void 0.7.6 → 0.7.8

package/dist/{auth-DrfOTMmr.d.mts → auth-DmuALf16.d.mts}

@@ -5,16 +5,16 @@ import { Context, Env } from "hono";
 //#region src/runtime/auth.d.ts
 type AuthUser = User;
 type AuthSession = Session;
-interface AuthState {
+type AuthState = {
   session: AuthSession;
   user: AuthUser;
-}
-interface VoidAuthConfigContext {
+};
+type VoidAuthConfigContext = {
   defaults: BetterAuthOptions;
   env: Record<string, unknown>;
   dialect: "sqlite" | "postgresql";
   request: Request;
-}
+};
 type VoidAuthConfig = BetterAuthOptions | ((ctx: VoidAuthConfigContext) => BetterAuthOptions);
 /**
 * Shared AsyncLocalStorage that holds the authenticated Better Auth state for the

package/dist/{auth-cmd-Dk0acCT5.mjs → auth-cmd-CKKnwjJr.mjs}

@@ -1,6 +1,6 @@
 import { c as R } from "./dist-Dayj3gCK.mjs";
-import { c as getToken, d as removeToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
-import { n as runLoginCommand } from "./login-B5HHT32i.mjs";
+import { c as getToken, d as removeToken, n as PlatformClient } from "./client-BCHb449S.mjs";
+import { n as runLoginCommand } from "./login-B-hYch9Z.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/auth-cmd.ts
 async function runAuthCommand(root, args) {

package/dist/{better-auth-shared-CZsIpjey.d.mts → better-auth-shared-HXlHRw02.d.mts}

@@ -1,11 +1,11 @@
-import { i as VoidAuthConfig, n as AuthState } from "./auth-DrfOTMmr.mjs";
+import { i as VoidAuthConfig, n as AuthState } from "./auth-DmuALf16.mjs";
 import { DBFieldAttribute } from "better-auth/db";
 import { BetterAuthOptions, betterAuth } from "better-auth";
 import { Context } from "hono";
 
 //#region src/auth/drizzle.d.ts
 type AuthIdStrategy = "serial" | "text" | "uuid";
-interface VoidAuthMigrationField {
+type VoidAuthMigrationField = {
   type: DBFieldAttribute["type"];
   required: boolean;
   unique: boolean;
@@ -16,17 +16,17 @@ interface VoidAuthMigrationField {
     field: string;
     onDelete?: "no action" | "restrict" | "cascade" | "set null" | "set default";
   };
-}
-interface VoidAuthMigrationTable {
+};
+type VoidAuthMigrationTable = {
   name: string;
   order: number;
   fields: Record<string, VoidAuthMigrationField>;
-}
-interface VoidAuthMigrationSchema {
+};
+type VoidAuthMigrationSchema = {
   dialect: "sqlite" | "postgresql";
   idStrategy: AuthIdStrategy;
-  tables: ReadonlyArray<VoidAuthMigrationTable>;
-}
+  tables: Array<VoidAuthMigrationTable>;
+};
 //#endregion
 //#region src/auth/providers.d.ts
 declare const VOID_SOCIAL_AUTH_PROVIDERS: readonly ["apple", "atlassian", "cognito", "discord", "dropbox", "facebook", "figma", "github", "gitlab", "google", "huggingface", "kakao", "kick", "line", "linear", "linkedin", "microsoft", "naver", "notion", "paybin", "paypal", "polar", "railway", "reddit", "roblox", "salesforce", "slack", "spotify", "tiktok", "twitch", "twitter", "vercel", "vk", "zoom"];
@@ -36,12 +36,12 @@ type VoidAuthProvider = (typeof VOID_AUTH_PROVIDERS)[number];
 //#endregion
 //#region src/runtime/better-auth-shared.d.ts
 type VoidAuthDialect = "sqlite" | "postgresql";
-interface VoidAuthRuntimeOptions {
+type VoidAuthRuntimeOptions = {
   dialect: VoidAuthDialect;
-  providers: ReadonlyArray<VoidAuthProvider> | null;
+  providers: Array<VoidAuthProvider> | null;
   userConfig?: VoidAuthConfig;
-}
-interface VoidAuthEnv extends Record<string, unknown> {
+};
+type VoidAuthEnv = Record<string, unknown> & {
   DB?: D1Database;
   DATABASE_URL?: string;
   HYPERDRIVE?: {
@@ -52,8 +52,8 @@ interface VoidAuthEnv extends Record<string, unknown> {
   GITHUB_OAUTH_SECRET?: string;
   GOOGLE_OAUTH_ID?: string;
   GOOGLE_OAUTH_SECRET?: string;
-}
-interface VoidAuthRuntimeApi {
+};
+type VoidAuthRuntimeApi = {
   resolveVoidAuthOptions(request: Request, env: VoidAuthEnv, runtime: VoidAuthRuntimeOptions, databaseOverride?: NonNullable<BetterAuthOptions["database"]>, disposeOverride?: () => Promise<void>): Promise<{
     options: BetterAuthOptions;
     dispose(): Promise<void>;
@@ -66,6 +66,6 @@ interface VoidAuthRuntimeApi {
   runVoidAuthMiddleware(c: Context, next: () => Promise<void>, runtime: VoidAuthRuntimeOptions, databaseOverride?: NonNullable<BetterAuthOptions["database"]>, disposeOverride?: () => Promise<void>): Promise<void>;
   handleVoidAuthRequest(c: Context, runtime: VoidAuthRuntimeOptions, databaseOverride?: NonNullable<BetterAuthOptions["database"]>, disposeOverride?: () => Promise<void>): Promise<Response>;
   runVoidAuthMigrations(request: Request, env: VoidAuthEnv, runtime: VoidAuthRuntimeOptions, migrationSchema: VoidAuthMigrationSchema): Promise<void>;
-}
+};
 //#endregion
 export { VoidAuthRuntimeOptions as i, VoidAuthEnv as n, VoidAuthRuntimeApi as r, VoidAuthDialect as t };

