void 0.27.0 → 0.28.0

package/dist/{config-DiowPT80.mjs → config-Bx_1SpnO.mjs}

@@ -1,6 +1,7 @@
-import { a as validateSourceDir, c as loadVoidConfig } from "./project-paths-GgcMozYz.mjs";
+import { a as validateSourceDir, c as loadVoidConfig } from "./project-paths-DMvEeSau.mjs";
 import { i as isVoidAuthProvider, t as VOID_AUTH_PROVIDERS } from "./providers-BXuhmuub.mjs";
-import { a as parseAddress, n as MimeError } from "./mime-DxCznlJq.mjs";
+import { n as MimeError, s as parseAddress } from "./mime-srOklVVv.mjs";
+import { isRecord } from "@void/deploy-core";
 //#region src/config.ts
 const CONFIG_FILE = "void.json";
 const VALID_TARGETS = /* @__PURE__ */ new Set([
@@ -48,17 +49,18 @@ const VALID_SANDBOX_INSTANCE_TYPES = /* @__PURE__ */ new Set([
 	"standard-3",
 	"standard-4"
 ]);
+const SANDBOX_STRING_KEYS = [
+	"binding",
+	"className",
+	"containerName",
+	"image",
+	"imageBuildContext",
+	"platformImage"
+];
+const SANDBOX_KEYS = [...SANDBOX_STRING_KEYS, "instanceType"];
 /**
-* Count anonymous `*` wildcards in a pattern, ignoring the `*` that
-* terminates a `:name*` multi-segment named capture.
-*
-* The shared `compilePattern` (`@void/edge`) emits a distinct `(?<name>.*)`
-* group for `:name*` and a `(?<splat>.*)` group for the first bare `*` —
-* those don't clash, so a pattern with both a named multi-segment capture and
-* a bare splat is legitimate and must validate. Walking raw chars would
-* over-count and cause `assertSingleSplat` to reject such patterns.
-*
-* The identifier character class matches `compilePattern`'s `[A-Za-z0-9_]+`.
+* Count anonymous `*` wildcards, ignoring the `*` that ends a `:name*` capture:
+* `compilePattern` (`@void/edge`) gives `:name*` its own group, so it never clashes with a splat.
 */
 function countSplats(source) {
 	return source.replace(/:[A-Za-z0-9_]+\*/g, "").match(/\*/g)?.length ?? 0;
@@ -74,19 +76,8 @@ function assertSingleSplat(source, kind) {
 	if (count > 1) throw new Error(`${kind} source "${source}" in ${CONFIG_FILE} must contain at most one "*" wildcard (got ${count}); the matched portion is captured once as :splat`);
 }
 /**
-* Reject patterns whose compilation would produce duplicate named-capture
-* groups, which makes `new RegExp()` throw `SyntaxError: Duplicate capture
-* group name` at request time. Two cases:
-*
-*   1. Two `:name` (or `:name` + trailing `*`) tokens with the same
-*      identifier — e.g. `/:id/:id`, or two named-multi-segment captures
-*      sharing a name.
-*   2. A `:splat` (named) token alongside a bare `*` — both compile to a
-*      `(?<splat>...)` group.
-*
-* The runtime skips a rule whose pattern fails to compile
-* (`runtime/routing.ts`), but failing at config-read with a precise message
-* is friendlier than a log warning.
+* Reject patterns that compile to duplicate named groups (`/:id/:id`, or `:splat`
+* with a bare `*`). The runtime would only skip such a rule with a log warning.
 */
 function assertUniqueCaptureNames(source, kind) {
 	const seen = /* @__PURE__ */ new Set();
@@ -104,15 +95,7 @@ function assertUniqueCaptureNames(source, kind) {
 		throw new Error(`${kind} source "${source}" in ${CONFIG_FILE} has duplicate capture group name(s) (${names}); each :name token must be unique within a pattern, and :splat collides with a bare "*"`);
 	}
 }
-/**
-* Predicate for the "protocol-relative" shape: a leading `//` parses as
-* `//host/path` → `https://host/path`, which silently turns an intended
-* in-worker rewrite/redirect into a cross-origin proxy.
-*
-* Shared by the config validators below and the `_redirects` parser
-* (`cli/headers.ts`). `c.rewrite()` in `runtime/routing.ts` has an equivalent
-* check for runtime input; it runs in the Worker and cannot import this module.
-*/
+/** A leading `//` parses as `https://host/path`, so an internal rule would proxy cross-origin. */
 function isProtocolRelative(dest) {
 	return dest.startsWith("//");
 }
@@ -120,35 +103,12 @@ function assertNotProtocolRelative(dest, source, kind) {
 	if (!isProtocolRelative(dest)) return;
 	throw new Error(`${kind} destination for "${source}" in ${CONFIG_FILE} must not start with "//" (protocol-relative URLs parse as cross-origin; ${kind === "Redirect" ? "use a single-slash path for internal redirects or an explicit \"https://...\" URL for external" : "only internal paths are supported"})`);
 }
-/**
-* Strict literal-hostname regex used by `parseHostPrefixedSource` to validate
-* the host portion of an `https://host/path` rule source. Mirrors
-* `LITERAL_HOSTNAME_REGEX` in `packages/deploy-core/src/validate.ts` and the
-* regex in `platform/packages/api/src/routes/domains.ts`. Rejects scheme
-* prefixes, ports, paths, whitespace, control chars, wildcards, single-label
-* hosts, IPv4 literals, and userinfo. The host is lowercased before testing so the
-* same byte-exact form reaches dispatch (which compares against the
-* lowercase `url.hostname`).
