void 0.27.0 → 0.28.0

package/dist/runtime/better-auth-pg.mjs

@@ -1,48 +1,22 @@
-import { n as applyPgAuthMigrations } from "../auth-migrations-BwHgeEsD.mjs";
-import { n as createVoidAuthRuntime, r as resolveConnectionString, t as assertRuntimeDialect } from "../better-auth-shared-DPpj8zxc.mjs";
+import { a as pgMigrationRunner, n as applyPgAuthMigrations } from "../auth-migrations-Cgs0k6lS.mjs";
+import { n as resolveConnectionString, t as createVoidAuthRuntime } from "../better-auth-shared-CMXlZG7W.mjs";
 import { t as disablePgPassFallback } from "../pg-J2HbZIkX.mjs";
 //#region src/runtime/better-auth-pg.ts
-async function resolveDatabase(env) {
-	const { default: pg } = await import("pg");
-	const connectionString = resolveConnectionString(env, "PostgreSQL");
-	const pool = new pg.Pool({
-		connectionString,
-		max: 1
-	});
-	return {
-		database: pool,
-		async dispose() {
-			await pool.end();
-		}
-	};
-}
-async function runPostgresAuthMigrations(_request, env, runtime, migrationSchema) {
-	if (!migrationSchema) throw new Error("auth: Migration schema is unavailable.");
-	assertRuntimeDialect(runtime, "postgresql");
-	if (migrationSchema.dialect !== "postgresql") throw new Error(`auth: Runtime mismatch. Expected postgresql, received '${migrationSchema.dialect}'.`);
+async function applyMigrations(env, migrationSchema) {
 	const { Client } = await import("pg");
 	const client = new Client({ connectionString: resolveConnectionString(env, "PostgreSQL") });
 	disablePgPassFallback(client);
 	await client.connect();
 	try {
-		await applyPgAuthMigrations({
-			async all(sql, params) {
-				return (await client.query(sql, params)).rows;
-			},
-			async run(sql, params) {
-				await client.query(sql, params);
-			}
-		}, migrationSchema);
+		await applyPgAuthMigrations(pgMigrationRunner(client), migrationSchema);
 	} finally {
 		await client.end();
 	}
 }
-const runtime = createVoidAuthRuntime("postgresql", resolveDatabase, runPostgresAuthMigrations);
-const resolveVoidAuthOptions = runtime.resolveVoidAuthOptions;
-const createVoidAuth = runtime.createVoidAuth;
+const runtime = createVoidAuthRuntime("postgresql", applyMigrations);
 const resolveVoidAuthState = runtime.resolveVoidAuthState;
 const runVoidAuthMiddleware = runtime.runVoidAuthMiddleware;
 const handleVoidAuthRequest = runtime.handleVoidAuthRequest;
 const runVoidAuthMigrations = runtime.runVoidAuthMigrations;
 //#endregion
-export { createVoidAuth, handleVoidAuthRequest, resolveVoidAuthOptions, resolveVoidAuthState, runVoidAuthMiddleware, runVoidAuthMigrations };
+export { handleVoidAuthRequest, resolveVoidAuthState, runVoidAuthMiddleware, runVoidAuthMigrations };

package/dist/runtime/better-auth.d.mts

@@ -1,10 +1,8 @@
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-CPvWD3nG.mjs";
+import { n as VoidAuthRuntimeApi } from "../better-auth-shared-B74NJIus.mjs";
 //#region src/runtime/better-auth.d.ts
 export declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];
-export declare const createVoidAuth: VoidAuthRuntimeApi["createVoidAuth"];
 export declare const resolveVoidAuthState: VoidAuthRuntimeApi["resolveVoidAuthState"];
 export declare const runVoidAuthMiddleware: VoidAuthRuntimeApi["runVoidAuthMiddleware"];
 export declare const handleVoidAuthRequest: VoidAuthRuntimeApi["handleVoidAuthRequest"];
 export declare const runVoidAuthMigrations: VoidAuthRuntimeApi["runVoidAuthMigrations"];
-//#endregion
-export type { VoidAuthDialect, VoidAuthEnv, VoidAuthRuntimeOptions };
+//#endregion

