void 0.27.0 → 1.0.3

package/docs/integrations/frameworks/analog.md

@@ -26,7 +26,6 @@ Void provides the local Cloudflare binding runtime. `nitro-cloudflare-dev` creat
 ### 3. Configure `vite.config.ts`
 
 ```ts
-import { resolve } from 'node:path';
 import analog from '@analogjs/platform';
 import { defineConfig } from 'vite';
 import { voidPlugin } from 'void';
@@ -41,12 +40,7 @@ export default defineConfig({
       nitro: {
         preset: 'cloudflare-module',
         cloudflareDev: { configPath: './.void-wrangler.jsonc' },
-        modules: ['nitro-cloudflare-dev'],
-        alias: {
-          // Nitro has its own bundler that doesn't use Vite aliases.
-          // Duplicate @schema here so Nitro can resolve it.
-          '@schema': resolve(__dirname, 'db/schema.ts'),
-        },
+        modules: ['nitro-cloudflare-dev', 'void/nitro'],
       },
     }),
     voidPlugin(),
@@ -54,6 +48,8 @@ export default defineConfig({
 });
 ```
 
+The `void/nitro` module gives Analog API routes and page server loads your app's `void/db` and `@schema`.
+
 ### 4. Create `void.config.ts`
 
 Void generates the Cloudflare config used by Analog's development runtime:
@@ -98,10 +94,6 @@ export const load = async ({ event }: PageServerLoad) => {
 };
 ```
 
-::: warning ⚠️ Analog limitation
-Use `db.select().from(table)` for database queries in Analog. The `db.query.*` relational API is not available.
-:::
-
 ### Other resources
 
 Use [KV](../../guide/kv.md), [object storage](../../guide/storage.md), and [AI](../../guide/ai.md) from server-side code with the same imports as a Void app. Add [cron jobs](../../guide/jobs.md) in `crons/` and [queue consumers](../../guide/queues.md) in `queues/`.

package/docs/integrations/frameworks/nuxt.md

@@ -30,23 +30,24 @@ import { resolve } from 'node:path';
 import { voidPlugin } from 'void';
 
 export default defineNuxtConfig({
+  alias: {
+    '@schema': resolve(import.meta.dirname, 'db/schema.ts'),
+  },
   nitro: {
     preset: 'cloudflare-module',
-    cloudflareDev: { configPath: './.void-wrangler.jsonc' },
+    modules: ['void/nitro'],
+    cloudflare: { dev: { configPath: './.void-wrangler.jsonc' } },
     // Required for Nuxt 4.6.0 on Windows.
     externals: {
       inline: [/[\\/]node_modules[\\/]nuxt[\\/]dist[\\/]/],
     },
-    alias: {
-      // Nitro has its own bundler that doesn't use Vite aliases.
-      // Duplicate @schema here so Nitro can resolve it.
-      '@schema': resolve(import.meta.dirname, 'db/schema.ts'),
-    },
   },
   vite: { plugins: [voidPlugin()] },
 });
 ```
 
+The `void/nitro` module gives Nuxt server routes your app's `void/db` and `@schema`. The top-level `alias` lets `nuxi typecheck` resolve `@schema`, because Nuxt also checks server routes with the app's types. `cloudflare.dev` gives the development server the bindings from Void's generated Cloudflare config; Nuxt runs it in development when `compatibilityDate` is `2025-07-15` or later.
+
 ### 4. Create `void.config.ts`
 
