void 0.10.4 → 0.10.5

package/dist/{auth-cmd-CblKzAdD.mjs → auth-cmd-UoCwfDQv.mjs}

@@ -1,6 +1,6 @@
-import { f as getToken, g as removeToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, g as removeToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R } from "./dist-abzUneor.mjs";
-import { n as runLoginCommand } from "./login-B3l_sDwT.mjs";
+import { n as runLoginCommand } from "./login-CvxxF_9z.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/auth-cmd.ts
 async function runAuthCommand(root, args) {

package/dist/{build-cmd-CJQSRupz.mjs → build-cmd-CVyuBHjP.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{cache-CMzjhxHh.mjs → cache-ACORQCIq.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, r as createSpinner } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{cancel-deploy-S2N8NSv6.mjs → cancel-deploy-Gi8zmoZC.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/cancel-deploy.ts

package/dist/cli/cli.mjs

@@ -643,6 +643,10 @@ const githubSubcommands = [
 	{
 		name: "link",
 		description: "Link your GitHub account to Void"
+	},
+	{
+		name: "join",
+		description: "Join your organization's shared GitHub App installations"
 	}
 ];
 function parseGithubArgs(args) {
@@ -659,6 +663,10 @@ function parseGithubArgs(args) {
 		if (rest.length > 0) throw new Error(`github: Unexpected argument '${rest[0]}'.`);
 		return { subcommand };
 	}
+	if (subcommand === "join") {
+		if (rest.length > 0) throw new Error(`github: Unexpected argument '${rest[0]}'.`);
+		return { subcommand };
+	}
 	if (subcommand === "connect") {
 		let projectName = "";
 		let installationId;
@@ -774,7 +782,7 @@ function parseGithubArgs(args) {
 			projectName
 		};
 	}
-	throw new Error("github: Usage: void github <install|installations|connect|update|status|link>.");
+	throw new Error("github: Usage: void github <install|installations|connect|update|status|link|join>.");
 }
 //#endregion
 //#region src/cli/ascii.ts
@@ -1095,12 +1103,17 @@ const HELP_TREE = {
 			{
 				command: "link",
 				description: "Link your GitHub account to Void"
+			},
+			{
+				command: "join",
+				description: "Join your organization's shared GitHub App installations"
 			}
 		],
 		children: {
 			install: basicSubcommand("Open the GitHub App install page in your browser.", "void github install"),
 			installations: basicSubcommand("List your GitHub App installations.", "void github installations"),
 			link: basicSubcommand("Link your GitHub account to Void.", "void github link"),
+			join: basicSubcommand("Join your organization's shared GitHub App installations.", "void github join"),
 			connect: {
 				summary: "Connect a repository to a project for automatic deploys.",
 				usage: ["void github connect [project] [options]"],
@@ -1937,7 +1950,7 @@ else if (command === "deploy") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../deploy-DpOdwtla.mjs").then((n) => n.t).then(({ runDeploy }) => {
+	import("../deploy-CISNL5uK.mjs").then((n) => n.t).then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -1949,15 +1962,15 @@ else if (command === "deploy") {
 			process.exit(1);
 		});
 	});
-} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-CblKzAdD.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-InegJruy.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-CVKwIOm3.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CkowysQx.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-q6McxXgE.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BvEKQmcD.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
-else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
+} else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-cmd-UoCwfDQv.mjs").then(({ runAuthCommand }) => runAuthCommand(root, parsed)));
+else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-Dd1gNRdd.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
+else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-CMLYWkE-.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
+else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-B4HpcgNG.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-C00yjN01.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-DNMJpeVF.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-C0pV2gRQ.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-CwtLD1yI.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CVyuBHjP.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
 	let prepareArgs;
@@ -1967,7 +1980,7 @@ else if (command === "prepare") {
 		R.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../prepare-DRRboRqH.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-DUo9q8cM.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			R.error(err.message ?? err);
 			process.exit(1);
@@ -1975,7 +1988,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-CZP69LJu.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-D58GxCtt.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1988,7 +2001,7 @@ else if (command === "prepare") {
 			process.exit(1);
 		});
 	});
-} else if (command === "mcp") import("../mcp-D2plINxM.mjs").then(({ runMcp }) => {
+} else if (command === "mcp") import("../mcp-C8BjRt_z.mjs").then(({ runMcp }) => {
 	runMcp();
 });
 else if (command === "-v" || command === "--version") {
@@ -2029,7 +2042,7 @@ else if (command === "-v" || command === "--version") {
 		},
 		{
 			name: "github",
-			hint: "install | installations | connect | update | status | link",
+			hint: "install | installations | connect | update | status | link | join",
 			description: "Connect a GitHub repository for automatic deploys"
 		},
 		{
@@ -2074,31 +2087,31 @@ else if (command === "-v" || command === "--version") {
 		const root = process.cwd();
 		switch (cmd) {
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-CZP69LJu.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-D58GxCtt.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-DpOdwtla.mjs").then((n) => n.t);
+				const { runDeploy } = await import("../deploy-CISNL5uK.mjs").then((n) => n.t);
 				await runDeploy(root);
 				return;
 			}
 			case "mcp": {
-				const { runMcp } = await import("../mcp-D2plINxM.mjs");
+				const { runMcp } = await import("../mcp-C8BjRt_z.mjs");
 				runMcp();
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-CblKzAdD.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-InegJruy.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-CVKwIOm3.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-CkowysQx.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-BvEKQmcD.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
-			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-q6McxXgE.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-cmd-UoCwfDQv.mjs").then(({ runAuthCommand }) => runAuthCommand(r, p)));
+			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-Dd1gNRdd.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
+			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-CMLYWkE-.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
+			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-B4HpcgNG.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-CwtLD1yI.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CVyuBHjP.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-C00yjN01.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-DNMJpeVF.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-C0pV2gRQ.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-DRRboRqH.mjs");
+				const { runPrepareCommand } = await import("../prepare-DUo9q8cM.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}

