void 1.3.0 → 1.4.0

package/dist/{project-tsconfig-Itv1f4WC.mjs → project-tsconfig-CVvk6Z_e.mjs}

@@ -34,12 +34,14 @@ function createProjectTsconfig(root, hasRouteTypes, hasDb, hasSchema, options =
 	const includeQueues = existsSync(pathsConfig.queuesDir);
 	const includeMd = existsSync(join(outDir, "md.d.ts"));
 	const includeEnv = existsSync(join(outDir, "env.d.ts"));
+	const includeAuth = existsSync(join(outDir, "auth.d.ts"));
 	const tsconfig = { files: [
 		...includeRoutes ? ["routes.d.ts"] : [],
 		...hasDb ? ["db.d.ts"] : [],
 		...includeQueues ? ["queues.d.ts"] : [],
 		...includeMd ? ["md.d.ts"] : [],
-		...includeEnv ? ["env.d.ts"] : []
+		...includeEnv ? ["env.d.ts"] : [],
+		...includeAuth ? ["auth.d.ts"] : []
 	] };
 	if (hasDb) {
 		const paths = {};
@@ -77,5 +79,25 @@ function ensureProjectTsconfig(root, hasRouteTypes, hasDb, hasSchema, options =
 	const tsconfig = createProjectTsconfig(root, hasRouteTypes, hasDb, hasSchema, options);
 	return writeFileIfChanged(join(root, ".void", "tsconfig.json"), JSON.stringify(tsconfig, null, 2) + "\n");
 }
+/**
+* Add or drop `auth.d.ts` in an existing .void/tsconfig.json to match whether
+* `.void/auth.d.ts` exists, keeping every other entry as written. The dev/build
+* routing plugin uses this after it writes or removes auth.d.ts, so it does not
+* recompute the routes/db choices the Drizzle plugin or `void prepare` made.
+* A missing or unreadable tsconfig is left for those writers to create.
+*/
+function syncAuthTypesInProjectTsconfig(root) {
+	const outDir = join(root, ".void");
+	const tsconfigPath = join(outDir, "tsconfig.json");
+	let tsconfig;
+	try {
+		tsconfig = JSON.parse(readFileSync(tsconfigPath, "utf8"));
+	} catch {
+		return false;
+	}
+	const others = (Array.isArray(tsconfig.files) ? tsconfig.files : []).filter((file) => file !== "auth.d.ts");
+	tsconfig.files = existsSync(join(outDir, "auth.d.ts")) ? [...others, "auth.d.ts"] : others;
+	return writeFileIfChanged(tsconfigPath, JSON.stringify(tsconfig, null, 2) + "\n");
+}
 //#endregion
-export { ensureProjectTsconfig as n, writeFileIfChanged as r, createProjectTsconfig as t };
+export { writeFileIfChanged as i, ensureProjectTsconfig as n, syncAuthTypesInProjectTsconfig as r, createProjectTsconfig as t };

package/dist/{project-zero-trust-6VPU8zmV.mjs → project-zero-trust-CWDh1P_t.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { h as sanitizeTerminalText, m as printSuccess, p as note } from "./output-BpgYODYx.mjs";
 import { r as requireProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 //#region src/cli/project-zero-trust.ts

package/dist/{protocol-BekmFxCI.d.mts → protocol-D5XDySYu.d.mts}

@@ -1,6 +1,6 @@
 import { n as HeadDescriptor, t as HeadConfig } from "./head-C8K_iGe6.mjs";
 import { a as PageRenderMode, t as DevCssAsset } from "./types-w72dljaA.mjs";
-import { n as CloudBindings, r as CloudContext } from "./handler-CQv5YDS0.mjs";
+import { n as CloudBindings, r as CloudContext } from "./handler-BHktmuTL.mjs";
 //#region src/pages/protocol.d.ts
 /** Escape characters that are unsafe inside inline <script> tags to prevent XSS. */
 declare function safeJsonStringify(value: unknown): string;

package/dist/{provision-Chq0NRAV.mjs → provision-DfxLCg-d.mjs}

@@ -1 +1 @@
-export { f as isRealD1Id, p as isRealHyperdriveId } from "./provision-B7UFrBH7.mjs";
+export { f as isRealD1Id, p as isRealHyperdriveId } from "./provision-DztLJ97X.mjs";

