void 1.1.0 → 1.1.11

package/dist/runtime/remote/index.mjs

@@ -1,6 +1,6 @@
 import { n as bytesToBase64 } from "../../base64-DVrOndmI.mjs";
 import { t as cfAccessHeaders } from "../../cf-access-BM9G0lhO.mjs";
-import { n as serializeR2Conditional } from "../../r2-conditions-D1Wk8i7b.mjs";
+import { a as serializeR2HttpMetadata, i as serializeR2Conditional, t as R2_OBJECT_HEADER } from "../../r2-conditions-B8xUgJRc.mjs";
 //#region src/runtime/remote/client.ts
 function readableMessage(value) {
 	if (typeof value !== "string") return;
@@ -252,6 +252,17 @@ var ProxyKVNamespace = class {
 //#endregion
 //#region src/runtime/remote/r2.ts
 /**
+* HTTP metadata that the REST fallback and older deployments do not store.
+* Every path stores `contentType`.
+*/
+const EXTRA_HTTP_METADATA = [
+	["contentLanguage", "content-language"],
+	["contentDisposition", "content-disposition"],
+	["contentEncoding", "content-encoding"],
+	["cacheControl", "cache-control"],
+	["cacheExpiry", "expires"]
+];
+/**
 * R2Bucket implementation backed by the remote proxy.
 * Used during local development when `remote: true` is set in void.config.ts.
 */
@@ -270,7 +281,8 @@ var ProxyR2Bucket = class {
 		if (!data) return null;
 		return makeR2Object(data);
 	}
-	async get(key) {
+	async get(key, options) {
+		if (requestsRange(options?.range) || requestsCondition(options?.onlyIf)) throw new Error("remote: R2 get() with range or onlyIf is not supported in remote mode.");
 		const res = await this.client.fetch("/r2/get", {
 			binding: this.binding,
 			key
@@ -296,6 +308,7 @@ var ProxyR2Bucket = class {
 		else body.value = textValue;
 		if (options?.httpMetadata) {
 			const meta = options.httpMetadata;
+			body.httpMetadata = serializeR2HttpMetadata(meta);
 			if (meta instanceof Headers) body.contentType = meta.get("content-type") ?? void 0;
 			else body.contentType = meta.contentType;
 		}
@@ -304,8 +317,11 @@ var ProxyR2Bucket = class {
 		if (conditional) body.onlyIf = serializeR2Conditional(options.onlyIf);
 		const result = await (await this.client.fetch(conditional ? "/r2/put-conditional" : "/r2/put", body)).json();
 		if (result === null) return null;
-		if ("key" in result) return makeR2Object(result);
-		if (conditional) throw new Error("remote: R2 conditional put requires a compatible Void platform and deployment.");
+		const stored = "key" in result ? result : void 0;
+		if (!stored && conditional) throw new Error("remote: R2 conditional put requires a compatible Void platform and deployment.");
+		const missing = missingMetadata(options, stored);
+		if (missing.length > 0) throw new Error(`remote: R2 put() stored "${key}" without ${missing.join(", ")}. Remote R2 metadata needs a project deployment with the current Void version. Deploy the project, then put the object again.`);
+		if (stored) return makeR2Object(stored);
 		return makeR2Object({
 			key,
 			size: 0,
@@ -326,19 +342,19 @@ var ProxyR2Bucket = class {
 			prefix: options?.prefix,
 			limit: options?.limit,
 			cursor: options?.cursor,
-			delimiter: options?.delimiter
+			delimiter: options?.delimiter,
+			startAfter: options?.startAfter,
+			include: options?.include
 		})).json();
+		if (!Array.isArray(data.delimitedPrefixes) && (options?.delimiter || options?.startAfter || options?.include)) throw new Error("remote: R2 list() with delimiter, startAfter or include got no answer from a current project deployment. The deployment uses an older Void version, or the platform could not reach it. Retry. If the error continues, deploy the project with the current Void version.");
 		return {
 			objects: data.objects.map((o) => makeR2Object({
-				key: o.key,
-				size: o.size,
-				etag: "",
-				lastModified: o.lastModified,
-				contentType: "application/octet-stream"
+				contentType: "application/octet-stream",
+				...o
 			})),
 			truncated: data.truncated,
 			cursor: data.cursor ?? void 0,
-			delimitedPrefixes: []
+			delimitedPrefixes: data.delimitedPrefixes ?? []
 		};
 	}
 	createMultipartUpload() {
@@ -348,33 +364,77 @@ var ProxyR2Bucket = class {
 		throw new Error("resumeMultipartUpload() is not supported with remote bindings");
 	}
 };
+/**
