void 0.27.0 → 1.0.3

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-CNAwjRcW.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-_PqY82xe.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/validator.mjs

@@ -1,2 +1 @@
-import { t as runValidation } from "../validator-BTOu0fB0.mjs";
-export { runValidation };
+export { t as runValidation } from "../validator-BTOu0fB0.mjs";

package/dist/runtime/ws-server.d.mts

@@ -1,6 +1,6 @@
 import { n as AuthState } from "../auth-DkcFflXV.mjs";
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-CPvWD3nG.mjs";
-import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-CChrrAU-.mjs";
+import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-B74NJIus.mjs";
+import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-aKVYB-fA.mjs";
 //#region src/runtime/ws-server.d.ts
 export type WebSocketRouteMeta = {
   name?: string;
@@ -23,6 +23,6 @@ export declare function buildWebSocketInstanceId(route: Pick<WebSocketRouteMeta,
 export declare function createWebSocketDurableObject(definition: AnyWebSocketDefinition, route: WebSocketRouteMeta, authRuntime?: VoidAuthRuntimeOptions, resolveAuthState?: ResolveVoidAuthState): WebSocketDurableObjectClass;
 /** Keep a removed WebSocket Durable Object class deployable without deleting its storage. */
 export declare function createWebSocketTombstoneDurableObject(className: string): WebSocketDurableObjectClass;
-export declare function handleWebSocketUpgrade(request: Request, env: Record<string, unknown>, routes: Array<WebSocketRouteMeta>): Promise<Response | null>;
 export declare function forwardWebSocketRequest(request: Request, env: Record<string, unknown>, route: WebSocketRouteMeta): Promise<Response>;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/ws-server.mjs

@@ -1,5 +1,5 @@
 import { t as authContext } from "../auth-3sGB0zJ1.mjs";
-import { o as withRuntimeEnv } from "../env-DMA3cXZt.mjs";
+import { o as withRuntimeEnv } from "../env-0jrMQJI_.mjs";
 //#region src/runtime/ws-server.ts
 function matchRoute(pattern, pathname) {
 	const patternSegments = pattern.split("/").filter(Boolean);
@@ -58,20 +58,9 @@ function buildWebSocketInstanceId(route, params) {
 	if (entries.length > 1 && entries.some(([, value]) => value.includes("&"))) return `v2:${JSON.stringify(entries)}`;
 	return route.params.map((name) => `${name}=${params[name] ?? ""}`).join("&");
 }
-async function validateSchema(schema, value) {
-	const result = await schema["~standard"].validate(value);
-	if (result.issues) return {
-		ok: false,
-		issues: result.issues
-	};
-	return {
-		ok: true,
-		value: result.value
-	};
-}
 async function serializeServerEvent(schema, event) {
-	const result = await validateSchema(schema, event);
-	if (!result.ok) throw new Error(`ws: Message validation failed: ${result.issues.map((issue) => issue.message).join("; ")}.`);
+	const result = await schema["~standard"].validate(event);
+	if (result.issues) throw new Error(`ws: Message validation failed: ${result.issues.map((issue) => issue.message).join("; ")}.`);
 	return JSON.stringify(result.value);
 }
 function parseIncomingMessage(message) {
@@ -248,8 +237,8 @@ function createWebSocketDurableObject(definition, route, authRuntime, resolveAut
 				webSocket.close(1007, "Invalid JSON");
 				return;
 			}
-			const result = await validateSchema(definition.messages.client, parsed);
-			if (!result.ok) {
+			const result = await definition.messages.client["~standard"].validate(parsed);
+			if (result.issues) {
 				webSocket.close(1007, "Invalid message");
 				return;
 			}
@@ -300,21 +289,10 @@ function getStub(env, route, params) {
 	const id = binding.idFromName(buildWebSocketInstanceId(route, params));
 	return binding.get(id);
 }
-async function handleWebSocketUpgrade(request, env, routes) {
-	if (request.headers.get("upgrade")?.toLowerCase() !== "websocket") return null;
-	for (const route of routes) {
-		const params = getRouteMatch(request, route);
-		if (!params) continue;
-		const stub = getStub(env, route, params);
-		if (!stub) return new Response(`Missing Durable Object binding "${route.bindingName}"`, { status: 503 });
-		return stub.fetch(request);
-	}
-	return null;
-}
 async function forwardWebSocketRequest(request, env, route) {
 	const stub = getStub(env, route, getRouteMatch(request, route) ?? {});
 	if (!stub) return new Response(`Missing Durable Object binding "${route.bindingName}"`, { status: 503 });
 	return stub.fetch(request);
 }
 //#endregion
-export { buildWebSocketInstanceId, createWebSocketDurableObject, createWebSocketTombstoneDurableObject, forwardWebSocketRequest, handleWebSocketUpgrade };
+export { buildWebSocketInstanceId, createWebSocketDurableObject, createWebSocketTombstoneDurableObject, forwardWebSocketRequest };

