void 0.26.0 → 0.26.1

package/AGENTS_TEMPLATE.md

@@ -1,6 +1,4 @@
 ## Void
 
 - This project uses [Void](https://void.cloud), a full-stack Vite framework for Cloudflare Workers with file-based API routing, server-rendered pages, and typed backend services.
-- Deploy to your Cloudflare account with `void deploy --platform cloudflare`, or explicitly connect to your team’s Void platform with `void connect <url>` before deploying with `void deploy --platform void`. `void deploy` uses the saved destination.
-- Use Void's CLI and typed APIs for development and infrastructure. Void infers Cloudflare bindings from your imports; use Void commands to manage them.
-- Before working with Void, read the relevant Markdown docs in `node_modules/void/skills/void/docs/`. Start with `guide/quickstart.md` for setup and `reference/cli.md` for commands; consult the other guides and references for any Void feature.
+- Use Void's CLI and typed APIs. Before working with Void, read the relevant Markdown docs in `node_modules/void/docs/`; start with `guide/quickstart.md` for setup and `reference/cli.md` for commands.

package/README.md

@@ -1,6 +1,14 @@
-# void
+# Void
 
-Build and deploy full-stack Vite apps on Cloudflare Workers. Void provides server routes, server-rendered pages, and typed access to databases, storage, and AI.
+Build and deploy full-stack apps with [Vite](https://vite.dev), running on Cloudflare Workers.
+
+Void brings together three open-source tools for you and your coding agents:
+
+- **Void SDK:** Build your server and client together with file-based API routes, server-rendered pages, and typed APIs for databases, storage, and AI. Carry types from database queries to the UI.
+- **Void CLI:** Build your app, provision the Cloudflare resources it uses, apply migrations, and deploy with one command. Manage resources, inspect logs, and roll back through the same CLI.
+- **Void Platform:** Install a shared deployment environment in your Cloudflare account for your team or customers, with access controls, resource limits, and usage reporting.
+
+The SDK's features are optional and composable. Use React, Vue, Svelte, or Solid for Void pages, or keep a [supported application framework](https://void.cloud/integrations/frameworks/overview) for routing and rendering while Void handles resource APIs, migrations, and deployment.
 
 ## Getting Started
 
@@ -12,26 +20,28 @@ npx void init
 npm run dev
 ```
 
-Choose a UI framework, starter, and deployment target. Then deploy:
+Choose your UI framework and starter, then select Cloudflare to deploy to your account:
 
 ```sh
 npx void deploy
 ```
 
-Void builds your app, provisions its resources, applies migrations, and prints the deployed URL.
+Void builds the app, provisions resources, applies database migrations, and prints your deployed URL. Follow the [Quickstart](https://void.cloud/guide/quickstart) for your first app or to add Void to an existing Vite project.
 
-Follow the [Quickstart](https://void.cloud/guide/quickstart) for your first app or to add Void to an existing project.
+To deploy to a team platform, run `npx void connect <url>` first, then use the same deploy command. See [Install a Void Platform](https://void.cloud/guide/self-hosted-platform) to host one in your Cloudflare account or customize its open-source runtime.
 
 ## Documentation
 
-- [Introduction](https://void.cloud/guide/)
-- [Server routing](https://void.cloud/guide/server-routing) and [Pages routing](https://void.cloud/guide/pages-routing/overview)
+Read the [Void documentation](https://void.cloud) online or use the Markdown guides and references in `node_modules/void/docs/`, included with the `void` package.
+
+`void init` adds a minimal `AGENTS.md` in new projects and asks before changing instructions in existing projects. It also links bundled skills for detected coding agents.
+
+- [Server routes](https://void.cloud/guide/server-routing) and [pages](https://void.cloud/guide/pages-routing/overview)
 - [Database](https://void.cloud/guide/database) and [type safety](https://void.cloud/guide/type-safety)
 - [Deployment](https://void.cloud/guide/deployment)
 - [Framework integrations](https://void.cloud/integrations/frameworks/overview)
 - [API](https://void.cloud/reference/api) and [CLI](https://void.cloud/reference/cli) reference
-
-To share a deployment platform with your team, see [Install a Void Platform](https://void.cloud/guide/self-hosted-platform).
