void 0.10.3 → 0.10.5

package/dist/{auth-cmd-CblKzAdD.mjs → auth-cmd-UoCwfDQv.mjs}

@@ -1,6 +1,6 @@
-import { f as getToken, g as removeToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, g as removeToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R } from "./dist-abzUneor.mjs";
-import { n as runLoginCommand } from "./login-B3l_sDwT.mjs";
+import { n as runLoginCommand } from "./login-CvxxF_9z.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/auth-cmd.ts
 async function runAuthCommand(root, args) {

package/dist/{build-cmd-CJQSRupz.mjs → build-cmd-CVyuBHjP.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{cache-CMzjhxHh.mjs → cache-ACORQCIq.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, r as createSpinner } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{cancel-deploy-S2N8NSv6.mjs → cancel-deploy-Gi8zmoZC.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/cancel-deploy.ts

package/dist/cli/cli.mjs

@@ -635,9 +635,18 @@ const githubSubcommands = [
 		arg: "[project]",
 		description: "Update an existing connection's branch, build executor, or deploy workflow"
 	},
+	{
+		name: "status",
+		arg: "[project]",
+		description: "Show a project's GitHub connection (repo, branch, executor, workflow)"
+	},
 	{
 		name: "link",
 		description: "Link your GitHub account to Void"
+	},
+	{
+		name: "join",
+		description: "Join your organization's shared GitHub App installations"
 	}
 ];
 function parseGithubArgs(args) {
@@ -654,6 +663,10 @@ function parseGithubArgs(args) {
 		if (rest.length > 0) throw new Error(`github: Unexpected argument '${rest[0]}'.`);
 		return { subcommand };
 	}
+	if (subcommand === "join") {
+		if (rest.length > 0) throw new Error(`github: Unexpected argument '${rest[0]}'.`);
+		return { subcommand };
+	}
 	if (subcommand === "connect") {
 		let projectName = "";
 		let installationId;
@@ -750,7 +763,26 @@ function parseGithubArgs(args) {
 			workflowPath
 		};
 	}
-	throw new Error("github: Usage: void github <install|installations|connect|update|link>.");
+	if (subcommand === "status") {
+		let projectName = "";
+		for (let i = 0; i < rest.length; i++) {
+			const arg = rest[i];
+			if (arg === "--project") {
+				if (i + 1 >= rest.length) throw new Error("github: --project requires a value.");
+				const value = rest[++i];
+				if (value.trim() === "") throw new Error("github: --project requires a value.");
+				if (projectName) throw new Error(`github: Unexpected argument '${value}'.`);
+				projectName = value;
+			} else if (arg.startsWith("-")) throw new Error(`github: Unexpected argument '${arg}'.`);
+			else if (projectName) throw new Error(`github: Unexpected argument '${arg}'.`);
+			else projectName = arg;
+		}
+		return {
+			subcommand,
+			projectName
+		};
+	}
+	throw new Error("github: Usage: void github <install|installations|connect|update|status|link|join>.");
 }
 //#endregion
 //#region src/cli/ascii.ts
@@ -1064,15 +1096,24 @@ const HELP_TREE = {
 				command: "update [project]",
 				description: "Update an existing connection's branch, build executor, or deploy workflow"
 			},
+			{
+				command: "status [project]",
+				description: "Show a project's GitHub connection (repo, branch, executor, workflow)"
+			},
 			{
 				command: "link",
 				description: "Link your GitHub account to Void"
+			},
+			{
+				command: "join",
+				description: "Join your organization's shared GitHub App installations"
 			}
 		],
 		children: {
 			install: basicSubcommand("Open the GitHub App install page in your browser.", "void github install"),
 			installations: basicSubcommand("List your GitHub App installations.", "void github installations"),
 			link: basicSubcommand("Link your GitHub account to Void.", "void github link"),
+			join: basicSubcommand("Join your organization's shared GitHub App installations.", "void github join"),
 			connect: {
 				summary: "Connect a repository to a project for automatic deploys.",
 				usage: ["void github connect [project] [options]"],
@@ -1095,20 +1136,27 @@ const HELP_TREE = {
 					},
 					{
 						command: "--executor <type>",
-						description: "Build executor: container (default) | github_actions"
+						description: "Build executor: container (default) | github_actions; prompted interactively when omitted"
 					},
 					{
 						command: "--workflow <path>",
-						description: "Authorized deploy workflow file (default .github/workflows/void-deploy.yml)"
+						description: "Authorized deploy workflow file (default .github/workflows/void-deploy.yml); prompted interactively when using github_actions"
 					}
 				],
-				examples: [{
-					command: "void github connect [project]",
-					description: "Connect a repository to a project"
-				}, {
-					command: "void github connect my-app --installation 42 --repo owner/repo --branch main",
-					description: "Non-interactive connect (all flags explicit)"
-				}]
+				examples: [
+					{
+						command: "void github connect [project]",
+						description: "Connect a repository to a project"
+					},
+					{
+						command: "void github connect my-app --installation 42 --repo owner/repo --branch main",
+						description: "Non-interactive connect (all flags explicit)"
+					},
+					{
+						command: "void github connect my-app --repo owner/repo --branch main --executor github_actions",
+						description: "Non-interactive connect using the GitHub Actions executor"
+					}
+				]
 			},
 			update: {
 				summary: "Update an existing connection's branch, build executor, or deploy workflow.",
@@ -1124,11 +1172,11 @@ const HELP_TREE = {
 					},
 					{
 						command: "--executor <type>",
-						description: "New build executor: container | github_actions"
+						description: "New build executor: container | github_actions; prompted interactively when omitted"