package/dist/runtime/ws.d.mts

@@ -1,2 +1,2 @@
-import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-CChrrAU-.mjs";
+import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-aKVYB-fA.mjs";
 export { AnyWebSocketDefinition, ConnectCommonOptions, RoomContext, RoomController, RoomDefinition, SocketContext, SocketDefinition, VoidSocket, VoidSocketCloseEvent, WebSocketBaseContext, WebSocketConnection, WebSocketInstanceKey, connect, defineRoom, defineWebSocket };

package/dist/{sandbox-container-Bo0eiFKz.d.mts → sandbox-container-ChQRum-j.d.mts}

@@ -16,6 +16,7 @@ type SandboxExecOptions = ContainerExecOptions & {
 type SandboxCapability = {
   invoke(operation: string, args: Array<unknown>): Promise<unknown>;
 };
+declare const SANDBOX_PORT_HEADER = "x-void-sandbox-port";
 type SandboxProcessWire = {
   capability: SandboxCapability;
   pid: number;
@@ -45,6 +46,7 @@ declare class SandboxContainer<Env = unknown> extends DurableObject<Env> {
   #private;
   protected instanceType: SandboxInstance;
   protected starting: boolean;
+  fetch(request: Request): Promise<Response>;
   constructor(ctx: DurableObjectState, env: Env);
   protected get container(): SandboxNativeContainer;
   configure(options: SandboxOptions): Promise<void>;
@@ -70,4 +72,4 @@ declare class SandboxContainer<Env = unknown> extends DurableObject<Env> {
   invoke(operation: string, args: Array<unknown>): Promise<unknown>;
 }
 //#endregion
-export { SandboxInstance as a, SandboxProcessWire as c, SandboxExecOptions as i, validateSandboxOptions as l, SandboxCapability as n, SandboxNativeContainer as o, SandboxContainer as r, SandboxOptions as s, DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS as t };
+export { SandboxExecOptions as a, SandboxOptions as c, SandboxContainer as i, SandboxProcessWire as l, SANDBOX_PORT_HEADER as n, SandboxInstance as o, SandboxCapability as r, SandboxNativeContainer as s, DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS as t, validateSandboxOptions as u };

package/dist/{sandbox-container-C6ItmVuN.mjs → sandbox-container-a9LRUtii.mjs}

@@ -1,6 +1,7 @@
 import { DurableObject, RpcTarget } from "cloudflare:workers";
 import { Files } from "@cloudflare/sandbox";
 //#region src/runtime/sandbox-container.ts
+const SANDBOX_PORT_HEADER = "x-void-sandbox-port";
 const OPTIONS = /* @__PURE__ */ new Set([
 	"inactivityTimeoutMs",
 	"enableInternet",
@@ -84,6 +85,16 @@ var SandboxContainer = class extends DurableObject {
 	#ready;
 	starting = false;
 	#epoch = 0;
+	async fetch(request) {
+		const value = request.headers.get(SANDBOX_PORT_HEADER);
+		if (!value || !/^\d+$/.test(value)) return new Response("Invalid Sandbox TCP port.", { status: 400 });
+		const port = Number(value);
+		if (!Number.isInteger(port) || port < 1 || port > 65535) return new Response("Invalid Sandbox TCP port.", { status: 400 });
+		const headers = new Headers(request.headers);
+		headers.delete(SANDBOX_PORT_HEADER);
+		await this.ensureRunning();
+		return this.container.getTcpPort(port).fetch(new Request(request, { headers }));
+	}
 	constructor(ctx, env) {
 		super(ctx, env);
 		this.#ready = ctx.blockConcurrencyWhile(async () => {
@@ -185,9 +196,9 @@ var SandboxContainer = class extends DurableObject {
 				labels: this.#options.labels,
 				...this.entrypoint ? { entrypoint: this.entrypoint } : {}
 			});
+			await this.container.setInactivityTimeout(this.inactivityTimeoutMs);
 			await this.initialize();
 			if (epoch !== this.#epoch) throw new Error("Sandbox startup was cancelled.");
-			await this.container.setInactivityTimeout(this.inactivityTimeoutMs);
 			await this.afterStart();
 		} catch (error) {
 			await this.destroy().catch(() => {});
@@ -278,4 +289,4 @@ var SandboxContainer = class extends DurableObject {
 	}
 };
 //#endregion
-export { SandboxContainer as n, validateSandboxOptions as r, DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS as t };
+export { validateSandboxOptions as i, SANDBOX_PORT_HEADER as n, SandboxContainer as r, DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS as t };

