void 0.27.0 → 0.28.0

package/dist/{node-DJicPvPj.mjs → node-DoKbo1SZ.mjs}

@@ -1,12 +1,11 @@
-import { a as join } from "./dist-BVqXeR_h.mjs";
-import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-DPByhVck.mjs";
-import { m as readConfig } from "./config-DiowPT80.mjs";
-import { r as getMiniflareDatabasePath } from "./runner-DMBKSrRk.mjs";
-import { o as loadLocalEnv } from "./env-BxocywBB.mjs";
+import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-D0GY5ItR.mjs";
+import { d as readConfig } from "./config-Bx_1SpnO.mjs";
+import { r as getMiniflareDatabasePath } from "./runner-DcVDrzuR.mjs";
+import { o as loadLocalEnv } from "./env-BJjULvL0.mjs";
 import { r as resolveVoidAuthMigrationSchema } from "./drizzle-CF84FOVM.mjs";
-import { n as applyPgAuthMigrations, r as applySqliteAuthMigrations, t as applyMySqlAuthMigrations } from "./auth-migrations-BwHgeEsD.mjs";
+import { a as pgMigrationRunner, i as mysqlMigrationRunner, n as applyPgAuthMigrations, r as applySqliteAuthMigrations, t as applyMySqlAuthMigrations } from "./auth-migrations-Cgs0k6lS.mjs";
 //#region src/auth/node.ts
-async function runLocalVoidAuthMigrations(root, dialect, persistRoot = join(root, ".void"), databaseId = "local", configPath = findVoidAuthConfig(root)) {
+async function runLocalVoidAuthMigrations(root, dialect, persistRoot, databaseId, configPath = findVoidAuthConfig(root)) {
 	const authConfig = await loadVoidAuthConfig(configPath);
 	const runtime = {
 		dialect,
@@ -41,15 +40,7 @@ async function runLocalVoidAuthMigrations(root, dialect, persistRoot = join(root
 		const { createConnection } = await import("mysql2/promise");
 		const connection = await createConnection(connectionString);
 		try {
-			await applyMySqlAuthMigrations({
-				async all(sql, params) {
-					const [rows] = await connection.query(sql, params);
-					return rows;
-				},
-				async run(sql, params) {
-					await connection.query(sql, params);
-				}
-			}, migrationSchema);
+			await applyMySqlAuthMigrations(mysqlMigrationRunner(connection), migrationSchema);
 		} finally {
 			await connection.end();
 		}
@@ -59,14 +50,7 @@ async function runLocalVoidAuthMigrations(root, dialect, persistRoot = join(root
 	const client = new Client({ connectionString });
 	await client.connect();
 	try {
-		await applyPgAuthMigrations({
-			async all(sql, params) {
-				return (await client.query(sql, params)).rows;
-			},
-			async run(sql, params) {
-				await client.query(sql, params);
-			}
-		}, migrationSchema);
+		await applyPgAuthMigrations(pgMigrationRunner(client), migrationSchema);
 	} finally {
 		await client.end();
 	}

