void 0.10.13 → 0.20.1

package/dist/cli/cli.mjs

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
-import { a as join } from "../dist-DaKKDf8D.mjs";
-import { D as outro, E as note, T as log, d as sectionTitle, i as categoryTitle, l as helpLine, r as getPackageDir, u as import_picocolors } from "../agents-CtgBYqld.mjs";
+import { n as __exportAll } from "../rolldown-runtime-rQ84J-ij.mjs";
+import { o as join } from "../dist-BrsS7cai.mjs";
+import { D as log, G as normalizePlatformApiUrl, O as note, c as import_picocolors, d as formatCloudflareUserMessage, k as outro, l as sectionTitle, p as getPackageDir, s as helpLine, t as categoryTitle } from "../output-tFQLLj26.mjs";
+import { t as cfAccessHeaders } from "../cf-access-AJ1ehiFR.mjs";
 import { readFileSync } from "node:fs";
 import { parseArgs } from "node:util";
 //#region src/cli/args.ts
@@ -15,8 +17,10 @@ function parseDeployArgs(args) {
 				spa: { type: "boolean" },
 				"skip-build": { type: "boolean" },
 				debug: { type: "boolean" },
+				platform: { type: "string" },
 				backend: { type: "string" },
-				provision: { type: "boolean" }
+				provision: { type: "boolean" },
+				"require-email": { type: "boolean" }
 			},
 			allowPositionals: true,
 			strict: true,
@@ -25,7 +29,9 @@ function parseDeployArgs(args) {
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		if (message.includes("argument missing") || message.includes("argument is ambiguous")) {
-			if (message.match(/Option '(--[a-z-]+)/)?.[1] === "--backend") throw new Error("deploy: --backend requires a value ('cloudflare').");
+			const optionMatch = message.match(/Option '(--[a-z-]+)/);
+			if (optionMatch?.[1] === "--platform") throw new Error("deploy: --platform requires a value ('cloudflare' or 'void').");
+			if (optionMatch?.[1] === "--backend") throw new Error("deploy: --backend requires a value ('cloudflare').");
 			throw new Error("deploy: --project requires a slug.");
 		}
 		const unknownOptionMatch = message.match(/Unknown option '([^']+)'/);
@@ -34,7 +40,11 @@ function parseDeployArgs(args) {
 	}
 	const tokens = parsed.tokens ?? [];
 	if (tokens.filter((token) => token.kind === "option" && token.name === "project").length > 1) throw new Error("deploy: --project can only be specified once.");
-	if (tokens.filter((token) => token.kind === "option" && token.name === "backend").length > 1) throw new Error("deploy: --backend can only be specified once.");
+	const backendTokens = tokens.filter((token) => token.kind === "option" && token.name === "backend");
+	if (backendTokens.length > 1) throw new Error("deploy: --backend can only be specified once.");
+	const platformTokens = tokens.filter((token) => token.kind === "option" && token.name === "platform");
+	if (platformTokens.length > 1) throw new Error("deploy: --platform can only be specified once.");
+	if (platformTokens.length > 0 && backendTokens.length > 0) throw new Error("deploy: --platform and --backend cannot be used together.");
 	if (parsed.positionals.length > 0) throw new Error(`deploy: Unexpected argument '${parsed.positionals[0]}'.`);
 	const projectValue = parsed.values.project;
 	const projectSlug = typeof projectValue === "string" ? projectValue : void 0;
@@ -43,15 +53,18 @@ function parseDeployArgs(args) {
 	const spa = parsed.values.spa === true ? true : void 0;
 	const skipBuild = parsed.values["skip-build"] === true ? true : void 0;
 	const debug = parsed.values.debug === true ? true : void 0;
+	const platformValue = typeof parsed.values.platform === "string" ? parsed.values.platform : void 0;
+	if (platformValue !== void 0 && platformValue !== "cloudflare" && platformValue !== "void") throw new Error("deploy: --platform must be 'cloudflare' or 'void'.");
+	const platform = platformValue;
 	const backendValue = typeof parsed.values.backend === "string" ? parsed.values.backend : void 0;
 	if (backendValue !== void 0 && backendValue !== "cloudflare") throw new Error("deploy: --backend must be 'cloudflare'.");
 	const backend = backendValue;
 	const provision = parsed.values.provision === true ? true : void 0;
-	if (provision && backend !== "cloudflare") throw new Error("deploy: --provision requires --backend cloudflare.");
-	if (backend === "cloudflare") {
-		if (projectSlug !== void 0) throw new Error("deploy: --project is not supported with --backend cloudflare — this backend deploys to your own Cloudflare account and no Void project is involved.");
-		if (dir !== void 0) throw new Error("deploy: --dir is not supported with --backend cloudflare — this backend uploads the worker your build emits, not a static directory.");
-		if (spa) throw new Error("deploy: --spa is not supported with --backend cloudflare — this backend uploads the worker your build emits, not a static SPA.");
+	if (provision && backend !== "cloudflare" && platform !== "cloudflare") throw new Error("deploy: --provision requires --platform cloudflare.");
+	const requireEmail = parsed.values["require-email"] === true ? true : void 0;
+	if (requireEmail && backend !== "cloudflare" && platform !== "cloudflare") throw new Error("deploy: --require-email requires --platform cloudflare.");
+	if (backend === "cloudflare" || platform === "cloudflare") {
+		if (projectSlug !== void 0) throw new Error("deploy: --project is not supported with --platform cloudflare — this platform deploys to your own Cloudflare account and no Void project is involved.");
 	}
 	return {
 		projectSlug,
@@ -59,8 +72,10 @@ function parseDeployArgs(args) {
 		spa,
 		skipBuild,
 		debug,
+		platform,
 		backend,
-		provision
+		provision,
+		requireEmail
 	};
 }
 //#endregion
@@ -135,6 +150,54 @@ function parseBuildArgs(args) {
 	};
 }
 //#endregion
+//#region src/cli/cloudflare-args.ts
+const cloudflareSubcommands = [
+	{
+		name: "login",
+		description: "Sign in or switch Cloudflare users securely"
+	},
+	{
+		name: "status",
+		description: "Show Cloudflare identity and the pinned deployment account"
+	},
+	{
+		name: "logout",
+		description: "Remove the local Cloudflare browser session"
+	}
+];
+function parseCloudflareArgs(args) {
+	const [subcommand, extra] = args;
+	if (!subcommand || ![
+		"login",
+		"status",
+		"logout"
+	].includes(subcommand)) throw new Error("cloudflare: Usage: void cloudflare <login|status|logout>.");
+	if (extra) throw new Error(`cloudflare: Unexpected argument '${extra}'.`);
+	return { subcommand };
+}
+//#endregion
+//#region src/cli/connect-args.ts
+function parseConnectArgs(args) {
+	const { values, positionals } = parseArgs({
+		args,
+		allowPositionals: true,
+		strict: true,
+		options: {
+			platform: { type: "string" },
+			"no-login": { type: "boolean" }
+		}
+	});
+	if (positionals.length > 1) throw new Error("connect: Expected at most one platform URL.");
+	const platform = values.platform ?? null;
+	if (platform !== null && platform !== "cloudflare" && platform !== "void") throw new Error("connect: --platform must be cloudflare or void.");
+	if (platform === "cloudflare" && (positionals.length > 0 || values["no-login"])) throw new Error("connect: A URL and --no-login are only supported for Void platforms.");
+	return {
+		url: positionals[0] ?? "",
+		platform,
+		noLogin: values["no-login"] ?? false
+	};
+}
+//#endregion
 //#region src/cli/db-args.ts
 const dbSubcommands = [
 	{
@@ -189,7 +252,33 @@ const dbSubcommands = [
 	},
 	{
 		name: "set-url",
-		description: "Update the PostgreSQL connection string for deployment"
+		description: "Update the external database URL for deployment"
+	},
+	{
+		name: "connect",
+		arg: "[connection-string]",
+		description: "Connect or provision an external database",
+		flags: [
+			{
+				name: "--provider",
+				arg: "<name-or-module>",
+				description: "Provision with an adapter"
+			},
+			{
+				name: "--name",
+				arg: "<name>",
+				description: "Provider project/database name"
+			},
+			{
+				name: "--region",
+				arg: "<region>",
+				description: "Provider region identifier"
+			},
+			{
+				name: "--local-only",
+				description: "Do not sync a linked Void project"
+			}
+		]
 	},
 	{
 		name: "rename-migrations",
@@ -229,7 +318,11 @@ function parseDbArgs(args) {
 			"no-data": { type: "boolean" },
 			"no-schema": { type: "boolean" },
 			table: { type: "string" },
-			remote: { type: "boolean" }
+			remote: { type: "boolean" },
+			provider: { type: "string" },
+			name: { type: "string" },
+			region: { type: "string" },
+			"local-only": { type: "boolean" }
 		},
 		allowPositionals: true,
 		strict: true
@@ -289,6 +382,20 @@ function parseDbArgs(args) {
 		if (rest.length > 0) throw new Error(`db: Unexpected argument '${rest[0]}'.`);
 		return { action };
 	}
+	if (action === "connect") {
+		if (rest.length > 1) throw new Error(`db: Unexpected argument '${rest[1]}'.`);
+		const url = rest[0];
+		const provider = typeof parsed.values.provider === "string" ? parsed.values.provider : void 0;
+		if (url && provider) throw new Error("db: Provide either a connection string or --provider, not both.");
+		return {
+			action,
+			url,
+			provider,
+			name: typeof parsed.values.name === "string" ? parsed.values.name : void 0,
+			region: typeof parsed.values.region === "string" ? parsed.values.region : void 0,
+			localOnly: parsed.values["local-only"] === true ? true : void 0
+		};
+	}
 	if (action === "rename-migrations") {
 		if (rest.length > 0) throw new Error(`db: Unexpected argument '${rest[0]}'.`);
 		return { action };
@@ -304,7 +411,7 @@ function parseDbArgs(args) {
 			table: typeof parsed.values.table === "string" ? parsed.values.table : void 0
 		};
 	}
-	throw new Error("db: Usage: void db <push|generate|status|reset|seed|execute|migrate|studio|export|set-url|rename-migrations>.");
+	throw new Error("db: Usage: void db <push|generate|status|reset|seed|execute|migrate|studio|export|connect|set-url|rename-migrations>.");
 }
 //#endregion
 //#region src/cli/domain-args.ts
@@ -354,29 +461,221 @@ function parseDomainArgs(args) {
 	};
 }
 //#endregion
-//#region src/cli/env-args.ts
-const envSubcommands = [
+//#region src/cli/email-args.ts
+const PLATFORM_FLAG = {
+	name: "--platform",
+	arg: "<cloudflare|void>",
+	description: "Your own Cloudflare account (`cloudflare`) instead of the Void platform"
+};
+const emailSubcommands = [
 	{
-		name: "check",
-		description: "Validate env.ts schema against .env files (and optionally remote secrets)",
-		flags: [{
-			name: "--remote",
-			description: "Also check that required keys exist as remote secrets"
-		}]
+		name: "usage",
+		description: "Show monthly email send/receive counts and quota"
 	},
 	{
-		name: "types",
-		description: "Regenerate .void/env.d.ts from env.ts"
+		name: "logs",
+		description: "Show recent email delivery activity"
 	},
 	{
-		name: "example",
-		description: "Refresh the void-managed block in .env.example",
-		flags: [{
-			name: "--force",
-			description: "Suppress the \"appended block\" notice (for scripted runs)"
-		}]
+		name: "destinations",
+		description: "List verified recipient addresses for outbound mail"
+	},
+	{
+		name: "allow",
+		arg: "<address>",
+		description: "Add a recipient and trigger CF verification"
+	},
+	{
+		name: "disallow",
+		arg: "<address>",
+		description: "Remove a verified recipient"
+	},
+	{
+		name: "domain",
+		arg: "<add|status|list|sync|remove>",
+		description: "Send and receive at your own domain on a Cloudflare zone"
+	},
+	{
+		name: "status",
+		description: "Show the email setup state and address map",
+		flags: [PLATFORM_FLAG]
+	},
+	{
+		name: "setup",
+		description: "Set email up on your own Cloudflare account (--platform cloudflare)",
+		flags: [PLATFORM_FLAG]
 	}
 ];
+const EMAIL_SUBCOMMANDS = [
+	"usage",
+	"logs",
+	"destinations",
+	"allow",
+	"disallow",
+	"domain",
+	"status",
+	"setup"
+];
+const EMAIL_DOMAIN_VERBS = [
+	"add",
+	"status",
+	"list",
+	"sync",
+	"remove"
+];
+/**
+* Read a value-taking flag in its `--flag value` or `--flag=value` form. Returns the
+* raw value, or `undefined` when the flag is the last token or is followed by another
+* option — the same rule `parseArgs` applies for `void deploy`, so `--platform --limit 3`
+* is a missing value, not a value of `--limit`.