package/dist/{client-YIzxv2ZO.mjs → client-BlbnA92X.mjs}

@@ -873,6 +873,25 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to connect GitHub repository", res);
 		return res.json();
 	}
+	/**
+	* Start the per-repo connect-authorization round-trip used by a non-owner org
+	* member (Task 7 platform contract). The callback redirects back to `redirect`
+	* with either `?connect_grant=<signed>` (proof of per-repo access) or
+	* `?error=repo_not_accessible`. Mirrors {@link getGithubLinkUrl} but carries
+	* the installation + repo the grant is scoped to.
+	*/
+	async getGithubConnectAuthorizeUrl(redirect, codeChallenge, installationId, repoFullName) {
+		const params = new URLSearchParams({
+			redirect,
+			code_challenge: codeChallenge,
+			code_challenge_method: "S256",
+			installationId,
+			repoFullName
+		});
+		const res = await fetch(`${this.baseUrl}/github/connect-authorize-url?${params}`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to start GitHub connect authorization", res);
+		return res.json();
+	}
 	async getGithubConnection(projectId) {
 		const res = await fetch(`${this.baseUrl}/projects/${projectId}/github`, { headers: { ...this.authHeaders } });
 		if (!res.ok) await throwPlatformApiError("Failed to get GitHub connection", res);
@@ -915,6 +934,31 @@ var PlatformClient = class {
 		if (!res.ok) await throwPlatformApiError("Failed to complete GitHub link", res);
 		return res.json();
 	}
+	async getGithubJoinUrl(redirect, codeChallenge) {
+		const params = new URLSearchParams({
+			redirect,
+			code_challenge: codeChallenge,
+			code_challenge_method: "S256"
+		});
+		const res = await fetch(`${this.baseUrl}/github/join-url?${params}`, { headers: { ...this.authHeaders } });
+		if (!res.ok) await throwPlatformApiError("Failed to start GitHub join", res);
+		return res.json();
+	}
+	async completeGithubJoin(joinCode, codeVerifier) {
+		const res = await fetch(`${this.baseUrl}/github/join/complete`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				...this.authHeaders
+			},
+			body: JSON.stringify({
+				join_code: joinCode,
+				code_verifier: codeVerifier
+			})
+		});
+		if (!res.ok) await throwPlatformApiError("Failed to complete GitHub join", res);
+		return res.json();
+	}
 };
 //#endregion
 export { runLogin as _, isExpiredTokenError as a, createCodeChallenge as c, getSiteDomain as d, getToken as f, removeToken as g, openBrowser as h, isCliOutdatedError as i, createCodeVerifier as l, isStagingMode as m, PlatformClient as n, parsePlatformErrorBody as o, getTokenSource as p, client_exports as r, awaitBrowserCallback as s, PlatformApiError as t, getApiUrl as u, saveToken as v, ensureCloudflaredToken as y };

package/dist/{config--wXmVOoe.mjs → config-CbJS4Krx.mjs}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./chunk-DJd-R1mw.mjs";
 import { a as join, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
-import { r as schemaSpecifier, t as discoverSchema } from "./discover-C8N1I4tK.mjs";
+import { r as schemaSpecifier, t as discoverSchema } from "./discover-ZWuBvt22.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/drizzle/config.ts
 var config_exports = /* @__PURE__ */ __exportAll({ writeDrizzleConfig: () => writeDrizzleConfig });
@@ -21,13 +21,13 @@ function writeDrizzleConfig(root, dbPath, dialect = "sqlite") {
 	const config = dialect === "postgresql" ? {
 		dialect: "postgresql",
 		schema: schemaSpecifier(schema, root),
-		out: `./${relative(root, paths.migrationsDir).replace(/\\/g, "/")}`,
+		out: `./${relative(root, paths.migrationsDir)}`,
 		migrations: { prefix: "timestamp" },
 		dbCredentials: { url: dbPath }
 	} : {
 		dialect: "sqlite",
 		schema: schemaSpecifier(schema, root),
-		out: `./${relative(root, paths.migrationsDir).replace(/\\/g, "/")}`,
+		out: `./${relative(root, paths.migrationsDir)}`,
 		migrations: { prefix: "timestamp" },
 		dbCredentials: { url: dbPath }
 	};

package/dist/{create-project-pLQdzEPe.mjs → create-project-LjvkYziS.mjs}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./chunk-DJd-R1mw.mjs";
 import { s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getSiteDomain, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { d as getSiteDomain, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, i as Ee, l as Re, v as ue, x as q } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig } from "./project-CH9pdo16.mjs";
 import { n as validateProjectSlug } from "./project-slug-rX3kTOfY.mjs";