+- [Coding agents](https://void.cloud/integrations/agents)
 
 ## License
 

package/dist/{account-cmd-CDry3B5V.mjs → account-cmd-CfUXh_nU.mjs}

@@ -1,15 +1,16 @@
-import { c as getToken, f as removeToken } from "./auth-D52yG7hl.mjs";
-import { L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
-import { n as runLoginCommand } from "./login-DFuo-RWO.mjs";
+import { c as getToken, f as removeToken } from "./auth-B5_tZLxT.mjs";
+import { L as log } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess } from "./output-C50ag2r3.mjs";
+import { r as PlatformClient } from "./client-C2Prx_Bi.mjs";
+import { n as runLoginCommand } from "./login-D-Q4xw3Q.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-DjeOptYi.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-D5RmKnzh.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
-			if (removeToken(root)) log.success("Logged out.");
+			if (removeToken(root)) printSuccess("Logged out.");
 			else log.info("Not logged in.");
 			return;
 		case "whoami": {
@@ -33,7 +34,7 @@ async function runAccountCommand(root, args) {
 			const cmd = platform === "darwin" ? "pbcopy" : platform === "win32" ? "clip" : "xclip -selection clipboard";
 			try {
 				execSync(cmd, { input: token });
-				log.success("Token copied to clipboard.");
+				printSuccess("Token copied to clipboard.");
 			} catch {
 				log.warn("Could not copy to clipboard. Run `void account token` again.");
 			}

package/dist/{application-analysis-DC2yPvzY.mjs → application-analysis-DKy02UY0.mjs}

@@ -1,25 +1,20 @@
 import { a as join, i as isAbsolute, t as basename } from "./dist-BVqXeR_h.mjs";
-import { c as scanWebSocketRoutes, f as readResourceDefinition, i as inferProjectBindings, l as scanWebSocketRoutesSync, m as needsApplicationDatabase, n as FRAMEWORK_SCAN_DIRS, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-CXWnn79A.mjs";
+import { c as scanWebSocketRoutes, h as needsApplicationDatabase, i as inferProjectBindings, l as scanWebSocketRoutesSync, n as FRAMEWORK_SCAN_DIRS, p as readResourceDefinition, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-BlQbOL0P.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
 import { t as findVoidAuthConfig } from "./config-DPByhVck.mjs";
-import { h as resolveBindingNames, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
+import { h as resolveBindingNames, u as getDatabaseDialect } from "./config-DiowPT80.mjs";
 import { n as globSync, t as glob } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename, o as unwrapStaticExpression, t as isRouteEnabledForEnvironment } from "./parse-filename-CUbj-1MP.mjs";
 import { n as resourceNameWords } from "./resource-name-C7LVpcRm.mjs";
 import { t as collectMigrations } from "./collect-DiTn9yr6.mjs";
-import { a as scanEmailHandlersSync, i as scanEmailHandlers, r as hasEmailHandlers } from "./email--tEtMoj_.mjs";
-import { t as scanPages } from "./scan-C8dA7iM4.mjs";
-import { o as isSandboxEnabled } from "./config-C_XRIPx2.mjs";
+import { a as scanEmailHandlersSync, i as scanEmailHandlers, r as hasEmailHandlers } from "./email-d_Aux1vM.mjs";
+import { t as scanPages } from "./scan-C3uDzz6J.mjs";
+import { o as isSandboxEnabled } from "./config-B_ggY-IO.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { parseSync } from "vite";
 //#region src/crons/scan.ts
-const JOB_EXTENSIONS = [
-	"ts",
-	"mts",
-	"js",
-	"mjs"
-];
+const JOB_PATTERN = "**/*.{ts,mts,js,mjs}";
 function extractJobName(filePath) {
 	return filePath.replace(/\.[^.]+$/, "");
 }
@@ -50,17 +45,15 @@ function parseJobFiles(root, jobsDir, files) {
 	});
 }
 async function scanJobs(root, jobsDir = "crons") {
-	const pattern = `**/*.{${JOB_EXTENSIONS.join(",")}}`;
-	return parseJobFiles(root, jobsDir, await glob(pattern, {
+	return parseJobFiles(root, jobsDir, await glob(JOB_PATTERN, {
 		cwd: resolveDir(root, jobsDir),
 		absolute: false
 	}).catch(() => []));
 }
 function scanJobsSync(root, jobsDir = "crons") {
-	const pattern = `**/*.{${JOB_EXTENSIONS.join(",")}}`;
 	let files;
 	try {
-		files = globSync(pattern, {