+*/
+function readFlagValue(rest, i, flag) {
+	const token = rest[i];
+	if (token.startsWith(`${flag}=`)) return {
+		value: token.slice(flag.length + 1),
+		next: i
+	};
+	const value = rest[i + 1];
+	if (value === void 0 || value.startsWith("-")) return {
+		value: void 0,
+		next: i
+	};
+	return {
+		value,
+		next: i + 1
+	};
+}
+function parseEmailArgs(args) {
+	const subcommand = args[0];
+	if (!subcommand || !EMAIL_SUBCOMMANDS.includes(subcommand)) throw new Error("email: Usage: void email <usage|logs|destinations|allow|disallow|domain|status|setup> [args] [--project <name>] [--limit <n>] [--platform cloudflare].");
+	let limit;
+	const projectValues = [];
+	const platformValues = [];
+	const backendValues = [];
+	const subdomainValues = [];
+	let forceCount = 0;
+	const positional = [];
+	const rest = args.slice(1);
+	for (let i = 0; i < rest.length; i++) if (rest[i] === "--project" || rest[i]?.startsWith("--project=")) {
+		const { value, next } = readFlagValue(rest, i, "--project");
+		if (value === void 0 || value.trim() === "") throw new Error("email: --project requires a value (a project name).");
+		projectValues.push(value);
+		i = next;
+	} else if (rest[i] === "--limit" || rest[i]?.startsWith("--limit=")) {
+		const { value: raw, next } = readFlagValue(rest, i, "--limit");
+		if (raw === void 0) throw new Error("email: --limit requires a value (a positive integer).");
+		const n = parseInt(raw, 10);
+		if (!Number.isFinite(n) || n <= 0) throw new Error(`email: --limit must be a positive integer (got '${raw}').`);
+		limit = n;
+		i = next;
+	} else if (rest[i] === "--platform" || rest[i]?.startsWith("--platform=")) {
+		const { value, next } = readFlagValue(rest, i, "--platform");
+		if (value === void 0) throw new Error("email: --platform requires a value ('cloudflare' or 'void').");
+		platformValues.push(value);
+		i = next;
+	} else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) {
+		const { value, next } = readFlagValue(rest, i, "--backend");
+		if (value === void 0) throw new Error("email: --backend requires a value ('cloudflare').");
+		backendValues.push(value);
+		i = next;
+	} else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) {
+		const { value, next } = readFlagValue(rest, i, "--subdomain");
+		if (value === void 0 || value.trim() === "") throw new Error("email: --subdomain requires a value (a subdomain label or host).");
+		subdomainValues.push(value);
+		i = next;
+	} else if (rest[i] === "--force" || rest[i]?.startsWith("--force=")) {
+		if (rest[i] !== "--force") throw new Error("email: --force takes no value.");
+		forceCount++;
+	} else positional.push(rest[i]);
+	if (forceCount > 1) throw new Error("email: --force can only be specified once.");
+	const force = forceCount > 0 ? true : void 0;
+	if (projectValues.length > 1) throw new Error("email: --project can only be specified once.");
+	const projectSlug = projectValues[0];
+	if (backendValues.length > 1) throw new Error("email: --backend can only be specified once.");
+	if (platformValues.length > 1) throw new Error("email: --platform can only be specified once.");
+	if (platformValues.length > 0 && backendValues.length > 0) throw new Error("email: --platform and --backend cannot be used together.");
+	let platform;
+	const platformValue = platformValues[0];
+	if (platformValue !== void 0) {
+		if (platformValue !== "cloudflare" && platformValue !== "void") throw new Error("email: --platform must be 'cloudflare' or 'void'.");
+		platform = platformValue;
+	}
+	const backendValue = backendValues[0];
+	if (backendValue !== void 0) {
+		if (backendValue !== "cloudflare") throw new Error("email: --backend must be 'cloudflare'.");
+		platform = "cloudflare";
+	}
+	if (subdomainValues.length > 1) throw new Error("email: --subdomain can only be specified once.");
+	const subdomain = subdomainValues[0];
+	if (subcommand === "domain") {
+		if (platform === "cloudflare") throw new Error("email: --platform cloudflare applies to `void email status` and `void email setup` only (`domain` is a Void platform command).");
+		return parseEmailDomainArgs(positional, {
+			projectSlug,
+			limit,
+			platform,
+			subdomain,
+			force
+		});
+	}
+	if (subdomain !== void 0) throw new Error("email: --subdomain applies to `void email domain add` only.");
+	if (force !== void 0) throw new Error("email: --force applies to `void email domain remove` only.");
+	if (positional.length > 1) throw new Error(`email: \`void email ${subcommand}\` takes exactly one positional argument (got ${positional.length}: ${positional.map((p) => JSON.stringify(p)).join(", ")}).`);
+	const address = positional[0];
+	if ((subcommand === "allow" || subcommand === "disallow") && !address) throw new Error(`email: Usage: void email ${subcommand} <address> [--project <name>].`);
+	if (platform === "cloudflare") {
+		if (subcommand !== "status" && subcommand !== "setup") throw new Error(`email: --platform cloudflare applies to \`void email status\` and \`void email setup\` only (\`${subcommand}\` is a Void platform command).`);
+		if (projectSlug !== void 0) throw new Error("email: --project cannot be combined with --platform cloudflare (it reads the local project, not a Void project).");
+		if (address !== void 0) throw new Error(`email: \`void email ${subcommand} --platform cloudflare\` takes no argument.`);
+	}
+	return {
+		subcommand,
+		projectSlug,
+		limit,
+		address,
+		platform
+	};
+}
+/**
+* The nested `void email domain <verb> [<domain>]` group. positional[0] is the
+* verb, positional[1] the domain — `list` takes no domain, every other verb
+* requires exactly one. Shape validation of the domain itself is the command's
+* job (and ultimately the api's — its regex is authoritative); the parser only
+* counts positionals, exactly as it does for `allow <address>`.