package/dist/{db-hAmBumot.mjs → db-C00yjN01.mjs}

@@ -2,15 +2,15 @@ import { a as join, c as resolve, r as extname, s as relative } from "./pathe.M-
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DKDsgwOU.mjs";
-import { f as getToken, m as isStagingMode, n as PlatformClient, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, m as isStagingMode, n as PlatformClient, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
-import { r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
 import { a as writeJournal, i as stripSqlExt, r as readJournal, t as collectMigrations } from "./collect-9rO3JFNM.mjs";
 import { n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence } from "./validate-CNWm-PsL.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
-import { formatTimestamp } from "./gen-q6McxXgE.mjs";
+import { formatTimestamp } from "./gen-C0pV2gRQ.mjs";
 import { existsSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { execFileSync } from "node:child_process";
@@ -81,8 +81,10 @@ function validatePendingMigrations(migrations, appliedNames) {
 	validateMigrations(pending);
 }
 async function runDbCommand(root, args) {
-	console.log();
-	ge(cliTitle("db"));
+	const exportToStdout = args.action === "export" && !args.output;
+	if (exportToStdout) process.stderr.write("\n");
+	else console.log();
+	ge(cliTitle("db"), exportToStdout ? { output: process.stderr } : void 0);
 	const dialect = getDatabaseDialect(readConfig(root));
 	if (args.action === "push") await runPush(root, dialect);
 	else if (args.action === "generate") await runGenerate(root, dialect);
@@ -97,7 +99,7 @@ async function runDbCommand(root, args) {
 	else await runExport(root, args, dialect);
 }
 async function runPush(root, dialect) {
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	let configPath;
 	if (dialect === "postgresql") configPath = writeDrizzleConfig(root, getPgUrl(root), "postgresql");
 	else {
@@ -120,7 +122,7 @@ async function runPush(root, dialect) {
 	ye("Done.");
 }
 async function runGenerate(root, dialect) {
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	const configPath = dialect === "postgresql" ? writeDrizzleConfig(root, "postgresql://dummy", "postgresql") : writeDrizzleConfig(root, ":memory:");
 	try {
 		runDrizzleKit(root, [
@@ -571,7 +573,7 @@ async function runStudio(root, dialect, remote) {
 			process.exit(1);
 		}
 		const dbUrl = await fetchRemoteDatabaseUrl(new PlatformClient(token, { root }), projectConfig.projectId);
-		const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+		const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 		const configPath = writeDrizzleConfig(root, dbUrl, "postgresql");
 		R.info("Opening Drizzle Studio (remote)...");
 		try {
@@ -586,7 +588,7 @@ async function runStudio(root, dialect, remote) {
 		return;
 	}
 	if (dialect === "postgresql") {
-		const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+		const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 		const configPath = writeDrizzleConfig(root, getPgUrl(root), "postgresql");
 		R.info("Opening Drizzle Studio...");
 		try {
@@ -600,7 +602,7 @@ async function runStudio(root, dialect, remote) {
 		}
 		return;
 	}
-	const { writeDrizzleConfig } = await import("./config--wXmVOoe.mjs").then((n) => n.t);
+	const { writeDrizzleConfig } = await import("./config-CbJS4Krx.mjs").then((n) => n.t);
 	const { getMiniflareDatabasePath } = await import("./runner-BQyKUqAL.mjs");
 	const dbPath = getMiniflareDatabasePath(getLocalD1PersistRoot(root), "local");
 	if (!existsSync(dbPath)) {
@@ -854,13 +856,14 @@ async function runRenameMigrations(root, dialect) {
 	ye("Done.");
 }
 async function runExport(root, args, dialect) {
+	const errOut = { output: process.stderr };
 	if (dialect === "postgresql") {
 		const parts = [];
 		await withPgClient(root, async (client) => {
 			let tables;
 			if (args.table) {
 				if ((await client.query("SELECT tablename FROM pg_tables WHERE schemaname = 'public' AND tablename = $1", [args.table])).rows.length === 0) {
-					R.error(`db: Table '${args.table}' not found.`);
+					R.error(`db: Table '${args.table}' not found.`, errOut);
 					process.exit(1);
 				}
 				tables = [args.table];
@@ -902,7 +905,7 @@ async function runExport(root, args, dialect) {
 	const { getMiniflareDatabasePath, openSqliteDatabase } = await import("./runner-BQyKUqAL.mjs");
 	const dbPath = getMiniflareDatabasePath(getLocalD1PersistRoot(root), "local");
 	if (!existsSync(dbPath)) {
-		R.error("No local database found. Run `void dev` first.");
+		R.error("No local database found. Run `void dev` first.", errOut);
 		process.exit(1);
 	}
 	const db = await openSqliteDatabase(dbPath, { readonly: true });
@@ -910,7 +913,7 @@ async function runExport(root, args, dialect) {
 		let tables;
 		if (args.table) {
 			if (!db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name=?").get(args.table)) {
-				R.error(`db: Table '${args.table}' not found.`);
+				R.error(`db: Table '${args.table}' not found.`, errOut);
 				process.exit(1);
 			}
 			tables = [args.table];
@@ -1047,7 +1050,7 @@ async function loadSeedFunction(seedPath) {
 	return seed;
 }
 async function loadSeedSchema(root) {
-	const { discoverSchema } = await import("./discover-C8N1I4tK.mjs").then((n) => n.n);
+	const { discoverSchema } = await import("./discover-ZWuBvt22.mjs").then((n) => n.n);
 	const location = discoverSchema(root, readProjectPaths(root));
 	if (!location) return {};
 	if (location.type === "file") {

package/dist/{delete-CfSe3EJO.mjs → delete-CplfvTgU.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle, r as createSpinner } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, l as Re, u as Se, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { i as removeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{deploy-DpOdwtla.mjs → deploy-CISNL5uK.mjs}