-*/
 const LITERAL_HOSTNAME_REGEX = /^([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,}$/;
 /**
-* Split an optional `https://host/path` prefix from a rule source.
-*
-* Path-only sources (no scheme) are returned as `{ host: undefined, path }`.
-* Sources starting with `https://` have the host portion extracted and
-* lowercase-normalized; the remaining path becomes `path` (including the
-* leading `/`, which the caller may further validate).
-*
-* Rejected (returns `{ error }`):
-* - `http://...` — TLS terminates upstream of the dispatch worker; only
-*   `https://` requests ever reach the runtime, so an `http://`-scoped rule
-*   physically cannot fire.
-* - `//host/path` — protocol-relative; ambiguous and rejected by the same
-*   reasoning.
-* - `https://` with a wildcarded, ported, or otherwise non-literal host
-*   (v1 only supports literal hosts).
-* - `https://` with no path (`https://host`) — accepted and normalized to
-*   `https://host/` so the path is always non-empty.
+* Split an optional `https://host` prefix from a rule source. The host is
+* lowercased (dispatch compares `url.hostname`), and a bare `https://host` gets
+* path `/`. Returns `{ error }` for `//` and `http://` sources (only HTTPS
+* requests reach the runtime) and for non-literal hosts.
 */
 function parseHostPrefixedSource(raw) {
 	if (raw.startsWith("//")) return { error: `must not start with "//" (protocol-relative URLs are ambiguous; use "/path" for path-only or "https://host/path")` };
@@ -177,6 +137,20 @@ function assertNoQueryString(dest, source, kind) {
 	if (!dest.includes("?")) return;
 	throw new Error(`${kind} destination for "${source}" in ${CONFIG_FILE} must not contain "?" (query strings are not supported in ${kind.toLowerCase()} destinations; the incoming request's query is preserved automatically)`);
 }
+function validateRewriteMap(value, kind) {
+	if (!isRecord(value)) throw new Error(`"routing.${kind.toLowerCase()}s" in ${CONFIG_FILE} must be an object`);
+	for (const [source, dest] of Object.entries(value)) {
+		const parsed = parseHostPrefixedSource(source);
+		if ("error" in parsed) throw new Error(`${kind} source "${source}" in ${CONFIG_FILE}: ${parsed.error}`);
+		if (!parsed.path.startsWith("/")) throw new Error(`${kind} source "${source}" in ${CONFIG_FILE} must start with "/" (or be "https://host/path" with a path-absolute path)`);
+		assertSingleSplat(parsed.path, kind);
+		assertUniqueCaptureNames(parsed.path, kind);
+		if (typeof dest !== "string") throw new Error(`${kind} destination for "${source}" in ${CONFIG_FILE} must be a string`);
+		if (!dest.startsWith("/")) throw new Error(`${kind} destination for "${source}" in ${CONFIG_FILE} must start with "/" (only internal paths are supported)`);
+		assertNotProtocolRelative(dest, source, kind);
+		assertNoQueryString(dest, source, kind);
+	}
+}
 /** Old flat keys that have moved into namespaces. */
 const MIGRATION_ERRORS = {
 	bindings: "\"bindings\" has moved to \"inference.bindings\"",
@@ -205,9 +179,8 @@ function validateConfig(config, source = CONFIG_FILE) {
 		throw error;
 	}
 }
-function validateConfigObject(config) {
-	if (typeof config !== "object" || config === null || Array.isArray(config)) throw new Error(`config: ${CONFIG_FILE} must be a JSON object.`);
-	const obj = config;
+function validateConfigObject(obj) {
+	if (!isRecord(obj)) throw new Error(`config: ${CONFIG_FILE} must be a JSON object.`);
 	for (const [key, message] of Object.entries(MIGRATION_ERRORS)) if (obj[key] !== void 0) throw new Error(`config: ${message} in ${CONFIG_FILE}.`);
 	if (obj.sourceDir !== void 0) {
 		if (typeof obj.sourceDir !== "string") throw new Error(`config: "sourceDir" in ${CONFIG_FILE} must be a string.`);
@@ -220,7 +193,7 @@ function validateConfigObject(config) {
 		if (typeof obj.output !== "string" || !VALID_OUTPUTS.has(obj.output)) throw new Error(`config: "output" in ${CONFIG_FILE} must be one of: server, static.`);
 	}
 	if (obj.auth !== void 0) {
-		if (typeof obj.auth !== "object" || obj.auth === null || Array.isArray(obj.auth)) throw new Error(`config: "auth" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.auth)) throw new Error(`config: "auth" in ${CONFIG_FILE} must be an object.`);
 		const auth = obj.auth;
 		for (const key of Object.keys(auth)) if (key !== "providers") throw new Error(`config: Unknown key 'auth.${key}' in ${CONFIG_FILE}. Valid: providers.`);
 		if (auth.providers !== void 0) {
@@ -236,13 +209,13 @@ function validateConfigObject(config) {
 		}
 	}
 	if (obj.head !== void 0) {