+*/
+function parseEmailDomainArgs(positional, flags) {
+	const verb = positional[0];
+	if (!verb || !EMAIL_DOMAIN_VERBS.includes(verb)) throw new Error("email: Usage: void email domain <add|status|list|sync|remove> [<domain>] [--project <name>].");
+	if (flags.subdomain !== void 0 && verb !== "add") throw new Error("email: --subdomain applies to `void email domain add` only.");
+	if (flags.force !== void 0 && verb !== "remove") throw new Error("email: --force applies to `void email domain remove` only.");
+	const domain = positional[1];
+	if (verb === "list") {
+		if (domain !== void 0) throw new Error("email: `void email domain list` takes no domain argument.");
+	} else if (domain === void 0) throw new Error(`email: Usage: void email domain ${verb} <domain> [--project <name>].`);
+	if (positional.length > 2) throw new Error(`email: \`void email domain ${verb}\` takes exactly one domain argument (got ${positional.length - 1}: ${positional.slice(1).map((p) => JSON.stringify(p)).join(", ")}).`);
+	return {
+		subcommand: "domain",
+		domainVerb: verb,
+		domain,
+		subdomain: flags.subdomain,
+		force: flags.force,
+		projectSlug: flags.projectSlug,
+		limit: flags.limit,
+		platform: flags.platform
+	};
+}
+//#endregion
+//#region src/cli/env-args.ts
+const envSubcommands = [{
+	name: "check",
+	description: "Validate local .env or required remote secret names",
+	flags: [{
+		name: "--remote",
+		description: "Also check that required keys exist as remote secrets"
+	}]
+}, {
+	name: "types",
+	description: "Regenerate .void/env.d.ts from env.ts"
+}];
 function parseEnvArgs(args) {
 	const [subcommand, ...rest] = args;
 	if (subcommand === "check") {
@@ -396,20 +695,7 @@ function parseEnvArgs(args) {
 		if (rest.length > 0) throw new Error(`env: Unexpected argument '${rest[0]}'.`);
 		return { subcommand: "types" };
 	}
-	if (subcommand === "example") {
-		const parsed = parseArgs({
-			args: rest,
-			options: { force: { type: "boolean" } },
-			allowPositionals: true,
-			strict: true
-		});
-		if (parsed.positionals.length > 0) throw new Error(`env: Unexpected argument '${parsed.positionals[0]}'.`);
-		return {
-			subcommand: "example",
-			force: !!parsed.values.force
-		};
-	}
-	throw new Error("env: Usage: void env <check|types|example>.");
+	throw new Error("env: Usage: void env <check|types>.");
 }
 //#endregion
 //#region src/cli/gen-args.ts
@@ -854,21 +1140,588 @@ dP   .dP .d8888b. dP .d888b88
 | |/ / /_/ / / /_/ /
 |___/\\____/_/\\__,_/`
 ];
+const OPERATOR_MAX_TIMEOUT_MS = 36e5;
+var OperatorClientError = class extends Error {
+	code;
+	status;
+	details;
+	constructor(message, code = "operator_error", status, details) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.details = details;
+		this.name = "OperatorClientError";
+	}
+	toJSON() {
+		return {
+			error: this.code,
+			message: this.message,
+			...this.status === void 0 ? {} : { status: this.status },
+			...this.details === void 0 ? {} : { details: this.details }
+		};
+	}
+};
+var OperatorClient = class {
+	token;
+	fetcher;
+	origin;
+	constructor(origin, token, fetcher = fetch) {
+		this.token = token;
+		this.fetcher = fetcher;
+		this.origin = normalizePlatformApiUrl(origin);
+	}
+	async request(path, options = {}) {
+		if (!path.startsWith("/") || path.startsWith("//") || path.includes("?") || path.includes("#")) throw new OperatorClientError("Invalid operator API path.");
+		const timeoutMs = options.timeoutMs ?? (options.method === "POST" ? 3e5 : 3e4);
+		if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1e3 || timeoutMs > 36e5) throw new OperatorClientError(`Operator request timeout must be an integer from 1 to ${OPERATOR_MAX_TIMEOUT_MS / 1e3} seconds.`, "invalid_timeout");
+		const url = new URL(`${this.origin}/operator/v1${path}`);
+		for (const [name, value] of Object.entries(options.query ?? {})) url.searchParams.set(name, value);
+		const timeoutController = new AbortController();
+		const timer = setTimeout(() => timeoutController.abort(), timeoutMs);
+		timer.unref();
+		const signal = options.signal ? AbortSignal.any([options.signal, timeoutController.signal]) : timeoutController.signal;
+		try {
+			let response;
+			try {
+				response = await this.fetcher(url, {
+					method: options.method ?? "GET",
+					headers: {
+						...cfAccessHeaders(process.env, this.origin),
+						Authorization: `Bearer ${this.token}`,
+						Accept: "application/json",
+						...options.body ? { "Content-Type": "application/json" } : {}
+					},
+					...options.body ? { body: JSON.stringify(options.body) } : {},
+					redirect: "manual",
+					signal
+				});
+			} catch (error) {
+				if (options.signal?.aborted) throw error;
+				if (timeoutController.signal.aborted) throw new OperatorClientError(`Operator request exceeded the ${timeoutMs / 1e3}-second timeout. ${options.method === "POST" ? "Its outcome may be unknown; inspect platform state before retrying." : "Check connectivity and try again."}`, "request_timeout");
+				throw new OperatorClientError(`Operator request to ${this.origin} failed. ${options.method === "POST" ? "Its outcome may be unknown; inspect platform state before retrying." : "Check connectivity and try again."}`, "connection_failed");
+			}
+			if (response.status >= 300 && response.status < 400) throw new OperatorClientError("The operator API redirected the request. Credentials were not forwarded; use the exact platform API origin.", "redirect_rejected", response.status);
+			let data;
+			try {
+				data = await response.json();
+			} catch {
+				throw new OperatorClientError(`Operator API returned invalid JSON (HTTP ${response.status}).${options.method === "POST" ? " Inspect platform state before retrying." : ""}`, "invalid_response", response.status);
+			}
+			if (!data || typeof data !== "object" || Array.isArray(data)) throw new OperatorClientError("Operator API returned an invalid response object.", "invalid_response", response.status);
+			const result = data;
+			if (!response.ok) throw new OperatorClientError(typeof result.message === "string" ? result.message : `Operator request failed (HTTP ${response.status}).`, typeof result.error === "string" ? result.error : "request_failed", response.status, result.details);
+			if (result.partial === true || result.ok === false) throw new OperatorClientError("The operation did not fully complete. Inspect the partial result before retrying.", "partial_failure", response.status, result);
+			return result;
+		} finally {
+			clearTimeout(timer);
+		}
+	}
+};
+//#endregion
+//#region src/cli/operator-args.ts
+const operatorCommands = [
+	{
+		group: "auth",
+		action: "login",
+		description: "Sign in as a platform administrator",
+		path: "/session",
+		values: { provider: "OAuth provider" },
+		booleans: ["token-stdin"]
+	},
+	{
+		group: "auth",
+		action: "logout",
+		description: "Revoke the current operator session and remove its local credential",
+		path: "/session/logout"
+	},
+	{
+		group: "auth",
+		action: "status",
+		description: "Inspect operator identity, expiry, and capabilities",
+		path: "/session"
+	},
+	{
+		group: "auth",
+		action: "token",
+		description: "Print an operator token; exchange an API session with --token-stdin",
+		path: "/session",
+		booleans: ["token-stdin"]
+	},
+	{
+		group: "user",
+		action: "list",
+		description: "List users",
+		path: "/users",
+		values: { search: "Search login or email" }
+	},
+	{
+		group: "user",
+		action: "show",
+		description: "Inspect a user, usage, and projects",
+		path: "/users/:id",
+		positional: ["id"]
+	},
+	{
+		group: "user",
+		action: "plan",
+		description: "Change a user plan",
+		path: "/users/:id/plan",
+		positional: ["id", "plan"],
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "suspend",
+		description: "Suspend a user and their projects",
+		path: "/users/:id/suspend",
+		positional: ["id"],
+		values: { reason: "Reason for suspension" },
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "restore",
+		description: "Restore a suspended user",
+		path: "/users/:id/restore",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "delete",
+		description: "Delete a user and all owned resources",
+		path: "/users/:id/delete",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "project",
+		action: "list",
+		description: "List tenant projects",
+		path: "/projects",
+		values: {
+			user: "Owner user ID",
+			search: "Search projects"
+		}
+	},
+	{
+		group: "project",
+		action: "show",
+		description: "Inspect a project and its resources",
+		path: "/projects/:id",
+		positional: ["id"]
+	},
+	{
+		group: "project",
+		action: "delete",
+		description: "Delete a project and its resources",
+		path: "/projects/:id/delete",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "deployment",
+		action: "list",
+		description: "List tenant deployments",
+		path: "/deployments",
+		values: {
+			project: "Project ID",
+			search: "Search deployments",
+			status: "Deployment status"
+		}
+	},
+	{
+		group: "deployment",
+		action: "show",
+		description: "Inspect a deployment",
+		path: "/deployments/:id",
+		positional: ["id"]
+	},
+	{
+		group: "deployment",
+		action: "cancel",
+		description: "Cancel a deployment",
+		path: "/deployments/:id/cancel",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "deployment",
+		action: "logs",
+		description: "Read runtime logs (JSON follow emits one object per line)",
+		path: "/deployments/:id/logs",
+		positional: ["id"],
+		values: {
+			since: "Duration or ISO timestamp",
+			cursor: "Opaque continuation cursor"
+		},
+		booleans: ["follow"]
+	},
+	{
+		group: "build",
+		action: "show",
+		description: "Inspect a managed build",
+		path: "/builds/:id",
+		positional: ["id"]
+	},
+	{
+		group: "build",
+		action: "logs",
+		description: "Read build logs (JSON follow emits one object per line)",
+		path: "/builds/:id/logs",
+		positional: ["id"],
+		values: { since: "Last received sequence number" },
+		booleans: ["follow"]
+	},
+	{
+		group: "signup",
+		action: "show",
+		description: "Inspect signup restrictions and allowlist",
+		path: "/signup"
+	},
+	{
+		group: "signup",
+		action: "restrict",
+		description: "Restrict signup to the allowlist",
+		path: "/signup/restrict",
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "open",
+		description: "Open public signup",
+		path: "/signup/open",
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "allow",
+		description: "Add a github or email allowlist pattern",
+		path: "/signup/allow",
+		positional: ["type", "pattern"],
+		values: { note: "Allowlist note" },
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "remove",
+		description: "Remove a github or email allowlist pattern",
+		path: "/signup/remove",