 					},
 					{
 						command: "--workflow <path>",
-						description: "New authorized deploy workflow file (under .github/workflows/)"
+						description: "New authorized deploy workflow file under .github/workflows/; prompted interactively when using github_actions"
 					}
 				],
 				examples: [{
@@ -1138,6 +1186,21 @@ const HELP_TREE = {
 					command: "void github update my-app --branch release",
 					description: "Change the deploy branch"
 				}]
+			},
+			status: {
+				summary: "Show a project's GitHub connection settings.",
+				usage: ["void github status [project] [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name (alias for positional)"
+				}],
+				examples: [{
+					command: "void github status",
+					description: "Show the linked project's connection"
+				}, {
+					command: "void github status my-app",
+					description: "Show a specific project connection"
+				}]
 			}
 		}
 	},
@@ -1887,7 +1950,7 @@ else if (command === "deploy") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../deploy-DpOdwtla.mjs").then((n) => n.t).then(({ runDeploy }) => {
+	import("../deploy-CISNL5uK.mjs").then((n) => n.t).then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -1899,15 +1962,15 @@ else if (command === "deploy") {
 			process.exit(1);
 		});
 	});
-} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-CblKzAdD.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-InegJruy.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-CVKwIOm3.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CkowysQx.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-q6McxXgE.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-D3L0f93X.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
-else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
+} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-UoCwfDQv.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
+else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-Dd1gNRdd.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
+else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-CMLYWkE-.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
+else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-B4HpcgNG.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-C00yjN01.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-DNMJpeVF.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-C0pV2gRQ.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-CwtLD1yI.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CVyuBHjP.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
 	let prepareArgs;
@@ -1917,7 +1980,7 @@ else if (command === "prepare") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../prepare-DRRboRqH.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-DUo9q8cM.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			R.error(err.message ?? err);
 			process.exit(1);
@@ -1925,7 +1988,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-CZP69LJu.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-D58GxCtt.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1938,7 +2001,7 @@ else if (command === "prepare") {
 			process.exit(1);
 		});
 	});
-} else if (command === "mcp") import("../mcp-D2plINxM.mjs").then(({ runMcp }) => {
+} else if (command === "mcp") import("../mcp-C8BjRt_z.mjs").then(({ runMcp }) => {
 	runMcp();
 });
 else if (command === "-v" || command === "--version") {
@@ -1979,7 +2042,7 @@ else if (command === "-v" || command === "--version") {
 		},
 		{
 			name: "github",
-			hint: "install | installations | connect | update | link",
+			hint: "install | installations | connect | update | status | link | join",
 			description: "Connect a GitHub repository for automatic deploys"
 		},
 		{
@@ -2024,31 +2087,31 @@ else if (command === "-v" || command === "--version") {
 		const root = process.cwd();
 		switch (cmd) {
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-CZP69LJu.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-D58GxCtt.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-DpOdwtla.mjs").then((n) => n.t);
+				const { runDeploy } = await import("../deploy-CISNL5uK.mjs").then((n) => n.t);
 				await runDeploy(root);
 				return;
 			}
 			case "mcp": {
-				const { runMcp } = await import("../mcp-D2plINxM.mjs");
+				const { runMcp } = await import("../mcp-C8BjRt_z.mjs");
 				runMcp();
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-CblKzAdD.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-InegJruy.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-CVKwIOm3.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-CkowysQx.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-D3L0f93X.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
-			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-q6McxXgE.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-UoCwfDQv.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
+			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-Dd1gNRdd.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
+			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-CMLYWkE-.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
+			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-B4HpcgNG.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-CwtLD1yI.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CVyuBHjP.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-C00yjN01.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-DNMJpeVF.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-C0pV2gRQ.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-DRRboRqH.mjs");
+				const { runPrepareCommand } = await import("../prepare-DUo9q8cM.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}

