void 1.3.0 → 1.4.0

package/dist/{wrangler-CDiEBCdS.mjs → wrangler-I-scB_1t.mjs}

@@ -1,12 +1,68 @@
 import { a as join, c as resolve, n as dirname, o as normalize, t as basename } from "./dist-ipQi0Q8y.mjs";
-import "./project-paths-DGu_QZ_Q.mjs";
-import { p as readConfig } from "./config-DHgSEWT7.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-DchHxPTo.mjs";
+import { o as TYPED_CONFIG_FILE, s as loadTypedVoidConfigFile } from "./project-paths-DGu_QZ_Q.mjs";
+import { h as validateConfig, p as readConfig } from "./config-OFOAimzt.mjs";
+import { a as persistCloudflareConfig, i as materializeCloudflareConfig, r as ignoreMaterializedCloudflareConfig } from "./cloudflare-config-CH1AylZT.mjs";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { parseSync } from "vite";
 import { appendSqliteClassMigration, isRecord } from "@void/deploy-core";
 import { createHash } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { SyntaxKind, applyEdits, createScanner, findNodeAtLocation, modify, parse, parseTree } from "jsonc-parser";
+//#region src/config-write.ts
+const GENERATED_MARKERS = [
+	"// Generated by void migrate.",
+	"// Generated from void.json by void migrate.",
+	"// Generated by void init."
+];
+function renderVoidConfig(config, marker = GENERATED_MARKERS[0]) {
+	return `${marker}\nimport { defineConfig } from 'void/config';\n\nexport default defineConfig(${JSON.stringify(config, null, 2)});\n`;
+}
+function isStaticValue(node) {
+	if (!node) return false;
+	if (node.type === "Literal") return node.value === null || [
+		"string",
+		"number",
+		"boolean"
+	].includes(typeof node.value);
+	if (node.type === "UnaryExpression") return node.operator === "-" && node.argument?.type === "Literal" && typeof node.argument.value === "number";
+	if (node.type === "ArrayExpression") return node.elements?.every(isStaticValue) ?? false;
+	if (node.type !== "ObjectExpression") return false;
+	return node.properties?.every((property) => property.type === "Property" && property.kind === "init" && !property.computed && !property.method && (property.key?.type === "Identifier" || property.key?.type === "Literal") && isStaticValue(property.value)) ?? false;
+}
+function isGeneratedStaticConfig(source) {
+	if (!GENERATED_MARKERS.some((marker) => source.startsWith(marker))) return false;
+	let program;
+	try {
+		const parsed = parseSync(TYPED_CONFIG_FILE, source, {
+			lang: "js",
+			sourceType: "module",
+			preserveParens: false,
+			showSemanticErrors: true
+		});
+		if (parsed.errors.length > 0 || parsed.comments.length !== 1 || !GENERATED_MARKERS.includes(`// ${parsed.comments[0]?.value.trim()}`)) return false;
+		program = parsed.program;
+	} catch {
+		return false;
+	}
+	const [importDeclaration, exportDeclaration] = program.body ?? [];
+	const call = exportDeclaration?.declaration;
+	return program.body?.length === 2 && importDeclaration?.type === "ImportDeclaration" && importDeclaration.source?.value === "void/config" && importDeclaration.specifiers?.length === 1 && importDeclaration.specifiers[0]?.imported?.name === "defineConfig" && importDeclaration.specifiers[0]?.local?.name === "defineConfig" && exportDeclaration?.type === "ExportDefaultDeclaration" && call?.type === "CallExpression" && call.callee?.name === "defineConfig" && call.arguments?.length === 1 && isStaticValue(call.arguments[0]);
+}
+function canRewriteVoidProjectConfig(root) {
+	const path = join(root, TYPED_CONFIG_FILE);
+	return !existsSync(path) || isGeneratedStaticConfig(readFileSync(path, "utf8"));
+}
+/** Update CLI-owned static config without silently rewriting authored TypeScript. */
+function writeVoidProjectConfig(root, config) {
+	validateConfig(config, TYPED_CONFIG_FILE);
+	const path = join(root, TYPED_CONFIG_FILE);
+	if (existsSync(path)) {
+		if (!isGeneratedStaticConfig(readFileSync(path, "utf8"))) throw new Error(`config: ${TYPED_CONFIG_FILE} contains authored TypeScript or comments. Update it directly and rerun the command.`);
+		validateConfig(loadTypedVoidConfigFile(path), TYPED_CONFIG_FILE);
+	}
+	writeFileSync(path, renderVoidConfig(config, "// Generated by void init."));
+}
+//#endregion
 //#region src/cli/wrangler.ts
 const COMPAT_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 /** UTF-8 byte-order mark. Node's utf-8 read preserves a leading one. */
@@ -170,10 +226,15 @@ function resolveGeneratedName(base, used, kind) {
 function readWranglerCompat(root, config, buildOutputDir) {
 	return resolveWranglerCompat(readWranglerCompatFields(root, config, buildOutputDir));
 }
-/** Like `readWranglerCompat()`, but pins the default date when no source sets one. */
-function ensureWranglerCompat(root, config, buildOutputDir) {
+/**
+* Like `readWranglerCompat()`, but pins the default date when no source sets one.
+* With `rootWrangler`, a project with no config gets the date in a root wrangler.jsonc
+* instead of a new void.config.ts, so a framework adapter that reads the root file by
+* default still finds it.
+*/
+function ensureWranglerCompat(root, config, buildOutputDir, options) {
 	const fields = readWranglerCompatFields(root, config, buildOutputDir);
