void 0.9.2 → 0.10.1

package/dist/index.mjs

@@ -1,29 +1,29 @@
 import { r as __toESM } from "./chunk-DJd-R1mw.mjs";
 import { a as join, n as dirname, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { u as require_picocolors } from "./output-DeiS4oEX.mjs";
-import { C as hasApiRoutes, S as resolveSandboxConfig, T as resolveAssetRoutingPolicy, _ as readWranglerCompat, a as prerenderPagesNode, b as SANDBOX_MIGRATION_TAG, c as stripInternalEnvKeys, d as ensureWranglerCompatibilityDate, f as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, i as prerenderPages, l as LIVE_MIGRATION_TAG, m as nextDurableObjectMigrationTag, n as resolveDistDir, o as filterLoadedEnv, p as hasDurableObjectSqliteMigration, r as resolveWorkerDirName, s as resolveRemoteMode, u as ensureWranglerCompat, v as resolveLiveBindingConfig, w as hasDocumentRoutes, x as isSandboxEnabled, y as syncWranglerBindings } from "./deploy-CRU9fGjE.mjs";
+import { C as hasApiRoutes, S as resolveSandboxConfig, T as resolveAssetRoutingPolicy, _ as readWranglerCompat, a as prerenderPagesNode, b as SANDBOX_MIGRATION_TAG, c as stripInternalEnvKeys, d as ensureWranglerCompatibilityDate, f as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, i as prerenderPages, l as LIVE_MIGRATION_TAG, m as nextDurableObjectMigrationTag, n as resolveDistDir, o as filterLoadedEnv, p as hasDurableObjectSqliteMigration, r as resolveWorkerDirName, s as resolveRemoteMode, u as ensureWranglerCompat, v as resolveLiveBindingConfig, w as hasDocumentRoutes, x as isSandboxEnabled, y as syncWranglerBindings } from "./deploy-Cwa5sooV.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-CCMrHYQm.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-hhMYPVRT.mjs";
-import { c as getToken, u as isStagingMode } from "./client-DIfOFf1W.mjs";
+import { d as getToken, p as isStagingMode } from "./client-D4awzTnj.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-BVEC0lti.mjs";
-import { a as scanQueuesSync, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, t as scanMiddlewareSync } from "./scan-BNC_1OsY.mjs";
-import { a as SSR_CLIENT_ENTRY_RELATIVE_PATHS, c as validateSsrEntries, f as isIdentifier, g as walk, i as inferProjectBindings, l as validateSsrEntry, m as isMemberExpression, n as FRAMEWORK_SCAN_DIRS, o as SSR_SERVER_ENTRY_RELATIVE_PATHS, p as isLiteral, r as detectFramework, t as DEFAULT_SCAN_DIRS, u as inferBindingsFromSource } from "./plugin-inference-BUBhHt_1.mjs";
-import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-CWWZV4V1.mjs";
-import { r as parseDotenvFile } from "./dotenv-Bkoqyq9r.mjs";
-import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t as generateRouteTypes } from "./route-types-jxRfWuCb.mjs";
-import { n as ensureProjectTsconfig } from "./project-tsconfig-HAGjfY6w.mjs";
+import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
+import { a as scanQueuesSync, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, t as scanMiddlewareSync } from "./scan-DGEp1-1Q.mjs";
+import { a as SSR_CLIENT_ENTRY_RELATIVE_PATHS, c as validateSsrEntries, f as isIdentifier, g as walk, i as inferProjectBindings, l as validateSsrEntry, m as isMemberExpression, n as FRAMEWORK_SCAN_DIRS, o as SSR_SERVER_ENTRY_RELATIVE_PATHS, p as isLiteral, r as detectFramework, t as DEFAULT_SCAN_DIRS, u as inferBindingsFromSource } from "./plugin-inference-C3fLzFvP.mjs";
+import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-BdD_Fpms.mjs";
+import { r as parseDotenvFile } from "./dotenv-lS94ymhM.mjs";
+import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t as generateRouteTypes } from "./route-types-D03ryMXz.mjs";
 import { t as discoverSchema } from "./discover-C8N1I4tK.mjs";
 import { t as MagicString } from "./magic-string.es-C1Fb0uxq.mjs";
-import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-D6qI1ThV.mjs";
-import { a as loadUserEnvFile } from "./env-validation-DBJsxZLz.mjs";
-import { i as resolveLayoutIds } from "./scan-2YmJkYAf.mjs";
+import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
+import { a as loadUserEnvFile } from "./env-validation-LH6eoyW-.mjs";
+import { i as resolveLayoutIds } from "./scan-VCAM1oh3.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-Y0jshugF.mjs";
-import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-2fs1qTgy.mjs";
-import { t as INTERNAL_BINDING_PREFIXES } from "./env-raw-RDkMnSTC.mjs";
-import { n as defer } from "./defer-CouVukrf.mjs";
-import { VoidAssetRewriteError, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled } from "./runtime/handler.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BNWymgnH.mjs";
+import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-DqstQTGq.mjs";
+import { t as INTERNAL_BINDING_PREFIXES } from "./env-raw-Dtj1UAoK.mjs";
+import { n as defer } from "./defer-C-bdSM_b.mjs";
+import { VoidAssetRewriteError, basicAuth, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled } from "./runtime/handler.mjs";
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, rmSync, writeFileSync, writeSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { cloudflare } from "@cloudflare/vite-plugin";