@@ -4,28 +4,29 @@ import { n as cliTitle, r as createSpinner, s as import_picocolors } from "./out
 import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { t as findVoidAuthConfig } from "./config-hhMYPVRT.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DKDsgwOU.mjs";
-import { a as isExpiredTokenError, f as getToken, i as isCliOutdatedError, m as isStagingMode, n as PlatformClient, o as parsePlatformErrorBody, p as getTokenSource, t as PlatformApiError, u as getApiUrl, y as ensureCloudflaredToken } from "./client-YIzxv2ZO.mjs";
+import { a as isExpiredTokenError, f as getToken, i as isCliOutdatedError, m as isStagingMode, n as PlatformClient, o as parsePlatformErrorBody, p as getTokenSource, t as PlatformApiError, u as getApiUrl, y as ensureCloudflaredToken } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
-import { a as scanQueuesSync, i as scanWebSocketRoutesSync, o as scanJobsSync, r as scanRoutes } from "./scan-DGEp1-1Q.mjs";
-import { i as inferProjectBindings, l as validateSsrEntry, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { a as scanQueuesSync, i as scanWebSocketRoutesSync, o as scanJobsSync, r as scanRoutes } from "./scan---8wfN58.mjs";
+import { i as inferProjectBindings, l as validateSsrEntry, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
 import { i as voidWarn, r as voidLog } from "./log-BdD_Fpms.mjs";
-import { t as discoverSchema } from "./discover-C8N1I4tK.mjs";
-import { t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
-import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-LH6eoyW-.mjs";
-import { n as writeDrizzleConfig } from "./config--wXmVOoe.mjs";
+import { n as mergeAndExpand, r as parseDotenvFile } from "./dotenv-lS94ymhM.mjs";
+import { t as discoverSchema } from "./discover-ZWuBvt22.mjs";
+import { t as findEnvFile } from "./env-types-BS8cZead.mjs";
+import { i as validateProdEnv, n as formatEnvReport, r as getDeployEnvDefaults, t as fetchRemoteSecretNames } from "./env-validation-BxbtBbjh.mjs";
+import { n as writeDrizzleConfig } from "./config-CbJS4Krx.mjs";
 import { t as collectMigrations } from "./collect-9rO3JFNM.mjs";
 import { n as buildMigrationPlanBundle } from "./plan-aD3wRDqF.mjs";
 import { r as validateMigrations, t as assertJournalCoherence } from "./validate-CNWm-PsL.mjs";
 import { t as scanPages } from "./scan-VCAM1oh3.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
-import { i as promptProjectSetupAction, n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-pLQdzEPe.mjs";
+import { i as promptProjectSetupAction, n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-LjvkYziS.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-Ce0AtSZL.mjs";
 import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BNWymgnH.mjs";
-import { t as promptForLoginToken } from "./login-B3l_sDwT.mjs";
-import { i as resolveProjectCommand, n as detectPreset, r as formatProjectCommand, t as FRAMEWORK_PRESETS } from "./preset-B7ZQZn0u.mjs";
+import { t as promptForLoginToken } from "./login-CvxxF_9z.mjs";
+import { i as resolveProjectCommand, n as detectPreset, r as formatProjectCommand, t as FRAMEWORK_PRESETS } from "./preset-D0My64KQ.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -56,6 +57,7 @@ function workerOwnsHtmlRouting(inputs) {
 function resolveAssetConfig(inputs) {
 	return resolveAssetRoutingPolicy(inputs).assetConfig;
 }
+const VOID_INTERNAL_WORKER_FIRST = ["/__void", "/__void/*"];
 function resolveAssetRoutingPolicy(inputs) {
 	const workerFirst = workerOwnsHtmlRouting(inputs);
 	const apiWorkerFirst = !workerFirst && (inputs.hasApiRoutes === true || inputs.authEnabled === true);
@@ -65,8 +67,15 @@ function resolveAssetRoutingPolicy(inputs) {
 			run_worker_first: ["/**"]
 		} : apiWorkerFirst ? {
 			not_found_handling: "single-page-application",
-			run_worker_first: ["/api", "/api/*"]
-		} : { not_found_handling: "single-page-application" },
+			run_worker_first: [
+				"/api",
+				"/api/*",
+				...VOID_INTERNAL_WORKER_FIRST
+			]
+		} : {
+			not_found_handling: "single-page-application",
+			run_worker_first: [...VOID_INTERNAL_WORKER_FIRST]
+		},
 		apiWorkerFirst,
 		workerFirst,
 		workerSpaFallback: workerFirst && !inputs.isSsr && !inputs.hasPages
@@ -1565,6 +1574,11 @@ const ASSET_MIME_TYPES = {
 	svg: "image/svg+xml; charset=utf-8",
 	txt: "text/plain; charset=utf-8",
 	csv: "text/csv; charset=utf-8",
+	md: "text/markdown; charset=utf-8",
+	markdown: "text/markdown; charset=utf-8",
+	yaml: "text/yaml; charset=utf-8",
+	yml: "text/yaml; charset=utf-8",
+	toml: "application/toml",
 	png: "image/png",
 	jpg: "image/jpeg",
 	jpeg: "image/jpeg",
@@ -2341,6 +2355,7 @@ var deploy_exports = /* @__PURE__ */ __exportAll({
 	ensurePreviouslyDeployedLiveBindingConfig: () => ensurePreviouslyDeployedLiveBindingConfig,
 	generateDeployWrapperIfNeeded: () => generateDeployWrapperIfNeeded,
 	hasDeploySchemaDrift: () => hasDeploySchemaDrift,
+	loadDeployEnv: () => loadDeployEnv,
 	promptDeployProjectConfig: () => promptDeployProjectConfig,
 	resolveDeployLiveBindingConfig: () => resolveDeployLiveBindingConfig,
 	resolveDeployWorkerMain: () => resolveDeployWorkerMain,
@@ -3646,24 +3661,7 @@ async function assertEnvSchemaValid(root, client, projectId) {
 * Later files win on conflict.
 */
 function loadDeployEnv(root) {
-	const files = [".env", ".env.production"];
-	const env = {};
-	for (const file of files) {
-		const filePath = join(root, file);
-		if (!existsSync(filePath)) continue;
-		const content = readFileSync(filePath, "utf-8");
-		for (const line of content.split("\n")) {
-			const trimmed = line.trim();
-			if (!trimmed || trimmed.startsWith("#")) continue;
-			const eqIndex = trimmed.indexOf("=");
-			if (eqIndex === -1) continue;
-			const key = trimmed.slice(0, eqIndex).trim();
-			let value = trimmed.slice(eqIndex + 1).trim();
-			if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
-			env[key] = value;
-		}
-	}
-	const { sanitized, stripped } = stripInternalEnvKeys(env);
+	const { sanitized, stripped } = stripInternalEnvKeys(mergeAndExpand([".env", ".env.production"].map((file) => parseDotenvFile(join(root, file), { expand: false })), { onWarn: (msg) => voidWarn(msg) }));
 	if (stripped.length > 0) voidWarn(`Ignoring internal env keys from .env files: ${stripped.join(", ")}. These are reserved for Void runtime use and will not be shipped in the deploy manifest.`);
 	return sanitized;
 }

package/dist/{discover-C8N1I4tK.mjs → discover-ZWuBvt22.mjs}

@@ -36,7 +36,7 @@ function discoverSchema(root, paths = readProjectPaths(root)) {
 */
 function schemaSpecifier(location, root) {
 	if (!root) return location.type === "file" ? "./db/schema.ts" : "./db/schema/*.ts";
-	const rel = relative(root, location.path).replace(/\\/g, "/");
+	const rel = relative(root, location.path);
 	return location.type === "file" ? `./${rel}` : `./${rel}/*.ts`;
 }
 //#endregion

package/dist/{domain-CkowysQx.mjs → domain-B4HpcgNG.mjs}

@@ -1,5 +1,5 @@
 import { s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, u as Se } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/domain.ts

package/dist/{env-CIwG2y7G.mjs → env-DNMJpeVF.mjs}

@@ -1,10 +1,10 @@
 import { a as join } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, u as Se, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
-import { a as loadUserEnvFile, i as validateProdEnv, n as formatEnvReport, t as fetchRemoteSecretNames } from "./env-validation-LH6eoyW-.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BS8cZead.mjs";
+import { a as loadUserEnvFile, i as validateProdEnv, n as formatEnvReport, t as fetchRemoteSecretNames } from "./env-validation-BxbtBbjh.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/cli/env-example.ts
 /**

package/dist/{env-types-CaJaIRXU.mjs → env-types-BS8cZead.mjs}

@@ -31,7 +31,7 @@ function findEnvFileForPaths(root, paths) {
 * @param outDir Absolute path to the project's `.void/` directory.
 */
 function generateEnvTypes(envFileAbs, outDir) {
-	const importPath = relative(outDir, envFileAbs).replace(/\\/g, "/");
+	const importPath = relative(outDir, envFileAbs);
 	const lines = [];
 	lines.push("// Auto-generated by void — do not edit");
 	lines.push("export {}");

package/dist/{env-validation-LH6eoyW-.mjs → env-validation-BxbtBbjh.mjs}

@@ -1,7 +1,7 @@
 import { a as join } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { i as voidWarn } from "./log-BdD_Fpms.mjs";
 import { n as mergeAndExpand, r as parseDotenvFile } from "./dotenv-lS94ymhM.mjs";
-import { t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
+import { t as findEnvFile } from "./env-types-BS8cZead.mjs";
 import { pathToFileURL } from "node:url";
 //#region src/host/load-user-env.ts
 /**