+		positional: ["type", "pattern"],
+		method: "POST"
+	},
+	{
+		group: "invitation",
+		action: "list",
+		description: "List invitations",
+		path: "/invitations"
+	},
+	{
+		group: "invitation",
+		action: "send",
+		description: "Send invitations to comma-separated email addresses",
+		path: "/invitations/send",
+		positional: ["emails"],
+		method: "POST"
+	},
+	{
+		group: "invitation",
+		action: "revoke",
+		description: "Revoke an invitation",
+		path: "/invitations/:id/revoke",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "system",
+		action: "overview",
+		description: "Inspect platform usage and capacity",
+		path: "/system/overview"
+	},
+	{
+		group: "system",
+		action: "health",
+		description: "Check platform health",
+		path: "/system/health"
+	},
+	{
+		group: "system",
+		action: "cli-versions",
+		description: "Inspect CLI version adoption and deployment statistics",
+		path: "/system/cli-versions"
+	},
+	{
+		group: "system",
+		action: "events",
+		description: "List operator audit events",
+		path: "/system/events"
+	},
+	{
+		group: "system",
+		action: "backfill-queue-tokens",
+		description: "Repair missing queue authentication tokens",
+		path: "/system/backfill-queue-tokens",
+		method: "POST"
+	},
+	{
+		group: "system",
+		action: "sandbox-drain",
+		description: "Drain and verify managed Sandbox container applications",
+		path: "/system/sandbox-drain",
+		values: { cursor: "Opaque cursor returned by --plan" },
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "list",
+		description: "List hosted platform workers",
+		path: "/workers",
+		values: { environment: "production or staging" }
+	},
+	{
+		group: "worker",
+		action: "show",
+		description: "Inspect hosted worker versions",
+		path: "/workers/:id",
+		positional: ["id"],
+		values: { environment: "production or staging" }
+	},
+	{
+		group: "worker",
+		action: "rollback",
+		description: "Roll back a hosted worker to a version",
+		path: "/workers/:id/rollback",
+		positional: ["id", "versionId"],
+		values: { environment: "production or staging" },
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "rollback-all",
+		description: "Roll back all hosted workers to their previous versions",
+		path: "/workers/rollback-all",
+		values: { environment: "production or staging" },
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "events",
+		description: "List hosted worker events or inspect a batch",
+		path: "/workers/events",
+		positional: ["batchId"],
+		optionalPositional: true,
+		values: { environment: "production or staging" }
+	}
+];
+const operatorGroups = [...new Set(operatorCommands.map(({ group }) => group))];
+function parseOperatorArgs(args) {
+	const positional = [];
+	const values = {};
+	const flags = /* @__PURE__ */ new Set();
+	const booleanFlags = /* @__PURE__ */ new Set([
+		"json",
+		"plan",
+		"yes",
+		"follow",
+		"token-stdin"
+	]);
+	for (let index = 0; index < args.length; index++) {
+		const arg = args[index];
+		if (!arg.startsWith("-")) {
+			positional.push(arg);
+			continue;
+		}
+		if (!arg.startsWith("--")) throw new Error(`platform: Unknown flag '${arg}'.`);
+		const flag = arg.slice(2);
+		if (flags.has(flag) || Object.hasOwn(values, flag)) throw new Error(`platform: Duplicate flag '${arg}'.`);
+		if (booleanFlags.has(flag)) flags.add(flag);
+		else {
+			const value = args[++index];
+			if (!value || value.startsWith("-")) throw new Error(`platform: ${arg} requires a value.`);
+			values[flag] = value;
+		}
+	}
+	const [group = "", action = "", ...parameters] = positional;
+	if (!operatorGroups.includes(group)) throw new Error("platform: Unknown operator command group.");
+	const parsed = {
+		subcommand: "operator",
+		group,
+		action,
+		connection: values.connection ?? "",
+		json: flags.has("json"),
+		plan: flags.has("plan"),
+		yes: flags.has("yes"),
+		follow: flags.has("follow"),
+		tokenStdin: flags.has("token-stdin"),
+		provider: values.provider ?? "github",
+		method: "GET",
+		path: "",
+		query: {},
+		body: {}
+	};
+	if (!action && args.length === 1) return parsed;
+	const command = operatorCommands.find((entry) => entry.group === group && entry.action === action);
+	if (!command) throw new Error(`platform: Usage: void platform ${group} <${operatorCommands.filter((entry) => entry.group === group).map(({ action }) => action).join("|")}>.`);
+	const count = command.positional?.length ?? 0;
+	if (parameters.length > count || !command.optionalPositional && parameters.length !== count) throw new Error(`platform: Usage: void platform ${group} ${action}${command.positional?.map((name) => ` <${name}>`).join("") ?? ""}.`);
+	const paged = action === "list" || action === "events" || action === "logs";
+	const allowed = /* @__PURE__ */ new Set([
+		"connection",
+		...command.method ? ["timeout"] : [],
+		...Object.keys(command.values ?? {}),
+		...paged ? ["limit", ...action !== "logs" ? ["page"] : []] : []
+	]);
+	for (const name of Object.keys(values)) if (!allowed.has(name)) throw new Error(`platform: Unknown flag '--${name}' for ${group} ${action}.`);
+	for (const name of flags) if (![
+		"json",
+		...command.method ? ["yes", "plan"] : [],
+		...command.booleans ?? []
+	].includes(name)) throw new Error(`platform: Unknown flag '--${name}' for ${group} ${action}.`);
+	if (parsed.plan && parsed.yes) throw new Error("platform: --plan and --yes cannot be combined.");
+	parsed.path = command.path;
+	parsed.method = command.method ?? "GET";
+	for (const [index, name] of (command.positional ?? []).entries()) {
+		const value = parameters[index];
+		if (value === void 0) continue;
+		if (value === "." || value === "..") throw new Error("platform: An object ID cannot be a dot path segment.");
+		if (parsed.path.includes(`:${name}`)) parsed.path = parsed.path.replace(`:${name}`, encodeURIComponent(value));
+		else if (group === "worker" && action === "events") parsed.path += `/${encodeURIComponent(value)}`;
+		else parsed.body[name] = name === "emails" ? value.split(",").map((email) => email.trim()) : value;
+	}
+	for (const [name, value] of Object.entries(values)) {
+		if (name === "connection" || name === "provider") continue;
+		if (name === "timeout") {
+			const maximum = OPERATOR_MAX_TIMEOUT_MS / 1e3;
+			if (!/^[1-9]\d*$/.test(value) || Number(value) > maximum) throw new Error(`platform: --timeout must be an integer from 1 to ${maximum} seconds.`);
+			parsed.timeoutMs = Number(value) * 1e3;
+			continue;
+		}
+		if (name === "page" || name === "limit") {
+			const maximum = name === "limit" ? action === "logs" ? 500 : 100 : 1e6;
+			if (!/^[1-9]\d*$/.test(value) || Number(value) > maximum) throw new Error(`platform: --${name} must be an integer from 1 to ${maximum}.`);
+		}
+		if (name === "since" && group === "build" && (!/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)))) throw new Error("platform: --since must be a nonnegative safe integer for build logs.");
+		if (name === "environment" && !["production", "staging"].includes(value)) throw new Error("platform: --environment must be production or staging.");
+		if (parsed.method === "POST") parsed.body[name] = value;
+		else parsed.query[name] = value;
+	}
+	if (parsed.body.type && !["github", "email"].includes(String(parsed.body.type))) throw new Error("platform: Signup pattern type must be github or email.");
+	return parsed;
+}
 //#endregion
 //#region src/cli/help.ts
+var help_exports = /* @__PURE__ */ __exportAll({
+	getHelpPath: () => getHelpPath,
+	printGlobalHelp: () => printGlobalHelp,
+	printHelpPage: () => printHelpPage,
+	printVoidHeader: () => printVoidHeader
+});
+function operatorHelpTree() {
+	return Object.fromEntries(operatorGroups.map((group) => {
+		const commands = operatorCommands.filter((entry) => entry.group === group);
+		return [group, {
+			summary: `Administer platform ${group}. Operator credentials are separate from deployment credentials.`,
+			usage: [`void platform ${group} <command> [options]`],
+			commands: commands.map((entry) => ({
+				command: entry.action,
+				description: entry.description
+			})),
+			children: Object.fromEntries(commands.map((entry) => [entry.action, {
+				summary: `${entry.description}.`,
+				usage: [`void platform ${group} ${entry.action}${entry.positional?.map((name) => entry.optionalPositional ? ` [${name}]` : ` <${name}>`).join("") ?? ""} [options]`],
+				options: [
+					{
+						command: "--connection <id-or-url>",
+						description: "Choose a registered connection; otherwise use VOID_API_URL or the active connection"
+					},
+					{
+						command: "--json",
+						description: "Write structured JSON to stdout (JSON Lines while following logs)"
+					},
+					...entry.method ? [
+						{
+							command: "--plan",
+							description: "Validate and preview without changing anything"
+						},
+						{
+							command: "--yes",
+							description: "Apply after preview without prompting; required in unattended scripts"
+						},
+						{
+							command: "--timeout <seconds>",
+							description: "Mutation deadline (default 300 seconds; maximum 3600 seconds)"
+						}
+					] : [],
+					...[
+						"list",
+						"events",
+						"logs"
+					].includes(entry.action) ? [{
+						command: "--limit <number>",
+						description: entry.action === "logs" ? "Maximum 500 log records" : "Maximum 100 records per page"
+					}, ...entry.action !== "logs" ? [{
+						command: "--page <number>",
+						description: "One-based page number"
+					}] : []] : [],
+					...Object.entries(entry.values ?? {}).map(([flag, description]) => ({
+						command: `--${flag} <value>`,
+						description
+					})),
+					...(entry.booleans ?? []).map((flag) => ({
+						command: `--${flag}`,
+						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : "Read a full API session from stdin for explicit operator session exchange"
+					}))
+				]
+			}]))
+		}];
+	}));
+}
 const HELP_TREE = {
+	connect: {
+		summary: "Connect this project to Cloudflare or an existing Void platform.",
+		usage: ["void connect [url] [--platform <cloudflare|void>] [--no-login]"],
+		options: [{
+			command: "--platform <cloudflare|void>",
+			description: "Choose the deployment destination"
+		}, {
+			command: "--no-login",
+			description: "Save a Void connection without authenticating"
+		}],
+		examples: [
+			{
+				command: "void connect",
+				description: "Choose a destination and sign in"
+			},
+			{
+				command: "void connect https://platform.example.com",
+				description: "Join a Void platform"
+			},
+			{
+				command: "void connect --platform cloudflare",
+				description: "Sign in and select a Cloudflare account"
+			}
+		]
+	},
 	init: {
 		summary: "Set up Void in a new or existing project.",