package/dist/{cache-DGSZ5Bh6.mjs → cache-GQaCgNU_.mjs}

@@ -1,7 +1,7 @@
 import { i as dim, n as cliTitle, r as createSpinner } from "./output-BwlcIYSR.mjs";
 import { c as R, g as ge, y as ye } from "./dist-Dayj3gCK.mjs";
 import { r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
+import { c as getToken, n as PlatformClient } from "./client-BCHb449S.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-DdjLQ2tB.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {

package/dist/{cancel-deploy-CrY3kt93.mjs → cancel-deploy-Lm-s-VNM.mjs}

@@ -1,7 +1,7 @@
 import { n as cliTitle } from "./output-BwlcIYSR.mjs";
 import { c as R, g as ge, v as ue, x as q, y as ye } from "./dist-Dayj3gCK.mjs";
 import { r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
+import { c as getToken, n as PlatformClient } from "./client-BCHb449S.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = new Set([
 	"pending",

package/dist/cli/cli.mjs

@@ -1503,7 +1503,7 @@ else if (command === "deploy") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../deploy-B5rTuzXw.mjs").then((n) => n.t).then(({ runDeploy }) => {
+	import("../deploy-BVhinNvN.mjs").then((n) => n.t).then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -1515,13 +1515,13 @@ else if (command === "deploy") {
 			process.exit(1);
 		});
 	});
-} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-Dk0acCT5.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DKiQYdSd.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-BXHx515u.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CDQhvYNZ.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-DvBg7Oc5.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CnrQY2b6.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-C0EY2k27.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-CKKnwjJr.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
+else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DDDakkqn.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
+else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-DwG7uDho.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
+else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CwjrEwk9.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-DEgoBwm1.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-kXobUKhc.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-CpeKIqlM.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
 	let prepareArgs;
@@ -1531,7 +1531,7 @@ else if (command === "prepare") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../prepare-BrfiJBju.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-CKzO06-Z.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			R.error(err.message ?? err);
 			process.exit(1);
@@ -1539,7 +1539,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-BiXWyKEf.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-CfdGhcG_.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1552,7 +1552,7 @@ else if (command === "prepare") {
 			process.exit(1);
 		});
 	});
-} else if (command === "mcp") import("../mcp-Bdu9bnjR.mjs").then(({ runMcp }) => {
+} else if (command === "mcp") import("../mcp-BcssKxth.mjs").then(({ runMcp }) => {
 	runMcp();
 });
 else if (command === "-v" || command === "--version") {
@@ -1628,29 +1628,29 @@ else if (command === "-v" || command === "--version") {
 		const root = process.cwd();
 		switch (cmd) {
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-BiXWyKEf.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-CfdGhcG_.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-B5rTuzXw.mjs").then((n) => n.t);
+				const { runDeploy } = await import("../deploy-BVhinNvN.mjs").then((n) => n.t);
 				await runDeploy(root);
 				return;
 			}
 			case "mcp": {
-				const { runMcp } = await import("../mcp-Bdu9bnjR.mjs");
+				const { runMcp } = await import("../mcp-BcssKxth.mjs");
 				runMcp();
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-Dk0acCT5.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-DKiQYdSd.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-BXHx515u.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-CDQhvYNZ.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-DvBg7Oc5.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CnrQY2b6.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-C0EY2k27.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-CKKnwjJr.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
+			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-DDDakkqn.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
+			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-DwG7uDho.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
+			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-CwjrEwk9.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-DEgoBwm1.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-kXobUKhc.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-CpeKIqlM.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-BrfiJBju.mjs");
+				const { runPrepareCommand } = await import("../prepare-CKzO06-Z.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}