package/dist/{operator-args-DOBhIaIg.mjs → operator-args-UnE8Y2eK.mjs}

@@ -1,4 +1,5 @@
-import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-DbDv4vtE.mjs";
+import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-C-ROjk1I.mjs";
+import { parsePlatformLoginId } from "@void/platform";
 //#region src/cli/operator-args.ts
 const operatorCommands = [
 	{
@@ -7,7 +8,7 @@ const operatorCommands = [
 		description: "Sign in as a platform administrator",
 		path: "/session",
 		values: { provider: "OAuth provider" },
-		booleans: ["token-stdin"]
+		booleans: { "token-stdin": "Read a full API session from stdin for explicit operator session exchange" }
 	},
 	{
 		group: "auth",
@@ -26,7 +27,7 @@ const operatorCommands = [
 		action: "token",
 		description: "Print an operator token; exchange an API session with --token-stdin",
 		path: "/session",
-		booleans: ["token-stdin"]
+		booleans: { "token-stdin": "Read a full API session from stdin for explicit operator session exchange" }
 	},
 	{
 		group: "user",
@@ -121,7 +122,7 @@ const operatorCommands = [
 		action: "status",
 		description: "Inspect saved platform Zero Trust configuration and project state counts",
 		path: "/zero-trust",
-		booleans: ["check"]
+		booleans: { check: "Also check the saved settings against Cloudflare Access (several API calls)" }
 	},
 	{
 		group: "zero-trust",
@@ -133,11 +134,11 @@ const operatorCommands = [
 			policies: "Comma-separated reusable Access policy IDs",
 			"existing-projects": "Required when enabling: protected or public for existing projects"
 		},
-		booleans: [
-			"token-stdin",
-			"protect-new-projects",
-			"public-apps"
-		],
+		booleans: {
+			"token-stdin": "Read the Access management API token from stdin",
+			"protect-new-projects": "Protect newly created projects by default",
+			"public-apps": "Manage public app rules without identity policies"
+		},
 		method: "POST"
 	},
 	{
@@ -230,7 +231,7 @@ const operatorCommands = [
 			since: "Duration or ISO timestamp",
 			cursor: "Opaque continuation cursor"
 		},
-		booleans: ["follow"]
+		booleans: { follow: "Poll new logs until interrupted or the build ends" }
 	},
 	{
 		group: "build",
@@ -246,7 +247,7 @@ const operatorCommands = [
 		path: "/builds/:id/logs",
 		positional: ["id"],
 		values: { since: "Last received sequence number" },
-		booleans: ["follow"]
+		booleans: { follow: "Poll new logs until interrupted or the build ends" }
 	},
 	{
 		group: "signup",
@@ -372,7 +373,7 @@ const operatorCommands = [
 		description: "Rotate project proxy tokens on tenant Workers",
 		path: "/system/rotate-proxy-tokens",
 		values: { project: "Project ID" },
-		booleans: ["all"],
+		booleans: { all: "Rotate every project" },
 		method: "POST"
 	},
 	{
@@ -437,7 +438,7 @@ const operatorCommands = [
 		path: "/email/attempts/:id/resolve",
 		positional: ["id"],
 		values: { reason: "Audit reason without recipient or message content" },
-		booleans: ["ended"],
+		booleans: { ended: "Attest that the original provider execution has ended" },
 		method: "POST"
 	},
 	{
@@ -450,7 +451,7 @@ const operatorCommands = [
 			outcome: "Provider outcome: applied or not-applied",
 			reason: "Audit reason for the verified provider outcome"
 		},
-		booleans: ["ended"],
+		booleans: { ended: "Attest that the original provider execution has ended" },
 		method: "POST"
 	},
 	{
@@ -470,7 +471,7 @@ const operatorCommands = [
 			outcome: "Provider outcome: applied or not-applied",
 			reason: "Audit reason for the verified provider outcome"
 		},
-		booleans: ["ended"],
+		booleans: { ended: "Attest that the original provider execution has ended" },
 		method: "POST"
 	},
 	{
@@ -487,7 +488,7 @@ const operatorCommands = [
 		path: "/email/domains",
 		positional: ["domain"],
 		values: { project: "Project id or slug" },
-		booleans: ["token-stdin"],
+		booleans: { "token-stdin": "Read a scoped Cloudflare API token from stdin" },
 		method: "POST"
 	},
 	{
@@ -519,7 +520,7 @@ const operatorCommands = [
 		description: "Remove an email domain and its Cloudflare setup",
 		path: "/email/domains/:domain/remove",
 		positional: ["domain"],
-		booleans: ["token-stdin"],
+		booleans: { "token-stdin": "Read a replacement Cloudflare token for blocked project cleanup from stdin" },
 		method: "POST"
 	},
 	{
@@ -573,11 +574,8 @@ function parseOperatorArgs(args) {
 		"json",
 		"plan",
 		"yes",
-		"follow",
-		"token-stdin",
 		"force",
-		"ended",
-		...operatorCommands.flatMap((command) => command.booleans ?? [])
+		...operatorCommands.flatMap((command) => Object.keys(command.booleans ?? {}))
 	]);
 	for (let index = 0; index < args.length; index++) {
 		const arg = args[index];
@@ -607,8 +605,7 @@ function parseOperatorArgs(args) {
 		yes: flags.has("yes"),
 		follow: flags.has("follow"),
 		tokenStdin: flags.has("token-stdin"),
-		provider: values.provider ?? "github",
-		...values.provider ? { providerExplicit: true } : {},
+		provider: values.provider,
 		method: "GET",
 		path: "",
 		query: {},
@@ -633,7 +630,7 @@ function parseOperatorArgs(args) {
 	for (const name of flags) if (![
 		"json",
 		...command.method ? ["yes", "plan"] : [],
-		...command.booleans ?? []
+		...Object.keys(command.booleans ?? {})
 	].includes(name)) throw new Error(`platform: Unknown flag '--${name}' for ${group} ${action}.`);
 	if (parsed.plan && parsed.yes) throw new Error("platform: --plan and --yes cannot be combined.");
 	parsed.path = command.path;
@@ -641,7 +638,11 @@ function parseOperatorArgs(args) {
 	if (identitySignupEntry) {
 		const connectionId = parameters[1];
 		const subject = parameters[2];
-		if (!/^[a-z][a-z0-9-]{0,63}$/.test(connectionId)) throw new Error("platform: Invalid login connection ID.");
+		try {
+			parsePlatformLoginId(connectionId);
+		} catch {
+			throw new Error("platform: Invalid login connection ID.");
+		}
 		if (!subject || subject.length > 255) throw new Error("platform: Identity subject must be 1–255 characters.");
 		parsed.body = {
 			type: "identity",
@@ -678,7 +679,7 @@ function parseOperatorArgs(args) {
 		"email",
 		"identity"
 	].includes(String(parsed.body.type))) throw new Error("platform: Signup grant type must be github, email, or identity.");
-	for (const name of command.booleans ?? []) if (name !== "token-stdin" && flags.has(name)) parsed.body[name] = true;
+	for (const name of Object.keys(command.booleans ?? {})) if (name !== "token-stdin" && flags.has(name)) parsed.body[name] = true;
 	if (group === "zero-trust" && action === "configure") {
 		if (!parsed.tokenStdin) throw new Error("platform: zero-trust configure requires --token-stdin.");
 		const identityProviderIds = values["identity-providers"]?.split(",").map((entry) => entry.trim()).filter(Boolean);