-	const defaultDate = fields.voidDate ?? fields.wranglerDate ?? fields.buildDate ? void 0 : ensureVoidCompatibilityDate(root, fields.voidConfig);
+	const defaultDate = fields.voidDate ?? fields.wranglerDate ?? fields.buildDate ? void 0 : ensureVoidCompatibilityDate(root, options?.rootWrangler === true);
 	return resolveWranglerCompat(fields, defaultDate ? { defaultDate } : void 0);
 }
 function readWranglerCompatFields(root, config, buildOutputDir) {
@@ -205,7 +266,6 @@ function readWranglerCompatFields(root, config, buildOutputDir) {
 		if (Array.isArray(buildParsed.compatibility_flags) && buildParsed.compatibility_flags.every((f) => typeof f === "string")) buildFlags = buildParsed.compatibility_flags;
 	} catch {}
 	return {
-		voidConfig,
 		voidDate: voidConfig?.worker?.compatibility_date,
 		voidFlags: voidConfig?.worker?.compatibility_flags,
 		wranglerDate,
@@ -226,14 +286,23 @@ function validateCompatDate(value, source) {
 function readVoidConfigIfExists(root) {
 	return existsSync(join(root, VOID_CONFIG_FILE)) || existsSync(join(root, "void.config.ts")) ? readConfig(root) : void 0;
 }
-function ensureVoidCompatibilityDate(root, config) {
+function ensureVoidCompatibilityDate(root, rootWrangler) {
 	if (existsSync(join(root, "void.config.ts"))) {
 		writeProvisionedWranglerConfig(root, { compatibilityDate: LATEST_KNOWN_COMPAT_DATE });
 		return LATEST_KNOWN_COMPAT_DATE;
 	}
 	const filePath = join(root, VOID_CONFIG_FILE);
-	let nextConfig = {};
-	if (existsSync(filePath)) try {
+	if (!existsSync(filePath)) {
+		if (existsSync(join(root, "wrangler.toml"))) writeFileSync(filePath, `${JSON.stringify({ worker: { compatibility_date: LATEST_KNOWN_COMPAT_DATE } }, null, 2)}\n`);
+		else if (rootWrangler || projectWranglerPaths(root).some((path) => existsSync(path))) writeProvisionedWranglerConfig(root, { compatibilityDate: LATEST_KNOWN_COMPAT_DATE });
+		else {
+			writeVoidProjectConfig(root, { worker: { compatibility_date: LATEST_KNOWN_COMPAT_DATE } });
+			ignoreMaterializedCloudflareConfig(root);
+		}
+		return LATEST_KNOWN_COMPAT_DATE;
+	}
+	let nextConfig;
+	try {
 		const parsed = JSON.parse(readFileSync(filePath, "utf-8"));
 		if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error(`config: ${VOID_CONFIG_FILE} must be a JSON object.`);
 		nextConfig = parsed;
@@ -241,7 +310,6 @@ function ensureVoidCompatibilityDate(root, config) {
 		if (error instanceof SyntaxError) throw new Error(`config: Invalid JSON in ${VOID_CONFIG_FILE}.`);
 		throw error;
 	}
-	else if (config) nextConfig = { ...config };
 	nextConfig.worker = {
 		...nextConfig.worker ?? {},
 		compatibility_date: LATEST_KNOWN_COMPAT_DATE
@@ -1400,4 +1468,4 @@ function normalizeMigrationsPath(p) {
 	return normalized.endsWith("/") ? normalized.slice(0, -1) : normalized;
 }
 //#endregion
-export { syncWranglerWebSockets as A, readWranglerManagedQueueCleanupCandidates as C, sameMigrationsDir as D, resolveLiveBindingConfig as E, writeProvisionedWranglerConfig as M, writeWranglerPublishedTrafficSnapshot as N, syncWranglerBindings as O, readWranglerCustomDomains as S, readWranglerWebSocketTombstones as T, persistMaterializedWranglerConfig as _, LIVE_MIGRATION_TAG as a, readRootWranglerConfig as b, bindingEntriesForField as c, ensureWranglerCompatibilityDate as d, ensureWranglerNodejsAlsFlag as f, normalizeWranglerCompatibilityFlags as g, nextDurableObjectMigrationTag as h, LATEST_KNOWN_COMPAT_DATE as i, updateWranglerCustomDomain as j, syncWranglerDurableObjects as k, bindingNamesForField as l, hasDurableObjectSqliteMigration as m, DEFAULT_LIVE_CLASS as n, acknowledgeWranglerManagedQueueRemovals as o, findBindingNameOwner as p, FRIENDLY_BINDING_NAMES as r, assertNoDuplicateMembers as s, DEFAULT_LIVE_BINDING as t, ensureWranglerCompat as u, readExistingLiveBindingConfig as v, readWranglerPublishedTrafficSnapshot as w, readWranglerCompat as x, readProvisionedBindingEntry as y };
+export { syncWranglerWebSockets as A, readWranglerManagedQueueCleanupCandidates as C, sameMigrationsDir as D, resolveLiveBindingConfig as E, canRewriteVoidProjectConfig as F, renderVoidConfig as I, writeVoidProjectConfig as L, writeProvisionedWranglerConfig as M, writeWranglerPublishedTrafficSnapshot as N, syncWranglerBindings as O, GENERATED_MARKERS as P, readWranglerCustomDomains as S, readWranglerWebSocketTombstones as T, persistMaterializedWranglerConfig as _, LIVE_MIGRATION_TAG as a, readRootWranglerConfig as b, bindingEntriesForField as c, ensureWranglerCompatibilityDate as d, ensureWranglerNodejsAlsFlag as f, normalizeWranglerCompatibilityFlags as g, nextDurableObjectMigrationTag as h, LATEST_KNOWN_COMPAT_DATE as i, updateWranglerCustomDomain as j, syncWranglerDurableObjects as k, bindingNamesForField as l, hasDurableObjectSqliteMigration as m, DEFAULT_LIVE_CLASS as n, acknowledgeWranglerManagedQueueRemovals as o, findBindingNameOwner as p, FRIENDLY_BINDING_NAMES as r, assertNoDuplicateMembers as s, DEFAULT_LIVE_BINDING as t, ensureWranglerCompat as u, readExistingLiveBindingConfig as v, readWranglerPublishedTrafficSnapshot as w, readWranglerCompat as x, readProvisionedBindingEntry as y };