package/dist/runtime/better-auth.mjs

@@ -1,33 +1,23 @@
-import { r as applySqliteAuthMigrations } from "../auth-migrations-BwHgeEsD.mjs";
-import { n as createVoidAuthRuntime, t as assertRuntimeDialect } from "../better-auth-shared-DPpj8zxc.mjs";
+import { r as applySqliteAuthMigrations } from "../auth-migrations-Cgs0k6lS.mjs";
+import { t as createVoidAuthRuntime } from "../better-auth-shared-CMXlZG7W.mjs";
 //#region src/runtime/better-auth.ts
-async function resolveDatabase(env) {
-	if (!env.DB) throw new Error("auth: Better Auth requires the \"DB\" D1 binding for sqlite apps.");
-	return {
-		database: env.DB.withSession("first-primary"),
-		async dispose() {}
-	};
-}
-async function runSqliteAuthMigrations(_request, env, runtime, migrationSchema) {
-	if (!migrationSchema) throw new Error("auth: Migration schema is unavailable.");
-	assertRuntimeDialect(runtime, "sqlite");
-	if (migrationSchema.dialect !== "sqlite") throw new Error(`auth: Runtime mismatch. Expected sqlite, received '${migrationSchema.dialect}'.`);
-	if (!env.DB) throw new Error("auth: Better Auth requires the \"DB\" D1 binding for sqlite apps.");
+async function applyMigrations(env, migrationSchema) {
+	const database = env.DB;
+	if (!database) throw new Error("auth: Better Auth requires the \"DB\" D1 binding for sqlite apps.");
 	await applySqliteAuthMigrations({
 		async all(sql) {
-			return (await env.DB.prepare(sql).all()).results ?? [];
+			return (await database.prepare(sql).all()).results ?? [];
 		},
 		async run(sql) {
-			await env.DB.prepare(sql).run();
+			await database.prepare(sql).run();
 		}
 	}, migrationSchema);
 }
-const runtime = createVoidAuthRuntime("sqlite", resolveDatabase, runSqliteAuthMigrations);
+const runtime = createVoidAuthRuntime("sqlite", applyMigrations);
 const resolveVoidAuthOptions = runtime.resolveVoidAuthOptions;
-const createVoidAuth = runtime.createVoidAuth;
 const resolveVoidAuthState = runtime.resolveVoidAuthState;
 const runVoidAuthMiddleware = runtime.runVoidAuthMiddleware;
 const handleVoidAuthRequest = runtime.handleVoidAuthRequest;
 const runVoidAuthMigrations = runtime.runVoidAuthMigrations;
 //#endregion
-export { createVoidAuth, handleVoidAuthRequest, resolveVoidAuthOptions, resolveVoidAuthState, runVoidAuthMiddleware, runVoidAuthMigrations };
+export { handleVoidAuthRequest, resolveVoidAuthOptions, resolveVoidAuthState, runVoidAuthMiddleware, runVoidAuthMigrations };

package/dist/runtime/db.mjs

@@ -1,4 +1,4 @@
-import { a as requireRuntimeBinding, r as getRuntimeRequestResource } from "../env-DMA3cXZt.mjs";
+import { a as requireRuntimeBinding, r as getRuntimeRequestResource } from "../env-BhdWMrNy.mjs";
 import { drizzle } from "drizzle-orm/d1";
 import { and, asc, avg, between, count, desc, eq, exists, gt, gte, ilike, inArray, isNotNull, isNull, like, lt, lte, max, min, ne, not, notBetween, notExists, notInArray, notLike, or, sql, sum } from "drizzle-orm";
 //#region src/runtime/db.ts