package/dist/{operator-auth-BEZ_u0Cz.mjs → operator-auth-Cr2zCc-J.mjs}

@@ -1,5 +1,5 @@
-import { C as deleteKeyringPassword, T as writeKeyringPassword, c as normalizePlatformApiUrl, i as getActivePlatformConnection, r as findPlatformConnections, u as platformCredentialAccount, w as readKeyringPassword } from "./platform-registry-Cjv2Qf0r.mjs";
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-DbDv4vtE.mjs";
+import { C as deleteKeyringPassword, T as writeKeyringPassword, c as normalizePlatformApiUrl, i as getActivePlatformConnection, r as findPlatformConnections, u as platformCredentialAccount, w as readKeyringPassword } from "./platform-registry-B9mWX9LO.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-C-ROjk1I.mjs";
 /** Operator authority never comes from repository-controlled metadata. */
 function resolveOperatorOrigin(connection = "") {
 	if (connection) {

package/dist/{operator-client-DbDv4vtE.mjs → operator-client-C-ROjk1I.mjs}

@@ -1,6 +1,6 @@
-import { c as normalizePlatformApiUrl } from "./platform-registry-Cjv2Qf0r.mjs";
-import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { t as ensureCloudflaredToken } from "./cf-access-BcIBSKqG.mjs";
+import { c as normalizePlatformApiUrl } from "./platform-registry-B9mWX9LO.mjs";
+import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
+import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
 const OPERATOR_MAX_TIMEOUT_MS = 36e5;
 var OperatorClientError = class extends Error {
 	code;
@@ -36,7 +36,7 @@ var OperatorClient = class {
 		const timeoutMs = options.timeoutMs ?? (options.method === "POST" ? 3e5 : 3e4);
 		if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1e3 || timeoutMs > 36e5) throw new OperatorClientError(`Operator request timeout must be an integer from 1 to ${OPERATOR_MAX_TIMEOUT_MS / 1e3} seconds.`, "invalid_timeout");
 		const url = new URL(`${this.origin}/operator/v1${path}`);
-		ensureCloudflaredToken(this.origin);
+		ensurePlatformAccessToken(this.origin);
 		for (const [name, value] of Object.entries(options.query ?? {})) url.searchParams.set(name, value);
 		const timeoutController = new AbortController();
 		const timer = setTimeout(() => timeoutController.abort(), timeoutMs);

