single local dotenv file. It is never a production configuration source. */
@@ -41,12 +41,12 @@ function findLegacyEnvFiles(root) {
 * Tri-state override semantics:
 *   - `VOID_REMOTE=1` → force remote mode on
 *   - `VOID_REMOTE=0` → force remote mode off (e.g. local/CI builds of a
-*     project whose `void.json` has `remote: true`)
+*     project whose `void.config.ts` sets `remote: true`)
 *   - unset / any other value → fall back to `config.remote`
 *
-* Both the dev-server plugin (index.ts) and the prerender build plugin
-* (plugin-prerender.ts) must derive `remoteMode` through this helper so
-* dev and build stay in lockstep.
+* The dev-server plugin (index.ts), the prerender build plugin
+* (plugin-prerender.ts), and managed deploy (cli/deploy-managed-full.ts) must
+* derive `remoteMode` through this helper so dev and build stay in lockstep.
 */
 function resolveRemoteMode(configRemote) {
 	const override = process.env.VOID_REMOTE;
@@ -54,6 +54,25 @@ function resolveRemoteMode(configRemote) {
 	if (override === "0") return false;
 	return configRemote === true;
 }
+/**
+* Names starting with this prefix are reserved for Void. Void sets them
+* itself (proxy credentials, email and AI wiring), so `.env` and `env.ts`
+* must not define them: Wrangler loads `.env` into the dev Worker on its own
+* and writes it over `vars`, so dropping keys from `vars` cannot keep them
+* out. `envSchemaPlugin` and `void env check` reject them instead.
+*/
+const RESERVED_ENV_PREFIX = "__VOID_";
+/** Names in `keys` that use the reserved `__VOID_` prefix, in input order. */
+function findReservedEnvKeys(keys) {
+	return Array.from(keys).filter((key) => key.startsWith(RESERVED_ENV_PREFIX));
+}
+/**
+* The error for reserved names found in `.env` or `env.ts`. Shared by the
+* Vite plugin and `void env check` so both print the same text.
+*/
+function reservedEnvKeysMessage(source, keys) {
+	return `${source} ${source === ".env" ? "defines" : "declares"} names reserved for Void: ${keys.join(", ")}. Void sets these itself; remove them. To trigger crons or queues locally, use the x-void-dev-trigger header printed at dev start.`;
+}
 const INTERNAL_ENV_KEY_SET = /* @__PURE__ */ new Set([
 	"__VOID_ACCESS_CREDENTIALS",
 	"__VOID_TOKEN",
@@ -93,4 +112,4 @@ function stripInternalEnvKeys(input) {
 	};
 }
 //#endregion
-export { loadLocalEnv as a, isClientEnvKey as i, CLOUDFLARE_DEPLOY_BUILD_ENV as n, resolveRemoteMode as o, findLegacyEnvFiles as r, stripInternalEnvKeys as s, CLIENT_ENV_PREFIX as t };
+export { isClientEnvKey as a, resolveRemoteMode as c, findReservedEnvKeys as i, stripInternalEnvKeys as l, LOCAL_ENV_FILE as n, loadLocalEnv as o, findLegacyEnvFiles as r, reservedEnvKeysMessage as s, CLOUDFLARE_DEPLOY_BUILD_ENV as t };

package/dist/{env-D5liuQYR.mjs → env-DMA3cXZt.mjs}

@@ -1,4 +1,4 @@
-import { a as getRawRuntimeEnv, i as envContext, n as INTERNAL_BINDING_PREFIXES, o as isIsrActive, r as asEnv, t as INTERNAL_BINDING_EXACT_NAMES } from "./env-raw-Cx8ElDdj.mjs";
+import { a as getRawRuntimeEnv, i as envContext, n as INTERNAL_BINDING_PREFIXES, o as isIsrActive, r as asEnv, t as INTERNAL_BINDING_EXACT_NAMES } from "./env-raw-jZpP5n47.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/runtime/env.ts
 /**