+* Remote mode ignores a `Headers` value, such as `request.headers`, and returns the whole
+* object, so a reload with If-None-Match or a Range request for media still gets a body.
+* Native R2 ignores fields that are undefined.
+*/
+function requestsRange(range) {
+	if (range instanceof Headers) return false;
+	return Object.values(range ?? {}).some((value) => value !== void 0);
+}
+/** Same rules as `requestsRange`. `secondsGranularity` alone asks for no condition. */
+function requestsCondition(onlyIf) {
+	if (onlyIf instanceof Headers) return false;
+	return Object.entries(onlyIf ?? {}).some(([name, value]) => name !== "secondsGranularity" && value !== void 0);
+}
+/** Metadata in `options` that the stored object in the put response does not have. */
+function missingMetadata(options, stored) {
+	const meta = options?.httpMetadata;
+	const missing = EXTRA_HTTP_METADATA.filter(([field, header]) => (meta instanceof Headers ? meta.has(header) : meta?.[field] !== void 0) && stored?.httpMetadata?.[field] === void 0).map(([field]) => field);
+	if (Object.keys(options?.customMetadata ?? {}).some((name) => stored?.customMetadata?.[name] === void 0)) missing.push("customMetadata");
+	return missing;
+}
+/** R2 `etag` is unquoted. HTTP headers and older handlers send the quoted form. */
+function normalizeEtag(etag) {
+	const value = etag.startsWith("W/") ? etag.slice(2) : etag;
+	return value.length >= 2 && value.startsWith("\"") && value.endsWith("\"") ? value.slice(1, -1) : value;
+}
+function readHttpMetadata(data) {
+	if (!data.httpMetadata) return { contentType: data.contentType };
+	const { cacheExpiry, ...metadata } = data.httpMetadata;
+	return cacheExpiry ? {
+		...metadata,
+		cacheExpiry: new Date(cacheExpiry)
+	} : metadata;
+}
 function makeR2Object(data) {
+	const etag = normalizeEtag(data.etag ?? "");
+	const httpMetadata = readHttpMetadata(data);
 	return {
 		key: data.key,
 		version: data.version ?? "",
 		size: data.size,
-		etag: data.etag,
-		httpEtag: data.etag ? `"${data.etag}"` : "",
+		etag,
+		httpEtag: etag ? `"${etag}"` : "",
 		checksums: { toJSON: () => ({}) },
 		uploaded: new Date(data.lastModified || Date.now()),
-		httpMetadata: data.httpMetadata ?? { contentType: data.contentType },
+		httpMetadata,
 		customMetadata: data.customMetadata ?? {},
 		storageClass: "Standard",
 		range: void 0,
-		writeHttpMetadata(_headers) {}
+		writeHttpMetadata(headers) {
+			const fields = [
+				["content-type", httpMetadata.contentType],
+				["content-language", httpMetadata.contentLanguage],
+				["content-disposition", httpMetadata.contentDisposition],
+				["content-encoding", httpMetadata.contentEncoding],
+				["cache-control", httpMetadata.cacheControl],
+				["expires", httpMetadata.cacheExpiry?.toUTCString()]
+			];
+			for (const [name, value] of fields) if (value !== void 0) headers.set(name, value);
+		}
 	};
 }
 function makeR2ObjectBody(key, res) {
-	const size = parseInt(res.headers.get("content-length") ?? "0");
-	const etag = res.headers.get("etag") ?? "";
-	const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+	const meta = res.headers.get(R2_OBJECT_HEADER);
 	return {
-		...makeR2Object({
+		...makeR2Object(meta ? JSON.parse(decodeURIComponent(meta)) : {
 			key,
-			size,
-			etag,
-			lastModified: res.headers.get("last-modified") ?? (/* @__PURE__ */ new Date()).toISOString(),
-			contentType
+			size: parseInt(res.headers.get("content-length") ?? "0"),
+			etag: res.headers.get("etag") ?? "",
+			lastModified: res.headers.get("last-modified") ?? "",
+			contentType: res.headers.get("content-type") ?? "application/octet-stream"
 		}),
 		body: res.body,
 		get bodyUsed() {
@@ -392,6 +452,9 @@ function makeR2ObjectBody(key, res) {
 /**
 * Replace local D1/KV/R2 bindings with proxy-backed versions.
 * Called from the generated worker entry point when `__VOID_REMOTE` is set.
+*
+* @deprecated Internal to Void. The generated worker calls this in remote mode.
+* `void/remote` is not a supported import. Removed in the next major version.
 */
 function createRemoteEnv(env, bindingNames) {
 	const client = new ProxyClient(env.__VOID_PROXY_URL, env.__VOID_TOKEN, env.__VOID_PROJECT_ID, env);