package/dist/{operator-cmd-BT4hgavL.mjs → operator-cmd-C5lCctnc.mjs}

@@ -1,6 +1,6 @@
-import { d as printSuccess, f as sanitizeTerminalText } from "./output-C50ag2r3.mjs";
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-DbDv4vtE.mjs";
-import { a as resolveOperatorOrigin, i as removeOperatorToken, n as readOperatorApiTokenStdin, o as saveOperatorToken, r as readOperatorToken, t as exchangeOperatorSession } from "./operator-auth-BEZ_u0Cz.mjs";
+import { h as sanitizeTerminalText, m as printSuccess } from "./output-FNHKw5Ac.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-C-ROjk1I.mjs";
+import { a as resolveOperatorOrigin, i as removeOperatorToken, n as readOperatorApiTokenStdin, o as saveOperatorToken, r as readOperatorToken, t as exchangeOperatorSession } from "./operator-auth-Cr2zCc-J.mjs";
 import { createHash } from "node:crypto";
 import { setTimeout } from "node:timers/promises";
 import { createInterface } from "node:readline/promises";
@@ -163,10 +163,10 @@ async function runAuth(origin, args) {
 	if (args.action === "login" || args.action === "token" && args.tokenStdin) {
 		if (!args.tokenStdin && !process.stdin.isTTY) throw new OperatorClientError("Browser login requires an interactive terminal. Use --token-stdin to exchange an API session.", "interactive_login_required");
 		const apiToken = args.tokenStdin ? await readOperatorApiTokenStdin() : await (async () => {
-			const { discoverPlatform } = await import("./platform-cmd-BbmJiq5O.mjs");
-			const { selectPlatformLoginMethod } = await import("./login-mx_ydhmp.mjs");
-			const { runPlatformLogin } = await import("./auth-LMJcNESe.mjs");
-			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.providerExplicit ? args.provider : void 0)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
+			const { discoverPlatform } = await import("./platform-cmd-Cuj4oUVo.mjs");
+			const { selectPlatformLoginMethod } = await import("./login-DhK7o1oJ.mjs");
+			const { runPlatformLogin } = await import("./auth-wn6F8dB8.mjs");
+			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.provider)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
 		})();
 		const session = await exchangeOperatorSession(origin, apiToken);
 		const { token, ...identity } = session;
@@ -344,7 +344,7 @@ async function migrateDeploymentAssets(client, origin, args) {
 }
 async function runOperatorCommand(args) {
 	if (!args.action) {
-		const { printHelpPage } = await import("./help-DfQYVfGY.mjs");
+		const { printHelpPage } = await import("./help-s9q7LTcu.mjs");
 		printHelpPage(["platform", args.group]);
 		return;
 	}

package/dist/operator-cmd-Cjk5DiRx.mjs

@@ -0,0 +1,2 @@
+import { a as runOperatorCommand } from "./operator-cmd-C5lCctnc.mjs";
+export { runOperatorCommand };

