void 0.28.0 → 1.0.3

package/dist/runner-mysql-BhRaONkO.mjs

@@ -0,0 +1,146 @@
+import { t as collectMigrations } from "./collect-xjffdCdk.mjs";
+import { a as mySqlMigrationLockError, o as mySqlMigrationLockName, s as readMySqlMigrationLease, t as splitMySqlMigrationSql } from "./mysql-migration-sql-BIS5vbNk.mjs";
+//#region src/migrations/runner-mysql.ts
+async function readMySqlAppliedMigrations(client) {
+	try {
+		return (await client.query("SELECT `name` FROM `_void_migrations`")).map((row) => String(row.name));
+	} catch (error) {
+		const value = typeof error === "object" && error !== null ? error : void 0;
+		if (value?.code === "ER_NO_SUCH_TABLE" || value?.errno === 1146) return [];
+		throw error;
+	}
+}
+function toMySqlClient(connection) {
+	return { async query(sql, params) {
+		const [rows] = await connection.query(sql, params);
+		return Array.isArray(rows) ? rows : [];
+	} };
+}
+async function getMySqlAppliedMigrations(url) {
+	const { createConnection } = await import("mysql2/promise");
+	const connection = await createConnection(url);
+	try {
+		return await readMySqlAppliedMigrations(toMySqlClient(connection));
+	} finally {
+		await connection.end();
+	}
+}
+const MIGRATION_LOCK_TIMEOUT_SECONDS = 10;
+/**
+* Take a named lock so two runs on one database cannot both apply a pending file. The lock
+* survives the commits MySQL makes for DDL and ends with the session. A deploy cannot hold a
+* session lock and writes a lease row instead, so this also waits for that lease.
+*/
+async function acquireMySqlMigrationLock(client) {
+	const [row] = await client.query("SELECT DATABASE() AS db");
+	const database = row?.db ?? "";
+	const name = mySqlMigrationLockName(database);
+	const [lock] = await client.query("SELECT GET_LOCK(?, ?) AS acquired", [name, MIGRATION_LOCK_TIMEOUT_SECONDS]);
+	if (Number(Object.values(lock ?? {})[0]) !== 1) throw mySqlMigrationLockError(database, "run the command again");
+	const readLease = () => readMySqlMigrationLease((sql, params) => client.query(sql, params));
+	const deadline = Date.now() + MIGRATION_LOCK_TIMEOUT_SECONDS * 1e3;
+	let remaining = await readLease();
+	while (remaining !== void 0 && Date.now() < deadline) {
+		await new Promise((resolve) => setTimeout(resolve, 1e3));
+		remaining = await readLease();
+	}
+	if (remaining !== void 0) {
+		await client.query("SELECT RELEASE_LOCK(?)", [name]).catch(() => {});
+		throw new Error(`A deploy is applying migrations to MySQL database "${database}". Wait for it to finish, then run the command again. If that deploy stopped, its lock expires in ${remaining} seconds.`);
+	}
+	return name;
+}
+/**
+* A DDL statement makes MySQL commit and close the open transaction. A savepoint can only be
+* rolled back to inside a transaction, so this tells whether the file's changes can still be undone.
+*/
+async function isTransactionOpen(client) {
+	try {
+		await client.query("SAVEPOINT `void_migration`");
+		await client.query("ROLLBACK TO SAVEPOINT `void_migration`");
+		return true;
+	} catch {
+		return false;
+	}
+}
+const ROLLED_BACK_BY_SERVER_ERRNOS = /* @__PURE__ */ new Set([1213, 3101]);
+function isRolledBackByServer(error) {
+	const errno = typeof error === "object" && error !== null ? error.errno : void 0;
+	return typeof errno === "number" && ROLLED_BACK_BY_SERVER_ERRNOS.has(errno);
+}
+function mySqlMigrationError(name, error, committed) {
+	const lines = [`migration ${name} failed: ${error instanceof Error ? error.message : String(error)}`];
+	if (committed) lines.push(`MySQL commits schema changes immediately, so earlier statements in ${name} may already be applied. Undo them, fix the file, then run the command again.`, "See https://void.cloud/guide/database/mysql#failed-migrations");
+	return new Error(lines.join("\n"), { cause: error });
+}
+/**
+* Runs `work` while this session holds the database's migration lock, so no other migration run,
+* deploy or reset changes the schema meanwhile.
+*/
+async function withMySqlMigrationLock(client, work) {
+	const lock = await acquireMySqlMigrationLock(client);
+	try {
+		return await work();
+	} finally {
+		await client.query("SELECT RELEASE_LOCK(?)", [lock]).catch(() => {});
+	}
+}
+async function applyMySqlMigrations(client, migrations) {
+	if (migrations.length === 0) return [];
+	return withMySqlMigrationLock(client, () => applyPendingMySqlMigrations(client, migrations));
+}
+/** Applies the files not yet recorded. The caller holds the migration lock. */
+async function applyPendingMySqlMigrations(client, migrations) {
+	if (migrations.length === 0) return [];
+	await client.query("CREATE TABLE IF NOT EXISTS `_void_migrations` (`name` VARCHAR(255) PRIMARY KEY, `applied_at` VARCHAR(64) NOT NULL)");
+	const existing = await client.query("SELECT `name` FROM `_void_migrations`");
+	const appliedSet = new Set(existing.map((row) => String(row.name)));
+	const pending = migrations.filter((migration) => !appliedSet.has(migration.name));
+	for (const migration of pending) {
+		let ran = 0;
+		await client.query("BEGIN");
+		try {
+			for (const statement of splitMySqlMigrationSql(migration.sql)) {
+				await client.query(statement);
+				ran++;
+			}
+			await client.query("INSERT INTO `_void_migrations` (`name`, `applied_at`) VALUES (?, ?)", [migration.name, (/* @__PURE__ */ new Date()).toISOString()]);
+			await client.query("COMMIT");
+		} catch (error) {
+			const committed = ran > 0 && !isRolledBackByServer(error) && !await isTransactionOpen(client);
+			await client.query("ROLLBACK").catch(() => {});
+			throw mySqlMigrationError(migration.name, error, committed);
+		}
+	}
+	return pending.map((migration) => migration.name);
+}
+/** Connects to `url` and runs `work` while holding that database's migration lock. */
+async function withMySqlMigrationLockAt(url, work) {
+	const { createConnection } = await import("mysql2/promise");
+	const connection = await createConnection({
+		uri: url,
+		multipleStatements: true
+	});
+	try {
+		const client = toMySqlClient(connection);
+		return await withMySqlMigrationLock(client, () => work(client));
+	} finally {
+		await connection.end();
+	}
+}
+/**
+* Applies the pending files in `migrationsDir`. `afterApply` gets the applied names and runs before
+* the lock is released, so the schema changes it makes (Better Auth's tables) do not overlap
+* another run either.
+*/
+async function runMySqlMigrations(migrationsDir, url, afterApply) {
+	const migrations = collectMigrations(migrationsDir);
+	if (migrations.length === 0 && !afterApply) return [];
+	return withMySqlMigrationLockAt(url, async (client) => {
+		const applied = await applyPendingMySqlMigrations(client, migrations);
+		await afterApply?.(applied);
+		return applied;
+	});
+}
+//#endregion
+export { runMySqlMigrations as a, withMySqlMigrationLockAt as c, readMySqlAppliedMigrations as i, applyPendingMySqlMigrations as n, toMySqlClient as o, getMySqlAppliedMigrations as r, withMySqlMigrationLock as s, applyMySqlMigrations as t };