 		usage: ["void init [options]"],
 		options: [
 			{
 				command: "--agents",
-				description: "Set up agent instructions, skills, and MCP config"
+				description: "Set up agent instructions and skills"
 			},
 			{
 				command: "--tsconfig",
 				description: "Only update tsconfig.json"
 			},
+			{
+				command: "--git",
+				description: "Initialize a Git repository without prompting"
+			},
+			{
+				command: "--no-git",
+				description: "Skip Git repository initialization"
+			},
 			{
 				command: "--github",
 				description: "Only create the GitHub Actions deploy workflow (OIDC, no stored token)"
@@ -881,7 +1734,7 @@ const HELP_TREE = {
 			},
 			{
 				command: "void init --agents",
-				description: "Install agent instructions and MCP config"
+				description: "Install agent instructions and skills"
 			},
 			{
 				command: "void init --github",
@@ -890,7 +1743,7 @@ const HELP_TREE = {
 		]
 	},
 	deploy: {
-		summary: "Build and deploy the current project to Void.",
+		summary: "Build and deploy. Offers to link an existing Cloudflare Worker when no destination is configured.",
 		usage: ["void deploy [options]"],
 		options: [
 			{
@@ -907,15 +1760,15 @@ const HELP_TREE = {
 			},
 			{
 				command: "--skip-build",
-				description: "Skip the build step and use existing output (not with --backend cloudflare)"
+				description: "Skip the build step and use existing output (static deploys on Cloudflare)"
 			},
 			{
-				command: "--backend cloudflare",
-				description: "Deploy to your own Cloudflare account instead of the Void platform"
+				command: "--platform <cloudflare|void>",
+				description: "Override the platform saved by void init"
 			},
 			{
-				command: "--provision",
-				description: "Create missing D1/KV/R2/Queue/Hyperdrive resources (with --backend cloudflare)"
+				command: "--require-email",
+				description: "Fail instead of deploying without email when the mail domain is not set up (with --platform cloudflare)"
 			},
 			{
 				command: "--debug",
@@ -936,12 +1789,8 @@ const HELP_TREE = {
 				description: "Deploy a static SPA directory"
 			},
 			{
-				command: "void deploy --backend cloudflare",
+				command: "void deploy --platform cloudflare",
 				description: "Deploy to your own Cloudflare account"
-			},
-			{
-				command: "void deploy --backend cloudflare --provision",
-				description: "Provision missing resources, then deploy to Cloudflare"
 			}
 		]
 	},
@@ -957,20 +1806,250 @@ const HELP_TREE = {
 				command: "logout",
 				description: "Log out and remove credentials"
 			},
-			{
-				command: "whoami",
-				description: "Show the logged-in username"
+			{
+				command: "whoami",
+				description: "Show the logged-in username"
+			},
+			{
+				command: "token",
+				description: "Copy auth token to clipboard"
+			}
+		],
+		children: {
+			login: basicSubcommand("Log in with GitHub or Google.", "void auth login"),
+			logout: basicSubcommand("Log out and remove credentials.", "void auth logout"),
+			whoami: basicSubcommand("Show the logged-in username.", "void auth whoami"),
+			token: basicSubcommand("Copy auth token to clipboard.", "void auth token")
+		}
+	},
+	cloudflare: {
+		summary: "Manage Cloudflare authentication used by Void.",
+		usage: ["void cloudflare <command>"],
+		commands: [
+			{
+				command: "login",
+				description: "Sign in or switch users with browser OAuth"
+			},
+			{
+				command: "status",
+				description: "Show identity, authentication, and the deployment account"
+			},
+			{
+				command: "logout",
+				description: "Remove the local browser session"
+			}
+		],
+		children: {
+			login: basicSubcommand("Sign in again or switch Cloudflare users with browser OAuth.", "void cloudflare login"),
+			status: basicSubcommand("Show Cloudflare identity, authentication, accessible accounts, and the pinned deployment account.", "void cloudflare status"),
+			logout: basicSubcommand("Remove the local browser session.", "void cloudflare logout")
+		}
+	},
+	platform: {
+		summary: "Install Void platforms and administer users, projects, access, and operations. Use `void connect` to join one.",
+		usage: ["void platform <command>"],
+		commands: [
+			...operatorGroups.map((group) => ({
+				command: `${group} <command>`,
+				description: `Administer platform ${group}`
+			})),
+			{
+				command: "list",
+				description: "List installed and connected platforms"
+			},
+			{
+				command: "use [id]",
+				description: "Select the default Void platform"
+			},
+			{
+				command: "status [id]",
+				description: "Inspect a platform and its health"
+			},
+			{
+				command: "discover",
+				description: "Recover installations from a Cloudflare account"
+			},
+			{
+				command: "domain set <domain>",
+				description: "Add an application domain to a test platform"
+			},
+			{
+				command: "install",
+				description: "Install a Void platform in Cloudflare"
+			},
+			{
+				command: "upgrade [id]",
+				description: "Upgrade an installed Void platform"
+			},
+			{
+				command: "rollback [id]",
+				description: "Restore a compatible earlier platform runtime"
+			},
+			{
+				command: "repair [id]",
+				description: "Reconcile an installed Void platform"
+			},
+			{
+				command: "disable [id]",
+				description: "Disable traffic without deleting data"
+			},
+			{
+				command: "enable [id]",
+				description: "Restore traffic for a disabled platform"
+			},
+			{
+				command: "uninstall [id]",
+				description: "Safely remove an installed Void platform"
+			}
+		],
+		children: {
+			...operatorHelpTree(),
+			domain: {
+				summary: "Add an application domain while keeping existing workers.dev URLs.",
+				usage: ["void platform domain set <domain> [options]"],
+				children: { set: {
+					summary: "Set up DNS and verify HTTPS before making an application domain canonical. Rerun to resume.",
+					usage: ["void platform domain set <domain> [options]"],
+					options: [
+						{
+							command: "--installation <id>",
+							description: "Choose an installed platform; otherwise select interactively"
+						},
+						{
+							command: "--zone <domain>",
+							description: "Containing Cloudflare zone; detected when it already exists"
+						},
+						{
+							command: "--dedicated-zone",
+							description: "Add catch-all routes for a zone dedicated to this platform"
+						},
+						{
+							command: "--plan",
+							description: "Preview without making changes"
+						},
+						{
+							command: "--yes",
+							description: "Apply without an interactive confirmation"
+						}
+					]
+				} }
+			},
+			list: basicSubcommand("List installed and connected platforms.", "void platform list"),
+			use: basicSubcommand("Select the default Void platform.", "void platform use [id]"),
+			status: basicSubcommand("Inspect a platform and its health.", "void platform status [id]"),
+			discover: {
+				summary: "Recover owned platform installations from Cloudflare.",
+				usage: ["void platform discover [--account <id>] [--installation <id-or-name>]"],
+				options: [{
+					command: "--account <id>",
+					description: "Cloudflare account id"
+				}, {
+					command: "--installation <id-or-name>",
+					description: "Recover only one installation from a shared account"
+				}]
+			},
+			install: {
+				summary: "Install or resume a Void platform with a domain, or workers.dev for testing.",
+				usage: ["void platform install [options]"],
+				options: [
+					{
+						command: "--name <slug>",
+						description: "Installation name"
+					},
+					{
+						command: "--workers-dev",
+						description: "Use workers.dev for testing; add a domain later"
+					},
+					{
+						command: "--display-name <name>",
+						description: "Human-readable platform name"
+					},
+					{
+						command: "--account <id>",
+						description: "Cloudflare account id"
+					},
+					{
+						command: "--application-domain <domain>",
+						description: "Base domain for applications (zone apex is simplest)"
+					},
+					{
+						command: "--zone <domain>",
+						description: "Cloudflare zone containing the app domain"
+					},
+					{
+						command: "--dedicated-zone",
+						description: "Allow zone-wide application catch-all routes"
+					},
+					{
+						command: "--control-plane-domain <domain>",
+						description: "Optional API hostname"
+					},
+					{
+						command: "--plan",
+						description: "Print the exact plan without changing Cloudflare"
+					},
+					{
+						command: "--resume",
+						description: "Resume the matching local installation"
+					},
+					{
+						command: "--runtime <path>",
+						description: "Deploy an integrity-checked runtime directory instead of the package"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge changes without an interactive prompt"
+					}
+				]
+			},
+			upgrade: lifecycleHelp("upgrade", "Upgrade an installed platform without deleting resources."),
+			rollback: {
+				summary: "Restore a compatible earlier runtime without reversing database migrations.",
+				usage: ["void platform rollback [id] --runtime <earlier-path> [--from-runtime <current-path>] [--plan] [--yes]"],
+				options: [
+					{
+						command: "--runtime <path>",
+						description: "Earlier compatible runtime to restore"
+					},
+					{
+						command: "--from-runtime <path>",
+						description: "Current installed runtime when it differs from the packaged runtime"
+					},
+					{
+						command: "--plan",
+						description: "Print the exact plan without making changes"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge non-interactive Cloudflare changes"
+					}
+				]
 			},
-			{
-				command: "token",
-				description: "Copy auth token to clipboard"
+			repair: lifecycleHelp("repair", "Reconcile drift using the installation ownership manifest."),
+			disable: lifecycleHelp("disable", "Disable platform traffic without deleting data."),
+			enable: lifecycleHelp("enable", "Restore configured traffic for a disabled platform."),
+			uninstall: {
+				summary: "Safely remove installer-owned platform resources.",
+				usage: ["void platform uninstall [id] [options]"],
+				options: [
+					{
+						command: "--plan",
+						description: "Print the exact deletion and retention plan"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge changes without an interactive prompt"
+					},
+					{
+						command: "--purge-data",
+						description: "Delete installer-owned data even when it contains apps"
+					},
+					{
+						command: "--keep-zone",
+						description: "Explicitly retain an installer-created zone"
+					}
+				]
 			}
-		],
-		children: {
-			login: basicSubcommand("Log in with GitHub or Google.", "void auth login"),