package/dist/{output-C50ag2r3.mjs → output-FNHKw5Ac.mjs}

@@ -2,8 +2,18 @@ import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
 import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
 import { B as note$1, H as outro, L as log, P as isCI, nt as settings, q as spinner } from "./dist-D3m88sjf.mjs";
 import { stripVTControlCharacters } from "node:util";
+import terminalLink from "terminal-link";
 //#region src/cli/output.ts
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
+/** Keep the destination visible when the terminal cannot render a named hyperlink. */
+function formatLink(text, url) {
+	return terminalLink(text, sanitizeTerminalText(url), { fallback: (label, href) => label === href ? label : `${label}: ${href}` });
+}
+/** Link a displayed URL without duplicating it in unsupported terminals or redirected output. */
+function formatUrl(url) {
+	const text = sanitizeTerminalText(url);
+	return formatLink(text, text);
+}
 /** Complete an action with the same spacing, checkmark, and color on every target. */
 function printSuccess(message) {
 	outro(`\n${import_picocolors.default.green(`✓ ${stripVTControlCharacters(message)}`)}`, { withGuide: false });
@@ -68,17 +78,26 @@ const MIN_NOTE_COLUMNS = 6;
 */
 function note(...args) {
 	const [message, title, opts] = args;
+	const plainTitle = title && sanitizeTerminalText(stripVTControlCharacters(title));
+	const urlTitle = plainTitle && /^https?:\/\/\S+$/.test(plainTitle) ? plainTitle : void 0;
+	const boxedTitle = urlTitle ? ` ${urlTitle} ` : title;
 	const output = opts?.output ?? process.stdout;
 	const columns = output.columns;
-	if (typeof columns !== "number" || columns >= MIN_NOTE_COLUMNS) {
+	const needsWidthFallback = typeof columns === "number" && columns < MIN_NOTE_COLUMNS;
+	if (!urlTitle && !needsWidthFallback) {
 		note$1(...args);
 		return;
 	}
+	let header = true;
 	const sized = {
-		columns: columns > 0 ? MIN_NOTE_COLUMNS : 80,
-		write: (chunk) => output.write(chunk)
+		columns: needsWidthFallback ? columns > 0 ? MIN_NOTE_COLUMNS : 80 : columns,
+		write(chunk) {
+			if (header && urlTitle) chunk = chunk.replace(` ${urlTitle} `, ` ${formatUrl(urlTitle)} `);
+			header = false;
+			return output.write(chunk);
+		}
 	};
-	note$1(message, title, {
+	note$1(message, boxedTitle, {
 		...opts,
 		output: sized
 	});
@@ -114,6 +133,18 @@ function ensureUtc(s) {
 	if (s.lastIndexOf("-") > 9) return s;
 	return s + "Z";
 }
+function formatRelativeTime(iso) {
+	const diffMs = Date.now() - new Date(ensureUtc(iso)).getTime();
+	if (diffMs < 6e4) return "just now";
+	const minutes = Math.floor(diffMs / 6e4);
+	if (minutes < 60) return `${minutes}m ago`;
+	const hours = Math.floor(minutes / 60);
+	if (hours < 24) return `${hours}h ago`;
+	return `${Math.floor(hours / 24)}d ago`;
+}
+function getErrorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
 /**
 * Stack frames of an error a Worker reported, one line per frame. The log or
 * exception line already shows `Name: message`, so a leading copy of that
@@ -128,4 +159,4 @@ function errorStackFrames(error) {
 	return frames.trimEnd() ? frames.trimEnd().split("\n") : [];
 }
 //#endregion
-export { ensureUtc as a, helpLine as c, printSuccess as d, sanitizeTerminalText as f, dim as i, import_picocolors as l, tablePrefix as m, cliCommandName as n, errorStackFrames as o, sectionTitle as p, createSpinner as r, formatCount as s, categoryTitle as t, note as u };
+export { tablePrefix as _, errorStackFrames as a, formatRelativeTime as c, helpLine as d, import_picocolors as f, sectionTitle as g, sanitizeTerminalText as h, dim as i, formatUrl as l, printSuccess as m, cliCommandName as n, formatCount as o, note as p, createSpinner as r, formatLink as s, categoryTitle as t, getErrorMessage as u };

package/dist/{package-json-DXfiT1jV.mjs → package-json-BjYqR-So.mjs}

@@ -1,4 +1,4 @@
-import { a as join, n as dirname } from "./dist-BVqXeR_h.mjs";
+import { a as join, n as dirname } from "./dist-ipQi0Q8y.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/shared/package-json.ts
 const DEFAULT_DEPENDENCY_FIELDS = ["dependencies", "devDependencies"];

package/dist/pages/client.d.mts

@@ -1,5 +1,5 @@
 import { t as interpolateRouteParams } from "../route-url-BgPja1GS.mjs";
-import { t as PageObject } from "../protocol-BPZaNqBo.mjs";
+import { t as PageObject } from "../protocol-4H7V_3Os.mjs";
 import { n as CacheForInput, r as CacheForResult } from "../prefetch-Ce6la4EI.mjs";
 import { UsageLimitData } from "@void/edge";
 import { ActionUrl, ResolveActionBody, ResolveActionParams } from "void/routes";