 Void generates the Cloudflare config used by Nuxt's development runtime:
@@ -88,10 +89,6 @@ export default defineEventHandler(async () => {
 });
 ```
 
-::: warning ⚠️ Nuxt limitation
-Use `db.select().from(table)` for database queries in Nuxt. The `db.query.*` relational API is not available.
-:::
-
 ### Other resources
 
 Use [KV](../../guide/kv.md), [object storage](../../guide/storage.md), and [AI](../../guide/ai.md) from server-side code with the same imports as a Void app. Add [cron jobs](../../guide/jobs.md) in `crons/` and [queue consumers](../../guide/queues.md) in `queues/`.

package/docs/integrations/nodejs-bun-deno.md

@@ -80,6 +80,8 @@ dist/
 
 `vite preview` also uses `app.js` to serve your built app locally.
 
+Installed packages that depend on `void` are bundled into `dist/ssr`. If one of their dependencies uses a native addon or reads files next to its own code, add that dependency, in the version the package uses, to your app's `dependencies`. The build then leaves it to Node.
+
 ## What Works
 
 These Void features work identically across all targets:

package/docs/reference/api/deploy.md

@@ -0,0 +1,23 @@
+# Deployment artifacts
+
+Use `void/deploy` from Node.js to prepare a built Void app for a managed platform deployment without platform credentials.
+
+Build the app in managed mode inside its isolated environment:
+
+```sh
+VOID_DEPLOY_BUILD=1 VOID_DEPLOY_PROJECT_ID=artifact npm run build
+```
+
+These values select a platform-compatible build. `artifact` is a build marker, not an existing project ID or a credential; the target project is selected during publish approval.
+
+```ts
+import { prepareDeployArtifact } from 'void/deploy';
+
+const { artifact, assets } = await prepareDeployArtifact('/path/to/app');
+```
+
+`artifact` contains the deployment manifest, content-addressed asset metadata, and base64 Worker modules. `assets` maps asset URL paths to base64 bytes. Keep this result immutable while requesting [publish approval](/guide/platform/administration/connected-apps).
+
+Preparation packages existing build output; it does not build, contact a platform, provision resources, or deploy. It supports Void Cloudflare Worker builds. Node targets, static output, remote data, deploy-time prerendering, Sandbox, and Live resources require the normal `void deploy` workflow instead.
+
+Run preparation inside the same isolated environment as the app build. App configuration and build plugins execute project code; keep platform credentials on the publishing server.

package/docs/reference/api/pages.md

@@ -218,6 +218,8 @@ Imported from `"@void/solid"`.
 
 Solid `Link` GET `data` is merged into the rendered `href` query string. Primitive values are serialized with `String(value)`, arrays become repeated keys, `null` and `undefined` are omitted, and nested objects throw. `prefetch` and `reloadDocument` are GET-only and throw for mutation links.
 
+Solid re-creates the page on GET navigation and whenever the route or its params change, so `useForm()` picks up the destination record's URL and defaults; layouts persist. Within the same record, back/forward, mutations, and `router.refresh()` keep the page and update its props in place, as do resolved deferred props, so read props inside JSX or memos instead of copying them in the component body. Set `preserveState` explicitly to override the default for navigation within the same record.
+
 ## Markdown Package {#markdown-package}
 
 The optional `@void/md` package adds Markdown pages to Pages Routing. Install it alongside a Pages adapter and add `voidMarkdown()` to your Vite plugins.

package/docs/reference/api.md

@@ -25,6 +25,7 @@ Use this reference to find public imports, signatures, and return types. For set
 | [Durable State and WebSockets](./api/durable.md)   | Persistent objects and typed connections.                       |
 | [Database and seeding](./api/database.md)          | Queries, operators, and seed scripts.                           |
 | [KV, storage, AI, and logging](./api/resources.md) | Resource clients, cache revalidation, and logs.                 |
+| [Deployment artifacts](./api/deploy.md)            | Package built apps for managed deployment.                      |
 | [Types](./api/types.md)                            | Handler context, route types, and head metadata.                |
 | [Environment variables](./api/env.md)              | Validated environment values and binding types.                 |
 | [Pages adapters](./api/pages.md)                   | React, Vue, Svelte, Solid, and Markdown.                        |
@@ -41,7 +42,7 @@ Import Void's app-facing APIs from these paths:
 | `void/client`             | `fetch`, `fetchStream`, `FetchError`, `auth`, `createAuthClient`, `AuthUser`, `AuthSession`, `AuthState`                                                                                                                                                                                                                                                                                                                                                                       |
 | `void/client/{framework}` | Same as `void/client`, with framework-specific Better Auth clients for `react`, `vue`, `svelte`, and `solid`                                                                                                                                                                                                                                                                                                                                                                   |