package/dist/runtime/routing.d.mts

@@ -1,5 +1,5 @@
-import { t as DevCssAsset } from "../types-BAp5AEBU.mjs";
-import { a as handlePageMutation, i as handlePageGet } from "../protocol-4H7V_3Os.mjs";
+import { t as DevCssAsset } from "../types-7AIz0OZu.mjs";
+import { a as handlePageMutation, i as handlePageGet } from "../protocol-B8sI8dRD.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Context, ExecutionContext, Hono, MiddlewareHandler } from "hono";
 //#region src/runtime/routing-errors.d.ts

package/dist/runtime/sse-client.d.mts

@@ -14,6 +14,10 @@ export type SseClient<Events extends SseEventMap = SseEventMap> = {
 };
 export type ConnectEventStreamOptions = {
   withCredentials?: boolean;
+  /**
+   * @deprecated Has no effect. Register each event with `client.on(name, handler)`.
+   * Removed in the next major version.
+   */
   events?: Array<string>;
   parse?: "json" | "text" | ((data: string) => unknown);
 };

package/dist/runtime/ws-server.d.mts

@@ -1,6 +1,6 @@
 import { n as AuthState } from "../auth-DkcFflXV.mjs";
-import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-B74NJIus.mjs";
-import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-aKVYB-fA.mjs";
+import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-Bv18bB-l.mjs";
+import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-CsBNxv86.mjs";
 //#region src/runtime/ws-server.d.ts
 export type WebSocketRouteMeta = {
   name?: string;

package/dist/runtime/ws.d.mts

@@ -1,2 +1,2 @@
-import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-aKVYB-fA.mjs";
+import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-CsBNxv86.mjs";
 export { AnyWebSocketDefinition, ConnectCommonOptions, RoomContext, RoomController, RoomDefinition, SocketContext, SocketDefinition, VoidSocket, VoidSocketCloseEvent, WebSocketBaseContext, WebSocketConnection, WebSocketInstanceKey, connect, defineRoom, defineWebSocket };

package/dist/{scan-C0BMdmEd.mjs → scan-D2-FcLHs.mjs}

@@ -1,8 +1,9 @@
 import { a as join, n as dirname, r as extname, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
 import { t as glob } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename } from "./parse-filename-CUbj-1MP.mjs";
+import { i as voidWarn } from "./log-vqY3pqwI.mjs";
 import { t as MagicString } from "./dist-Cegxq8gs.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
@@ -129,9 +130,7 @@ function resolveEffectiveLayoutEntries(page, layouts, namedLayouts) {
 	}));
 	if (page.layout === void 0) return defaultChain;
 	const isExclusive = page.layout.startsWith("!");
-	const name = isExclusive ? page.layout.slice(1) : page.layout;
-	if (name.startsWith(".") || name.startsWith("/")) return defaultChain;
-	const resolved = resolveNamedLayout(name, page.componentId, namedLayouts, page.componentPath);
+	const resolved = resolveNamedLayout(isExclusive ? page.layout.slice(1) : page.layout, page.componentId, namedLayouts, page.componentPath);
 	if (!resolved) return defaultChain;
 	const namedEntry = {
 		id: toLayoutId(resolved),
@@ -171,6 +170,8 @@ const PAGE_METHODS = /* @__PURE__ */ new Set([
 	"actions"
 ]);
 const MAX_REVALIDATE = 31536e3;
+/** Layout paths already reported; a dev server rescans pages on every file change. */
+const warnedLayoutPaths = /* @__PURE__ */ new Set();
 function componentLayout(source, filename) {
 	if (!source.includes("layout")) return;
 	for (const script of scriptBlocks(source, filename)) {
@@ -375,7 +376,14 @@ async function scanPages(root, options) {
 	for (const page of pages) {
 		if (page.layout === void 0 || page.layout === false) continue;
 		const name = page.layout.startsWith("!") ? page.layout.slice(1) : page.layout;
-		if (name.startsWith(".") || name.startsWith("/")) continue;
+		if (name.startsWith(".") || name.startsWith("/")) {
+			const key = `${pagesDir}\0${page.componentPath}\0${page.layout}`;
+			if (!warnedLayoutPaths.has(key)) {
+				warnedLayoutPaths.add(key);
+				voidWarn(`pages: Page '${page.componentPath}' specifies layout '${page.layout}'. Layout paths are not supported, so the default layouts are used. Use the name of a file in a _layouts/ directory, such as 'landing'.`);
+			}
+			continue;
+		}
 		if (!resolveNamedLayout(name, page.componentId, namedLayouts, page.componentPath)) throw new Error(`pages: Page '${page.componentPath}' specifies layout '${page.layout}', but _layouts/${name}.vue was not found in any ancestor directory.`);
 	}
 	return {