+		files = globSync(JOB_PATTERN, {
 			cwd: resolveDir(root, jobsDir),
 			absolute: false
 		});
@@ -91,10 +84,11 @@ function scanDurableObjectModules(root) {
 	const modules = readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isFile() && MODULE_PATTERN.test(entry.name) && !entry.name.endsWith(".d.ts")).sort((a, b) => a.name.localeCompare(b.name)).map((entry) => {
 		const filePath = join(directory, entry.name);
 		const name = readResourceDefinition(filePath, readFileSync(filePath, "utf-8"), DURABLE_HELPERS)?.name;
-		if (resourceNameWords(name ?? inferDurableResourceName(entry.name)).length === 0) throw new Error(`durable: cannot derive a name from durable-objects/${entry.name}.`);
+		const resourceName = name ?? inferDurableResourceName(entry.name);
+		if (resourceNameWords(resourceName).length === 0) throw new Error(`durable: cannot derive a name from durable-objects/${entry.name}.`);
 		return {
 			filePath,
-			...deriveDurableResourceIdentity(name ?? inferDurableResourceName(entry.name)),
+			...deriveDurableResourceIdentity(resourceName),
 			...name === void 0 ? {} : { name }
 		};
 	});
@@ -109,12 +103,7 @@ function scanDurableObjectModules(root) {
 }
 //#endregion
 //#region src/queues/scan.ts
-const QUEUE_EXTENSIONS = [
-	"ts",
-	"mts",
-	"js",
-	"mjs"
-];
+const QUEUE_PATTERN = "**/*.{ts,mts,js,mjs}";
 function extractName(filePath) {
 	return filePath.replace(/\.[^.]+$/, "").replaceAll("/", "-");
 }
@@ -127,8 +116,10 @@ const OPTION_NAMES = [
 	"maxRetries",
 	"retryDelay"
 ];
-function parseQueueFiles(root, queuesDir, files) {
-	const queuesDirPath = isAbsolute(queuesDir) ? queuesDir : join(root, queuesDir);
+function resolveQueuesDir(root, queuesDir) {
+	return isAbsolute(queuesDir) ? queuesDir : join(root, queuesDir);
+}
+function parseQueueFiles(queuesDirPath, files) {
 	const definitions = files.filter((filePath) => !filePath.split("/").some((segment) => segment.startsWith("_"))).sort().map((filePath) => {
 		const absPath = join(queuesDirPath, filePath);
 		const source = readFileSync(absPath, "utf-8");
@@ -166,26 +157,24 @@ function parseQueueFiles(root, queuesDir, files) {
 	return definitions;
 }
 async function scanQueues(root, queuesDir = "queues") {
-	const pattern = `**/*.{${QUEUE_EXTENSIONS.join(",")}}`;
-	const queuesDirPath = isAbsolute(queuesDir) ? queuesDir : join(root, queuesDir);
-	return parseQueueFiles(root, queuesDir, await glob(pattern, {
+	const queuesDirPath = resolveQueuesDir(root, queuesDir);
+	return parseQueueFiles(queuesDirPath, await glob(QUEUE_PATTERN, {
 		cwd: queuesDirPath,
 		absolute: false
 	}).catch(() => []));
 }
 function scanQueuesSync(root, queuesDir = "queues") {
-	const pattern = `**/*.{${QUEUE_EXTENSIONS.join(",")}}`;
+	const queuesDirPath = resolveQueuesDir(root, queuesDir);
 	let files;
 	try {
-		const queuesDirPath = isAbsolute(queuesDir) ? queuesDir : join(root, queuesDir);
-		files = globSync(pattern, {
+		files = globSync(QUEUE_PATTERN, {
 			cwd: queuesDirPath,
 			absolute: false
 		});
 	} catch {
 		files = [];
 	}
-	return parseQueueFiles(root, queuesDir, files);
+	return parseQueueFiles(queuesDirPath, files);
 }
 //#endregion
 //#region src/router/detect-exports.ts

package/dist/{application-routing-C9khgLiS.mjs → application-routing-DQyUh_5S.mjs}

@@ -1,4 +1,4 @@
-import { n as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-DC2yPvzY.mjs";
+import { n as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-DKy02UY0.mjs";
 //#region src/application-routing.ts
 /** Complete route/page analysis using the same resource and handler inventories. */
 async function completeApplicationAnalysis(analysis) {

package/dist/{auth-D52yG7hl.mjs → auth-B5_tZLxT.mjs}

@@ -2,10 +2,11 @@ import { a as join } from "./dist-BVqXeR_h.mjs";
 import { C as deleteKeyringPassword, T as writeKeyringPassword, c as normalizePlatformApiUrl, i as getActivePlatformConnection, s as listPlatformConnections, u as platformCredentialAccount, w as readKeyringPassword } from "./platform-registry-P387v42A.mjs";
 import { i as readProjectPlatformUrl, r as readProjectConfig } from "./project-DQstYTxO.mjs";
