void 1.2.1 → 1.4.0

package/dist/{email-cloudflare-D03g2TkS.mjs → email-cloudflare-PMbAev9Q.mjs}

@@ -1,17 +1,18 @@
 import { n as __toESM } from "./rolldown-runtime-3h0WiCiA.mjs";
 import { a as join, n as dirname, s as relative } from "./dist-ipQi0Q8y.mjs";
 import { t as require_picocolors } from "./picocolors-BsDfhxIw.mjs";
-import { p as readConfig } from "./config-DHgSEWT7.mjs";
+import { p as readConfig } from "./config-OFOAimzt.mjs";
 import { i as voidWarn, r as voidLog } from "./log-BMwmN5Ae.mjs";
 import { i as collectFiles } from "./isr-config-fZaJJ8t7.mjs";
 import { i as readProjectIdField } from "./project-rqDnVsJN.mjs";
-import { p as findBindingNameOwner, u as ensureWranglerCompat } from "./wrangler-F96NnLyb.mjs";
+import { p as findBindingNameOwner, u as ensureWranglerCompat } from "./wrangler-I-scB_1t.mjs";
 import { n as scopedAccessCredentials } from "./cf-access-BM9G0lhO.mjs";
 import { n as ensurePlatformProxyAccess } from "./cf-access-CWP4avfP.mjs";
 import { a as getApiUrl, c as getToken, o as getProxyUrl } from "./auth-B6iOCjKI.mjs";
-import { l as stripInternalEnvKeys } from "./env-BJjULvL0.mjs";
-import { n as readPrerenderPathsResponse, r as renderPrerenderPaths, t as outputFileForPath } from "./prerender-render-Cijv7UFo.mjs";
-import { a as buildEnv } from "./version-metadata-tS39iW09.mjs";
+import { u as stripInternalEnvKeys } from "./env-BaMz0j7H.mjs";
+import { i as renderPrerenderPaths, n as outputFileForPath, r as readPrerenderPathsResponse } from "./prerender-render-CaShbHJ3.mjs";
+import { t as renderDefaultErrorPage } from "./error-pages-CLIJ7aYq.mjs";
+import { a as buildEnv } from "./version-metadata-D2vfMQzv.mjs";
 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { isRecord } from "@void/deploy-core";
 import { execFile } from "node:child_process";
@@ -162,6 +163,12 @@ async function collectPrerenderPaths(options) {
 		await runner.close();
 	}
 }
+function ensureStatic404(clientDir) {
+	const file = join(clientDir, "404.html");
+	if (existsSync(file)) return;
+	mkdirSync(clientDir, { recursive: true });
+	writeFileSync(file, renderDefaultErrorPage(404));
+}
 /**
 * Prerender pages by spinning up Miniflare with the built worker.
 * Collects paths through the built worker's internal endpoint and then
@@ -176,12 +183,14 @@ async function prerenderPages(options) {
 			rendered: [],
 			failed: []
 		};
+		const result = await renderPrerenderPaths(paths, options.clientDir, (path) => runner.fetchPath(path), (path) => runner.fetchPageData(path), (path, outputFile, error) => {
+			if (error !== void 0) voidWarn(`prerender ${path} failed: ${error}`);
+			else voidLog(`prerender ${import_picocolors.default.blue(outputFile)}`);
+		});
+		ensureStatic404(options.clientDir);
 		return {
 			paths,
-			...await renderPrerenderPaths(paths, options.clientDir, (path) => runner.fetchPath(path), (path) => runner.fetchPageData(path), (path, outputFile, error) => {
-				if (error !== void 0) voidWarn(`prerender ${path} failed: ${error}`);
-				else voidLog(`prerender ${import_picocolors.default.blue(outputFile)}`);
-			})
+			...result
 		};
 	} finally {
 		await runner.close();
@@ -281,11 +290,116 @@ async function prerenderPagesNode(options) {
 		ssrDir: options.ssrDir,
 		clientDir: options.clientDir
 	});
+	if (result.paths.length === 0) return result;
+	ensureStatic404(options.clientDir);
 	for (const path of result.rendered) voidLog(`prerender ${import_picocolors.default.blue(outputFileForPath(path))}`);
 	for (const { path, error } of result.failed) voidWarn(`prerender ${path} failed: ${error}`);
 	return result;
 }
 //#endregion
+//#region src/asset-worker-bypass.ts
+/**
+* Build-time decision for letting Cloudflare serve fingerprinted build files
+* without starting the Worker. Native Cloudflare builds of apps with no global
+* middleware and no edge rules gain nothing from running the Worker for those
+* files: the Worker would only copy the asset response. Skipping it makes
+* those requests free static requests and keeps auth and its session read off
+* them. Each file gets its own negative `run_worker_first` rule, because a
+* request matching a negative rule never reaches the Worker, even when the
+* file is missing. Misses and other paths in the folder keep the Worker's
+* not-found, SPA and page handling.
+* `routing.alwaysUseHttps` alone does not count as an edge rule: hashed files
+* are only linked from pages the Worker has already moved to HTTPS.
+*
+* The asset layer does not know which files are fingerprinted, so a generated
+* `_headers` file gives every bypassed chunk the immutable policy the Worker
+* would have set.
+*/
+const GENERATED_ASSET_HEADERS_MARKER = "# Generated by Void: immutable caching for fingerprinted build files. Do not edit.";
+/** Cloudflare accepts at most 100 `run_worker_first` rules, `/**` included. */
+const MAX_BYPASS_FILES = 99;
+/** Cloudflare limits each `run_worker_first` rule to 100 characters. */
+const MAX_RUN_WORKER_FIRST_RULE_LENGTH = 100;
+const INTERNAL_PATTERNS = ["/__void/*"];
+const AUTH_PATTERNS = ["/api/auth/*"];