-		if (typeof obj.head !== "object" || obj.head === null || Array.isArray(obj.head)) throw new Error(`config: "head" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.head)) throw new Error(`config: "head" in ${CONFIG_FILE} must be an object.`);
 		const h = obj.head;
 		if (h.title !== void 0 && typeof h.title !== "string") throw new Error(`config: "head.title" in ${CONFIG_FILE} must be a string.`);
 		if (h.titleTemplate !== void 0 && typeof h.titleTemplate !== "string") throw new Error(`config: "head.titleTemplate" in ${CONFIG_FILE} must be a string.`);
 		if (h.meta !== void 0) {
 			if (!Array.isArray(h.meta)) throw new Error(`config: "head.meta" in ${CONFIG_FILE} must be an array.`);
-			for (const entry of h.meta) if (typeof entry !== "object" || entry === null || Array.isArray(entry)) throw new Error(`config: "head.meta" entries in ${CONFIG_FILE} must be objects.`);
+			for (const entry of h.meta) if (!isRecord(entry)) throw new Error(`config: "head.meta" entries in ${CONFIG_FILE} must be objects.`);
 		}
 		if (h.link !== void 0) {
 			if (!Array.isArray(h.link)) throw new Error(`config: "head.link" in ${CONFIG_FILE} must be an array.`);
@@ -251,14 +224,14 @@ function validateConfigObject(config) {
 			if (!Array.isArray(h.script)) throw new Error(`config: "head.script" in ${CONFIG_FILE} must be an array.`);
 		}
 		if (h.htmlAttrs !== void 0) {
-			if (typeof h.htmlAttrs !== "object" || h.htmlAttrs === null || Array.isArray(h.htmlAttrs)) throw new Error(`config: "head.htmlAttrs" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(h.htmlAttrs)) throw new Error(`config: "head.htmlAttrs" in ${CONFIG_FILE} must be an object.`);
 		}
 		if (h.bodyAttrs !== void 0) {
-			if (typeof h.bodyAttrs !== "object" || h.bodyAttrs === null || Array.isArray(h.bodyAttrs)) throw new Error(`config: "head.bodyAttrs" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(h.bodyAttrs)) throw new Error(`config: "head.bodyAttrs" in ${CONFIG_FILE} must be an object.`);
 		}
 	}
 	if (obj.routing !== void 0) {
-		if (typeof obj.routing !== "object" || obj.routing === null || Array.isArray(obj.routing)) throw new Error(`config: "routing" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.routing)) throw new Error(`config: "routing" in ${CONFIG_FILE} must be an object.`);
 		const routing = obj.routing;
 		if (routing.notFound !== void 0) {
 			if (typeof routing.notFound !== "string" || !VALID_NOT_FOUND_HANDLING.has(routing.notFound)) throw new Error(`config: "routing.notFound" in ${CONFIG_FILE} must be one of: ${[...VALID_NOT_FOUND_HANDLING].join(", ")}.`);
@@ -267,91 +240,57 @@ function validateConfigObject(config) {
 		if (routing.revalidate !== void 0) {
 			if (typeof routing.revalidate === "number") {
 				if (!Number.isFinite(routing.revalidate) || routing.revalidate < 0) throw new Error(`config: "routing.revalidate" in ${CONFIG_FILE} must be a non-negative finite number.`);
-			} else if (typeof routing.revalidate === "object" && routing.revalidate !== null && !Array.isArray(routing.revalidate)) {
-				const r = routing.revalidate;
-				for (const [pattern, value] of Object.entries(r)) {
-					if (pattern !== "*" && !pattern.startsWith("/")) throw new Error(`config: "routing.revalidate" key '${pattern}' in ${CONFIG_FILE} must start with "/" or be "*".`);
-					if (typeof value !== "number" || !Number.isFinite(value) || value < 0) throw new Error(`config: "routing.revalidate" value for '${pattern}' in ${CONFIG_FILE} must be a non-negative finite number.`);
-				}
-			} else throw new Error(`config: "routing.revalidate" in ${CONFIG_FILE} must be a number or an object of path patterns to numbers.`);
+			} else if (isRecord(routing.revalidate)) for (const [pattern, value] of Object.entries(routing.revalidate)) {
+				if (pattern !== "*" && !pattern.startsWith("/")) throw new Error(`config: "routing.revalidate" key '${pattern}' in ${CONFIG_FILE} must start with "/" or be "*".`);
+				if (typeof value !== "number" || !Number.isFinite(value) || value < 0) throw new Error(`config: "routing.revalidate" value for '${pattern}' in ${CONFIG_FILE} must be a non-negative finite number.`);
+			}
+			else throw new Error(`config: "routing.revalidate" in ${CONFIG_FILE} must be a number or an object of path patterns to numbers.`);
 		}
 		if (routing.prerender !== void 0) {
 			if (!Array.isArray(routing.prerender) || !routing.prerender.every((p) => typeof p === "string")) throw new Error(`config: "routing.prerender" in ${CONFIG_FILE} must be an array of strings.`);
 			for (const p of routing.prerender) if (!p.startsWith("/")) throw new Error(`config: "routing.prerender" path '${p}' in ${CONFIG_FILE} must start with "/".`);
 		}
 		if (routing.headers !== void 0) {