@@ -654,7 +654,7 @@ export function createDb(d1) {
 			const migrationsDir = paths.migrationsDir;
 			if (!(existsSync(migrationsDir) && readdirSync(migrationsDir).some((f) => f.endsWith(".sql")))) {
 				if (dialect === "sqlite") {
-					const { getApplicationTables, getMiniflareDatabasePath } = await import("./runner-DLZ9E_cX.mjs");
+					const { getApplicationTables, getMiniflareDatabasePath } = await import("./runner-BQyKUqAL.mjs");
 					if ((await getApplicationTables(getMiniflareDatabasePath(options.localD1PersistRoot ?? join(root, ".void"), options.localD1DatabaseId ?? "local")).catch(() => [])).length > 0) return;
 				}
 				voidWarn(`Schema found but no migrations in ${paths.sourceRelative("db/migrations")}/.\n         \`void db push\` syncs the schema to your local DB without creating migration files.
@@ -1058,7 +1058,7 @@ function envSchemaPlugin(root, options = {}) {
 		if (!envFile) return;
 		mkdirSync(outDir, { recursive: true });
 		const { dts } = generateEnvTypes(envFile, outDir);
-		writeFileSync(join(outDir, "env.d.ts"), dts);
+		writeFileIfChanged(join(outDir, "env.d.ts"), dts);
 	}
 	async function importUserEnv() {
 		if (!envFile) return;
@@ -1654,7 +1654,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 						else warn();
 						return;
 					}
-					const { runPgMigrations, getPgAppliedMigrations } = await import("./runner-pg-Cv9V7ydr.mjs");
+					const { runPgMigrations, getPgAppliedMigrations } = await import("./runner-pg-BAheiT6v.mjs");
 					const { collectMigrations } = await import("./collect-9rO3JFNM.mjs").then((n) => n.n);
 					const { validateMigrations } = await import("./validate-CNWm-PsL.mjs").then((n) => n.i);
 					const allMigrations = collectMigrations(migrationsDir);
@@ -1669,7 +1669,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 					const applied = await runPgMigrations(migrationsDir, url);
 					if (applied.length > 0) voidLog(`Applied ${applied.length} migration(s): ${applied.join(", ")}`);
 				} else if (hasSqlMigrations) {
-					const { runMigrations, getMiniflareDatabasePath, getAppliedMigrations } = await import("./runner-DLZ9E_cX.mjs");
+					const { runMigrations, getMiniflareDatabasePath, getAppliedMigrations } = await import("./runner-BQyKUqAL.mjs");
 					const { collectMigrations } = await import("./collect-9rO3JFNM.mjs").then((n) => n.n);
 					const { validateMigrations } = await import("./validate-CNWm-PsL.mjs").then((n) => n.i);
 					const dbPath = getMiniflareDatabasePath(persistRoot, databaseId);
@@ -1686,7 +1686,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 					if (applied.length > 0) voidLog(`Applied ${applied.length} migration(s): ${applied.join(", ")}`);
 				}
 				if (auth?.enabled) {
-					const { runLocalVoidAuthMigrations } = await import("./node-CHWVVjO6.mjs");
+					const { runLocalVoidAuthMigrations } = await import("./node-B07cZs0d.mjs");
 					await runLocalVoidAuthMigrations(root, dialect, persistRoot, databaseId, auth.configPath);
 					voidLog("Applied Better Auth migrations");
 				}
@@ -2621,7 +2621,7 @@ function compileRouteTable(scan, routesDir, middlewareDir, jobsDir, queuesDir, s
 	lines.push("function __voidAnnotateRouting(response, trace) {");
 	lines.push("  if (!__VOID_DEV_ROUTING || !response) return response;");
 	lines.push("  const headers = new Headers(response.headers);");
-	lines.push("  headers.set(\"X-Void-Routing\", trace);");
+	lines.push("  try { headers.set(\"X-Void-Routing\", trace); } catch { return response; }");
 	lines.push("  return new Response(response.body, { status: response.status, statusText: response.statusText, headers });");
 	lines.push("}");
 	lines.push("");
@@ -2671,7 +2671,7 @@ function compileRouteTable(scan, routesDir, middlewareDir, jobsDir, queuesDir, s
 	if (options.nodeTarget) lines.push("    const __rewritePromise = app.fetch(rewriteReq, c.env);");
 	else lines.push("    const __rewritePromise = app.fetch(rewriteReq, c.env, c.executionCtx);");
 	lines.push("    if (!__VOID_DEV_ROUTING) return __rewritePromise;");
-	lines.push("    return __rewritePromise.then((res) => __voidAnnotateRouting(res, \"c.rewrite \\u2192 \" + path + \" (middleware)\"));");
+	lines.push("    return __rewritePromise.then((res) => __voidAnnotateRouting(res, \"c.rewrite -> \" + path + \" (middleware)\"));");
 	lines.push("  };");
 	lines.push("  const __origRedirect = c.redirect.bind(c);");
 	lines.push("  c.redirect = (location, status) => {");
@@ -3139,8 +3139,8 @@ window.__vite_plugin_react_preamble_installed__ = true;
 	return lines.join("\n");
 }
 function compilePrerenderCollector(lines, scan, ssr, options) {
-	const staticPaths = scan.pages.pages.filter((page) => page.prerender && page.params.length === 0 && !page.catchAll).map((page) => page.pattern);
-	const dynamicPages = scan.pages.pages.filter((page) => page.prerender && page.hasGetPrerenderPaths && (page.params.length > 0 || page.catchAll));
+	const staticPaths = scan.pages.pages.filter((page) => page.shouldPrerender && page.params.length === 0 && !page.catchAll).map((page) => page.pattern);