package/dist/{provision-B7UFrBH7.mjs → provision-DztLJ97X.mjs}

@@ -1,6 +1,6 @@
 import { a as join, c as resolve$2, n as dirname, o as normalize, t as basename } from "./dist-ipQi0Q8y.mjs";
 import { i as voidWarn, r as voidLog } from "./log-BMwmN5Ae.mjs";
-import { M as writeProvisionedWranglerConfig, _ as persistMaterializedWranglerConfig, s as assertNoDuplicateMembers, y as readProvisionedBindingEntry } from "./wrangler-CDiEBCdS.mjs";
+import { M as writeProvisionedWranglerConfig, _ as persistMaterializedWranglerConfig, s as assertNoDuplicateMembers, y as readProvisionedBindingEntry } from "./wrangler-I-scB_1t.mjs";
 import { n as scanWranglerDotenvKeys } from "./dotenv-CNazY3-w.mjs";
 import { l as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-8jEYIeim.mjs";
 import { createRequire } from "node:module";
@@ -91,8 +91,9 @@ const defaultLogger = {
 	warn: (msg) => voidWarn(msg)
 };
 /**
-* Env vars that move wrangler's API transport to another endpoint or select another config
-* env. Provisioning pins one base ({@link provisionEnv}) and rejects them in project dotenv.
+* Env vars that move the Cloudflare CLI's API transport to another endpoint or select another
+* config env. Provisioning pins one base ({@link provisionEnv}) and rejects them in project
+* dotenv.
 */
 const TRANSPORT_REDIRECT_ENV_VARS = [
 	"CLOUDFLARE_API_BASE_URL",
@@ -108,22 +109,36 @@ const TRANSPORT_REDIRECT_ENV_VARS = [
 const OUTPUT_FILE_ENV_VARS = ["WRANGLER_OUTPUT_FILE_PATH", "WRANGLER_OUTPUT_FILE_DIRECTORY"];
 /**
 * The one API base URL this provision uses, resolved like wrangler's `getCloudflareApiBaseUrl`
-* so the Hyperdrive REST lister and wrangler agree:
+* so the Hyperdrive REST lister and the Cloudflare CLI agree:
 *   1. a present `CLOUDFLARE_API_BASE_URL` (then `CF_API_BASE_URL`) is used as-is, even empty;
 *   2. otherwise the staging and compliance selectors derive it, and invalid values fail;
 *   3. the config's `compliance_region` is always validated.
 */
 function resolvePinnedApiBaseUrl(env = process.env, configComplianceRegion) {
-	const configRegion = configComplianceRegion !== void 0 ? assertComplianceChoice(configComplianceRegion, "the wrangler config \"compliance_region\"") : void 0;
+	const configRegion = configComplianceRegion !== void 0 ? assertComplianceChoice(configComplianceRegion, "the Cloudflare config \"compliance_region\"") : void 0;
 	const direct = env.CLOUDFLARE_API_BASE_URL !== void 0 ? env.CLOUDFLARE_API_BASE_URL : env.CF_API_BASE_URL;
 	if (direct !== void 0) return direct;
 	return `https://api${resolveComplianceRegion(env, configRegion) === "fedramp_high" ? ".fed" : ""}${resolveApiEnvironment(env) === "staging" ? ".staging" : ""}.cloudflare.com/client/v4`;
 }
+/**
+* The compliance region that names the workers.dev host, resolved like wrangler's
+* `getComplianceRegionSubdomain`. It reads the same inputs as {@link resolvePinnedApiBaseUrl},
+* but a direct API base does not skip the region checks, because the base does not name the
+* workers.dev host. Returns undefined for an invalid or conflicting region, so that a caller
+* does not guess a host. Without a direct base, the API base resolution fails first.
+*/
+function resolveWorkersDevComplianceRegion(env = process.env, configComplianceRegion) {
+	try {
+		return resolveComplianceRegion(env, configComplianceRegion !== void 0 ? assertComplianceChoice(configComplianceRegion, "the Cloudflare config \"compliance_region\"") : void 0);
+	} catch {
+		return;
+	}
+}
 /** `WRANGLER_API_ENVIRONMENT` like wrangler: absent means production; other values fail. */
 function resolveApiEnvironment(env) {
 	const raw = env.WRANGLER_API_ENVIRONMENT;
 	if (raw === void 0) return "production";
-	if (raw !== "production" && raw !== "staging") throw new Error(`provision: the WRANGLER_API_ENVIRONMENT environment variable must be one of "production" or "staging", got ${JSON.stringify(raw)}. wrangler rejects this value, so provisioning refuses to guess an endpoint; fix or unset it and retry.`);
+	if (raw !== "production" && raw !== "staging") throw new Error(`provision: the WRANGLER_API_ENVIRONMENT environment variable must be one of "production" or "staging", got ${JSON.stringify(raw)}. The Cloudflare tooling rejects this value, so provisioning refuses to guess an endpoint; fix or unset it and retry.`);
 	return raw;
 }
 /** Compliance-region values wrangler accepts. */
@@ -136,7 +151,7 @@ function assertComplianceChoice(value, source) {
 function resolveComplianceRegion(env, configRegion) {
 	const rawEnv = env.CLOUDFLARE_COMPLIANCE_REGION;
 	const envRegion = rawEnv !== void 0 ? assertComplianceChoice(rawEnv, "the CLOUDFLARE_COMPLIANCE_REGION environment variable") : void 0;
-	if (envRegion !== void 0 && configRegion !== void 0 && envRegion !== configRegion) throw new Error(`provision: the Cloudflare compliance region is set to conflicting values — the CLOUDFLARE_COMPLIANCE_REGION environment variable is ${JSON.stringify(envRegion)} but the wrangler config "compliance_region" is ${JSON.stringify(configRegion)}. wrangler refuses to run with a mismatched compliance region; reconcile them (remove one, or set them equal) and retry.`);
+	if (envRegion !== void 0 && configRegion !== void 0 && envRegion !== configRegion) throw new Error(`provision: the Cloudflare compliance region is set to conflicting values — the CLOUDFLARE_COMPLIANCE_REGION environment variable is ${JSON.stringify(envRegion)} but the Cloudflare config "compliance_region" is ${JSON.stringify(configRegion)}. The Cloudflare tooling refuses to run with a mismatched compliance region; reconcile them (remove one, or set them equal) and retry.`);
 	return envRegion ?? configRegion ?? "public";
 }
 /** Project dotenv files the fence scans for `env`; provisioning selects no named env (`''`). */
@@ -198,6 +213,7 @@ function provisionEnv(ctx) {
 	scrub("CF_ACCESS_TOKEN");
 	scrub("VOID_ACCESS_CREDENTIALS");
 	scrub("VOID_ACCESS_ORIGIN");
+	scrub("CF_ACCESS_READINESS_ORIGIN");
 	for (const name of TRANSPORT_REDIRECT_ENV_VARS) scrub(name);
 	for (const name of OUTPUT_FILE_ENV_VARS) scrub(name);
 	scrub("WRANGLER_LOG_SANITIZE");
@@ -1794,4 +1810,4 @@ async function provisionCloudflareResourcesLocked(root, configPath, desired, opt
 	};
 }
 //#endregion
-export { provisionEnv as _, checkCloudflareProvisionDrift as a, enableD1ReadReplicationViaApi as c, isQueueConfirmedAbsent as d, isRealD1Id as f, provisionCloudflareResources as g, normalizeRunWranglerResult as h, assertValidResourceName as i, isAlreadyGoneKillError as l, isRealKvId as m, acquireProvisionLock as n, createDefaultRunWrangler as o, isRealHyperdriveId as p, assertNoTransportRedirectInProjectDotenv as r, deleteEnvVarCaseAware as s, WranglerQuarantineError as t, isQuarantineError as u, resolvePinnedApiBaseUrl as v, resolveProperLockfileKey as y };
+export { provisionEnv as _, checkCloudflareProvisionDrift as a, resolveWorkersDevComplianceRegion as b, enableD1ReadReplicationViaApi as c, isQueueConfirmedAbsent as d, isRealD1Id as f, provisionCloudflareResources as g, normalizeRunWranglerResult as h, assertValidResourceName as i, isAlreadyGoneKillError as l, isRealKvId as m, acquireProvisionLock as n, createDefaultRunWrangler as o, isRealHyperdriveId as p, assertNoTransportRedirectInProjectDotenv as r, deleteEnvVarCaseAware as s, WranglerQuarantineError as t, isQuarantineError as u, resolvePinnedApiBaseUrl as v, resolveProperLockfileKey as y };