-			if (typeof routing.headers !== "object" || routing.headers === null || Array.isArray(routing.headers)) throw new Error(`config: "routing.headers" in ${CONFIG_FILE} must be an object.`);
-			const h = routing.headers;
-			for (const [pattern, values] of Object.entries(h)) {
+			if (!isRecord(routing.headers)) throw new Error(`config: "routing.headers" in ${CONFIG_FILE} must be an object.`);
+			for (const [pattern, values] of Object.entries(routing.headers)) {
 				if (!pattern.startsWith("/")) throw new Error(`config: Header pattern '${pattern}' in ${CONFIG_FILE} must start with "/".`);
 				assertSingleSplat(pattern, "Header");
 				if (!Array.isArray(values) || !values.every((v) => typeof v === "string")) throw new Error(`config: Headers for '${pattern}' in ${CONFIG_FILE} must be an array of strings.`);
 			}
 		}
 		if (routing.redirects !== void 0) {
-			if (typeof routing.redirects !== "object" || routing.redirects === null || Array.isArray(routing.redirects)) throw new Error(`config: "routing.redirects" in ${CONFIG_FILE} must be an object.`);
-			const r = routing.redirects;
-			for (const [source, dest] of Object.entries(r)) {
+			if (!isRecord(routing.redirects)) throw new Error(`config: "routing.redirects" in ${CONFIG_FILE} must be an object.`);
+			for (const [source, dest] of Object.entries(routing.redirects)) {
 				const parsed = parseHostPrefixedSource(source);
 				if ("error" in parsed) throw new Error(`config: Redirect source '${source}' in ${CONFIG_FILE}: ${parsed.error}.`);
 				if (!parsed.path.startsWith("/")) throw new Error(`config: Redirect source '${source}' in ${CONFIG_FILE} must start with "/" (or be "https://host/path" with a path-absolute path).`);
 				assertSingleSplat(parsed.path, "Redirect");
 				assertUniqueCaptureNames(parsed.path, "Redirect");
-				if (typeof dest === "string") {
-					if (dest.startsWith("/")) assertNotProtocolRelative(dest, source, "Redirect");
-				} else if (typeof dest === "object" && dest !== null && !Array.isArray(dest)) {
-					const d = dest;
-					if (typeof d.to !== "string") throw new Error(`config: Redirect for '${source}' in ${CONFIG_FILE} must have a "to" string.`);
-					if (d.to.startsWith("/")) assertNotProtocolRelative(d.to, source, "Redirect");
-					if (d.status !== void 0 && !VALID_REDIRECT_STATUSES.has(d.status)) throw new Error(`config: Redirect status for '${source}' in ${CONFIG_FILE} must be 301, 302, 303, 307, or 308.`);
+				if (typeof dest === "string") assertNotProtocolRelative(dest, source, "Redirect");
+				else if (isRecord(dest)) {
+					if (typeof dest.to !== "string") throw new Error(`config: Redirect for '${source}' in ${CONFIG_FILE} must have a "to" string.`);
+					assertNotProtocolRelative(dest.to, source, "Redirect");
+					if (dest.status !== void 0 && !VALID_REDIRECT_STATUSES.has(dest.status)) throw new Error(`config: Redirect status for '${source}' in ${CONFIG_FILE} must be 301, 302, 303, 307, or 308.`);
 				} else throw new Error(`config: Redirect for '${source}' in ${CONFIG_FILE} must be a string or an object with "to" and optional "status".`);
 			}
 		}
 		if (routing.revalidateQueryAllowlist !== void 0) {
-			if (typeof routing.revalidateQueryAllowlist !== "object" || routing.revalidateQueryAllowlist === null || Array.isArray(routing.revalidateQueryAllowlist)) throw new Error(`"routing.revalidateQueryAllowlist" in ${CONFIG_FILE} must be an object`);
+			if (!isRecord(routing.revalidateQueryAllowlist)) throw new Error(`"routing.revalidateQueryAllowlist" in ${CONFIG_FILE} must be an object`);
 			for (const [pattern, params] of Object.entries(routing.revalidateQueryAllowlist)) {
 				if (pattern !== "*" && !pattern.startsWith("/")) throw new Error(`config: revalidateQueryAllowlist pattern '${pattern}' in ${CONFIG_FILE} must start with "/" or be "*".`);
 				if (pattern !== "*") assertSingleSplat(pattern, "revalidateQueryAllowlist");
 				if (!Array.isArray(params) || !params.every((v) => typeof v === "string")) throw new Error(`config: revalidateQueryAllowlist for '${pattern}' in ${CONFIG_FILE} must be an array of strings.`);
 			}
 		}
-		if (routing.rewrites !== void 0) {
-			if (typeof routing.rewrites !== "object" || routing.rewrites === null || Array.isArray(routing.rewrites)) throw new Error(`"routing.rewrites" in ${CONFIG_FILE} must be an object`);
-			const rw = routing.rewrites;
-			for (const [source, dest] of Object.entries(rw)) {
-				const parsed = parseHostPrefixedSource(source);
-				if ("error" in parsed) throw new Error(`Rewrite source "${source}" in ${CONFIG_FILE}: ${parsed.error}`);