+	const dynamicPages = scan.pages.pages.filter((page) => page.shouldPrerender && page.hasGetPrerenderPaths && (page.params.length > 0 || page.catchAll));
 	const explicitPaths = options.explicitPrerenderPaths ?? [];
 	lines.push(`function __voidBuildPrerenderPath(pattern, params) {`);
 	lines.push(`  let path = pattern;`);
@@ -3194,11 +3194,16 @@ function compilePrerenderCollector(lines, scan, ssr, options) {
 function compilePageRoutes(lines, scan, pages, options) {
 	lines.push(`import { handlePageGet, handlePageMutation } from ${JSON.stringify(pages.protocolPath)};`);
 	lines.push(`import { renderHeadToString, renderHtmlAttrs, renderBodyAttrs } from ${JSON.stringify(pages.headPath)};`);
-	lines.push(`import { renderPage } from "virtual:void-pages-renderer";`);
+	lines.push(`import * as __voidPagesRenderer from "virtual:void-pages-renderer";`);
 	if (options.dev) lines.push(`import { getVoidPagesDevCss } from "virtual:void-pages-dev-assets";`);
-	const hasIslandPages = scan.pages.pages.some((p) => p.island);
+	const hasIslandPages = scan.pages.pages.some((p) => p.renderMode === "island");
 	if (hasIslandPages) lines.push(`import { renderIslandPage } from "virtual:void-islands-renderer";`);
 	lines.push("");
+	lines.push(`const renderPage = __voidPagesRenderer.renderPage;`);
+	lines.push(`if (typeof __voidPagesRenderer.renderPreambleScript === "string") {`);
+	lines.push(`  renderPage.preambleScript = __voidPagesRenderer.renderPreambleScript;`);
+	lines.push(`}`);
+	lines.push("");
 	lines.push(`const __voidHeadConfig = ${JSON.stringify(pages.headConfig ?? null)};`);
 	lines.push("");
 	pushDefaultErrorPageHelpers(lines, options);
@@ -3447,17 +3452,17 @@ function compilePageRoutes(lines, scan, pages, options) {
 			lines.push(`const ${headVarName} = () => (${JSON.stringify(headObj)});`);
 			mdHeadRef = headVarName;
 		}
-		const renderer = page.island ? "renderIslandPage" : "renderPage";
-		const assetTags = page.island && pages.islandClientEntryId ? "getIslandsAssetTags" : "getPagesAssetTags";
-		const islandFlag = page.island ? ", true" : "";
+		const renderer = page.renderMode === "island" ? "renderIslandPage" : "renderPage";
+		const assetTags = page.renderMode === "island" && pages.islandClientEntryId ? "getIslandsAssetTags" : "getPagesAssetTags";
+		const renderOptions = `, ${JSON.stringify({ renderMode: page.renderMode })}`;
 		lines.push(`app.get(${JSON.stringify(page.pattern)}, async (c) => {`);
 		if (serverImportPath) {
 			const loaderName = `_pload_${safeId}`;
 			lines.push(`  const mod = await ${loaderName}();`);
-			lines.push(`  return handlePageGet(mod.loader, mod.head, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${islandFlag});`);
+			lines.push(`  return handlePageGet(mod.loader, mod.head, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${renderOptions});`);
 		} else {
 			const headArg = mdHeadRef ?? "undefined";
-			lines.push(`  return handlePageGet(undefined, ${headArg}, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${islandFlag});`);
+			lines.push(`  return handlePageGet(undefined, ${headArg}, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${renderOptions});`);
 		}
 		lines.push(`});`);
 		if (page.methods.includes("action") || page.methods.includes("actions")) {
@@ -3469,7 +3474,7 @@ function compilePageRoutes(lines, scan, pages, options) {
 				lines.push(`  const handler = actionName ? mod.actions?.[actionName] : mod.actions?.default;`);
 				lines.push(`  if (!handler) return new Response("Unknown action" + (actionName ? ": " + actionName : ""), { status: 404 });`);
 			} else lines.push(`  const handler = mod.action;`);
-			lines.push(`  return handlePageMutation(handler, mod.loader, mod.head, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${islandFlag});`);
+			lines.push(`  return handlePageMutation(handler, mod.loader, mod.head, c, ${JSON.stringify(page.componentId)}, ${renderer}, ${assetTags}, __voidHeadConfig${renderOptions});`);
 			lines.push(`});`);
 		}
 	}
@@ -4018,13 +4023,13 @@ function emitApplyRoutingRules(lines, rulesVar, indent, nodeTarget, markFallback
 	else lines.push(`${indent}    const __r = await app.fetch(rewriteReq, c.env, c.executionCtx);`);
 	lines.push(`${indent}    if (!__VOID_DEV_ROUTING) return __r;`);
 	lines.push(`${indent}    const __kind = matched.rule.force === true ? "rewrite" : "fallback";`);
-	lines.push(`${indent}    const __trace = __kind + "[" + matched.rule.source + "] \\u2192 " + dest + " (" + (matched.rule.origin || "unknown") + ")";`);
+	lines.push(`${indent}    const __trace = __kind + "[" + matched.rule.source + "] -> " + dest + " (" + (matched.rule.origin || "unknown") + ")";`);
 	lines.push(`${indent}    return __voidAnnotateRouting(__r, __trace);`);
 	lines.push(`${indent}  }`);
 	lines.push(`${indent}  const location = __mergeQueryIntoLocation(dest, new URL(c.req.url).search);`);
 	lines.push(`${indent}  const __redir = c.redirect(location, matched.rule.status);`);
 	lines.push(`${indent}  if (!__VOID_DEV_ROUTING) return __redir;`);
-	lines.push(`${indent}  const __rtrace = "redirect[" + matched.rule.source + "] \\u2192 " + dest + " " + matched.rule.status + " (" + (matched.rule.origin || "unknown") + ")";`);