package/dist/{requests-CG-Pj8ze.mjs → requests-D_pbzDyz.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { f as import_picocolors, i as dim } from "./output-BpgYODYx.mjs";
 //#region src/cli/requests.ts
 async function runRequestsCommand(root, range, status) {

package/dist/{rollback-CIrm2txZ.mjs → rollback-CjfIYsJx.mjs}

@@ -1,7 +1,7 @@
 import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, K as select, L as log, O as cancel, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { c as formatRelativeTime, i as dim, m as printSuccess, o as formatCount, r as createSpinner } from "./output-BpgYODYx.mjs";
 //#region src/cli/rollback.ts
 async function runRollbackCommand(root, deployId, explicitPlatform) {
@@ -74,7 +74,7 @@ async function runRollbackCommand(root, deployId, explicitPlatform) {
 	}
 }
 async function runCloudflareRollback(root, deployId, restorePlatformFlag) {
-	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-PCM4wucv.mjs");
+	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BtulCNOg.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	const status = await readCloudflareWorkerStatus(context);
 	const deployedVersionIds = new Set(status.deployedVersionIds);

package/dist/{route-types--PAOzHlH.mjs → route-types-DvEGmPif.mjs}

@@ -1,4 +1,60 @@
-import { s as relative } from "./dist-ipQi0Q8y.mjs";
+import { a as join, s as relative } from "./dist-ipQi0Q8y.mjs";
+import { i as writeFileIfChanged } from "./project-tsconfig-CVvk6Z_e.mjs";
+import { existsSync, rmSync } from "node:fs";
+//#region src/codegen/auth-types.ts
+/**
+* Generate `.void/auth.d.ts` content. Fills `void/auth`'s `VoidAuthTypes`
+* registry with Better Auth inference from the app's `defineAuth` config
+* (plugins, `user.additionalFields`, etc.), which `AuthUser` and `AuthSession`
+* read from.
+*
+* Uses `typeof import(...)` on the auth config file so TypeScript handles the
+* inference — codegen never analyses types itself. `better-auth` is reached
+* through `void/auth`'s `InferAuthSession`, because apps usually do not depend
+* on `better-auth` directly and could not resolve it from `.void/`.
+*
+* @param authFileAbs Absolute path to the user's auth config file.
+* @param outDir Absolute path to the project's `.void/` directory.
+*/
+function generateAuthTypes(authFileAbs, outDir) {
+	const importPath = relative(outDir, authFileAbs);
+	const lines = [];
+	lines.push("// Auto-generated by void — do not edit");
+	lines.push("export {}");
+	lines.push("");
+	lines.push("import type { InferAuthSession } from \"void/auth\";");
+	lines.push("");
+	lines.push(`type _VoidAuthSession = InferAuthSession<typeof import("${importPath}")["default"]>;`);
+	lines.push("");
+	lines.push("declare module \"void/auth\" {");
+	lines.push("  interface VoidAuthTypes {");
+	lines.push("    user: _VoidAuthSession[\"user\"];");
+	lines.push("    session: _VoidAuthSession[\"session\"];");
+	lines.push("  }");
+	lines.push("}");
+	lines.push("");
+	return { dts: lines.join("\n") };
+}
+function authTypesPath(outDir) {
+	return join(outDir, "auth.d.ts");
+}
+/** Remove `.void/auth.d.ts` when auth is disabled or the config file is gone. */
+function removeAuthTypesIfPresent(outDir) {
+	const filePath = authTypesPath(outDir);
+	if (!existsSync(filePath)) return false;
+	rmSync(filePath, { force: true });
+	return true;
+}
+/**
+* Write or remove `.void/auth.d.ts` from the current auth config path.
+* Returns whether the file on disk changed.
+*/
+function syncAuthTypesFile(authConfigPath, outDir) {
+	if (!authConfigPath) return removeAuthTypesIfPresent(outDir);
+	const { dts } = generateAuthTypes(authConfigPath, outDir);
+	return writeFileIfChanged(authTypesPath(outDir), dts);
+}
+//#endregion
 //#region src/codegen/queue-types.ts
 /**
 * Generate .void/queues.d.ts content.
@@ -136,7 +192,9 @@ function generateRouteTypes(scan, routesDir, outDir, pagesDir) {
 	lines.push("      ? false");
 	lines.push("      : ResolveActionParams<U> extends Record<string, string> ? true : false;");
 	lines.push("");
-	lines.push("  type ActionFormBaseOptions = { resetOnSuccess?: boolean };");
+	lines.push("  type ActionFormBaseOptions = {");
+	lines.push("    resetOnSuccess?: boolean;");
+	lines.push("  };");
 	lines.push("");
 	lines.push("  export type ActionFormOptions<U extends string> = ActionFormBaseOptions &");
 	lines.push("    (HasActionParams<U> extends true");
@@ -239,4 +297,4 @@ function generateRouteTypes(scan, routesDir, outDir, pagesDir) {
 	return { dts: lines.join("\n") };
 }
 //#endregion
-export { generateQueueTypes as n, generateRouteTypes as t };
+export { syncAuthTypesFile as a, removeAuthTypesIfPresent as i, generateQueueTypes as n, generateAuthTypes as r, generateRouteTypes as t };

package/dist/runtime/auth.d.mts

@@ -1,2 +1,2 @@
-import { a as VoidAuthConfigContext, c as getSession, i as VoidAuthConfig, l as getUser, n as AuthState, o as authContext, r as AuthUser, s as defineAuth, t as AuthSession, u as requireAuth } from "../auth-DkcFflXV.mjs";
-export { AuthSession, AuthState, AuthUser, VoidAuthConfig, VoidAuthConfigContext, authContext, defineAuth, getSession, getUser, requireAuth };
+import { a as VoidAuthConfig, c as authContext, d as getUser, f as requireAuth, i as InferAuthSession, l as defineAuth, n as AuthState, o as VoidAuthConfigContext, r as AuthUser, s as VoidAuthTypes, t as AuthSession, u as getSession } from "../auth-g2TQbDLD.mjs";
+export { AuthSession, AuthState, AuthUser, InferAuthSession, VoidAuthConfig, VoidAuthConfigContext, VoidAuthTypes, authContext, defineAuth, getSession, getUser, requireAuth };