 import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { t as ensureCloudflaredToken } from "./cf-access-YTlqvAsk.mjs";
+import { t as ensureCloudflaredToken } from "./cf-access-ngGqZpHZ.mjs";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { createHash, randomBytes } from "node:crypto";
 import { homedir } from "node:os";
+import { browserPageLead, browserPageStatus, renderBrowserPage } from "@void/platform/browser-page";
 //#region src/cli/auth.ts
 const CONFIG_DIR = join(homedir(), ".void");
 const CONFIG_PATH = join(CONFIG_DIR, "config.json");
@@ -175,11 +176,10 @@ function getProxyUrl(root = process.cwd()) {
 	return proxyUrl;
 }
 function page(title, message) {
-	return `<!DOCTYPE html>
-<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<title>${title} - Void</title>
-<style>:root{color-scheme:light dark}*{margin:0;padding:0;box-sizing:border-box}body{font-family:system-ui,-apple-system,sans-serif;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#fafafa;color:#111}.card{text-align:center;padding:3rem}h1{font-size:1.5rem;font-weight:600;margin-bottom:.75rem}p{color:#666;font-size:1rem}@media (prefers-color-scheme:dark){body{background:#0a0a0a;color:#fafafa}p{color:#a3a3a3}}</style>
-</head><body><div class="card"><h1>${title}</h1><p>${message}</p></div></body></html>`;
+	return renderBrowserPage({
+		title,
+		content: browserPageStatus(title === "Login failed" ? "error" : "success") + browserPageLead(title, message)
+	});
 }
 function openBrowser(url, execFile) {
 	const ignore = () => {};
@@ -274,7 +274,7 @@ async function awaitBrowserCallback(options) {
 			}
 			if (settled) return;
 			res.writeHead(200, { "Content-Type": "text/html" });
-			res.end(page("Login successful!", "You can close this tab and return to the terminal."));
+			res.end(page(options.successTitle ?? "Signed in to Void", "You can close this tab and return to the terminal."));
 			succeed(result);
 		});
 		server.on("connection", (socket) => socket.unref());

package/dist/{auth-B60QDbjg.mjs → auth-BgX2qYSY.mjs}

@@ -1,2 +1,2 @@
-import { a as getApiUrl, m as runPlatformLogin, s as getSiteDomain } from "./auth-D52yG7hl.mjs";
+import { a as getApiUrl, m as runPlatformLogin, s as getSiteDomain } from "./auth-B5_tZLxT.mjs";
 export { getApiUrl, getSiteDomain, runPlatformLogin };

package/dist/{auth-link-DjeOptYi.mjs → auth-link-D5RmKnzh.mjs}

@@ -1,8 +1,8 @@
-import { a as getApiUrl, c as getToken, h as savePlatformToken, m as runPlatformLogin, u as openBrowser } from "./auth-D52yG7hl.mjs";
-import { L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
-import { r as selectPlatformLoginMethod } from "./login-DFuo-RWO.mjs";
-import { t as discoverPlatform } from "./platform-cmd-DbKtQb_4.mjs";
+import { a as getApiUrl, c as getToken, h as savePlatformToken, m as runPlatformLogin, u as openBrowser } from "./auth-B5_tZLxT.mjs";
+import { L as log } from "./dist-D3m88sjf.mjs";
+import { r as PlatformClient } from "./client-C2Prx_Bi.mjs";
+import { r as selectPlatformLoginMethod } from "./login-D-Q4xw3Q.mjs";
+import { t as discoverPlatform } from "./platform-cmd-B8-bCb7t.mjs";
 import { execFile } from "node:child_process";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {

package/dist/{auth-migrations-9vif1uj8.mjs → auth-migrations-BwHgeEsD.mjs}

@@ -36,7 +36,6 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 	}
 	if (useIdType) return idStrategy === "serial" ? "INTEGER" : "TEXT";
 	if (field.type === "boolean" || field.type === "date" || field.type === "number") return "INTEGER";
-	if (field.type === "json" || field.type === "string[]" || field.type === "number[]") return "TEXT";
 	return "TEXT";
 }
 function buildColumnDefinition(dialect, schema, fieldName, field, options = {}) {
@@ -67,25 +66,21 @@ function buildModifyMySqlColumnSql(schema, tableName, fieldName, field) {
 function buildCreateIndexSql(dialect, tableName, fieldName, unique) {