package/dist/{client-YIzxv2ZO.mjs → client-BlbnA92X.mjs}

@@ -873,6 +873,25 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to connect GitHub repository", res);
 		return res.json();
 	}
+	/**
+	* Start the per-repo connect-authorization round-trip used by a non-owner org
+	* member (Task 7 platform contract). The callback redirects back to `redirect`
+	* with either `?connect_grant=<signed>` (proof of per-repo access) or
+	* `?error=repo_not_accessible`. Mirrors {@link getGithubLinkUrl} but carries
+	* the installation + repo the grant is scoped to.
+	*/
+	async getGithubConnectAuthorizeUrl(redirect, codeChallenge, installationId, repoFullName) {
+		const params = new URLSearchParams({
+			redirect,
+			code_challenge: codeChallenge,
+			code_challenge_method: "S256",
+			installationId,
+			repoFullName
+		});
+		const res = await fetch(`${this.baseUrl}/github/connect-authorize-url?${params}`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to start GitHub connect authorization", res);
+		return res.json();
+	}
 	async getGithubConnection(projectId) {
 		const res = await fetch(`${this.baseUrl}/projects/${projectId}/github`, { headers: { ...this.authHeaders } });
 		if (!res.ok) await throwPlatformApiError("Failed to get GitHub connection", res);
@@ -915,6 +934,31 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to complete GitHub link", res);
 		return res.json();
 	}
+	async getGithubJoinUrl(redirect, codeChallenge) {
+		const params = new URLSearchParams({
+			redirect,
+			code_challenge: codeChallenge,
+			code_challenge_method: "S256"
+		});
+		const res = await fetch(`${this.baseUrl}/github/join-url?${params}`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to start GitHub join", res);
+		return res.json();
+	}
+	async completeGithubJoin(joinCode, codeVerifier) {
+		const res = await fetch(`${this.baseUrl}/github/join/complete`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				...this.authHeaders
+			},
+			body: JSON.stringify({
+				join_code: joinCode,
+				code_verifier: codeVerifier
+			})
+		});
+		if (!res.ok) await throwPlatformApiError("Failed to complete GitHub join", res);
+		return res.json();
+	}
 };
 //#endregion
 export { runLogin as _, isExpiredTokenError as a, createCodeChallenge as c, getSiteDomain as d, getToken as f, removeToken as g, openBrowser as h, isCliOutdatedError as i, createCodeVerifier as l, isStagingMode as m, PlatformClient as n, parsePlatformErrorBody as o, getTokenSource as p, client_exports as r, awaitBrowserCallback as s, PlatformApiError as t, getApiUrl as u, saveToken as v, ensureCloudflaredToken as y };

package/dist/{config--wXmVOoe.mjs → config-CbJS4Krx.mjs}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./chunk-DJd-R1mw.mjs";
 import { a as join, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
-import { r as schemaSpecifier, t as discoverSchema } from "./discover-C8N1I4tK.mjs";
+import { r as schemaSpecifier, t as discoverSchema } from "./discover-ZWuBvt22.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/drizzle/config.ts
 var config_exports = /* @__PURE__ */ __exportAll({ writeDrizzleConfig: () => writeDrizzleConfig });
@@ -21,13 +21,13 @@ function writeDrizzleConfig(root, dbPath, dialect = "sqlite") {
 	const config = dialect === "postgresql" ? {
 		dialect: "postgresql",
 		schema: schemaSpecifier(schema, root),
-		out: `./${relative(root, paths.migrationsDir).replace(/\\/g, "/")}`,
+		out: `./${relative(root, paths.migrationsDir)}`,
 		migrations: { prefix: "timestamp" },
 		dbCredentials: { url: dbPath }
 	} : {
 		dialect: "sqlite",
 		schema: schemaSpecifier(schema, root),
-		out: `./${relative(root, paths.migrationsDir).replace(/\\/g, "/")}`,
+		out: `./${relative(root, paths.migrationsDir)}`,
 		migrations: { prefix: "timestamp" },
 		dbCredentials: { url: dbPath }
 	};