package/dist/{gen-q6McxXgE.mjs → gen-C0pV2gRQ.mjs}

@@ -2,9 +2,9 @@ import { a as join, n as dirname, s as relative } from "./pathe.M-eThtNZ-BrPhGF_
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { _ as me, c as R, g as ge, i as Ee, x as q, y as ye } from "./dist-abzUneor.mjs";
-import { n as ensureProjectTsconfig } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { n as ensureProjectTsconfig } from "./project-tsconfig-DMBV55K2.mjs";
 import { c as getDatabaseDialect, f as readConfig } from "./config-8dLIngKW.mjs";
-import { n as writeDrizzleConfig } from "./config--wXmVOoe.mjs";
+import { n as writeDrizzleConfig } from "./config-CbJS4Krx.mjs";
 import { r as readJournal, t as collectMigrations } from "./collect-9rO3JFNM.mjs";
 import { n as listDrizzleArtifacts, t as assertJournalCoherence } from "./validate-CNWm-PsL.mjs";
 import { t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-WLW2IHUY.mjs";

package/dist/{github-cmd-BvEKQmcD.mjs → github-cmd-CwtLD1yI.mjs}

@@ -1,5 +1,5 @@
 import { s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { c as createCodeChallenge, f as getToken, h as openBrowser, l as createCodeVerifier, n as PlatformClient, o as parsePlatformErrorBody, s as awaitBrowserCallback, t as PlatformApiError } from "./client-YIzxv2ZO.mjs";
+import { c as createCodeChallenge, f as getToken, h as openBrowser, l as createCodeVerifier, n as PlatformClient, o as parsePlatformErrorBody, s as awaitBrowserCallback, t as PlatformApiError } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, i as Ee, l as Re, x as q } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";
@@ -106,6 +106,7 @@ async function runGithubCommand(root, args) {
 		case "update": return runGithubUpdate(root, client, args);
 		case "status": return runStatus(root, client, args);
 		case "link": return runGithubLink(root, client);
+		case "join": return runGithubJoin(root, client);
 	}
 }
 /**
@@ -187,6 +188,49 @@ async function runGithubLink(root, client) {
 	if (status === "already_linked") R.success("GitHub account already linked.");
 	else R.success("GitHub account linked.");
 }
+/**
+* Discover and join the shared GitHub App installations owned by the
+* organizations the logged-in GitHub identity belongs to. Drives the same
+* 3-endpoint localhost + PKCE handshake as {@link runGithubLink}, but against
+* the platform's JOIN routes: membership upsert is idempotent, so unlike link
+* there is no 409/already-linked conflict to map. The only special error is the
+* fail-closed 503 raised when org-installation sharing is not configured on the
+* instance.
+*/
+async function runGithubJoin(root, client) {
+	const verifier = createCodeVerifier();
+	const challenge = createCodeChallenge(verifier);
+	const state = randomBytes(32).toString("hex");
+	let count;
+	try {
+		({count} = await awaitBrowserCallback({
+			state,
+			buildAuthUrl: async (callback) => {
+				callback.searchParams.set("state", state);
+				const { url } = await client.getGithubJoinUrl(callback.href, challenge);
+				return url;
+			},
+			describeError: (p) => p.get("error") ? "GitHub authorization failed." : null,
+			onUrl: (url) => R.message(`Open this URL to join your organization's shared GitHub App installations:\n${import_picocolors.default.cyan(url)}`),
+			finalize: async (params) => {
+				const joinCode = params.get("join_code");
+				if (!joinCode) throw new Error("github: join callback did not return a join code.");
+				return client.completeGithubJoin(joinCode, verifier);
+			}
+		}));
+	} catch (err) {
+		if (err instanceof PlatformApiError && err.status === 503 && err.code === "github_oauth_not_configured") {
+			R.error("Organization installation sharing is not enabled on this Void instance.");
+			process.exit(1);
+		}
+		throw err;
+	}
+	if (count === 0) R.info("No new installations to join.");
+	else {
+		R.success(`Joined ${count} installation${count === 1 ? "" : "s"}.`);
+		R.message("Run `void github installations` to see them, then `void github connect`.");
+	}
+}
 async function runInstallations(client) {
 	const installations = await client.listGithubInstallations();
 	if (installations.length === 0) {
@@ -195,6 +239,50 @@ async function runInstallations(client) {
 	}
 	R.message(formatInstallations(installations));
 }
+/**
+* Per-repo connect authorization round-trip for a non-owner org member.
+*
+* When the connect route returns 403 `connect_authorization_required` (Task 8),
+* the member has no proof they can access the specific repo under the shared
+* installation. This drives the same localhost + PKCE handshake as
+* {@link runGithubLink}/{@link runGithubJoin}, but against the platform's
+* connect-authorize route (Task 7): the callback mints and returns the grant IN
+* the redirect URL (`?connect_grant=…`), so there is no separate `/complete`
+* POST — `finalize` just reads the grant out of the callback query. A
+* `?error=repo_not_accessible` callback is mapped to a friendly per-repo message
+* by `describeError`, which rejects out of the handshake (no grant, no retry).
+*
+* Returns the grant plus the PKCE verifier the caller must echo to the connect
+* route so the platform can bind the grant to this exchange.
+*/
+async function runGithubConnectAuthorize(client, installationId, repoFullName) {
+	const verifier = createCodeVerifier();
+	const challenge = createCodeChallenge(verifier);
+	const state = randomBytes(32).toString("hex");
+	const { connectGrant } = await awaitBrowserCallback({
+		state,
+		buildAuthUrl: async (callback) => {
+			callback.searchParams.set("state", state);
+			const { url } = await client.getGithubConnectAuthorizeUrl(callback.href, challenge, installationId, repoFullName);
+			return url;
+		},
+		describeError: (p) => {
+			const e = p.get("error");
+			if (e === "repo_not_accessible") return `You don't have access to ${repoFullName} under this installation on GitHub.`;
+			return e ? "GitHub authorization failed." : null;
+		},
+		onUrl: (url) => R.message(`Open this URL to authorize access to ${repoFullName}:\n${import_picocolors.default.cyan(url)}`),
+		finalize: async (params) => {
+			const grant = params.get("connect_grant");
+			if (!grant) throw new Error("github: connect authorization did not return a grant.");
+			return { connectGrant: grant };
+		}
+	});
+	return {
+		connectGrant,
+		codeVerifier: verifier
+	};
+}
 async function runConnect(root, client, args) {
 	const isTTY = process.stdin.isTTY === true;
 	let projectId;
@@ -367,17 +455,38 @@ async function runConnect(root, client, args) {
 		const chosen = input.trim() || ".github/workflows/void-deploy.yml";
 		if (chosen !== ".github/workflows/void-deploy.yml") workflowPath = chosen;
 	}
+	const attemptConnect = (extra) => client.connectGithub(projectId, {
+		installationId: installation.installation_id,
+		repoFullName,
+		branch,
+		buildExecutor: executor,
+		workflowPath,
+		...extra
+	});
 	let connection;
 	try {
-		connection = await client.connectGithub(projectId, {
-			installationId: installation.installation_id,
-			repoFullName,
-			branch,
-			buildExecutor: executor,
-			workflowPath
-		});
+		connection = await attemptConnect();
 	} catch (err) {
-		if (err instanceof PlatformApiError) {
+		if (!(err instanceof PlatformApiError)) throw err;
+		if (err.status === 403 && err.code === "connect_authorization_required") {
+			if (!isTTY) {
+				R.error("connect: this installation requires per-repo authorization, which needs an interactive browser sign-in. Run `void github connect` locally to authorize, then retry.");
+				process.exit(1);
+			}
+			const grant = await runGithubConnectAuthorize(client, installation.installation_id, repoFullName);
+			try {
+				connection = await attemptConnect({
+					connectGrant: grant.connectGrant,
+					codeVerifier: grant.codeVerifier
+				});
+			} catch (retryErr) {
+				if (retryErr instanceof PlatformApiError && retryErr.status === 403) {
+					R.error("connect: GitHub authorization failed or expired. Run `void github connect` again.");
+					process.exit(1);
+				}
+				throw retryErr;
+			}
+		} else {
 			const body = parsePlatformErrorBody(err.body);
 			const code = body?.error ?? body?.message ?? "";
 			const message = describeConnectError(err.status, code);
@@ -387,7 +496,6 @@ async function runConnect(root, client, args) {
 			}
 			throw err;
 		}
-		throw err;
 	}
 	if (workflowPath !== void 0 && connection.workflow_path !== workflowPath) {
 		R.error(`connect: server did not apply workflow path ${workflowPath} (got ${connection.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);

