void 0.10.12 → 0.20.0

package/dist/{client-Gb71-XkG.mjs → client-CyCHWSO_.mjs}

@@ -1,462 +1,10 @@
-import { n as __exportAll } from "./rolldown-runtime-DJK8HYOj.mjs";
-import { a as join, n as dirname } from "./dist-DaKKDf8D.mjs";
-import { r as getPackageDir, u as import_picocolors } from "./agents-CtgBYqld.mjs";
-import { t as cfAccessHeaders } from "./cf-access-Bqw81xAf.mjs";
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { createHash, randomBytes } from "node:crypto";
-import { homedir } from "node:os";
-import { Entry } from "@napi-rs/keyring";
-import { spawnSync } from "node:child_process";
-//#region src/cli/cf-access.ts
-const probedHosts = /* @__PURE__ */ new Set();
-/**
-* If the CLI is about to talk to a Cloudflare-Access-gated staging host,
-* probe the locally-installed `cloudflared` binary for a cached user JWT
-* and export it as `CF_ACCESS_TOKEN`. On interactive shells with no cached
-* token, open a browser login flow to populate the cache, then re-read it.
-*
-* Cached per-host so that an early non-gated call (e.g. prod) does not
-* permanently disable the probe for a later gated call (e.g. staging) in
-* the same process. Noop when:
-*   - a service-token pair is already set (CI path)
-*   - `CF_ACCESS_TOKEN` is already set (manual override or prior probe)
-*   - the target host is not gated
-*   - `cloudflared` is not installed
-*/
-function ensureCloudflaredToken(apiUrl) {
-	if (process.env.CF_ACCESS_CLIENT_ID && process.env.CF_ACCESS_CLIENT_SECRET) return;
-	if (process.env.CF_ACCESS_TOKEN) return;
-	if (!isGatedHost(apiUrl)) return;
-	const host = new URL(apiUrl).hostname;
-	if (probedHosts.has(host)) return;
-	probedHosts.add(host);
-	let token = runCloudflared([
-		"access",
-		"token",
-		`-app=${apiUrl}`
-	]);
-	if (!token && process.stdin.isTTY && process.stdout.isTTY) {
-		runCloudflared([
-			"access",
-			"login",
-			apiUrl
-		], {
-			inherit: true,
-			timeoutMs: 12e4
-		});
-		token = runCloudflared([
-			"access",
-			"token",
-			`-app=${apiUrl}`
-		]);
-	}
-	if (token) process.env.CF_ACCESS_TOKEN = token;
-}
-function runCloudflared(args, opts) {
-	try {
-		const result = spawnSync("cloudflared", args, {
-			encoding: "utf-8",
-			stdio: opts?.inherit ? "inherit" : [
-				"ignore",
-				"pipe",
-				"pipe"
-			],
-			timeout: opts?.timeoutMs ?? 5e3
-		});
-		if (result.error || result.status !== 0) return null;
-		const out = (result.stdout ?? "").trim();
-		return out.length > 0 ? out : null;
-	} catch {
-		return null;
-	}
-}
-function isGatedHost(apiUrl) {
-	try {
-		const host = new URL(apiUrl).hostname;
-		return host.endsWith(".staging.void.cloud") || host.endsWith(".staging.void.app");
-	} catch {
-		return false;
-	}
-}
-//#endregion
-//#region src/cli/project.ts
-var project_exports = /* @__PURE__ */ __exportAll({
-	isVoidInternalStaging: () => isVoidInternalStaging,
-	readProjectConfig: () => readProjectConfig,
-	removeProjectConfig: () => removeProjectConfig,
-	writeProjectConfig: () => writeProjectConfig
-});
-const PROJECT_FILE = ".void/project.json";
-function readProjectConfigFile(root) {
-	const filePath = join(root, PROJECT_FILE);
-	try {
-		const raw = readFileSync(filePath, "utf-8");
-		const config = JSON.parse(raw);
-		if (typeof config !== "object" || config === null || Array.isArray(config)) return null;
-		return config;
-	} catch {
-		return null;
-	}
-}
-/**
-* Read the project config from the project root.
-* Returns null if no project.json exists.
-* A file containing only internal metadata is not treated as a linked project.