package/dist/{create-project-pLQdzEPe.mjs → create-project-LjvkYziS.mjs}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./chunk-DJd-R1mw.mjs";
 import { s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getSiteDomain, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { d as getSiteDomain, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, i as Ee, l as Re, v as ue, x as q } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig } from "./project-CH9pdo16.mjs";
 import { n as validateProjectSlug } from "./project-slug-rX3kTOfY.mjs";

package/dist/{db-hAmBumot.mjs → db-C00yjN01.mjs}

@@ -2,15 +2,15 @@ import { a as join, c as resolve, r as extname, s as relative } from "./pathe.M-
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DKDsgwOU.mjs";
-import { f as getToken, m as isStagingMode, n as PlatformClient, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, m as isStagingMode, n as PlatformClient, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
-import { r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
 import { a as writeJournal, i as stripSqlExt, r as readJournal, t as collectMigrations } from "./collect-9rO3JFNM.mjs";
 import { n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence } from "./validate-CNWm-PsL.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
-import { formatTimestamp } from "./gen-q6McxXgE.mjs";
+import { formatTimestamp } from "./gen-C0pV2gRQ.mjs";
 import { existsSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { execFileSync } from "node:child_process";
@@ -81,8 +81,10 @@ function validatePendingMigrations(migrations, appliedNames) {
 	validateMigrations(pending);
 }
 async function runDbCommand(root, args) {
-	console.log();
-	ge(cliTitle("db"));
+	const exportToStdout = args.action === "export" && !args.output;
+	if (exportToStdout) process.stderr.write("\n");
+	else console.log();
+	ge(cliTitle("db"), exportToStdout ? { output: process.stderr } : void 0);
 	const dialect = getDatabaseDialect(readConfig(root));
 	if (args.action === "push") await runPush(root, dialect);
 	else if (args.action === "generate") await runGenerate(root, dialect);
@@ -97,7 +99,7 @@ async function runDbCommand(root, args) {
 	else await runExport(root, args, dialect);
 }
 async function runPush(root, dialect) {
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	let configPath;
 	if (dialect === "postgresql") configPath = writeDrizzleConfig(root, getPgUrl(root), "postgresql");
 	else {
@@ -120,7 +122,7 @@ async function runPush(root, dialect) {
 	ye("Done.");
 }
 async function runGenerate(root, dialect) {
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	const configPath = dialect === "postgresql" ? writeDrizzleConfig(root, "postgresql://dummy", "postgresql") : writeDrizzleConfig(root, ":memory:");
 	try {
 		runDrizzleKit(root, [
@@ -571,7 +573,7 @@ async function runStudio(root, dialect, remote) {
 			process.exit(1);
 		}
 		const dbUrl = await fetchRemoteDatabaseUrl(new PlatformClient(token, { root }), projectConfig.projectId);
-		const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+		const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 		const configPath = writeDrizzleConfig(root, dbUrl, "postgresql");
 		R.info("Opening Drizzle Studio (remote)...");
 		try {
@@ -586,7 +588,7 @@ async function runStudio(root, dialect, remote) {
 		return;
 	}
 	if (dialect === "postgresql") {
-		const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+		const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 		const configPath = writeDrizzleConfig(root, getPgUrl(root), "postgresql");
 		R.info("Opening Drizzle Studio...");
 		try {
@@ -600,7 +602,7 @@ async function runStudio(root, dialect, remote) {
 		}
 		return;
 	}
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	const { getMiniflareDatabasePath } = await import("./runner-BQyKUqAL.mjs");
 	const dbPath = getMiniflareDatabasePath(getLocalD1PersistRoot(root), "local");
 	if (!existsSync(dbPath)) {
@@ -854,13 +856,14 @@ async function runRenameMigrations(root, dialect) {
 	ye("Done.");
 }
 async function runExport(root, args, dialect) {
+	const errOut = { output: process.stderr };
 	if (dialect === "postgresql") {
 		const parts = [];
 		await withPgClient(root, async (client) => {
 			let tables;
 			if (args.table) {
 				if ((await client.query("SELECT tablename FROM pg_tables WHERE schemaname = 'public' AND tablename = $1", [args.table])).rows.length === 0) {
-					R.error(`db: Table '${args.table}' not found.`);
+					R.error(`db: Table '${args.table}' not found.`, errOut);
 					process.exit(1);
 				}
 				tables = [args.table];
@@ -902,7 +905,7 @@ async function runExport(root, args, dialect) {
 	const { getMiniflareDatabasePath, openSqliteDatabase } = await import("./runner-BQyKUqAL.mjs");
 	const dbPath = getMiniflareDatabasePath(getLocalD1PersistRoot(root), "local");
 	if (!existsSync(dbPath)) {
-		R.error("No local database found. Run `void dev` first.");
+		R.error("No local database found. Run `void dev` first.", errOut);
 		process.exit(1);
 	}
 	const db = await openSqliteDatabase(dbPath, { readonly: true });
@@ -910,7 +913,7 @@ async function runExport(root, args, dialect) {
 		let tables;
 		if (args.table) {
 			if (!db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(args.table)) {
-				R.error(`db: Table '${args.table}' not found.`);
+				R.error(`db: Table '${args.table}' not found.`, errOut);
 				process.exit(1);
 			}
 			tables = [args.table];
@@ -1047,7 +1050,7 @@ async function loadSeedFunction(seedPath) {
 	return seed;
 }
 async function loadSeedSchema(root) {
-	const { discoverSchema } = await import("./discover-C8N1I4tK.mjs").then((n) => n.n);
+	const { discoverSchema } = await import("./discover-ZWuBvt22.mjs").then((n) => n.n);
 	const location = discoverSchema(root, readProjectPaths(root));
 	if (!location) return {};
 	if (location.type === "file") {