package/dist/runner-mysql-DWwE8jKi.mjs

@@ -0,0 +1 @@
+export { t as applyMySqlMigrations, n as applyPendingMySqlMigrations, r as getMySqlAppliedMigrations, i as readMySqlAppliedMigrations, a as runMySqlMigrations, o as toMySqlClient, s as withMySqlMigrationLock, c as withMySqlMigrationLockAt } from "./runner-mysql-BhRaONkO.mjs";

package/dist/{runner-pg-CPd-CB_F.mjs → runner-pg-BRemq_GX.mjs}

@@ -36,8 +36,8 @@ async function applyPgMigrations(client, migrations) {
 			await client.query("INSERT INTO _void_migrations (name, applied_at) VALUES ($1, $2)", [m.name, (/* @__PURE__ */ new Date()).toISOString()]);
 			await client.query("COMMIT");
 		} catch (err) {
-			await client.query("ROLLBACK");
-			throw err;
+			await client.query("ROLLBACK").catch(() => {});
+			throw new Error(`migration ${m.name} failed: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
 		}
 	}
 	return pending.map((m) => m.name);

package/dist/runner-pg-_Xncr3H5.mjs

@@ -0,0 +1 @@
+export { t as applyPgMigrations, n as getPgAppliedMigrations, r as readPgAppliedMigrations, i as runPgMigrations } from "./runner-pg-BRemq_GX.mjs";