package/dist/runtime/better-auth-mysql.d.mts

@@ -1,4 +1,4 @@
-import { n as VoidAuthRuntimeApi } from "../better-auth-shared-DVk2DkTW.mjs";
+import { n as VoidAuthRuntimeApi } from "../better-auth-shared-BHB8kiTE.mjs";
 //#region src/runtime/better-auth-mysql.d.ts
 export declare const resolveVoidAuthState: VoidAuthRuntimeApi["resolveVoidAuthState"];
 export declare const runVoidAuthMiddleware: VoidAuthRuntimeApi["runVoidAuthMiddleware"];

package/dist/runtime/better-auth-pg.d.mts

@@ -1,4 +1,4 @@
-import { n as VoidAuthRuntimeApi } from "../better-auth-shared-DVk2DkTW.mjs";
+import { n as VoidAuthRuntimeApi } from "../better-auth-shared-BHB8kiTE.mjs";
 //#region src/runtime/better-auth-pg.d.ts
 export declare const resolveVoidAuthState: VoidAuthRuntimeApi["resolveVoidAuthState"];
 export declare const runVoidAuthMiddleware: VoidAuthRuntimeApi["runVoidAuthMiddleware"];

package/dist/runtime/better-auth.d.mts

@@ -1,4 +1,4 @@
-import { n as VoidAuthRuntimeApi } from "../better-auth-shared-DVk2DkTW.mjs";
+import { n as VoidAuthRuntimeApi } from "../better-auth-shared-BHB8kiTE.mjs";
 //#region src/runtime/better-auth.d.ts
 export declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];
 export declare const resolveVoidAuthState: VoidAuthRuntimeApi["resolveVoidAuthState"];

package/dist/runtime/client-react.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-g2TQbDLD.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-react-7GFffu8R.mjs";
 import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
 import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";

package/dist/runtime/client-solid.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-g2TQbDLD.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-solid-DyTFL4cq.mjs";
 import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
 import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";

package/dist/runtime/client-svelte.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-g2TQbDLD.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-svelte-zetW0KIH.mjs";
 import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
 import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";

package/dist/runtime/client-vue.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-g2TQbDLD.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-vue-bChShbQP.mjs";
 import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
 import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";

package/dist/runtime/client.d.mts

@@ -1,4 +1,4 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-g2TQbDLD.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-Bawdj38n.mjs";
 import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
 import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-CQv5YDS0.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-BHktmuTL.mjs";
 export { BasicAuthOptions, CloudBindings, CloudContext, CloudContextVariables, CloudEnv, type Deferred, type HandlerInput, type InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, type ValidatorSlots, VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/live-client.d.mts

@@ -1,4 +1,4 @@
-import { t as LiveClientEvent } from "../live-CXJ9yC98.mjs";
+import { t as LiveClientEvent } from "../live-BllfDuzA.mjs";
 //#region src/runtime/live-client.d.ts
 export type LiveSubscribeOptions<Data = unknown> = {
   id: string;

package/dist/runtime/live.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { _ as __getLiveBindingName, a as LiveControlErrorCode, b as defineLiveStream, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as __setLiveDev } from "../live-CXJ9yC98.mjs";
+import { _ as __getLiveBindingName, a as LiveControlErrorCode, b as defineLiveStream, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as __setLiveDev } from "../live-BllfDuzA.mjs";
 export { LiveClientEvent, LiveConnectHookContext, LiveConnectOptions, LiveControlError, LiveControlErrorCode, LiveControlOperation, LiveControlOperationResult, LiveControlOptions, LiveControlRequest, LiveControlResponse, LiveHookContext, LiveLimits, LivePublishOptions, LiveStream, LiveStreamOptions, LiveSubscribeHookContext, __getLiveBindingName, __setLiveBindingName, __setLiveDev, defineLiveStream };