package/dist/{sandbox-C5LFoJMf.d.mts → sandbox-q3waMc2T.d.mts}

@@ -1,5 +1,5 @@
 import { t as UsageLimit } from "./limits-CFsDKQvU.mjs";
-import { i as SandboxExecOptions, r as SandboxContainer, s as SandboxOptions } from "./sandbox-container-Bo0eiFKz.mjs";
+import { a as SandboxExecOptions, c as SandboxOptions, i as SandboxContainer } from "./sandbox-container-ChQRum-j.mjs";
 import { Files } from "@cloudflare/sandbox";
 //#region src/runtime/sandbox.d.ts
 declare const DEFAULT_SANDBOX_ID = "default";

package/dist/{scan-C3uDzz6J.mjs → scan-C0BMdmEd.mjs}

@@ -1,10 +1,88 @@
-import { a as join, n as dirname, r as extname, t as basename } from "./dist-BVqXeR_h.mjs";
-import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
+import { a as join, n as dirname, r as extname, t as basename } from "./dist-ipQi0Q8y.mjs";
+import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
 import { t as glob } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename } from "./parse-filename-CUbj-1MP.mjs";
+import { t as MagicString } from "./dist-Cegxq8gs.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
+//#region src/pages/island-imports.ts
+/** The whole JS/TS module, or each `<script>` block of a Vue/Svelte SFC with its offset in the file. */
+function scriptBlocks(code, filename) {
+	if (!/\.(?:vue|svelte)$/.test(filename)) return [{
+		source: code,
+		offset: 0,
+		filename
+	}];
+	const scriptFilename = filename.replace(/\.(?:vue|svelte)$/, ".ts");
+	return [...code.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/gi)].map((match) => {
+		const source = match[1];
+		return {
+			source,
+			offset: match.index + match[0].indexOf(source),
+			filename: scriptFilename
+		};
+	});
+}
+/** Collect stylesheet imports from authored modules without treating dynamic imports or text as dependencies. */
+function findStaticCssImports(code, filename) {
+	if (!code.includes("import")) return [];
+	const imports = [];
+	for (const script of scriptBlocks(code, filename)) {
+		if (!script.source.includes("import")) continue;
+		const program = parseSync(script.filename, script.source).program;
+		for (const node of program.body ?? []) {
+			const source = node.source;
+			if (node.type !== "ImportDeclaration" || !isLiteral(source) || typeof source.value !== "string" || !/\.(?:css|scss|sass|less|styl|stylus|pcss|postcss)$/.test(source.value) || node.start === void 0 || node.end === void 0) continue;
+			imports.push({
+				statement: script.source.slice(node.start, node.end),
+				specifier: source.value
+			});
+		}
+	}
+	return imports;
+}
+function editIslandSource(code, edits, options) {
+	const ms = new MagicString(code);
+	for (const edit of edits) ms.overwrite(edit.start, edit.end, edit.text);
+	for (const insertion of options?.insert ?? []) ms.appendLeft(insertion.offset, insertion.text);
+	if (options?.prepend) ms.prepend(options.prepend);
+	if (options?.append) ms.append(options.append);
+	return {
+		code: ms.toString(),
+		map: ms.generateMap({ hires: true })
+	};
+}
+/** Read island import attributes from JS/TS, or script blocks inside an SFC. */
+function findIslandImports(code, filename) {
+	if (!code.includes("import") || !code.includes("island")) return [];
+	const imports = [];
+	for (const script of scriptBlocks(code, filename)) {
+		if (!script.source.includes("island")) continue;
+		const program = parseSync(script.filename, script.source).program;
+		for (const node of program.body ?? []) {
+			if (node.type !== "ImportDeclaration") continue;
+			const specifiers = node.specifiers;
+			const attributes = node.attributes;
+			const first = specifiers?.[0];
+			const attribute = attributes?.[0];
+			const key = attribute?.key;
+			const value = attribute?.value;
+			const source = node.source;
+			if (specifiers?.length !== 1 || first?.type !== "ImportDefaultSpecifier" || !isIdentifier(first.local) || attributes?.length !== 1 || !isIdentifier(key) || key.name !== "island" || !isLiteral(value) || typeof value.value !== "string" || !isLiteral(source) || typeof source.value !== "string" || source.start === void 0 || source.end === void 0 || node.start === void 0 || node.end === void 0) continue;
+			imports.push({
+				start: script.offset + node.start,
+				end: script.offset + node.end,
+				importName: first.local.name,
+				specifierRaw: script.source.slice(source.start, source.end),
+				specifier: source.value,
+				hydrate: value.value
+			});
+		}
+	}
+	return imports;
+}
+//#endregion
 //#region src/pages/layout-resolution.ts
 function isNamedLayout(layout) {
 	return "name" in layout;
@@ -95,10 +173,9 @@ const PAGE_METHODS = /* @__PURE__ */ new Set([
 const MAX_REVALIDATE = 31536e3;
 function componentLayout(source, filename) {
 	if (!source.includes("layout")) return;
-	const scripts = filename.endsWith(".vue") || filename.endsWith(".svelte") ? [...source.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/gi)].map((match) => match[1]) : [source];
-	for (const script of scripts) {
-		if (!script.includes("layout")) continue;
-		const initializer = staticExportInitializers(filename.replace(/\.(vue|svelte)$/, ".ts"), script, /* @__PURE__ */ new Set(["layout"])).get("layout");
+	for (const script of scriptBlocks(source, filename)) {
+		if (!script.source.includes("layout")) continue;
+		const initializer = staticExportInitializers(script.filename, script.source, /* @__PURE__ */ new Set(["layout"])).get("layout");
 		const value = staticLiteral(initializer);
 		if (typeof value === "string" || value === false) return value;
 	}
@@ -338,4 +415,4 @@ function extractFrontmatterLayout(source) {
 	return value;
 }
 //#endregion
-export { resolveNamedLayout as a, resolveLayoutIds as i, resolveEffectiveLayoutChain as n, toLayoutId as o, resolveLayoutChain as r, scanPages as t };
+export { resolveNamedLayout as a, findIslandImports as c, resolveLayoutIds as i, findStaticCssImports as l, resolveEffectiveLayoutChain as n, toLayoutId as o, resolveLayoutChain as r, editIslandSource as s, scanPages as t };