package/dist/wrangler-UnwdISay.mjs

@@ -0,0 +1 @@
+export { b as readRootWranglerConfig } from "./wrangler-I-scB_1t.mjs";

package/dist/{wrapper-CEiDeCqD.mjs → wrapper-BBl1rC32.mjs}

@@ -1,14 +1,14 @@
 import { a as join, l as toSlash, n as dirname, r as extname } from "./dist-ipQi0Q8y.mjs";
 import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { l as getDatabaseDialect, p as readConfig } from "./config-DHgSEWT7.mjs";
+import { l as getDatabaseDialect, p as readConfig } from "./config-OFOAimzt.mjs";
 import { n as isIdentifier, r as isLiteral } from "./ast-CsZ_q_gc.mjs";
 import { t as MagicString } from "./dist-Cegxq8gs.mjs";
-import { c as voidDbBundlerPlugin, r as cloudflareQueueName, t as generateQueueResolverSource } from "./dispatch-OVLeWW8K.mjs";
+import { c as voidDbBundlerPlugin, r as cloudflareQueueName, t as generateQueueResolverSource } from "./dispatch-CLa2LThw.mjs";
 import { t as WORKER_CONDITIONS } from "./worker-conditions-AWFRcFxR.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 import { build, parseSync } from "vite";
+import { fileURLToPath } from "node:url";
 import { createHash } from "node:crypto";
 //#region src/cli/worker-require-transform.ts
 function nodes(root) {

package/dist/{ws-D1zWiB_P.d.mts → ws-B3ClMVDh.d.mts}

@@ -1,6 +1,6 @@
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
-import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { a as CloudEnv } from "./handler-CQv5YDS0.mjs";
+import { r as AuthUser } from "./auth-g2TQbDLD.mjs";
+import { a as CloudEnv } from "./handler-BHktmuTL.mjs";
 import { WebSocketRouteMap } from "void/routes";
 //#region src/runtime/ws.d.ts
 type MaybePromise<T> = T | Promise<T>;
@@ -125,6 +125,7 @@ declare class VoidSocket<P extends keyof WebSocketRouteMap & string> {
   private readonly buffer;
   private reconnectAttempts;
   private closedByUser;
+  private reconnectTimer;
   constructor(url: string, options: ConnectCommonOptions);
   private emit;
   private connect;

package/docs/guide/auth.md

@@ -119,7 +119,7 @@ import { getSession, getUser, requireAuth } from 'void/auth';
 - `getSession()` returns `{ user, session } | null`
 - `requireAuth(c)` returns the authenticated user or throws `401`
 
-Import `AuthUser` and `AuthSession` from `void/auth` for type annotations. See their fields in the [API reference](../reference/api/auth.md#authuser).
+Import `AuthUser` and `AuthSession` from `void/auth` for type annotations. They include the fields your Better Auth plugins and `user.additionalFields` add, such as `role` from `admin()`. See their fields in the [API reference](../reference/api/auth.md#authuser).
 
 ## Behavior
 

package/docs/guide/edge/redirects.md

@@ -51,6 +51,28 @@ Path-only sources apply to every domain on the project. Host-prefixed sources ap
 
 The source must use `https://` and a literal hostname without wildcards or a port. Add the domain to your project with `void domain add` before deploying the rule. A domain awaiting certificate verification starts redirecting once it becomes active.
 