package/dist/runtime/routing.d.mts

@@ -1,16 +1,17 @@
-import { A as filterInternalBindings, M as createClientAssetTags, N as createManifestLoader, O as createAssetFallback, j as ClientAssetTags, k as createWorkerFetch } from "../handler-CQv5YDS0.mjs";
-import { a as handlePageMutation, i as handlePageGet } from "../protocol-BekmFxCI.mjs";
+import { A as filterInternalBindings, M as createClientAssetTags, N as createManifestLoader, O as createAssetFallback, j as ClientAssetTags, k as createWorkerFetch } from "../handler-BHktmuTL.mjs";
+import { a as handlePageMutation, i as handlePageGet } from "../protocol-D5XDySYu.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Context, Hono, MiddlewareHandler } from "hono";
 //#region src/runtime/routing-errors.d.ts
+type ErrorPageStatus = 404 | 500;
 type ErrorRendererOptions = {
   dev?: boolean;
   projectRoot: string;
   homeDir: string;
 };
 type ErrorRenderer = {
-  createResponse: (request: Request, status: number, title: string, error?: unknown) => Response;
-  serveCustomPage: (context: Context, status: number, title: string, error?: unknown) => Promise<Response>;
+  createResponse: (request: Request, status: ErrorPageStatus, title: string, error?: unknown) => Response;
+  serveCustomPage: (context: Context, status: ErrorPageStatus, title: string, error?: unknown) => Promise<Response>;
   onError: (error: Error, context: Context) => Promise<Response> | Response;
 };
 /** Error rendering is shared by generated Pages apps; production never includes exception details. */

package/dist/runtime/routing.mjs

@@ -1,11 +1,12 @@
 import { n as createClientAssetTags, r as createManifestLoader, t as ASSET_EXTENSIONS } from "../routing-assets-DdSFxoLp.mjs";
+import { t as renderDefaultErrorPage } from "../error-pages-CLIJ7aYq.mjs";
 import { t as convertReturnValue } from "../response-Tn7rU0MV.mjs";
 import { i as searchWithoutActionKey, n as hasActionKey, r as markActionKey, t as actionKeySegment } from "../action-key-XZ9HkWAO.mjs";
 import { n as handlePageGet, r as handlePageMutation } from "../protocol-DimNxVRr.mjs";
 import { t as VoidAssetRewriteError } from "../handler-BZ1t7-Rv.mjs";
 import { n as markStaticAsset } from "../static-asset-marker-Btf-6oCD.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { compilePattern, matchPattern, matchPatternCaptures, mergeQueryIntoLocation, substituteParams } from "@void/edge";
+import { compilePattern, matchPattern, matchPatternCaptures, mergeQueryIntoLocation, redirectToHttps, substituteParams } from "@void/edge";
 //#region src/runtime/routing-worker.ts
 const ASSET_CONTENT_TYPES = {
 	".avif": "image/avif",
@@ -125,6 +126,10 @@ function createWorkerFetch(options) {
 			const internal = await options.internalRoute(request, env, ctx);
 			if (internal) return internal;
 			if (discovery) return Response.json({ paths: await options.collectPrerenderPaths(request, env, ctx) });
+			if (options.alwaysUseHttps) {
+				const redirect = redirectToHttps(request);
+				if (redirect) return redirect;
+			}
 			const userEnv = options.filterBindings(env);
 			const render = async (req) => options.assets(req, env, await options.app.fetch(req, userEnv, ctx));
 			if (options.isr && env.ISR_CACHE && request.headers.get("upgrade")?.toLowerCase() !== "websocket") {
@@ -681,7 +686,7 @@ function createErrorRenderer(options) {
 <aside class="__void-error-overlay" data-void-error-overlay role="dialog" aria-label="Void dev error overlay"><div class="__void-error-backdrop" data-void-error-backdrop></div><section class="__void-error-panel"><button type="button" class="__void-error-close" data-void-error-close aria-label="Minimize error overlay"><svg viewBox="0 0 16 16" aria-hidden="true" focusable="false"><path d="M3.757 3.757 12.243 12.243M12.243 3.757 3.757 12.243" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round"/></svg></button><header class="__void-error-header"><p class="__void-error-status">${escapeHtml(String(status) + ": " + title)}</p></header>${sections}</section><button type="button" class="__void-error-minimized" data-void-error-toggle aria-label="Show dev error overlay" aria-expanded="true">${escapeHtml(errorCountLabel)}</button><script>(function(){const script=document.currentScript;if(!