void 0.20.0 → 0.20.2

package/dist/{cloudflare-auth-DRkGe7-s.mjs → cloudflare-auth-6M5llVPC.mjs}

@@ -1,6 +1,6 @@
-import { D as log } from "./output-tFQLLj26.mjs";
+import { D as log } from "./output-B0cfNSx5.mjs";
 import { o as resolveWranglerArgv } from "./preset-lAy0B0BQ.mjs";
-import { execFile, spawnSync } from "node:child_process";
+import { execFile, spawn, spawnSync } from "node:child_process";
 //#region src/cli/cloudflare-auth.ts
 var CloudflareAuthenticationError = class extends Error {
 	name = "CloudflareAuthenticationError";
@@ -102,7 +102,11 @@ function createBundledCloudflareAuthRunner(root) {
 			env,
 			maxBuffer: 10485760,
 			shell: false,
-			stdio: capture ? [
+			stdio: cloudflareKeyringNeedsTerminal(args) ? [
+				"inherit",
+				"inherit",
+				"ignore"
+			] : capture ? [
 				"ignore",
 				"pipe",
 				"pipe"
@@ -122,6 +126,37 @@ function createBundledCloudflareAuthRunner(root) {
 /** Run a captured auth command without blocking terminal input or exposing credentials. */
 function runCloudflareAuthCommand(root, args, signal) {
 	const [command, ...prefix] = resolveWranglerArgv(root);
+	if (cloudflareKeyringNeedsTerminal(args)) return new Promise((resolve) => {
+		const child = spawn(command, [...prefix, ...args], {
+			cwd: root,
+			env: cloudflareAuthCommandEnvironment(args),
+			shell: false,
+			signal,
+			stdio: [
+				"inherit",
+				"inherit",
+				"ignore"
+			],
+			timeout: 6e5,
+			windowsHide: true
+		});
+		child.once("error", (error) => {
+			resolve({
+				status: null,
+				stdout: "",
+				stderr: "",
+				error: error.message
+			});
+		});
+		child.once("close", (status, signal) => {
+			resolve({
+				status,
+				signal,
+				stdout: "",
+				stderr: ""
+			});
+		});
+	});
 	return new Promise((resolve) => {
 		execFile(command, [...prefix, ...args], {
 			cwd: root,
@@ -145,9 +180,21 @@ function runCloudflareAuthCommand(root, args, signal) {
 }
 function cloudflareAuthCommandEnvironment(args, source = process.env) {
 	const env = cloudflareAuthEnvironment(source);
-	if (args[0] === "login" || args[0] === "logout") env.WRANGLER_LOG = "none";
+	if (args[0] === "login" || args[0] === "logout" || isCloudflareKeyringEnable(args)) env.WRANGLER_LOG = "none";
 	return env;
 }
+function isCloudflareKeyringEnable(args) {
+	return args.length === 3 && args[0] === "auth" && args[1] === "keyring" && args[2] === "enable";
+}
+/**
+* Wrangler installs its Windows keyring backend only when stdin AND stdout are
+* terminals. Capturing `auth keyring enable` makes first-time setup fail even
+* inside PowerShell. This command only configures storage; it never reads or
+* prints a credential. Keep every other auth command captured.
+*/
+function cloudflareKeyringNeedsTerminal(args) {
+	return process.platform === "win32" && process.stdin.isTTY === true && process.stdout.isTTY === true && isCloudflareKeyringEnable(args);
+}
 function cloudflareAuthEnvironment(source = process.env) {
 	const env = { ...source };
 	const scrubbedWranglerKeys = /* @__PURE__ */ new Set([
@@ -155,7 +202,7 @@ function cloudflareAuthEnvironment(source = process.env) {
 		"WRANGLER_OUTPUT_FILE_PATH",
 		"WRANGLER_LOG_SANITIZE"
 	]);
-	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN)$/i.test(key) || scrubbedWranglerKeys.has(key.toUpperCase())) delete env[key];
+	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedWranglerKeys.has(key.toUpperCase())) delete env[key];
 	env.CLOUDFLARE_AUTH_USE_KEYRING = "true";
 	env.WRANGLER_LOG_SANITIZE = "true";
 	return env;
@@ -167,4 +214,4 @@ function announceCloudflareLogin() {
 	log.info("Opening Cloudflare login in your browser. Press Ctrl+C to cancel.");
 }
 //#endregion
-export { enableCloudflareKeyring as a, runCloudflareAuthCommand as c, createBundledCloudflareAuthRunner as i, announceCloudflareLogin as n, ensureCloudflareAuthentication as o, cloudflareCredentialOverrides as r, parseCloudflareAuthSession as s, CloudflareAuthenticationError as t };
+export { createBundledCloudflareAuthRunner as a, parseCloudflareAuthSession as c, cloudflareKeyringNeedsTerminal as i, runCloudflareAuthCommand as l, announceCloudflareLogin as n, enableCloudflareKeyring as o, cloudflareCredentialOverrides as r, ensureCloudflareAuthentication as s, CloudflareAuthenticationError as t };