+/** Trim surrounding slashes; null when nothing is left. */
+function normalizeAssetsDir(dir) {
+	let start = 0;
+	let end = dir.length;
+	while (start < end && dir[start] === "/") start++;
+	while (end > start && dir[end - 1] === "/") end--;
+	const trimmed = dir.slice(start, end);
+	return trimmed === "" || trimmed === "." ? null : trimmed;
+}
+/**
+* Whether a route pattern can match a path below `/<dir>/`. Parameters,
+* wildcards and patterns with more segments than the directory count as a
+* match, so the answer errs towards keeping the Worker in front.
+*/
+function patternCanReachUnder(pattern, dir) {
+	const patternSegments = (pattern.startsWith("/") ? pattern.slice(1) : pattern).split("/");
+	const dirSegments = (dir.startsWith("/") ? dir.slice(1) : dir).split("/");
+	for (let i = 0; i < dirSegments.length; i++) {
+		const segment = patternSegments[i];
+		if (segment === void 0) return false;
+		if (segment.includes("*") || segment.includes("{")) return true;
+		if (segment.startsWith(":")) continue;
+		if (segment.toLowerCase() !== dirSegments[i].toLowerCase()) return false;
+	}
+	return patternSegments.length > dirSegments.length;
+}
+/**
+* Characters that are plain text in both a `_headers` path and a
+* `run_worker_first` rule. `*`, `:` and `!` have meaning there, and anything
+* that needs URL encoding would not match the request path as written.
+*/
+function isPlainPath(path) {
+	for (const char of path) if (!(char >= "a" && char <= "z" || char >= "A" && char <= "Z" || char >= "0" && char <= "9" || char === "-" || char === "_" || char === "." || char === "~" || char === "/")) return false;
+	return path.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+/**
+* Whether `run_worker_first` is the rule an earlier bypass wrote. A watch
+* rebuild of only the client still finds it, because the Worker build that
+* would write `['/**']` again did not run.
+*/
+function isAssetBypassRule(runWorkerFirst, assetsDir) {
+	const dir = normalizeAssetsDir(assetsDir);
+	return dir !== null && Array.isArray(runWorkerFirst) && runWorkerFirst.length > 1 && runWorkerFirst[0] === "/**" && runWorkerFirst.slice(1).every((rule) => typeof rule === "string" && rule.startsWith("!/" + dir + "/"));
+}
+/** The bypass this build can use, or null when any rule keeps the Worker in front. */
+function resolveAssetWorkerBypass(facts) {
+	const { runWorkerFirst } = facts;
+	if (!(Array.isArray(runWorkerFirst) && runWorkerFirst.length === 1 && runWorkerFirst[0] === "/**" || isAssetBypassRule(runWorkerFirst, facts.assetsDir)) || facts.notFoundHandling !== "none" || facts.base !== "/" || facts.hasMiddleware || facts.headerRuleCount > 0 || facts.redirectRuleCount > 0 || facts.fallbackRuleCount > 0 || facts.publicEdgeFiles) return null;
+	const assetsDir = normalizeAssetsDir(facts.assetsDir);
+	if (!assetsDir || !isPlainPath(assetsDir)) return null;
+	if ([
+		...facts.patterns,
+		...INTERNAL_PATTERNS,
+		...facts.authEnabled ? AUTH_PATTERNS : []
+	].some((pattern) => patternCanReachUnder(pattern, assetsDir))) return null;
+	const prefix = assetsDir + "/";
+	const files = [...new Set(facts.immutableFiles)].filter((file) => file.startsWith(prefix)).sort();
+	const rules = files.map((file) => "!/" + file);
+	if (files.length === 0 || files.length > MAX_BYPASS_FILES || files.some((file) => !isPlainPath(file)) || rules.some((rule) => rule.length > MAX_RUN_WORKER_FIRST_RULE_LENGTH)) return null;
+	return {
+		runWorkerFirst: ["/**", ...rules],
+		headers: renderGeneratedAssetHeaders(files)
+	};
+}
+/** One immutable rule per file after the marker line. */
+function renderGeneratedAssetHeaders(files) {
+	const lines = [GENERATED_ASSET_HEADERS_MARKER];
+	for (const file of files) lines.push("/" + file, "  Cache-Control: public, max-age=31536000, immutable");
+	return lines.join("\n") + "\n";
+}
+/** Whether a `_headers` file is the one Void generated. */
+function isGeneratedAssetHeaders(text) {
+	const newline = text.indexOf("\n");
+	let firstLine = newline === -1 ? text : text.slice(0, newline);
+	if (firstLine.endsWith("\r")) firstLine = firstLine.slice(0, -1);
+	return firstLine === GENERATED_ASSET_HEADERS_MARKER;
+}
+//#endregion
 //#region src/cli/email-cloudflare.ts
 /** The `send_email` binding name Void provisions and the runtime reads. */
 const SEND_EMAIL_BINDING = "SEND_EMAIL";
@@ -1090,4 +1204,4 @@ async function createNodeEmailDns() {
 	};
 }
 //#endregion
-export { emailConfigInputs as a, renderAddressMap as c, collectPrerenderPathsNode as d, prerenderPages as f, createNodeEmailDns as i, renderEmailChecklist as l, SEND_EMAIL_BINDING as n, preflightEmail as o, prerenderPagesNode as p, applyEmailSetup as r, probeMx as s, EMAIL_FROM_VAR as t, collectPrerenderPaths as u };
+export { emailConfigInputs as a, renderAddressMap as c, isGeneratedAssetHeaders as d, resolveAssetWorkerBypass as f, prerenderPagesNode as g, prerenderPages as h, createNodeEmailDns as i, renderEmailChecklist as l, collectPrerenderPathsNode as m, SEND_EMAIL_BINDING as n, preflightEmail as o, collectPrerenderPaths as p, applyEmailSetup as r, probeMx as s, EMAIL_FROM_VAR as t, isAssetBypassRule as u };