(script instanceof HTMLScriptElement))return;const root=script.closest("[data-void-error-overlay]");if(!(root instanceof HTMLElement))return;const backdrop=root.querySelector("[data-void-error-backdrop]");const closeButton=root.querySelector("[data-void-error-close]");const toggle=root.querySelector("[data-void-error-toggle]");const setMinimized=(minimized)=>{root.classList.toggle("is-minimized", minimized);if(toggle instanceof HTMLElement)toggle.setAttribute("aria-expanded", minimized ? "false" : "true");};if(backdrop instanceof HTMLElement)backdrop.addEventListener("click",()=>setMinimized(true));if(closeButton instanceof HTMLElement)closeButton.addEventListener("click",()=>setMinimized(true));if(toggle instanceof HTMLElement)toggle.addEventListener("click",()=>setMinimized(false));})();<\/script></aside>`;
 	}
 	function injectDevErrorOverlay(html, overlay) {
-		return /<\/body\s*>/i.test(html) ? html.replace(/<\/body\s*>/i, overlay + "</body>") : html + overlay;
+		return /<\/body\s*>/i.test(html) ? html.replace(/<\/body\s*>/i, () => overlay + "</body>") : html + overlay;
 	}
 	function getErrorAssetCss(error) {
 		const tags = error && (typeof error === "object" || typeof error === "function") && "__voidPageAssetTags" in error ? error.__voidPageAssetTags : null;
@@ -689,76 +694,11 @@ function createErrorRenderer(options) {
 	}
 	function injectErrorAssetCss(html, css) {
 		if (!css) return html;
-		return /<\/head\s*>/i.test(html) ? html.replace(/<\/head\s*>/i, css + "</head>") : css + html;
+		return /<\/head\s*>/i.test(html) ? html.replace(/<\/head\s*>/i, () => css + "</head>") : css + html;
 	}
 	function renderErrorPage(status, title, error) {
-		const heading = status + ": " + title;
-		const prefix = status + ": ";
-		const overlay = dev && status === 500 && error ? renderDevErrorOverlay(status, title, error) : "";
-		return `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>${escapeHtml(heading)}</title>
-    ${getErrorAssetCss(error)}
-    <style>
-      :root {
-        color-scheme: light dark;
-        font-family: ${ERROR_PAGE_FONT_STACK};
-        background: #f5f5f5;
-        color: #171717;
-      }
-      * { box-sizing: border-box; }
-      body {
-        margin: 0;
-        min-block-size: 100dvh;
-        display: grid;
-        place-items: center;
-        padding: 24px;
-        background: radial-gradient(circle at top, rgba(255, 255, 255, 0.96), rgba(245, 245, 245, 0.96) 52%), linear-gradient(180deg, #fafafa 0%, #f1f1f1 100%);
-        font: 500 16px/1.5 ${ERROR_PAGE_FONT_STACK};
-      }
-      main {
-        inline-size: min(100%, 560px);
-        padding: 32px 36px;
-        border: 1px solid #d4d4d8;
-        border-radius: 32px;
-        corner-shape: squircle;
-        background: rgba(255, 255, 255, 0.88);
-        text-align: center;
-        backdrop-filter: blur(12px);
-      }
-      h1 {
-        margin: 0;
-        font: 400 clamp(1.5rem, 1.2rem + 1vw, 2rem) / 1.1 ${ERROR_PAGE_FONT_STACK};
-        letter-spacing: -0.03em;
-      }
-      strong {
-        font-weight: 600;
-      }
-      @media (prefers-color-scheme: dark) {
-        :root {
-          background: #0a0a0a;
-          color: #f5f5f5;
-        }
-        body {
-          background: radial-gradient(circle at top, rgba(38, 38, 38, 0.96), rgba(10, 10, 10, 0.96) 52%), linear-gradient(180deg, #171717 0%, #0a0a0a 100%);
-        }
-        main {
-          border-color: #27272a;
-          background: rgba(23, 23, 23, 0.88);
-        }
-      }
-    </style>
-  </head>
-  <body>
-    <main>
-      <h1><strong>${escapeHtml(prefix)}</strong>${escapeHtml(title)}</h1>
-    </main>
-    ${overlay}
-  </body>
-</html>`;
+		const html = injectErrorAssetCss(renderDefaultErrorPage(status), getErrorAssetCss(error));
+		return dev && status === 500 && error ? injectDevErrorOverlay(html, renderDevErrorOverlay(status, title, error)) : html;
 	}
 	function createErrorResponse(request, status, title, error) {
 		if (!shouldServeHtmlErrorPage(request)) return new Response(title, { status });