-*/
-function readProjectConfig(root) {
-	const config = readProjectConfigFile(root);
-	if (!config || typeof config.projectId !== "string" || typeof config.slug !== "string") return null;
-	const result = {
-		projectId: config.projectId,
-		slug: config.slug
-	};
-	if (config.voidInternalStaging === true) result.voidInternalStaging = true;
-	return result;
-}
-/**
-* Internal-only platform developers' staging switch.
-* This intentionally lives with the project link state, not public void.json.
-*/
-function isVoidInternalStaging(root) {
-	return readProjectConfigFile(root)?.voidInternalStaging === true;
-}
-/**
-* Write the project config to the project root.
-*/
-function writeProjectConfig(root, config) {
-	const filePath = join(root, PROJECT_FILE);
-	const existing = readProjectConfigFile(root);
-	const next = {
-		projectId: config.projectId,
-		slug: config.slug
-	};
-	if (config.voidInternalStaging === true || existing?.voidInternalStaging === true) next.voidInternalStaging = true;
-	mkdirSync(dirname(filePath), { recursive: true });
-	writeFileSync(filePath, JSON.stringify(next, null, 2) + "\n");
-}
-/**
-* Remove the project config file. Returns true if removed, false if it didn't exist.
-*/
-function removeProjectConfig(root) {
-	const filePath = join(root, PROJECT_FILE);
-	try {
-		rmSync(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
-//#region src/cli/auth.ts
-const CONFIG_DIR = join(homedir(), ".void");
-const CONFIG_PATH = join(CONFIG_DIR, "config.json");
-const KEYRING_SERVICE = "dev.void.cli";
-function keyringGet(account) {
-	try {
-		return new Entry(KEYRING_SERVICE, account).getPassword();
-	} catch {
-		return null;
-	}
-}
-function keyringSet(account, password) {
-	try {
-		new Entry(KEYRING_SERVICE, account).setPassword(password);
-		return true;
-	} catch {
-		return false;
-	}
-}
-function keyringDelete(account) {
-	try {
-		new Entry(KEYRING_SERVICE, account).deletePassword();
-		return true;
-	} catch {
-		return false;
-	}
-}
-function readConfig() {
-	try {
-		return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
-	} catch {
-		return {};
-	}
-}
-function writeConfig(config) {
-	mkdirSync(CONFIG_DIR, { recursive: true });
-	writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + "\n", { mode: 384 });
-}
-function isStagingMode(root = process.cwd()) {
-	return isVoidInternalStaging(root);
-}
-function getSiteDomain(root = process.cwd()) {
-	return isStagingMode(root) ? "staging.void.app" : "void.app";
-}
-/**
-* Read the deploy token.
-* Priority: VOID_TOKEN env var > system keychain > ~/.void/config.json (auto-migrated)
-*/
-function getToken(root = process.cwd()) {
-	const envToken = process.env.VOID_TOKEN;
-	if (envToken) return envToken;
-	const account = isStagingMode(root) ? "stagingToken" : "token";
-	const keyringToken = keyringGet(account);
-	if (keyringToken) return keyringToken;
-	const config = readConfig();
-	const fileToken = config[account];
-	if (fileToken) {
-		if (keyringSet(account, fileToken)) {
-			delete config[account];
-			try {
-				writeConfig(config);
-			} catch {}
-		}
-		return fileToken;
-	}
-	return null;
-}
-function getTokenSource() {
-	return process.env.VOID_TOKEN ? "ci" : "manual";
-}
-function saveToken(token, root = process.cwd()) {
-	const account = isStagingMode(root) ? "stagingToken" : "token";
-	if (keyringSet(account, token)) return;
-	console.warn(import_picocolors.default.yellow("System keychain unavailable, storing token in ~/.void/config.json"));
-	const config = readConfig();
-	config[account] = token;
-	writeConfig(config);
-}
-function removeToken(root = process.cwd()) {
-	const account = isStagingMode(root) ? "stagingToken" : "token";
-	let removed = false;
-	if (keyringDelete(account)) removed = true;
-	try {
-		const config = readConfig();
-		if (config[account]) {
-			delete config[account];
-			writeConfig(config);
-			removed = true;
-		}
-	} catch {}
-	return removed;
-}
-const DEFAULT_API_URL = "https://api.void.cloud";
-const STAGING_API_URL = "https://api.staging.void.cloud";
-function base64Url(buffer) {
-	return buffer.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
-}
-function createCodeVerifier() {
-	return base64Url(randomBytes(32));
-}
-function createCodeChallenge(verifier) {
-	return base64Url(createHash("sha256").update(verifier).digest());
-}
-async function exchangeLoginCode(apiUrl, code, state, codeVerifier) {
-	const base = apiUrl.endsWith("/") ? apiUrl : `${apiUrl}/`;
-	ensureCloudflaredToken(apiUrl);
-	const res = await fetch(new URL("auth/cli/token", base), {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			...cfAccessHeaders(process.env)
-		},
-		body: JSON.stringify({
-			code,
-			state,
-			code_verifier: codeVerifier
-		})
-	});
-	if (!res.ok) throw new Error(`auth: Failed to exchange login code (${res.status}). Try logging in again.`);
-	let body;
-	try {
-		body = await res.json();
-	} catch {
-		throw new Error("auth: Login code exchange returned an invalid response.");
-	}
-	if (!body || typeof body !== "object" || !("token" in body) || typeof body.token !== "string" || body.token.length === 0) throw new Error("auth: Login code exchange did not return a token.");
-	return body.token;
-}
-/**
-* Read the API URL from environment or config file.
