void 0.7.4 → 0.7.5

package/dist/{better-auth-shared-BrfZ78iY.mjs → better-auth-shared-CjnJZFC0.mjs}

@@ -26,9 +26,6 @@ const SCRYPT_OPTIONS = {
 	p: 1,
 	r: 16
 };
-function toHex(bytes) {
-	return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 function derivePasswordKey(password, salt) {
 	return new Promise((resolve, reject) => {
 		scrypt(password.normalize("NFKC"), salt, SCRYPT_KEY_LENGTH, SCRYPT_OPTIONS, (error, key) => {
@@ -42,16 +39,15 @@ function derivePasswordKey(password, salt) {
 }
 const voidAuthPassword = {
 	async hash(password) {
-		const salt = toHex(randomBytes(PASSWORD_SALT_LENGTH));
+		const salt = randomBytes(PASSWORD_SALT_LENGTH).toString("hex");
 		return `${salt}:${(await derivePasswordKey(password, salt)).toString("hex")}`;
 	},
 	async verify({ hash, password }) {
 		const [salt, key, ...extra] = hash.split(":");
 		if (!salt || !key || extra.length > 0) return false;
-		const targetKey = await derivePasswordKey(password, salt);
 		const storedKey = Buffer.from(key, "hex");
-		if (storedKey.length !== targetKey.length) return false;
-		return timingSafeEqual(targetKey, storedKey);
+		if (key.length !== SCRYPT_KEY_LENGTH * 2 || storedKey.length !== SCRYPT_KEY_LENGTH) return false;
+		return timingSafeEqual(await derivePasswordKey(password, salt), storedKey);
 	}
 };
 function resolveEmailAndPassword(configuredProviders) {

package/dist/pages/client.d.mts

@@ -1,4 +1,4 @@
-import { t as PageObject } from "../protocol-CK4OFwfR.mjs";
+import { t as PageObject } from "../protocol-DxGzKEz2.mjs";
 import { CacheForInput, CacheForResult } from "./prefetch.mjs";
 
 //#region src/pages/action-result.d.ts
@@ -147,6 +147,7 @@ interface VoidRouter {
   readonly url: URL;
   readonly path: string;
   readonly query: URLSearchParams;
+  readonly params: Record<string, string>;
   visit(url: string | URL, options?: VisitOptions): Promise<unknown>;
   refresh(options?: VisitOptions): Promise<unknown>;
   prefetch(url: string | URL, options?: PrefetchOptions): Promise<unknown>;
@@ -178,8 +179,8 @@ interface VoidRouterConfig {
   onNavigationChange?(navigation: NavigationState): void;
 }
 declare function idleNavigationState(): NavigationState;
-declare function createRouterFacade(router: VoidRouter, getCurrentUrl: () => string): VoidRouter;
-declare function createSsrRouter(url?: string): VoidRouter;
+declare function createRouterFacade(router: VoidRouter, getCurrentUrl: () => string, getCurrentParams?: () => Record<string, string>): VoidRouter;
+declare function createSsrRouter(url?: string, params?: Record<string, string>): VoidRouter;
 declare function isFile(value: unknown): boolean;
 declare function hasFiles(data: unknown): boolean;
 declare function objectToFormData(source: Record<string, unknown>, form?: FormData, parentKey?: string): FormData;