package/dist/{env-public-BX_r8HR6.d.mts → env-public-DR7ZM6d-.d.mts}

@@ -1,4 +1,4 @@
-import { l as VoidPlatformSandbox } from "./sandbox-XZAqzFlG.mjs";
+import { l as VoidPlatformSandbox } from "./sandbox-C5LFoJMf.mjs";
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 //#region src/runtime/env-public.d.ts
 type AnyValidator = StandardSchemaV1<unknown, unknown>;

package/dist/{env-raw-Cx8ElDdj.mjs → env-raw-jZpP5n47.mjs}

@@ -4,8 +4,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
 * Raw runtime env resolution — framework-internal only.
 *
 * This module is NOT exported in package.json, so it cannot be imported
-* via "void/..." subpaths. Only framework modules using relative imports
-* (isr.ts, ai.ts, env.ts) can access it.
+* via "void/..." subpaths. Only framework modules can import it by relative path.
 */
 /** Prefixes for platform-internal bindings that must be hidden from user code. */
 const INTERNAL_BINDING_PREFIXES = ["__VOID_", "__PROJECT_"];

package/dist/{env-types-D5kds_OZ.mjs → env-types-CwXgeMgL.mjs}

@@ -24,7 +24,7 @@ function findEnvFileForPaths(root, paths) {
 *   - `void/env`'s `ValidatedEnv` so `env.X` is typed
 *   - `void/handler`'s `CloudBindings` so `c.env.X` is typed
 *
-* Uses `typeof import("../env.ts").default` so TypeScript handles the
+* Uses `typeof import(...)` on the env schema file so TypeScript handles the
 * inference — codegen never analyses types itself.
 *
 * @param envFileAbs Absolute path to the user's env schema file.

package/dist/{env-validation-cZBvGWaP.mjs → env-validation-CrVNjsPm.mjs}

@@ -1,2 +1,2 @@
-import { a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars, r as SelfHostSchemaError } from "./env-validation-vBSQ8gw5.mjs";
+import { a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars, r as SelfHostSchemaError } from "./env-validation-Dxdx_5wo.mjs";
 export { SelfHostSchemaError, computeInvalidEmittedKeys, deriveSelfHostSchemaFacts, readEmittedWorkerVars };