-* Priority: VOID_API_URL env var > ~/.void/config.json > default
-*/
-function getApiUrl(root = process.cwd()) {
-	return process.env.VOID_API_URL ?? readConfig().api ?? (isStagingMode(root) ? STAGING_API_URL : DEFAULT_API_URL);
-}
-function page(title, message) {
-	return `<!DOCTYPE html>
-<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<title>${title} - Void</title>
-<style>:root{color-scheme:light dark}*{margin:0;padding:0;box-sizing:border-box}body{font-family:system-ui,-apple-system,sans-serif;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#fafafa;color:#111}.card{text-align:center;padding:3rem}h1{font-size:1.5rem;font-weight:600;margin-bottom:.75rem}p{color:#666;font-size:1rem}@media (prefers-color-scheme:dark){body{background:#0a0a0a;color:#fafafa}p{color:#a3a3a3}}</style>
-</head><body><div class="card"><h1>${title}</h1><p>${message}</p></div></body></html>`;
-}
-function openBrowser(url, execFile) {
-	const ignore = () => {};
-	if (process.platform === "win32") {
-		execFile("cmd.exe", [
-			"/c",
-			"start",
-			"",
-			url
-		], ignore);
-		return;
-	}
-	if (process.platform === "darwin") {
-		execFile("open", [url], ignore);
-		return;
-	}
-	if (process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP) {
-		execFile("wslview", [url], (error) => {
-			if (error) execFile("cmd.exe", [
-				"/c",
-				"start",
-				"",
-				url
-			], ignore);
-		});
-		return;
-	}
-	execFile("xdg-open", [url], ignore);
-}
-/**
-* Start a local HTTP callback server, open the browser to a caller-built
-* authorize URL, and wait for the redirect back to `http://localhost:PORT/callback`.
-*
-* The server validates the `state` it appended to the callback URL against the
-* incoming request, then runs the caller's `finalize` hook INSIDE the request
-* handler (so the browser only ever sees the success page after the underlying
-* exchange/link actually succeeded). On finalize success it renders the success
-* HTML and resolves with finalize's return value; on finalize failure it
-* renders the same "could not complete" failure page the login flow uses and
-* rejects with the thrown error. The server is always closed before settling.
-*
-* `onUrl` is invoked with the authorize URL once the local server is listening,
-* so callers can show the URL to the user as a manual fallback when the browser
-* fails to open (common on WSL2, headless SSH, Docker, etc.). To match the
-* login flow it fires immediately before the browser is opened.
-*
-* `execFile` is injectable so tests can avoid launching a real browser.