package/dist/{delete-CfSe3EJO.mjs → delete-CplfvTgU.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle, r as createSpinner } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, l as Re, u as Se, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { i as removeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{deploy-DpOdwtla.mjs → deploy-CISNL5uK.mjs}

@@ -4,28 +4,29 @@ import { n as cliTitle, r as createSpinner, s as import_picocolors } from "./out
 import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { t as findVoidAuthConfig } from "./config-hhMYPVRT.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DKDsgwOU.mjs";
-import { a as isExpiredTokenError, f as getToken, i as isCliOutdatedError, m as isStagingMode, n as PlatformClient, o as parsePlatformErrorBody, p as getTokenSource, t as PlatformApiError, u as getApiUrl, y as ensureCloudflaredToken } from "./client-YIzxv2ZO.mjs";
+import { a as isExpiredTokenError, f as getToken, i as isCliOutdatedError, m as isStagingMode, n as PlatformClient, o as parsePlatformErrorBody, p as getTokenSource, t as PlatformApiError, u as getApiUrl, y as ensureCloudflaredToken } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
-import { a as scanQueuesSync, i as scanWebSocketRoutesSync, o as scanJobsSync, r as scanRoutes } from "./scan-DGEp1-1Q.mjs";
-import { i as inferProjectBindings, l as validateSsrEntry, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { a as scanQueuesSync, i as scanWebSocketRoutesSync, o as scanJobsSync, r as scanRoutes } from "./scan---8wfN58.mjs";
+import { i as inferProjectBindings, l as validateSsrEntry, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
 import { i as voidWarn, r as voidLog } from "./log-BdD_Fpms.mjs";
-import { t as discoverSchema } from "./discover-C8N1I4tK.mjs";
-import { t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
-import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-LH6eoyW-.mjs";
-import { n as writeDrizzleConfig } from "./config--wXmVOoe.mjs";
+import { n as mergeAndExpand, r as parseDotenvFile } from "./dotenv-lS94ymhM.mjs";
+import { t as discoverSchema } from "./discover-ZWuBvt22.mjs";
+import { t as findEnvFile } from "./env-types-BS8cZead.mjs";
+import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-BxbtBbjh.mjs";
+import { n as writeDrizzleConfig } from "./config-CbJS4Krx.mjs";
 import { t as collectMigrations } from "./collect-9rO3JFNM.mjs";
 import { n as buildMigrationPlanBundle } from "./plan-aD3wRDqF.mjs";
 import { r as validateMigrations, t as assertJournalCoherence } from "./validate-CNWm-PsL.mjs";
 import { t as scanPages } from "./scan-VCAM1oh3.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
-import { i as promptProjectSetupAction, n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-pLQdzEPe.mjs";
+import { i as promptProjectSetupAction, n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-LjvkYziS.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-Ce0AtSZL.mjs";
 import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BNWymgnH.mjs";
-import { t as promptForLoginToken } from "./login-B3l_sDwT.mjs";
-import { i as resolveProjectCommand, n as detectPreset, r as formatProjectCommand, t as FRAMEWORK_PRESETS } from "./preset-B7ZQZn0u.mjs";
+import { t as promptForLoginToken } from "./login-CvxxF_9z.mjs";