package/dist/{env-validation-vBSQ8gw5.mjs → env-validation-Dxdx_5wo.mjs}

@@ -1,8 +1,9 @@
 import { a as join, n as dirname, u as resolve } from "./dist-BVqXeR_h.mjs";
 import { i as voidWarn } from "./log-vqY3pqwI.mjs";
-import { t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
-import { a as loadLocalEnv, i as isClientEnvKey, r as findLegacyEnvFiles } from "./env-_v349JBd.mjs";
-import { c as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-B-wekeR6.mjs";
+import { n as scanWranglerDotenvKeys } from "./dotenv-BfU6eqFt.mjs";
+import { a as isClientEnvKey, i as findReservedEnvKeys, n as LOCAL_ENV_FILE, o as loadLocalEnv, r as findLegacyEnvFiles, s as reservedEnvKeysMessage } from "./env-BxocywBB.mjs";
+import { t as findEnvFile } from "./env-types-CwXgeMgL.mjs";
+import { l as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-2-TfIEzB.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { parse } from "jsonc-parser";
@@ -29,11 +30,7 @@ import { spawn } from "node:child_process";
 * that ships in worker bundles.
 */
 let loadCounter = 0;
-/**
-* Returns the specifier from a Node resolution error if the error looks
-* like one — otherwise `null`. Both `ERR_MODULE_NOT_FOUND` and
-* `ERR_UNSUPPORTED_DIR_IMPORT` have the specifier embedded in the message.
-*/
+/** Returns the failed specifier from a Node module-resolution error, or `null`. */
 function extractFailedSpecifier(err) {
 	if (!(err instanceof Error)) return null;
 	const code = err.code;
@@ -132,6 +129,8 @@ function emptyReport() {
 async function validateProdEnv(root, options) {
 	const legacyFiles = findLegacyEnvFiles(root);
 	if (legacyFiles.length > 0) throw new Error(`env: only .env is supported for local development. Remove ${legacyFiles.join(", ")} and follow the env migration guide.`);
+	const reservedInDotenv = options.productionOnly ? [] : findReservedEnvKeys(scanWranglerDotenvKeys(join(root, LOCAL_ENV_FILE)));
+	if (reservedInDotenv.length > 0) throw new Error(`env: ${reservedEnvKeysMessage(".env", reservedInDotenv)}`);
 	const envFile = findEnvFile(root);
 	if (!envFile) return {
 		hasSchema: false,
@@ -142,6 +141,8 @@ async function validateProdEnv(root, options) {
 		hasSchema: false,
 		report: emptyReport()
 	};
+	const reservedInSchema = findReservedEnvKeys(Object.keys(mod._getRegisteredSchema() ?? {}));
+	if (reservedInSchema.length > 0) throw new Error(`env: ${reservedEnvKeysMessage("env.ts", reservedInSchema)}`);
 	const local = options.productionOnly ? {} : loadLocalEnv(root, { onWarn: (message) => voidWarn(message) });
 	const shell = options.productionOnly ? Object.fromEntries(Object.entries(process.env).filter(([key]) => isClientEnvKey(key))) : process.env;
 	const merged = {
@@ -307,8 +308,8 @@ function selfHostSchemaFailureMessage(reason) {
 * its message, stack, or cause (and `VOID_ENV_UNMASK` disables redaction). Any
 * throw/reject from `fn` is caught, its original message/stack/cause DROPPED,
 * and a fixed structural {@link SelfHostSchemaError} rethrown in its place. The
-* managed `validateProdEnv` itself is NEVER wrapped — only the self-host CALL
-* SITES pass through here, so the managed path is byte-identical.
+* managed `validateProdEnv` itself is NEVER wrapped — only the self-host call
+* sites pass through here.
 */
 async function withSchemaBoundary(reason, fn) {
 	try {
@@ -501,10 +502,9 @@ function invalidEnvReport(missing, invalidKeys) {
 }
 /**
 * DISCHARGE half of the self-host gate — PURE parent work over the values-free
-* {@link SelfHostEnvContext} the subprocess derived, plus at most one `wrangler
-* secret list`. Runs NO project code, NO `loadEnv`, and imports NO env.ts, so the
-* parent never evaluates arbitrary code with live credentials in scope. Applies
-* the three fences unchanged:
+* {@link SelfHostEnvContext}, plus at most one `wrangler secret list`. Runs NO
+* project code, NO `loadEnv`, and imports NO env.ts, so the parent never
+* evaluates arbitrary code with live credentials in scope. Applies three fences:
 *   - a PRESENT-EMPTY required key fails closed ALWAYS, before any wrangler spawn;
 *   - the pinned worker `name` is reconciled against the config's `name`, and the
 *     target account against the config's `account_id`, BOTH BEFORE `secret list`
@@ -686,13 +686,9 @@ function describeVarSource(source) {
 * config var precedence over a same-named remote secret (`checkRemoteSecretsOverride`
 * in wrangler-dist/cli.js warns "… will replace these remote secrets with the
 * configuration values"), so shipping this would ship an empty value for a
-* required secret (overwriting a remote one if it exists). The fix is to REMOVE
-* the empty assignment, not `secret put`.
-*
-* The empty value can come from ANY of the four build layers, so the
-* remediation names each key's ACTUAL source (its {@link VarSource} provenance)
-* — a dotenv file / `void.json` `worker.vars` / root `wrangler.jsonc` `vars` —
-* instead of misdirecting the user to `.env` files.
+* required secret (overwriting a remote one if it exists). The remedy is to
+* REMOVE the empty assignment, not `secret put`. The remediation names each
+* key's source (its {@link VarSource} provenance).
 */
 function emptyAssignmentError(keys, sources) {
 	const sorted = [...keys].sort((a, b) => a.localeCompare(b));