package/dist/{secret-bg73f1Ge.mjs → secret-CClHaFxm.mjs}

@@ -2,9 +2,9 @@ import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-r
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-BVdsO7Py.mjs";
 import { m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
-import { _ as validateSecretValues } from "./env-validation-DYxjz_Wo.mjs";
+import { _ as validateSecretValues } from "./env-validation-D_KyMdab.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {
@@ -93,7 +93,7 @@ async function resolveSecretBackend(root, args) {
 }
 async function resolveCloudflareSecretBackend(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-CrSUFRzJ.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-Cm8lVx7W.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	return {
 		target: "Cloudflare Worker",

package/dist/{types-BAp5AEBU.d.mts → types-7AIz0OZu.d.mts}

@@ -41,7 +41,7 @@ type PageDefinition = {
     title?: string;
     description?: string;
   };
-  /** Named layout selection: "name", "!name", false, or relative path */
+  /** Named layout selection: "name", "!name", or false */
   layout?: string | false;
 };
 type LayoutDefinition = {

package/dist/{validate-CheZGRE7.mjs → validate-CnZPMq4q.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { n as readJournal, r as stripSqlExt } from "./collect-xjffdCdk.mjs";
+import { n as readJournal, r as stripSqlExt } from "./collect-Dew86qce.mjs";
 import { i as getExecutableSql, t as DESTRUCTIVE_PRAGMA } from "./plan-BhLO2p4w.mjs";
 import { existsSync, readdirSync } from "node:fs";
 import { hasStandalonePragma } from "@void/deploy-core";
@@ -74,19 +74,20 @@ function validateMigrations(files) {
 /**
 * Enumerate drizzle-kit metadata artifacts in a migrations directory.
 * Returns repo-relative paths like `db/migrations/meta/0000_snapshot.json`
-* and `db/migrations/migrations.js`. Empty when none are present.
+* and `db/migrations/migrations.js`, passed through `sourceRelative` so they
+* include the configured `sourceDir`. Empty when none are present.
 *
 * Shared across `assertJournalCoherence`, `void gen migration`, and
 * `void db rename-migrations` so all three agree on what counts as a
 * "partial drizzle-kit state" (journal gone but other metadata lingering).
 */
-function listDrizzleArtifacts(migrationsDir) {
+function listDrizzleArtifacts(migrationsDir, sourceRelative = (path) => path) {
 	const metaDir = join(migrationsDir, "meta");
 	const snapshotFiles = existsSync(metaDir) ? readdirSync(metaDir).filter((f) => f.endsWith("_snapshot.json")) : [];
 	const bundledPath = join(migrationsDir, "migrations.js");
 	const out = [];
-	for (const f of snapshotFiles) out.push(`db/migrations/meta/${f}`);
-	if (existsSync(bundledPath)) out.push("db/migrations/migrations.js");
+	for (const f of snapshotFiles) out.push(sourceRelative(`db/migrations/meta/${f}`));
+	if (existsSync(bundledPath)) out.push(sourceRelative("db/migrations/migrations.js"));
 	return out;
 }
 /**
@@ -100,28 +101,32 @@ function listDrizzleArtifacts(migrationsDir) {
 * hand-written `.sql` projects without `db/schema.ts` are supported and are
 * tracked by filename in `_void_migrations`. They cannot run
 * `void db generate`, so the check is skipped for them.
+*
+* `sourceRelative` (`ProjectPaths.sourceRelative`) adds the configured
+* `sourceDir` to the paths in error messages.
 */
-function assertJournalCoherence(migrationsDir, collected) {
-	const journal = readJournal(migrationsDir);
-	const drizzleArtifacts = listDrizzleArtifacts(migrationsDir);
+function assertJournalCoherence(migrationsDir, collected, sourceRelative = (path) => path) {
+	const dir = sourceRelative("db/migrations");
+	const journal = readJournal(migrationsDir, sourceRelative);
+	const drizzleArtifacts = listDrizzleArtifacts(migrationsDir, sourceRelative);
 	if (journal === void 0) {
 		if (drizzleArtifacts.length > 0) throw new Error([
-			"db/migrations/meta/_journal.json is missing, but other drizzle-kit metadata is still present:",
+			`${dir}/meta/_journal.json is missing, but other drizzle-kit metadata is still present:`,
 			...drizzleArtifacts.map((p) => `  - ${p}`),
 			"",
 			"This is a partial drizzle-kit state. Restore _journal.json from version control, or delete the orphaned metadata files above if you intended to revert to hand-written migrations."
 		].join("\n"));
 		return;
 	}
-	if (journal === null || typeof journal !== "object" || Array.isArray(journal) || typeof journal.version !== "string" || typeof journal.dialect !== "string" || !Array.isArray(journal.entries)) throw new Error("db/migrations/meta/_journal.json is malformed: expected an object with string `version`, string `dialect`, and an `entries` array. Restore the file from version control, or delete it if you intended to revert to hand-written migrations.");