+	lines.push(`${indent}  const __rtrace = "redirect[" + matched.rule.source + "] -> " + dest + " " + matched.rule.status + " (" + (matched.rule.origin || "unknown") + ")";`);
 	lines.push(`${indent}  return __voidAnnotateRouting(__redir, __rtrace);`);
 	lines.push(`${indent}}`);
 }
@@ -4241,12 +4246,12 @@ function routingPlugin(root, options) {
 	function writeRouteTypes() {
 		if (!scan) return;
 		const { dts } = generateRouteTypes(scan, routesDir, outDir, pagesDir);
-		writeFileSync(join(outDir, "routes.d.ts"), dts);
+		writeFileIfChanged(join(outDir, "routes.d.ts"), dts);
 	}
 	function writeQueueTypes() {
 		if (!scan) return;
 		const dts = generateQueueTypes(scan.queues, queuesDir, outDir);
-		writeFileSync(join(outDir, "queues.d.ts"), dts);
+		writeFileIfChanged(join(outDir, "queues.d.ts"), dts);
 	}
 	async function rescan() {
 		scan = await scanRoutes(root, {
@@ -4347,8 +4352,8 @@ function routingPlugin(root, options) {
 		const env = loadEnv(resolvedConfig?.mode ?? "development", root, "");
 		const schemaPath = join(outDir, "better-auth-schema.ts");
 		const databasePath = join(outDir, "better-auth-db.ts");
-		writeFileSync(schemaPath, generateVoidAuthDrizzleSchema(authRuntime, env));
-		writeFileSync(databasePath, generateVoidAuthDatabaseModule({
+		writeFileIfChanged(schemaPath, generateVoidAuthDrizzleSchema(authRuntime, env));
+		writeFileIfChanged(databasePath, generateVoidAuthDatabaseModule({
 			dialect: compileOptions.auth.dialect,
 			schemaImportPath: schemaPath,
 			drizzleAdapterPath
@@ -4424,9 +4429,9 @@ function routingPlugin(root, options) {
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	if (options.target) {
-		writeFileSync(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
-		writeFileSync(join(outDir, "index.ts"), compileNodeServer(options.target));
-	} else writeFileSync(join(outDir, "entry.ts"), compileWorkerEntry(false, remote, void 0, void 0, compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
+		writeFileIfChanged(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
+		writeFileIfChanged(join(outDir, "index.ts"), compileNodeServer(options.target));
+	} else writeFileIfChanged(join(outDir, "entry.ts"), compileWorkerEntry(false, remote, void 0, void 0, compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
 		bindingName: options.sandboxBindingName,
 		className: options.sandboxClassName,
 		runtimePath: sandboxRuntimePath
@@ -4490,9 +4495,9 @@ function routingPlugin(root, options) {
 				}
 			}
 			if (options.target) {
-				writeFileSync(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
-				writeFileSync(join(outDir, "index.ts"), compileNodeServer(options.target));
-			} else writeFileSync(join(outDir, "entry.ts"), compileWorkerEntry(scan.queues.length > 0, remote, resolvedConfig?.build.assetsDir, (scan.websockets ?? []).map((route) => route.className), compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
+				writeFileIfChanged(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
+				writeFileIfChanged(join(outDir, "index.ts"), compileNodeServer(options.target));
+			} else writeFileIfChanged(join(outDir, "entry.ts"), compileWorkerEntry(scan.queues.length > 0, remote, resolvedConfig?.build.assetsDir, (scan.websockets ?? []).map((route) => route.className), compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
 				bindingName: options.sandboxBindingName,
 				className: options.sandboxClassName,
 				runtimePath: sandboxRuntimePath
@@ -4540,9 +4545,9 @@ function routingPlugin(root, options) {
 				writeRouteTypes();
 				writeQueueTypes();
 				if (options.target) {
-					writeFileSync(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
-					writeFileSync(join(outDir, "index.ts"), compileNodeServer(options.target));
-				} else writeFileSync(join(outDir, "entry.ts"), compileWorkerEntry(scan.queues.length > 0, remote, resolvedConfig?.build.assetsDir, (scan.websockets ?? []).map((route) => route.className), compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
+					writeFileIfChanged(join(outDir, "app.ts"), compileNodeApp(options.target, compileOptions.honoPath, getEnvSchemaModule()));
+					writeFileIfChanged(join(outDir, "index.ts"), compileNodeServer(options.target));
+				} else writeFileIfChanged(join(outDir, "entry.ts"), compileWorkerEntry(scan.queues.length > 0, remote, resolvedConfig?.build.assetsDir, (scan.websockets ?? []).map((route) => route.className), compileOptions.runtimeEnvPath, getEnvSchemaModule(), options.hasSandbox ? {
 					bindingName: options.sandboxBindingName,
 					className: options.sandboxClassName,
 					runtimePath: sandboxRuntimePath
@@ -4717,7 +4722,7 @@ function generateClassATriggerWrapper(root, framework, original, isBuild, assets
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	const wrapperPath = join(outDir, `${framework}-trigger-wrapper.ts`);
-	writeFileSync(wrapperPath, isBuild ? `// @ts-nocheck — Auto-generated by Void for vite build. Do NOT edit.
+	writeFileIfChanged(wrapperPath, isBuild ? `// @ts-nocheck — Auto-generated by Void for vite build. Do NOT edit.
 import original from ${JSON.stringify(original)};
 