package/dist/{env-3Q8-_2IH.mjs → env-w9jOyGZn.mjs}

@@ -1,10 +1,11 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BkbfDs0V.mjs";
-import { c as getToken } from "./auth-7wuZ5ob8.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
-import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-vBSQ8gw5.mjs";
-import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DQstYTxO.mjs";
+import { c as getToken } from "./auth-B5_tZLxT.mjs";
+import { H as outro, L as log } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess, u as note } from "./output-C50ag2r3.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-CwXgeMgL.mjs";
+import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-Dxdx_5wo.mjs";
+import { r as PlatformClient } from "./client-C2Prx_Bi.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
@@ -24,7 +25,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BhbK6yTq.mjs");
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BlYLlowZ.mjs");
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);
@@ -50,7 +51,7 @@ async function runCheck(root, useRemoteSecrets) {
 		return;
 	}
 	if (report.valid) {
-		outro(useRemoteSecrets ? "All required remote env names are present; values validate at runtime." : "Local .env values are valid.");
+		printSuccess(useRemoteSecrets ? "All required remote env names are present; values validate at runtime." : "Local .env values are valid.");
 		return;
 	}
 	note(formatEnvReport(report), "Env validation failed");
@@ -67,7 +68,7 @@ function runTypes(root) {
 	mkdirSync(outDir, { recursive: true });
 	const { dts } = generateEnvTypes(envFile, outDir);
 	writeFileSync(join(outDir, "env.d.ts"), dts);
-	outro(`Wrote ${join(".void", "env.d.ts")}.`);
+	printSuccess(`Wrote ${join(".void", "env.d.ts")}.`);
 }
 //#endregion
 export { runEnvCommand };

package/dist/{fetch-_SeGZao9.d.mts → fetch-BPCYVi3H.d.mts}

@@ -1,4 +1,23 @@
 import { RouteMap } from "void/routes";
+//#region src/runtime/fetch-error.d.ts
+type FetchResponse<T = unknown> = Response & {
+  _data?: T;
+};
+type FetchError<T = unknown> = Error & {
+  request?: RequestInfo;
+  options?: RequestInit & Record<string, unknown>;
+  response?: FetchResponse<T>;
+  data?: T;
+  status?: number;
+  statusText?: string;
+  statusCode?: number;
+  statusMessage?: string;
+};
+type FetchErrorConstructor = new <T = unknown>(message: string, opts?: {
+  cause: unknown;
+}) => FetchError<T>;
+declare const FetchError: FetchErrorConstructor;
+//#endregion
 //#region src/runtime/fetch.d.ts
 type MethodsOf<P extends keyof RouteMap> = keyof RouteMap[P] & string;
 type DefaultMethod<P extends keyof RouteMap> = "GET" extends MethodsOf<P> ? "GET" : never;
@@ -54,4 +73,4 @@ type FetchOptions<P extends keyof RouteMap, M extends MethodsOf<P>> = BodyOption
 declare function fetch<P extends keyof RouteMap & string>(path: HasRequiredInput<P, DefaultMethod<P>> extends false ? P : never): Promise<OutputOf<P, DefaultMethod<P>>>;
 declare function fetch<P extends keyof RouteMap & string, M extends MethodsOf<P> = DefaultMethod<P>>(path: P, options: FetchOptions<P, M>): Promise<OutputOf<P, M>>;
 //#endregion
-export { fetch as t };
+export { fetch as a, QueryOption as i, MethodsOf as n, FetchError as o, ParamsOption as r, BodyOption as t };

package/dist/{fetch-BIZJh7vR.mjs → fetch-sAcwjzLO.mjs}

@@ -1,5 +1,5 @@
 import { n as ofetch } from "./fetch-error-Dj3crt0e.mjs";
-import { t as interpolateRouteParams } from "./route-url-CG7U-cRN.mjs";
+import { t as interpolateRouteParams } from "./route-url-BjGv_KKY.mjs";
 //#region src/runtime/fetch.ts
 async function fetch(path, options) {
 	const url = interpolateRouteParams(path, options?.params);