package/dist/{env-DgOQ9_8S.mjs → env-78hbN-oI.mjs}

@@ -3,9 +3,9 @@ import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-r
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BicfKBhV.mjs";
 import { H as outro, L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess, p as note } from "./output-BpgYODYx.mjs";
-import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-Dwq3PJzK.mjs";
+import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-B3VobvXm.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
@@ -25,7 +25,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-DsSaw2BT.mjs");
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BtulCNOg.mjs");
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);

package/dist/{env-BJjULvL0.mjs → env-BaMz0j7H.mjs}

@@ -23,6 +23,11 @@ function loadLocalEnv(root, options = {}) {
 */
 const CLOUDFLARE_DEPLOY_BUILD_ENV = "VOID_CLOUDFLARE_DEPLOY_BUILD";
 /**
+* JSON map from each `queues/` name to the Cloudflare queue name that
+* `void deploy --platform cloudflare` chose. Set only for its Vite build.
+*/
+const CLOUDFLARE_QUEUE_NAMES_BUILD_ENV = "VOID_CLOUDFLARE_QUEUE_NAMES";
+/**
 * Find legacy Vite dotenv variants. Void intentionally supports only `.env`;
 * production configuration is project-scoped remote state instead of a file.
 */
@@ -112,4 +117,4 @@ function stripInternalEnvKeys(input) {
 	};
 }
 //#endregion
-export { isClientEnvKey as a, resolveRemoteMode as c, findReservedEnvKeys as i, stripInternalEnvKeys as l, LOCAL_ENV_FILE as n, loadLocalEnv as o, findLegacyEnvFiles as r, reservedEnvKeysMessage as s, CLOUDFLARE_DEPLOY_BUILD_ENV as t };
+export { findReservedEnvKeys as a, reservedEnvKeysMessage as c, findLegacyEnvFiles as i, resolveRemoteMode as l, CLOUDFLARE_QUEUE_NAMES_BUILD_ENV as n, isClientEnvKey as o, LOCAL_ENV_FILE as r, loadLocalEnv as s, CLOUDFLARE_DEPLOY_BUILD_ENV as t, stripInternalEnvKeys as u };