 export default {
@@ -4747,7 +4752,7 @@ function generateVinextPagesEntry(root) {
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	const entryPath = join(outDir, "vinext-pages-entry.ts");
-	writeFileSync(entryPath, `// Auto-generated by Void — vinext Pages Router worker entry
+	writeFileIfChanged(entryPath, `// Auto-generated by Void — vinext Pages Router worker entry
 // @ts-expect-error virtual module resolved by vinext at build time
 import { renderPage, handleApiRoute } from "virtual:vinext-server-entry";
 
@@ -4773,7 +4778,7 @@ function generateReactRouterEntry(root) {
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	const entryPath = join(outDir, "react-router-entry.ts");
-	writeFileSync(entryPath, `// Auto-generated by Void — React Router v7 worker entry
+	writeFileIfChanged(entryPath, `// Auto-generated by Void — React Router v7 worker entry
 import { createRequestHandler } from "react-router";
 
 const requestHandler = createRequestHandler(
@@ -4911,7 +4916,7 @@ const STAGING_API_URL = "https://api.staging.void.cloud";
 */
 async function runAiSetupPrompt(root, token, staging, server) {
 	const { select, text, isCancel, log } = await import("./dist-abzUneor.mjs").then((n) => n.p);
-	const { PlatformClient } = await import("./client-DIfOFf1W.mjs").then((n) => n.r);
+	const { PlatformClient } = await import("./client-D4awzTnj.mjs").then((n) => n.r);
 	const { writeProjectConfig } = await import("./project-CH9pdo16.mjs").then((n) => n.n);
 	const { inferDefaultSlug } = await import("./resolve-project-D4O1_fZz.mjs").then((n) => n.i);
 	const client = new PlatformClient(token, staging ? STAGING_API_URL : DEFAULT_API_URL);
@@ -4940,7 +4945,7 @@ async function runAiSetupPrompt(root, token, staging, server) {
 	let slug;
 	if (result === "__create__") {
 		const { validateProjectSlug } = await import("./project-slug-rX3kTOfY.mjs").then((n) => n.t);
-		const { createProjectWithSlugRetry } = await import("./create-project-DCUrFJxa.mjs").then((n) => n.t);
+		const { createProjectWithSlugRetry } = await import("./create-project-CGodxfzH.mjs").then((n) => n.t);
 		let created;
 		try {
 			created = await createProjectWithSlugRetry(client, inferDefaultSlug(root), async (defaultSlug) => {
@@ -5555,4 +5560,4 @@ function voidPlugin(options) {
 	];
 }
 //#endregion
-export { VoidAssetRewriteError, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled, voidPlugin };
+export { VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled, voidPlugin };