+## HTTP to HTTPS
+
+Set `routing.alwaysUseHttps` to redirect HTTP requests to HTTPS:
+
+```ts
+import { defineConfig } from 'void/config';
+
+export default defineConfig({
+  routing: {
+    alwaysUseHttps: true,
+  },
+});
+```
+
+Void answers with a permanent `308` redirect to the same URL over HTTPS. The path, query string, and request method stay the same. Omitted or `false` means off. `localhost` and loopback addresses such as `127.0.0.1` stay on HTTP, so local development and `vite preview` are unchanged.
+
+It works on the Void platform and for Void apps on `void deploy --platform cloudflare`. It needs the Cloudflare target: setting it with `target: 'node'`, `'bun'`, or `'deno'` is a config error.
+
+On `void deploy --platform cloudflare`, built files with a content hash in their name, such as `/assets/index-abc123.js`, can be served by Cloudflare before Void runs, so they may still answer over HTTP. Pages always redirect, so browsers load these files over HTTPS. To redirect every request, also turn on [Always Use HTTPS](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/always-use-https/) for your Cloudflare zone.
+
+SvelteKit, Nuxt, Astro, Analog, TanStack Start, React Router, and vinext apps run their own Worker, so `void deploy --platform cloudflare` stops with an error when the option is on. Static builds of these frameworks, deployed with `--dir` or `inference.appType`, redirect as usual. For the others, redirect to HTTPS in the framework, or turn on [Always Use HTTPS](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/always-use-https/) for your Cloudflare zone.
+
 ## Framework `_redirects` files
 
 Void reads `_redirects` files produced by supported frameworks. You can also place one in Vite's `publicDir`:

package/docs/guide/pages-routing/actions-and-forms.md

@@ -177,6 +177,30 @@ const form = useForm('/users/:id', { name: '' }, { params: { id: '42' } });
 
 Create forms often need empty fields again after a successful save. Either pass `resetOnSuccess: true` in the third argument, or call `form.reset({ initial: true })` when `form.wasSuccessful` becomes `true`.
 
+### React submission callbacks
+
+In React, pass `onSuccess` and `onError` to `useForm()` to respond to a submission:
+
+```tsx
+const form = useForm(
+  '/users',
+  { name: '', email: '' },
+  {
+    onSuccess: () => setDialogOpen(false),
+    onError: (error) => {
+      // A field-error map or VoidActionError for a handled action failure.
+      console.error(error);
+    },
+  },
+);
+```
+
+Each submission uses the callbacks from when it was dispatched. Callbacks run inside the React Action, before the updated UI commits. Use an effect or ref callback to focus an element that appears after submission.
+
+Callbacks can return `Promise<void>`. The Action awaits them, and `form.pending` stays true until they complete. Errors thrown or rejected by callbacks reach the nearest React error boundary. Aborted submissions invoke neither callback.
+
+Vue, Svelte, and Solid submissions return a promise instead; use `await form.post()` to run work after a submission.
+
 ## Named Actions
 
 When a page needs multiple mutations, such as updating and deleting a user on the same page, export `actions` (plural) instead of `action`:

package/docs/guide/platform/installation/maintenance.md

@@ -100,7 +100,9 @@ Repair recreates missing infrastructure that the installer owns. It does not res
 
 ### Upgrade the platform
 
-Keep the platform runtime current when updating the Void CLI.
+Keep the platform runtime current when updating the Void CLI. Upgrade the platform before your team updates its CLI: a newer CLI refuses to work with an older platform and asks for `void platform upgrade`. Install the new CLI on the administrator's machine, run the upgrade below, then have the team update.
+
+If the platform will deploy apps that use `void/sandbox`, its runtime token needs **Account → Containers → Edit** and **Account → Cloudchamber → Edit**. A token made from an older setup link may lack them, and an upgrade does not add them. Edit the token in the Cloudflare dashboard, or set `VOID_PLATFORM_RUNTIME_CLOUDFLARE_API_TOKEN` to a new token when you upgrade. See [Cloudflare API Tokens](/guide/platform/installation/credentials#runtime-token-permissions).
 
 Use the installed CLI's packaged runtime to upgrade:
 

package/docs/guide/server-routing.md

@@ -61,6 +61,8 @@ export const POST = defineHandler(async (c) => {
 });
 ```
 
+`GET` also answers `HEAD` requests, so route files can't export `HEAD`.
+
 See [Database](./database.md) for queries with D1, PostgreSQL, or MySQL.
 
 ### JSX handlers

package/docs/guide/ssg.md

@@ -37,6 +37,14 @@ export async function getPrerenderPaths() {
 }
 ```
 
+## 404 pages
+
+Static builds that prerender at least one page include a default `404.html` in `dist/client/`. To provide your own, add `public/404.html` or prerender a page at `/404`.
+
+Fully static Void deployments serve this page for missing URLs with an HTTP 404 status by default. You can override this with [`routing.notFound`](../reference/config.md#routing-notfound). Hybrid deployments handle missing URLs in the Worker.
+
+When hosting `dist/client/` yourself, configure your host to serve `404.html` with a 404 status for missing pages.
+
 ## Comparison with edge prerendering
 
 | `output` value       | Default prerender | Per-page override                | Prerender timing           |

package/docs/integrations/cloudflare.md

@@ -133,13 +133,14 @@ Apps using email need `email.from` in `void.config.ts`. Void reviews the domain'
 
 Set these CI secrets and variables as needed:
 