 | `void/ws`                 | `defineRoom`, `defineWebSocket`, `connect`, WebSocket context and connection types                                                                                                                                                                                                                                                                                                                                                                                             |
-| `void/durable`            | `defineDurableState`, typed state/RPC/context/migration types                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `void/durable`            | `defineDurableState`, `defineDurableObject`, typed state/RPC/context/migration types                                                                                                                                                                                                                                                                                                                                                                                           |
 | `void/sse`                | `eventStream`, `formatSse`, `formatSseText`, `getLastEventId`, `SseStreamClosedError`, SSE message and stream types                                                                                                                                                                                                                                                                                                                                                            |
 | `void/sse/client`         | `connectEventStream`, browser `EventSource` wrapper types                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | `void/live`               | `defineLiveStream`, SSE topic fanout runtime types. Server-only.                                                                                                                                                                                                                                                                                                                                                                                                               |
@@ -67,4 +68,5 @@ Import Void's app-facing APIs from these paths:
 | `void/queues`             | `queues` proxy for sending messages to typed queues                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | `void/sandbox`            | `getSandbox`, `sandbox`, `SandboxLimitError`, `SandboxUnavailableError`, and the SDK 1.0 file, backup, and mount helpers. `getSandbox(id)` resolves a client. Commands, files, port requests, and process completion return promises; limits reject with `SandboxLimitError`, which extends `UsageLimit`. Container state lasts until inactivity (default ten minutes), a crash, or a restart. See [Sandboxes](../guide/sandboxes.md) for the API and deployment requirements. |
 | `void/env`                | `defineEnv`, `env`, schema helpers (`string`, `number`, `boolean`, `url`, `email`, `oneOf`, `json`), and global Cloudflare env types                                                                                                                                                                                                                                                                                                                                           |
+| `void/nitro`              | Nitro module for Nuxt and Analog. Add `'void/nitro'` to the Nitro `modules` so server routes get the app's `void/db` and `@schema`                                                                                                                                                                                                                                                                                                                                             |
 | `void/sveltekit`          | SvelteKit integration helpers: `withVoidTSConfig()` and `mergeVoidSvelteKitTsconfig()`                                                                                                                                                                                                                                                                                                                                                                                         |

package/docs/reference/cli/database.md

@@ -24,15 +24,21 @@ Show migration status. Displays which migrations are applied or pending locally,
 
 ## `void db reset` {#void-db-reset}
 
-Drop the development database and re-apply all migrations. D1 resets the local database; PostgreSQL and MySQL drop all tables in the `DATABASE_URL` database from `.env`. Does not affect the deployed database.
+```
+void db reset [--yes]
+```
+
+Drop the development database and re-apply all migrations. D1 resets the local database; PostgreSQL and MySQL drop all tables in the `DATABASE_URL` database from `.env`.
+
+When that `DATABASE_URL` points to a host other than `localhost`, Void names the database and asks before dropping its tables. Pass `--yes` to skip the prompt in scripts and CI; without a terminal, the command stops unless `--yes` is set. If `.env` uses the same URL as your deployment (for example after `void db connect`), reset drops the deployed tables.
 
 ## `void db seed` {#void-db-seed}
 