package/dist/pages/client.mjs

@@ -1,5 +1,4 @@
 import { t as interpolateRouteParams } from "../route-url-BjGv_KKY.mjs";
-import { n as initClientHead, t as applyClientHead } from "../head-client-DzmJGN4C.mjs";
 import { n as parseCacheFor, t as PrefetchCache } from "../prefetch-Bsc_Pb6c.mjs";
 import { readUsageLimit } from "@void/edge";
 //#region src/pages/action-result.ts
@@ -60,6 +59,95 @@ async function createActionErrorFromResponse(response, url) {
 	});
 }
 //#endregion
+//#region src/pages/head-client.ts
+const ATTR = "data-void-head";
+function elementDescriptorSignature(descriptor) {
+	const attrs = Object.entries(descriptor.attrs).sort(([a], [b]) => a.localeCompare(b));
+	return `${encodeURIComponent(descriptor.tag)}:${attrs.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&")}`;
+}
+function elementSignature(el) {
+	const attrs = {};
+	for (const attr of Array.from(el.attributes)) if (attr.name !== ATTR) attrs[attr.name] = attr.value;
+	return elementDescriptorSignature({
+		tag: el.tagName.toLowerCase(),
+		attrs
+	});
+}
+function createHeadElement(descriptor) {
+	const el = document.createElement(descriptor.tag);
+	for (const [key, value] of Object.entries(descriptor.attrs)) el.setAttribute(key, value);
+	el.setAttribute(ATTR, "");
+	return el;
+}
+function collectDesiredHeadElements(head) {
+	const desired = [];
+	if (head.meta) for (const entry of head.meta) {
+		const attrs = {};
+		if (entry.charset) attrs.charset = entry.charset;
+		if (entry.name) attrs.name = entry.name;
+		if (entry.property) attrs.property = entry.property;
+		if (entry.content !== void 0) attrs.content = entry.content;
+		desired.push({
+			tag: "meta",
+			attrs
+		});
+	}
+	if (head.link) for (const entry of head.link) {
+		const attrs = {};
+		for (const [key, value] of Object.entries(entry)) if (value != null) attrs[key] = value;
+		desired.push({
+			tag: "link",
+			attrs
+		});
+	}
+	return desired;
+}
+/**
+* Mark SSR-rendered head tags so they are cleaned up on the first SPA navigation.
+* Call once after hydration with the initial page's head descriptor.
+*/
+function initClientHead(head) {
+	if (!head) return;
+	if (head.meta) for (const entry of head.meta) {
+		const selector = entry.charset ? "meta[charset]" : entry.property ? `meta[property="${entry.property}"]` : entry.name ? `meta[name="${entry.name}"]` : null;
+		if (!selector) continue;
+		const el = document.head.querySelector(selector);
+		if (el) el.setAttribute(ATTR, "");
+	}
+	if (head.link) for (const entry of head.link) {
+		const el = document.head.querySelector(`link[rel="${entry.rel}"][href="${entry.href}"]`);
+		if (el) el.setAttribute(ATTR, "");
+	}
+}
+/**
+* Apply head changes on SPA navigation.
+* Preserves existing managed tags when their final attributes are unchanged.
+*/
+function applyClientHead(head) {
+	const existing = /* @__PURE__ */ new Map();
+	for (const el of document.head.querySelectorAll(`[${ATTR}]`)) {
+		const signature = elementSignature(el);
+		const elements = existing.get(signature);
+		if (elements) elements.push(el);
+		else existing.set(signature, [el]);
+	}
+	const desiredElements = [];
+	for (const descriptor of head ? collectDesiredHeadElements(head) : []) {
+		const signature = elementDescriptorSignature(descriptor);
+		const elements = existing.get(signature);
+		const preserved = elements?.shift();
+		if (elements && elements.length === 0) existing.delete(signature);
+		desiredElements.push(preserved ?? createHeadElement(descriptor));
+	}
+	for (const elements of existing.values()) for (const el of elements) el.remove();
+	let cursor = document.head.querySelector(`[${ATTR}]`);
+	for (const el of desiredElements) {
+		if (el !== cursor) document.head.insertBefore(el, cursor);
+		cursor = el.nextSibling;
+	}
+	if (head?.title !== void 0) document.title = head.title;
+}
+//#endregion
 //#region src/pages/scroll-restoration.ts
 const STORAGE_PREFIX = "void:scroll:";
 function readKey(state) {
@@ -573,7 +661,6 @@ async function createPageNavigationEngine(config) {
 							buffer += decoder.decode(value, { stream: true });
 							processLines();
 						}
-						if (buffer.trim()) processLines();
 					} catch (e) {
 						if (!(e instanceof Error) || e.name !== "AbortError") deferredRegistry.rejectPending("Stream closed before resolution");
 					}
@@ -1047,7 +1134,7 @@ async function createVoidRouter(config) {
 			}
 		}
 	}
-	const rawRouter = {
+	const router = {
 		_hoverDelay: engine._hoverDelay,
 		get url() {
 			return toUrl(routeUrl);
@@ -1065,7 +1152,7 @@ async function createVoidRouter(config) {
 			return applyNavigationResource(engine.prepareVisit(normalizeUrl(url), options));
 		},
 		refresh(options = {}) {
-			return rawRouter.visit(window.location.pathname + window.location.search, {
+			return router.visit(window.location.pathname + window.location.search, {
 				preserveState: true,
 				preserveScroll: true,
 				...options
@@ -1081,7 +1168,6 @@ async function createVoidRouter(config) {
 			engine.flushAll();
 		}
 	};
-	const router = createRouterFacade(rawRouter, () => routeUrl, () => routeParams);
 	engine.setPopStateHandler((url, options) => {
 		router.visit(url, options);
 	});