package/dist/index.mjs

@@ -1,22 +1,22 @@
 import { r as __toESM } from "./chunk-DJd-R1mw.mjs";
 import { a as join, n as dirname, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { u as require_picocolors } from "./output-DeiS4oEX.mjs";
-import { C as hasApiRoutes, S as resolveSandboxConfig, T as resolveAssetRoutingPolicy, _ as readWranglerCompat, a as prerenderPagesNode, b as SANDBOX_MIGRATION_TAG, c as stripInternalEnvKeys, d as ensureWranglerCompatibilityDate, f as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, i as prerenderPages, l as LIVE_MIGRATION_TAG, m as nextDurableObjectMigrationTag, n as resolveDistDir, o as filterLoadedEnv, p as hasDurableObjectSqliteMigration, r as resolveWorkerDirName, s as resolveRemoteMode, u as ensureWranglerCompat, v as resolveLiveBindingConfig, w as hasDocumentRoutes, x as isSandboxEnabled, y as syncWranglerBindings } from "./deploy-DpOdwtla.mjs";
+import { C as hasApiRoutes, S as resolveSandboxConfig, T as resolveAssetRoutingPolicy, _ as readWranglerCompat, a as prerenderPagesNode, b as SANDBOX_MIGRATION_TAG, c as stripInternalEnvKeys, d as ensureWranglerCompatibilityDate, f as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, i as prerenderPages, l as LIVE_MIGRATION_TAG, m as nextDurableObjectMigrationTag, n as resolveDistDir, o as filterLoadedEnv, p as hasDurableObjectSqliteMigration, r as resolveWorkerDirName, s as resolveRemoteMode, u as ensureWranglerCompat, v as resolveLiveBindingConfig, w as hasDocumentRoutes, x as isSandboxEnabled, y as syncWranglerBindings } from "./deploy-CISNL5uK.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-CCMrHYQm.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-hhMYPVRT.mjs";
-import { f as getToken, m as isStagingMode } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, m as isStagingMode } from "./client-BlbnA92X.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-DMBV55K2.mjs";
 import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-8dLIngKW.mjs";
-import { a as scanQueuesSync, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, t as scanMiddlewareSync } from "./scan-DGEp1-1Q.mjs";
-import { a as SSR_CLIENT_ENTRY_RELATIVE_PATHS, c as validateSsrEntries, f as isIdentifier, g as walk, i as inferProjectBindings, l as validateSsrEntry, m as isMemberExpression, n as FRAMEWORK_SCAN_DIRS, o as SSR_SERVER_ENTRY_RELATIVE_PATHS, p as isLiteral, r as detectFramework, t as DEFAULT_SCAN_DIRS, u as inferBindingsFromSource } from "./plugin-inference-C3fLzFvP.mjs";
+import { a as scanQueuesSync, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, t as scanMiddlewareSync } from "./scan---8wfN58.mjs";
+import { a as SSR_CLIENT_ENTRY_RELATIVE_PATHS, c as validateSsrEntries, f as isIdentifier, g as walk, i as inferProjectBindings, l as validateSsrEntry, m as isMemberExpression, n as FRAMEWORK_SCAN_DIRS, o as SSR_SERVER_ENTRY_RELATIVE_PATHS, p as isLiteral, r as detectFramework, t as DEFAULT_SCAN_DIRS, u as inferBindingsFromSource } from "./plugin-inference-D04iL1mW.mjs";
 import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-BdD_Fpms.mjs";
 import { r as parseDotenvFile } from "./dotenv-lS94ymhM.mjs";
-import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t as generateRouteTypes } from "./route-types-D03ryMXz.mjs";
-import { t as discoverSchema } from "./discover-C8N1I4tK.mjs";
+import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t as generateRouteTypes } from "./route-types-BpSJEW20.mjs";
+import { t as discoverSchema } from "./discover-ZWuBvt22.mjs";
 import { t as MagicString } from "./magic-string.es-C1Fb0uxq.mjs";
-import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
-import { a as loadUserEnvFile } from "./env-validation-LH6eoyW-.mjs";
+import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-BS8cZead.mjs";
+import { a as loadUserEnvFile } from "./env-validation-BxbtBbjh.mjs";
 import { i as resolveLayoutIds } from "./scan-VCAM1oh3.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-M3pxItg2.mjs";
 import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BNWymgnH.mjs";
@@ -4916,7 +4916,7 @@ const STAGING_API_URL = "https://api.staging.void.cloud";
 */
 async function runAiSetupPrompt(root, token, staging, server) {
 	const { select, text, isCancel, log } = await import("./dist-abzUneor.mjs").then((n) => n.p);
-	const { PlatformClient } = await import("./client-YIzxv2ZO.mjs").then((n) => n.r);
+	const { PlatformClient } = await import("./client-BlbnA92X.mjs").then((n) => n.r);
 	const { writeProjectConfig } = await import("./project-CH9pdo16.mjs").then((n) => n.n);
 	const { inferDefaultSlug } = await import("./resolve-project-D4O1_fZz.mjs").then((n) => n.i);
 	const client = new PlatformClient(token, staging ? STAGING_API_URL : DEFAULT_API_URL);
@@ -4945,7 +4945,7 @@ async function runAiSetupPrompt(root, token, staging, server) {
 	let slug;
 	if (result === "__create__") {
 		const { validateProjectSlug } = await import("./project-slug-rX3kTOfY.mjs").then((n) => n.t);
-		const { createProjectWithSlugRetry } = await import("./create-project-pLQdzEPe.mjs").then((n) => n.t);
+		const { createProjectWithSlugRetry } = await import("./create-project-LjvkYziS.mjs").then((n) => n.t);
 		let created;
 		try {
 			created = await createProjectWithSlugRetry(client, inferDefaultSlug(root), async (defaultSlug) => {