 ```
-void db seed [--file <path>]
+void db seed [--file <path>] [--yes]
 ```
 
-Reset the local database, re-apply all migrations, then execute a seed file.
+Reset the local database, re-apply all migrations, then execute a seed file. The reset works like `void db reset`, including the prompt and `--yes`.
 
 If `--file` is omitted, Void looks for default seed files in this order: `db/seed.ts`, `db/seed.mts`, `db/seed.js`, `db/seed.mjs`, `db/seed.sql`.
 

package/docs/reference/cli/platform-installation.md

@@ -40,7 +40,7 @@ The installed platform needs a separate runtime token to provision resources for
 
 To enable email during install or upgrade, set both `VOID_EMAIL_SENDER_DOMAIN` and `VOID_EMAIL_SHARED_ZONE_ID`. Void records the pair for later upgrades; supplying only one is an error.
 
-Use `--dashboard-url https://dash.example.com` when deploying the optional user
+Use `--dashboard-url `[`https://dash.example.com`](https://dash.example.com) when deploying the optional user
 dashboard separately. The URL must be an HTTPS origin without credentials, a
 path, query, or fragment. Void permits that origin's login callbacks and saves
 it for later maintenance; it does not deploy a dashboard Worker. Omission keeps
@@ -58,11 +58,15 @@ authentication file. Upgrades preserve administrator settings.
 
 New resources use `void-<name>-<role>` names; choose an unused installation name. The installer opens setup pages for missing credentials and reuses values already supplied.
 
-During Access setup, choose existing company policies or **Create new** for manual
-setup instructions and an account dashboard link. After you save the policy and
-confirm completion, Void reloads the list so you can select it and continue in the
-same run. **Refresh list** reloads policies created in another window. Your
-identity-provider choice and still-available policy selections are retained.
+During Access setup, choose existing company policies or **Create in Cloudflare**
+for manual setup instructions and an account dashboard link. After you save the
+policy and confirm completion, Void reloads the list so you can select it and
+continue in the same run. When Void creates the Access applications, **Allow my
+company’s email domain** creates an Allow policy for the domains you enter and
+selects it. **Refresh list** reloads policies created in another window. Your
+identity-provider choice and still-available policy selections are retained. If a
+selected policy does not restrict sign-in to company identities, Void explains why
+and asks again.
 
 Installation progress and partial credentials are saved encrypted locally. Rerun the installer to continue unfinished setup, or pass `--resume --name <id>`. Use lifecycle commands for completed installations.
 
@@ -98,7 +102,7 @@ Use these commands to recover, update, pause, or remove an installation:
 void platform discover [--account <id>] [--installation <id-or-name>]
 void platform upgrade [id] [--runtime <path>] [--dashboard-url <origin>] [--plan] [--yes]
 void platform rollback [id] --runtime <earlier-path> [--from-runtime <current-path>] [--plan] [--yes]
-void platform repair [id] [--runtime <path>] [--dashboard-url <origin>] [--plan] [--yes]
+void platform repair [id] [--runtime <path>] [--dashboard-url <origin>] [--auth-config <path>] [--plan] [--yes]
 void platform disable [id] [--plan] [--yes]
 void platform enable [id] [--runtime <path>] [--plan] [--yes]
 void platform uninstall [id] [--plan] [--purge-data | --purge-resources] [--keep-zone] [--yes]
@@ -113,6 +117,12 @@ use `repair --dashboard-url <origin>` or `upgrade --dashboard-url <origin>`.
 Preview with `--plan` first. Existing Access protection must cover the configured
 dashboard origin before maintenance can proceed. See [Optional Dashboard](../../guide/platform/installation/domains.md#optional-dashboard).
 
+While first administrator setup is pending, `repair --auth-config <path>` replaces
+the login settings from a file in the install format and prints a new setup code.
+Interactive repair offers the same change with the saved values filled in. Login
+methods and Access protection stay as installed. Run it on the computer that
+installed the platform. See [First administrator sign-in fails](../../guide/platform/installation/maintenance.md#first-administrator-sign-in-fails).
+
 After discovery on another machine, set `VOID_PLATFORM_DATABASE_URL`. See [Manage an installation from another machine](../../guide/platform/installation/maintenance.md#manage-an-installation-from-another-machine) for the secrets needed to recreate a missing Worker.
 
 | Command     | Behavior                                                                                                    |
@@ -137,6 +147,8 @@ An upgrade completes after the new Workers pass health checks. If rollout fails,
 
 `platform rollback` restores a compatible earlier runtime without reversing database migrations. Pass its files with `--runtime`; if the installed version is custom, also supply that version with `--from-runtime`. Void refuses incompatible targets.
 
+If project Zero Trust is on and no platform user exists yet, uninstall turns it off and deletes its Access applications first. Run it on the computer that installed the platform.
+
 Uninstall verifies remote ownership before removing anything. Data resources are retained unless you pass `--purge-data`. Workers, the Queues they use, R2, AI Gateway, DNS records, routes, custom domains, adopted resources, external PostgreSQL, and zones are retained for manual review.
 
 `--purge-resources` includes `--purge-data` and also deletes every other resource the installation created, including Workers, Queues, R2, AI Gateway, the platform DNS record, routes, custom domains, and installer-created Access resources. It removes only the Email Routing rules that send mail to the platform email gateway, and keeps zones, adopted resources, external PostgreSQL, other Email Routing settings, and API tokens. A route, custom domain, DNS record, or Access resource that no longer matches the installation's record is kept and listed. It refuses before any change while projects remain or resource reads are denied. Use the Edit permissions listed by `--plan`; read checks cannot verify them, so a denied deletion can stop uninstall after changes have begun. Rerun the same command to continue after an interruption, or after a plain or `--purge-data` uninstall stopped.

package/docs/reference/cli/setup.md

@@ -33,6 +33,8 @@ void init [--tsconfig] [--github] [--git | --no-git]
 
 Set up a new or existing Void project. In an empty directory, choose Vite+ or Vite, a framework, and a D1, PostgreSQL, MySQL, or Static Pages starter.
 
+Vite+ projects install dependencies through `vp install`; no global Vite+ installation is required. Void preserves existing package-manager versions and lockfiles. New Vite+ projects without a package-manager configuration use pnpm without pinning a version.
+
 In an existing app, Void adds missing dependencies and scripts and updates the Vite config. If it cannot edit your config, it prints the snippet to add.
 
 The wizard also sets up TypeScript, agent instructions, environment declarations, and a deployment target. Choose Cloudflare, a Void platform, or skip deployment setup. If you skip sign-in, run `void connect` when you're ready. See [Quick Start](../../guide/quickstart.md).

package/docs/reference/config.md

@@ -297,6 +297,8 @@ Curated Cloudflare Workers configuration. `void init` pins `compatibility_date`
 
 `worker.vars` values must be strings. Root `.env` values override them during local development only. Production builds do not load `.env`, and reject any `worker.vars` name declared as a server key in `env.ts`. Use `void secret put` for production server values.
 
+Managed deployments include `worker.vars` as plain-text bindings. A remote secret with the same name takes precedence. To use the configured variable instead, remove that remote secret and deploy again. Secret deletion changes the running Worker immediately, so plan this migration during a maintenance window.
+
 `worker.limits.cpu_ms` sets the CPU time limit per request, from 1 to 300000 ms. On a Void platform, deploy fails if the limit exceeds the account plan; lower it in `void.config.ts` before retrying. Rollback instead caps the old limit at the current plan ceiling. On direct deploys, [Cloudflare enforces the value](https://developers.cloudflare.com/workers/platform/limits/#cpu-time): Workers Free allows up to 10 ms and Workers Paid up to 300000 ms per request.
 