package/dist/runtime/ai.mjs

@@ -1,6 +1,6 @@
 import { n as bytesToBase64 } from "../base64-DVrOndmI.mjs";
 import { t as cfAccessHeaders } from "../cf-access-BM9G0lhO.mjs";
-import { a as getRawRuntimeEnv } from "../env-raw-Cklzcde3.mjs";
+import { a as getRawRuntimeEnv } from "../env-raw-D74P4ebM.mjs";
 import { r as limitFromResponse, t as UsageLimit } from "../limits-D0vD1M9A.mjs";
 //#region src/runtime/ai-types.ts
 /** Maps provider prefix to expected env var name for the API key */
@@ -293,7 +293,16 @@ async function providerRequestBody(provider, path, init, options, runtimeEnv) {
 /** Backend for the Void platform proxy, reached by service binding or HTTPS. */
 function makeProxyBackend(send, runtimeEnv) {
 	async function proxyFetch(action, payload, options = {}) {
-		const res = await send(action, payload);
+		let signal;
+		if (typeof payload.options === "object" && payload.options !== null) {
+			const { signal: bindingSignal, ...wireOptions } = payload.options;
+			signal = bindingSignal;
+			payload = {
+				...payload,
+				options: wireOptions
+			};
+		}
+		const res = await send(action, payload, signal);
 		const limit = await limitFromResponse(res, "ai");
 		if (limit) throw limit;
 		if (options.throwOnError !== false && !res.ok) {
@@ -334,8 +343,9 @@ function makeProxyBackend(send, runtimeEnv) {
 	};
 }
 function makeServiceBindingBackend(proxy, runtimeEnv) {
-	return makeProxyBackend((action, payload) => proxy.fetch(`https://ai-proxy/ai/${action}`, {
+	return makeProxyBackend((action, payload, signal) => proxy.fetch(`https://ai-proxy/ai/${action}`, {
 		method: "POST",
+		signal,
 		headers: { "content-type": "application/json" },
 		body: JSON.stringify({
 			action,
@@ -352,8 +362,9 @@ function makeHttpBackend(token, projectId, runtimeEnv) {
 		authorization: `Bearer ${token}`,
 		...cfAccessHeaders(runtimeEnv, base)
 	};
-	return makeProxyBackend((action, payload) => fetch(`${base}/${action}`, {
+	return makeProxyBackend((action, payload, signal) => fetch(`${base}/${action}`, {
 		method: "POST",
+		signal,
 		headers,
 		body: JSON.stringify({
 			action,

package/dist/runtime/auth-client-react.mjs

@@ -1,2 +1 @@
-import { n as createAuthClient, t as auth } from "../auth-client-react-CMLwT2xI.mjs";
-export { auth, createAuthClient };
+export { t as auth, n as createAuthClient } from "../auth-client-react-CMLwT2xI.mjs";

package/dist/runtime/auth-client-solid.mjs

@@ -1,2 +1 @@
-import { n as createAuthClient, t as auth } from "../auth-client-solid-UoreJWZG.mjs";
-export { auth, createAuthClient };
+export { t as auth, n as createAuthClient } from "../auth-client-solid-UoreJWZG.mjs";

package/dist/runtime/auth-client-svelte.mjs

@@ -1,2 +1 @@
-import { n as createAuthClient, t as auth } from "../auth-client-svelte-Cv_WvrRk.mjs";
-export { auth, createAuthClient };
+export { t as auth, n as createAuthClient } from "../auth-client-svelte-Cv_WvrRk.mjs";

package/dist/runtime/auth-client-vue.mjs

@@ -1,2 +1 @@
-import { n as createAuthClient, t as auth } from "../auth-client-vue-CFk7Xbv3.mjs";
-export { auth, createAuthClient };
+export { t as auth, n as createAuthClient } from "../auth-client-vue-CFk7Xbv3.mjs";

package/dist/runtime/auth-client.mjs

@@ -1,2 +1 @@
-import { n as createAuthClient, t as auth } from "../auth-client-BWBT8HLp.mjs";
-export { auth, createAuthClient };
+export { t as auth, n as createAuthClient } from "../auth-client-BWBT8HLp.mjs";

package/dist/runtime/auth.mjs

@@ -1,2 +1 @@
-import { a as requireAuth, i as getUser, n as defineAuth, r as getSession, t as authContext } from "../auth-3sGB0zJ1.mjs";
-export { authContext, defineAuth, getSession, getUser, requireAuth };
+export { t as authContext, n as defineAuth, r as getSession, i as getUser, a as requireAuth } from "../auth-3sGB0zJ1.mjs";

package/dist/runtime/better-auth-mysql.mjs

@@ -3,7 +3,10 @@ import { n as resolveConnectionString, t as createVoidAuthRuntime } from "../bet
 //#region src/runtime/better-auth-mysql.ts
 async function applyMigrations(env, migrationSchema) {
 	const { createConnection } = await import("mysql2/promise");
-	const connection = await createConnection(resolveConnectionString(env, "MySQL"));
+	const connection = await createConnection({
+		uri: resolveConnectionString(env, "MySQL"),
+		disableEval: true
+	});
 	try {
 		await applyMySqlAuthMigrations(mysqlMigrationRunner(connection), migrationSchema);
 	} finally {