package/dist/runtime/durable.d.mts

@@ -1,4 +1,20 @@
+import { DurableObject as DurableObject$1 } from "cloudflare:workers";
 //#region src/runtime/durable.d.ts
+type NativeDurableClass = new (...args: Array<never>) => DurableObject$1<unknown>;
+export type DurableObjectApi<TClass extends NativeDurableClass> = {
+  class: TClass;
+  /** @internal Called by the generated Worker entry. */
+  __bind(bindingName: string, resourceName?: string): void;
+  get(name: string): DurableObjectStub<InstanceType<TClass>>;
+  get(namespace: DurableObjectNamespace<InstanceType<TClass>>, name: string): DurableObjectStub<InstanceType<TClass>>;
+  getById(id: DurableObjectId): DurableObjectStub<InstanceType<TClass>>;
+  getById(namespace: DurableObjectNamespace<InstanceType<TClass>>, id: DurableObjectId): DurableObjectStub<InstanceType<TClass>>;
+};
+/** Register a native Durable Object class without altering its lifecycle or RPC methods. */
+export declare function defineDurableObject<TClass extends NativeDurableClass>(definition: {
+  name?: string;
+  class: TClass;
+}): DurableObjectApi<TClass>;
 export type DurableStateContext<TState, TEnv extends Record<string, unknown>> = {
   state: TState;
   readonly env: TEnv;

package/dist/runtime/durable.mjs

@@ -1,8 +1,32 @@
 import { t as isResourceName } from "../resource-name-C7LVpcRm.mjs";
-import { a as requireRuntimeBinding, o as withRuntimeEnv } from "../env-DMA3cXZt.mjs";
+import { a as requireRuntimeBinding, o as withRuntimeEnv } from "../env-BhdWMrNy.mjs";
 import { DurableObject } from "cloudflare:workers";
 //#region src/runtime/durable.ts
 const DEFAULT_STORAGE_KEY = "__void_durable_state";
+/** Register a native Durable Object class without altering its lifecycle or RPC methods. */
+function defineDurableObject(definition) {
+	if (definition.name !== void 0 && !isResourceName(definition.name)) throw new Error("durable: name must contain a word starting with a letter.");
+	let bindingName;
+	function boundNamespace() {
+		if (!bindingName) throw new Error("durable: this definition is not bound. Default-export it from a file in durable-objects/.");
+		return requireRuntimeBinding(bindingName);
+	}
+	return {
+		class: definition.class,
+		__bind(name, resourceName) {
+			if (definition.name !== resourceName) throw new Error("durable: name must be statically discoverable in defineDurableObject(). Run void info to inspect this definition.");
+			if (bindingName && bindingName !== name) throw new Error(`durable: definition is already bound to '${bindingName}' and cannot also bind to '${name}'.`);
+			bindingName = name;
+		},
+		get(namespaceOrName, maybeName) {
+			const namespace = typeof namespaceOrName === "string" ? boundNamespace() : namespaceOrName;
+			return namespace.get(namespace.idFromName(typeof namespaceOrName === "string" ? namespaceOrName : maybeName));
+		},
+		getById(namespaceOrId, maybeId) {
+			return (maybeId ? namespaceOrId : boundNamespace()).get(maybeId ?? namespaceOrId);
+		}
+	};
+}
 function assertMigrations(version, migrations) {
 	const byVersion = /* @__PURE__ */ new Map();
 	for (const migration of migrations) {
@@ -139,4 +163,4 @@ function defineDurableState(definition) {
 	};
 }
 //#endregion
-export { defineDurableState };
+export { defineDurableObject, defineDurableState };

package/dist/runtime/email/testing.d.mts

@@ -1,5 +1,5 @@
 /// <reference types="@cloudflare/workers-types" />
-import { r as EmailHandler } from "../../inbound-CH5Mksyy.mjs";
+import { r as EmailHandler } from "../../inbound-brj2-TM5.mjs";
 //#region src/runtime/email/dev-inbox.d.ts
 interface CapturedMessage {
   id: string;