 ```json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.27.0",
+  "version": "1.0.3",
   "description": "Full-stack framework and deployment CLI for Cloudflare Workers, powered by Vite.",
   "homepage": "https://void.cloud",
   "bugs": {
@@ -26,23 +26,15 @@
   ],
   "type": "module",
   "imports": {
-    "#self": "./dist/index.mjs",
     "#self/_env": "./dist/runtime/env.mjs",
     "#self/email": "./dist/runtime/email.mjs",
     "#self/env": "./dist/runtime/env-public.mjs",
     "#self/client": "./dist/runtime/client.mjs",
     "#self/handler": "./dist/runtime/handler.mjs",
-    "#self/pages-head": "./dist/pages/head.mjs",
-    "#self/pages-protocol": "./dist/pages/protocol.mjs",
     "#self/queues": "./dist/runtime/queues.mjs",
     "#self/remote": "./dist/runtime/remote/index.mjs",
     "#self/remote/binding-handler": "./dist/runtime/remote/binding-handler.mjs",
-    "#self/response": "./dist/runtime/response.mjs",
     "#self/sandbox": "./dist/runtime/sandbox.mjs",
-    "#self/sse": "./dist/runtime/sse.mjs",
-    "#self/sse/client": "./dist/runtime/sse-client.mjs",
-    "#self/live": "./dist/runtime/live.mjs",
-    "#self/live/client": "./dist/runtime/live-client.mjs",
     "#self/runtime/live-server": "./dist/runtime/live-server.mjs",
     "#self/runtime/fetch": "./dist/runtime/fetch.mjs",
     "#self/runtime/fetch-stream": "./dist/runtime/fetch-stream.mjs",
@@ -98,6 +90,11 @@
     "./routes": {
       "types": "./dist/routes-stub.d.mts"
     },
+    "./nitro": {
+      "types": "./dist/nitro.d.mts",
+      "import": "./dist/nitro.mjs",
+      "require": "./dist/nitro.mjs"
+    },
     "./sveltekit": {
       "types": "./dist/sveltekit.d.mts",
       "import": "./dist/sveltekit.mjs",
@@ -335,29 +332,33 @@
       "types": "./dist/runtime/limits.d.mts",
       "import": "./dist/runtime/limits.mjs",
       "require": "./dist/runtime/limits.mjs"
+    },
+    "./deploy": {
+      "types": "./dist/deploy.d.mts",
+      "import": "./dist/deploy.mjs"
     }
   },
   "dependencies": {
-    "@cloudflare/build-output-utils": "^0.9.0",
-    "@cloudflare/codemods": "^0.4.2",
-    "@cloudflare/config": "^0.24.1",
-    "@cloudflare/sandbox": "1.0.0",
-    "@cloudflare/vite-plugin": "^1.63.1",
-    "@cloudflare/workers-auth": "^0.13.1",
-    "@cloudflare/workers-types": "^5.20261009.1",
-    "@napi-rs/keyring": "^2.1.0",
-    "@void/deploy-cloudflare": "0.27.0",
-    "@void/deploy-core": "0.27.0",
-    "@void/edge": "0.27.0",
-    "@void/isr": "0.27.0",
-    "@void/platform": "0.27.0",
+    "@cloudflare/build-output-utils": "^0.9.2",
+    "@cloudflare/codemods": "^0.5.0",
+    "@cloudflare/config": "^0.26.0",
+    "@cloudflare/sandbox": "^1.0.1",
+    "@cloudflare/vite-plugin": "^1.64.0",
+    "@cloudflare/workers-auth": "^0.14.0",
+    "@cloudflare/workers-types": "^5.20261014.1",
+    "@napi-rs/keyring": "^2.1.1",
+    "@void/deploy-cloudflare": "1.0.3",
+    "@void/deploy-core": "1.0.3",
+    "@void/edge": "1.0.3",
+    "@void/isr": "1.0.3",
+    "@void/platform": "1.0.3",
     "better-auth": "^1.7.7",
     "better-sqlite3": "^13.0.3",
     "blake3-jit": "^1.1.0",
-    "cf": "^1.0.0-beta.14",
+    "cf": "^1.0.0-beta.17",
     "drizzle-arktype": "^0.1.3",
     "drizzle-kit": "^0.31.11",
-    "drizzle-orm": "^0.45.3",
+    "drizzle-orm": "^0.45.4",
     "drizzle-valibot": "^0.4.2",
     "drizzle-zod": "^0.8.3",
     "email-validator": "^2.0.4",
@@ -365,22 +366,24 @@
     "ignore": "^7.0.12",
     "jiti": "^2.7.0",
     "jsonc-parser": "^3.3.1",
-    "mime": "^4.1.0",
-    "miniflare": "5.20261006.1-alpha",
+    "mime": "^4.1.1",
+    "miniflare": "5.20261012.0-beta",
     "minimatch": "^10.2.6",
-    "mysql2": "^3.24.5",
+    "mysql2": "^3.24.6",
     "pg": "^8.23.1",
     "postal-mime": "^4.0.5",
-    "proper-lockfile": "^4.1.2"
+    "proper-lockfile": "^4.1.2",
+    "terminal-link": "^5.0.0",
+    "yaml": "^2.9.1"
   },
   "devDependencies": {
-    "@electric-sql/pglite": "0.5.8",
+    "@electric-sql/pglite": "0.5.9",
     "@types/better-sqlite3": "^9.6.0",
-    "@types/node": "^26.6.4",
+    "@types/node": "^26.6.5",
     "@types/pg": "^8.23.1",
     "@types/proper-lockfile": "^4.1.4",
-    "@voidzero-dev/vite-plus-prompts": "1.1.0",
-    "arktype": "^2.2.7",
+    "@voidzero-dev/vite-plus-prompts": "1.2.0",
+    "arktype": "^2.2.8",
     "ci-info": "^4.4.0",
     "estree-walker": "^3.0.3",
     "fast-wrap-ansi": "^0.2.2",
@@ -392,12 +395,12 @@
     "tinyglobby": "^0.2.17",
     "typescript": "7.0.2",
     "valibot": "^1.5.0",
-    "vite": "npm:@voidzero-dev/vite-plus-core@1.1.0",
-    "vite-plus": "1.1.0",
-    "zod": "^4.6.5"
+    "vite": "npm:@voidzero-dev/vite-plus-core@1.2.0",
+    "vite-plus": "1.2.0",
+    "zod": "^4.6.7"
   },
   "peerDependencies": {
-    "@void/md": "0.27.0",
+    "@void/md": "1.0.3",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/sandbox.Dockerfile