 	return `CREATE ${unique ? "UNIQUE " : ""}INDEX${dialect === "mysql" ? "" : " IF NOT EXISTS"} ${quoteIdentifier(createIndexName(tableName, fieldName, unique), dialect)} ON ${quoteIdentifier(tableName, dialect)} (${quoteIdentifier(fieldName, dialect)})`;
 }
-async function ensureSqliteIndexes(runner, table) {
-	const indexRows = await runner.all(`PRAGMA index_list(${quotePragmaArg(table.name)})`);
-	const existingIndexes = new Set(indexRows.map((row) => String(row.name)));
+async function createMissingIndexes(runner, dialect, table, existingIndexes) {
 	for (const [fieldName, field] of Object.entries(table.fields)) {
 		if (!field.index && !field.unique) continue;
 		const indexName = createIndexName(table.name, fieldName, field.unique);
 		if (existingIndexes.has(indexName)) continue;
-		await runner.run(buildCreateIndexSql("sqlite", table.name, fieldName, field.unique));
+		await runner.run(buildCreateIndexSql(dialect, table.name, fieldName, field.unique));
 	}
 }
+async function ensureSqliteIndexes(runner, table) {
+	const indexRows = await runner.all(`PRAGMA index_list(${quotePragmaArg(table.name)})`);
+	await createMissingIndexes(runner, "sqlite", table, new Set(indexRows.map((row) => String(row.name))));
+}
 async function ensurePgIndexes(runner, schemaName, table) {
 	const indexRows = await runner.all("SELECT indexname FROM pg_indexes WHERE schemaname = $1 AND tablename = $2", [schemaName, table.name]);
-	const existingIndexes = new Set(indexRows.map((row) => String(row.indexname)));
-	for (const [fieldName, field] of Object.entries(table.fields)) {
-		if (!field.index && !field.unique) continue;
-		const indexName = createIndexName(table.name, fieldName, field.unique);
-		if (existingIndexes.has(indexName)) continue;
-		await runner.run(buildCreateIndexSql("postgresql", table.name, fieldName, field.unique));
-	}
+	await createMissingIndexes(runner, "postgresql", table, new Set(indexRows.map((row) => String(row.indexname))));
 }
 async function applySqliteAuthMigrations(runner, schema) {
 	const tableRows = await runner.all("SELECT name FROM sqlite_master WHERE type = 'table'");
@@ -146,12 +141,7 @@ async function applyMySqlAuthMigrations(runner, schema) {
 			}
 		}
 		const indexRows = await runner.all("SELECT index_name FROM information_schema.statistics WHERE table_schema = ? AND table_name = ?", [databaseName, table.name]);
-		const existingIndexes = new Set(indexRows.map((row) => String(row.index_name)));
-		for (const [fieldName, field] of Object.entries(table.fields)) {
-			if (!field.index && !field.unique) continue;
-			const indexName = createIndexName(table.name, fieldName, field.unique);
-			if (!existingIndexes.has(indexName)) await runner.run(buildCreateIndexSql("mysql", table.name, fieldName, field.unique));
-		}
+		await createMissingIndexes(runner, "mysql", table, new Set(indexRows.map((row) => String(row.index_name))));
 	}
 }
 //#endregion

package/dist/{auth-router-BRxIuqDi.mjs → auth-router-Bap-pvbn.mjs}

@@ -1,6 +1,6 @@
 import { s as listPlatformConnections } from "./platform-registry-P387v42A.mjs";
 import { n as readDeploymentPlatform } from "./project-DQstYTxO.mjs";
-import { K as select, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { K as select, tt as isCancel } from "./dist-D3m88sjf.mjs";
 //#region src/cli/auth-router.ts
 async function chooseDestination(root, args, interactive) {
 	const saved = readDeploymentPlatform(root);
@@ -36,26 +36,13 @@ async function chooseDestination(root, args, interactive) {
 	};
 }
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
-	if (args.subcommand === "link") {
-		const { runAccountCommand } = await import("./account-cmd-CDry3B5V.mjs");
-		await runAccountCommand(root, {
-			subcommand: "link",
-			...args.connectionId ? { connectionId: args.connectionId } : {}
-		});
-		return;
-	}
-	if (args.subcommand === "token") {
-		const { runAccountCommand } = await import("./account-cmd-CDry3B5V.mjs");
-		await runAccountCommand(root, { subcommand: "token" });
-		return;
-	}
 	const destination = await chooseDestination(root, args, interactive);
 	if (destination.platform === "cloudflare") {