package/dist/{init-BHupO7Fm.mjs → init-DvaRDMIc.mjs}

@@ -1,20 +1,20 @@
 import { a as join, c as resolve, i as isAbsolute, n as dirname, s as relative, t as basename } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
-import { c as getToken, n as PlatformClient, u as isStagingMode } from "./client-DIfOFf1W.mjs";
+import { d as getToken, n as PlatformClient, p as isStagingMode } from "./client-D4awzTnj.mjs";
 import { _ as me, c as R, g as ge, i as Ee, l as Re, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-BVEC0lti.mjs";
-import { r as detectFramework } from "./plugin-inference-BUBhHt_1.mjs";
-import { r as parseDotenvFile, t as expandDotenv } from "./dotenv-Bkoqyq9r.mjs";
-import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-HAGjfY6w.mjs";
+import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-8dLIngKW.mjs";
+import { r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { r as parseDotenvFile, t as expandDotenv } from "./dotenv-lS94ymhM.mjs";
 import { t as MagicString } from "./magic-string.es-C1Fb0uxq.mjs";
 import { n as writeDrizzleConfig } from "./config--wXmVOoe.mjs";
 import { n as getAgentById, r as getPackageDir, t as detectAgents } from "./agents-MhSzNMiC.mjs";
-import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-DCUrFJxa.mjs";
-import { t as promptForLoginToken } from "./login-tt1OmNVg.mjs";
-import { r as formatProjectCommand } from "./preset-CIJG2O7a.mjs";
-import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-0SwYgQxx.mjs";
+import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-CGodxfzH.mjs";
+import { t as promptForLoginToken } from "./login-Ca6mhQVI.mjs";
+import { r as formatProjectCommand } from "./preset-B7ZQZn0u.mjs";
+import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-DhCHHLAz.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -1767,95 +1767,138 @@ function getNodeVersionLine(root) {
 	if (existsSync(join(root, ".node-version"))) return "node-version-file: .node-version";
 	return "node-version: lts/*";
 }
-function getWorkflowYaml(root, pm) {
+const WORKFLOW_DEFAULT_API_URL = "https://api.void.cloud";
+function getWorkflowSetupSteps(root, pm) {
 	const nodeVersion = getNodeVersionLine(root);
 	switch (pm) {
-		case "pnpm": return `name: Deploy
-on:
-  push:
-    branches: [main]
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: pnpm/action-setup@v5
+		case "pnpm": return {
+			setup: `      - uses: pnpm/action-setup@v5
       - uses: actions/setup-node@v6
         with:
           ${nodeVersion}
-          cache: pnpm
-      - run: pnpm install
-      - run: pnpm void deploy
-        env:
-          VOID_TOKEN: \${{ secrets.VOID_TOKEN }}
-`;
-		case "yarn": return `name: Deploy
-on:
-  push:
-    branches: [main]
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+          cache: pnpm`,
+			install: "      - run: pnpm install --frozen-lockfile",
+			runner: "pnpm exec void"
+		};
+		case "yarn": return {
+			setup: `      - uses: actions/setup-node@v6
         with:
           ${nodeVersion}
-          cache: yarn
-      - run: yarn install --immutable
-      - run: yarn void deploy
-        env:
-          VOID_TOKEN: \${{ secrets.VOID_TOKEN }}
-`;
-		case "bun": return `name: Deploy
+          cache: yarn`,
+			install: "      - run: yarn install --immutable",
+			runner: "yarn void"
+		};
+		case "bun": return {
+			setup: "      - uses: oven-sh/setup-bun@v2",
+			install: "      - run: bun install --frozen-lockfile",
+			runner: "bunx void"
+		};
+		default: return {
+			setup: `      - uses: actions/setup-node@v6
+        with:
+          ${nodeVersion}
+          cache: npm`,
+			install: "      - run: npm ci",
+			runner: "npx void"
+		};
+	}
+}
+/**
+* Scaffold the GitHub Actions workflow that deploys via GitHub OIDC — no
+* long-lived secret stored in the repo. The job requests an OIDC token from
+* GitHub (audience `void`), exchanges it at `POST $VOID_API_URL/auth/github-oidc`
+* for a short-lived (15-min) project-scoped deploy token, then runs
+* `void deploy --project <slug>` with that token exported as `VOID_TOKEN`.
+*
+* `slug` is the linked project slug when known (from `.void/project.json`);
+* otherwise a `${{ vars.VOID_PROJECT }}` placeholder is emitted with a comment
+* telling the user to set the repository variable.
+*/
+function getWorkflowYaml(root, pm, slug) {
+	const { setup, install, runner } = getWorkflowSetupSteps(root, pm);
+	return `name: Deploy to Void
 on:
   push:
     branches: [main]
 