package/dist/{client-DCqnMpDt.mjs → client-BCHb449S.mjs}

@@ -5,6 +5,7 @@ import { t as isVoidInternalStaging } from "./project-TqORyHn8.mjs";
 import { t as cfAccessHeaders } from "./cf-access-Dee5cXxL.mjs";
 import { r as getPackageDir } from "./agents-DqkFfc2c.mjs";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
 import { homedir } from "node:os";
 import { Entry } from "@napi-rs/keyring";
 import { spawnSync } from "node:child_process";
@@ -143,6 +144,7 @@ async function runLogin(root = process.cwd(), provider = "github", onUrl) {
 	const http = await import("node:http");
 	const { exec } = await import("node:child_process");
 	const apiUrl = getApiUrl(root);
+	const state = randomBytes(32).toString("hex");
 	return new Promise((resolve, reject) => {
 		const server = http.createServer((req, res) => {
 			const url = new URL(req.url, `http://localhost`);
@@ -151,6 +153,11 @@ async function runLogin(root = process.cwd(), provider = "github", onUrl) {
 				res.end("Not found");
 				return;
 			}
+			if (url.searchParams.get("state") !== state) {
+				res.writeHead(400, { "Content-Type": "text/html" });
+				res.end(page("Login failed", "Invalid login callback. Please try again."));
+				return;
+			}
 			if (url.searchParams.get("error") === "signup_restricted") {
 				res.writeHead(403, { "Content-Type": "text/html" });
 				res.end(page("Signup restricted", "Your email is not on the approved list for this environment."));
@@ -179,9 +186,12 @@ async function runLogin(root = process.cwd(), provider = "github", onUrl) {
 				return;
 			}
 			const redirect = `http://localhost:${addr.port}/callback`;
-			const loginUrl = `${apiUrl}/auth/login?redirect=${encodeURIComponent(redirect)}&provider=${provider}`;
-			onUrl?.(loginUrl);
-			openBrowser(loginUrl, exec);
+			const loginUrl = new URL("auth/login", apiUrl.endsWith("/") ? apiUrl : `${apiUrl}/`);
+			loginUrl.searchParams.set("redirect", redirect);
+			loginUrl.searchParams.set("provider", provider);
+			loginUrl.searchParams.set("state", state);
+			onUrl?.(loginUrl.href);
+			openBrowser(loginUrl.href, exec);
 		});
 		setTimeout(() => {
 			server.close();

package/dist/{config-BIa9HwVX.mjs → config-DqkeX_Fa.mjs}

@@ -105,16 +105,16 @@ function assertSingleSplat(source, kind) {
 function assertUniqueCaptureNames(source, kind) {
 	const seen = /* @__PURE__ */ new Set();
 	const dups = /* @__PURE__ */ new Set();
-	const re = /:([A-Za-z0-9_]+)\*?/g;
-	let m;
-	while ((m = re.exec(source)) !== null) {
-		const name = m[1];
+	const captureNameRe = /:([A-Za-z0-9_]+)\*?/g;
+	let captureMatch;
+	while ((captureMatch = captureNameRe.exec(source)) !== null) {
+		const name = captureMatch[1];
 		if (seen.has(name)) dups.add(name);
 		seen.add(name);
 	}
 	if (countSplats(source) >= 1 && seen.has("splat")) dups.add("splat");
 	if (dups.size > 0) {
-		const names = [...dups].map((n) => `:${n}`).join(", ");
+		const names = [...dups].map((name) => `:${name}`).join(", ");
 		throw new Error(`${kind} source "${source}" in ${CONFIG_FILE} has duplicate capture group name(s) (${names}); each :name token must be unique within a pattern, and :splat collides with a bare "*"`);
 	}
 }