package/dist/{fetch-stream-IvCYKyQL.mjs → fetch-stream-PGgz4uGz.mjs}

@@ -1,5 +1,6 @@
 import { n as ofetch, t as FetchError } from "./fetch-error-Dj3crt0e.mjs";
-import { t as interpolateRouteParams } from "./route-url-CG7U-cRN.mjs";
+import { t as interpolateRouteParams } from "./route-url-BjGv_KKY.mjs";
+import { n as asUsageLimit, r as limitFromResponse } from "./limits-D0vD1M9A.mjs";
 //#region src/runtime/fetch-stream.ts
 /**
 * Consume an SSE endpoint as an async generator of text chunks.
@@ -30,6 +31,10 @@ async function* fetchStream(path, options) {
 		signal: options?.signal,
 		baseURL: options?.baseURL,
 		responseType: "stream"
+	}).catch(async (error) => {
+		const response = error && typeof error === "object" && "response" in error ? error.response : null;
+		if (response instanceof Response) throw await limitFromResponse(response, "ai") ?? error;
+		throw error;
 	}))._data;
 	if (!body) return;
 	const reader = body.getReader();
@@ -39,11 +44,13 @@ async function* fetchStream(path, options) {
 	const terminal = (data) => {
 		if (event !== "void:error" && event !== "void:limit") return;
 		let message = "Generation was interrupted.";
+		let limit = null;
 		try {
 			const body = JSON.parse(data);
+			if (event === "void:limit") limit = asUsageLimit(body);
 			if (typeof body.message === "string") message = body.message;
 		} catch {}
-		throw new FetchError(message);
+		throw limit ?? new FetchError(message);
 	};
 	try {
 		while (true) {
@@ -67,35 +74,30 @@ async function* fetchStream(path, options) {
 					const data = trimmed.slice(6);
 					terminal(data);
 					if (data === "[DONE]") return;
-					try {
-						const parsed = JSON.parse(data);
-						if (typeof parsed.response === "string") {
-							yield parsed.response;
-							continue;
-						}
-						if ("response" in parsed) continue;
-					} catch {}
-					yield data;
+					const chunk = chunkText(data);
+					if (chunk !== void 0) yield chunk;
 				}
 			}
 		}
-		if (buffer.trim()) {
-			const trimmed = buffer.trim();
-			if (trimmed.startsWith("data: ")) {
-				const data = trimmed.slice(6);
-				terminal(data);
-				if (data !== "[DONE]") try {
-					const parsed = JSON.parse(data);
-					if (typeof parsed.response === "string") yield parsed.response;
-					else if (!("response" in parsed)) yield data;
-				} catch {
-					yield data;
-				}
-			}
+		const trimmed = buffer.trim();
+		if (trimmed.startsWith("data: ")) {
+			const data = trimmed.slice(6);
+			terminal(data);
+			const chunk = data === "[DONE]" ? void 0 : chunkText(data);
+			if (chunk !== void 0) yield chunk;
 		}
 	} finally {
 		reader.releaseLock();
 	}
 }
+/** Workers AI frames carry text in `response`; other JSON with that key (e.g. usage metadata) is skipped. */
+function chunkText(data) {
+	try {
+		const parsed = JSON.parse(data);
+		if (typeof parsed.response === "string") return parsed.response;
+		if ("response" in parsed) return;
+	} catch {}
+	return data;
+}
 //#endregion
 export { fetchStream as t };

package/dist/{fetch-stream-Bjf0hoZb.d.mts → fetch-stream-obvZ7fvO.d.mts}

@@ -1,24 +1,9 @@
+import { i as QueryOption, n as MethodsOf, r as ParamsOption, t as BodyOption } from "./fetch-BPCYVi3H.mjs";
 import { RouteMap } from "void/routes";
 //#region src/runtime/fetch-stream.d.ts
-type MethodsOf<P extends keyof RouteMap> = keyof RouteMap[P] & string;
 type InputOf<P extends keyof RouteMap, M extends MethodsOf<P>> = RouteMap[P][M] extends {
   input: infer I;
 } ? I : {};
-type BodyOption<I> = "body" extends keyof I ? {
-  body: I["body" & keyof I];
-} : {
-  body?: Record<string, unknown> | BodyInit | null;
-};
-type QueryOption<I> = "query" extends keyof I ? {
-  query: I["query" & keyof I];
-} : {
-  query?: Record<string, string>;
-};
-type ParamsOption<I> = "params" extends keyof I ? {
-  params: I["params" & keyof I];
-} : {
-  params?: Record<string, string>;
-};
 type StreamOptions<P extends keyof RouteMap, M extends MethodsOf<P>> = BodyOption<InputOf<P, M>> & QueryOption<InputOf<P, M>> & ParamsOption<InputOf<P, M>> & {
   method?: M;
   headers?: HeadersInit;