package/dist/{init-CZP69LJu.mjs → init-D58GxCtt.mjs}

@@ -1,19 +1,19 @@
 import { a as join, c as resolve, i as isAbsolute, n as dirname, s as relative, t as basename } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
-import { f as getToken, m as isStagingMode, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, m as isStagingMode, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, i as Ee, l as Re, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-DMBV55K2.mjs";
 import { c as getDatabaseDialect, f as readConfig } from "./config-8dLIngKW.mjs";
-import { r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
+import { r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
 import { r as parseDotenvFile, t as expandDotenv } from "./dotenv-lS94ymhM.mjs";
 import { t as MagicString } from "./magic-string.es-C1Fb0uxq.mjs";
-import { n as writeDrizzleConfig } from "./config--wXmVOoe.mjs";
+import { n as writeDrizzleConfig } from "./config-CbJS4Krx.mjs";
 import { n as getAgentById, r as getPackageDir, t as detectAgents } from "./agents-MhSzNMiC.mjs";
-import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-pLQdzEPe.mjs";
-import { t as promptForLoginToken } from "./login-B3l_sDwT.mjs";
-import { r as formatProjectCommand } from "./preset-B7ZQZn0u.mjs";
+import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-LjvkYziS.mjs";
+import { t as promptForLoginToken } from "./login-CvxxF_9z.mjs";
+import { r as formatProjectCommand } from "./preset-D0My64KQ.mjs";
 import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-WLW2IHUY.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";

package/dist/{link-BKLElphS.mjs → link-ZFmboqY3.mjs}

@@ -1,8 +1,8 @@
 import { n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getSiteDomain, f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { d as getSiteDomain, f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { a as writeProjectConfig, r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-pLQdzEPe.mjs";
+import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-LjvkYziS.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";
 //#region src/cli/link.ts
 async function runLink(root, slug) {

package/dist/{list-B7qXBBjo.mjs → list-CbNNjXTm.mjs}

@@ -1,5 +1,5 @@
 import { a as ensureUtc, i as dim, l as tablePrefix, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/{login-B3l_sDwT.mjs → login-CvxxF_9z.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle, r as createSpinner, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { _ as runLogin, a as isExpiredTokenError, f as getToken, g as removeToken, m as isStagingMode, n as PlatformClient, p as getTokenSource, v as saveToken } from "./client-YIzxv2ZO.mjs";
+import { _ as runLogin, a as isExpiredTokenError, f as getToken, g as removeToken, m as isStagingMode, n as PlatformClient, p as getTokenSource, v as saveToken } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, i as Ee, x as q, y as ye } from "./dist-abzUneor.mjs";
 //#region src/cli/login.ts
 async function promptForLoginToken(root = process.cwd()) {

package/dist/{logs-AXm660MB.mjs → logs-BDZ9AuhM.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/logs.ts

package/dist/{mcp-D2plINxM.mjs → mcp-C8BjRt_z.mjs}

@@ -1,5 +1,5 @@
 import { a as join, n as dirname } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { a as writeProjectConfig } from "./project-CH9pdo16.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/dist/{plugin-inference-C3fLzFvP.mjs → plugin-inference-D04iL1mW.mjs}

@@ -359,7 +359,7 @@ const SSR_SERVER_ENTRY_RELATIVE_PATHS = ["src/main.ssr.ts", "src/main.ssr.tsx"];
 const SSR_CLIENT_ENTRY_RELATIVE_PATHS = ["src/main.client.ts", "src/main.client.tsx"];
 function resolveSingleEntry(root, entries, label, paths = readProjectPaths(root)) {
 	const matches = entries.map((entryName) => ({
-		relativePath: relative(root, join(paths.ssrDir, entryName)).replace(/\\/g, "/"),
+		relativePath: relative(root, join(paths.ssrDir, entryName)),
 		absolutePath: join(paths.ssrDir, entryName)
 	})).filter((entry) => existsSync(entry.absolutePath));
 	if (matches.length === 0) return null;

package/dist/{prepare-DRRboRqH.mjs → prepare-DUo9q8cM.mjs}

@@ -3,13 +3,13 @@ import { n as cliTitle } from "./output-DeiS4oEX.mjs";
 import { i as resolveProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-hhMYPVRT.mjs";
 import { c as R, g as ge, u as Se, y as ye } from "./dist-abzUneor.mjs";
-import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-DMBV55K2.mjs";
 import { c as getDatabaseDialect, f as readConfig } from "./config-8dLIngKW.mjs";
-import { r as scanRoutes } from "./scan-DGEp1-1Q.mjs";
-import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-C3fLzFvP.mjs";
-import { i as generateDbDts, n as generateQueueTypes, t as generateRouteTypes } from "./route-types-D03ryMXz.mjs";
-import { t as discoverSchema } from "./discover-C8N1I4tK.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-CaJaIRXU.mjs";
+import { r as scanRoutes } from "./scan---8wfN58.mjs";
+import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-D04iL1mW.mjs";
+import { i as generateDbDts, n as generateQueueTypes, t as generateRouteTypes } from "./route-types-BpSJEW20.mjs";
+import { t as discoverSchema } from "./discover-ZWuBvt22.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BS8cZead.mjs";
 import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-DqstQTGq.mjs";
 import { existsSync, mkdirSync, rmSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/dist/{preset-B7ZQZn0u.mjs → preset-D0My64KQ.mjs}