-*/
-async function awaitBrowserCallback(options) {
-	const http = await import("node:http");
-	const { state, buildAuthUrl, finalize, describeError, validate, onUrl } = options;
-	const timeoutMs = options.timeoutMs ?? 300 * 1e3;
-	const execFile = options.execFile ?? (await import("node:child_process")).execFile;
-	return new Promise((resolve, reject) => {
-		let settled = false;
-		const fail = (error) => {
-			if (settled) return;
-			settled = true;
-			server.close();
-			reject(error);
-		};
-		const succeed = (result) => {
-			if (settled) return;
-			settled = true;
-			server.close();
-			resolve(result);
-		};
-		const server = http.createServer(async (req, res) => {
-			const url = new URL(req.url, `http://localhost`);
-			if (url.pathname !== "/callback") {
-				res.writeHead(404);
-				res.end("Not found");
-				return;
-			}
-			if (url.searchParams.get("state") !== state) {
-				res.writeHead(400, { "Content-Type": "text/html" });
-				res.end(page("Login failed", "Invalid login callback. Please try again."));
-				return;
-			}
-			const errorMessage = describeError?.(url.searchParams);
-			if (errorMessage) {
-				res.writeHead(403, { "Content-Type": "text/html" });
-				res.end(page("Login failed", errorMessage));
-				fail(new Error(errorMessage));
-				return;
-			}
-			const invalidMessage = validate?.(url.searchParams);
-			if (invalidMessage) {
-				res.writeHead(400, { "Content-Type": "text/html" });
-				res.end(page("Login failed", invalidMessage));
-				return;
-			}
-			let result;
-			try {
-				result = await finalize(url.searchParams);
-			} catch (err) {
-				if (settled) return;
-				res.writeHead(400, { "Content-Type": "text/html" });
-				res.end(page("Login failed", "Could not complete login. Please try again."));
-				fail(err instanceof Error ? err : /* @__PURE__ */ new Error("auth: Failed to complete login."));
-				return;
-			}
-			if (settled) return;
-			res.writeHead(200, { "Content-Type": "text/html" });
-			res.end(page("Login successful!", "You can close this tab and return to the terminal."));
-			succeed(result);
-		});
-		server.on("connection", (socket) => socket.unref());
-		server.listen(0, "127.0.0.1", async () => {
-			const addr = server.address();
-			if (!addr || typeof addr === "string") {
-				fail(/* @__PURE__ */ new Error("auth: Failed to start local callback server."));
-				return;
-			}
-			const port = addr.port;
-			const callback = new URL(`http://localhost:${port}/callback`);
-			callback.searchParams.set("state", state);
-			let authUrl;
-			try {
-				authUrl = await buildAuthUrl(callback);
-			} catch (err) {
-				fail(err instanceof Error ? err : /* @__PURE__ */ new Error("auth: Failed to build authorize URL."));
-				return;
-			}
-			onUrl?.(authUrl);
-			openBrowser(authUrl, execFile);
-		});
-		setTimeout(() => {
-			fail(/* @__PURE__ */ new Error("auth: Login timed out after 5 minutes. Try again."));
-		}, timeoutMs).unref();
-	});
-}
-/**
-* Start a local HTTP server, open the browser to the platform login page,
-* and wait for the OAuth callback with a short-lived code. The CLI exchanges
-* the code itself so the localhost callback never accepts bearer tokens.
-*
-* `onUrl` is invoked with the login URL once the local server is listening,
-* so callers can show the URL to the user as a manual fallback when the
-* browser fails to open (common on WSL2, headless SSH, Docker, etc.).
-*/
-async function runLogin(root = process.cwd(), provider = "github", onUrl) {
-	const { execFile } = await import("node:child_process");
-	const apiUrl = getApiUrl(root);
-	const state = randomBytes(32).toString("hex");
-	const codeVerifier = createCodeVerifier();
-	const codeChallenge = createCodeChallenge(codeVerifier);
-	return awaitBrowserCallback({
-		state,
-		execFile,
-		onUrl,
-		buildAuthUrl: (callback) => {
-			const loginUrl = new URL("auth/login", apiUrl.endsWith("/") ? apiUrl : `${apiUrl}/`);
-			loginUrl.searchParams.set("redirect", callback.href);
-			loginUrl.searchParams.set("provider", provider);
-			loginUrl.searchParams.set("code_challenge", codeChallenge);
-			loginUrl.searchParams.set("code_challenge_method", "S256");
-			return loginUrl.href;
-		},
-		describeError: (p) => p.get("error") === "signup_restricted" ? "Signup restricted: your email is not on the approved list for this environment." : null,
-		validate: (p) => {
-			if (p.has("token")) return "Invalid login callback. Please try again.";
-			if (!p.get("code")) return "No authorization code received. Please try again.";