package/dist/{secret-BvtB7IjY.mjs → secret-bg73f1Ge.mjs}

@@ -1,43 +1,23 @@
-import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BAm2aB6Q.mjs";
-import { c as getToken } from "./auth-Dn2vw-SG.mjs";
-import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess, s as formatCount, u as note } from "./output-C50ag2r3.mjs";
-import { _ as validateSecretValues } from "./env-validation-Dxdx_5wo.mjs";
-import { r as PlatformClient } from "./client-DlDJuY0s.mjs";
-import { i as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-CP8rZs_p.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
+import { c as getToken } from "./auth-B6iOCjKI.mjs";
+import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
+import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
+import { _ as validateSecretValues } from "./env-validation-DYxjz_Wo.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {
 	console.log();
-	const platform = readDeploymentPlatform(root);
-	if (platform === "cloudflare") return runCloudflareSecretCommand(root, args);
-	if (platform === "none") throw new Error("secret: Deployment is disabled. Run `void init` to choose a platform.");
-	const token = getToken(root);
-	if (!token) {
-		log.error("Not logged in. Run `void account login` first.");
-		process.exit(1);
-	}
-	const client = new PlatformClient(token, { root });
-	const requestedProjectName = getRequestedProjectSlug({ projectSlug: args.projectName });
-	let projectId;
-	if (requestedProjectName) {
-		const projects = await client.listProjects();
-		const config = resolveProjectBySlug(projects, requestedProjectName);
-		if (!config) throw new Error(`secret: No project found with slug '${requestedProjectName}'.`);
-		projectId = config.projectId;
-	} else {
-		const config = readProjectConfig(root);
-		if (!config) throw new Error("No linked project found. Run `void project link`, `void deploy`, or pass --project <name>.");
-		projectId = config.projectId;
-	}
+	const backend = await resolveSecretBackend(root, args);
 	if (args.action === "list") {
-		const secrets = await client.listSecrets(projectId);
-		if (secrets.length === 0) {
+		const names = await backend.list();
+		if (names.length === 0) {
 			outro("No secrets set.");
 			return;
 		}
-		note(secrets.map((s) => `  ${s.name}`).join("\n"), "Secrets");
-		outro(formatCount(secrets.length, "secret"));
+		note(names.map((name) => `  ${name}`).join("\n"), "Secrets");
+		outro(formatCount(names.length, "secret"));
 		return;
 	}
 	if (args.action === "put") {
@@ -46,7 +26,7 @@ async function runSecretCommand(root, args) {
 			name: args.name,
 			value
 		}]);
-		await client.setSecret(projectId, args.name, value);
+		await backend.put(args.name, value);
 		printSuccess(`Secret ${args.name} set.`);
 		return;
 	}
@@ -60,66 +40,68 @@ async function runSecretCommand(root, args) {
 		await validateSecretValues(root, secrets);
 		log.info(`Found ${formatCount(secrets.length, "secret")}:`);
 		for (const s of secrets) log.message(`  ${s.name}`);
-		const proceed = await confirm({ message: `This will overwrite ${formatCount(secrets.length, "secret")} in the remote environment. Continue?` });
+		const proceed = await confirm({ message: `This will overwrite ${formatCount(secrets.length, "secret")} in the ${backend.target}. Continue?` });
 		if (isCancel(proceed) || !proceed) {
 			cancel("Secret sync cancelled.");
 			process.exit(0);
 		}
-		for (const s of secrets) {
-			await client.setSecret(projectId, s.name, s.value);
-			log.step(`Set ${s.name}`);
-		}
+		await backend.sync(secrets);
 		printSuccess(`Synced ${formatCount(secrets.length, "secret")}.`);
 		return;
 	}
-	await client.deleteSecret(projectId, args.name);
+	await backend.delete(args.name);
 	printSuccess(`Secret ${args.name} deleted.`);