package/dist/pages/client.mjs

@@ -756,7 +756,7 @@ function idleNavigationState() {
 		method: null
 	};
 }
-function createRouterFacade(router, getCurrentUrl) {
+function createRouterFacade(router, getCurrentUrl, getCurrentParams = () => router.params) {
 	return {
 		get _hoverDelay() {
 			return router._hoverDelay;
@@ -770,6 +770,9 @@ function createRouterFacade(router, getCurrentUrl) {
 		get query() {
 			return this.url.searchParams;
 		},
+		get params() {
+			return getCurrentParams();
+		},
 		visit(url, options = {}) {
 			return router.visit(url, options);
 		},
@@ -787,7 +790,7 @@ function createRouterFacade(router, getCurrentUrl) {
 		}
 	};
 }
-function createSsrRouter(url = "/") {
+function createSsrRouter(url = "/", params = {}) {
 	return {
 		_hoverDelay: 75,
 		get url() {
@@ -799,6 +802,9 @@ function createSsrRouter(url = "/") {
 		get query() {
 			return this.url.searchParams;
 		},
+		get params() {
+			return params;
+		},
 		visit() {
 			throw new Error("Void Router: visit() is not available during SSR.");
 		},
@@ -870,9 +876,11 @@ async function createVoidRouter(config) {
 	{
 		const engine = await createPageNavigationEngine(config);
 		let routeUrl = currentUrl();
+		let routeParams = engine.initialPageData.params ?? {};
 		let activeNavigationId = null;
-		const setRouteUrl = (url) => {
+		const setRouteState = (url, params = routeParams) => {
 			routeUrl = url;
+			routeParams = params;
 			config.onRouteChange?.(url);
 		};
 		const setNavigation = (navigation) => {
@@ -884,11 +892,12 @@ async function createVoidRouter(config) {
 			try {
 				const result = await resource.shell;
 				if (!result) return;
+				setRouteState(result.pageData.url || resource.fetchUrl + resource.hash, result.pageData.params ?? {});
 				const applyUpdate = () => config.adapter.applyUpdate(result.pageData, result.component, result.layouts);
 				if ((resource.options.viewTransition ?? config.viewTransitions) && document.startViewTransition) await document.startViewTransition(() => applyUpdate()).updateCallbackDone;
 				else await applyUpdate();
 				await resource.commit();
-				if (activeNavigationId === resource.id) setRouteUrl(currentUrl());
+				if (activeNavigationId === resource.id) setRouteState(currentUrl(), result.pageData.params ?? {});
 				return result.pageData;
 			} catch (error) {
 				if (resource.method.toUpperCase() === "GET" && !resource.options._resolveOnShell && isAbortError(error)) return;
@@ -896,7 +905,7 @@ async function createVoidRouter(config) {
 			} finally {
 				if (activeNavigationId === resource.id) {
 					activeNavigationId = null;
-					setRouteUrl(currentUrl());
+					setRouteState(currentUrl());
 					setNavigation(idleNavigationState());
 				}
 			}
@@ -912,6 +921,9 @@ async function createVoidRouter(config) {
 			get query() {
 				return this.url.searchParams;
 			},
+			get params() {
+				return routeParams;
+			},
 			visit(url, options = {}) {
 				return applyNavigationResource(engine.prepareVisit(normalizeUrl(url), options));
 			},
@@ -932,7 +944,7 @@ async function createVoidRouter(config) {
 				engine.flushAll();
 			}
 		};
-		const router = createRouterFacade(rawRouter, () => routeUrl);
+		const router = createRouterFacade(rawRouter, () => routeUrl, () => routeParams);
 		engine.setPopStateHandler((url, options) => {
 			router.visit(url, options);
 		});

package/dist/pages/protocol.d.mts

@@ -1,3 +1,3 @@
 import { S as ValidationError } from "../handler-dKQWyF-G.mjs";
-import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-CK4OFwfR.mjs";
+import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-DxGzKEz2.mjs";
 export { PageObject, PageRenderResult, ValidationError, flattenValidationErrors, handlePageGet, handlePageMutation, safeJsonStringify };

package/dist/pages/protocol.mjs

@@ -25,6 +25,9 @@ function pageJsonResponse(c, pageObj) {
 function requestPathWithSearch(c) {
 	return c.req.path + new URL(c.req.url).search;
 }
+function requestParams(c) {
+	return c.req.param();
+}
 /** Extract props from a handler result, handling Response wrapping from withValidator */
 async function extractProps(result) {
 	if (result instanceof Response) {
@@ -107,6 +110,7 @@ async function handlePageGet(handler, headFn, c, componentId, renderFn, getAsset
 	const pageObj = {
 		component: componentId,
 		props: immediateProps,
+		params: requestParams(c),
 		shared,
 		url: requestPathWithSearch(c),
 		errors: null,
@@ -159,6 +163,7 @@ async function handlePageMutation(mutationHandler, getHandler, headFn, c, compon
 		return {
 			component: componentId,
 			props,
+			params: requestParams(c),
 			shared,
 			url: requestPathWithSearch(c),
 			errors,