package/dist/runtime/db.mjs

@@ -1,4 +1,4 @@
-import { a as requireRuntimeBinding, r as getRuntimeRequestResource } from "../env-BhdWMrNy.mjs";
+import { a as requireRuntimeBinding, r as getRuntimeRequestResource, t as getRuntimeBinding } from "../env-0jrMQJI_.mjs";
 import { drizzle } from "drizzle-orm/d1";
 import { and, asc, avg, between, count, desc, eq, exists, gt, gte, ilike, inArray, isNotNull, isNull, like, lt, lte, max, min, ne, not, notBetween, notExists, notInArray, notLike, or, sql, sum } from "drizzle-orm";
 //#region src/runtime/db.ts
@@ -20,13 +20,17 @@ function createPrimaryDb(d1) {
 	return drizzle(d1.withSession("first-primary"));
 }
 const requestDbKey = {};
+function requireD1() {
+	if (getRuntimeBinding("DB") == null && (getRuntimeBinding("HYPERDRIVE") != null || getRuntimeBinding("DATABASE_URL") != null)) throw new Error("db: Missing Cloudflare binding 'DB'. This app connects through HYPERDRIVE or DATABASE_URL, but its server bundle loaded the D1 client. In Nuxt or Analog, add 'void/nitro' to the Nitro modules. An installed package that imports void/db must be an ES module that lists void in its dependencies or peerDependencies, and the app must list it or reach it through such packages.");
+	return requireRuntimeBinding("DB");
+}
 /**
 * Default Drizzle D1 instance — resolves the `DB` binding from the runtime
 * environment. When the Void plugin is active, this is replaced with a
 * schema-aware instance via virtual module.
 */
 const db = new Proxy({}, { get(_, prop) {
-	const instance = getRuntimeRequestResource(requestDbKey, () => createDb(requireRuntimeBinding("DB")), () => createPrimaryDb(requireRuntimeBinding("DB")));
+	const instance = getRuntimeRequestResource(requestDbKey, () => createDb(requireD1()), () => createPrimaryDb(requireD1()));
 	return Reflect.get(instance, prop);
 } });
 //#endregion

package/dist/runtime/durable.d.mts

@@ -62,4 +62,5 @@ export type DurableStateApi<TMethods> = {
   getById(namespace: DurableObjectNamespace, id: DurableObjectId): TypedDurableObjectStub<TMethods>;
 };
 export declare function defineDurableState<TState, TEnv extends Record<string, unknown> = Record<string, unknown>, const TMethods extends DurableStateMethods<TState, TEnv> = DurableStateMethods<TState, TEnv>>(definition: DurableStateDefinition<TState, TEnv, TMethods>): DurableStateApi<TMethods>;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/durable.mjs

@@ -1,5 +1,5 @@
 import { t as isResourceName } from "../resource-name-C7LVpcRm.mjs";
-import { a as requireRuntimeBinding, o as withRuntimeEnv } from "../env-BhdWMrNy.mjs";
+import { a as requireRuntimeBinding, o as withRuntimeEnv } from "../env-0jrMQJI_.mjs";
 import { DurableObject } from "cloudflare:workers";
 //#region src/runtime/durable.ts
 const DEFAULT_STORAGE_KEY = "__void_durable_state";

package/dist/runtime/email/testing.mjs

@@ -1,7 +1,7 @@
 import { o as normalizeEmail, r as buildMime } from "../../mime-srOklVVv.mjs";
 import { n as compileEmailPattern, t as compareEmailRoutes } from "../../email-BcjSyAL0.mjs";
 import { y as registerEmailSink } from "../../dev-inbox-Rd6j_8vM.mjs";
-import { a as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-DmkTQeWp.mjs";
+import { a as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-BuTfm11U.mjs";
 //#region src/runtime/email/testing.ts
 /**
 * Test harnesses for void/email.