 }
-async function runCloudflareSecretCommand(root, args) {
-	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-BlYLlowZ.mjs");
-	const context = resolveCloudflareOperationContext(root);
-	if (args.action === "list") {
-		const secrets = await listCloudflareSecrets(context);
-		if (secrets.length === 0) {
-			outro("No secrets set.");
-			return;
-		}
-		note(secrets.map((name) => `  ${name}`).join("\n"), "Secrets");
-		outro(formatCount(secrets.length, "secret"));
-		return;
+async function resolveSecretBackend(root, args) {
+	const platform = readDeploymentPlatform(root);
+	if (platform === "cloudflare") return resolveCloudflareSecretBackend(root, args);
+	if (platform === "none") throw new Error("secret: Deployment is disabled. Run `void init` to choose a platform.");
+	const token = getToken(root);
+	if (!token) {
+		log.error("Not logged in. Run `void account login` first.");
+		process.exit(1);
 	}
-	if (args.action === "put") {
-		const value = args.value ?? await readSecretValue();
-		await validateSecretValues(root, [{
-			name: args.name,
-			value
-		}]);
-		await putCloudflareSecret(context, args.name, value);
-		printSuccess(`Secret ${args.name} set.`);
-		return;
+	const client = new PlatformClient(token, { root });
+	const requestedProjectName = getRequestedProjectSlug({ projectSlug: args.projectName });
+	let projectId;
+	if (requestedProjectName) {
+		const projects = await client.listProjects();
+		const config = resolveProjectBySlug(projects, requestedProjectName);
+		if (!config) throw new Error(`secret: No project found with slug '${requestedProjectName}'.`);
+		projectId = config.projectId;
+	} else {
+		const config = readProjectConfig(root);
+		if (!config) throw new Error("No linked project found. Run `void project link`, `void deploy`, or pass --project <name>.");
+		projectId = config.projectId;
 	}
-	if (args.action === "sync") {
-		const secrets = parseDotenvFile(args.file);
-		if (secrets.length === 0) {
-			log.warn("No secrets found in file.");
-			outro("Nothing to sync.");
-			return;
-		}
-		await validateSecretValues(root, secrets);
-		log.info(`Found ${formatCount(secrets.length, "secret")}:`);
-		for (const secret of secrets) log.message(`  ${secret.name}`);
-		const proceed = await confirm({ message: `This will overwrite ${formatCount(secrets.length, "secret")} in the Cloudflare Worker. Continue?` });
-		if (isCancel(proceed) || !proceed) {
-			cancel("Secret sync cancelled.");
-			process.exit(0);
+	return {
+		target: "remote environment",
+		list: async () => (await client.listSecrets(projectId)).map((s) => s.name),
+		put: async (name, value) => {
+			await client.setSecret(projectId, name, value);
+		},
+		sync: async (secrets) => {
+			for (const s of secrets) {
+				await client.setSecret(projectId, s.name, s.value);
+				log.step(`Set ${s.name}`);
+			}
+		},
+		delete: async (name) => {
+			await client.deleteSecret(projectId, name);
 		}
-		await syncCloudflareSecrets(context, secrets);
-		printSuccess(`Synced ${formatCount(secrets.length, "secret")}.`);
-		return;
-	}
-	await deleteCloudflareSecret(context, args.name);
-	printSuccess(`Secret ${args.name} deleted.`);
+	};
+}
+async function resolveCloudflareSecretBackend(root, args) {
+	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-CrSUFRzJ.mjs");
+	const context = resolveCloudflareOperationContext(root);
+	return {
+		target: "Cloudflare Worker",
+		list: () => listCloudflareSecrets(context),
+		put: (name, value) => putCloudflareSecret(context, name, value),
+		sync: (secrets) => syncCloudflareSecrets(context, secrets),
+		delete: (name) => deleteCloudflareSecret(context, name)
+	};
 }
 const SECRET_KEY_RE = /^[A-Z][A-Z0-9_]*$/;
 function parseDotenvFile(filePath) {