-			logout: basicSubcommand("Log out and remove credentials.", "void auth logout"),
-			whoami: basicSubcommand("Show the logged-in username.", "void auth whoami"),
-			token: basicSubcommand("Copy auth token to clipboard.", "void auth token")
 		}
 	},
 	project: {
@@ -1162,6 +2241,137 @@ const HELP_TREE = {
 			}
 		}
 	},
+	email: {
+		summary: "Inspect email activity, manage verified recipients, and send and receive at your own domain.",
+		usage: ["void email <command>"],
+		commands: [
+			{
+				command: "usage",
+				description: "Show monthly outbound/inbound counts and quota"
+			},
+			{
+				command: "logs",
+				description: "Show recent email delivery activity"
+			},
+			{
+				command: "destinations",
+				description: "List verified recipient addresses"
+			},
+			{
+				command: "allow <address>",
+				description: "Add a recipient and trigger CF verification"
+			},
+			{
+				command: "disallow <address>",
+				description: "Remove a recipient from the allowlist"
+			},
+			{
+				command: "domain <add|status|list|sync|remove>",
+				description: "Send and receive at your own domain on a Cloudflare zone"
+			},
+			{
+				command: "status --platform cloudflare",
+				description: "Show the email setup state and address map on your own account"
+			},
+			{
+				command: "setup --platform cloudflare",
+				description: "Set email up on your own Cloudflare account (one confirmation)"
+			}
+		],
+		children: {
+			usage: withProjectOption("Show monthly outbound/inbound counts and quota.", "void email usage [options]"),
+			logs: {
+				summary: "Show recent email delivery activity.",
+				usage: ["void email logs [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}, {
+					command: "--limit <n>",
+					description: "How many entries to show (positive integer)"
+				}]
+			},
+			destinations: withProjectOption("List verified recipient addresses.", "void email destinations [options]"),
+			allow: withProjectOption("Add a recipient and trigger a Cloudflare verification email.", "void email allow <address> [options]"),
+			disallow: withProjectOption("Remove a recipient from the verified allowlist.", "void email disallow <address> [options]"),
+			domain: {
+				summary: "Send and receive at your own domain on a Cloudflare zone.",
+				usage: ["void email domain <verb> [<domain>] [options]"],
+				commands: [
+					{
+						command: "add <domain>",
+						description: "Register the domain (OAuth grant, or a scoped API token)"
+					},
+					{
+						command: "status <domain>",
+						description: "Show state; re-probes the credential and relay, polls a pending row"
+					},
+					{
+						command: "list",
+						description: "List registered email domains"
+					},
+					{
+						command: "sync <domain>",
+						description: "Redeploy the relay at the current version and rotate its secret"
+					},
+					{
+						command: "remove <domain>",
+						description: "Delete the registration, stored credential, and relay secret"
+					}
+				],
+				options: [{
+					command: "--subdomain <label|host>",
+					description: "On add: register this subdomain instead of the proposed mail.<domain>"
+				}, {
+					command: "--project <name>",
+					description: "Project name override"
+				}],
+				children: {
+					add: {
+						summary: "Register a domain on a Cloudflare zone you own for sending and receiving. Proposes mail.<domain> when the apex already carries MX.",
+						usage: ["void email domain add <domain> [options]"],
+						options: [{
+							command: "--subdomain <label|host>",
+							description: "Register this subdomain instead of the proposed mail.<domain>"
+						}, {
+							command: "--project <name>",
+							description: "Project name override"
+						}]
+					},
+					status: withProjectOption("Show a registered domain, re-probing its credential and relay.", "void email domain status <domain> [options]"),
+					list: withProjectOption("List registered email domains.", "void email domain list [options]"),
+					sync: withProjectOption("Redeploy the relay at the current version and rotate its secret.", "void email domain sync <domain> [options]"),
+					remove: {
+						summary: "Delete the registration, stored credential, and relay secret.",
+						usage: ["void email domain remove <domain> [options]"],
+						options: [{
+							command: "--force",
+							description: "Drop the row even when Cloudflare-side cleanup fails"
+						}, {
+							command: "--project <name>",
+							description: "Project name override"
+						}]
+					}
+				}
+			},
+			status: {
+				summary: "Show the email setup state and address map. Exit 1 when not ready.",
+				usage: ["void email status --platform cloudflare"],
+				options: [{
+					command: "--platform cloudflare",
+					description: "Your own Cloudflare account (the only platform with a status today)"
+				}]
+			},
+			setup: {
+				summary: "Set email up on your own Cloudflare account: enable Email Routing, onboard Email Sending, write send_email + addresses into wrangler.jsonc. Asks once before changing the account.",
+				usage: ["void email setup --platform cloudflare"],
+				options: [{
+					command: "--platform cloudflare",
+					description: "Your own Cloudflare account (required; the Void platform needs no setup)"
+				}]
+			}
+		}
+	},
 	github: {
 		summary: "Connect a GitHub repository for automatic deploys.",
 		usage: ["void github <command>"],
@@ -1392,9 +2602,13 @@ const HELP_TREE = {
 				command: "export",
 				description: "Export local database as SQL"
 			},
+			{
+				command: "connect",
+				description: "Connect or provision an external database"
+			},
 			{
 				command: "set-url",
-				description: "Update the PostgreSQL connection string"
+				description: "Update the external database URL"
 			},
 			{
 				command: "rename-migrations",
@@ -1484,45 +2698,59 @@ const HELP_TREE = {
 					}
 				]
 			},
-			"set-url": basicSubcommand("Update the PostgreSQL connection string for deployment.", "void db set-url"),
+			connect: {
+				summary: "Connect or provision an external PostgreSQL/MySQL database.",
+				usage: ["void db connect [connection-string]", "void db connect --provider <name-or-module> [options]"],
+				options: [
+					{
+						command: "--provider <name-or-module>",
+						description: "Provision with an adapter"
+					},
+					{
+						command: "--name <name>",
+						description: "Provider project/database name"
+					},
+					{
+						command: "--region <region>",
+						description: "Provider region identifier"
+					},
+					{
+						command: "--local-only",
+						description: "Do not sync a linked Void project"
+					}
+				],
+				examples: [{
+					command: "void db connect \"postgresql://user:pass@host/db\"",
+					description: "Connect an existing database"
+				}, {
+					command: "void db connect --provider neon --name my-app",
+					description: "Provision a Neon database using NEON_API_KEY"
+				}]
+			},
+			"set-url": basicSubcommand("Update the external database connection string for deployment.", "void db set-url"),
 			"rename-migrations": basicSubcommand("Rename migrations to timestamp-based format.", "void db rename-migrations")
 		}
 	},
 	env: {
-		summary: "Validate env.ts and generate environment artifacts.",
+		summary: "Validate env.ts and generate environment types.",
 		usage: ["void env <command>"],
-		commands: [
-			{
-				command: "check",
-				description: "Validate env.ts against .env files"
-			},
-			{
-				command: "types",
-				description: "Regenerate .void/env.d.ts from env.ts"
-			},
-			{
-				command: "example",
-				description: "Generate .env.example from env.ts schema"
-			}
-		],
+		commands: [{
+			command: "check",
+			description: "Validate local .env or remote secret names"
+		}, {
+			command: "types",
+			description: "Regenerate .void/env.d.ts from env.ts"
+		}],
 		children: {
 			check: {
-				summary: "Validate env.ts against .env files and optionally remote secrets.",
+				summary: "Validate local .env or required remote secret names.",
 				usage: ["void env check [options]"],
 				options: [{
 					command: "--remote",
-					description: "Also check required keys as remote secrets"
+					description: "Check required server keys as remote secrets"
 				}]
 			},
-			types: basicSubcommand("Regenerate .void/env.d.ts from env.ts.", "void env types"),
-			example: {
-				summary: "Refresh the Void-managed block in .env.example.",
-				usage: ["void env example [options]"],
-				options: [{
-					command: "--force",
-					description: "Suppress the appended block notice"
-				}]
-			}
+			types: basicSubcommand("Regenerate .void/env.d.ts from env.ts.", "void env types")
 		}
 	},
 	gen: {
@@ -1614,10 +2842,6 @@ const HELP_TREE = {
 			command: "void prepare",
 			description: "Refresh generated project types"
 		}]
-	},
-	mcp: {
-		summary: "Start the Void MCP server over stdio for AI agents.",
-		usage: ["void mcp"]
 	}
 };
 function basicSubcommand(summary, usage, example) {
@@ -1640,17 +2864,42 @@ function withProjectOption(summary, usage) {
 		}]
 	};
 }
+function lifecycleHelp(command, summary) {
+	return {
+		summary,
+		usage: [`void platform ${command} [id] [--plan]${command === "disable" ? "" : " [--runtime <path>]"} [--yes]`],
+		options: [
+			{
+				command: "--plan",
+				description: "Print the exact plan without making changes"
+			},
+			...command === "disable" ? [] : [{
+				command: "--runtime <path>",
+				description: "Deploy an integrity-checked runtime directory instead of the package"
+			}],
+			{
+				command: "--yes",
+				description: "Acknowledge non-interactive Cloudflare changes"
+			}
+		]
+	};
+}
 function printGlobalHelp() {
 	printVoidHeader();
 	note([
 		globalCommandLine(["init"], "void init"),
 		...globalOptionLines(["init"]),
 		"",
+		globalCommandLine(["connect"], "void connect [url]"),
+		...globalOptionLines(["connect"]),
+		"",
 		globalCommandLine(["deploy"], "void deploy"),
 		...globalOptionLines(["deploy"]),
 		"",
 		...globalCommandGroup("auth"),
 		"",
+		...globalCommandGroup("platform"),
+		"",
 		...globalCommandGroup("project"),
 		"",
 		categoryTitle("secrets"),
@@ -1658,6 +2907,8 @@ function printGlobalHelp() {
 		"",
 		...globalCommandGroup("domain"),
 		"",
+		...globalCommandGroup("email"),
+		"",
 		...globalCommandGroup("github"),
 		"",
 		...globalCommandGroup("build"),
@@ -1673,7 +2924,6 @@ function printGlobalHelp() {
 		"",
 		...globalCommandGroup("env"),
 		...globalOptionLines(["env", "check"]),
-		...globalOptionLines(["env", "example"]),
 		"",
 		categoryTitle("codegen"),
 		globalCommandLine(["prepare"], "void prepare"),
@@ -1681,7 +2931,6 @@ function printGlobalHelp() {
 		"",
 		categoryTitle("agent"),