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: oven-sh/setup-bun@v2
-      - run: bun install
-      - run: bunx void deploy
-        env:
-          VOID_TOKEN: \${{ secrets.VOID_TOKEN }}
-`;
-		default: return `name: Deploy
-on:
-  push:
-    branches: [main]
+# Latest push wins: cancel an in-flight deploy for the same repo+branch so a
+# newer commit is never overtaken by an older one. Keyed by repo + ref only —
+# workflow-level concurrency cannot read the \`env\` context, so VOID_PROJECT is
+# not used here (one repo+branch deploys to one project in this scaffold).
+concurrency:
+  group: void-deploy-\${{ github.repository }}-\${{ github.ref }}
+  cancel-in-progress: true
+
+# id-token: write lets the job mint a GitHub OIDC token. No long-lived
+# VOID_TOKEN secret is stored — the token below is exchanged for a
+# short-lived, project-scoped deploy token at deploy time.
+permissions:
+  id-token: write
+  contents: read
+
+env:
+  # Override with a VOID_API_URL repository variable to target staging.
+  VOID_API_URL: \${{ vars.VOID_API_URL || '${WORKFLOW_DEFAULT_API_URL}' }}
+  ${slug ? `VOID_PROJECT: ${slug}` : `# Set a VOID_PROJECT repository variable to your project slug
+  # (Settings → Secrets and variables → Actions → Variables).
+  VOID_PROJECT: \${{ vars.VOID_PROJECT }}`}
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
-        with:
-          ${nodeVersion}
-          cache: npm
-      - run: npm ci
-      - run: npx void deploy
-        env:
-          VOID_TOKEN: \${{ secrets.VOID_TOKEN }}
+${setup}
+${install}
+      - name: Exchange GitHub OIDC token for a Void deploy token
+        run: |
+          OIDC_TOKEN="$(curl -sf \\
+            -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \\
+            "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=void" | jq -r '.value')"
+          VOID_TOKEN="$(curl -sf \\
+            -H 'Content-Type: application/json' \\
+            -d "$(jq -n --arg t "$OIDC_TOKEN" --arg p "$VOID_PROJECT" '{oidcToken: $t, project: $p}')" \\
+            "$VOID_API_URL/auth/github-oidc" | jq -r '.token')"
+          echo "::add-mask::$VOID_TOKEN"
+          echo "VOID_TOKEN=$VOID_TOKEN" >> "$GITHUB_ENV"
+      - name: Deploy
+        run: ${runner} deploy --project "$VOID_PROJECT"
 `;
-	}
 }
 function setupGithubActions(root, state) {
-	const workflowPath = join(root, ".github", "workflows", "deploy.yml");
+	const workflowDir = join(root, ".github", "workflows");
+	const workflowPath = join(workflowDir, "void-deploy.yml");
 	if (existsSync(workflowPath)) {
-		R.warn("deploy.yml already exists, skipping");
+		R.warn("void-deploy.yml already exists, skipping");
 		return;
 	}
-	mkdirSync(join(root, ".github", "workflows"), { recursive: true });
-	writeFileSync(workflowPath, getWorkflowYaml(root, state.packageManager));
-	R.success("Created .github/workflows/deploy.yml");
-	Se("After init completes, run `npx void auth token` to copy a deploy token.\nThen add it in GitHub under Settings → Secrets and variables → Actions as `VOID_TOKEN`.", "GitHub Actions deploy token");
+	const slug = readProjectConfig(root)?.slug ?? null;
+	mkdirSync(workflowDir, { recursive: true });
+	writeFileSync(workflowPath, getWorkflowYaml(root, state.packageManager, slug));
+	R.success("Created .github/workflows/void-deploy.yml");
+	if (slug) Se(`Pushes to main will build and deploy "${slug}" via GitHub OIDC — no token to store.\nConnect the repo to your project in the Void dashboard to authorize it.`, "GitHub Actions OIDC deploy");
+	else Se("Pushes to main will build and deploy via GitHub OIDC — no token to store.\nSet a VOID_PROJECT repository variable (Settings → Secrets and variables → Actions → Variables)\nto your project slug, and connect the repo to your project in the Void dashboard.", "GitHub Actions OIDC deploy");
+}
+/**
+* Bake a resolved project slug into an already-written `void-deploy.yml`.
+*
+* Step 8 (GitHub Actions) runs BEFORE Step 9 (project link), so when a user
+* links a project during the same interactive init the workflow was written
+* with the `${{ vars.VOID_PROJECT }}` placeholder. Once the link resolves a
+* slug, rewrite the placeholder `env.VOID_PROJECT` block in place so the user
+* does not also have to set a repository variable. No-op (returns `false`)
+* when the workflow is missing or the placeholder is not present (e.g. the
+* slug was already known at scaffold time, or the user declined linking).
+*/
+function patchWorkflowProjectSlug(root, slug) {
+	const workflowPath = join(root, ".github", "workflows", "void-deploy.yml");
+	if (!existsSync(workflowPath)) return false;
+	const yaml = readFileSync(workflowPath, "utf-8");
+	const placeholderBlock = "  # Set a VOID_PROJECT repository variable to your project slug\n  # (Settings → Secrets and variables → Actions → Variables).\n  VOID_PROJECT: ${{ vars.VOID_PROJECT }}";
+	if (!yaml.includes(placeholderBlock)) return false;
+	writeFileSync(workflowPath, yaml.replace(placeholderBlock, `  VOID_PROJECT: ${slug}`));
+	R.success(`Set VOID_PROJECT: ${slug} in .github/workflows/void-deploy.yml`);
+	return true;
 }
 function writeFileIfMissing(root, filePath, content) {
 	const fullPath = join(root, filePath);
@@ -2764,7 +2807,7 @@ async function runInitCommand(root, initArgs) {
 		const agentSetup = await resolveAgentSetup(root);
 		injectAgentBlock(root, agentSetup.instructionFilePath);
 		if (agentSetup.agents.length > 0) {
-			const { linkSkillsForSpecificAgents } = await import("./skills-BRKc--As.mjs");
+			const { linkSkillsForSpecificAgents } = await import("./skills--OMgLmXW.mjs");
 			linkSkillsForSpecificAgents(root, agentSetup.agents);
 		} else R.info("Skills linking skipped for generic agent setup");
 		setupMcpConfig(root, agentSetup.agents);
@@ -2789,10 +2832,9 @@ async function runInitCommand(root, initArgs) {
 		}
 	}
 	const githubStepSkipForSubpackage = isInsideWorkspaceSubpackage(root);
-	if ((!targeted || initArgs?.github) && !githubStepSkipForSubpackage) if (existsSync(join(root, ".github", "workflows", "deploy.yml"))) R.warn("deploy.yml already exists, skipping");
-	else if (targeted) setupGithubActions(root, state);
+	if ((!targeted || initArgs?.github) && !githubStepSkipForSubpackage) if (targeted) setupGithubActions(root, state);
 	else {
-		const setupGha = await ue({ message: "Create .github/workflows/deploy.yml to deploy on pushes to main?" });
+		const setupGha = await ue({ message: "Create .github/workflows/void-deploy.yml to deploy on pushes to main?" });
 		if (q(setupGha)) {
 			me("Setup cancelled.");
 			process.exit(0);
@@ -2810,7 +2852,10 @@ async function runInitCommand(root, initArgs) {
 	}
 	if (scaffoldAddedDependencies) installProjectDependencies(root, state.packageManager);
 	if (scaffoldedStarterMode && !workspaceSubpackageSkip) generateStarterMigration(root, scaffoldedStarterMode);
-	if (!targeted) await maybeSetupDeployProject(root);
+	if (!targeted) {
+		const linked = await maybeSetupDeployProject(root);
+		if (linked?.slug) patchWorkflowProjectSlug(root, linked.slug);
+	}
 	if (workspaceSubpackageSkip) if (scaffoldedStarterMode) ye("Run your workspace install, then `void db generate` to finish setup.");
 	else ye("Run your workspace install to finish setup.");
 	else ye(`Run \`${getDevCommand(root, framework)}\` to start developing`);