package/dist/pages/index.d.mts

@@ -1,5 +1,5 @@
 import { a as renderHtmlAttrs, i as renderHeadToString, n as HeadDescriptor, o as resolveHead, r as renderBodyAttrs, t as HeadConfig } from "../head-C8K_iGe6.mjs";
-import "../config-CSa15FvD.mjs";
+import "../config-7qoq2p9v.mjs";
 import { i as PageDefinition, n as LayoutDefinition, o as PageScanResult, r as NamedLayoutDefinition } from "../types-BAp5AEBU.mjs";
 import { t as serializePageData } from "../serialize-CfSwWfF2.mjs";
 //#region src/project-paths.d.ts
@@ -17,7 +17,6 @@ type ProjectPaths = {
   migrationsDir: string;
   schemaFile: string;
   schemaDir: string;
-  srcDir: string;
   ssrDir: string;
   sourceRelative: (path: string) => string;
   authConfigCandidates: ReadonlyArray<string>;

package/dist/pages/index.mjs

@@ -1,10 +1,10 @@
-import { a as join } from "../dist-BVqXeR_h.mjs";
-import { r as resolvePagesDir } from "../project-paths-GgcMozYz.mjs";
-import { m as readConfig } from "../config-DiowPT80.mjs";
-import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, o as toLayoutId, r as resolveLayoutChain, t as scanPages } from "../scan-C3uDzz6J.mjs";
-import { i as parseRedirectsFile } from "../headers-DlfR78Nu.mjs";
+import { a as join } from "../dist-ipQi0Q8y.mjs";
+import { r as resolvePagesDir } from "../project-paths-DMvEeSau.mjs";
+import { d as readConfig } from "../config-Bx_1SpnO.mjs";
+import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, o as toLayoutId, r as resolveLayoutChain, t as scanPages } from "../scan-C0BMdmEd.mjs";
+import { r as parseRedirectsFile } from "../headers-Di1FsD3e.mjs";
 import { i as resolveHead, n as renderHeadToString, r as renderHtmlAttrs, t as renderBodyAttrs } from "../head-D2VF4ApL.mjs";
-import { t as serializePageData } from "../serialize-BPvnNQuA.mjs";
+import { t as serializePageData } from "../serialize-BtQyaYoC.mjs";
 //#region src/pages/manifest.ts
 /**
 * Generates the component import map and layout tree as code strings.