package/dist/runtime/email-protocol.mjs

@@ -1,2 +1 @@
-import { a as verifyEmailReceiptThroughProxy, i as readEmailEnvelope, n as encodeEmailActions, o as withTimeout, r as readBoundedJson, t as EMAIL_PROTOCOL_VERSION } from "../email-protocol-D9nTvhCp.mjs";
-export { EMAIL_PROTOCOL_VERSION, encodeEmailActions, readBoundedJson, readEmailEnvelope, verifyEmailReceiptThroughProxy, withTimeout };
+export { t as EMAIL_PROTOCOL_VERSION, n as encodeEmailActions, r as readBoundedJson, i as readEmailEnvelope, a as verifyEmailReceiptThroughProxy, o as withTimeout } from "../email-protocol-D9nTvhCp.mjs";

package/dist/runtime/email.mjs

@@ -2,7 +2,7 @@ import { n as bytesToBase64 } from "../base64-DVrOndmI.mjs";
 import { a as newId, n as MimeError, o as normalizeEmail, r as buildMime } from "../mime-srOklVVv.mjs";
 import { a as DEV_INBOX_ENV_VAR, b as serializeCapturedMessage, c as DEV_INBOX_TOKEN_ENV_VAR, d as captureMessage, h as hasActiveSink, i as DEV_INBOX_CAPTURE_URL, p as dispatchToSinks } from "../dev-inbox-Rd6j_8vM.mjs";
 import { o as withTimeout, r as readBoundedJson } from "../email-protocol-D9nTvhCp.mjs";
-import { a as createMessageProxy, c as isForwardableEmailMessage, d as readProjectSlug, f as replyEmail, i as bytesToReadableStream, l as parseEmail, o as defineEmail, p as tryGetRawRuntimeEnv, r as ParseEmailError, s as enactEmailActions, u as readEnvString } from "../inbound-DmkTQeWp.mjs";
+import { a as createMessageProxy, c as isForwardableEmailMessage, d as readProjectSlug, f as replyEmail, i as bytesToReadableStream, l as parseEmail, o as defineEmail, p as tryGetRawRuntimeEnv, r as ParseEmailError, s as enactEmailActions, u as readEnvString } from "../inbound-BuTfm11U.mjs";
 import { isRecord } from "@void/deploy-core";
 //#region src/runtime/email.ts
 function makeError(code, message, cause) {

package/dist/runtime/env-public.mjs

@@ -1,5 +1,5 @@
-import { a as getRawRuntimeEnv } from "../env-raw-Cklzcde3.mjs";
-import { i as isInternalBinding, n as getRuntimeEnv } from "../env-BhdWMrNy.mjs";
+import { a as getRawRuntimeEnv } from "../env-raw-D74P4ebM.mjs";
+import { i as isInternalBinding, n as getRuntimeEnv } from "../env-0jrMQJI_.mjs";
 import { a as oneOf, i as number, n as email, o as string, r as json, s as url, t as boolean } from "../env-helpers--wFmQ_5Q.mjs";
 //#region src/shared/env-mask.ts
 /**

package/dist/runtime/env.mjs

@@ -1,2 +1 @@
-import { a as requireRuntimeBinding, i as isInternalBinding, n as getRuntimeEnv, o as withRuntimeEnv, r as getRuntimeRequestResource, t as getRuntimeBinding } from "../env-BhdWMrNy.mjs";
-export { getRuntimeBinding, getRuntimeEnv, getRuntimeRequestResource, isInternalBinding, requireRuntimeBinding, withRuntimeEnv };
+export { t as getRuntimeBinding, n as getRuntimeEnv, r as getRuntimeRequestResource, i as isInternalBinding, a as requireRuntimeBinding, o as withRuntimeEnv } from "../env-0jrMQJI_.mjs";

package/dist/runtime/isr.mjs

@@ -1,4 +1,4 @@
-import { a as getRawRuntimeEnv } from "../env-raw-Cklzcde3.mjs";
+import { a as getRawRuntimeEnv } from "../env-raw-D74P4ebM.mjs";
 import { isrEdgeCacheUrlForToken, splitIsrCacheKey } from "@void/isr";
 import { denormalizeIsrPath, isrKey, isrPrefix, isrVariantPrefix, listIsrHosts } from "@void/isr/runtime";
 //#region src/runtime/isr.ts

package/dist/runtime/kv.mjs

@@ -1,4 +1,4 @@
-import { a as requireRuntimeBinding } from "../env-BhdWMrNy.mjs";
+import { a as requireRuntimeBinding } from "../env-0jrMQJI_.mjs";
 //#region src/runtime/kv.ts
 function parseValue(raw) {
 	if (raw === null) return null;

package/dist/runtime/limits.mjs

@@ -1,2 +1 @@
-import { i as readUsageLimit, n as asUsageLimit, r as limitFromResponse, t as UsageLimit } from "../limits-D0vD1M9A.mjs";
-export { UsageLimit, asUsageLimit, limitFromResponse, readUsageLimit };
+export { t as UsageLimit, n as asUsageLimit, r as limitFromResponse, i as readUsageLimit } from "../limits-D0vD1M9A.mjs";

package/dist/runtime/live-client.d.mts

@@ -29,4 +29,5 @@ type EventSourceConstructor = new (url: string, options?: {
   withCredentials?: boolean;
 }) => EventSourceLike;
 export declare function connectLiveStream(url: string | URL, options?: ConnectLiveStreamOptions): LiveClient;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/live-server.d.mts