@@ -1,4 +1,4 @@
 FROM node:26.10.0-trixie-slim
-COPY --from=docker.io/cloudflare/sandbox:1.0.0 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
+COPY --from=docker.io/cloudflare/sandbox:1.0.1 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
 WORKDIR /workspace
 CMD ["sleep", "infinity"]

package/skills/void/SKILL.md

@@ -51,6 +51,7 @@ the app's existing saved destination, including when the target project is new.
 | SSR and caching                            | `docs/guide/ssr.md`, `docs/guide/edge/*.md`                                               |
 | Rewrites, redirects, fallbacks             | `docs/guide/edge/rewrites.md`, `docs/guide/edge/redirects.md`, `docs/reference/config.md` |
 | Static site generation                     | `docs/guide/ssg.md`                                                                       |
+| Connected apps and artifact preparation    | `docs/guide/platform/administration/connected-apps.md`, `docs/reference/api/deploy.md`    |
 | Deployment and CI                          | `docs/guide/deployment.md`, `docs/reference/cli/deploy.md`                                |
 | Install or maintain a company platform     | `docs/guide/self-hosted-platform.md`, `docs/reference/cli/platform-installation.md`       |
 | Develop or deploy a platform fork          | `docs/guide/platform-development.md`, `docs/guide/self-hosted-platform.md`                |
@@ -79,7 +80,7 @@ the app's existing saved destination, including when the target project is new.
 - Read the relevant guide before changing configuration, persistent resources,
   authentication, or deployment workflows. The guides define current behavior;
   avoid copying a second set of instructions into this skill.
-- Before moving deployed Durable State or WebSocket definitions, read their
+- Before moving deployed Durable State, native Durable Object, or WebSocket definitions, read their
   guides and use `void info` to preserve resource names and instance keys.
 - Declare application environment keys in `env.ts` and access them through
   `void/env`; follow `docs/guide/env-vars.md` for local and production values.

package/dist/auth-LMJcNESe.mjs

@@ -1,2 +0,0 @@
-import { a as getApiUrl, m as runPlatformLogin, s as getSiteDomain } from "./auth-Dn2vw-SG.mjs";
-export { getApiUrl, getSiteDomain, runPlatformLogin };

package/dist/cf-build-output-H9a97vME.mjs

@@ -1,2 +0,0 @@
-import { t as prepareCfBuildOutput } from "./cf-build-output-DjvB_872.mjs";
-export { prepareCfBuildOutput };