+import { i as resolveProjectCommand, n as detectPreset, r as formatProjectCommand, t as FRAMEWORK_PRESETS } from "./preset-D0My64KQ.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -56,6 +57,7 @@ function workerOwnsHtmlRouting(inputs) {
 function resolveAssetConfig(inputs) {
 	return resolveAssetRoutingPolicy(inputs).assetConfig;
 }
+const VOID_INTERNAL_WORKER_FIRST = ["/__void", "/__void/*"];
 function resolveAssetRoutingPolicy(inputs) {
 	const workerFirst = workerOwnsHtmlRouting(inputs);
 	const apiWorkerFirst = !workerFirst && (inputs.hasApiRoutes === true || inputs.authEnabled === true);
@@ -65,8 +67,15 @@ function resolveAssetRoutingPolicy(inputs) {
 			run_worker_first: ["/**"]
 		} : apiWorkerFirst ? {
 			not_found_handling: "single-page-application",
-			run_worker_first: ["/api", "/api/*"]
-		} : { not_found_handling: "single-page-application" },
+			run_worker_first: [
+				"/api",
+				"/api/*",
+				...VOID_INTERNAL_WORKER_FIRST
+			]
+		} : {
+			not_found_handling: "single-page-application",
+			run_worker_first: [...VOID_INTERNAL_WORKER_FIRST]
+		},
 		apiWorkerFirst,
 		workerFirst,
 		workerSpaFallback: workerFirst && !inputs.isSsr && !inputs.hasPages
@@ -1565,6 +1574,11 @@ const ASSET_MIME_TYPES = {
 	svg: "image/svg+xml; charset=utf-8",
 	txt: "text/plain; charset=utf-8",
 	csv: "text/csv; charset=utf-8",
+	md: "text/markdown; charset=utf-8",
+	markdown: "text/markdown; charset=utf-8",
+	yaml: "text/yaml; charset=utf-8",
+	yml: "text/yaml; charset=utf-8",
+	toml: "application/toml",
 	png: "image/png",
 	jpg: "image/jpeg",
 	jpeg: "image/jpeg",
@@ -2341,6 +2355,7 @@ var deploy_exports = /* @__PURE__ */ __exportAll({
 	ensurePreviouslyDeployedLiveBindingConfig: () => ensurePreviouslyDeployedLiveBindingConfig,
 	generateDeployWrapperIfNeeded: () => generateDeployWrapperIfNeeded,
 	hasDeploySchemaDrift: () => hasDeploySchemaDrift,
+	loadDeployEnv: () => loadDeployEnv,
 	promptDeployProjectConfig: () => promptDeployProjectConfig,
 	resolveDeployLiveBindingConfig: () => resolveDeployLiveBindingConfig,
 	resolveDeployWorkerMain: () => resolveDeployWorkerMain,
@@ -3646,24 +3661,7 @@ async function assertEnvSchemaValid(root, client, projectId) {
 * Later files win on conflict.
 */
 function loadDeployEnv(root) {
-	const files = [".env", ".env.production"];
-	const env = {};
-	for (const file of files) {
-		const filePath = join(root, file);
-		if (!existsSync(filePath)) continue;
-		const content = readFileSync(filePath, "utf-8");
-		for (const line of content.split("\n")) {
-			const trimmed = line.trim();
-			if (!trimmed || trimmed.startsWith("#")) continue;
-			const eqIndex = trimmed.indexOf("=");
-			if (eqIndex === -1) continue;
-			const key = trimmed.slice(0, eqIndex).trim();
-			let value = trimmed.slice(eqIndex + 1).trim();
-			if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
-			env[key] = value;
-		}
-	}
-	const { sanitized, stripped } = stripInternalEnvKeys(env);
+	const { sanitized, stripped } = stripInternalEnvKeys(mergeAndExpand([".env", ".env.production"].map((file) => parseDotenvFile(join(root, file), { expand: false })), { onWarn: (msg) => voidWarn(msg) }));
 	if (stripped.length > 0) voidWarn(`Ignoring internal env keys from .env files: ${stripped.join(", ")}. These are reserved for Void runtime use and will not be shipped in the deploy manifest.`);
 	return sanitized;
 }