@@ -9,4 +9,5 @@ export type LiveDurableObjectClass = {
   new (state: DurableObjectState, env: LiveDurableObjectEnv): LiveDurableObjectInstance;
 };
 export declare function createLiveDurableObject(): LiveDurableObjectClass;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/live-server.mjs

@@ -1,5 +1,5 @@
 import { n as eventStream } from "../sse-CMvCgjNk.mjs";
-import { a as connectionInstanceName, c as topicInstanceName, o as internalUrl, s as topicDigest, t as __getLiveBindingName } from "../live-BxLX-JqJ.mjs";
+import { a as connectionInstanceName, c as topicInstanceName, o as internalUrl, s as topicDigest, t as __getLiveBindingName } from "../live-BcHoTDFe.mjs";
 //#region src/runtime/live-server.ts
 const GENERATION_KEY = "connection:generation";
 const TOPIC_PRUNE_ALARM_DELAY_MS = 6e4;

package/dist/runtime/live.mjs

@@ -1,2 +1 @@
-import { i as defineLiveStream, n as __setLiveBindingName, r as __setLiveDev, t as __getLiveBindingName } from "../live-BxLX-JqJ.mjs";
-export { __getLiveBindingName, __setLiveBindingName, __setLiveDev, defineLiveStream };
+export { t as __getLiveBindingName, n as __setLiveBindingName, r as __setLiveDev, i as defineLiveStream } from "../live-BcHoTDFe.mjs";

package/dist/runtime/log.d.mts

@@ -20,4 +20,5 @@ export declare const logger: {
   warn(message: string, fields?: Fields): void;
   info(message: string, fields?: Fields): void;
 };
-//#endregion
+//#endregion
+export {};

package/dist/runtime/migration-handler-mysql.mjs

@@ -1,4 +1,4 @@
-import { n as splitMigrationSql } from "../migration-handler-Cg0Y4EPu.mjs";
+import { i as holdMySqlMigrationLease, n as splitMySqlMigrationStatements, r as acquireMySqlMigrationLease } from "../mysql-migration-sql-BIS5vbNk.mjs";
 //#region src/runtime/migration-handler-mysql.ts
 function createMigrationHandler(env, migrations, runAuthMigrations) {
 	return async (request) => {
@@ -9,9 +9,7 @@ function createMigrationHandler(env, migrations, runAuthMigrations) {
 			migrations: []
 		}, { status: 401 });
 		try {
-			const result = await runMySqlMigrations(env, migrations);
-			if (result.ok && runAuthMigrations) await runAuthMigrations();
-			return Response.json(result);
+			return Response.json(await runMySqlMigrations(env, migrations, runAuthMigrations));
 		} catch (error) {
 			return Response.json({
 				ok: false,
@@ -21,7 +19,7 @@ function createMigrationHandler(env, migrations, runAuthMigrations) {
 		}
 	};
 }
-async function runMySqlMigrations(env, migrations) {
+async function runMySqlMigrations(env, migrations, runAuthMigrations) {
 	const hyperdrive = env.HYPERDRIVE;
 	if (!hyperdrive?.connectionString) return {
 		ok: false,
@@ -31,9 +29,17 @@ async function runMySqlMigrations(env, migrations) {
 	const { createConnection } = await import("mysql2/promise");
 	const connection = await createConnection({
 		uri: hyperdrive.connectionString,
-		multipleStatements: true
+		disableEval: true
 	});
+	let leaseConnection;
+	let lease;
 	try {
+		const leaseClient = await createConnection({
+			uri: hyperdrive.connectionString,
+			disableEval: true
+		});
+		leaseConnection = leaseClient;
+		lease = await acquireMySqlMigrationLease(async (sql, params) => (await leaseClient.query(sql, params))[0]);
 		await connection.query("CREATE TABLE IF NOT EXISTS `_void_migrations` (`name` VARCHAR(255) PRIMARY KEY, `applied_at` VARCHAR(64) NOT NULL)");
 		const [rows] = await connection.query("SELECT `name` FROM `_void_migrations`");
 		const applied = new Set(rows.map((row) => String(row.name)));
@@ -49,14 +55,23 @@ async function runMySqlMigrations(env, migrations) {
 			}
 			const start = Date.now();
 			try {
-				for (const statement of splitMigrationSql(migration.sql)) await connection.query(statement);
+				await connection.query("BEGIN");
+				for (const statement of splitMySqlMigrationStatements(migration.sql)) {
+					await lease.renew();
+					await connection.query(statement.sql).catch((error) => {
+						throw statement.program ? withBreakpointNote(error, migration.name) : error;
+					});
+				}
+				await lease.renew();
 				await connection.query("INSERT INTO `_void_migrations` (`name`, `applied_at`) VALUES (?, ?)", [migration.name, (/* @__PURE__ */ new Date()).toISOString()]);
+				await connection.query("COMMIT");
 				results.push({
 					name: migration.name,
 					applied: true,
 					durationMs: Date.now() - start
 				});
 			} catch (error) {
+				await connection.query("ROLLBACK").catch(() => {});
 				results.push({
 					name: migration.name,
 					applied: false,
@@ -70,13 +85,28 @@ async function runMySqlMigrations(env, migrations) {
 				};
 			}
 		}
+		if (runAuthMigrations) await holdMySqlMigrationLease(lease, runAuthMigrations);
 		return {
 			ok: true,
 			migrations: results
 		};
 	} finally {
-		await connection.end();
+		await lease?.release().catch(() => {});
+		await Promise.all([connection.end(), leaseConnection?.end()]);
 	}
 }
+/**
+* The splitter keeps the SQL after a trigger, routine or event with it. The CLI runs that with
+* `multipleStatements`; here one query takes one statement, so the server rejects it as a syntax
+* error before running any of it. MySQL reports 1064; Vitess (PlanetScale) reports "syntax error
+* at position", or 1149 for several statements it can parse. A syntax error inside the body looks
+* the same, so the note says "if".
+*/
+function withBreakpointNote(error, name) {
+	if (!(error instanceof Error)) return error;
+	const errno = error.errno;
+	if (errno !== 1064 && errno !== 1149 && !/syntax error at position/.test(error.message)) return error;
+	return new Error(`${error.message}\nThis deploy runs one statement per query. If ${name} has more SQL after a trigger, procedure, function or event, add a \`--> statement-breakpoint\` line after it.`, { cause: error });
+}
 //#endregion
 export { createMigrationHandler };