package/dist/{create-project-Bg88Kq_I.mjs → create-project-B4_81uPO.mjs}

@@ -1,7 +1,7 @@
 import { s as import_picocolors } from "./output-BwlcIYSR.mjs";
 import { _ as me, c as R, i as Ee, l as Re, x as q } from "./dist-Dayj3gCK.mjs";
 import { a as writeProjectConfig } from "./project-TqORyHn8.mjs";
-import { s as getSiteDomain, t as PlatformApiError } from "./client-DCqnMpDt.mjs";
+import { s as getSiteDomain, t as PlatformApiError } from "./client-BCHb449S.mjs";
 import { n as validateProjectSlug } from "./project-slug-KRvHQEQI.mjs";
 import { n as inferDefaultSlug } from "./resolve-project-DdjLQ2tB.mjs";
 //#region src/cli/prompt.ts

package/dist/{db-DvBg7Oc5.mjs → db-DEgoBwm1.mjs}

@@ -2,12 +2,12 @@ import { a as join, o as relative, r as extname, s as resolve } from "./pathe.M-
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-BwlcIYSR.mjs";
 import { c as R, g as ge, y as ye } from "./dist-Dayj3gCK.mjs";
 import { r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-BIa9HwVX.mjs";
+import { c as getToken, n as PlatformClient } from "./client-BCHb449S.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-DqkeX_Fa.mjs";
 import { r as detectFramework } from "./plugin-inference-CXUuq0aC.mjs";
 import { a as writeJournal, i as stripSqlExt, r as readJournal, t as collectMigrations } from "./collect-CjeZgz5D.mjs";
 import { n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence } from "./validate-CaMavMxu.mjs";
-import { formatTimestamp } from "./gen-C0EY2k27.mjs";
+import { formatTimestamp } from "./gen-CpeKIqlM.mjs";
 import { existsSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { execFileSync } from "node:child_process";
@@ -298,8 +298,8 @@ function printTable(rows) {
 		}
 		return max;
 	});
-	const lines = [cols.map((col, i) => col.padEnd(widths[i])).join("  "), widths.map((w) => "─".repeat(w)).join("──")];
-	for (const row of rows) lines.push(cols.map((col, i) => String(row[col] ?? "NULL").padEnd(widths[i])).join("  "));
+	const lines = [cols.map((col, columnIndex) => col.padEnd(widths[columnIndex])).join("  "), widths.map((width) => "─".repeat(width)).join("──")];
+	for (const row of rows) lines.push(cols.map((col, columnIndex) => String(row[col] ?? "NULL").padEnd(widths[columnIndex])).join("  "));
 	console.log(lines.join("\n"));
 }
 async function runMigrate(root, dialect, remote) {
@@ -469,15 +469,19 @@ async function runRenameMigrations(root, dialect) {
 	let baseTime;
 	if (timestampFiles.length > 0) {
 		const earliest = timestampFiles[0].slice(0, 14);
-		const y = +earliest.slice(0, 4), mo = +earliest.slice(4, 6) - 1, d = +earliest.slice(6, 8);
-		const h = +earliest.slice(8, 10), mi = +earliest.slice(10, 12), s = +earliest.slice(12, 14);
-		baseTime = new Date(Date.UTC(y, mo, d, h, mi, s - oldStyleFiles.length));
+		const year = +earliest.slice(0, 4);
+		const monthIndex = +earliest.slice(4, 6) - 1;
+		const day = +earliest.slice(6, 8);
+		const hour = +earliest.slice(8, 10);
+		const minute = +earliest.slice(10, 12);
+		const second = +earliest.slice(12, 14);
+		baseTime = new Date(Date.UTC(year, monthIndex, day, hour, minute, second - oldStyleFiles.length));
 	} else baseTime = /* @__PURE__ */ new Date(Date.now() - oldStyleFiles.length * 1e3);
 	const renames = [];
-	for (let i = 0; i < oldStyleFiles.length; i++) {
-		const oldName = oldStyleFiles[i];
+	for (let fileIndex = 0; fileIndex < oldStyleFiles.length; fileIndex++) {
+		const oldName = oldStyleFiles[fileIndex];
 		const description = oldName.replace(/^\d+_/, "");
-		const newName = `${formatTs(new Date(baseTime.getTime() + i * 1e3))}_${description}`;
+		const newName = `${formatTs(new Date(baseTime.getTime() + fileIndex * 1e3))}_${description}`;
 		renames.push({
 			from: oldName,
 			to: newName
@@ -695,11 +699,11 @@ async function runExport(root, args, dialect) {
 					const rows = await client.query(`SELECT * FROM "${table}"`);
 					for (const row of rows.rows) {
 						const cols = Object.keys(row);
-						const vals = cols.map((c) => {
-							const v = row[c];
-							if (v === null) return "NULL";
-							if (typeof v === "number") return String(v);
-							return `'${String(v).replace(/'/g, "''")}'`;
+						const vals = cols.map((column) => {
+							const value = row[column];
+							if (value === null) return "NULL";
+							if (typeof value === "number") return String(value);
+							return `'${String(value).replace(/'/g, "''")}'`;
 						});
 						parts.push(`INSERT INTO "${table}" (${cols.join(", ")}) VALUES (${vals.join(", ")});`);
 					}
@@ -741,11 +745,11 @@ async function runExport(root, args, dialect) {
 				const rows = db.prepare(`SELECT * FROM "${table}"`).all();
 				for (const row of rows) {
 					const cols = Object.keys(row);
-					const vals = cols.map((c) => {
-						const v = row[c];
-						if (v === null) return "NULL";
-						if (typeof v === "number") return String(v);
-						return `'${String(v).replace(/'/g, "''")}'`;
+					const vals = cols.map((column) => {
+						const value = row[column];
+						if (value === null) return "NULL";
+						if (typeof value === "number") return String(value);
+						return `'${String(value).replace(/'/g, "''")}'`;
 					});
 					parts.push(`INSERT INTO "${table}" (${cols.join(", ")}) VALUES (${vals.join(", ")});`);
 				}
@@ -763,7 +767,7 @@ async function runExport(root, args, dialect) {
 	}
 }
 async function runSetUrl(root) {
-	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-BIa9HwVX.mjs").then((n) => n.n);
+	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-DqkeX_Fa.mjs").then((n) => n.n);
 	if (getDialect(readVoidConfig(root)) !== "postgresql") {
 		R.error("db: This command is only for PostgreSQL projects. Set \"database\": \"pg\" in void.json.");
 		process.exit(1);