-| Name                                             | When needed                                                                                                   |
-| ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------- |
-| `CLOUDFLARE_API_TOKEN`                           | Required. Workers Scripts: Edit, read access to bound resources, and edit access to products Void provisions. |
-| `CLOUDFLARE_ACCOUNT_ID`                          | When the token can access several accounts.                                                                   |
-| `DATABASE_URL`                                   | PostgreSQL and MySQL provisioning and migrations.                                                             |
-| `CLOUDFLARE_WORKERS_SUBDOMAIN`                   | When the Worker has no version preview URL. Use `my-team` or `my-team.workers.dev`.                           |
-| `CF_ACCESS_CLIENT_ID`, `CF_ACCESS_CLIENT_SECRET` | When Cloudflare Access protects the readiness URL.                                                            |
+| Name                                             | When needed                                                                                                              |
+| ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------ |
+| `CLOUDFLARE_API_TOKEN`                           | Required. Workers Scripts: Edit, read access to bound resources, and edit access to products Void provisions.            |
+| `CLOUDFLARE_ACCOUNT_ID`                          | When the token can access several accounts.                                                                              |
+| `DATABASE_URL`                                   | PostgreSQL and MySQL provisioning and migrations.                                                                        |
+| `CLOUDFLARE_WORKERS_SUBDOMAIN`                   | When the Worker has no version preview URL. Use `my-team` or `my-team.workers.dev`.                                      |
+| `CF_ACCESS_CLIENT_ID`, `CF_ACCESS_CLIENT_SECRET` | When Cloudflare Access protects the readiness URL.                                                                       |
+| `CF_ACCESS_READINESS_ORIGIN`                     | When Access protects a route or Custom Domain and `workers_dev` is `false`. See [Cloudflare Access](#cloudflare-access). |
 
 For email, run `void email setup --platform cloudflare` locally, commit `void.lock.json`, and pass `--require-email` in CI. The token also needs Email Routing Edit and Email Sending Edit.
 
@@ -153,6 +154,14 @@ export CF_ACCESS_TOKEN="$(cloudflared access token --app=https://<worker>.<accou
 
 Void uses Access credentials for readiness checks without saving them. If checks are denied, the deployment fails. A first-deploy bootstrap can already be active behind Access when this happens.
 
+By default, Void sends Access credentials only to `workers.dev` URLs. If `workers_dev` is `false`, Void can check readiness through your first route or Custom Domain. To send the credentials there, set `CF_ACCESS_READINESS_ORIGIN` to that hostname's origin:
+
+```sh
+export CF_ACCESS_READINESS_ORIGIN="https://app.example.com"
+```
+
+Use one exact `https:` origin, without a wildcard or a path. Set the variable in the shell or CI environment that runs `void deploy`. Void ignores a value that `void.config.ts` sets, for example through a dotenv import. Set it only for a hostname that you control and that serves this Worker, because Void sends your Access credentials to it.
+
 ### Databases and secrets
 
 For PostgreSQL and MySQL, supply `DATABASE_URL` to the deploy process. Void uses it for Hyperdrive and migrations without writing it to config. MySQL schema changes can partially apply before an error; see [failed MySQL migrations](../guide/database/mysql.md#failed-migrations).

package/docs/reference/api/auth.md

@@ -79,7 +79,7 @@ function requireAuth(c: CloudContext): AuthUser;
 
 ## `AuthUser` {#authuser}
 
-Better Auth user shape re-exported by Void.
+Better Auth user shape re-exported by Void. It also includes the fields that Better Auth plugins and `user.additionalFields` in `auth.ts` add, for example `role` from `admin()` or a custom `plan` field. Your tsconfig needs the generated Void types for this; see [Type Safety setup](../../guide/type-safety.md#setup).
 
 ```ts
 interface AuthUser {
@@ -95,7 +95,7 @@ interface AuthUser {
 
 ## `AuthSession` {#authsession}
 
-Better Auth session shape re-exported by Void.
+Better Auth session shape re-exported by Void. It also includes the session fields that Better Auth plugins in `auth.ts` add, for example `impersonatedBy` from `admin()`.
 
 ```ts
 interface AuthSession {
@@ -110,6 +110,10 @@ interface AuthSession {
 }
 ```
 
+::: tip Types inside `auth.ts`
+`AuthUser` and `AuthSession` are built from `auth.ts`. Inside `auth.ts` and the files it imports, don't use them, or values from `getUser()`, `getSession()` and `requireAuth()`, to type a hook's parameters or returned data. TypeScript reports a circular reference and the extra fields are lost. Let Better Auth infer those types, or use its own `User` and `Session` types. Better Auth callbacks such as `sendResetPassword` pass its base `User`, without plugin fields.
+:::
+
 ## `AuthState` {#authstate}
 
 Combined authenticated request state:

package/docs/reference/api/deploy.md

@@ -33,7 +33,10 @@ Use `prepareCfBuildOutput` to convert an existing Cloudflare Worker build into a
 ```ts
 import { prepareCfBuildOutput } from 'void/deploy';
 