package/dist/runtime/migration-handler.mjs

@@ -1,2 +1 @@
-import { n as splitMigrationSql, t as createMigrationHandler } from "../migration-handler-Cg0Y4EPu.mjs";
-export { createMigrationHandler, splitMigrationSql };
+export { t as createMigrationHandler, n as splitMigrationSql } from "../migration-handler-Cg0Y4EPu.mjs";

package/dist/runtime/queues.mjs

@@ -1,4 +1,4 @@
-import { a as requireRuntimeBinding } from "../env-BhdWMrNy.mjs";
+import { a as requireRuntimeBinding } from "../env-0jrMQJI_.mjs";
 //#region src/runtime/queues.ts
 /** Typed queue producers — resolves `QUEUE_*` bindings from the active runtime environment. */
 const queues = new Proxy({}, { get(_, name) {

package/dist/runtime/response.mjs

@@ -1,2 +1 @@
-import { n as isConvertedResponse, t as convertReturnValue } from "../response-Tn7rU0MV.mjs";
-export { convertReturnValue, isConvertedResponse };
+export { t as convertReturnValue, n as isConvertedResponse } from "../response-Tn7rU0MV.mjs";

package/dist/runtime/route-url.mjs

@@ -1,2 +1 @@
-import { t as interpolateRouteParams } from "../route-url-BjGv_KKY.mjs";
-export { interpolateRouteParams };
+export { t as interpolateRouteParams } from "../route-url-BjGv_KKY.mjs";

package/dist/runtime/routing.d.mts

@@ -174,4 +174,5 @@ export declare function createRoutingRuntime(app: Hono, options?: {
 export declare function markNoMatch(request: Request, response: Response): Response;
 export declare function createHttpRouteHandler(load: () => Promise<Record<string, (c: Context) => unknown>>, method: string): (c: Context) => Promise<Response>;
 export declare function createModuleLoader<T>(load: () => Promise<T>, cache?: boolean): () => Promise<T>;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/sandbox-container.mjs

@@ -1,2 +1 @@
-import { i as validateSandboxOptions, n as SANDBOX_PORT_HEADER, r as SandboxContainer, t as DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS } from "../sandbox-container-DBKIqDEK.mjs";
-export { DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS, SANDBOX_PORT_HEADER, SandboxContainer, validateSandboxOptions };
+export { t as DEFAULT_SANDBOX_INACTIVITY_TIMEOUT_MS, n as SANDBOX_PORT_HEADER, r as SandboxContainer, i as validateSandboxOptions } from "../sandbox-container-a9LRUtii.mjs";