+	if (journal === null || typeof journal !== "object" || Array.isArray(journal) || typeof journal.version !== "string" || typeof journal.dialect !== "string" || !Array.isArray(journal.entries)) throw new Error(`${dir}/meta/_journal.json is malformed: expected an object with string \`version\`, string \`dialect\`, and an \`entries\` array. Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
 	for (let i = 0; i < journal.entries.length; i++) {
 		const entry = journal.entries[i];
-		if (entry === null || typeof entry !== "object" || typeof entry.idx !== "number" || typeof entry.version !== "string" || typeof entry.tag !== "string" || typeof entry.breakpoints !== "boolean") throw new Error(`db/migrations/meta/_journal.json is malformed: entry at index ${i} is missing required fields (\`idx\`, \`version\`, \`tag\`, \`breakpoints\`). Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
+		if (entry === null || typeof entry !== "object" || typeof entry.idx !== "number" || typeof entry.version !== "string" || typeof entry.tag !== "string" || typeof entry.breakpoints !== "boolean") throw new Error(`${dir}/meta/_journal.json is malformed: entry at index ${i} is missing required fields (\`idx\`, \`version\`, \`tag\`, \`breakpoints\`). Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
 	}
 	if (journal.entries.length === 0) {
 		if (drizzleArtifacts.length === 0) return;
 		throw new Error([
-			"db/migrations/meta/_journal.json has no entries, but drizzle-kit metadata is still present:",
+			`${dir}/meta/_journal.json has no entries, but drizzle-kit metadata is still present:`,
 			...drizzleArtifacts.map((p) => `  - ${p}`),
 			"",
 			"This is a partial drizzle-kit state. Restore _journal.json from version control (or run `void db generate`), or delete the orphaned metadata files above if you intended to revert to hand-written migrations."
@@ -131,7 +136,7 @@ function assertJournalCoherence(migrationsDir, collected) {
 	for (const entry of journal.entries) tagCounts.set(entry.tag, (tagCounts.get(entry.tag) ?? 0) + 1);
 	const duplicateTags = [...tagCounts.entries()].filter(([, n]) => n > 1).map(([tag]) => tag);
 	if (duplicateTags.length > 0) throw new Error([
-		"db/migrations/meta/_journal.json has duplicate migration entries:",
+		`${dir}/meta/_journal.json has duplicate migration entries:`,
 		...duplicateTags.map((t) => `  - ${t} (appears ${tagCounts.get(t)} times)`),
 		"",
 		"Each migration must have a unique tag. Restore _journal.json from version control, or hand-edit to remove the duplicates."
@@ -141,15 +146,15 @@ function assertJournalCoherence(migrationsDir, collected) {
 	const orphans = collected.map((m) => m.name).filter((name) => !journalTags.has(stripSqlExt(name)));
 	const missing = journal.entries.filter((e) => !collectedTags.has(e.tag)).map((e) => `${e.tag}.sql`);
 	if (orphans.length === 0 && missing.length === 0) return;
-	const lines = ["Migration drift detected between db/migrations/ and db/migrations/meta/_journal.json."];
+	const lines = [`Migration drift detected between ${dir}/ and ${dir}/meta/_journal.json.`];
 	if (orphans.length > 0) {
 		lines.push("", "These files exist on disk but are not tracked in _journal.json:");
-		for (const f of orphans) lines.push(`  - db/migrations/${f}`);
-		lines.push("", "Delete the orphan file(s), or move their contents into `db/schema.ts` and re-run `void db generate`.");
+		for (const f of orphans) lines.push(`  - ${dir}/${f}`);
+		lines.push("", `Delete the orphan file(s), or move their contents into \`${sourceRelative("db/schema.ts")}\` and re-run \`void db generate\`.`);
 	}
 	if (missing.length > 0) {
 		lines.push("", "These entries are in _journal.json but the matching file is missing:");
-		for (const f of missing) lines.push(`  - db/migrations/${f}`);
+		for (const f of missing) lines.push(`  - ${dir}/${f}`);
 		lines.push("", "Restore the missing file(s) from version control, or regenerate migrations.");
 	}
 	throw new Error(lines.join("\n"));

package/dist/validate-D7Wn8PUX.mjs

@@ -0,0 +1 @@
+export { i as validateMigrations } from "./validate-CnZPMq4q.mjs";

package/dist/{version-metadata-DIrqEHQo.mjs → version-metadata-B1Bm2wSq.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-BYs07Rxy.mjs";
+import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-C9XSzrju.mjs";
 //#region src/shared/untrusted-env.ts
 /** Authentication inputs that Wrangler may consume from the environment. */
 const WRANGLER_AUTH_CREDENTIAL_ENV_VARS = [