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-CQv5YDS0.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-BHktmuTL.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState } from "../auth-DkcFflXV.mjs";
-import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-DVk2DkTW.mjs";
-import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-D1zWiB_P.mjs";
+import { n as AuthState } from "../auth-g2TQbDLD.mjs";
+import { r as VoidAuthRuntimeOptions, t as VoidAuthEnv } from "../better-auth-shared-BHB8kiTE.mjs";
+import { f as WebSocketInstanceKey, t as AnyWebSocketDefinition } from "../ws-B3ClMVDh.mjs";
 //#region src/runtime/ws-server.d.ts
 export type WebSocketRouteMeta = {
   name?: string;

package/dist/runtime/ws.d.mts

@@ -1,2 +1,2 @@
-import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-D1zWiB_P.mjs";
+import { a as RoomDefinition, c as VoidSocket, d as WebSocketConnection, f as WebSocketInstanceKey, h as defineWebSocket, i as RoomController, l as VoidSocketCloseEvent, m as defineRoom, n as ConnectCommonOptions, o as SocketContext, p as connect, r as RoomContext, s as SocketDefinition, t as AnyWebSocketDefinition, u as WebSocketBaseContext } from "../ws-B3ClMVDh.mjs";
 export { AnyWebSocketDefinition, ConnectCommonOptions, RoomContext, RoomController, RoomDefinition, SocketContext, SocketDefinition, VoidSocket, VoidSocketCloseEvent, WebSocketBaseContext, WebSocketConnection, WebSocketInstanceKey, connect, defineRoom, defineWebSocket };