package/dist/{cloudflare-cmd-D3ME2GAe.mjs → cloudflare-cmd-4RPGN3KB.mjs}

@@ -1,7 +1,7 @@
 import { t as basename } from "./dist-BrsS7cai.mjs";
-import { D as log } from "./output-tFQLLj26.mjs";
+import { D as log } from "./output-B0cfNSx5.mjs";
 import { v as readRootWranglerConfig } from "./wrangler--imS8n0d.mjs";
-import { a as enableCloudflareKeyring, i as createBundledCloudflareAuthRunner, o as ensureCloudflareAuthentication, r as cloudflareCredentialOverrides, s as parseCloudflareAuthSession } from "./cloudflare-auth-DRkGe7-s.mjs";
+import { a as createBundledCloudflareAuthRunner, c as parseCloudflareAuthSession, o as enableCloudflareKeyring, r as cloudflareCredentialOverrides, s as ensureCloudflareAuthentication } from "./cloudflare-auth-6M5llVPC.mjs";
 //#region src/cli/cloudflare-cmd.ts
 async function runCloudflareCommand(root, args) {
 	const runWrangler = createBundledCloudflareAuthRunner(root);

package/dist/{cloudflare-connect-BivMefMA.mjs → cloudflare-connect-t1UU5svD.mjs}

@@ -1,7 +1,7 @@
 import { o as join, t as basename } from "./dist-BrsS7cai.mjs";
-import { D as log, F as isCancel, j as select } from "./output-tFQLLj26.mjs";
+import { D as log, I as isCancel, M as select } from "./output-B0cfNSx5.mjs";
 import { i as LATEST_KNOWN_COMPAT_DATE, k as writeProvisionedWranglerConfig, v as readRootWranglerConfig } from "./wrangler--imS8n0d.mjs";
-import { i as createBundledCloudflareAuthRunner, o as ensureCloudflareAuthentication } from "./cloudflare-auth-DRkGe7-s.mjs";
+import { a as createBundledCloudflareAuthRunner, s as ensureCloudflareAuthentication } from "./cloudflare-auth-6M5llVPC.mjs";
 import { existsSync } from "node:fs";
 //#region src/cli/cloudflare-connect.ts
 async function connectCloudflare(root, interactive = Boolean(process.stdin.isTTY)) {

package/dist/{cloudflare-operations-CPTpRW6d.mjs → cloudflare-operations-BzWnlC1_.mjs}

@@ -3,7 +3,7 @@ import { o as join } from "./dist-BrsS7cai.mjs";
 import { A as writeWranglerPublishedTrafficSnapshot, O as updateWranglerCustomDomain, S as readWranglerPublishedTrafficSnapshot, b as readWranglerCustomDomains } from "./wrangler--imS8n0d.mjs";
 import { r as scanWranglerDotenvKeys } from "./dotenv-VQxupEUv.mjs";
 import { o as resolveWranglerArgv } from "./preset-lAy0B0BQ.mjs";
-import { i as provisionEnv, o as resolvePinnedApiBaseUrl, r as deleteEnvVarCaseAware, t as assertNoTransportRedirectInProjectDotenv } from "./provision-Blnstcm2.mjs";
+import { i as provisionEnv, o as resolvePinnedApiBaseUrl, r as deleteEnvVarCaseAware, t as assertNoTransportRedirectInProjectDotenv } from "./provision-CSJOjjQk.mjs";
 import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { spawnSync } from "node:child_process";