package/dist/{wrangler-BYs07Rxy.mjs → wrangler-C9XSzrju.mjs}

@@ -1,7 +1,7 @@
 import { a as join, n as dirname, o as normalize, t as basename } from "./dist-ipQi0Q8y.mjs";
-import "./project-paths-DMvEeSau.mjs";
-import { d as readConfig } from "./config-Bx_1SpnO.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-DV60XFFK.mjs";
+import "./project-paths-DGu_QZ_Q.mjs";
+import { d as readConfig } from "./config-D26zcdKy.mjs";
+import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-rdFOys4X.mjs";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { appendSqliteClassMigration, isRecord } from "@void/deploy-core";
 import { createHash } from "node:crypto";

package/dist/wrangler-DAdxHEzh.mjs

@@ -0,0 +1 @@
+export { b as readRootWranglerConfig } from "./wrangler-C9XSzrju.mjs";

package/dist/{wrapper-CwhpNWtH.mjs → wrapper-BOigE1xJ.mjs}

@@ -1,9 +1,9 @@
 import { a as join, l as toSlash, n as dirname, r as extname } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
-import { d as readConfig, s as getDatabaseDialect } from "./config-Bx_1SpnO.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
+import { d as readConfig, s as getDatabaseDialect } from "./config-D26zcdKy.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { t as MagicString } from "./dist-Cegxq8gs.mjs";
-import { r as voidDbBundlerPlugin, t as generateQueueResolverSource } from "./dispatch-DrTTk8Xg.mjs";
+import { r as voidDbBundlerPlugin, t as generateQueueResolverSource } from "./dispatch-BAbbn3jg.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -150,7 +150,7 @@ async function generateWrapper(workerDir, workerMain, root, features) {
 	let migrations;
 	let migrationPlanBundle;
 	if (features.hasMigrations) {
-		const { collectMigrations } = await import("./collect-Cae8A7Zr.mjs");
+		const { collectMigrations } = await import("./collect-BWhkgtAn.mjs");
 		const { buildMigrationPlanBundle } = await import("./plan-CKX_jWnD.mjs");
 		const migrationsDir = readProjectPaths(root).migrationsDir;
 		migrations = collectMigrations(migrationsDir);

package/dist/{ws-aKVYB-fA.d.mts → ws-CsBNxv86.d.mts}

@@ -35,6 +35,11 @@ type WebSocketBaseContext = {
   readonly id: string;
   readonly params: ParamsRecord;
   readonly user: AuthUser | null;
+  /**
+   * The HTTP request in `onBeforeConnect`, `onConnect` and `onRequest`. In `onMessage` and
+   * `onClose` the connection can resume after hibernation, so this is a placeholder without
+   * headers, cookies or query. Use `params`, `user` or the connection `state` there.
+   */
   readonly request: Request;
   readonly env: CloudEnv["Bindings"];
   readonly storage: DurableObjectStorage;

package/docs/guide/auth.md

@@ -92,7 +92,7 @@ Email/password is enabled by default. To add social providers:
 }
 ```
 
-Provider credentials come from `AUTH_<PROVIDER>_CLIENT_ID` and `AUTH_<PROVIDER>_CLIENT_SECRET`.
+Provider credentials come from `AUTH_<PROVIDER>_CLIENT_ID` and `AUTH_<PROVIDER>_CLIENT_SECRET`. `cognito` also needs a domain, region, and user pool ID: set `AUTH_COGNITO_DOMAIN`, `AUTH_COGNITO_REGION`, and `AUTH_COGNITO_USER_POOL_ID`, or set them in `auth.ts`.
 
 See the full provider list in the [config reference](../reference/config.md#auth).
 

package/docs/guide/database/d1.md

@@ -8,9 +8,9 @@ outline: deep
 
 ## Local Database
 
-`void dev` and local `void db` commands share the same database. If `cloudflare.d1_databases` in `void.config.ts` declares the D1 binding, Void uses its ID. A `preview_database_id` takes precedence during local development.
+The dev server and local `void db` commands share the same database. If `cloudflare.d1_databases` in `void.config.ts` declares the D1 binding, Void uses its ID. A `preview_database_id` takes precedence during local development.
 
-To store local data outside `.void`, set `voidPlugin({ persistTo: 'local-state' })` in your Vite config. Start `void dev` once to record that directory before running database commands. After changing the Vite config, start `void dev` again to refresh it. Frameworks that manage their own Cloudflare runtime use `.wrangler/state`.
+To store local data outside `.void`, set `voidPlugin({ persistTo: 'local-state' })` in your Vite config. Start the dev server once to record that directory before running database commands. After changing the Vite config, start it again to refresh it. Frameworks that manage their own Cloudflare runtime use `.wrangler/state`.
 
 ## Migrations & Prototyping
 

package/docs/guide/database/mysql.md

@@ -22,7 +22,7 @@ Add a direct connection for local development:
 DATABASE_URL=mysql://user:password@host:3306/app
 ```
 
-Void reads `.env` for `void dev` and `void db` commands. In production, the Worker connects through the inferred `HYPERDRIVE` binding.
+Void reads `.env` for the dev server and `void db` commands. In production, the Worker connects through the inferred `HYPERDRIVE` binding.
 