package/dist/{delete-DXcX1yQZ.mjs → delete-B3XRid-6.mjs}

@@ -1,7 +1,7 @@
 import { n as cliTitle, r as createSpinner } from "./output-BwlcIYSR.mjs";
 import { _ as me, c as R, g as ge, l as Re, u as Se, x as q, y as ye } from "./dist-Dayj3gCK.mjs";
 import { i as removeProjectConfig, r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
+import { c as getToken, n as PlatformClient } from "./client-BCHb449S.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-DdjLQ2tB.mjs";
 //#region src/cli/delete.ts
 async function runDeleteCommand(root, slug, options) {

package/dist/{deploy-B5rTuzXw.mjs → deploy-BVhinNvN.mjs}

@@ -4,29 +4,29 @@ import { n as cliTitle, r as createSpinner, s as import_picocolors } from "./out
 import { t as findVoidAuthConfig } from "./config-CvHtTM0q.mjs";
 import { c as R, g as ge, u as Se, v as ue, x as q, y as ye } from "./dist-Dayj3gCK.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { a as isExpiredTokenError, c as getToken, i as isCliOutdatedError, l as getTokenSource, n as PlatformClient, o as parsePlatformErrorBody, t as PlatformApiError, u as isStagingMode } from "./client-DCqnMpDt.mjs";
-import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-BIa9HwVX.mjs";
-import { i as scanJobsSync, n as scanWebSocketRoutesSync, r as scanQueuesSync, t as scanRoutes } from "./scan-vv5u7rHu.mjs";
+import { a as isExpiredTokenError, c as getToken, i as isCliOutdatedError, l as getTokenSource, n as PlatformClient, o as parsePlatformErrorBody, t as PlatformApiError, u as isStagingMode } from "./client-BCHb449S.mjs";
+import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-DqkeX_Fa.mjs";
+import { i as scanJobsSync, n as scanWebSocketRoutesSync, r as scanQueuesSync, t as scanRoutes } from "./scan-B8iEm8xn.mjs";
 import { i as inferProjectBindings, l as validateSsrEntry, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-CXUuq0aC.mjs";
 import { i as voidWarn, r as voidLog } from "./log-DXdqnmhF.mjs";
 import { t as discoverSchema } from "./discover-B7FkXBLB.mjs";
 import { t as findEnvFile } from "./env-types-DknSA4SO.mjs";
-import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-DJKjR_8q.mjs";
+import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-Bc_aiBUm.mjs";
 import { n as writeDrizzleConfig } from "./config-BzM9Dy7T.mjs";
 import { t as collectMigrations } from "./collect-CjeZgz5D.mjs";
 import { r as validateMigrations, t as assertJournalCoherence } from "./validate-CaMavMxu.mjs";
-import { t as scanPages } from "./scan-Ba4hFwlH.mjs";
-import { n as promptProjectSelection, r as promptProjectSetupAction, t as promptAndCreateProject } from "./create-project-Bg88Kq_I.mjs";
+import { t as scanPages } from "./scan-CWfLxtOe.mjs";
+import { n as promptProjectSelection, r as promptProjectSetupAction, t as promptAndCreateProject } from "./create-project-B4_81uPO.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-DdjLQ2tB.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-YVkHjOyq.mjs";
-import { t as promptForLoginToken } from "./login-B5HHT32i.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-C7Yf6_CN.mjs";
+import { t as promptForLoginToken } from "./login-B-hYch9Z.mjs";