package/dist/{protocol-CK4OFwfR.d.mts → protocol-DxGzKEz2.d.mts}

@@ -7,6 +7,7 @@ declare function safeJsonStringify(value: unknown): string;
 interface PageObject {
   component: string;
   props: Record<string, unknown>;
+  params: Record<string, string>;
   shared: Record<string, unknown>;
   url: string;
   errors: Record<string, string> | null;

package/dist/runtime/better-auth-pg.mjs

@@ -1,5 +1,5 @@
 import { t as applyPgAuthMigrations } from "../auth-migrations-BwLPwRgH.mjs";
-import { t as createVoidAuthRuntime } from "../better-auth-shared-BrfZ78iY.mjs";
+import { t as createVoidAuthRuntime } from "../better-auth-shared-CjnJZFC0.mjs";
 //#region src/runtime/better-auth-pg.ts
 function resolveConnectionString(env) {
 	const connectionString = typeof env.DATABASE_URL === "string" && env.DATABASE_URL.length > 0 ? env.DATABASE_URL : typeof env.HYPERDRIVE?.connectionString === "string" && env.HYPERDRIVE.connectionString.length > 0 ? env.HYPERDRIVE.connectionString : void 0;

package/dist/runtime/better-auth.mjs

@@ -1,5 +1,5 @@
 import { n as applySqliteAuthMigrations } from "../auth-migrations-BwLPwRgH.mjs";
-import { t as createVoidAuthRuntime } from "../better-auth-shared-BrfZ78iY.mjs";
+import { t as createVoidAuthRuntime } from "../better-auth-shared-CjnJZFC0.mjs";
 //#region src/runtime/better-auth.ts
 async function resolveDatabase(env) {
 	if (!env.DB) throw new Error("auth: Better Auth requires the \"DB\" D1 binding for sqlite apps.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -332,7 +332,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.7.4"
+    "@void/md": "0.7.5"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/skills/void/docs/guide/pages-routing/overview.md