package/dist/{link-7MoXUMaI.mjs → link-CpbWJY3P.mjs}

@@ -1,8 +1,8 @@
 import { n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { c as getToken, n as PlatformClient, s as getSiteDomain } from "./client-DIfOFf1W.mjs";
+import { d as getToken, n as PlatformClient, u as getSiteDomain } from "./client-D4awzTnj.mjs";
 import { _ as me, c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-DCUrFJxa.mjs";
+import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-CGodxfzH.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";
 //#region src/cli/link.ts
 async function runLink(root, slug) {

package/dist/{list-N2mCHv8q.mjs → list-BkwE5vH4.mjs}

@@ -1,5 +1,5 @@
 import { a as ensureUtc, i as dim, l as tablePrefix, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DIfOFf1W.mjs";
+import { d as getToken, n as PlatformClient } from "./client-D4awzTnj.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{login-tt1OmNVg.mjs → login-Ca6mhQVI.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle, r as createSpinner, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { a as isExpiredTokenError, c as getToken, d as removeToken, f as runLogin, l as getTokenSource, n as PlatformClient, p as saveToken, u as isStagingMode } from "./client-DIfOFf1W.mjs";
+import { _ as saveToken, a as isExpiredTokenError, d as getToken, f as getTokenSource, g as runLogin, h as removeToken, n as PlatformClient, p as isStagingMode } from "./client-D4awzTnj.mjs";
 import { _ as me, c as R, g as ge, i as Ee, x as q, y as ye } from "./dist-abzUneor.mjs";
 //#region src/cli/login.ts
 async function promptForLoginToken(root = process.cwd()) {

package/dist/{logs-Cl7q2CjZ.mjs → logs-ArQzZquo.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DIfOFf1W.mjs";
+import { d as getToken, n as PlatformClient } from "./client-D4awzTnj.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/logs.ts

package/dist/{mcp-BXD35N2J.mjs → mcp-Cc2MMXdQ.mjs}

@@ -1,5 +1,5 @@
 import { a as join, n as dirname } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
-import { c as getToken, n as PlatformClient } from "./client-DIfOFf1W.mjs";
+import { d as getToken, n as PlatformClient } from "./client-D4awzTnj.mjs";
 import { a as writeProjectConfig } from "./project-CH9pdo16.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";