package/dist/{env-validation-Dwq3PJzK.mjs → env-validation-B3VobvXm.mjs}

@@ -2,7 +2,7 @@ import { a as join, c as resolve, n as dirname } from "./dist-ipQi0Q8y.mjs";
 import { i as voidWarn } from "./log-BMwmN5Ae.mjs";
 import { n as readGeneratedWranglerConfigFile } from "./generated-wrangler-config-DeWj5F9Y.mjs";
 import { n as scanWranglerDotenvKeys } from "./dotenv-CNazY3-w.mjs";
-import { a as isClientEnvKey, i as findReservedEnvKeys, n as LOCAL_ENV_FILE, o as loadLocalEnv, r as findLegacyEnvFiles, s as reservedEnvKeysMessage } from "./env-BJjULvL0.mjs";
+import { a as findReservedEnvKeys, c as reservedEnvKeysMessage, i as findLegacyEnvFiles, o as isClientEnvKey, r as LOCAL_ENV_FILE, s as loadLocalEnv } from "./env-BaMz0j7H.mjs";
 import { t as findEnvFile } from "./env-types-BicfKBhV.mjs";
 import { t as loadUserEnvFile } from "./load-user-env-DD5qveNU.mjs";
 import { l as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-8jEYIeim.mjs";
@@ -476,6 +476,7 @@ function secretListEnv(accountId, platform) {
 	scrub("CF_ACCESS_CLIENT_SECRET");
 	scrub("VOID_ACCESS_CREDENTIALS");
 	scrub("VOID_ACCESS_ORIGIN");
+	scrub("CF_ACCESS_READINESS_ORIGIN");
 	scrub("WRANGLER_LOG_SANITIZE");
 	env.WRANGLER_LOG_SANITIZE = "true";
 	if (accountId) {

package/dist/{env-validation-BmsdCZEk.mjs → env-validation-BUfFZ6bt.mjs}

@@ -1 +1 @@
-export { r as SelfHostSchemaError, a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars } from "./env-validation-Dwq3PJzK.mjs";
+export { r as SelfHostSchemaError, a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars } from "./env-validation-B3VobvXm.mjs";