-			return null;
-		},
-		finalize: (params) => exchangeLoginCode(apiUrl, params.get("code"), state, codeVerifier)
-	});
-}
-//#endregion
+import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
+import { o as join } from "./dist-BrsS7cai.mjs";
+import { G as normalizePlatformApiUrl, p as getPackageDir } from "./output-tFQLLj26.mjs";
+import { t as cfAccessHeaders } from "./cf-access-AJ1ehiFR.mjs";
+import { a as getApiUrl } from "./auth-W9WII-mN.mjs";
+import { t as ensureCloudflaredToken } from "./cf-access-DsSsZUPr.mjs";
+import { readFileSync } from "node:fs";
 //#region src/cli/client.ts
 var client_exports = /* @__PURE__ */ __exportAll({
 	PlatformApiError: () => PlatformApiError,
@@ -538,17 +86,19 @@ var PlatformClient = class {
 	baseUrl;
 	authHeaders;
 	cliLog;
+	apiUrl;
 	constructor(token, options) {
-		if (typeof options === "string") this.baseUrl = options;
+		if (typeof options === "string") this.baseUrl = normalizePlatformApiUrl(options);
 		else {
-			this.baseUrl = options?.apiUrl ?? getApiUrl(options?.root);
+			this.baseUrl = normalizePlatformApiUrl(options?.apiUrl ?? getApiUrl(options?.root));
 			this.cliLog = options?.cliLog;
 		}
+		this.apiUrl = this.baseUrl;
 		ensureCloudflaredToken(this.baseUrl);
 		this.authHeaders = {
 			Authorization: `Bearer ${token}`,
 			...VOID_CLI_VERSION !== null && { "X-Void-CLI-Version": VOID_CLI_VERSION },
-			...cfAccessHeaders(process.env)
+			...cfAccessHeaders(process.env, this.baseUrl)
 		};
 	}
 	async whoami() {
@@ -853,6 +403,14 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to get resources", res);
 		return res.json();
 	}
+	async createPrerenderToken(projectId) {
+		const res = await fetch(`${this.baseUrl}/projects/${projectId}/prerender-token`, {
+			method: "POST",
+			headers: { ...this.authHeaders }
+		});
+		if (!res.ok) await throwPlatformApiError("Failed to create prerender token", res);
+		return (await res.json()).token;
+	}
 	async provisionDatabase(projectId, connectionString) {
 		const res = await fetch(`${this.baseUrl}/projects/${projectId}/database`, {
 			method: "POST",
@@ -1043,6 +601,46 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to complete GitHub join", res);
 		return res.json();
 	}
+	async getEmailUsage(projectId) {
+		const res = await fetch(`${this.baseUrl}/projects/${projectId}/email/usage`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email usage", res);
+		return res.json();
+	}
+	async getEmailLogs(projectId, limit) {
+		const url = new URL(`${this.baseUrl}/projects/${projectId}/email/logs`);
+		if (limit !== void 0) url.searchParams.set("limit", String(limit));
+		const res = await fetch(url, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email logs", res);
+		return res.json();
+	}
+	async listEmailDestinations(projectId) {
+		const res = await fetch(`${this.baseUrl}/projects/${projectId}/email/destinations`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to list email destinations", res);
+		return res.json();
+	}
+	async addEmailDestination(projectId, address) {
+		const res = await fetch(`${this.baseUrl}/projects/${projectId}/email/destinations`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				...this.authHeaders
+			},
+			body: JSON.stringify({ address })
+		});
+		if (!res.ok) await throwPlatformApiError("Failed to add email destination", res);
+		return {
+			...await res.json(),
+			created: res.status === 201
+		};
+	}
+	async removeEmailDestination(projectId, destinationId) {
+		const res = await fetch(`${this.baseUrl}/projects/${projectId}/email/destinations/${destinationId}`, {
+			method: "DELETE",
+			headers: { ...this.authHeaders }
+		});
+		if (!res.ok) await throwPlatformApiError("Failed to remove email destination", res);
+		return res.json();
+	}
 };
 //#endregion
-export { ensureCloudflaredToken as C, writeProjectConfig as S, runLogin as _, isExpiredTokenError as a, readProjectConfig as b, createCodeChallenge as c, getSiteDomain as d, getToken as f, removeToken as g, openBrowser as h, isCliOutdatedError as i, createCodeVerifier as l, isStagingMode as m, PlatformClient as n, parsePlatformErrorBody as o, getTokenSource as p, client_exports as r, awaitBrowserCallback as s, PlatformApiError as t, getApiUrl as u, saveToken as v, removeProjectConfig as x, project_exports as y };
+export { isExpiredTokenError as a, isCliOutdatedError as i, PlatformClient as n, parsePlatformErrorBody as o, client_exports as r, PlatformApiError as t };