-				if (!parsed.path.startsWith("/")) throw new Error(`Rewrite source "${source}" in ${CONFIG_FILE} must start with "/" (or be "https://host/path" with a path-absolute path)`);
-				assertSingleSplat(parsed.path, "Rewrite");
-				assertUniqueCaptureNames(parsed.path, "Rewrite");
-				if (typeof dest !== "string") throw new Error(`Rewrite destination for "${source}" in ${CONFIG_FILE} must be a string`);
-				if (!dest.startsWith("/")) throw new Error(`Rewrite destination for "${source}" in ${CONFIG_FILE} must start with "/" (only internal paths are supported)`);
-				assertNotProtocolRelative(dest, source, "Rewrite");
-				assertNoQueryString(dest, source, "Rewrite");
-			}
-		}
-		if (routing.fallbacks !== void 0) {
-			if (typeof routing.fallbacks !== "object" || routing.fallbacks === null || Array.isArray(routing.fallbacks)) throw new Error(`"routing.fallbacks" in ${CONFIG_FILE} must be an object`);
-			const fb = routing.fallbacks;
-			for (const [source, dest] of Object.entries(fb)) {
-				const parsed = parseHostPrefixedSource(source);
-				if ("error" in parsed) throw new Error(`Fallback source "${source}" in ${CONFIG_FILE}: ${parsed.error}`);
-				if (!parsed.path.startsWith("/")) throw new Error(`Fallback source "${source}" in ${CONFIG_FILE} must start with "/" (or be "https://host/path" with a path-absolute path)`);
-				assertSingleSplat(parsed.path, "Fallback");
-				assertUniqueCaptureNames(parsed.path, "Fallback");
-				if (typeof dest !== "string") throw new Error(`Fallback destination for "${source}" in ${CONFIG_FILE} must be a string`);
-				if (!dest.startsWith("/")) throw new Error(`Fallback destination for "${source}" in ${CONFIG_FILE} must start with "/" (only internal paths are supported)`);
-				assertNotProtocolRelative(dest, source, "Fallback");
-				assertNoQueryString(dest, source, "Fallback");
-			}
-		}
+		if (routing.rewrites !== void 0) validateRewriteMap(routing.rewrites, "Rewrite");
+		if (routing.fallbacks !== void 0) validateRewriteMap(routing.fallbacks, "Fallback");
 	}
 	if (obj.inference !== void 0) {
-		if (typeof obj.inference !== "object" || obj.inference === null || Array.isArray(obj.inference)) throw new Error(`config: "inference" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.inference)) throw new Error(`config: "inference" in ${CONFIG_FILE} must be an object.`);
 		const inf = obj.inference;
 		if (inf.auth !== void 0) throw new Error(`config: "inference.auth" in ${CONFIG_FILE} is no longer supported. Use auth.ts or import from "void/auth"/"void/client" instead.`);
 		if (inf.bindings !== void 0) {
-			if (typeof inf.bindings !== "object" || inf.bindings === null || Array.isArray(inf.bindings)) throw new Error(`config: "inference.bindings" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(inf.bindings)) throw new Error(`config: "inference.bindings" in ${CONFIG_FILE} must be an object.`);
 			const b = inf.bindings;
 			for (const key of Object.keys(b)) {
 				if (![
@@ -377,31 +316,15 @@ function validateConfigObject(config) {
 		if (inf.outputDir !== void 0 && typeof inf.outputDir !== "string") throw new Error(`config: "inference.outputDir" in ${CONFIG_FILE} must be a string.`);
 	}
 	if (obj.remote !== void 0 && typeof obj.remote !== "boolean") throw new Error(`config: "remote" in ${CONFIG_FILE} must be a boolean.`);
-	if (obj.sandbox !== void 0) {
-		if (typeof obj.sandbox === "boolean") {} else if (typeof obj.sandbox === "object" && obj.sandbox !== null && !Array.isArray(obj.sandbox)) {
-			const sandbox = obj.sandbox;
-			for (const key of Object.keys(sandbox)) if (![
-				"binding",
-				"className",
-				"containerName",
-				"image",
-				"imageBuildContext",
-				"platformImage",
-				"instanceType"
-			].includes(key)) throw new Error(`config: Unknown key 'sandbox.${key}' in ${CONFIG_FILE}. Valid: binding, className, containerName, image, imageBuildContext, platformImage, instanceType.`);
-			for (const key of [
-				"binding",
-				"className",
-				"containerName",
-				"image",
-				"imageBuildContext",
-				"platformImage"
-			]) if (sandbox[key] !== void 0 && typeof sandbox[key] !== "string") throw new Error(`config: "sandbox.${key}" in ${CONFIG_FILE} must be a string.`);
-			if (sandbox.instanceType !== void 0 && (typeof sandbox.instanceType !== "string" || !VALID_SANDBOX_INSTANCE_TYPES.has(sandbox.instanceType))) throw new Error(`config: "sandbox.instanceType" in ${CONFIG_FILE} must be one of: ${[...VALID_SANDBOX_INSTANCE_TYPES].join(", ")}.`);
-		} else throw new Error(`config: "sandbox" in ${CONFIG_FILE} must be a boolean or an object.`);
+	if (obj.sandbox !== void 0 && typeof obj.sandbox !== "boolean") {
+		if (!isRecord(obj.sandbox)) throw new Error(`config: "sandbox" in ${CONFIG_FILE} must be a boolean or an object.`);