 		helpLine("void init --agents", requiredOption(["init"], "--agents").description),
-		globalCommandLine(["mcp"], "void mcp"),
 		"",
 		categoryTitle("help"),
 		helpLine("void help <command>", "Show command-specific help"),
@@ -1781,6 +3030,287 @@ function formatHelpPath(path) {
 	return path.length === 0 ? "help" : path.join(" ");
 }
 //#endregion
+//#region src/cli/platform-args.ts
+const platformSubcommands = [
+	...operatorGroups.map((name) => ({
+		name,
+		hint: "Operator commands",
+		description: `Administer platform ${name}`
+	})),
+	{
+		name: "list",
+		description: "List installed and connected platforms"
+	},
+	{
+		name: "use",
+		arg: "[id]",
+		description: "Select the default Void platform"
+	},
+	{
+		name: "status",
+		arg: "[id]",
+		description: "Inspect a platform and its health"
+	},
+	{
+		name: "discover",
+		description: "Recover installations from a Cloudflare account"
+	},
+	{
+		name: "domain",
+		hint: "Set an application domain",
+		description: "Add a domain to a workers.dev test platform"
+	},
+	{
+		name: "install",
+		description: "Install a Void platform with a domain or workers.dev for testing"
+	},
+	{
+		name: "upgrade",
+		arg: "[id]",
+		description: "Upgrade an installed Void platform"
+	},
+	{
+		name: "rollback",
+		arg: "[id]",
+		description: "Restore a compatible earlier platform runtime"
+	},
+	{
+		name: "repair",
+		arg: "[id]",
+		description: "Reconcile an installed Void platform"
+	},
+	{
+		name: "disable",
+		arg: "[id]",
+		description: "Disable traffic without deleting data"
+	},
+	{
+		name: "enable",
+		arg: "[id]",
+		description: "Restore traffic for a disabled platform"
+	},
+	{
+		name: "uninstall",
+		arg: "[id]",
+		description: "Safely remove an installed Void platform"
+	}
+];
+function readValue(rest, index, flag) {
+	const value = rest[index + 1];
+	if (!value || value.startsWith("-")) throw new Error(`platform: ${flag} requires a value.`);
+	return [value, index + 1];
+}
+function parseSelector(rest, subcommand, options = {}) {
+	let selector = "";
+	let plan = false;
+	let yes = false;
+	for (const arg of rest) if (arg === "--plan") plan = true;
+	else if (arg === "--yes" && options.allowYes) yes = true;
+	else if (arg.startsWith("-")) throw new Error(`platform: Unknown flag '${arg}'.`);
+	else if (selector) throw new Error(`platform: Unexpected argument '${arg}'.`);
+	else selector = arg;
+	if ((subcommand === "use" || subcommand === "status") && plan) throw new Error("platform: Unknown flag '--plan'.");
+	return {
+		selector,
+		plan,
+		yes
+	};
+}
+function parseLifecycleSelector(rest, subcommand) {
+	const positional = [];
+	let runtime = "";
+	let fromRuntime = "";
+	for (let index = 0; index < rest.length; index++) {
+		const arg = rest[index];
+		if (arg === "--runtime") {
+			if (subcommand === "disable") throw new Error("platform: Unknown flag '--runtime'.");
+			const [value, next] = readValue(rest, index, arg);
+			runtime = value;
+			index = next;
+		} else if (arg === "--from-runtime" && subcommand === "rollback") {
+			const [value, next] = readValue(rest, index, arg);
+			fromRuntime = value;
+			index = next;
+		} else positional.push(arg);
+	}
+	const parsed = parseSelector(positional, subcommand, { allowYes: true });
+	if (subcommand === "rollback" && !runtime) throw new Error("platform: rollback requires --runtime <earlier-runtime-directory>.");
+	return {
+		...parsed,
+		runtime,
+		fromRuntime
+	};
+}
+function parsePlatformArgs(args) {
+	if (operatorGroups.includes(args[0] ?? "") || [
+		"--connection",
+		"--json",
+		"--plan",
+		"--yes",
+		"--timeout"
+	].includes(args[0] ?? "")) return parseOperatorArgs(args);
+	const [subcommand, ...rest] = args;
+	if (subcommand === "domain") {
+		if (rest.length === 0) return {
+			subcommand,
+			domain: "",
+			selector: "",
+			zone: "",
+			dedicatedZone: false,
+			plan: false,
+			yes: false
+		};
+		if (rest[0] !== "set") throw new Error("platform: Usage: void platform domain set <domain> [--installation <id>] [--zone <domain>] [--dedicated-zone] [--plan] [--yes].");
+		let domain = "";
+		let selector = "";
+		let zone = "";
+		let plan = false;
+		let yes = false;
+		let dedicatedZone = false;
+		for (let index = 1; index < rest.length; index++) {
+			const arg = rest[index];
+			if (arg === "--installation" || arg === "--zone") {
+				const [value, next] = readValue(rest, index, arg);
+				index = next;
+				if (arg === "--zone") zone = value;
+				else selector = value;
+			} else if (arg === "--plan") plan = true;
+			else if (arg === "--yes") yes = true;
+			else if (arg === "--dedicated-zone") dedicatedZone = true;
+			else if (!arg.startsWith("-") && !domain) domain = arg;
+			else throw new Error(`platform: Unexpected argument '${arg}'.`);
+		}
+		if (!domain) throw new Error("platform: domain set requires an application domain.");
+		if (plan && yes) throw new Error("platform: Use either --plan or --yes.");
+		return {
+			subcommand,
+			domain,
+			selector,
+			zone,
+			dedicatedZone,
+			plan,
+			yes
+		};
+	}
+	if (subcommand === "list") {
+		if (rest.length > 0) throw new Error(`platform: Unexpected argument '${rest[0]}'.`);
+		return { subcommand };
+	}
+	if (subcommand === "use") {
+		const { selector } = parseSelector(rest, subcommand);
+		return {
+			subcommand,
+			selector
+		};
+	}
+	if (subcommand === "status") {
+		const { selector, plan } = parseSelector(rest, subcommand);
+		if (plan) throw new Error("platform: Unknown flag '--plan'.");
+		return {
+			subcommand,
+			selector
+		};
+	}
+	if (subcommand === "discover") {
+		let account = "";
+		let selector = "";
+		for (let index = 0; index < rest.length; index++) {
+			const arg = rest[index];
+			if (arg === "--account" || arg === "--installation") {
+				const [value, next] = readValue(rest, index, arg);
+				if (arg === "--account") account = value;
+				else selector = value;
+				index = next;
+			} else throw new Error("platform: Usage: void platform discover [--account <id>] [--installation <id-or-name>].");
+		}
+		return {
+			subcommand,
+			account,
+			selector
+		};
+	}
+	if (subcommand === "upgrade" || subcommand === "rollback" || subcommand === "repair" || subcommand === "disable" || subcommand === "enable") {
+		const { selector, plan, runtime, fromRuntime, yes } = parseLifecycleSelector(rest, subcommand);
+		return subcommand === "rollback" ? {
+			subcommand,
+			selector,
+			plan,
+			runtime,
+			fromRuntime,
+			yes
+		} : {
+			subcommand,
+			selector,
+			plan,
+			runtime,
+			yes
+		};
+	}
+	if (subcommand === "uninstall") {
+		const parsed = parseSelector(rest.filter((arg) => ![
+			"--purge-data",
+			"--delete-zone",
+			"--keep-zone"
+		].includes(arg)), subcommand, { allowYes: true });
+		if (rest.includes("--delete-zone") && rest.includes("--keep-zone")) throw new Error("platform: --delete-zone and --keep-zone cannot be used together.");
+		return {
+			subcommand,
+			selector: parsed.selector,
+			plan: parsed.plan,
+			purgeData: rest.includes("--purge-data"),
+			yes: parsed.yes,
+			deleteZone: rest.includes("--delete-zone") ? true : rest.includes("--keep-zone") ? false : null
+		};
+	}
+	if (subcommand === "install") {
+		const values = /* @__PURE__ */ new Map();
+		let plan = false;
+		let resume = false;
+		let dedicatedZone = false;
+		let yes = false;
+		const valueFlags = /* @__PURE__ */ new Set([
+			"--account",
+			"--application-domain",
+			"--control-plane-domain",
+			"--display-name",
+			"--name",
+			"--runtime",
+			"--zone"
+		]);
+		let workersDev = false;
+		for (let i = 0; i < rest.length; i++) {
+			const arg = rest[i];
+			if (valueFlags.has(arg)) {
+				const [value, next] = readValue(rest, i, arg);
+				values.set(arg, value);
+				i = next;
+			} else if (arg === "--plan") plan = true;
+			else if (arg === "--resume") resume = true;
+			else if (arg === "--dedicated-zone") dedicatedZone = true;
+			else if (arg === "--yes") yes = true;
+			else if (arg === "--workers-dev") workersDev = true;
+			else throw new Error(`platform: Unexpected argument '${arg}'.`);
+		}
+		if (workersDev && (values.has("--application-domain") || values.has("--zone") || dedicatedZone)) throw new Error("platform: --workers-dev cannot be combined with a domain, zone, or --dedicated-zone.");
+		return {
+			subcommand,
+			...workersDev ? { workersDev: true } : {},
+			account: values.get("--account") ?? "",
+			applicationDomain: values.get("--application-domain") ?? "",
+			controlPlaneDomain: values.get("--control-plane-domain") ?? "",
+			dedicatedZone,
+			displayName: values.get("--display-name") ?? "",
+			name: values.get("--name") ?? "",
+			plan,
+			resume,
+			runtime: values.get("--runtime") ?? "",
+			yes,
+			zone: values.get("--zone") ?? ""
+		};
+	}
+	throw new Error("platform: Usage: void platform <auth|user|project|deployment|build|signup|invitation|system|worker|list|use|status|discover|install|domain|upgrade|rollback|repair|disable|enable|uninstall>.");
+}
+//#endregion
 //#region src/cli/prepare-args.ts
 function parsePrepareArgs(args) {
 	const parsed = parseArgs({
@@ -2047,94 +3577,115 @@ function buildArgs(result, trailingArgs) {
 async function runSubcommandGroup(command, subcommands, parse, run) {
 	const root = process.cwd();
 	const sub = args[1];
+	const hasNamedSubcommand = args.slice(1).some((arg) => subcommands.some(({ name }) => name === arg));
 	try {
-		if ((!sub || sub.startsWith("-")) && process.stdin.isTTY) {
-			const { promptSubcommand } = await import("../subcommand-prompt-BzV8iQZo.mjs");
+		if ((!sub || sub.startsWith("-") && !hasNamedSubcommand) && process.stdin.isTTY) {
+			const { promptSubcommand } = await import("../subcommand-prompt-WfySCQ7S.mjs");
 			const result = await promptSubcommand(command, subcommands);
 			if (!result) process.exit(0);
 			await run(root, parse(buildArgs(result, args.slice(1))));
 		} else await run(root, parse(args.slice(1)));
 	} catch (err) {
-		log.error(err instanceof Error ? err.message : String(err));
+		if (command === "platform" && args.includes("--json")) {
+			console.error(JSON.stringify(err instanceof OperatorClientError ? err.toJSON() : {
+				error: "invalid_command",
+				message: err instanceof Error ? err.message : String(err)
+			}));
+			process.exit(1);
+		}
+		const message = formatCloudflareUserMessage(err instanceof Error ? err.message : String(err));
+		if (command === "platform") console.error(err instanceof OperatorClientError && err.details !== void 0 ? `${message}\nPartial result:\n${JSON.stringify(err.details, null, 2)}` : message);
+		else log.error(message);
 		process.exit(1);
 	}
 }
 const args = process.argv.slice(2);
 const command = args[0];
 const helpPath = getHelpPath(args);
-if (helpPath) if (helpPath.length === 0) printGlobalHelp();