package/dist/runtime/email/testing.mjs

@@ -1,7 +1,7 @@
-import { i as normalizeEmail, r as buildMime } from "../../mime-DxCznlJq.mjs";
-import { n as compileEmailPattern, t as compareEmailRoutes } from "../../email-d_Aux1vM.mjs";
-import { b as registerEmailSink } from "../../dev-inbox-CK-UuPob.mjs";
-import { a as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-PfQDLXc5.mjs";
+import { o as normalizeEmail, r as buildMime } from "../../mime-srOklVVv.mjs";
+import { n as compileEmailPattern, t as compareEmailRoutes } from "../../email-BcjSyAL0.mjs";
+import { y as registerEmailSink } from "../../dev-inbox-Rd6j_8vM.mjs";
+import { a as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-DmkTQeWp.mjs";
 //#region src/runtime/email/testing.ts
 /**
 * Test harnesses for void/email.
@@ -86,27 +86,13 @@ async function buildSyntheticRaw(opts) {
 	});
 	return buildMime(normalized).raw;
 }
-/**
-* Thrown by `parseHeaderBlock` at the first distinct name past its cap —
-* the router's `InboundTooManyHeadersError` (`email-router.ts`).
-*/
+/** The router's `InboundTooManyHeadersError` (`email-router.ts`). */
 var InboundTooManyHeadersError = class extends Error {};
 /**
-* Headers of a raw MIME message, up to the first blank line.
-*
-* Unfolds continuation lines (RFC 5322 §2.2.3: a line starting with WSP
-* continues the one before it). Anything it cannot parse is skipped rather
-* than thrown, because a test may deliver deliberately malformed bytes.
-*
-* `maxDistinct` is the router's header-count admission (`buildEnvelope` in
-* `email-router.ts`): it walks the bag Cloudflare built from the wire and
-* refuses at the cap, BEFORE any entry past it is materialized. That bag is
-* a `Headers`, so the unit is the DISTINCT, case-insensitive name — a
-* repeated `Received:` is one entry, and a continuation line is part of the
-* one before it, never its own. The check sits in the same walk, checked
-* before the `set`, so an over-cap message costs this harness the same
-* `maxDistinct + 1` names it costs the router. A name a `Headers` refuses
-* is not in the bag on either side, so it does not count.
+* Unfolded headers of a raw message, up to the first blank line. Unparsable
+* lines are skipped so malformed fixtures still reach the handler. Like the
+* router's `buildEnvelope`, refuses more than `maxDistinct` distinct
+* case-insensitive names before materializing more.
 */
 function parseHeaderBlock(raw, maxDistinct) {
 	const headers = new Headers();

package/dist/runtime/email-protocol.d.mts

@@ -9,6 +9,18 @@ type ReceiptVerificationInput = {
 type ReceiptVerifier = {
   fetch(input: string | Request, init?: RequestInit): Promise<Response>;
 };
+/**
+ * Settle `run()` within `ms`, or reject with `onTimeout()`. `run` is not
+ * called when `ms` has already elapsed.
+ */
+export declare function withTimeout<T>(ms: number, run: () => Promise<T>, onTimeout: () => Error): Promise<T>;
+/**
+ * Read a JSON body of at most `maxBytes`, each read bounded by `race`. A
+ * declared length must be exact.
+ */
+export declare function readBoundedJson(response: Response, maxBytes: number, race: <T>(run: () => Promise<T>) => Promise<T>, { rejectEncoding }?: {
+  rejectEncoding?: boolean;
+}): Promise<unknown>;
 /** Validate a gateway receipt without exposing the signing secret to the tenant worker. */
 export declare function verifyEmailReceiptThroughProxy(proxy: ReceiptVerifier, projectToken: string, input: ReceiptVerificationInput): Promise<boolean>;
 //#endregion