+		const sandbox = obj.sandbox;
+		for (const key of Object.keys(sandbox)) if (!SANDBOX_KEYS.includes(key)) throw new Error(`config: Unknown key 'sandbox.${key}' in ${CONFIG_FILE}. Valid: ${SANDBOX_KEYS.join(", ")}.`);
+		for (const key of SANDBOX_STRING_KEYS) if (sandbox[key] !== void 0 && typeof sandbox[key] !== "string") throw new Error(`config: "sandbox.${key}" in ${CONFIG_FILE} must be a string.`);
+		if (sandbox.instanceType !== void 0 && (typeof sandbox.instanceType !== "string" || !VALID_SANDBOX_INSTANCE_TYPES.has(sandbox.instanceType))) throw new Error(`config: "sandbox.instanceType" in ${CONFIG_FILE} must be one of: ${[...VALID_SANDBOX_INSTANCE_TYPES].join(", ")}.`);
 	}
 	if (obj.worker !== void 0) {
-		if (typeof obj.worker !== "object" || obj.worker === null || Array.isArray(obj.worker)) throw new Error(`config: "worker" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.worker)) throw new Error(`config: "worker" in ${CONFIG_FILE} must be an object.`);
 		const w = obj.worker;
 		if (w.compatibility_date !== void 0) {
 			if (typeof w.compatibility_date !== "string") throw new Error(`config: "worker.compatibility_date" in ${CONFIG_FILE} must be a string.`);
@@ -411,11 +334,11 @@ function validateConfigObject(config) {
 			if (!Array.isArray(w.compatibility_flags) || !w.compatibility_flags.every((f) => typeof f === "string")) throw new Error(`config: "worker.compatibility_flags" in ${CONFIG_FILE} must be an array of strings.`);
 		}
 		if (w.vars !== void 0) {
-			if (typeof w.vars !== "object" || w.vars === null || Array.isArray(w.vars)) throw new Error(`config: "worker.vars" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(w.vars)) throw new Error(`config: "worker.vars" in ${CONFIG_FILE} must be an object.`);
 			for (const [key, value] of Object.entries(w.vars)) if (typeof value !== "string") throw new Error(`config: "worker.vars.${key}" in ${CONFIG_FILE} must be a string.`);
 		}
 		if (w.limits !== void 0) {
-			if (typeof w.limits !== "object" || w.limits === null || Array.isArray(w.limits)) throw new Error(`config: "worker.limits" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(w.limits)) throw new Error(`config: "worker.limits" in ${CONFIG_FILE} must be an object.`);
 			const limits = w.limits;
 			for (const key of Object.keys(limits)) if (key !== "cpu_ms") throw new Error(`config: Unknown key 'worker.limits.${key}' in ${CONFIG_FILE}. Valid: cpu_ms.`);
 			if (limits.cpu_ms !== void 0) {
@@ -424,14 +347,14 @@ function validateConfigObject(config) {
 		}
 	}
 	if (obj.cloudflare !== void 0) {
-		if (typeof obj.cloudflare !== "object" || obj.cloudflare === null || Array.isArray(obj.cloudflare)) throw new Error(`config: "cloudflare" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.cloudflare)) throw new Error(`config: "cloudflare" in ${CONFIG_FILE} must be an object.`);
 	}
 	if (obj.deploy !== void 0) {
-		if (typeof obj.deploy !== "object" || obj.deploy === null || Array.isArray(obj.deploy)) throw new Error(`config: "deploy" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.deploy)) throw new Error(`config: "deploy" in ${CONFIG_FILE} must be an object.`);
 		const deploy = obj.deploy;
 		for (const key of Object.keys(deploy)) if (key !== "cloudflare") throw new Error(`config: Unknown key 'deploy.${key}' in ${CONFIG_FILE}. Valid: cloudflare.`);
 		if (deploy.cloudflare !== void 0) {
-			if (typeof deploy.cloudflare !== "object" || deploy.cloudflare === null || Array.isArray(deploy.cloudflare)) throw new Error(`config: "deploy.cloudflare" in ${CONFIG_FILE} must be an object.`);
+			if (!isRecord(deploy.cloudflare)) throw new Error(`config: "deploy.cloudflare" in ${CONFIG_FILE} must be an object.`);
 			const cloudflareDeploy = deploy.cloudflare;
 			for (const key of Object.keys(cloudflareDeploy)) if (key !== "mode") throw new Error(`config: Unknown key 'deploy.cloudflare.${key}' in ${CONFIG_FILE}. Valid: mode.`);
 			if (cloudflareDeploy.mode !== void 0 && cloudflareDeploy.mode !== "staged" && cloudflareDeploy.mode !== "atomic") throw new Error(`config: "deploy.cloudflare.mode" in ${CONFIG_FILE} must be "staged" or "atomic".`);
@@ -441,13 +364,13 @@ function validateConfigObject(config) {
 		if (typeof obj.database !== "string" || !VALID_DATABASE_VALUES.has(obj.database)) throw new Error(`config: "database" in ${CONFIG_FILE} must be "pg" or "mysql".`);
 	}
 	if (obj.ai !== void 0) {
-		if (typeof obj.ai !== "object" || obj.ai === null || Array.isArray(obj.ai)) throw new Error(`config: "ai" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.ai)) throw new Error(`config: "ai" in ${CONFIG_FILE} must be an object.`);