 ## Define a schema
 

package/docs/guide/edge/headers.md

@@ -33,9 +33,17 @@ For hashed assets, you can add headers, but the platform keeps control of cachin
 
 Header rules do not apply to ISR cache responses.
 
-### Blocked headers
+### Cookie headers
 
-`Set-Cookie` and `Clear-Site-Data` are ignored in header rules. On a shared domain such as `*.apps.example.com`, a rule could otherwise affect cookies or data belonging to another project's subdomain.
+On a [Void platform](../deployment.md#deploy-to-a-team-platform), apps usually share an application domain, such as `apps.example.com`. Header rules on a platform deploy change two headers on all hostnames of the app, including custom domains:
+
+- Void ignores `Set-Cookie` in header rules.
+- Void removes the `"cookies"` directive from `Clear-Site-Data` in header rules. Other directives, such as `"cache"` and `"storage"`, still apply.
+- Void ignores the full value of a `Clear-Site-Data` rule that includes `"*"`. The response then keeps the `Clear-Site-Data` value from your app's response, without `"cookies"`. If that value also includes `"*"`, the response has no `Clear-Site-Data`.
+
+This stops a header rule from setting or clearing cookies for other apps on the same domain. These limits apply only to header rules. Your app's own response can set cookies and send `Clear-Site-Data`, and on a shared domain those can affect other apps. See [Domains and Resources](../platform/installation/domains.md#adding-a-domain).
+
+In `void dev`, with `void deploy --platform cloudflare`, and on [other runtimes](../deployment.md#other-runtimes), header rules apply both headers as written.
 
 ## Framework `_headers` files
 

package/docs/guide/edge/revalidation.md

@@ -63,6 +63,8 @@ export const loader = defineHandler(async (c) => {
 
 Per-page values take precedence over `void.config.ts` patterns.
 
+A page's `revalidate` export also applies to `routes/` handlers whose URLs match the page pattern. For example, if `pages/[...slug].server.ts` exports `revalidate`, Void can also cache the `GET` response of `routes/now.ts`. Void never caches paths under `/api`. To keep a route handler's response out of the cache, set `x-revalidate: 0` on it. See [Per-response TTL override](#per-response-ttl-override).
+
 ## Precedence
 
 When multiple sources set a revalidate TTL, the most specific wins:

package/docs/guide/email/receiving.md

@@ -96,7 +96,7 @@ to check current provider routing and any remaining setup steps.
 
 For direct deployments, follow [Your own Cloudflare account](./domains.md#your-own-cloudflare-account) to configure inbound addresses.
 
-There is no local inbound trigger yet — `void dev` serves the outbound dev inbox only, so test inbound handlers with `createInboundTestHarness` below.
+`void dev` has no local inbound trigger. It serves only the outbound dev inbox. Test inbound handlers with `createInboundTestHarness` below.
 
 ## Testing inbound handlers {#testing-inbound-handlers}
 

package/docs/guide/email/sending.md

@@ -195,7 +195,7 @@ The inbox keeps the most recent 100 messages through HMR and clears on a full se
 
 The dev inbox works in native Void apps, TanStack Start, and React Router. It is unavailable in SvelteKit, Nuxt, Analog, and Astro; sends from those apps return `BINDING_MISSING`. Use `createEmailTestHarness` from `void/email/testing` to capture sends in tests. If a configured inbox cannot be reached, `sendEmail` returns `UPSTREAM_ERROR` without sending.
 
-`sendInDev: true` skips the inbox, but returns `BINDING_MISSING` during `void dev`. Deploy the app to test real delivery.
+`sendInDev` is deprecated. During `void dev` it skips the inbox and returns `BINDING_MISSING`, so it never delivers. Remove it, and deploy the app to test real delivery.
 