package/dist/cf-user-agent-lKblH3zU.mjs

@@ -1,17 +0,0 @@
-import { a as join } from "./dist-BVqXeR_h.mjs";
-import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
-import { readFileSync } from "node:fs";
-//#region src/cli/cf-user-agent.ts
-let voidUserAgent;
-let cfCliVersion;
-function getVoidUserAgent() {
-	if (voidUserAgent === void 0) voidUserAgent = `void/${JSON.parse(readFileSync(join(getPackageDir(), "package.json"), "utf8")).version}`;
-	return voidUserAgent;
-}
-/** cf prepends `cf-cli/` to CLI_VERSION for both API requests and uploads. */
-function getCfCliVersion() {
-	if (cfCliVersion === void 0) cfCliVersion = `${JSON.parse(readFileSync(new URL(import.meta.resolve("cf/package.json")), "utf8")).version} ${getVoidUserAgent()}`;
-	return cfCliVersion;
-}
-//#endregion
-export { getVoidUserAgent as n, getCfCliVersion as t };

package/dist/client-tso2OfcG.mjs

@@ -1,2 +0,0 @@
-import { r as PlatformClient } from "./client-DlDJuY0s.mjs";
-export { PlatformClient };

package/dist/cloudflare-operations-BlYLlowZ.mjs

@@ -1,2 +0,0 @@
-import { _ as resolveCloudflareD1Context, b as tailCloudflareWorker, c as listCloudflareDomains, g as readCloudflareWorkerStatus, h as readCloudflareD1Migrations, l as listCloudflareSecrets, m as putCloudflareSecret, n as applyCloudflareD1Migrations, o as deleteCloudflareSecret, r as changeCloudflareDomain, s as executeCloudflareD1Sql, t as activateCloudflareExistingVersion, v as resolveCloudflareOperationContext, y as syncCloudflareSecrets } from "./cloudflare-operations-CwI1bChl.mjs";
-export { activateCloudflareExistingVersion, applyCloudflareD1Migrations, changeCloudflareDomain, deleteCloudflareSecret, executeCloudflareD1Sql, listCloudflareDomains, listCloudflareSecrets, putCloudflareSecret, readCloudflareD1Migrations, readCloudflareWorkerStatus, resolveCloudflareD1Context, resolveCloudflareOperationContext, syncCloudflareSecrets, tailCloudflareWorker };

package/dist/collect-DLyFDiKW.mjs

@@ -1,2 +0,0 @@
-import { t as collectMigrations } from "./collect-DiTn9yr6.mjs";
-export { collectMigrations };

package/dist/config-5r-YpMC-.mjs

@@ -1,2 +0,0 @@
-import { m as readConfig, u as getDatabaseDialect } from "./config-DiowPT80.mjs";
-export { getDatabaseDialect, readConfig };