-const prepared = await prepareCfBuildOutput('/path/to/app/dist/server', { mode: 'staging' });
+const prepared = await prepareCfBuildOutput('/path/to/app/dist/server', {
+  projectRoot: '/path/to/app',
+  mode: 'staging',
+});
 if (!prepared) {
   throw new Error('The Worker build could not be prepared.');
 }
@@ -47,9 +50,10 @@ try {
 
 Pass the Worker output directory that contains a generated `wrangler.json`, such as `dist/ssr`, `dist/rsc`, or `dist/server`. When Cloudflare's build tooling built the app, pass the project root that contains its native Build Output at `.cloudflare/output/v0` instead. Preparation copies modules and assets without changing that input. Native output keeps its module types, auxiliary Workers, Container declarations, and build metadata. Preparation does not provision resources, upload a Worker, or activate a deployment. Container images built from a local Dockerfile exist only in the Docker environment that built them, so publish from that environment.
 
-| Option      | Description                                                                                                                                          |
-| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `accountId` | Cloudflare account the build must target. A different account in the build returns `null`. When omitted, the build's account is kept or left unset.  |
-| `mode`      | Vite build mode. Native output keeps the mode it was built with, and a different value returns `null`. For other output it defaults to `production`. |
+| Option        | Description                                                                                                                                          |
+| ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `accountId`   | Cloudflare account the build must target. A different account in the build returns `null`. When omitted, the build's account is kept or left unset.  |
+| `mode`        | Vite build mode. Native output keeps the mode it was built with, and a different value returns `null`. For other output it defaults to `production`. |
+| `projectRoot` | App directory containing `package.json` and its installed dependencies. Defaults to the input directory.                                             |
 
 The result contains `directory`, an optional `assetsDirectory` pointing to the input assets, and an asynchronous `dispose()` method. Always dispose the result after use. Unsupported build configuration returns `null`. A directory without a Worker build, a missing or invalid Worker module, or an asset symlink outside the asset directory throws an error.

package/docs/reference/api/pages.md

@@ -109,6 +109,8 @@ Imported from `"@void/react"`.
 
 React `Link` GET `data` is merged into the rendered `href` query string. Primitive values are serialized with `String(value)`, arrays become repeated keys, `null` and `undefined` are omitted, and nested objects throw. `prefetch` and `reloadDocument` are GET-only and throw for mutation links.
 
+React `useForm()` options accept `onSuccess?: () => void | Promise<void>` and `onError?: (error: Record<string, string> | VoidActionError) => void | Promise<void>`. Each submission captures its callbacks, runs them before the updated UI commits, and awaits any returned promise. See [submission callbacks](../../guide/pages-routing/actions-and-forms.md#react-submission-callbacks).
+
 React deferred props returned from `defer()` are Suspense resources. Read them
 with React's `use()` inside a `<Suspense>` boundary. React Pages requires React
 19 and uses streaming SSR for the initial deferred shell. Rejections throw from

package/docs/reference/cli/deploy.md

@@ -86,15 +86,16 @@ void deploy --platform cloudflare --require-email   # fail instead of deploying
 
 Void signs you in through your browser when needed and saves the selected account. In CI, set `CLOUDFLARE_API_TOKEN` and, if the token can access several accounts, `CLOUDFLARE_ACCOUNT_ID`.
 
-| Option or setting              | Cloudflare behavior                                                                    |
-| ------------------------------ | -------------------------------------------------------------------------------------- |
-| `--dir`, `--spa`               | Deploy static output through a small Worker and Workers Assets                         |
-| `--skip-build`                 | Reuse existing static, SPA, or SSG output; unavailable for Worker apps                 |
-| `--project`                    | Unavailable; the Worker and account come from `void.config.ts` and `void.lock.json`    |
-| Named environments             | Unavailable; use the top-level `cloudflare` config                                     |
-| `CLOUDFLARE_WORKERS_SUBDOMAIN` | Needed in fresh CI when versions have no preview URL; cached locally after a deploy    |
-| `--require-email`              | Fail instead of deploying without email when the email step cannot run, as in CI       |
-| `DATABASE_URL`                 | Required in the deploy environment for PostgreSQL or MySQL provisioning and migrations |
+| Option or setting              | Cloudflare behavior                                                                                                  |
+| ------------------------------ | -------------------------------------------------------------------------------------------------------------------- |
+| `--dir`, `--spa`               | Deploy static output through a small Worker and Workers Assets                                                       |
+| `--skip-build`                 | Reuse existing static, SPA, or SSG output; unavailable for Worker apps                                               |
+| `--project`                    | Unavailable; the Worker and account come from `void.config.ts` and `void.lock.json`                                  |
+| Named environments             | Unavailable; use the top-level `cloudflare` config                                                                   |
+| `CLOUDFLARE_WORKERS_SUBDOMAIN` | Needed in fresh CI when versions have no preview URL; cached locally after a deploy                                  |
+| `CF_ACCESS_READINESS_ORIGIN`   | Lets Access credentials reach the readiness check on a route or Custom Domain, for example `https://app.example.com` |
+| `--require-email`              | Fail instead of deploying without email when the email step cannot run, as in CI                                     |
+| `DATABASE_URL`                 | Required in the deploy environment for PostgreSQL or MySQL provisioning and migrations                               |
 