-		const { runCloudflareCommand } = await import("./cloudflare-cmd-bhwCxAN6.mjs");
-		await runCloudflareCommand(root, { subcommand: args.subcommand === "whoami" || args.subcommand === "status" ? "status" : args.subcommand });
+		const { runCloudflareCommand } = await import("./cloudflare-cmd-lHqNlJGW.mjs");
+		await runCloudflareCommand(root, { subcommand: args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-CDry3B5V.mjs");
+	const { runAccountCommand } = await import("./account-cmd-CfUXh_nU.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });

package/dist/{better-auth-shared-BVkjZ3vM.d.mts → better-auth-shared-CPvWD3nG.d.mts}

@@ -44,10 +44,6 @@ type VoidAuthEnv = Record<string, unknown> & {
     connectionString?: string;
   };
   BETTER_AUTH_SECRET?: string;
-  GITHUB_OAUTH_ID?: string;
-  GITHUB_OAUTH_SECRET?: string;
-  GOOGLE_OAUTH_ID?: string;
-  GOOGLE_OAUTH_SECRET?: string;
 };
 type VoidAuthRuntimeApi = {
   resolveVoidAuthOptions(request: Request, env: VoidAuthEnv, runtime: VoidAuthRuntimeOptions, databaseOverride?: NonNullable<BetterAuthOptions["database"]>, disposeOverride?: () => Promise<void>): Promise<{

package/dist/{better-auth-shared-hy6RPh9W.mjs → better-auth-shared-DPpj8zxc.mjs}

@@ -1,4 +1,4 @@
-import { a as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-CJlNS3kT.mjs";
+import { a as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BXuhmuub.mjs";
 import { t as authContext } from "./auth-3sGB0zJ1.mjs";
 import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
 import { betterAuth } from "better-auth";
@@ -9,11 +9,16 @@ function resolveSecret(env, dev) {
 	if (dev) return "void-dev-better-auth-secret-1234567890";
 	throw new Error("auth: Missing Better Auth secret. Set BETTER_AUTH_SECRET.");
 }
-function readEnvString(env, ...keys) {
-	for (const key of keys) {
-		const value = env[key];
-		if (typeof value === "string" && value.length > 0) return value;
-	}
+function readEnvString(env, key) {
+	const value = env[key];
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+/** Local development uses `DATABASE_URL`; production uses the Hyperdrive binding. */
+function resolveConnectionString(env, database) {
+	const hyperdrive = env.HYPERDRIVE?.connectionString;
+	const connectionString = readEnvString(env, "DATABASE_URL") ?? (typeof hyperdrive === "string" && hyperdrive.length > 0 ? hyperdrive : void 0);
+	if (!connectionString) throw new Error(`auth: Better Auth requires DATABASE_URL for local ${database} dev or HYPERDRIVE in production.`);
+	return connectionString;
 }
 const PASSWORD_SALT_LENGTH = 16;
 const SCRYPT_KEY_LENGTH = 64;
@@ -56,12 +61,8 @@ function resolveEmailAndPassword(configuredProviders) {
 }
 function resolveSocialProviderCredentials(env, provider) {
 	const envNames = getVoidAuthProviderEnvNames(provider);
-	const clientIdKeys = [envNames.clientId];
-	const clientSecretKeys = [envNames.clientSecret];
-	if (envNames.legacyClientId) clientIdKeys.push(envNames.legacyClientId);
-	if (envNames.legacyClientSecret) clientSecretKeys.push(envNames.legacyClientSecret);
-	const clientId = readEnvString(env, ...clientIdKeys);
-	const clientSecret = readEnvString(env, ...clientSecretKeys);
+	const clientId = readEnvString(env, envNames.clientId);
+	const clientSecret = readEnvString(env, envNames.clientSecret);
 	if (!clientId || !clientSecret) throw new Error(`auth: Missing credentials for provider '${provider}'. Set ${envNames.clientId} and ${envNames.clientSecret}, or remove '${provider}' from auth.providers.`);
 	return {
 		clientId,
@@ -112,6 +113,82 @@ function resolveUserConfig(userConfig, defaults, request, env, dialect) {
 		...userConfig
 	});
 }
+const SESSION_SAFE_METHODS = /* @__PURE__ */ new Set([
+	"GET",
+	"HEAD",
+	"OPTIONS"
+]);
+function isRequestOrigin(origin, requestUrl) {
+	try {
+		const from = new URL(origin);
+		const to = new URL(requestUrl);
+		return from.host === to.host && (from.protocol === to.protocol || from.protocol === "https:");
+	} catch {
+		return false;
+	}
+}
+/**
+* Headers used to look up the signed-in session for app routes and WebSockets.