package/dist/{config-BQFq7QvD.mjs → config-uNGuFsI2.mjs}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
 import { o as join } from "./dist-BrsS7cai.mjs";
 import { a as validateSourceDir } from "./project-paths-SK8nMHPp.mjs";
 import { i as isVoidAuthProvider, t as VOID_AUTH_PROVIDERS } from "./providers-CJlNS3kT.mjs";
-import { a as parseAddress, n as MimeError } from "./mime-BJD7d_qL.mjs";
+import { a as parseAddress, n as MimeError } from "./mime-D5Nmdzf7.mjs";
 import { readFileSync } from "node:fs";
 //#region src/config.ts
 var config_exports = /* @__PURE__ */ __exportAll({

package/dist/{connect-D9Yr-T5f.mjs → connect-Bfk31O_8.mjs}

@@ -1,9 +1,9 @@
-import { D as log, F as isCancel, G as normalizePlatformApiUrl, W as listPlatformConnections, j as select } from "./output-tFQLLj26.mjs";
-import { C as writeDeploymentPlatform, b as readDeploymentPlatform, f as readPlatformToken, w as writePlatformSelection } from "./auth-W9WII-mN.mjs";
-import { a as isExpiredTokenError, n as PlatformClient } from "./client-CyCHWSO_.mjs";
-import { t as promptForLoginToken } from "./login-C8-UuLnp.mjs";
-import { t as connectCloudflare } from "./cloudflare-connect-BivMefMA.mjs";
-import { discoverPlatform, promptPlatformUrl, saveDiscoveredPlatform } from "./platform-cmd-BEOVv1PN.mjs";
+import { D as log, I as isCancel, M as select, X as normalizePlatformApiUrl, Y as listPlatformConnections } from "./output-B0cfNSx5.mjs";
+import { T as writePlatformSelection, p as readPlatformToken, w as writeDeploymentPlatform, x as readDeploymentPlatform } from "./auth-DPl6kck4.mjs";
+import { a as isExpiredTokenError, n as PlatformClient } from "./client-dHfSJvAN.mjs";
+import { n as promptForLoginToken } from "./login-Uvferzmm.mjs";
+import { discoverPlatform, promptPlatformUrl, saveDiscoveredPlatform } from "./platform-cmd-BFhieCdV.mjs";
+import { t as connectCloudflare } from "./cloudflare-connect-t1UU5svD.mjs";
 //#region src/cli/connect.ts
 async function selectVoidPlatform(interactive) {
 	if (!interactive) throw new Error("connect: Supply a Void platform URL in non-interactive mode.");