package/dist/config-B_ggY-IO.mjs

@@ -1,89 +0,0 @@
-import { a as join, i as isAbsolute } from "./dist-BVqXeR_h.mjs";
-import { fileURLToPath } from "node:url";
-import { isSandboxRegistryImage } from "@void/deploy-core";
-//#region src/sandbox/config.ts
-const DEFAULT_SANDBOX_BINDING = "SANDBOX";
-const DEFAULT_SANDBOX_CLASS_NAME = "SandboxV1";
-const DEFAULT_SANDBOX_CONTAINER_NAME = "void-sandbox-v1";
-const SANDBOX_MIGRATION_TAG = "void-sandbox-v2";
-function isSandboxEnabled(config) {
-	return config.sandbox !== void 0 && config.sandbox !== false;
-}
-function getDefaultSandboxImage() {
-	return fileURLToPath(new URL("../../sandbox.Dockerfile", import.meta.resolve("void/sandbox")));
-}
-function getDefaultSandboxPlatformImage() {
-	return "cloudflare/debian-trixie";
-}
-function isLocalSandboxImage(image) {
-	return isAbsolute(image) || image.startsWith("./") || image.startsWith("../") || image.toLowerCase().includes("dockerfile");
-}
-function requiresSandboxPlatformImage(config) {
-	if (typeof config.sandbox !== "object" || config.sandbox === null) return false;
-	return typeof config.sandbox.image === "string" && isLocalSandboxImage(config.sandbox.image) && config.sandbox.platformImage === void 0;
-}
-function resolveSandboxConfig(config, root = process.cwd()) {
-	const raw = typeof config.sandbox === "object" ? config.sandbox : {};
-	const image = raw.image ?? getDefaultSandboxImage();
-	const imageBuildContext = raw.imageBuildContext;
-	const platformImage = raw.platformImage ?? (raw.image && !isLocalSandboxImage(raw.image) ? raw.image : getDefaultSandboxPlatformImage());
-	if (!isLocalSandboxImage(image) && !isSandboxRegistryImage(image)) throw new Error("sandbox.image must be a Dockerfile or a digest-pinned Cloudflare registry image (registry.cloudflare.com/<account>/<image>@sha256:<digest>).");
-	if (platformImage !== getDefaultSandboxPlatformImage() && !isSandboxRegistryImage(platformImage)) throw new Error("sandbox.platformImage must be a digest-pinned Cloudflare registry image (registry.cloudflare.com/<account>/<image>@sha256:<digest>).");
-	return {
-		binding: raw.binding ?? "SANDBOX",
-		className: raw.className ?? "SandboxV1",
-		containerName: raw.containerName ?? DEFAULT_SANDBOX_CONTAINER_NAME,
-		image: resolveSandboxImage(image, root),
-		platformImage,
-		...imageBuildContext && { imageBuildContext: isAbsolute(imageBuildContext) ? imageBuildContext : join(root, imageBuildContext) },
-		...raw.instanceType && { instanceType: raw.instanceType }
-	};
-}
-function resolveSandboxImage(image, root) {
-	if (!isLocalSandboxImage(image) || isAbsolute(image)) return image;
-	return join(root, image);
-}
-function sandboxContainerConfig(sandbox) {
-	return {
-		name: sandbox.containerName,
-		class_name: sandbox.className,
-		scheduling_policy: "durable_object",
-		images: { default: isLocalSandboxImage(sandbox.image) ? {
-			dockerfile: sandbox.image,
-			...sandbox.imageBuildContext && { build_context: sandbox.imageBuildContext }
-		} : { image: sandbox.image } }
-	};
-}
-/** Resolve the final local storage kind without recreating a renamed or deleted class. */
-function resolveSandboxMigrationStorage(migrations, className) {
-	const storage = /* @__PURE__ */ new Map();
-	for (const migration of migrations) {
-		for (const name of migration.new_classes ?? []) storage.set(name, "legacy-kv");
-		for (const name of migration.new_sqlite_classes ?? []) storage.set(name, "sqlite");
-		for (const rename of migration.renamed_classes ?? []) {
-			const sqlite = storage.get(rename.from);
-			storage.delete(rename.from);
-			storage.set(rename.to, sqlite ?? "unknown");
-		}
-		for (const transfer of migration.transferred_classes ?? []) storage.set(transfer.to, "unknown");
-		for (const name of migration.deleted_classes ?? []) storage.delete(name);
-	}
-	return storage.get(className);
-}
-function hasSandboxSqliteMigration(migrations, className) {
-	return resolveSandboxMigrationStorage(migrations, className) === "sqlite";
-}
-/** Refuse namespace reuse before either uploader can change a live Worker. */
-function assertSandboxNamespaceConfig(config, sandbox) {
-	const containers = Array.isArray(config.containers) ? config.containers : [];
-	const durable = config.durable_objects;
-	const binding = durable?.bindings?.find((entry) => entry.name === sandbox.binding);
-	if (binding && (binding.script_name !== void 0 || binding.environment !== void 0)) throw new Error(`sandbox: binding '${sandbox.binding}' must reference the local '${sandbox.className}' class. Choose another sandbox.binding name to preserve the existing external Durable Object.`);
-	const migrations = Array.isArray(config.migrations) ? config.migrations : [];
-	const storage = resolveSandboxMigrationStorage(migrations, sandbox.className);
-	if (storage === "legacy-kv" || storage === "unknown") throw new Error(`sandbox: class '${sandbox.className}' needs SQLite storage, but its existing namespace has ${storage} storage. Preserve the existing migration history and choose a fresh Worker name or a new sandbox.className and sandbox.binding.`);
-	if (storage !== "sqlite" && migrations.some((migration) => migration.tag === "void-sandbox-v2")) throw new Error(`sandbox: migration tag '${SANDBOX_MIGRATION_TAG}' is already configured for another class. Keep the existing history and choose a fresh Worker for Sandbox.`);
-	if (containers.some((container) => container.class_name === sandbox.className && container.scheduling_policy !== "durable_object") || durable?.bindings?.some((binding) => binding.name === sandbox.binding && binding.class_name !== sandbox.className)) throw new Error("Sandbox SDK 1.0 needs a new Durable Object namespace. Back up existing Sandbox data and deploy to a fresh Worker name with the new Sandbox configuration; remove legacy Sandbox bindings, containers, and migrations from that new Worker configuration. See https://developers.cloudflare.com/containers/guides/migrate-to-durable-object-scheduling-policy/.");
-}
-//#endregion
-export { hasSandboxSqliteMigration as a, resolveSandboxConfig as c, assertSandboxNamespaceConfig as i, sandboxContainerConfig as l, DEFAULT_SANDBOX_CLASS_NAME as n, isSandboxEnabled as o, SANDBOX_MIGRATION_TAG as r, requiresSandboxPlatformImage as s, DEFAULT_SANDBOX_BINDING as t };

package/dist/config-BtSFvXZx.mjs

@@ -1,2 +0,0 @@
-import { n as writeDrizzleConfig, t as withPrivateDrizzleConfig } from "./config-CLYAosnQ.mjs";
-export { withPrivateDrizzleConfig, writeDrizzleConfig };