package/dist/error-pages-CLIJ7aYq.mjs

@@ -0,0 +1,37 @@
+//#region src/runtime/error-pages/404.html?raw
+var _404_default = "<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>404: Not Found</title>\n    <!-- inject:css -->\n    <!--\n      Do not add code here. At runtime, the file referenced by the tag below is\n      inlined, replacing this entire block (including this comment).\n      The tag is kept so you can preview this HTML file by opening it directly in a browser.\n    -->\n    <link rel=\"stylesheet\" href=\"./style.css\" />\n    <!-- endinject -->\n    <!-- inject:js -->\n    <!--\n      Do not add code here. At runtime, the file referenced by the tag below is\n      inlined, replacing this entire block (including this comment).\n      The tag is kept so you can preview this HTML file by opening it directly in a browser.\n    -->\n    <script src=\"./script.js\"><\/script>\n    <!-- endinject -->\n  </head>\n  <body>\n    <div class=\"error-page\">\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <main class=\"error-content\">\n        <span class=\"grid-tick top left\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick top right\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick bottom left\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick bottom right\" aria-hidden=\"true\"></span>\n        <h1>\n          <span class=\"error-code\">404</span><span class=\"error-title\">Lost in the void</span>\n        </h1>\n        <p class=\"error-description\">This page doesn't exist</p>\n        <button class=\"error-action\" type=\"button\" id=\"void-error-back\" hidden>\n          <span class=\"error-arrow\" aria-hidden=\"true\">←</span>Go back\n        </button>\n      </main>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <canvas class=\"error-texture\" aria-hidden=\"true\"></canvas>\n    </div>\n  </body>\n</html>\n";
+//#endregion
+//#region src/runtime/error-pages/500.html?raw
+var _500_default = "<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>500: Internal Server Error</title>\n    <!-- inject:css -->\n    <!--\n      Do not add code here. At runtime, the file referenced by the tag below is\n      inlined, replacing this entire block (including this comment).\n      The tag is kept so you can preview this HTML file by opening it directly in a browser.\n    -->\n    <link rel=\"stylesheet\" href=\"./style.css\" />\n    <!-- endinject -->\n    <!-- inject:js -->\n    <!--\n      Do not add code here. At runtime, the file referenced by the tag below is\n      inlined, replacing this entire block (including this comment).\n      The tag is kept so you can preview this HTML file by opening it directly in a browser.\n    -->\n    <script src=\"./script.js\"><\/script>\n    <!-- endinject -->\n  </head>\n  <body>\n    <div class=\"error-page\">\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <main class=\"error-content\">\n        <span class=\"grid-tick top left\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick top right\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick bottom left\" aria-hidden=\"true\"></span>\n        <span class=\"grid-tick bottom right\" aria-hidden=\"true\"></span>\n        <h1>\n          <span class=\"error-code\">500</span><span class=\"error-title\">Something went wrong</span>\n        </h1>\n        <p class=\"error-description\">Please try again in a moment</p>\n        <a class=\"error-action\" href=\"\"\n          ><span class=\"error-arrow\" aria-hidden=\"true\">↻</span>Reload page</a\n        >\n      </main>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <div class=\"grid-cell\" aria-hidden=\"true\"></div>\n      <canvas class=\"error-texture\" aria-hidden=\"true\"></canvas>\n    </div>\n  </body>\n</html>\n";
+//#endregion
+//#region src/runtime/error-pages/inline.ts
+const closing = "<!-- endinject -->";
+function replaceAssetBlock(html, name, content) {
+	const opening = `<!-- inject:${name} -->`;
+	const start = html.indexOf(opening);
+	const end = html.indexOf(closing, start + opening.length);
+	if (start === -1 || end === -1 || html.lastIndexOf(opening) !== start) throw new Error(`Expected one complete ${name} block in the default error page.`);
+	return html.slice(0, start) + content + html.slice(end + 18);
+}
+function inlineErrorPageAssets(html, stylesheet, script) {
+	if (html.split(closing).length !== 3) throw new Error("Expected two endinject markers in the default error page.");
+	for (const [name, content] of [["css", `<style>\n${stylesheet}</style>`], ["js", `<script>\n${script}<\/script>`]]) html = replaceAssetBlock(html, name, content);
+	return html;
+}
+//#endregion
+//#region src/runtime/error-pages/script.js?raw
+var script_default = "(() => {\n  const designs = ['signal', 'grid', 'fold'];\n  document.documentElement.dataset.design = designs[Math.floor(Math.random() * designs.length)];\n\n  function setup() {\n    const back = document.getElementById('void-error-back');\n    const canGoBack = window.navigation ? window.navigation.canGoBack : window.history.length > 1;\n    if (back && canGoBack) {\n      back.hidden = false;\n      back.addEventListener('click', () => window.history.back());\n    }\n\n    if (document.documentElement.dataset.design !== 'signal') {\n      return;\n    }\n    const canvas = document.querySelector('.error-texture');\n    const ctx = canvas.getContext('2d');\n    if (!ctx) {\n      return;\n    }\n\n    function draw() {\n      const { width, height } = canvas.getBoundingClientRect();\n      const ratio = Math.min(window.devicePixelRatio || 1, 2);\n      canvas.width = Math.round(width * ratio);\n      canvas.height = Math.round(height * ratio);\n      ctx.setTransform(ratio, 0, 0, ratio, 0, 0);\n      const colors = getComputedStyle(canvas);\n      const chars = ['·', '/', '0', '1', '+', '[', ']', '—'];\n      ctx.font = '8px ui-monospace, monospace';\n      ctx.textAlign = 'center';\n      ctx.textBaseline = 'middle';\n      ctx.fillStyle = colors.color;\n\n      for (let y = 8, row = 0; y < height; y += 12, row++) {\n        for (let x = 8, col = 0; x < width; x += 9, col++) {\n          const distance = Math.hypot(\n            (x - width / 2) / (width * 0.47),\n            (y - height * 0.48) / (height * 0.55),\n          );\n          const seed = (Math.imul(row + 11, 61) ^ Math.imul(col + 7, 137)) >>> 0;\n          const core = Math.max(0, Math.min(1, (distance - 0.28) / 0.55));\n          const opacity = core * (0.15 + (seed % 7) * 0.025) * 0.75;\n          if (seed % 17 === 0 || opacity < 0.015) {\n            continue;\n          }\n          ctx.globalAlpha = opacity;\n          ctx.fillText(chars[(seed >>> 3) % chars.length], x, y);\n        }\n      }\n\n      ctx.globalAlpha = 1;\n      ctx.strokeStyle = colors.borderTopColor;\n      for (const [x, y] of [\n        [28, 28],\n        [width - 28, 28],\n        [28, height - 28],\n        [width - 28, height - 28],\n      ]) {\n        ctx.beginPath();\n        ctx.moveTo(x - 4, y);\n        ctx.lineTo(x + 4, y);\n        ctx.moveTo(x, y - 4);\n        ctx.lineTo(x, y + 4);\n        ctx.stroke();\n      }\n    }\n\n    new ResizeObserver(draw).observe(canvas);\n    window.matchMedia('(prefers-color-scheme: dark)').addEventListener('change', draw);\n    draw();\n  }\n\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', setup, { once: true });\n  } else {\n    setup();\n  }\n})();\n";