 import { i as resolveProjectCommand, n as detectPreset, r as formatProjectCommand, t as FRAMEWORK_PRESETS } from "./preset-BhnZpb7t.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { build, loadEnv } from "vite";
-import { homedir } from "node:os";
 import { createHash } from "node:crypto";
+import { homedir } from "node:os";
 import { parse } from "jsonc-parser";
 import { execFile, execFileSync, execSync, spawnSync } from "node:child_process";
 import { hash } from "blake3-jit";
@@ -1546,8 +1546,8 @@ function computeAssetHashes(content, filePath) {
 }
 /**
 * Create a filter function that excludes .assetsignore, _headers, _redirects,
-* OS metadata files, deploy-internal patterns, and any patterns listed in a
-* .assetsignore file.
+* OS metadata files, dotenv files, deploy-internal patterns, and any patterns
+* listed in a .assetsignore file.
 * Matches Wrangler's createAssetsIgnoreFunction from workers-shared/utils/helpers.ts.
 */
 function createAssetsIgnoreFunction(dir, extraPatterns = []) {
@@ -1556,6 +1556,8 @@ function createAssetsIgnoreFunction(dir, extraPatterns = []) {
 		"/_redirects",
 		"/_headers",
 		".DS_Store",
+		".env",
+		".env.*",
 		...extraPatterns
 	];
 	const assetsIgnorePath = join(dir, ".assetsignore");
@@ -1598,7 +1600,7 @@ async function collectAndHashAssets(dir, onProgress, opts = {}) {
 	const assetFiles = /* @__PURE__ */ new Map();
 	try {
 		const { isIgnored, assetsIgnoreFilePresent } = createAssetsIgnoreFunction(dir, opts.ignorePatterns);
-		const files = collectFiles(dir);
+		const files = collectAssetFiles(dir);
 		let processed = 0;
 		for (const filePath of files) {
 			processed++;
@@ -1846,6 +1848,24 @@ function collectFiles(dir) {
 	}
 	return files;
 }
+/**
+* Recursively collect static asset file paths, refusing symlinks so deploys
+* cannot publish bytes from outside the intended asset root.
+*/
+function collectAssetFiles(root, dir = root) {
+	const files = [];
+	const entries = readdirSync(dir, { withFileTypes: true });
+	for (const entry of entries) {
+		const fullPath = join(dir, entry.name);
+		if (entry.isSymbolicLink()) {
+			const relativePath = "/" + toSlash(relative(root, fullPath));
+			throw new Error(`deploy: Refusing to upload symlink as an asset: ${relativePath}`);
+		}
+		if (entry.isDirectory()) files.push(...collectAssetFiles(root, fullPath));
+		else files.push(fullPath);
+	}
+	return files;
+}
 //#endregion
 //#region src/cli/wrapper.ts
 const BUNDLED_ENTRY_RE = /^index\.(?:m?js|cjs)$/;
@@ -1992,6 +2012,9 @@ function generateWrapperSource(renamedEntry, handlersModule, features, migration
 	if (needsFetchWrap) {
 		lines.push("async function wrappedFetch(request, env, ctx) {");
 		lines.push("  const url = new URL(request.url);");
+		lines.push("  if (request.method === \"GET\" && url.pathname === \"/__void/ready\") {");
+		lines.push("    return Response.json({ ready: true });");
+		lines.push("  }");
 		if (migrations && migrations.length > 0) {
 			lines.push("  if (request.method === \"POST\" && url.pathname === \"/__void/migrate\") {");
 			lines.push("    const handler = createMigrationHandler(env, __migrations, __migrationDialect);");