@@ -1,6 +1,6 @@
 import { a as join, c as resolve } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
-import { s as hasSsrEntry } from "./plugin-inference-C3fLzFvP.mjs";
+import { s as hasSsrEntry } from "./plugin-inference-D04iL1mW.mjs";
 import { i as readPackageJson, n as hasPackageDependency, t as getPackageDependencies } from "./package-json-Bg_GJdJB.mjs";
 import { existsSync } from "node:fs";
 //#region src/cli/preset.ts

package/dist/{project-cmd-InegJruy.mjs → project-cmd-Dd1gNRdd.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, l as tablePrefix, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getSiteDomain, f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { d as getSiteDomain, f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 //#region src/cli/projects.ts
 async function runProjectsCommand(root) {
@@ -34,32 +34,32 @@ async function runProjectsCommand(root) {
 //#region src/cli/project-cmd.ts
 async function runProjectCommand(root, args) {
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-B7qXBBjo.mjs");
+		const { runListCommand } = await import("./list-CbNNjXTm.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
-		const { runLink } = await import("./link-BKLElphS.mjs");
+		const { runLink } = await import("./link-ZFmboqY3.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") return runProjectsCommand(root);
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-AXm660MB.mjs");
+		const { runLogsCommand } = await import("./logs-BDZ9AuhM.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-CHVE-DeT.mjs");
+		const { runRollbackCommand } = await import("./rollback-DzmCCrFg.mjs");
 		return runRollbackCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "cancel") {
-		const { runCancelDeployCommand } = await import("./cancel-deploy-S2N8NSv6.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-Gi8zmoZC.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
-		const { runDeleteCommand } = await import("./delete-CfSe3EJO.mjs");
+		const { runDeleteCommand } = await import("./delete-CplfvTgU.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
-		const { runPurgeCacheCommand } = await import("./cache-CMzjhxHh.mjs");
+		const { runPurgeCacheCommand } = await import("./cache-ACORQCIq.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{project-tsconfig-BTNuNoJ0.mjs → project-tsconfig-DMBV55K2.mjs}

@@ -45,8 +45,8 @@ function createProjectTsconfig(root, hasRouteTypes, hasDb, hasSchema, options =
 		if (options.redirectDbModule !== false) paths["void/db"] = ["./db.d.ts"];
 		if (hasSchema) {
 			const isDir = existsSync(pathsConfig.schemaDir) && !existsSync(pathsConfig.schemaFile);
-			const schemaRel = relative(outDir, pathsConfig.schemaDir).replace(/\\/g, "/");
-			const schemaFileRel = relative(outDir, pathsConfig.schemaFile).replace(/\\/g, "/");
+			const schemaRel = relative(outDir, pathsConfig.schemaDir);
+			const schemaFileRel = relative(outDir, pathsConfig.schemaFile);
 			paths["@schema"] = [isDir ? `${schemaRel}/index.ts` : schemaFileRel];
 			paths["@schema/*"] = [`${schemaRel}/*`];
 		}

package/dist/{rollback-CHVE-DeT.mjs → rollback-DzmCCrFg.mjs}

@@ -1,5 +1,5 @@
 import { a as ensureUtc, i as dim, n as cliTitle, r as createSpinner, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, i as Ee, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/rollback.ts

package/dist/{route-types-D03ryMXz.mjs → route-types-BpSJEW20.mjs}

@@ -1,5 +1,5 @@
 import { a as join, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
-import { r as writeFileIfChanged } from "./project-tsconfig-BTNuNoJ0.mjs";
+import { r as writeFileIfChanged } from "./project-tsconfig-DMBV55K2.mjs";
 import { mkdirSync } from "node:fs";
 //#region src/codegen/db-types.ts
 const DRIZZLE_OPERATORS = "sql, eq, ne, gt, gte, lt, lte, and, or, not, desc, asc, like, ilike, notLike, inArray, notInArray, isNull, isNotNull, between, notBetween, exists, notExists, count, sum, avg, min, max";

package/dist/{scan-DGEp1-1Q.mjs → scan---8wfN58.mjs}

@@ -1,7 +1,7 @@
 import { a as join, i as isAbsolute, t as basename } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { n as readProjectPaths } from "./project-paths-CCMrHYQm.mjs";
 import { n as globSync, t as glob } from "./dist-5cGIJHQQ.mjs";
-import { d as isCallExpression, f as isIdentifier, h as isObjectExpression, p as isLiteral } from "./plugin-inference-C3fLzFvP.mjs";
+import { d as isCallExpression, f as isIdentifier, h as isObjectExpression, p as isLiteral } from "./plugin-inference-D04iL1mW.mjs";
 import { o as parseRouteFilename, s as parseWebSocketFilename, t as scanPages } from "./scan-VCAM1oh3.mjs";
 import { readFileSync } from "node:fs";
 import { parseSync } from "vite";

package/dist/{secret-CVKwIOm3.mjs → secret-CMLYWkE-.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
+import { f as getToken, n as PlatformClient } from "./client-BlbnA92X.mjs";
 import { _ as me, c as R, g as ge, n as Ce, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/dist/sveltekit.mjs

@@ -51,7 +51,7 @@ function resolveTsconfigEntry(baseDir, entry) {
 	return isAbsolute(entry) ? entry : resolve(baseDir, entry);
 }
 function relativeFrom(fromDir, target) {
-	const value = relative(fromDir, target).replace(/\\/g, "/");
+	const value = relative(fromDir, target);
 	return value.startsWith(".") ? value : `./${value}`;
 }
 function uniqueStrings(values) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.4",
+  "version": "0.10.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -353,7 +353,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.4"
+    "@void/md": "0.10.5"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/skills/void/docs/reference/cli.md

@@ -597,6 +597,16 @@ void github installations
 
 List all GitHub App installations linked to your account. Each entry includes the `[id: <installation_id>]` needed for `--installation` in non-interactive use.
 
+### `void github join`
+
+```
+void github join
+```
+
+Join the GitHub App installations your organization already has. If a teammate installed the Void GitHub App on a shared GitHub organization, run `void github join` to gain access to those installations without re-installing. Void opens your browser to authorize (a localhost + PKCE handshake, the same mechanics as `void github link`), confirms with GitHub which installations you can manage, and records your membership. Afterwards `void github installations` lists them and `void github connect` can connect your own projects to their repositories.
+
+Requires an authenticated CLI (`void auth login` first) and organization-installation sharing enabled on your Void instance; when it is not enabled the command fails closed with a clear message. You can only join installations your GitHub authorization actually returns — you cannot name or join one you cannot access on GitHub.
+
 ### `void github connect`
 
 ```
@@ -633,6 +643,10 @@ void github connect my-app \
 
 **Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
 
+**Connecting as an organization member**
+
+If you are a member of a GitHub organization but not the person who installed the App, `void github connect` first confirms that you personally have access to the specific repository. When it detects this, it opens your browser once to authorize access to that repo on GitHub (a localhost + PKCE handshake), then completes the connection automatically — no extra flags. Run `void github join` first so the installation appears in `void github installations`. You can only connect repositories you can access on GitHub; one you cannot see is refused with a clear message.
+
 ### `void github update`
 
 ```