 		const aiCfg = obj.ai;
 		for (const key of Object.keys(aiCfg)) if (key !== "gateway") throw new Error(`config: Unknown key 'ai.${key}' in ${CONFIG_FILE}. Valid: gateway.`);
 		if (aiCfg.gateway !== void 0 && (typeof aiCfg.gateway !== "string" || aiCfg.gateway.length === 0)) throw new Error(`config: "ai.gateway" in ${CONFIG_FILE} must be a non-empty string.`);
 	}
 	if (obj.email !== void 0) {
-		if (typeof obj.email !== "object" || obj.email === null || Array.isArray(obj.email)) throw new Error(`config: "email" in ${CONFIG_FILE} must be an object.`);
+		if (!isRecord(obj.email)) throw new Error(`config: "email" in ${CONFIG_FILE} must be an object.`);
 		const emailCfg = obj.email;
 		for (const key of Object.keys(emailCfg)) if (key !== "from") throw new Error(`config: Unknown key 'email.${key}' in ${CONFIG_FILE}. Valid: from.`);
 		if (emailCfg.from !== void 0) parseEmailFrom(emailCfg.from);
@@ -468,7 +391,7 @@ function validateConfigObject(config) {
 function parseEmailFrom(value) {
 	if (typeof value !== "string" || value.length === 0) throw new Error(`config: "email.from" in ${CONFIG_FILE} must be a non-empty string.`);
 	try {
-		return parseAddress(value, "email.from");
+		parseAddress(value, "email.from");
 	} catch (error) {
 		const detail = error instanceof MimeError ? ` ${error.message}` : "";
 		throw new Error(`config: "email.from" in ${CONFIG_FILE} must be a single email address, optionally with a display name (e.g. "Acme <noreply@mail.acme.com>").${detail}`);
@@ -580,23 +503,7 @@ function convertRedirectsConfig(redirects) {
 * if the input is empty or undefined.
 */
 function convertRewritesConfig(rewrites) {
-	if (!rewrites) return;
-	const origin = "void.json#routing.rewrites";
-	const rules = [];
-	for (const [rawSource, destination] of Object.entries(rewrites)) {
-		const parsed = parseHostPrefixedSource(rawSource);
-		if ("error" in parsed) throw new Error(`convertRewritesConfig: source "${rawSource}": ${parsed.error}`);
-		const { host, path } = parsed;
-		rules.push({
-			source: path,
-			destination,
-			status: 200,
-			force: true,
-			origin,
-			...host && { host }
-		});
-	}
-	return rules.length > 0 ? rules : void 0;
+	return convertRewriteRules("convertRewritesConfig", rewrites, "rewrites", true);
 }
 /**
 * Convert the `fallbacks` config field into `DevRedirectRule[]` with status 200.
@@ -608,18 +515,21 @@ function convertRewritesConfig(rewrites) {
 * Returns undefined if the input is empty or undefined.
 */
 function convertFallbacksConfig(fallbacks) {
-	if (!fallbacks) return;
-	const origin = "void.json#routing.fallbacks";
+	return convertRewriteRules("convertFallbacksConfig", fallbacks, "fallbacks", false);
+}
+function convertRewriteRules(caller, entries, field, force) {
+	if (!entries) return;
+	const origin = `void.json#routing.${field}`;
 	const rules = [];
-	for (const [rawSource, destination] of Object.entries(fallbacks)) {
+	for (const [rawSource, destination] of Object.entries(entries)) {
 		const parsed = parseHostPrefixedSource(rawSource);
-		if ("error" in parsed) throw new Error(`convertFallbacksConfig: source "${rawSource}": ${parsed.error}`);
+		if ("error" in parsed) throw new Error(`${caller}: source "${rawSource}": ${parsed.error}`);
 		const { host, path } = parsed;
 		rules.push({
 			source: path,
 			destination,
 			status: 200,
-			force: false,
+			force,
 			origin,
 			...host && { host }
 		});
@@ -627,4 +537,4 @@ function convertFallbacksConfig(fallbacks) {
 	return rules.length > 0 ? rules : void 0;
 }
 //#endregion
-export { convertFallbacksConfig as a, convertRewritesConfig as c, isNodeTarget as d, isProtocolRelative as f, validateConfig as g, resolveBindingNames as h, assertUniqueCaptureNames as i, countSplats as l, readConfig as m, VALID_REDIRECT_STATUSES as n, convertHeadersConfig as o, parseHostPrefixedSource as p, assertSingleSplat as r, convertRedirectsConfig as s, VALID_NOT_FOUND_HANDLING as t, getDatabaseDialect as u };
+export { convertRewritesConfig as a, isNodeTarget as c, readConfig as d, resolveBindingNames as f, convertRedirectsConfig as i, isProtocolRelative as l, convertFallbacksConfig as n, countSplats as o, validateConfig as p, convertHeadersConfig as r, getDatabaseDialect as s, VALID_REDIRECT_STATUSES as t, parseHostPrefixedSource as u };

package/dist/config-CNnrSMYm.mjs

@@ -0,0 +1,2 @@
+import { n as withPrivateDrizzleConfig, r as writeDrizzleConfig, t as PLACEHOLDER_DB_URL } from "./config-BEm9vRvS.mjs";
+export { PLACEHOLDER_DB_URL, withPrivateDrizzleConfig, writeDrizzleConfig };

package/dist/{config-DPByhVck.mjs → config-D0GY5ItR.mjs}

@@ -1,4 +1,4 @@