+*
+* The session cookie is SameSite=Lax, so a page on another origin of the same
+* site (for example a sibling subdomain) can still send it with a WebSocket
+* handshake or a POST that needs no CORS preflight. For those requests the
+* cookie only counts when the Origin is the request origin or one Better Auth
+* trusts, following Better Auth's own origin check for its endpoints. The
+* request is not rejected; it is resolved without a user.
+*/
+async function sessionHeaders(request, auth) {
+	const headers = request.headers;
+	if (!headers.has("cookie")) return headers;
+	if (SESSION_SAFE_METHODS.has(request.method) && headers.get("upgrade")?.toLowerCase() !== "websocket") return headers;
+	const origin = headers.get("origin");
+	if (!origin || isRequestOrigin(origin, request.url)) return headers;
+	if (origin === "null" && headers.get("sec-fetch-site") === "same-origin") return headers;
+	const advanced = auth.options.advanced;
+	if (advanced?.disableCSRFCheck === true || advanced?.disableOriginCheck === true && advanced.disableCSRFCheck === void 0) return headers;
+	const context = await auth.$context;
+	if (context.isTrustedOrigin(origin, { allowRelativePaths: false })) return headers;
+	const trustedOrigins = auth.options.trustedOrigins;
+	if (typeof trustedOrigins === "function") {
+		const requestOrigins = (await trustedOrigins(request)).filter((value) => Boolean(value));
+		if (context.isTrustedOrigin.call({ trustedOrigins: requestOrigins }, origin, { allowRelativePaths: false })) return headers;
+	}
+	const withoutCookie = new Headers(headers);
+	withoutCookie.delete("cookie");
+	console.warn(`auth: Ignored the session cookie on a ${request.method} request from ${origin}. Add this origin to auth trustedOrigins if it should use the signed-in session.`);
+	return withoutCookie;
+}
+const LOOPBACK_IP = /^(127\.|::1$|::ffff:127\.)/;
+/**
+* The client IP set by Cloudflare's edge, or null outside a deployed Worker.
+* `request.cf` keeps a client-supplied header from being trusted on Node, Bun
+* or Deno, and local previews report a loopback address.
+*/
+function cloudflareClientIp(request) {
+	const cf = request.cf;
+	if (typeof cf !== "object" || cf === null) return null;
+	const ip = request.headers.get("cf-connecting-ip");
+	if (!ip || LOOPBACK_IP.test(ip)) return null;
+	return ip;
+}
+/**
+* Better Auth enables rate limiting only when NODE_ENV is "production", which
+* Workers never set. Turn it on for deployed Cloudflare requests and key it by
+* Cloudflare's client IP header. Explicit user settings still win.
+*/
+function applyCloudflareRateLimitDefaults(options) {
+	return {
+		...options,
+		rateLimit: {
+			...options.rateLimit,
+			enabled: options.rateLimit?.enabled ?? true
+		},
+		advanced: {
+			...options.advanced,
+			ipAddress: options.advanced?.ipAddress ?? { ipAddressHeaders: ["cf-connecting-ip"] }
+		}
+	};
+}
 function assertRuntimeDialect(runtime, dialect) {
 	if (runtime.dialect !== dialect) throw new Error(`auth: Runtime mismatch. Expected ${dialect}, received '${runtime.dialect}'.`);
 }
@@ -134,8 +211,9 @@ function createVoidAuthRuntime(dialect, resolveDatabase, runVoidAuthMigrations)
 			...socialProviders ? { socialProviders } : {},
 			trustedOrigins: [origin]
 		};
+		const resolved = resolveUserConfig(runtime.userConfig, defaults, request, env, dialect);
 		return {
-			options: resolveUserConfig(runtime.userConfig, defaults, request, env, dialect),
+			options: runtime.dev !== true && cloudflareClientIp(request) ? applyCloudflareRateLimitDefaults(resolved) : resolved,
 			dispose
 		};
 	}
@@ -150,7 +228,7 @@ function createVoidAuthRuntime(dialect, resolveDatabase, runVoidAuthMigrations)
 		const { auth, dispose } = await createVoidAuth(request, env, runtime, databaseOverride, disposeOverride);
 		try {
 			return (await auth.api.getSession({
-				headers: request.headers,
+				headers: await sessionHeaders(request, auth),
 				asResponse: false,
 				returnHeaders: true
 			})).response ?? null;
@@ -168,7 +246,7 @@ function createVoidAuthRuntime(dialect, resolveDatabase, runVoidAuthMigrations)
 		c.set("__voidAuth", auth);