+//#endregion
+//#region src/runtime/error-pages/style.css?raw
+var style_default = ":root {\n  color-scheme: light dark;\n  --background: light-dark(#fff, #16171d);\n  --foreground: light-dark(#16171d, #f6f5f8);\n  --muted: light-dark(#6e6874, #a8a2ae);\n  --line: light-dark(#e5e4e7, #36323c);\n  --ink: light-dark(#4e4856, #c3bdcd);\n  --corner: light-dark(#e5e4e7, #3b3440);\n  background: var(--background);\n  color: var(--foreground);\n  font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;\n  -webkit-font-smoothing: antialiased;\n}\n\n* {\n  box-sizing: border-box;\n}\n\nbody {\n  margin: 0;\n}\n\n.error-page {\n  position: relative;\n  isolation: isolate;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  min-block-size: 100svh;\n  overflow: hidden;\n}\n\n.error-content {\n  min-inline-size: 0;\n  padding: 32px 24px;\n  text-align: center;\n}\n\n.error-content h1 {\n  display: flex;\n  flex-direction: column;\n  gap: 18px;\n  margin: 0;\n  font-weight: 500;\n}\n\n.error-code {\n  font-size: 64px;\n  line-height: 1;\n  letter-spacing: -0.045em;\n}\n\n.error-title {\n  font-size: 15px;\n  line-height: 1.4;\n  letter-spacing: -0.02em;\n  text-wrap: balance;\n}\n\n.error-description {\n  margin: 6px 0 0;\n  color: var(--muted);\n  font-size: 12px;\n  line-height: 1.5;\n  letter-spacing: -0.01em;\n}\n\n.error-action {\n  position: relative;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  gap: 7px;\n  min-block-size: 32px;\n  margin-block-start: 20px;\n  padding: 6px 12px;\n  border: 1px solid var(--line);\n  border-radius: 6px;\n  background: var(--background);\n  color: var(--foreground);\n  font:\n    500 12px/18px system-ui,\n    -apple-system,\n    BlinkMacSystemFont,\n    'Segoe UI',\n    sans-serif;\n  letter-spacing: -0.01em;\n  text-decoration: none;\n  white-space: nowrap;\n  cursor: pointer;\n}\n\n.error-action::after {\n  position: absolute;\n  inset: -6px -3px;\n  content: '';\n}\n\n.error-action:hover {\n  border-color: var(--foreground);\n  background: var(--foreground);\n  color: var(--background);\n}\n\n.error-action:focus-visible {\n  outline: 2px solid var(--foreground);\n  outline-offset: 4px;\n}\n\n.error-action[hidden] {\n  visibility: hidden;\n}\n\n.error-arrow {\n  font-size: 15px;\n  line-height: 14px;\n}\n\n.error-texture {\n  position: absolute;\n  z-index: -1;\n  inset: 0;\n  display: block;\n  inline-size: 100%;\n  block-size: 100%;\n  border-color: var(--line);\n  color: var(--ink);\n}\n\n.grid-cell,\n.grid-tick {\n  display: none;\n}\n\n.grid-tick {\n  position: absolute;\n  z-index: 1;\n  inline-size: 0;\n  block-size: 0;\n  border: 5px solid transparent;\n  pointer-events: none;\n}\n\n:root[data-design='grid'] .error-page {\n  display: grid;\n  grid-template-columns: minmax(24px, 1fr) minmax(0, 456px) minmax(24px, 1fr);\n  grid-template-rows: minmax(24px, 1fr) minmax(272px, auto) minmax(24px, 1fr);\n  align-items: stretch;\n}\n\n:root[data-design='grid'] .grid-cell,\n:root[data-design='grid'] .error-content {\n  min-inline-size: 0;\n  border-inline-end: 1px solid var(--line);\n  border-block-end: 1px solid var(--line);\n}\n\n:root[data-design='grid'] .grid-cell {\n  display: block;\n}\n\n:root[data-design='grid'] .grid-cell:nth-child(3n) {\n  border-inline-end: 0;\n}\n\n:root[data-design='grid'] .grid-cell:nth-child(n + 7) {\n  border-block-end: 0;\n}\n\n:root[data-design='grid'] .error-content {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  align-items: center;\n  justify-content: center;\n  padding: 32px;\n}\n\n:root[data-design='grid'] .grid-tick {\n  display: block;\n}\n\n.grid-tick.left {\n  left: -1px;\n  border-left-color: var(--corner);\n}\n\n.grid-tick.right {\n  right: 0;\n  border-right-color: var(--corner);\n}\n\n.grid-tick.top {\n  top: -5px;\n}\n\n.grid-tick.bottom {\n  bottom: -5px;\n}\n\n:root[data-design='grid'] .error-texture,\n:root[data-design='fold'] .error-texture {\n  display: none;\n}\n\n:root[data-design='fold'] .error-page {\n  padding: 40px 42px;\n}\n\n:root[data-design='fold'] .error-content {\n  flex: 0 1 560px;\n  margin-inline-end: auto;\n  padding: 0;\n  text-align: start;\n}\n\n:root[data-design='fold'] h1 {\n  flex-direction: row;\n  align-items: baseline;\n  gap: 14px;\n}\n\n:root[data-design='fold'] .error-code,\n:root[data-design='fold'] .error-title {\n  font-size: 26px;\n  line-height: 1.2;\n  letter-spacing: -0.025em;\n}\n\n:root[data-design='fold'] .error-code {\n  flex: none;\n  color: var(--muted);\n  font-family: ui-monospace, 'SFMono-Regular', Consolas, monospace;\n  font-weight: 400;\n  letter-spacing: -0.045em;\n}\n\n:root[data-design='fold'] .error-description {\n  margin-block-start: 12px;\n  font-size: 14px;\n  line-height: 1.6;\n  text-wrap: pretty;\n}\n\n:root[data-design='fold'] .error-action {\n  margin-block-start: 24px;\n}\n\n@supports (corner-shape: squircle) {\n  .error-action {\n    border-radius: 12px;\n    corner-shape: squircle;\n  }\n}\n\n@media (pointer: coarse) {\n  .error-action {\n    min-block-size: 40px;\n  }\n}\n\n@media (max-width: 620px) {\n  :root[data-design='fold'] .error-page {\n    padding: 36px 30px;\n  }\n\n  :root[data-design='fold'] .error-code,\n  :root[data-design='fold'] .error-title {\n    font-size: 24px;\n  }\n}\n\n@media (max-width: 440px) {\n  .error-code {\n    font-size: 56px;\n  }\n\n  :root[data-design='grid'] .error-page {\n    grid-template-columns: 24px minmax(0, 1fr) 24px;\n  }\n\n  :root[data-design='grid'] .error-content {\n    padding: 24px;\n  }\n\n  :root[data-design='fold'] .error-code {\n    display: none;\n  }\n\n  :root[data-design='fold'] .error-action {\n    margin-block-start: 20px;\n  }\n}\n";
+//#endregion
+//#region src/runtime/error-pages/index.ts
+const pages = {
+	404: inlineErrorPageAssets(_404_default, style_default, script_default),
+	500: inlineErrorPageAssets(_500_default, style_default, script_default)
+};
+function renderDefaultErrorPage(status) {
+	return pages[status];
+}
+//#endregion
+export { renderDefaultErrorPage as t };