@@ -195,6 +195,17 @@ router.refresh(); // re-fetch current page props
 router.visit('/logout', { method: 'POST' }); // non-GET navigation
 ```
 
+For dynamic route params, use `useParams()` from the same adapter package:
+
+```tsx
+import { useParams } from '@void/react';
+
+export default function PostPage() {
+  const { id } = useParams<{ id: string }>();
+  return <h1>Post {id}</h1>;
+}
+```
+
 ## Scroll Restoration
 
 The Void Router automatically saves and restores scroll position during client-side navigation:

package/skills/void/docs/reference/api.md

@@ -742,7 +742,8 @@ Imported from `"@void/vue"`.
 | Export                             | Description                                                                                                                                                                                                                                       |
 | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `Link`                             | Vue component for SPA navigation. Renders `<a>` for GET, `<button>` for non-GET methods. Props: `href`, `method`, `data`, `prefetch`, `cacheFor`, `preserveScroll`, `preserveState`, `replace`, `reloadDocument`, `viewTransition`, `onNavigate`. |
-| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                                  |
+| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`, `params`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                        |
+| `useParams()`                      | Returns dynamic route params for the page currently being rendered.                                                                                                                                                                               |
 | `useNavigation()`                  | Returns pending navigation state: `{ state, location, method }`, where `state` is `"idle"`, `"loading"`, or `"submitting"` and `location` is the pending destination.                                                                             |
 | `useForm(url, defaults, options?)` | Typed reactive form helper bound to a page action URL. Returns `{ data, post, put, patch, delete, pending, errors, error, hasChanges, wasSuccessful, recentlySuccessful, reset, clearErrors, clearError }`.                                       |
 | `useShared()`                      | Returns shared data injected by middleware via `c.set("shared", {...})`.                                                                                                                                                                          |
@@ -789,7 +790,8 @@ Imported from `"@void/react"`.
 | Export                             | Description                                                                                                                                                                                                                                         |
 | ---------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `Link`                             | React component for SPA navigation. Renders `<a>` for GET, `<button>` for non-GET methods. Props: `href`, `method`, `data`, `prefetch`, `cacheFor`, `preserveScroll`, `preserveState`, `replace`, `reloadDocument`, `viewTransition`, `onNavigate`. |
-| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`. React navigations are scheduled as transitions.                                    |
+| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`, `params`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`. React navigations are scheduled as transitions.                          |
+| `useParams()`                      | Returns dynamic route params for the page currently being rendered.                                                                                                                                                                                 |
 | `useNavigation()`                  | Returns pending navigation state: `{ state, location, method }`, where `state` is `"idle"`, `"loading"`, or `"submitting"` and `location` is the pending destination.                                                                               |
 | `useForm(url, defaults, options?)` | Form helper hook. Returns `{ data, setData, post, put, patch, delete, pending, errors, error, hasChanges, wasSuccessful, recentlySuccessful, reset, clearErrors, clearError }`.                                                                     |
 | `action(url, options?)`            | Awaitable one-shot page action helper. Uses `POST` by default and accepts `{ data, method, params }`, where `method` can be `"PUT"`, `"PATCH"`, or `"DELETE"`. Returns an `ActionResult`.                                                           |
@@ -845,7 +847,8 @@ Imported from `"@void/svelte"`.
 | `Link`                             | Svelte component for SPA navigation. Renders `<a>` for GET, `<button>` for non-GET methods. Props: `href`, `method`, `data`, `prefetch`, `cacheFor`, `preserveScroll`, `preserveState`, `replace`, `reloadDocument`, `viewTransition`, `onNavigate`. |
 | `useForm(url, defaults, options?)` | Form helper using Svelte 5 runes. Returns `{ data, post, put, patch, delete, pending, errors, error, hasChanges, wasSuccessful, recentlySuccessful, reset, clearErrors, clearError }`.                                                               |
 | `useShared()`                      | Returns shared data injected by middleware via `c.set("shared", {...})`.                                                                                                                                                                             |
-| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                                     |
+| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`, `params`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                           |
+| `useParams()`                      | Returns dynamic route params for the page currently being rendered.                                                                                                                                                                                  |
 | `useNavigation()`                  | Returns pending navigation state: `{ state, location, method }`, where `state` is `"idle"`, `"loading"`, or `"submitting"` and `location` is the pending destination.                                                                                |
 
 Svelte `Link` GET `data` is merged into the rendered `href` query string. Primitive values are serialized with `String(value)`, arrays become repeated keys, `null` and `undefined` are omitted, and nested objects throw. `prefetch` and `reloadDocument` are GET-only and throw for mutation links.
@@ -888,7 +891,8 @@ Imported from `"@void/solid"`.
 | `Link`                             | Solid component for SPA navigation. Renders `<a>` for GET, `<button>` for non-GET methods. Props: `href`, `method`, `data`, `prefetch`, `cacheFor`, `preserveScroll`, `preserveState`, `replace`, `reloadDocument`, `viewTransition`, `onNavigate`. |
 | `useForm(url, defaults, options?)` | Form helper using Solid stores. Returns `{ data, setData, post, put, patch, delete, pending, errors, error, hasChanges, wasSuccessful, recentlySuccessful, reset, clearErrors, clearError }`.                                                       |
 | `useShared()`                      | Returns shared data injected by middleware via `c.set("shared", {...})`.                                                                                                                                                                            |
-| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                                    |
+| `useRouter()`                      | Returns the Void Router with current route state (`url`, `path`, `query`, `params`) and navigation methods: `visit`, `refresh`, awaitable `prefetch`, `flush`, `flushAll`.                                                                          |
+| `useParams()`                      | Returns dynamic route params for the page currently being rendered.                                                                                                                                                                                 |
 | `useNavigation()`                  | Returns pending navigation state: `{ state, location, method }`, where `state` is `"idle"`, `"loading"`, or `"submitting"` and `location` is the pending destination.                                                                               |
 
 Solid `Link` GET `data` is merged into the rendered `href` query string. Primitive values are serialized with `String(value)`, arrays become repeated keys, `null` and `undefined` are omitted, and nested objects throw. `prefetch` and `reloadDocument` are GET-only and throw for mutation links.