package/dist/pages/islands-plugin.mjs

@@ -1,86 +1,7 @@
-import { n as dirname, u as resolve } from "../dist-BVqXeR_h.mjs";
-import { n as isIdentifier, r as isLiteral } from "../ast-CPGPjb0V.mjs";
-import { n as resolveEffectiveLayoutChain, t as scanPages } from "../scan-C3uDzz6J.mjs";
-import { t as MagicString } from "../dist-Cegxq8gs.mjs";
+import { c as resolve, n as dirname } from "../dist-ipQi0Q8y.mjs";
+import { c as findIslandImports, l as findStaticCssImports, n as resolveEffectiveLayoutChain, s as editIslandSource, t as scanPages } from "../scan-C0BMdmEd.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
-import { normalizePath, parseSync } from "vite";
-//#region src/pages/island-imports.ts
-/** The whole JS/TS module, or each `<script>` block of a Vue/Svelte SFC with its offset in the file. */
-function scriptBlocks(code, filename) {
-	if (!/\.(?:vue|svelte)$/.test(filename)) return [{
-		source: code,
-		offset: 0,
-		filename
-	}];
-	const scriptFilename = filename.replace(/\.(?:vue|svelte)$/, ".ts");
-	return [...code.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/gi)].map((match) => {
-		const source = match[1];
-		return {
-			source,
-			offset: match.index + match[0].indexOf(source),
-			filename: scriptFilename
-		};
-	});
-}
-/** Collect stylesheet imports from authored modules without treating dynamic imports or text as dependencies. */
-function findStaticCssImports(code, filename) {
-	if (!code.includes("import")) return [];
-	const imports = [];
-	for (const script of scriptBlocks(code, filename)) {
-		if (!script.source.includes("import")) continue;
-		const program = parseSync(script.filename, script.source).program;
-		for (const node of program.body ?? []) {
-			const source = node.source;
-			if (node.type !== "ImportDeclaration" || !isLiteral(source) || typeof source.value !== "string" || !/\.(?:css|scss|sass|less|styl|stylus|pcss|postcss)$/.test(source.value) || node.start === void 0 || node.end === void 0) continue;
-			imports.push({
-				statement: script.source.slice(node.start, node.end),
-				specifier: source.value
-			});
-		}
-	}
-	return imports;
-}
-function editIslandSource(code, edits, options) {
-	const ms = new MagicString(code);
-	for (const edit of edits) ms.overwrite(edit.start, edit.end, edit.text);
-	for (const insertion of options?.insert ?? []) ms.appendLeft(insertion.offset, insertion.text);
-	if (options?.prepend) ms.prepend(options.prepend);
-	if (options?.append) ms.append(options.append);
-	return {
-		code: ms.toString(),
-		map: ms.generateMap({ hires: true })
-	};
-}
-/** Read island import attributes from JS/TS, or script blocks inside an SFC. */
-function findIslandImports(code, filename) {
-	if (!code.includes("import") || !code.includes("island")) return [];
-	const imports = [];
-	for (const script of scriptBlocks(code, filename)) {
-		if (!script.source.includes("island")) continue;
-		const program = parseSync(script.filename, script.source).program;
-		for (const node of program.body ?? []) {
-			if (node.type !== "ImportDeclaration") continue;
-			const specifiers = node.specifiers;
-			const attributes = node.attributes;
-			const first = specifiers?.[0];
-			const attribute = attributes?.[0];
-			const key = attribute?.key;
-			const value = attribute?.value;
-			const source = node.source;
-			if (specifiers?.length !== 1 || first?.type !== "ImportDefaultSpecifier" || !isIdentifier(first.local) || attributes?.length !== 1 || !isIdentifier(key) || key.name !== "island" || !isLiteral(value) || typeof value.value !== "string" || !isLiteral(source) || typeof source.value !== "string" || source.start === void 0 || source.end === void 0 || node.start === void 0 || node.end === void 0) continue;
-			imports.push({
-				start: script.offset + node.start,
-				end: script.offset + node.end,
-				importName: first.local.name,
-				specifierRaw: script.source.slice(source.start, source.end),
-				specifier: source.value,
-				hydrate: value.value
-			});
-		}
-	}
-	return imports;
-}
-//#endregion
+import { normalizePath } from "vite";
 //#region src/pages/islands-plugin.ts
 const ISLANDS_RENDERER_ID = "virtual:void-islands-renderer";
 const ISLANDS_CLIENT_ENTRY_ID = "virtual:void-islands-client";
@@ -138,7 +59,8 @@ function rewriteCssImportForVirtualModule(matchedLine, specifier, sourceFilePath
 }
 /** Extract CSS import statements from a file and return them as @import rules. */
 function extractCssImports(filePath) {
-	return findStaticCssImports(readFileSync(filePath, "utf-8"), filePath).map(({ specifier }) => `@import ${JSON.stringify(specifier)};`).join("\n");
+	const code = readFileSync(filePath, "utf-8");
+	return findStaticCssImports(code, filePath).map(({ specifier }) => `@import ${JSON.stringify(specifier)};`).join("\n");
 }
 /** Compute which island pages need client-side JavaScript. */
 function computePagesNeedingClientJS(pageScan, pagesDir, resolvedConfig) {

package/dist/pages/protocol.d.mts

@@ -1,3 +1,3 @@
-import { w as ValidationError } from "../handler-CNAwjRcW.mjs";
-import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-BPZaNqBo.mjs";
+import { w as ValidationError } from "../handler-_PqY82xe.mjs";
+import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-4H7V_3Os.mjs";
 export { PageObject, PageRenderResult, ValidationError, flattenValidationErrors, handlePageGet, handlePageMutation, safeJsonStringify };