 The token needs Workers Scripts: Edit, read access to bound resources, and edit access to products Void provisions. Commit `void.lock.json` after the first deploy before using other machines or CI.
 

package/docs/reference/config.md

@@ -297,7 +297,7 @@ Void-managed WebSocket route files (`*.ws.ts`) are Cloudflare-only because they
 
 ### `worker`
 
-Curated Cloudflare Workers configuration. `void init` pins `compatibility_date` here. Binding arrays such as `d1_databases`, `kv_namespaces`, and `r2_buckets` go in [`cloudflare`](#cloudflare), where Void preserves custom settings and resolved IDs during deployment.
+Curated Cloudflare Workers configuration. `void init` pins `compatibility_date` here. If a project has no config file and no date, the first dev server or build creates `void.config.ts` with only this date and adds `.void-wrangler.jsonc` to `.gitignore`. Astro, SvelteKit, Nuxt, and Analog apps get the date in a root `wrangler.jsonc` instead, which their adapter reads by default. A project with a `wrangler.toml` gets it in `void.json`. Binding arrays such as `d1_databases`, `kv_namespaces`, and `r2_buckets` go in [`cloudflare`](#cloudflare), where Void preserves custom settings and resolved IDs during deployment.
 
 | Field                 | Type       | Description                            |
 | --------------------- | ---------- | -------------------------------------- |
@@ -366,6 +366,16 @@ This choice applies to subsequent `void deploy` runs. Atomic deployment sends tr
 
 Routing and edge configuration for headers, redirects, rewrites, and caching.
 
+#### `routing.alwaysUseHttps`
+
+Redirect HTTP requests to HTTPS with a permanent `308` redirect. Omitted or `false` means off. Requires the Cloudflare target. `localhost` stays on HTTP. See [HTTP to HTTPS](../guide/edge/redirects#http-to-https) for where it works.
+
+```ts
+routing: {
+  alwaysUseHttps: true,
+}
+```
+
 #### `routing.headers`
 
 Custom response headers. Keys are URL patterns, values are arrays of `"Name: value"` strings. See [Custom Headers](../guide/edge/headers) for details.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Full-stack framework and deployment CLI for Cloudflare Workers, powered by Vite.",
   "homepage": "https://void.cloud",
   "bugs": {
@@ -348,12 +348,13 @@
     "@cloudflare/vite-plugin": "^1.64.0",
     "@cloudflare/workers-auth": "^0.14.1",
     "@cloudflare/workers-types": "^5.20261019.1",
+    "@cloudflare/workers-utils": "^0.47.3",
     "@napi-rs/keyring": "^2.1.2",
-    "@void/deploy-cloudflare": "1.3.0",
-    "@void/deploy-core": "1.3.0",
-    "@void/edge": "1.3.0",
-    "@void/isr": "1.3.0",
-    "@void/platform": "1.3.0",
+    "@void/deploy-cloudflare": "1.4.0",
+    "@void/deploy-core": "1.4.0",
+    "@void/edge": "1.4.0",
+    "@void/isr": "1.4.0",
+    "@void/platform": "1.4.0",
     "better-auth": "^1.7.11",
     "better-sqlite3": "^13.0.3",
     "blake3-jit": "^1.1.0",
@@ -402,7 +403,7 @@
     "zod": "^4.6.7"
   },
   "peerDependencies": {
-    "@void/md": "1.3.0",
+    "@void/md": "1.4.0",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/schema.json

@@ -144,6 +144,10 @@
       "type": "object",
       "description": "Routing configuration — headers, redirects, rewrites, fallbacks, revalidation, prerendering.",
       "properties": {
+        "alwaysUseHttps": {
+          "type": "boolean",
+          "description": "Redirect HTTP requests to HTTPS with a permanent 308 redirect. Omitted or false means off. Requires the Cloudflare target; localhost stays on HTTP."
+        },
         "isr": {
           "type": "boolean",
           "description": "Enable inferred ISR caching. Set false to disable ISR and edge prerendering, including per-page prerender and revalidate policies. Does not disable output: static build-time prerendering."

package/skills/void/SKILL.md

@@ -49,7 +49,7 @@ the app's existing saved destination, including when the target project is new.
 | Email                                      | `docs/guide/email.md`, then the matching guide under `docs/guide/email/`                  |
 | KV / storage / queues / cron jobs          | `docs/guide/kv.md`, `docs/guide/storage.md`, `docs/guide/queues.md`, `docs/guide/jobs.md` |
 | SSR and caching                            | `docs/guide/ssr.md`, `docs/guide/edge/*.md`                                               |
-| Rewrites, redirects, fallbacks             | `docs/guide/edge/rewrites.md`, `docs/guide/edge/redirects.md`, `docs/reference/config.md` |
+| HTTPS, rewrites, redirects, fallbacks      | `docs/guide/edge/rewrites.md`, `docs/guide/edge/redirects.md`, `docs/reference/config.md` |
 | Static site generation                     | `docs/guide/ssg.md`                                                                       |
 | Connected apps and artifact preparation    | `docs/guide/platform/administration/connected-apps.md`, `docs/reference/api/deploy.md`    |
 | Deployment and CI                          | `docs/guide/deployment.md`, `docs/reference/cli/deploy.md`                                |