package/dist/runtime/ws.mjs

@@ -31,6 +31,7 @@ var VoidSocket = class {
 	buffer = [];
 	reconnectAttempts = 0;
 	closedByUser = false;
+	reconnectTimer;
 	constructor(url, options) {
 		this.url = url;
 		this.options = options;
@@ -69,7 +70,7 @@ var VoidSocket = class {
 			if (this.options.maxReconnectAttempts != null && this.reconnectAttempts >= this.options.maxReconnectAttempts) return;
 			this.reconnectAttempts += 1;
 			const delay = this.options.reconnectDelayMs ?? 1e3;
-			setTimeout(() => this.connect(), delay);
+			this.reconnectTimer = setTimeout(() => this.connect(), delay);
 		});
 	}
 	send(event) {
@@ -81,6 +82,7 @@ var VoidSocket = class {
 	}
 	close(code, reason) {
 		this.closedByUser = true;
+		clearTimeout(this.reconnectTimer);
 		this.socket?.close(code, reason);
 	}
 	on(type, handler) {
@@ -100,7 +102,7 @@ function connect(path, options = {}) {
 	const base = resolveBaseUrl(options.baseURL);
 	const resolvedPath = interpolateRouteParams(path, options.params);
 	const url = new URL(resolvedPath, base);
-	url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+	url.protocol = url.protocol === "https:" || url.protocol === "wss:" ? "wss:" : "ws:";
 	return new VoidSocket(url.toString(), options);
 }
 //#endregion

package/dist/{secret-BL6g7mF5.mjs → secret-3X0PxmuX.mjs}

@@ -1,11 +1,12 @@
 import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, O as cancel, U as password, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess, o as formatCount, p as note } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
-import { _ as validateSecretValues } from "./env-validation-XcukUlFM.mjs";
+import { _ as validateSecretValues } from "./env-validation-B3VobvXm.mjs";
 import { readFileSync } from "node:fs";
+import { parseEnv } from "node:util";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {
 	console.log();
@@ -93,7 +94,7 @@ async function resolveSecretBackend(root, args) {
 }
 async function resolveCloudflareSecretBackend(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-PCM4wucv.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-BtulCNOg.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	return {
 		target: "Cloudflare Worker",
@@ -104,17 +105,13 @@ async function resolveCloudflareSecretBackend(root, args) {
 	};
 }
 const SECRET_KEY_RE = /^[A-Z][A-Z0-9_]*$/;
+const UTF8_BOM = "";
 function parseDotenvFile(filePath) {
-	const content = readFileSync(filePath, "utf-8");
 	const secrets = [];
-	for (const line of content.split("\n")) {
-		const trimmed = line.trim();
-		if (!trimmed || trimmed.startsWith("#")) continue;
-		const eqIndex = trimmed.indexOf("=");
-		if (eqIndex === -1) throw new Error(`secret: Invalid dotenv line '${trimmed}'. Add KEY=value.`);
-		const key = trimmed.slice(0, eqIndex).trim();
-		let value = trimmed.slice(eqIndex + 1).trim();
-		if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+	const raw = readFileSync(filePath, "utf-8");
+	const text = raw.startsWith(UTF8_BOM) ? raw.slice(1) : raw;
+	for (const [key, value] of Object.entries(parseEnv(text))) {
+		if (value === void 0) continue;
 		if (!SECRET_KEY_RE.test(key)) throw new Error(`secret: Invalid secret name '${key}'. Use uppercase letters, digits, and underscores.`);
 		secrets.push({
 			name: key,

package/dist/{version-metadata-DmaZNTYW.mjs → version-metadata-D2vfMQzv.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-CDiEBCdS.mjs";
+import { l as bindingNamesForField, p as findBindingNameOwner } from "./wrangler-I-scB_1t.mjs";
 //#region src/shared/untrusted-env.ts
 /** Authentication inputs that Wrangler may consume from the environment. */
 const WRANGLER_AUTH_CREDENTIAL_ENV_VARS = [
@@ -23,6 +23,7 @@ const UNTRUSTED_PROJECT_CODE_ENV_VARS = [
 	"CF_ACCESS_CLIENT_SECRET",
 	"VOID_ACCESS_CREDENTIALS",
 	"VOID_ACCESS_ORIGIN",
+	"CF_ACCESS_READINESS_ORIGIN",
 	"VOID_TOKEN",
 	"DATABASE_URL",
 	"ACTIONS_ID_TOKEN_REQUEST_URL",