package/dist/runtime/sandbox.mjs

@@ -1,7 +1,7 @@
-import { a as getRawRuntimeEnv } from "../env-raw-Cklzcde3.mjs";
+import { a as getRawRuntimeEnv } from "../env-raw-D74P4ebM.mjs";
 import { t as UsageLimit } from "../limits-D0vD1M9A.mjs";
-import { a as requireRuntimeBinding } from "../env-BhdWMrNy.mjs";
-import { i as validateSandboxOptions, n as SANDBOX_PORT_HEADER, r as SandboxContainer } from "../sandbox-container-DBKIqDEK.mjs";
+import { a as requireRuntimeBinding } from "../env-0jrMQJI_.mjs";
+import { i as validateSandboxOptions, n as SANDBOX_PORT_HEADER, r as SandboxContainer } from "../sandbox-container-a9LRUtii.mjs";
 export * from "@cloudflare/sandbox";
 //#region src/runtime/sandbox.ts
 const DEFAULT_SANDBOX_ID = "default";

package/dist/runtime/seed.d.mts

@@ -32,4 +32,5 @@ type FallbackSeedContext<TSchema extends Record<string, unknown>> = SchemaHasSql
 export type SeedContext<TSchema extends Record<string, unknown> = Record<string, never>> = (SchemaHasSqliteTables<TSchema> extends true ? SqliteSeedContext<TSchema> : never) | (SchemaHasPostgresTables<TSchema> extends true ? PostgresSeedContext<TSchema> : never) | (SchemaHasMySqlTables<TSchema> extends true ? MySqlSeedContext<TSchema> : never) | FallbackSeedContext<TSchema>;
 export type SeedFn<TSchema extends Record<string, unknown> = Record<string, never>> = (context: SeedContext<TSchema>) => void | Promise<void>;
 export declare function defineSeed<TSchema extends Record<string, unknown> = Record<string, never>>(seed: SeedFn<TSchema>): SeedFn<TSchema>;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/sse.mjs

@@ -1,2 +1 @@
-import { a as getLastEventId, i as formatSseText, n as eventStream, r as formatSse, t as SseStreamClosedError } from "../sse-CMvCgjNk.mjs";
-export { SseStreamClosedError, eventStream, formatSse, formatSseText, getLastEventId };
+export { t as SseStreamClosedError, n as eventStream, r as formatSse, i as formatSseText, a as getLastEventId } from "../sse-CMvCgjNk.mjs";

package/dist/runtime/storage.mjs

@@ -1,4 +1,4 @@
-import { a as requireRuntimeBinding } from "../env-BhdWMrNy.mjs";
+import { a as requireRuntimeBinding } from "../env-0jrMQJI_.mjs";
 //#region src/runtime/storage.ts
 /** Create a storage client for a specific R2Bucket instance. */
 function createStorage(bucket) {

package/dist/runtime/validator.mjs

@@ -1,2 +1 @@
-import { t as runValidation } from "../validator-BTOu0fB0.mjs";
-export { runValidation };
+export { t as runValidation } from "../validator-BTOu0fB0.mjs";

package/dist/runtime/ws-server.d.mts

@@ -24,4 +24,5 @@ export declare function createWebSocketDurableObject(definition: AnyWebSocketDef
 /** Keep a removed WebSocket Durable Object class deployable without deleting its storage. */
 export declare function createWebSocketTombstoneDurableObject(className: string): WebSocketDurableObjectClass;
 export declare function forwardWebSocketRequest(request: Request, env: Record<string, unknown>, route: WebSocketRouteMeta): Promise<Response>;
-//#endregion
+//#endregion
+export {};

package/dist/runtime/ws-server.mjs

@@ -1,5 +1,5 @@
 import { t as authContext } from "../auth-3sGB0zJ1.mjs";
-import { o as withRuntimeEnv } from "../env-BhdWMrNy.mjs";
+import { o as withRuntimeEnv } from "../env-0jrMQJI_.mjs";
 //#region src/runtime/ws-server.ts
 function matchRoute(pattern, pathname) {
 	const patternSegments = pattern.split("/").filter(Boolean);

package/dist/{secret-B5J8bBsI.mjs → secret-bg73f1Ge.mjs}

@@ -1,10 +1,10 @@
 import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
-import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { m as printSuccess, o as formatCount, p as note } from "./output-FNHKw5Ac.mjs";
+import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
 import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
-import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-C_Cu7E8a.mjs";
-import { _ as validateSecretValues } from "./env-validation-cE0zcmzO.mjs";
+import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
+import { _ as validateSecretValues } from "./env-validation-DYxjz_Wo.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {
@@ -93,7 +93,7 @@ async function resolveSecretBackend(root, args) {
 }
 async function resolveCloudflareSecretBackend(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-Ds-lX3Ts.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-CrSUFRzJ.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	return {
 		target: "Cloudflare Worker",