-import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
+import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { parseSync } from "vite";

package/dist/config-entry.d.mts

@@ -1,4 +1,4 @@
-import { t as VoidConfig } from "./config-CSa15FvD.mjs";
+import { t as VoidConfig } from "./config-7qoq2p9v.mjs";
 //#region src/config-entry.d.ts
 /** Define a typed Void project configuration without loading the Vite plugin. */
 export declare function defineConfig<const T extends VoidConfig>(config: T): T;

package/dist/{connect-BfPBHHm-.mjs → connect-nukQSoEO.mjs}

@@ -1,12 +1,12 @@
-import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-Cjv2Qf0r.mjs";
-import { c as writePlatformSelection, n as readDeploymentPlatform, s as writeDeploymentPlatform } from "./project-BAm2aB6Q.mjs";
-import { d as readPlatformToken } from "./auth-Dn2vw-SG.mjs";
+import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
+import { c as writeDeploymentPlatform, l as writePlatformSelection, n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
+import { d as readPlatformToken } from "./auth-B6iOCjKI.mjs";
 import { K as select, L as log, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess } from "./output-C50ag2r3.mjs";
-import { a as isExpiredTokenError, r as PlatformClient } from "./client-DlDJuY0s.mjs";
-import { t as promptForLoginToken } from "./login-GKcNUmtI.mjs";
-import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-BbY1dWiM.mjs";
-import { t as connectCloudflare } from "./cloudflare-connect-2G3rL2rP.mjs";
+import { m as printSuccess } from "./output-FNHKw5Ac.mjs";
+import { a as isExpiredTokenError, r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { t as promptForLoginToken } from "./login-CZ2Cqa-D.mjs";
+import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-DxxZO6e5.mjs";
+import { t as connectCloudflare } from "./cloudflare-connect-BosmCNlq.mjs";
 //#region src/cli/connect.ts
 async function selectVoidPlatform(interactive) {
 	if (!interactive) throw new Error("connect: Supply a Void platform URL in non-interactive mode.");

package/dist/{create-project-BdXEFKal.mjs → create-project-D4APeBwX.mjs}

@@ -1,10 +1,10 @@
-import { l as writeProjectConfig, t as attachSelectedPlatform } from "./project-BAm2aB6Q.mjs";
-import { s as getSiteDomain } from "./auth-Dn2vw-SG.mjs";
+import { t as attachSelectedPlatform, u as writeProjectConfig } from "./project-rqDnVsJN.mjs";
+import { s as getSiteDomain } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, K as select, L as log, O as cancel, X as text, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { f as sanitizeTerminalText, l as import_picocolors } from "./output-C50ag2r3.mjs";
-import { n as PlatformApiError } from "./client-DlDJuY0s.mjs";
+import { f as import_picocolors, h as sanitizeTerminalText } from "./output-FNHKw5Ac.mjs";
+import { n as PlatformApiError } from "./client-DM9Kcf4e.mjs";
 import { t as validateProjectSlug } from "./project-slug-23TpquG4.mjs";
-import { n as inferDefaultSlug } from "./resolve-project-CP8rZs_p.mjs";
+import { n as inferDefaultSlug } from "./resolve-project-C_Cu7E8a.mjs";
 //#region src/cli/prompt.ts
 async function promptProjectSetupAction(message = "Set up a Void project:", options = {}) {
 	const result = await select({
@@ -76,7 +76,7 @@ async function promptProjectSlug(defaultSlug) {
 * caller's prompt callback returns `undefined` (cancel).
 *
 * The shared retry loop keeps `promptAndCreateProject` (deploy/link paths)
-* and the AI-setup path in `index.ts` in sync.
+* and the AI-setup path in `plugin-ai-setup.ts` in sync.
 */
 async function createProjectWithSlugRetry(client, initialDefaultSlug, promptSlug) {
 	let defaultSlug = initialDefaultSlug;
@@ -109,7 +109,7 @@ async function promptAndCreateProject(root, client, options = {}) {
 		projectId: project.id,
 		slug: project.slug
 	};
-	if (options.link !== false) writeProjectConfig(root, attachSelectedPlatform(root, config, client.apiUrl));
+	if (options.link !== false) writeProjectConfig(root, attachSelectedPlatform(config, client.apiUrl));
 	if (project.owner_email_destination) {
 		const { address } = project.owner_email_destination;
 		log.info(`Registering ${address} as a recipient for this project. Cloudflare emails it a verification link unless it is already verified — \`void email destinations\` shows the state.`);

package/dist/{create-project-qFDC45zg.mjs → create-project-DL7YXpjj.mjs}

@@ -1,2 +1,2 @@
-import { t as createProjectWithSlugRetry } from "./create-project-BdXEFKal.mjs";
+import { t as createProjectWithSlugRetry } from "./create-project-D4APeBwX.mjs";
 export { createProjectWithSlugRetry };