-else try {
-	printHelpPage(helpPath);
-} catch (err) {
-	log.error(err instanceof Error ? err.message : String(err));
-	process.exit(1);
-}
-else if (command === "deploy") {
+if (helpPath) {
+	if (helpPath.length === 0) printGlobalHelp();
+	else try {
+		printHelpPage(helpPath);
+	} catch (err) {
+		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
+		process.exit(1);
+	}
+} else if (command === "deploy") {
 	const root = process.cwd();
 	let deployArgs;
 	try {
 		deployArgs = parseDeployArgs(args.slice(1));
 	} catch (err) {
-		log.error(err instanceof Error ? err.message : String(err));
+		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-jBJT1fUT.mjs").then((n) => n.t).then(({ runDeploy }) => {
+	import("../deploy-iXZ3F0N6.mjs").then((n) => n.n).then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
 			spa: deployArgs.spa,
 			skipBuild: deployArgs.skipBuild,
 			debug: deployArgs.debug,
+			platform: deployArgs.platform,
 			backend: deployArgs.backend,
-			provision: deployArgs.provision
+			provision: deployArgs.provision,
+			requireEmail: deployArgs.requireEmail
 		}).catch((err) => {
-			log.error(err.message ?? err);
+			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
 		});
 	});
-} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-BqsdZJp5.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-D_w-4w5B.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-Dt32J6RI.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-DiaNQbrl.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-C0i0sYMS.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CZy5MorI.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-BzXf3Jh2.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-DKcGUNsj.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
-else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-Bujrv5q-.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
+} else if (command === "connect") (async () => {
+	const parsed = parseConnectArgs(args.slice(1));
+	const { runConnectCommand } = await import("../connect-C04Wdy_h.mjs");
+	await runConnectCommand(process.cwd(), parsed);
+})().catch((err) => {
+	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
+	process.exit(1);
+});
+else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-CAH62yDU.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
+else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-DxJ2FRwR.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
+else if (command === "cloudflare") runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-B6_OZx2V.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed)));
+else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-Mo0V9yKS.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
+else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-ByhJ9AMl.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
+else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-B1VmoSr0.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
+else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-uKyQYUVY.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-D2d_mUsB.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-BcQzYgoG.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-DI2YwdBM.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-xItS5Zwf.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CJvZvPQO.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
 	let prepareArgs;
 	try {
 		prepareArgs = parsePrepareArgs(args.slice(1));
 	} catch (err) {
-		log.error(err instanceof Error ? err.message : String(err));
+		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-BvvgAz-3.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-BfJvFUtJ.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
-			log.error(err.message ?? err);
+			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
 		});
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-7JCAcKNQ.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-BD-9THgn.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
 		} catch (err) {
-			log.error(err instanceof Error ? err.message : String(err));
+			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
 		}
 		runInitCommand(root, initArgs).catch((err) => {
-			log.error(err.message ?? err);
+			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
 		});
 	});
-} else if (command === "mcp") import("../mcp-DoM3_nhd.mjs").then(({ runMcp }) => {
-	runMcp();
-});
-else if (command === "-v" || command === "--version") {
+} else if (command === "-v" || command === "--version") {
 	const version = JSON.parse(readFileSync(join(getPackageDir(), "package.json"), "utf-8")).version;
 	console.log(version);
 } else if (command && command !== "help" && command !== "--help" && command !== "-h") {
@@ -2144,17 +3695,32 @@ else if (command === "-v" || command === "--version") {
 	const topLevelCommands = [
 		{
 			name: "init",
+			hint: "--agents | --tsconfig | --github | --git | --no-git",
 			description: "Set up void in a new or existing project"
 		},
+		{
+			name: "connect",
+			description: "Connect to Cloudflare or a Void platform"
+		},
 		{
 			name: "deploy",
-			description: "Build and deploy to Void"
+			description: "Build and deploy, or link an existing Cloudflare Worker"
 		},
 		{
 			name: "auth",
 			hint: "login | logout | whoami | token",
 			description: "Login, logout, and token management"
 		},
+		{
+			name: "platform",
+			hint: "auth | user | project | deployment | signup | system | install",
+			description: "Install platforms and administer users, projects, access, and operations"
+		},
+		{
+			name: "cloudflare",
+			hint: "login | status | logout",
+			description: "Manage Cloudflare sign-in and inspect the deployment account"
+		},
 		{
 			name: "project",
 			hint: "status | link | list | logs | requests | rollback | cancel | delete | purge-cache",
@@ -2170,6 +3736,11 @@ else if (command === "-v" || command === "--version") {
 			hint: "add | delete | list | status",
 			description: "Configure custom domains"
 		},
+		{
+			name: "email",
+			hint: "usage | logs | destinations | allow | disallow | domain | status | setup",
+			description: "Inspect email activity and manage verified recipients"
+		},
 		{
 			name: "github",
 			hint: "install | installations | connect | update | status | disconnect | link | join",
@@ -2182,13 +3753,13 @@ else if (command === "-v" || command === "--version") {
 		},
 		{
 			name: "db",
-			hint: "status | reset | seed | execute | migrate | studio | export | rename-migrations",
+			hint: "connect | status | reset | seed | execute | migrate | studio | export",
 			description: "Database migrations and management"
 		},
 		{
 			name: "env",
-			hint: "check | types | example",
-			description: "Validate env.ts, generate types, or scaffold .env.example"
+			hint: "check | types",
+			description: "Validate env.ts or generate types"
 		},
 		{
 			name: "gen",
@@ -2199,10 +3770,6 @@ else if (command === "-v" || command === "--version") {
 			name: "prepare",
 			description: "Generate .void artifacts without starting Vite"
 		},
-		{
-			name: "mcp",
-			description: "Start MCP server (for AI agents)"
-		},
 		{
 			name: "help",
 			description: "Show help message"
@@ -2210,38 +3777,41 @@ else if (command === "-v" || command === "--version") {
 	];
 	(async () => {
 		printVoidHeader();
-		const { promptSubcommand } = await import("../subcommand-prompt-BzV8iQZo.mjs");
+		const { promptSubcommand } = await import("../subcommand-prompt-WfySCQ7S.mjs");
 		const result = await promptSubcommand("", topLevelCommands);
 		if (!result) process.exit(0);
 		const cmd = result.subcommand;
 		const root = process.cwd();
 		switch (cmd) {
+			case "connect": {
+				const { runConnectCommand } = await import("../connect-C04Wdy_h.mjs");
+				await runConnectCommand(root, parseConnectArgs([]));
+				return;
+			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-7JCAcKNQ.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-BD-9THgn.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-jBJT1fUT.mjs").then((n) => n.t);
+				const { runDeploy } = await import("../deploy-iXZ3F0N6.mjs").then((n) => n.n);
 				await runDeploy(root);
 				return;
 			}
-			case "mcp": {
-				const { runMcp } = await import("../mcp-DoM3_nhd.mjs");
-				runMcp();
-				return;
-			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-BqsdZJp5.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-D_w-4w5B.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-Dt32J6RI.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-DiaNQbrl.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-DKcGUNsj.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
-			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-Bujrv5q-.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-C0i0sYMS.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CZy5MorI.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-BzXf3Jh2.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-CAH62yDU.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
+			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-DxJ2FRwR.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
+			case "cloudflare": return runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (r, p) => import("../cloudflare-cmd-B6_OZx2V.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(r, p)));
+			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-Mo0V9yKS.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
+			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-ByhJ9AMl.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
+			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-B1VmoSr0.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-xItS5Zwf.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CJvZvPQO.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
+			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-uKyQYUVY.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-D2d_mUsB.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-BcQzYgoG.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-DI2YwdBM.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-BvvgAz-3.mjs");
+				const { runPrepareCommand } = await import("../prepare-BfJvFUtJ.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}
@@ -2250,9 +3820,9 @@ else if (command === "-v" || command === "--version") {
 				return;
 		}
 	})().catch((err) => {
-		log.error(err instanceof Error ? err.message : String(err));
+		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	});
 } else printGlobalHelp();
 //#endregion
-export {};
+export { OperatorClient as n, OperatorClientError as r, help_exports as t };