package/dist/gen-BhWBT4iu.mjs

@@ -0,0 +1 @@
+export { r as runGenCommand } from "./gen-CFmsUsW1.mjs";

package/dist/{gen-BfmcIi2g.mjs → gen-CFmsUsW1.mjs}

@@ -1,8 +1,8 @@
 import { a as join, n as dirname, s as relative } from "./dist-ipQi0Q8y.mjs";
 import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { l as getDatabaseDialect, p as readConfig } from "./config-DHgSEWT7.mjs";
+import { l as getDatabaseDialect, p as readConfig } from "./config-OFOAimzt.mjs";
 import { n as readJournal, t as collectMigrations } from "./collect-Dew86qce.mjs";
-import { r as writeDrizzleConfig, t as PLACEHOLDER_DB_URL } from "./config-BIaXIkkv.mjs";
+import { r as writeDrizzleConfig, t as PLACEHOLDER_DB_URL } from "./config-tqMM6DwY.mjs";
 import { t as assertJournalCoherence } from "./validate-CnZPMq4q.mjs";
 import { K as select, L as log, O as cancel, tt as isCancel } from "./dist-Cor9XGoz.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
@@ -329,7 +329,7 @@ async function runModel(root, name, columns) {
 		const existing = readFileSync(barrelPath, "utf-8");
 		if (!existing.includes(exportLine)) writeFileSync(barrelPath, existing.trimEnd() + "\n" + exportLine + "\n");
 	} else writeFileSync(barrelPath, exportLine + "\n");
-	const { prepareProject } = await import("./prepare-C4I0f--h.mjs");
+	const { prepareProject } = await import("./prepare-DU-tOpS5.mjs");
 	await prepareProject(root);
 	log.step(`Created ${relative(root, modelPath)}`);
 	log.step(`Updated ${relative(root, barrelPath)}`);

package/dist/{github-cmd-CY9LUqLh.mjs → github-cmd-De-_IWbM.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken, n as createCodeChallenge, r as createCodeVerifier, t as awaitBrowserCallback, u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, K as select, L as log, O as cancel, X as text, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-BEkdj1kx.mjs";
+import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-B3LnB_bE.mjs";
 import { f as import_picocolors, l as formatUrl, m as printSuccess } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";

