void 1.1.0 → 1.1.12

package/dist/{account-cmd-BTcUzv9L.mjs → account-cmd-Cj6sCMTk.mjs}

@@ -1,14 +1,14 @@
 import { c as getToken, f as removeToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
-import { n as runLoginCommand } from "./login-C2T1oVG-.mjs";
+import { m as printSuccess } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
+import { n as runLoginCommand } from "./login-f2eu2TQh.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-DUJuvRx5.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-Dj7lAC_K.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
 			if (removeToken(root)) printSuccess("Logged out.");
 			else log.info("Not logged in.");

package/dist/{application-analysis-AB_YYWgH.mjs → application-analysis-D7nNmNJb.mjs}

@@ -1,15 +1,15 @@
 import { a as join, i as isAbsolute, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { c as scanWebSocketRoutesSync, f as readResourceDefinition, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listConventionFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-DsARdQKE.mjs";
-import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
-import { t as findVoidAuthConfig } from "./config-D0GY5ItR.mjs";
-import { f as resolveBindingNames, s as getDatabaseDialect } from "./config-Bx_1SpnO.mjs";
+import { c as scanWebSocketRoutesSync, f as readResourceDefinition, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listConventionFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-Bekzjuqw.mjs";
+import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
+import { t as findVoidAuthConfig } from "./config-CyUJzi3q.mjs";
+import { f as resolveBindingNames, s as getDatabaseDialect } from "./config-D26zcdKy.mjs";
 import { n as globSync } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename, o as unwrapStaticExpression, t as isRouteEnabledForEnvironment } from "./parse-filename-CUbj-1MP.mjs";
 import { n as resourceNameWords } from "./resource-name-C7LVpcRm.mjs";
-import { t as collectMigrations } from "./collect-xjffdCdk.mjs";
+import { t as collectMigrations } from "./collect-Dew86qce.mjs";
 import { i as scanEmailHandlersSync } from "./email-BcjSyAL0.mjs";
-import { t as scanPages } from "./scan-C0BMdmEd.mjs";
+import { t as scanPages } from "./scan-D2-FcLHs.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { parseSync } from "vite";

package/dist/{application-routing-L7V-TFhZ.mjs → application-routing-CZH66gXn.mjs}

@@ -1,4 +1,4 @@
-import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-AB_YYWgH.mjs";
+import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-D7nNmNJb.mjs";
 //#region src/application-routing.ts
 /** Complete route/page analysis using the same resource and handler inventories. */
 async function completeApplicationAnalysis(analysis) {

package/dist/{auth-link-DUJuvRx5.mjs → auth-link-Dj7lAC_K.mjs}

@@ -1,9 +1,9 @@
 import { a as getApiUrl, c as getToken, m as savePlatformToken, p as runPlatformLogin, u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
-import { l as formatUrl } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
-import { r as selectPlatformLoginMethod } from "./login-C2T1oVG-.mjs";
-import { t as discoverPlatform } from "./platform-cmd-DaAOiWTl.mjs";
+import { l as formatUrl } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
+import { r as selectPlatformLoginMethod } from "./login-f2eu2TQh.mjs";
+import { t as discoverPlatform } from "./platform-cmd-CX7phm7V.mjs";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {
 	const token = getToken(root);

package/dist/{auth-migrations-Cgs0k6lS.mjs → auth-migrations-BO27GDNr.mjs}

@@ -48,7 +48,7 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 		if (useIdType) {
 			if (fieldName === "id" && idStrategy === "serial") return "integer GENERATED BY DEFAULT AS IDENTITY";
 			if (idStrategy === "serial") return "integer";
-			if (idStrategy === "uuid") return "uuid";
+			if (idStrategy === "uuid") return fieldName === "id" ? "uuid DEFAULT gen_random_uuid()" : "uuid";
 			return "text";
 		}
 		if (field.type === "boolean") return "boolean";
@@ -61,10 +61,18 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 	if (field.type === "boolean" || field.type === "date" || field.type === "number") return "INTEGER";
 	return "TEXT";
 }
+function renderDefaultLiteral(dialect, value) {
+	if (typeof value === "boolean") return dialect === "sqlite" ? value ? "1" : "0" : value ? "TRUE" : "FALSE";
+	if (typeof value === "number") return String(value);
+	if (dialect === "mysql" && value.includes("\\")) return `_utf8mb4 X'${Array.from(new TextEncoder().encode(value), (byte) => byte.toString(16).padStart(2, "0")).join("")}'`;
+	if (dialect === "postgresql" && value.includes("\\")) return `E'${value.replaceAll("\\", "\\\\").replaceAll("'", "''")}'`;
+	return `'${value.replaceAll("'", "''")}'`;
+}
 function buildColumnDefinition(dialect, schema, fieldName, field, options = {}) {
 	const parts = [`${quoteIdentifier(fieldName, dialect)} ${resolveColumnType(dialect, schema.idStrategy, fieldName, field)}`];
 	if (options.primaryKey) parts.push("PRIMARY KEY");
 	if (field.required || options.primaryKey) parts.push("NOT NULL");
+	if (options.withDefault && field.defaultValue !== void 0) parts.push(`DEFAULT ${renderDefaultLiteral(dialect, field.defaultValue)}`);
 	if (field.references) parts.push(`REFERENCES ${quoteIdentifier(field.references.table, dialect)}(${quoteIdentifier(field.references.field, dialect)}) ON DELETE ${String(field.references.onDelete ?? "cascade").toUpperCase()}`);
 	return parts.join(" ");
 }
@@ -81,7 +89,7 @@ function buildCreateTableSql(schema, table) {
 }
 function buildAddColumnSql(schema, tableName, fieldName, field) {
 	const ifNotExists = schema.dialect === "postgresql" ? " IF NOT EXISTS" : "";
-	return `ALTER TABLE ${quoteIdentifier(tableName, schema.dialect)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field)}`;
+	return `ALTER TABLE ${quoteIdentifier(tableName, schema.dialect)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field, { withDefault: true })}`;
 }
 function buildModifyMySqlColumnSql(schema, tableName, fieldName, field) {
 	return `ALTER TABLE ${quoteIdentifier(tableName, "mysql")} MODIFY COLUMN ${buildColumnDefinition("mysql", schema, fieldName, field)}`;
@@ -105,6 +113,31 @@ async function ensurePgIndexes(runner, schemaName, table) {
 	const indexRows = await runner.all("SELECT indexname FROM pg_indexes WHERE schemaname = $1 AND tablename = $2", [schemaName, table.name]);
 	await createMissingIndexes(runner, "postgresql", table, new Set(indexRows.map((row) => String(row.indexname))));
 }
+/**
+* Name the fields that a table with rows cannot take, and the fix, before the table changes.
+* SQLite and PostgreSQL cannot add a NOT NULL column with no default to a table that has rows;
+* MySQL fills those rows itself. On each dialect, a new required column gives every row the same
+* value, so its unique index fails when the table has two or more rows.
+*/
+async function assertRequiredColumnsCanBeAdded(runner, dialect, table, missing) {
+	const required = missing.filter((fieldName) => table.fields[fieldName].required);
+	const unique = required.filter((fieldName) => table.fields[fieldName].unique);
+	const noDefault = dialect === "mysql" ? [] : required.filter((fieldName) => table.fields[fieldName].defaultValue === void 0);
+	if (unique.length === 0 && noDefault.length === 0) return;
+	const rows = await runner.all(`SELECT 1 AS present FROM ${quoteIdentifier(table.name, dialect)} LIMIT 2`);
+	const describe = (fieldNames) => ({
+		names: fieldNames.map((fieldName) => JSON.stringify(fieldName)).join(", "),
+		noun: fieldNames.length === 1 ? "field" : "fields"
+	});
+	if (rows.length >= 2 && unique.length > 0) {
+		const { names, noun } = describe(unique);
+		throw new Error(`Cannot add required unique auth ${noun} ${names} to table ${JSON.stringify(table.name)}: the table has more than one row, and a new column gives every row the same value. Set \`required: false\` on the ${noun}, or add the ${unique.length === 1 ? "column" : "columns"} in a migration that gives each row its own value.`);
+	}
+	if (rows.length >= 1 && noDefault.length > 0) {
+		const { names, noun } = describe(noDefault);
+		throw new Error(`Cannot add required auth ${noun} ${names} to table ${JSON.stringify(table.name)}: the table has rows, and there is no fixed default value to fill them. Set \`required: false\` on the ${noun}. A string, number or boolean field can use a fixed \`defaultValue\` instead.`);
+	}
+}
 async function applySqliteAuthMigrations(runner, schema) {
 	const tableRows = await runner.all("SELECT name FROM sqlite_master WHERE type = 'table'");
 	const existingTables = new Set(tableRows.map((row) => String(row.name)));
@@ -117,6 +150,7 @@ async function applySqliteAuthMigrations(runner, schema) {
 		}
 		const columnRows = await runner.all(`PRAGMA table_info(${quotePragmaArg(table.name)})`);
 		const existingColumns = new Set(columnRows.map((row) => String(row.name)));
+		await assertRequiredColumnsCanBeAdded(runner, "sqlite", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 		for (const [fieldName, field] of Object.entries(table.fields)) {
 			if (existingColumns.has(fieldName)) continue;
 			await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));
@@ -138,6 +172,7 @@ async function applyPgAuthMigrations(runner, schema) {
 		}
 		const columnRows = await runner.all("SELECT column_name FROM information_schema.columns WHERE table_schema = $1 AND table_name = $2", [schemaName, table.name]);
 		const existingColumns = new Set(columnRows.map((row) => String(row.column_name)));
+		await assertRequiredColumnsCanBeAdded(runner, "postgresql", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 		for (const [fieldName, field] of Object.entries(table.fields)) {
 			if (existingColumns.has(fieldName)) continue;
 			await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));
@@ -157,6 +192,7 @@ async function applyMySqlAuthMigrations(runner, schema) {
 		} else {
 			const columnRows = await runner.all("SELECT COLUMN_NAME AS column_name, DATA_TYPE AS data_type FROM information_schema.columns WHERE table_schema = ? AND table_name = ?", [databaseName, table.name]);
 			const existingColumns = new Map(columnRows.map((row) => [String(row.column_name), row]));
+			await assertRequiredColumnsCanBeAdded(runner, "mysql", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 			for (const [fieldName, field] of Object.entries(table.fields)) {
 				const existingColumn = existingColumns.get(fieldName);
 				if (!existingColumn) await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));

package/dist/{auth-router-CIxiMG7i.mjs → auth-router-CNsMOFCa.mjs}

@@ -22,7 +22,8 @@ async function chooseDestination(root, args, interactive) {
 		...connections.length === 0 ? [{
 			value: "void",
 			label: "Void platform",
-			hint: "Use the current Void account origin"
+			hint: "Run `void connect <url>` first",
+			disabled: true
 		}] : []
 	];
 	const selected = await select({
@@ -32,17 +33,17 @@ async function chooseDestination(root, args, interactive) {
 	if (isCancel(selected) || typeof selected !== "string") throw new Error("auth: Cancelled.");
 	return selected === "cloudflare" ? { platform: "cloudflare" } : {
 		platform: "void",
-		...selected === "void" ? {} : { apiUrl: selected }
+		apiUrl: selected
 	};
 }
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
 	const destination = await chooseDestination(root, args, interactive);
 	if (destination.platform === "cloudflare") {
-		const { runCloudflareCommand } = await import("./cloudflare-cmd-BIAF_BIY.mjs");
+		const { runCloudflareCommand } = await import("./cloudflare-cmd-D_2-Q-_i.mjs");
 		await runCloudflareCommand(root, { subcommand: args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-BTcUzv9L.mjs");
+	const { runAccountCommand } = await import("./account-cmd-Cj6sCMTk.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });

package/dist/{better-auth-shared-B74NJIus.d.mts → better-auth-shared-Bv18bB-l.d.mts}

@@ -12,6 +12,8 @@ type VoidAuthMigrationField = {
   index: boolean;
   bigint: boolean;
   unbounded?: boolean;
+  /** A fixed default of a required field. Adding the column fills rows that exist with it. */
+  defaultValue?: string | number | boolean;
   references?: {
     table: string;
     field: string;

package/dist/{better-auth-shared-CMXlZG7W.mjs → better-auth-shared-D-6z0q0f.mjs}

@@ -1,4 +1,4 @@
-import { a as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BXuhmuub.mjs";
+import { i as getVoidAuthProviderSettingEnvNames, o as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BUHwJlmM.mjs";
 import { t as authContext } from "./auth-3sGB0zJ1.mjs";
 import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
 import { betterAuth } from "better-auth";
@@ -64,11 +64,37 @@ function resolveSocialProviderCredentials(env, provider) {
 	const clientId = readEnvString(env, envNames.clientId);
 	const clientSecret = readEnvString(env, envNames.clientSecret);
 	if (!clientId || !clientSecret) throw new Error(`auth: Missing credentials for provider '${provider}'. Set ${envNames.clientId} and ${envNames.clientSecret}, or remove '${provider}' from auth.providers.`);
+	const settings = {};
+	for (const [option, envName] of Object.entries(getVoidAuthProviderSettingEnvNames(provider))) {
+		const value = readEnvString(env, envName);
+		if (value) settings[option] = value;
+	}
 	return {
+		...settings,
 		clientId,
 		clientSecret
 	};
 }
+/** Fail early when a configured provider still lacks a required setting after auth.ts runs. */
+function assertSocialProviderSettings(options, configuredProviders) {
+	const socialProviders = options.socialProviders;
+	for (const provider of configuredProviders ?? []) {
+		if (!isVoidSocialAuthProvider(provider)) continue;
+		const config = socialProviders?.[provider];
+		if (typeof config !== "object" || config === null) continue;
+		const values = config;
+		if (values.enabled === false) continue;
+		const missing = Object.entries(getVoidAuthProviderSettingEnvNames(provider)).filter(([option]) => !values[option]);
+		if (missing.length > 0) {
+			const options = joinNames(missing.map(([option]) => option));
+			throw new Error(`auth: Missing ${options} for the ${provider} provider. Set ${joinNames(missing.map(([, envName]) => envName))}, or set ${options} in auth.ts.`);
+		}
+	}
+}
+/** `a`, `a and b`, `a, b and c`. */
+function joinNames(names) {
+	return names.length > 1 ? `${names.slice(0, -1).join(", ")} and ${names.at(-1)}` : names[0];
+}
 function resolveSocialProviders(env, configuredProviders) {
 	if (!configuredProviders) return;
 	const providers = {};
@@ -215,6 +241,7 @@ function createVoidAuthRuntime(dialect, applyMigrations) {
 			trustedOrigins: [origin]
 		};
 		const resolved = resolveUserConfig(runtime.userConfig, defaults, request, env, dialect);
+		assertSocialProviderSettings(resolved, runtime.providers);
 		return runtime.dev !== true && cloudflareClientIp(request) ? applyCloudflareRateLimitDefaults(resolved) : resolved;
 	}
 	async function createVoidAuth(request, env, runtime, database) {

package/dist/{build-cmd-BkIv25PA.mjs → build-cmd-ByhegwRC.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { f as import_picocolors, i as dim, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { f as import_picocolors, i as dim, m as printSuccess } from "./output-CKguMgr7.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-BdzxubTS.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";
 //#region src/cli/build-cmd.ts

package/dist/{cache-Ctzfig-W.mjs → cache-CEFb5ban.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess, o as formatCount, r as createSpinner } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { m as printSuccess, o as formatCount, r as createSpinner } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {

package/dist/{cancel-deploy-CD9o-SsC.mjs → cancel-deploy-CaARY26n.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { m as printSuccess } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([
 	"pending",

package/dist/{cf-build-output-Bc8i3dzE.mjs → cf-build-output-ChEKWan2.mjs}

@@ -6,9 +6,9 @@ import { randomUUID } from "node:crypto";
 import { tmpdir } from "node:os";
 import { isDeepStrictEqual } from "node:util";
 import { spawn, spawnSync } from "node:child_process";
-import ignore from "ignore";
-import { getWorkerBundleDir, normalizeDirectoryName, readBuildOutput, writeAssets, writeContainerConfig, writeRootConfig, writeWorkerConfig } from "@cloudflare/build-output-utils";
+import { getRootConfigPath, getWorkerAssetsDir, getWorkerBundleDir, getWorkerConfigPath, normalizeDirectoryName, readBuildOutput, writeAssets, writeContainerConfig, writeRootConfig, writeWorkerConfig } from "@cloudflare/build-output-utils";
 import { InputConfigSchema, OutputContainerSchema } from "@cloudflare/config";
+import ignore from "ignore";
 //#region src/cli/cf-config-migrate.ts
 function record(value) {
 	return isRecord(value) ? value : null;
@@ -363,6 +363,14 @@ function isInside(directory, path) {
 	const child = relative(directory, path);
 	return child !== "" && child !== ".." && !child.startsWith("../") && !isAbsolute(child);
 }
+/** Asset copies follow symlinks, so a link may not reach outside the asset directory. */
+function assertAssetSymlinksInside(directory) {
+	const realDirectory = realpathSync(directory);
+	for (const entry of readdirSync(directory, {
+		recursive: true,
+		withFileTypes: true
+	})) if (entry.isSymbolicLink() && !isInside(realDirectory, realpathSync(join(entry.parentPath, entry.name)))) throw new Error("The Worker assets contain a symlink outside the asset directory.");
+}
 function copyBundle(source, destination) {
 	const modules = {};
 	for (const entry of readdirSync(source, {
@@ -384,12 +392,14 @@ function copyBundle(source, destination) {
 	}
 	return modules;
 }
-/** Create a private cf Build Output tree from Void's verified Vite artifact. */
-async function prepareCfBuildOutput(workerDirectory, accountId) {
+/** Create a disposable cf Build Output tree from an existing Cloudflare Worker build. */
+async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
 	const source = resolve(workerDirectory);
+	if (existsSync(getRootConfigPath(source))) return prepareNativeBuildOutput(source, accountId, mode);
+	if (!existsSync(join(source, "wrangler.json"))) throw new Error(`No Cloudflare Worker build found in ${source}. Pass the project root that contains .cloudflare/output/v0, or the Worker output directory that contains wrangler.json.`);
 	const raw = record(JSON.parse(readFileSync(join(source, "wrangler.json"), "utf8")));
 	if (!raw) return null;
-	if (typeof raw.account_id === "string" && raw.account_id !== accountId) return null;
+	if (typeof raw.account_id === "string" && accountId !== void 0 && raw.account_id !== accountId) return null;
 	const config = migrateBuiltWranglerConfig(raw);
 	if (!config.worker) throw new Error("cf did not produce a Worker configuration.");
 	if (typeof raw.main !== "string" || !raw.main) throw new Error("The built Worker configuration is missing its main entry. Rebuild the app.");
@@ -412,9 +422,10 @@ async function prepareCfBuildOutput(workerDirectory, accountId) {
 		const bundle = getWorkerBundleDir(directory);
 		mkdirSync(bundle, { recursive: true });
 		const modules = copyBundle(source, bundle);
-		await writeRootConfig(directory, { accountId }, {
+		const configuredAccountId = accountId ?? raw.account_id;
+		await writeRootConfig(directory, typeof configuredAccountId === "string" ? { accountId: configuredAccountId } : {}, {
 			isPreview: false,
-			mode: "production"
+			mode: mode ?? "production"
 		});
 		await writeWorkerConfig({
 			root: directory,
@@ -448,6 +459,7 @@ async function prepareCfBuildOutput(workerDirectory, accountId) {
 				await dispose();
 				return null;
 			}
+			assertAssetSymlinksInside(assetPath);
 			await writeAssets({
 				root: directory,
 				sourceDirectory: assetPath
@@ -464,6 +476,58 @@ async function prepareCfBuildOutput(workerDirectory, accountId) {
 		throw error;
 	}
 }
+/** Copy and complete the native artifact without changing the Vite build's inputs or metadata. */
+async function prepareNativeBuildOutput(source, accountId, mode) {
+	const built = await readBuildOutput(source);
+	if (accountId !== void 0 && built.rootConfig.accountId !== void 0 && accountId !== built.rootConfig.accountId || mode !== void 0 && mode !== built.rootConfig.buildContext.mode) return null;
+	const directory = mkdtempSync(join(tmpdir(), "void-cf-native-"));
+	const dispose = async () => {
+		rmSync(directory, {
+			recursive: true,
+			force: true
+		});
+	};
+	try {
+		await writeRootConfig(directory, {
+			accountId: accountId ?? built.rootConfig.accountId,
+			complianceRegion: built.rootConfig.complianceRegion
+		}, {
+			...built.rootConfig.buildContext,
+			mode: built.rootConfig.buildContext.mode
+		});
+		for (const [name, worker] of Object.entries(built.workers)) {
+			if (worker.bundleDir && (!worker.config.manifest || worker.config.manifest.modules[worker.config.manifest.mainModule]?.type !== "esm")) throw new Error("The native Worker build must declare its main ES module.");
+			const configPath = getWorkerConfigPath(directory, name);
+			mkdirSync(dirname(configPath), { recursive: true });
+			writeFileSync(configPath, JSON.stringify(worker.config));
+			if (worker.bundleDir && worker.config.manifest) {
+				const bundle = getWorkerBundleDir(directory, name);
+				for (const module of Object.keys(worker.config.manifest.modules)) {
+					const destination = join(bundle, module);
+					if (module.includes("\\") || module.includes(":") || !isInside(bundle, resolve(bundle, module)) || !isInside(worker.bundleDir, resolve(worker.bundleDir, module))) throw new Error("Native Worker modules must stay inside the build bundle.");
+					if (!existsSync(join(worker.bundleDir, module))) throw new Error(`Native Worker module ${module} is missing from the build bundle.`);
+					mkdirSync(dirname(destination), { recursive: true });
+					copyFileSync(join(worker.bundleDir, module), destination);
+				}
+			}
+			if (worker.assetsDir) cpSync(worker.assetsDir, getWorkerAssetsDir(directory, name), { recursive: true });
+		}
+		for (const container of built.containers) await writeContainerConfig({
+			root: directory,
+			config: container.config,
+			directoryName: basename(dirname(container.configPath))
+		});
+		await readBuildOutput(directory);
+		return {
+			directory,
+			...built.workers.default.assetsDir ? { assetsDirectory: built.workers.default.assetsDir } : {},
+			dispose
+		};
+	} catch (error) {
+		await dispose();
+		throw error;
+	}
+}
 /** Bundle a generated Worker entry with Vite, then hand the result to `prepareCfBuildOutput`. */
 async function prepareBundledBuildOutput(options) {
 	const scratch = mkdtempSync(join(tmpdir(), options.scratchPrefix));

package/dist/cf-build-output-Dcmxa-Zm.mjs

@@ -0,0 +1 @@
+export { t as prepareCfBuildOutput } from "./cf-build-output-ChEKWan2.mjs";

package/dist/{cf-user-agent-ChjQp2MU.mjs → cf-command-values-b8OqDoo9.mjs}

@@ -1,5 +1,3 @@
-import { n as getOwnVersion } from "./agents-CuNtT0D_.mjs";
-import { readFileSync } from "node:fs";
 //#region src/cli/cf-command-values.ts
 /** Accept a cf positional only when it cannot be read as a flag or carry control characters. */
 function safePositional(value) {
@@ -8,6 +6,10 @@ function safePositional(value) {
 		return code < 32 || code === 127;
 	});
 }
+/** Accept only Cloudflare's hex-segment D1 Time Travel bookmarks; Void prints them as commands to copy. */
+function isD1Bookmark(value) {
+	return typeof value === "string" && /^[0-9a-f]+(?:-[0-9a-f]+)+$/i.test(value);
+}
 /** Read the version ID and URLs that cf prints after a prebuilt upload. */
 function readCfUploadOutput(stdout) {
 	return {
@@ -17,17 +19,4 @@ function readCfUploadOutput(stdout) {
 	};
 }
 //#endregion
-//#region src/cli/cf-user-agent.ts
-let voidUserAgent;
-let cfCliVersion;
-function getVoidUserAgent() {
-	if (voidUserAgent === void 0) voidUserAgent = `void/${getOwnVersion()}`;
-	return voidUserAgent;
-}
-/** cf prepends `cf-cli/` to CLI_VERSION for both API requests and uploads. */
-function getCfCliVersion(attribution) {
-	if (cfCliVersion === void 0) cfCliVersion = `${JSON.parse(readFileSync(new URL(import.meta.resolve("cf/package.json")), "utf8")).version} ${getVoidUserAgent()}`;
-	return attribution ? `${cfCliVersion} ${attribution}` : cfCliVersion;
-}
-//#endregion
-export { safePositional as i, getVoidUserAgent as n, readCfUploadOutput as r, getCfCliVersion as t };
+export { readCfUploadOutput as n, safePositional as r, isD1Bookmark as t };

package/dist/cf-user-agent-BkEHPDLA.mjs

@@ -0,0 +1,16 @@
+import { n as getOwnVersion } from "./agents-CuNtT0D_.mjs";
+import { readFileSync } from "node:fs";
+//#region src/cli/cf-user-agent.ts
+let voidUserAgent;
+let cfCliVersion;
+function getVoidUserAgent() {
+	if (voidUserAgent === void 0) voidUserAgent = `void/${getOwnVersion()}`;
+	return voidUserAgent;
+}
+/** cf prepends `cf-cli/` to CLI_VERSION for both API requests and uploads. */
+function getCfCliVersion(attribution) {
+	if (cfCliVersion === void 0) cfCliVersion = `${JSON.parse(readFileSync(new URL(import.meta.resolve("cf/package.json")), "utf8")).version} ${getVoidUserAgent()}`;
+	return attribution ? `${cfCliVersion} ${attribution}` : cfCliVersion;
+}
+//#endregion
+export { getVoidUserAgent as n, getCfCliVersion as t };