package/dist/runtime/email-protocol.mjs

@@ -1,70 +1,2 @@
-import { EMAIL_PROTOCOL_VERSION, encodeEmailActions, readEmailEnvelope } from "@void/platform/email-protocol";
-//#region src/runtime/email-protocol.ts
-const RECEIPT_VERIFICATION_DEADLINE_MS = 5e3;
-const MAX_RECEIPT_VERIFICATION_BYTES = 2048;
-const decoder = new TextDecoder("utf-8", {
-	fatal: true,
-	ignoreBOM: false
-});
-async function beforeDeadline(deadline, run) {
-	const remaining = deadline - Date.now();
-	if (remaining <= 0) throw new Error("email receipt verification timeout");
-	let timer;
-	return Promise.race([run(), new Promise((_, reject) => {
-		timer = setTimeout(() => reject(/* @__PURE__ */ new Error("email receipt verification timeout")), remaining);
-	})]).finally(() => {
-		if (timer !== void 0) clearTimeout(timer);
-	});
-}
-async function readResponseJson(response, deadline) {
-	const declaredLength = response.headers.get("content-length");
-	if (response.headers.has("content-encoding") || !response.body || declaredLength !== null && (!/^\d+$/.test(declaredLength) || Number(declaredLength) > MAX_RECEIPT_VERIFICATION_BYTES)) throw new Error("invalid email receipt verification response");
-	const expectedLength = declaredLength === null ? null : Number(declaredLength);
-	const reader = response.body.getReader();
-	const bytes = new Uint8Array(MAX_RECEIPT_VERIFICATION_BYTES);
-	let size = 0;
-	try {
-		for (;;) {
-			const chunk = await beforeDeadline(deadline, () => reader.read());
-			if (chunk.done) break;
-			const nextSize = size + chunk.value.byteLength;
-			if (nextSize > bytes.byteLength) throw new Error("email receipt verification response too large");
-			bytes.set(chunk.value, size);
-			size = nextSize;
-		}
-	} finally {
-		reader.cancel().catch(() => {});
-		try {
-			reader.releaseLock();
-		} catch {}
-	}
-	if (size === 0 || expectedLength !== null && size !== expectedLength) throw new Error("invalid email receipt verification response length");
-	return JSON.parse(decoder.decode(bytes.subarray(0, size)));
-}
-/** Validate a gateway receipt without exposing the signing secret to the tenant worker. */
-async function verifyEmailReceiptThroughProxy(proxy, projectToken, input) {
-	const deadline = Date.now() + RECEIPT_VERIFICATION_DEADLINE_MS;
-	const controller = new AbortController();
-	let response;
-	try {
-		response = await beforeDeadline(deadline, () => proxy.fetch("https://proxy/email/verify-receipt", {
-			method: "POST",
-			headers: {
-				"content-type": "application/json",
-				"x-void-internal": projectToken
-			},
-			body: JSON.stringify(input),
-			signal: controller.signal
-		}));
-		if (!response.ok) return false;
-		const body = await readResponseJson(response, deadline);
-		return !!body && typeof body === "object" && !Array.isArray(body) && body.valid === true;
-	} catch {
-		return false;
-	} finally {
-		controller.abort();
-		response?.body?.cancel().catch(() => {});
-	}
-}
-//#endregion
-export { EMAIL_PROTOCOL_VERSION, encodeEmailActions, readEmailEnvelope, verifyEmailReceiptThroughProxy };
+import { a as verifyEmailReceiptThroughProxy, i as readEmailEnvelope, n as encodeEmailActions, o as withTimeout, r as readBoundedJson, t as EMAIL_PROTOCOL_VERSION } from "../email-protocol-D9nTvhCp.mjs";
+export { EMAIL_PROTOCOL_VERSION, encodeEmailActions, readBoundedJson, readEmailEnvelope, verifyEmailReceiptThroughProxy, withTimeout };

package/dist/runtime/email.d.mts

@@ -1,5 +1,5 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as SendEmailOptions, S as SendEmailErrorCode, T as SendEmailResult, _ as Attachment, a as MessageProxy, b as SendEmailDelivery, c as ParsedEmail, d as defineEmail, f as enactEmailActions, g as Address, h as replyEmail, i as EmailHandlerInfo, l as ReplyEmailOptions, m as parseEmail, n as EmailEnvelope, o as ParseEmailError, p as isForwardableEmailMessage, r as EmailHandler, s as ParseEmailErrorCode, t as EmailAction, u as createMessageProxy, v as EmailDeliveryState, w as SendEmailRecipientResult, x as SendEmailError, y as NormalizedEmail } from "../inbound-CH5Mksyy.mjs";
+import { C as SendEmailOptions, S as SendEmailErrorCode, T as SendEmailResult, _ as Attachment, a as MessageProxy, b as SendEmailDelivery, c as ParsedEmail, d as defineEmail, f as enactEmailActions, g as Address, h as replyEmail, i as EmailHandlerInfo, l as ReplyEmailOptions, m as parseEmail, n as EmailEnvelope, o as ParseEmailError, p as isForwardableEmailMessage, r as EmailHandler, s as ParseEmailErrorCode, t as EmailAction, u as createMessageProxy, v as EmailDeliveryState, w as SendEmailRecipientResult, x as SendEmailError, y as NormalizedEmail } from "../inbound-brj2-TM5.mjs";
 //#region src/runtime/email/mime.d.ts
 type MimeErrorCode = "INVALID_FROM" | "INVALID_TO" | "MIME_ERROR";
 export declare class MimeError extends Error {