package/dist/{serialize-BPvnNQuA.mjs → serialize-BtQyaYoC.mjs}

@@ -1,3 +1,11 @@
+//#region src/pages/script-json.ts
+const UNSAFE_SCRIPT_CHARS = /[<>&\u2028\u2029]/g;
+function escapeScriptJson(json) {
+	return json.replace(UNSAFE_SCRIPT_CHARS, (c) => {
+		return `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
+	});
+}
+//#endregion
 //#region src/pages/serialize.ts
 /**
 * Escape JSON for embedding inside an inline `<script type="application/json">`
@@ -6,9 +14,7 @@
 * `JSON.parse` on hydration.
 */
 function serializePageData(pageObj) {
-	return JSON.stringify(pageObj).replace(/[<>&\u2028\u2029]/g, (c) => {
-		return `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
-	});
+	return escapeScriptJson(JSON.stringify(pageObj));
 }
 //#endregion
-export { serializePageData as t };
+export { escapeScriptJson as n, serializePageData as t };

package/dist/{skills-BgVMvQdy.mjs → skills-C_yRTg0g.mjs}

@@ -1,6 +1,6 @@
-import { a as join, l as relative } from "./dist-BVqXeR_h.mjs";
-import { L as log } from "./dist-D3m88sjf.mjs";
-import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
+import { a as join, s as relative } from "./dist-ipQi0Q8y.mjs";
+import { L as log } from "./dist-BVdsO7Py.mjs";
+import { r as getPackageDir } from "./agents-CuNtT0D_.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, symlinkSync } from "node:fs";
 //#region src/cli/skills.ts
 function parseSkills(skillsDir) {