 ## Testing {#testing}
 

package/docs/guide/pages-routing/islands.md

@@ -209,7 +209,7 @@ After a successful action, an island page reloads or redirects through `window.l
 
 ## Forms
 
-Island pages cannot use `useForm` because it depends on the Void Router. Use `useIslandForm` instead. It has the same API, but it uses `fetch()` directly:
+Island pages cannot use `useForm` because it depends on the Void Router. Use `useIslandForm` instead. It has the same form state, but its submit helpers take the action URL and use `fetch()` directly:
 
 ::: code-group
 
@@ -344,7 +344,7 @@ export default function PostForm() {
 
 :::
 
-`useIslandForm` provides the same state and methods as [`useForm`](./actions-and-forms#useform). Use `post`, `put`, `patch`, or `delete` with the action URL to submit.
+`useIslandForm` provides the same form state as [`useForm`](./actions-and-forms#useform). Pass the action URL to `post`, `put`, `patch`, or `delete` to submit.
 
 Successful submissions reload the page; redirects navigate to their destination. A `422` response populates `errors` from `{ errors: { field: "message" } }`. Submit helpers return `Promise<void>`.
 

package/docs/guide/platform/administration/connected-apps.md

@@ -4,7 +4,7 @@ A connected app is a separate application registered as an OAuth client on your
 
 ## Register an application
 
-Open **Admin → Connected apps**. Enter the app name, its operator, and each exact HTTPS callback URL on a separate line. Wildcards and callback query strings are not supported. Enable individual publish approvals if the app builds and deploys projects.
+Open **Admin → Connected apps**. Enter the app name, its operator, and each exact HTTPS callback URL on a separate line. Wildcards and callback query strings are not supported. Enable individual publish approvals if the app builds and deploys projects. Enable private previews to run checkpoints before publishing. Existing clients have an **Enable private previews** button; users must connect again to consent to that permission.
 
 Save the returned client ID and secret on the app's server. Void shows the secret once. The client secret authenticates that application; it does not grant access to users' accounts. Register a new client if you need replacement credentials, then disable the old one.
 
@@ -18,6 +18,22 @@ The app sends users to Void's authorization page, where Void displays its regist
 
 Users can disconnect applications at `<platform API URL>/oauth/connections`. Grants also expire after an hour and become invalid when their platform login session is revoked or their account is suspended. Applications must request a new sign-in when access expires.
 
+## Private previews
+
+Sign-in can request `scope=profile preview:deploy` when the administrator has enabled it. After user consent, the app can build private previews without approval for each checkpoint. Production publishing still requires individual approval.
+
+Use the granted bearer token to:
+
+1. POST `{ workspace: externalWorkspaceId }` to `/oauth/previews`. The response contains a stable `project_id` and preview `url` for that client, owner and workspace.
+2. POST `{ project_id, checkpoint, artifact: prepared.artifact }` to `/oauth/preview-deployment-requests`. Use its `access_token` and `approval_id` with the same asset upload and deployment protocol as publishing.
+3. Once deployment finishes, POST to `/oauth/previews/:id/launch` and open the returned URL. Launch URLs expire after one minute and can be used once. Reload the preview's origin after opening it.
+
+Each workspace has a separate preview origin and resources, with no production secrets. Previews support HTTP apps with isolated D1, KV, R2, AI and native Durable Objects. Authentication, external databases, email, schedules, queues and containers require production publishing. Viewing requires the current user grant; disconnecting or disabling the app denies subsequent requests. Preview writes must originate from that preview's own origin.
+
+Account Access policies must allow requests to generated preview origins to reach Void. A policy that blocks new Workers hostnames also blocks previews. Void still requires a valid preview grant when the hostname is reachable.
+
+Each owner can have ten preview workspaces. Each workspace permits sixty builds per hour and shares the owner's platform resource and usage limits. Inactive previews expire after seven days and Void removes their resources. Opening the workspace through `/oauth/previews` renews that expiry. Disabling preview permission expires its previews.
+
 ## Approve a publish
 
 The app builds first, then sends the user to Void with the prepared artifact. Void displays the project name, checkpoint label, resources, manifest, and artifact digest. The user must explicitly approve on Void.
@@ -30,7 +46,7 @@ Disabling the app or disconnecting its grant stops authorization for subsequent
 
 ## Build an OAuth client
 
-Discover endpoints at `/.well-known/oauth-authorization-server` on the platform API origin. Use authorization code flow with `scope=profile`, a random `state`, and S256 PKCE. Authenticate token exchanges using HTTP Basic client authentication. Send access tokens as Bearer credentials to `/oauth/userinfo`; its response contains `sub` and `preferred_username`.
+Discover endpoints at `/.well-known/oauth-authorization-server` on the platform API origin. Use authorization code flow with `scope=profile`, a random `state`, and S256 PKCE. Authenticate token exchanges using HTTP Basic client authentication. Send access tokens as Bearer credentials to `/oauth/userinfo`; its response contains `sub`, `preferred_username`, and the consented `scope`.
 
 For publishing, package the built app with [`prepareDeployArtifact`](/reference/api/deploy). POST to `/oauth/deployment-requests` using the profile token: