void 1.1.0 → 1.1.12

package/dist/runtime/remote/index.mjs

@@ -1,6 +1,6 @@
 import { n as bytesToBase64 } from "../../base64-DVrOndmI.mjs";
 import { t as cfAccessHeaders } from "../../cf-access-BM9G0lhO.mjs";
-import { n as serializeR2Conditional } from "../../r2-conditions-D1Wk8i7b.mjs";
+import { a as serializeR2HttpMetadata, i as serializeR2Conditional, t as R2_OBJECT_HEADER } from "../../r2-conditions-B8xUgJRc.mjs";
 //#region src/runtime/remote/client.ts
 function readableMessage(value) {
 	if (typeof value !== "string") return;
@@ -252,6 +252,17 @@ var ProxyKVNamespace = class {
 //#endregion
 //#region src/runtime/remote/r2.ts
 /**
+* HTTP metadata that the REST fallback and older deployments do not store.
+* Every path stores `contentType`.
+*/
+const EXTRA_HTTP_METADATA = [
+	["contentLanguage", "content-language"],
+	["contentDisposition", "content-disposition"],
+	["contentEncoding", "content-encoding"],
+	["cacheControl", "cache-control"],
+	["cacheExpiry", "expires"]
+];
+/**
 * R2Bucket implementation backed by the remote proxy.
 * Used during local development when `remote: true` is set in void.config.ts.
 */
@@ -270,7 +281,8 @@ var ProxyR2Bucket = class {
 		if (!data) return null;
 		return makeR2Object(data);
 	}
-	async get(key) {
+	async get(key, options) {
+		if (requestsRange(options?.range) || requestsCondition(options?.onlyIf)) throw new Error("remote: R2 get() with range or onlyIf is not supported in remote mode.");
 		const res = await this.client.fetch("/r2/get", {
 			binding: this.binding,
 			key
@@ -296,6 +308,7 @@ var ProxyR2Bucket = class {
 		else body.value = textValue;
 		if (options?.httpMetadata) {
 			const meta = options.httpMetadata;
+			body.httpMetadata = serializeR2HttpMetadata(meta);
 			if (meta instanceof Headers) body.contentType = meta.get("content-type") ?? void 0;
 			else body.contentType = meta.contentType;
 		}
@@ -304,8 +317,11 @@ var ProxyR2Bucket = class {
 		if (conditional) body.onlyIf = serializeR2Conditional(options.onlyIf);
 		const result = await (await this.client.fetch(conditional ? "/r2/put-conditional" : "/r2/put", body)).json();
 		if (result === null) return null;
-		if ("key" in result) return makeR2Object(result);
-		if (conditional) throw new Error("remote: R2 conditional put requires a compatible Void platform and deployment.");
+		const stored = "key" in result ? result : void 0;
+		if (!stored && conditional) throw new Error("remote: R2 conditional put requires a compatible Void platform and deployment.");
+		const missing = missingMetadata(options, stored);
+		if (missing.length > 0) throw new Error(`remote: R2 put() stored "${key}" without ${missing.join(", ")}. Remote R2 metadata needs a project deployment with the current Void version. Deploy the project, then put the object again.`);
+		if (stored) return makeR2Object(stored);
 		return makeR2Object({
 			key,
 			size: 0,
@@ -326,19 +342,19 @@ var ProxyR2Bucket = class {
 			prefix: options?.prefix,
 			limit: options?.limit,
 			cursor: options?.cursor,
-			delimiter: options?.delimiter
+			delimiter: options?.delimiter,
+			startAfter: options?.startAfter,
+			include: options?.include
 		})).json();
+		if (!Array.isArray(data.delimitedPrefixes) && (options?.delimiter || options?.startAfter || options?.include)) throw new Error("remote: R2 list() with delimiter, startAfter or include got no answer from a current project deployment. The deployment uses an older Void version, or the platform could not reach it. Retry. If the error continues, deploy the project with the current Void version.");
 		return {
 			objects: data.objects.map((o) => makeR2Object({
-				key: o.key,
-				size: o.size,
-				etag: "",
-				lastModified: o.lastModified,
-				contentType: "application/octet-stream"
+				contentType: "application/octet-stream",
+				...o
 			})),
 			truncated: data.truncated,
 			cursor: data.cursor ?? void 0,
-			delimitedPrefixes: []
+			delimitedPrefixes: data.delimitedPrefixes ?? []
 		};
 	}
 	createMultipartUpload() {
@@ -348,33 +364,77 @@ var ProxyR2Bucket = class {
 		throw new Error("resumeMultipartUpload() is not supported with remote bindings");
 	}
 };
+/**
+* Remote mode ignores a `Headers` value, such as `request.headers`, and returns the whole
+* object, so a reload with If-None-Match or a Range request for media still gets a body.
+* Native R2 ignores fields that are undefined.
+*/
+function requestsRange(range) {
+	if (range instanceof Headers) return false;
+	return Object.values(range ?? {}).some((value) => value !== void 0);
+}
+/** Same rules as `requestsRange`. `secondsGranularity` alone asks for no condition. */
+function requestsCondition(onlyIf) {
+	if (onlyIf instanceof Headers) return false;
+	return Object.entries(onlyIf ?? {}).some(([name, value]) => name !== "secondsGranularity" && value !== void 0);
+}
+/** Metadata in `options` that the stored object in the put response does not have. */
+function missingMetadata(options, stored) {
+	const meta = options?.httpMetadata;
+	const missing = EXTRA_HTTP_METADATA.filter(([field, header]) => (meta instanceof Headers ? meta.has(header) : meta?.[field] !== void 0) && stored?.httpMetadata?.[field] === void 0).map(([field]) => field);
+	if (Object.keys(options?.customMetadata ?? {}).some((name) => stored?.customMetadata?.[name] === void 0)) missing.push("customMetadata");
+	return missing;
+}
+/** R2 `etag` is unquoted. HTTP headers and older handlers send the quoted form. */
+function normalizeEtag(etag) {
+	const value = etag.startsWith("W/") ? etag.slice(2) : etag;
+	return value.length >= 2 && value.startsWith("\"") && value.endsWith("\"") ? value.slice(1, -1) : value;
+}
+function readHttpMetadata(data) {
+	if (!data.httpMetadata) return { contentType: data.contentType };
+	const { cacheExpiry, ...metadata } = data.httpMetadata;
+	return cacheExpiry ? {
+		...metadata,
+		cacheExpiry: new Date(cacheExpiry)
+	} : metadata;
+}
 function makeR2Object(data) {
+	const etag = normalizeEtag(data.etag ?? "");
+	const httpMetadata = readHttpMetadata(data);
 	return {
 		key: data.key,
 		version: data.version ?? "",
 		size: data.size,
-		etag: data.etag,
-		httpEtag: data.etag ? `"${data.etag}"` : "",
+		etag,
+		httpEtag: etag ? `"${etag}"` : "",
 		checksums: { toJSON: () => ({}) },
 		uploaded: new Date(data.lastModified || Date.now()),
-		httpMetadata: data.httpMetadata ?? { contentType: data.contentType },
+		httpMetadata,
 		customMetadata: data.customMetadata ?? {},
 		storageClass: "Standard",
 		range: void 0,
-		writeHttpMetadata(_headers) {}
+		writeHttpMetadata(headers) {
+			const fields = [
+				["content-type", httpMetadata.contentType],
+				["content-language", httpMetadata.contentLanguage],
+				["content-disposition", httpMetadata.contentDisposition],
+				["content-encoding", httpMetadata.contentEncoding],
+				["cache-control", httpMetadata.cacheControl],
+				["expires", httpMetadata.cacheExpiry?.toUTCString()]
+			];
+			for (const [name, value] of fields) if (value !== void 0) headers.set(name, value);
+		}
 	};
 }
 function makeR2ObjectBody(key, res) {
-	const size = parseInt(res.headers.get("content-length") ?? "0");
-	const etag = res.headers.get("etag") ?? "";
-	const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+	const meta = res.headers.get(R2_OBJECT_HEADER);
 	return {
-		...makeR2Object({
+		...makeR2Object(meta ? JSON.parse(decodeURIComponent(meta)) : {
 			key,
-			size,
-			etag,
-			lastModified: res.headers.get("last-modified") ?? (/* @__PURE__ */ new Date()).toISOString(),
-			contentType
+			size: parseInt(res.headers.get("content-length") ?? "0"),
+			etag: res.headers.get("etag") ?? "",
+			lastModified: res.headers.get("last-modified") ?? "",
+			contentType: res.headers.get("content-type") ?? "application/octet-stream"
 		}),
 		body: res.body,
 		get bodyUsed() {
@@ -392,6 +452,9 @@ function makeR2ObjectBody(key, res) {
 /**
 * Replace local D1/KV/R2 bindings with proxy-backed versions.
 * Called from the generated worker entry point when `__VOID_REMOTE` is set.
+*
+* @deprecated Internal to Void. The generated worker calls this in remote mode.
+* `void/remote` is not a supported import. Removed in the next major version.
 */
 function createRemoteEnv(env, bindingNames) {
 	const client = new ProxyClient(env.__VOID_PROXY_URL, env.__VOID_TOKEN, env.__VOID_PROJECT_ID, env);

package/dist/runtime/routing.d.mts

@@ -1,5 +1,5 @@
-import { t as DevCssAsset } from "../types-BAp5AEBU.mjs";
-import { a as handlePageMutation, i as handlePageGet } from "../protocol-4H7V_3Os.mjs";
+import { t as DevCssAsset } from "../types-7AIz0OZu.mjs";
+import { a as handlePageMutation, i as handlePageGet } from "../protocol-Ssc_LhHj.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Context, ExecutionContext, Hono, MiddlewareHandler } from "hono";
 //#region src/runtime/routing-errors.d.ts

package/dist/runtime/routing.mjs

@@ -1,6 +1,6 @@
 import { n as createClientAssetTags, r as createManifestLoader, t as ASSET_EXTENSIONS } from "../routing-assets-VkrKIbxE.mjs";
 import { t as convertReturnValue } from "../response-Tn7rU0MV.mjs";
-import { n as handlePageGet, r as handlePageMutation } from "../protocol-RNP0u7UY.mjs";
+import { n as handlePageGet, r as handlePageMutation } from "../protocol-bAUUkx70.mjs";
 import { t as VoidAssetRewriteError } from "../handler-BZ1t7-Rv.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { compilePattern, matchPattern, matchPatternCaptures, mergeQueryIntoLocation, substituteParams } from "@void/edge";

package/dist/runtime/sse-client.d.mts

@@ -14,6 +14,10 @@ export type SseClient<Events extends SseEventMap = SseEventMap> = {
 };
 export type ConnectEventStreamOptions = {
   withCredentials?: boolean;
+  /**
+   * @deprecated Has no effect. Register each event with `client.on(name, handler)`.
+   * Removed in the next major version.
+   */
   events?: Array<string>;
   parse?: "json" | "text" | ((data: string) => unknown);
 };

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-_PqY82xe.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-D5K_yP6T.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,6 +1,6 @@
 import { n as AuthState } from "../auth-DkcFflXV.mjs";
-import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-B74NJIus.mjs";
-import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-aKVYB-fA.mjs";
+import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-Bv18bB-l.mjs";
+import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-nnFnAyQb.mjs";
 //#region src/runtime/ws-server.d.ts
 export type WebSocketRouteMeta = {
   name?: string;

package/dist/runtime/ws.d.mts

@@ -1,2 +1,2 @@
-import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-aKVYB-fA.mjs";
+import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-nnFnAyQb.mjs";
 export { AnyWebSocketDefinition, ConnectCommonOptions, RoomContext, RoomController, RoomDefinition, SocketContext, SocketDefinition, VoidSocket, VoidSocketCloseEvent, WebSocketBaseContext, WebSocketConnection, WebSocketInstanceKey, connect, defineRoom, defineWebSocket };

package/dist/{scan-C0BMdmEd.mjs → scan-D2-FcLHs.mjs}

@@ -1,8 +1,9 @@
 import { a as join, n as dirname, r as extname, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
 import { t as glob } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename } from "./parse-filename-CUbj-1MP.mjs";
+import { i as voidWarn } from "./log-vqY3pqwI.mjs";
 import { t as MagicString } from "./dist-Cegxq8gs.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
@@ -129,9 +130,7 @@ function resolveEffectiveLayoutEntries(page, layouts, namedLayouts) {
 	}));
 	if (page.layout === void 0) return defaultChain;
 	const isExclusive = page.layout.startsWith("!");
-	const name = isExclusive ? page.layout.slice(1) : page.layout;
-	if (name.startsWith(".") || name.startsWith("/")) return defaultChain;
-	const resolved = resolveNamedLayout(name, page.componentId, namedLayouts, page.componentPath);
+	const resolved = resolveNamedLayout(isExclusive ? page.layout.slice(1) : page.layout, page.componentId, namedLayouts, page.componentPath);
 	if (!resolved) return defaultChain;
 	const namedEntry = {
 		id: toLayoutId(resolved),
@@ -171,6 +170,8 @@ const PAGE_METHODS = /* @__PURE__ */ new Set([
 	"actions"
 ]);
 const MAX_REVALIDATE = 31536e3;
+/** Layout paths already reported; a dev server rescans pages on every file change. */
+const warnedLayoutPaths = /* @__PURE__ */ new Set();
 function componentLayout(source, filename) {
 	if (!source.includes("layout")) return;
 	for (const script of scriptBlocks(source, filename)) {
@@ -375,7 +376,14 @@ async function scanPages(root, options) {
 	for (const page of pages) {
 		if (page.layout === void 0 || page.layout === false) continue;
 		const name = page.layout.startsWith("!") ? page.layout.slice(1) : page.layout;
-		if (name.startsWith(".") || name.startsWith("/")) continue;
+		if (name.startsWith(".") || name.startsWith("/")) {
+			const key = `${pagesDir}\0${page.componentPath}\0${page.layout}`;
+			if (!warnedLayoutPaths.has(key)) {
+				warnedLayoutPaths.add(key);
+				voidWarn(`pages: Page '${page.componentPath}' specifies layout '${page.layout}'. Layout paths are not supported, so the default layouts are used. Use the name of a file in a _layouts/ directory, such as 'landing'.`);
+			}
+			continue;
+		}
 		if (!resolveNamedLayout(name, page.componentId, namedLayouts, page.componentPath)) throw new Error(`pages: Page '${page.componentPath}' specifies layout '${page.layout}', but _layouts/${name}.vue was not found in any ancestor directory.`);
 	}
 	return {

package/dist/{secret-bg73f1Ge.mjs → secret-wr6Sn4Xa.mjs}

@@ -1,10 +1,10 @@
 import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { m as printSuccess, o as formatCount, p as note } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
-import { _ as validateSecretValues } from "./env-validation-DYxjz_Wo.mjs";
+import { _ as validateSecretValues } from "./env-validation-D_KyMdab.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {
@@ -93,7 +93,7 @@ async function resolveSecretBackend(root, args) {
 }
 async function resolveCloudflareSecretBackend(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-CrSUFRzJ.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-BFLCpUCV.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	return {
 		target: "Cloudflare Worker",

package/dist/serialize-DtR8Vwa_.d.mts

@@ -0,0 +1,18 @@
+//#region src/pages/serialize.d.ts
+/**
+ * Escape JSON for embedding inside an inline `<script type="application/json">`
+ * tag. Replaces `<`, `>`, `&`, U+2028, U+2029 with their `\uXXXX` JSON escape
+ * sequences so the script tag cannot be closed early and the payload survives
+ * `JSON.parse` on hydration.
+ */
+declare function serializePageData(pageObj: unknown): string;
+/** Element id of the Markdown page frontmatter that islands read when they hydrate. */
+declare const ISLAND_FRONTMATTER_ID = "__void_frontmatter";
+/**
+ * Script tag that carries a Markdown page's frontmatter to its islands, so
+ * `useFrontmatter()` returns the same value in the browser as on the server.
+ * Empty when the page has no frontmatter.
+ */
+declare function islandFrontmatterScript(frontmatter: Record<string, unknown> | undefined): string;
+//#endregion
+export { islandFrontmatterScript as n, serializePageData as r, ISLAND_FRONTMATTER_ID as t };

package/dist/serialize-YHvlcG3Q.mjs

@@ -0,0 +1,31 @@
+//#region src/pages/script-json.ts
+const UNSAFE_SCRIPT_CHARS = /[<>&\u2028\u2029]/g;
+function escapeScriptJson(json) {
+	return json.replace(UNSAFE_SCRIPT_CHARS, (c) => {
+		return `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
+	});
+}
+//#endregion
+//#region src/pages/serialize.ts
+/**
+* Escape JSON for embedding inside an inline `<script type="application/json">`
+* tag. Replaces `<`, `>`, `&`, U+2028, U+2029 with their `\uXXXX` JSON escape
+* sequences so the script tag cannot be closed early and the payload survives
+* `JSON.parse` on hydration.
+*/
+function serializePageData(pageObj) {
+	return escapeScriptJson(JSON.stringify(pageObj));
+}
+/** Element id of the Markdown page frontmatter that islands read when they hydrate. */
+const ISLAND_FRONTMATTER_ID = "__void_frontmatter";
+/**
+* Script tag that carries a Markdown page's frontmatter to its islands, so
+* `useFrontmatter()` returns the same value in the browser as on the server.
+* Empty when the page has no frontmatter.
+*/
+function islandFrontmatterScript(frontmatter) {
+	if (!frontmatter || Object.keys(frontmatter).length === 0) return "";
+	return `<script type="application/json" id="${ISLAND_FRONTMATTER_ID}">${serializePageData(frontmatter)}<\/script>`;
+}
+//#endregion
+export { escapeScriptJson as i, islandFrontmatterScript as n, serializePageData as r, ISLAND_FRONTMATTER_ID as t };

package/dist/{subcommand-prompt-Bm3ZlYgA.mjs → subcommand-prompt-CNZc4XUd.mjs}

@@ -1,5 +1,5 @@
 import { $ as wrapTextWithPrefix, G as promptTitle, M as getGuide, V as optionText, b as S_RADIO_ACTIVE, d as S_CHECKBOX_SELECTED, i as S_BAR_END, it as wrapAnsi, j as formatInstructionFooter, n as SELECT_INSTRUCTIONS, r as S_BAR, t as MULTISELECT_INSTRUCTIONS, u as S_CHECKBOX_INACTIVE, w as S_STEP_SUBMIT } from "./dist-BVdsO7Py.mjs";
-import { f as import_picocolors } from "./output-Ba6ZbrzY.mjs";
+import { f as import_picocolors } from "./output-CKguMgr7.mjs";
 //#region src/cli/subcommand-prompt.ts
 const isUpKey = (key) => key === "\x1B[A" || key === "\x1BOA";
 const isDownKey = (key) => key === "\x1B[B" || key === "\x1BOB";

package/dist/{types-BAp5AEBU.d.mts → types-7AIz0OZu.d.mts}

@@ -41,7 +41,7 @@ type PageDefinition = {
     title?: string;
     description?: string;
   };
-  /** Named layout selection: "name", "!name", false, or relative path */
+  /** Named layout selection: "name", "!name", or false */
   layout?: string | false;
 };
 type LayoutDefinition = {

package/dist/{validate-CheZGRE7.mjs → validate-CnZPMq4q.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { n as readJournal, r as stripSqlExt } from "./collect-xjffdCdk.mjs";
+import { n as readJournal, r as stripSqlExt } from "./collect-Dew86qce.mjs";
 import { i as getExecutableSql, t as DESTRUCTIVE_PRAGMA } from "./plan-BhLO2p4w.mjs";
 import { existsSync, readdirSync } from "node:fs";
 import { hasStandalonePragma } from "@void/deploy-core";
@@ -74,19 +74,20 @@ function validateMigrations(files) {
 /**
 * Enumerate drizzle-kit metadata artifacts in a migrations directory.
 * Returns repo-relative paths like `db/migrations/meta/0000_snapshot.json`
-* and `db/migrations/migrations.js`. Empty when none are present.
+* and `db/migrations/migrations.js`, passed through `sourceRelative` so they
+* include the configured `sourceDir`. Empty when none are present.
 *
 * Shared across `assertJournalCoherence`, `void gen migration`, and
 * `void db rename-migrations` so all three agree on what counts as a
 * "partial drizzle-kit state" (journal gone but other metadata lingering).
 */
-function listDrizzleArtifacts(migrationsDir) {
+function listDrizzleArtifacts(migrationsDir, sourceRelative = (path) => path) {
 	const metaDir = join(migrationsDir, "meta");
 	const snapshotFiles = existsSync(metaDir) ? readdirSync(metaDir).filter((f) => f.endsWith("_snapshot.json")) : [];
 	const bundledPath = join(migrationsDir, "migrations.js");
 	const out = [];
-	for (const f of snapshotFiles) out.push(`db/migrations/meta/${f}`);
-	if (existsSync(bundledPath)) out.push("db/migrations/migrations.js");
+	for (const f of snapshotFiles) out.push(sourceRelative(`db/migrations/meta/${f}`));
+	if (existsSync(bundledPath)) out.push(sourceRelative("db/migrations/migrations.js"));
 	return out;
 }
 /**
@@ -100,28 +101,32 @@ function listDrizzleArtifacts(migrationsDir) {
 * hand-written `.sql` projects without `db/schema.ts` are supported and are
 * tracked by filename in `_void_migrations`. They cannot run
 * `void db generate`, so the check is skipped for them.
+*
+* `sourceRelative` (`ProjectPaths.sourceRelative`) adds the configured
+* `sourceDir` to the paths in error messages.
 */
-function assertJournalCoherence(migrationsDir, collected) {
-	const journal = readJournal(migrationsDir);
-	const drizzleArtifacts = listDrizzleArtifacts(migrationsDir);
+function assertJournalCoherence(migrationsDir, collected, sourceRelative = (path) => path) {
+	const dir = sourceRelative("db/migrations");
+	const journal = readJournal(migrationsDir, sourceRelative);
+	const drizzleArtifacts = listDrizzleArtifacts(migrationsDir, sourceRelative);
 	if (journal === void 0) {
 		if (drizzleArtifacts.length > 0) throw new Error([
-			"db/migrations/meta/_journal.json is missing, but other drizzle-kit metadata is still present:",
+			`${dir}/meta/_journal.json is missing, but other drizzle-kit metadata is still present:`,
 			...drizzleArtifacts.map((p) => `  - ${p}`),
 			"",
 			"This is a partial drizzle-kit state. Restore _journal.json from version control, or delete the orphaned metadata files above if you intended to revert to hand-written migrations."
 		].join("\n"));
 		return;
 	}
-	if (journal === null || typeof journal !== "object" || Array.isArray(journal) || typeof journal.version !== "string" || typeof journal.dialect !== "string" || !Array.isArray(journal.entries)) throw new Error("db/migrations/meta/_journal.json is malformed: expected an object with string `version`, string `dialect`, and an `entries` array. Restore the file from version control, or delete it if you intended to revert to hand-written migrations.");
+	if (journal === null || typeof journal !== "object" || Array.isArray(journal) || typeof journal.version !== "string" || typeof journal.dialect !== "string" || !Array.isArray(journal.entries)) throw new Error(`${dir}/meta/_journal.json is malformed: expected an object with string \`version\`, string \`dialect\`, and an \`entries\` array. Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
 	for (let i = 0; i < journal.entries.length; i++) {
 		const entry = journal.entries[i];
-		if (entry === null || typeof entry !== "object" || typeof entry.idx !== "number" || typeof entry.version !== "string" || typeof entry.tag !== "string" || typeof entry.breakpoints !== "boolean") throw new Error(`db/migrations/meta/_journal.json is malformed: entry at index ${i} is missing required fields (\`idx\`, \`version\`, \`tag\`, \`breakpoints\`). Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
+		if (entry === null || typeof entry !== "object" || typeof entry.idx !== "number" || typeof entry.version !== "string" || typeof entry.tag !== "string" || typeof entry.breakpoints !== "boolean") throw new Error(`${dir}/meta/_journal.json is malformed: entry at index ${i} is missing required fields (\`idx\`, \`version\`, \`tag\`, \`breakpoints\`). Restore the file from version control, or delete it if you intended to revert to hand-written migrations.`);
 	}
 	if (journal.entries.length === 0) {
 		if (drizzleArtifacts.length === 0) return;
 		throw new Error([
-			"db/migrations/meta/_journal.json has no entries, but drizzle-kit metadata is still present:",
+			`${dir}/meta/_journal.json has no entries, but drizzle-kit metadata is still present:`,
 			...drizzleArtifacts.map((p) => `  - ${p}`),
 			"",
 			"This is a partial drizzle-kit state. Restore _journal.json from version control (or run `void db generate`), or delete the orphaned metadata files above if you intended to revert to hand-written migrations."
@@ -131,7 +136,7 @@ function assertJournalCoherence(migrationsDir, collected) {
 	for (const entry of journal.entries) tagCounts.set(entry.tag, (tagCounts.get(entry.tag) ?? 0) + 1);
 	const duplicateTags = [...tagCounts.entries()].filter(([, n]) => n > 1).map(([tag]) => tag);
 	if (duplicateTags.length > 0) throw new Error([
-		"db/migrations/meta/_journal.json has duplicate migration entries:",
+		`${dir}/meta/_journal.json has duplicate migration entries:`,
 		...duplicateTags.map((t) => `  - ${t} (appears ${tagCounts.get(t)} times)`),
 		"",
 		"Each migration must have a unique tag. Restore _journal.json from version control, or hand-edit to remove the duplicates."
@@ -141,15 +146,15 @@ function assertJournalCoherence(migrationsDir, collected) {
 	const orphans = collected.map((m) => m.name).filter((name) => !journalTags.has(stripSqlExt(name)));
 	const missing = journal.entries.filter((e) => !collectedTags.has(e.tag)).map((e) => `${e.tag}.sql`);
 	if (orphans.length === 0 && missing.length === 0) return;
-	const lines = ["Migration drift detected between db/migrations/ and db/migrations/meta/_journal.json."];
+	const lines = [`Migration drift detected between ${dir}/ and ${dir}/meta/_journal.json.`];
 	if (orphans.length > 0) {
 		lines.push("", "These files exist on disk but are not tracked in _journal.json:");
-		for (const f of orphans) lines.push(`  - db/migrations/${f}`);
-		lines.push("", "Delete the orphan file(s), or move their contents into `db/schema.ts` and re-run `void db generate`.");
+		for (const f of orphans) lines.push(`  - ${dir}/${f}`);
+		lines.push("", `Delete the orphan file(s), or move their contents into \`${sourceRelative("db/schema.ts")}\` and re-run \`void db generate\`.`);
 	}
 	if (missing.length > 0) {
 		lines.push("", "These entries are in _journal.json but the matching file is missing:");
-		for (const f of missing) lines.push(`  - db/migrations/${f}`);
+		for (const f of missing) lines.push(`  - ${dir}/${f}`);
 		lines.push("", "Restore the missing file(s) from version control, or regenerate migrations.");
 	}
 	throw new Error(lines.join("\n"));

package/dist/validate-D7Wn8PUX.mjs

@@ -0,0 +1 @@
+export { i as validateMigrations } from "./validate-CnZPMq4q.mjs";

package/dist/{version-metadata-DIrqEHQo.mjs → version-metadata-B1Bm2wSq.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-BYs07Rxy.mjs";
+import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-C9XSzrju.mjs";
 //#region src/shared/untrusted-env.ts
 /** Authentication inputs that Wrangler may consume from the environment. */
 const WRANGLER_AUTH_CREDENTIAL_ENV_VARS = [

package/dist/{wrangler-BYs07Rxy.mjs → wrangler-C9XSzrju.mjs}

@@ -1,7 +1,7 @@
 import { a as join, n as dirname, o as normalize, t as basename } from "./dist-ipQi0Q8y.mjs";
-import "./project-paths-DMvEeSau.mjs";
-import { d as readConfig } from "./config-Bx_1SpnO.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-DV60XFFK.mjs";
+import "./project-paths-DGu_QZ_Q.mjs";
+import { d as readConfig } from "./config-D26zcdKy.mjs";
+import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-rdFOys4X.mjs";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { appendSqliteClassMigration, isRecord } from "@void/deploy-core";
 import { createHash } from "node:crypto";

package/dist/wrangler-DAdxHEzh.mjs

@@ -0,0 +1 @@
+export { b as readRootWranglerConfig } from "./wrangler-C9XSzrju.mjs";

package/dist/{wrapper-CwhpNWtH.mjs → wrapper-DGsYwNi6.mjs}

@@ -1,9 +1,9 @@
 import { a as join, l as toSlash, n as dirname, r as extname } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
-import { d as readConfig, s as getDatabaseDialect } from "./config-Bx_1SpnO.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
+import { d as readConfig, s as getDatabaseDialect } from "./config-D26zcdKy.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { t as MagicString } from "./dist-Cegxq8gs.mjs";
-import { r as voidDbBundlerPlugin, t as generateQueueResolverSource } from "./dispatch-DrTTk8Xg.mjs";
+import { r as voidDbBundlerPlugin, t as generateQueueResolverSource } from "./dispatch-BAbbn3jg.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -150,7 +150,7 @@ async function generateWrapper(workerDir, workerMain, root, features) {
 	let migrations;
 	let migrationPlanBundle;
 	if (features.hasMigrations) {
-		const { collectMigrations } = await import("./collect-Cae8A7Zr.mjs");
+		const { collectMigrations } = await import("./collect-BWhkgtAn.mjs");
 		const { buildMigrationPlanBundle } = await import("./plan-CKX_jWnD.mjs");
 		const migrationsDir = readProjectPaths(root).migrationsDir;
 		migrations = collectMigrations(migrationsDir);
@@ -459,6 +459,7 @@ function generateWrapperSource(renamedEntry, handlersModule, features, migration
 	const lines = [];
 	lines.push(WRAPPER_MARKER);
 	lines.push(`import original from "./${renamedEntry}";`);
+	lines.push(`export * from "./${renamedEntry}";`);
 	if (features.isr) {
 		lines.push("import { handleFrameworkIsr } from \"./__void_isr.mjs\";");
 		lines.push(`const __voidIsrDeploymentId = ${JSON.stringify(crypto.randomUUID())};`);
@@ -558,6 +559,7 @@ function generateWrapperSource(renamedEntry, handlersModule, features, migration
 		lines.push("");
 	}
 	lines.push("export default {");
+	lines.push("  ...original,");
 	if (needsFetchWrap) lines.push("  fetch: wrappedFetch,");
 	else lines.push("  fetch: original.fetch,");
 	if (features.crons.length > 0) lines.push(features.isr ? "  scheduled(controller, env, ctx) { env.__VOID_ISR_DEPLOYMENT_ID ??= __voidIsrDeploymentId; return handleScheduled(controller, env, ctx); }," : "  scheduled: handleScheduled,");

package/dist/{ws-aKVYB-fA.d.mts → ws-nnFnAyQb.d.mts}

@@ -1,6 +1,6 @@
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { a as CloudEnv } from "./handler-_PqY82xe.mjs";
+import { a as CloudEnv } from "./handler-D5K_yP6T.mjs";
 import { WebSocketRouteMap } from "void/routes";
 //#region src/runtime/ws.d.ts
 type MaybePromise<T> = T | Promise<T>;
@@ -35,6 +35,11 @@ type WebSocketBaseContext = {
   readonly id: string;
   readonly params: ParamsRecord;
   readonly user: AuthUser | null;
+  /**
+   * The HTTP request in `onBeforeConnect`, `onConnect` and `onRequest`. In `onMessage` and
+   * `onClose` the connection can resume after hibernation, so this is a placeholder without
+   * headers, cookies or query. Use `params`, `user` or the connection `state` there.
+   */
   readonly request: Request;
   readonly env: CloudEnv["Bindings"];
   readonly storage: DurableObjectStorage;

package/docs/guide/auth.md

@@ -92,7 +92,7 @@ Email/password is enabled by default. To add social providers:
 }
 ```
 
-Provider credentials come from `AUTH_<PROVIDER>_CLIENT_ID` and `AUTH_<PROVIDER>_CLIENT_SECRET`.
+Provider credentials come from `AUTH_<PROVIDER>_CLIENT_ID` and `AUTH_<PROVIDER>_CLIENT_SECRET`. `cognito` also needs a domain, region, and user pool ID: set `AUTH_COGNITO_DOMAIN`, `AUTH_COGNITO_REGION`, and `AUTH_COGNITO_USER_POOL_ID`, or set them in `auth.ts`.
 
 See the full provider list in the [config reference](../reference/config.md#auth).
 

package/docs/guide/database/d1.md

@@ -8,9 +8,9 @@ outline: deep
 
 ## Local Database
 
-`void dev` and local `void db` commands share the same database. If `cloudflare.d1_databases` in `void.config.ts` declares the D1 binding, Void uses its ID. A `preview_database_id` takes precedence during local development.
+The dev server and local `void db` commands share the same database. If `cloudflare.d1_databases` in `void.config.ts` declares the D1 binding, Void uses its ID. A `preview_database_id` takes precedence during local development.
 
-To store local data outside `.void`, set `voidPlugin({ persistTo: 'local-state' })` in your Vite config. Start `void dev` once to record that directory before running database commands. After changing the Vite config, start `void dev` again to refresh it. Frameworks that manage their own Cloudflare runtime use `.wrangler/state`.
+To store local data outside `.void`, set `voidPlugin({ persistTo: 'local-state' })` in your Vite config. Start the dev server once to record that directory before running database commands. After changing the Vite config, start it again to refresh it. Frameworks that manage their own Cloudflare runtime use `.wrangler/state`.
 
 ## Migrations & Prototyping
 

package/docs/guide/database/mysql.md

@@ -22,7 +22,7 @@ Add a direct connection for local development:
 DATABASE_URL=mysql://user:password@host:3306/app
 ```
 
-Void reads `.env` for `void dev` and `void db` commands. In production, the Worker connects through the inferred `HYPERDRIVE` binding.
+Void reads `.env` for the dev server and `void db` commands. In production, the Worker connects through the inferred `HYPERDRIVE` binding.
 
 ## Define a schema
 

package/docs/guide/deployment.md

@@ -35,6 +35,8 @@ void db generate
 
 Review and commit the SQL, then deploy again. Rollback does not reverse database migrations. See [Database](./database.md) for the local workflow.
 
+On your own Cloudflare account, deploy saves a D1 [Time Travel](https://developers.cloudflare.com/d1/reference/time-travel/) restore point before it applies pending migrations and prints the [`void db restore`](../reference/cli/database.md#void-db-restore) command for it. If no restore point can be saved, deploy stops before it migrates. If deploy fails after it applied the migrations, for example when the upload fails, it prints the command again. Usually you fix the error and deploy again; restore only if the live version cannot run against the new schema. To recover from a bad migration, roll back the code with `void project rollback` if the new version is live, restore the database, then fix or remove the migration before you deploy again. After a one-off `void deploy --platform cloudflare`, add `--platform cloudflare` to each of these commands. Restoring discards every write made after the restore point. Restore points expire after 7 days on Workers Free and 30 days on Workers Paid; after that, undo a migration with a new one.
+
 ### Environment variables
 
 Declare values in `env.ts` and set production server secrets with `void secret put`. Deploy never uploads your local `.env`. Supply public `VITE_*` values through the build environment. See [Environment Variables](./env-vars.md).