package/dist/{domain-CDQhvYNZ.mjs → domain-CwjrEwk9.mjs}

@@ -1,7 +1,7 @@
 import { s as import_picocolors } from "./output-BwlcIYSR.mjs";
 import { c as R, u as Se } from "./dist-Dayj3gCK.mjs";
 import { r as readProjectConfig } from "./project-TqORyHn8.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DCqnMpDt.mjs";
+import { c as getToken, n as PlatformClient } from "./client-BCHb449S.mjs";
 //#region src/cli/domain.ts
 async function runDomainCommand(root, args) {
 	const token = getToken(root);
@@ -37,7 +37,15 @@ async function runDomainCommand(root, args) {
 async function domainAdd(client, projectId, hostname) {
 	const domain = await client.addDomain(projectId, hostname);
 	R.success(`Domain ${hostname} added (status: ${domain.status})`);
-	Se(`Add a CNAME record:\n  ${hostname} → ${domain.cname_target}`, "DNS Setup");
+	const sections = [];
+	if (domain.cname_target) sections.push(`CNAME (traffic)\n    ${hostname} → ${domain.cname_target}`);
+	if (domain.ownership_verification) sections.push(`TXT (ownership verification)\n    ${domain.ownership_verification.name} → ${domain.ownership_verification.value}`);
+	const sslRecords = (domain.ssl_validation_records ?? []).filter((r) => Boolean(r.txt_name) && Boolean(r.txt_value));
+	if (sslRecords.length > 0) {
+		const lines = sslRecords.map((r) => `    ${r.txt_name} → ${r.txt_value}`).join("\n");
+		sections.push(`TXT (SSL validation)\n${lines}`);
+	}
+	if (sections.length > 0) Se(sections.join("\n\n"), "DNS Setup");
 	R.info("Run `void domain status " + hostname + "` to check verification progress.");
 }
 async function domainRemove(client, projectId, hostname) {
@@ -72,8 +80,23 @@ async function domainStatus(client, projectId, hostname) {
 		`Status:      ${status.status}`,
 		`SSL Status:  ${status.ssl_status}`
 	];
+	if (status.ownership_verification) lines.push(`Ownership:   pending`);
 	if (status.verification_errors && status.verification_errors.length > 0) lines.push(`Errors:      ${status.verification_errors.join(", ")}`);
 	Se(lines.join("\n"), "Domain Status");
+	const ownershipPending = Boolean(status.ownership_verification);
+	const sslPending = status.ssl_status !== "active";
+	if (ownershipPending || sslPending) {
+		const pendingSections = [];
+		if (ownershipPending && status.ownership_verification) pendingSections.push(`TXT (ownership verification)\n    ${status.ownership_verification.name} → ${status.ownership_verification.value}`);
+		if (sslPending) {
+			const sslRecords = (status.ssl_validation_records ?? []).filter((r) => Boolean(r.txt_name) && Boolean(r.txt_value) && r.status !== "active");
+			if (sslRecords.length > 0) {
+				const lines = sslRecords.map((r) => `    ${r.txt_name} → ${r.txt_value}`).join("\n");
+				pendingSections.push(`TXT (SSL validation)\n${lines}`);
+			}
+		}
+		if (pendingSections.length > 0) Se(pendingSections.join("\n\n"), "Add these DNS records to your provider");
+	}
 }
 //#endregion
 export { runDomainCommand };