 		try {
 			const result = await auth.api.getSession({
-				headers: c.req.raw.headers,
+				headers: await sessionHeaders(c.req.raw, auth),
 				asResponse: false,
 				returnHeaders: true
 			});
@@ -211,4 +289,4 @@ function createVoidAuthRuntime(dialect, resolveDatabase, runVoidAuthMigrations)
 	};
 }
 //#endregion
-export { createVoidAuthRuntime as t };
+export { createVoidAuthRuntime as n, resolveConnectionString as r, assertRuntimeDialect as t };

package/dist/{build-cmd-Ce3C8huo.mjs → build-cmd-B58c8iS8.mjs}

@@ -1,9 +1,9 @@
 import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
-import { c as getToken } from "./auth-D52yG7hl.mjs";
-import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-mC-dFGDD.mjs";
-import { c as import_picocolors, i as dim } from "./output-BvdaehtE.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
+import { c as getToken } from "./auth-B5_tZLxT.mjs";
+import { H as outro, L as log } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess, i as dim, l as import_picocolors } from "./output-C50ag2r3.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-C2Prx_Bi.mjs";
+import { i as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-CP8rZs_p.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";
 //#region src/cli/build-cmd.ts
 const POLL_MS = 1e3;
@@ -147,7 +147,8 @@ async function runBuildLogsCommand(root, args) {
 		outro(dim("Build still running — pass -f to follow."));
 		return;
 	}
-	outro(dim(`Build ${status}.`));
+	if (status === "complete") printSuccess("Build succeeded.");
+	else outro(dim(`Build ${status}.`));
 }
 //#endregion
 export { runBuildCommand };

package/dist/{cache-CS8Yxr5a.mjs → cache-Bo52trKF.mjs}

@@ -1,9 +1,9 @@
 import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
-import { c as getToken } from "./auth-D52yG7hl.mjs";
-import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
-import { i as dim, o as formatCount, r as createSpinner } from "./output-BvdaehtE.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
+import { c as getToken } from "./auth-B5_tZLxT.mjs";
+import { L as log } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess, r as createSpinner, s as formatCount } from "./output-C50ag2r3.mjs";
+import { r as PlatformClient } from "./client-C2Prx_Bi.mjs";
+import { i as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-CP8rZs_p.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {
 	console.log();
@@ -38,13 +38,13 @@ async function runPurgeCacheCommand(root, projectSlug) {
 	try {
 		const result = await client.purgeCache(projectId);
 		s.stop("Cache purged.");
-		log.success(`Purged ${formatCount(result.purged, "cached page")}.`);
+		log.info("Edge cache will clear within seconds.");
+		printSuccess(`Purged ${formatCount(result.purged, "cached page")}.`);
 	} catch (err) {
 		s.stop("Cache purge failed.");
 		log.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	outro(dim("Edge cache will clear within seconds."));
 }
 //#endregion
 export { runPurgeCacheCommand };

package/dist/{cancel-deploy-mZsD88Xa.mjs → cancel-deploy-BZNz3Q26.mjs}

@@ -1,7 +1,8 @@
 import { r as readProjectConfig } from "./project-DQstYTxO.mjs";
-import { c as getToken } from "./auth-D52yG7hl.mjs";
-import { A as confirm, H as outro, L as log, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
-import { r as PlatformClient } from "./client-mC-dFGDD.mjs";
+import { c as getToken } from "./auth-B5_tZLxT.mjs";
+import { A as confirm, H as outro, L as log, tt as isCancel } from "./dist-D3m88sjf.mjs";
+import { d as printSuccess } from "./output-C50ag2r3.mjs";
+import { r as PlatformClient } from "./client-C2Prx_Bi.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([
 	"pending",
@@ -48,7 +49,7 @@ async function runCancelDeployCommand(root, deployId) {
 		return;
 	}
 	await client.cancelDeployment(linked.projectId, target.id);
-	outro(`Cancellation requested for deployment ${target.id}.`);
+	printSuccess(`Cancellation requested for deployment ${target.id}.`);
 }
 function formatDeployment(deployment) {
 	const suffix = deployment.commit ? ` (${deployment.commit.slice(0, 7)})` : "";