package/dist/{handler-BbkSPzGF.d.mts → handler-BHktmuTL.d.mts}

@@ -1,8 +1,8 @@
 import { l as VoidPlatformSandbox } from "./sandbox-q3waMc2T.mjs";
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 import { n as HeadDescriptor } from "./head-C8K_iGe6.mjs";
-import { r as AuthUser, t as AuthSession } from "./auth-DkcFflXV.mjs";
-import { t as DevCssAsset } from "./types-7AIz0OZu.mjs";
+import { r as AuthUser, t as AuthSession } from "./auth-g2TQbDLD.mjs";
+import { t as DevCssAsset } from "./types-w72dljaA.mjs";
 import { Context, Env, ExecutionContext as ExecutionContext$1, MiddlewareHandler } from "hono";
 import { RewriteDestination } from "void/routes";
 //#region src/runtime/routing-assets.d.ts
@@ -64,6 +64,8 @@ type WorkerFetchOptions = {
   withRuntimeEnv: (env: RuntimeEnvironment, fn: () => Promise<Response>) => Promise<Response>;
   filterBindings: (env: RuntimeEnvironment) => RuntimeEnvironment;
   validateEnv?: (env: RuntimeEnvironment) => Promise<void>;
+  /** Native Cloudflare production builds redirect public HTTP requests to HTTPS. */
+  alwaysUseHttps?: boolean;
   /** Authored/generated version metadata binding used to prove the served native version. */
   versionMetadataBinding?: string;
   remoteEnv?: (env: RuntimeEnvironment) => RuntimeEnvironment;

package/dist/{headers-D522zd0A.mjs → headers--vaK_chu.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { a as convertRewritesConfig, d as isProtocolRelative, f as parseHostPrefixedSource, i as convertRedirectsConfig, n as convertFallbacksConfig, o as countSplats, r as convertHeadersConfig, t as VALID_REDIRECT_STATUSES } from "./config-DHgSEWT7.mjs";
+import { a as convertRewritesConfig, d as isProtocolRelative, f as parseHostPrefixedSource, i as convertRedirectsConfig, n as convertFallbacksConfig, o as countSplats, r as convertHeadersConfig, t as VALID_REDIRECT_STATUSES } from "./config-OFOAimzt.mjs";
 import { i as voidWarn } from "./log-BMwmN5Ae.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/headers.ts

package/dist/{help-CxSlPpzJ.mjs → help-CKbrhZha.mjs}

@@ -1,7 +1,7 @@
 import { H as outro } from "./dist-Cor9XGoz.mjs";
 import { n as getOwnVersion } from "./agents-CuNtT0D_.mjs";
 import { d as helpLine, f as import_picocolors, g as sectionTitle, l as formatUrl, p as note, t as categoryTitle } from "./output-BpgYODYx.mjs";
-import { n as operatorGroups, t as operatorCommands } from "./operator-args-UnE8Y2eK.mjs";
+import { n as operatorGroups, t as operatorCommands } from "./operator-args-BsJIYXaT.mjs";
 //#region src/cli/ascii.ts
 const asciiArts = [
 	`
@@ -1110,6 +1110,10 @@ const HELP_TREE = {
 				command: "disallow <address>",
 				description: "Remove a recipient from the allowlist"
 			},
+			{
+				command: "alias [name]",
+				description: "Show the shared mail address, or set a shorter permanent name for it"
+			},
 			{
 				command: "domain <add|status|list|sync|rotate-secret|remove>",
 				description: "Send and receive at your own domain on a Cloudflare zone"
@@ -1139,6 +1143,17 @@ const HELP_TREE = {
 			destinations: withProjectOption("List verified recipient addresses.", "void email destinations [options]"),
 			allow: withProjectOption("Add a recipient and trigger a Cloudflare verification email.", "void email allow <address> [options]"),
 			disallow: withProjectOption("Remove a recipient from the verified allowlist.", "void email disallow <address> [options]"),
+			alias: {
+				summary: "Show the project address on the shared mail domain, or give it a shorter name. The alias is permanent; the slug address keeps working.",
+				usage: ["void email alias [options]", "void email alias <name> [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}, {
+					command: "--yes",
+					description: "Set the alias without asking (it cannot be changed)"
+				}]
+			},
 			domain: {
 				summary: "Send and receive at your own domain on a Cloudflare zone.",
 				usage: ["void email domain <verb> [<domain>] [options]"],

package/dist/help-qOZr3wng.mjs

@@ -0,0 +1 @@
+export { r as printHelpPage } from "./help-CKbrhZha.mjs";

package/dist/index.d.mts

@@ -1,12 +1,10 @@
 import { n as HeadDescriptor } from "./head-C8K_iGe6.mjs";
-import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, x as DeferredState, y as defineScheduled } from "./handler-BbkSPzGF.mjs";
+import { r as AuthUser } from "./auth-g2TQbDLD.mjs";
+import { s as RouteEnvironment } from "./types-w72dljaA.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, x as DeferredState, y as defineScheduled } from "./handler-BHktmuTL.mjs";
 import { t as QueueMap } from "./queues-BWKt1Xo4.mjs";
 import { PluginConfig } from "@cloudflare/vite-plugin";
 import { Plugin } from "vite";
-//#region src/router/parse-filename.d.ts
-type RouteEnvironment = "dev" | "prod";
-//#endregion
 //#region src/plugin-binding-utils.d.ts
 /**
  * Decide whether to inject the `void dev` email-inbox loopback var.