package/dist/auth-DkcFflXV.d.mts

@@ -1,42 +0,0 @@
-import { AsyncLocalStorage } from "node:async_hooks";
-import { BetterAuthOptions, Session, User } from "better-auth";
-import { Context, Env } from "hono";
-//#region src/runtime/auth.d.ts
-type AuthUser = User;
-type AuthSession = Session;
-type AuthState = {
-  session: AuthSession;
-  user: AuthUser;
-};
-type VoidAuthConfigContext = {
-  defaults: BetterAuthOptions;
-  env: Record<string, unknown>;
-  dialect: "sqlite" | "postgresql" | "mysql";
-  request: Request;
-};
-type VoidAuthConfig = BetterAuthOptions | ((ctx: VoidAuthConfigContext) => BetterAuthOptions);
-/**
- * Shared AsyncLocalStorage that holds the authenticated Better Auth state for the
- * current request.
- *
- * Stored on `globalThis` under a `Symbol.for` key so duplicate module loads
- * (e.g. once by void's bundled runtime and once by Vite's SSR module runner
- * when user code imports from `void/auth`) share a single ALS instance. Without
- * this, the middleware writes to one instance and `getUser()` reads another,
- * always returning null.
- */
-type AuthContextStore = {
-  user: AuthUser | null;
-  state: AuthState | null;
-};
-declare const authContext: AsyncLocalStorage<AuthContextStore>;
-declare function defineAuth<T extends VoidAuthConfig>(config: T): T;
-declare function getUser(): AuthUser | null;
-declare function getSession(): AuthState | null;
-declare function requireAuth<E extends Env & {
-  Variables: {
-    user: AuthUser | null;
-  };
-}>(c: Context<E>): AuthUser;
-//#endregion
-export { VoidAuthConfigContext as a, getSession as c, VoidAuthConfig as i, getUser as l, AuthState as n, authContext as o, AuthUser as r, defineAuth as s, AuthSession as t, requireAuth as u };

package/dist/cf-build-output-DlBkWdNU.mjs

@@ -1 +0,0 @@
-export { t as prepareCfBuildOutput } from "./cf-build-output-Bapzc_8Z.mjs";

package/dist/client-DyxPQnF_.mjs

@@ -1 +0,0 @@
-export { r as PlatformClient } from "./client-BEMtySaV.mjs";

package/dist/config-BTu1o3Dc.mjs

@@ -1,49 +0,0 @@
-import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { existsSync, readFileSync } from "node:fs";
-import { pathToFileURL } from "node:url";
-import { isRunnableDevEnvironment, parseSync } from "vite";
-//#region src/auth/config.ts
-function isVoidAuthConfigSource(code, filename) {
-	if (!code.includes("void/auth")) return false;
-	let program;
-	try {
-		program = parseSync(filename, code).program;
-	} catch {
-		return false;
-	}
-	return (program.body ?? []).some((node) => {
-		if (node.type !== "ImportDeclaration" && node.type !== "ExportNamedDeclaration" && node.type !== "ExportAllDeclaration") return false;
-		return node.source?.value === "void/auth";
-	});
-}
-function findVoidAuthConfig(root, paths = readProjectPaths(root)) {
-	for (const absPath of paths.authConfigCandidates) {
-		if (!existsSync(absPath)) continue;
-		if (isVoidAuthConfigSource(readFileSync(absPath, "utf-8"), absPath)) return absPath;
-	}
-	return null;
-}
-/**
-* The dev server evaluates the auth config in this Node environment. A native
-* `import()` would keep the first evaluation for the life of the process; the
-* module runner reads the config again once its files are invalidated, and the
-* module graph lists the local files the config imports.
-*/
-const AUTH_CONFIG_ENVIRONMENT = "void_auth_config";
-/** The dev server's importer for the auth config, when it has the environment. */
-function devAuthConfigImporter(server) {
-	const environment = server.environments[AUTH_CONFIG_ENVIRONMENT];
-	return environment && isRunnableDevEnvironment(environment) ? (path) => environment.runner.import(path) : void 0;
-}
-/**
-* Evaluate the auth config. A native `import()` keeps its first evaluation for
-* the life of the process, which suits one-off commands; the dev server passes
-* its module runner.
-*/
-async function loadVoidAuthConfig(configPath, importModule = (path) => import(pathToFileURL(path).href)) {
-	if (!configPath) return;
-	const mod = await importModule(configPath);
-	return mod.default ?? mod.auth ?? mod.config;
-}
-//#endregion
-export { loadVoidAuthConfig as i, devAuthConfigImporter as n, findVoidAuthConfig as r, AUTH_CONFIG_ENVIRONMENT as t };

package/dist/deploy-CtHE2A3R.mjs

@@ -1,2 +0,0 @@
-import "./deploy-transport-JCxw7QDi.mjs";
-export { i as checkWranglerMigrationApplySet, t as parseRootWranglerConfig, r as runDeploy } from "./deploy-hRPvw8ci.mjs";

package/dist/gen-TgXy93Rr.mjs

@@ -1 +0,0 @@
-export { r as runGenCommand } from "./gen-CCx3t2Ju.mjs";