package/dist/{create-project-DMV-csEm.mjs → create-project-Bk9Z0-Jg.mjs}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
-import { C as cancel, D as log, F as isCancel, N as text, c as import_picocolors, j as select, w as confirm } from "./output-tFQLLj26.mjs";
-import { T as writeProjectConfig, s as getSiteDomain, v as attachSelectedPlatform } from "./auth-W9WII-mN.mjs";
-import { t as PlatformApiError } from "./client-CyCHWSO_.mjs";
+import { C as cancel, D as log, I as isCancel, M as select, P as text, c as import_picocolors, w as confirm } from "./output-B0cfNSx5.mjs";
+import { E as writeProjectConfig, c as getSiteDomain, y as attachSelectedPlatform } from "./auth-DPl6kck4.mjs";
+import { t as PlatformApiError } from "./client-dHfSJvAN.mjs";
 import { n as inferDefaultSlug } from "./resolve-project--Vxawf7z.mjs";
 //#region src/cli/project-slug.ts
 var project_slug_exports = /* @__PURE__ */ __exportAll({
@@ -39,7 +39,8 @@ async function promptProjectSelection(projects, message = "Select a project:", r
 		label: "Create new project"
 	}], ...projects.map((p) => ({
 		value: p.id,
-		label: `${p.slug} (${p.url ?? `${p.slug}.${getSiteDomain(root)}`})`
+		label: `${p.slug} (${p.url ?? `${p.slug}.${getSiteDomain(root)}`})`,
+		...p.role ? { hint: p.role === "reader" ? "reader (read-only)" : p.role } : {}
 	}))];
 	const result = await select({
 		message,
@@ -52,7 +53,7 @@ async function promptProjectSelection(projects, message = "Select a project:", r
 	if (result === "__create__") return { action: "create" };
 	const project = projects.find((p) => p.id === result);
 	if (options.confirmExisting) {
-		const confirmed = await confirm({ message: `Linking to an existing project. Running \`void deploy\` will overwrite the current deployment of ${project.url ?? `${project.slug}.${getSiteDomain(root)}`}. Continue?` });
+		const confirmed = await confirm({ message: project.role === "reader" ? `Link to ${project.slug} with read-only access? Deploying requires collaborator access or higher.` : `Linking to an existing project. Running \`void deploy\` will overwrite the current deployment of ${project.url ?? `${project.slug}.${getSiteDomain(root)}`}. Continue?` });
 		if (isCancel(confirmed) || !confirmed) {
 			cancel("Project link cancelled.");
 			process.exit(0);

package/dist/{db-BxoUWL0F.mjs → db-BkRoptAt.mjs}

@@ -1,15 +1,15 @@
 import { c as relative, i as extname, l as resolve, o as join, t as basename } from "./dist-BrsS7cai.mjs";
-import { D as log, E as intro, F as isCancel, a as dim, c as import_picocolors, k as outro, r as cliTitle, w as confirm } from "./output-tFQLLj26.mjs";
+import { A as outro, D as log, E as intro, H as ensurePlatformProxyAccess, I as isCancel, U as isCloudflareAccessChallenge, V as ensurePlatformAccessToken, a as dim, c as import_picocolors, r as cliTitle, w as confirm } from "./output-B0cfNSx5.mjs";
 import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
-import { t as cfAccessHeaders } from "./cf-access-AJ1ehiFR.mjs";
-import { b as readDeploymentPlatform, c as getToken, o as getProxyUrl, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
-import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-BQFq7QvD.mjs";
+import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
+import { S as readProjectConfig, l as getToken, s as getProxyUrl, x as readDeploymentPlatform } from "./auth-DPl6kck4.mjs";
+import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-uNGuFsI2.mjs";
 import { r as detectFramework } from "./plugin-inference-BDRfZngg.mjs";
-import { c as collectMigrations, d as stripSqlExt, f as writeJournal, n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence, u as readJournal } from "./validate-Bihr8WBi.mjs";
-import { t as resolveLocalD1Target } from "./local-d1-BE8KBbMy.mjs";
-import { a as loadLocalEnv } from "./env-D4Emu-M_.mjs";
-import { n as PlatformClient, t as PlatformApiError } from "./client-CyCHWSO_.mjs";
-import { formatTimestamp } from "./gen-BKw6qHIg.mjs";
+import { c as collectMigrations, d as stripSqlExt, f as writeJournal, n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence, u as readJournal } from "./validate-tBBN_dXH.mjs";
+import { t as resolveLocalD1Target } from "./local-d1-D2I6Ox5F.mjs";
+import { a as loadLocalEnv } from "./env-DBKmK4vc.mjs";
+import { n as PlatformClient, t as PlatformApiError } from "./client-dHfSJvAN.mjs";
+import { formatTimestamp } from "./gen-B_wPnVTK.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -233,7 +233,7 @@ async function runConnect(root, dialect, args) {
 		if (result.dashboardUrl) log.info(`Dashboard: ${result.dashboardUrl}`);
 	}
 	if (!connectionString) {
-		const { text: promptText, isCancel: isCancelCheck } = await import("./output-tFQLLj26.mjs").then((n) => n.T);
+		const { text: promptText, isCancel: isCancelCheck } = await import("./output-B0cfNSx5.mjs").then((n) => n.T);
 		const answer = await promptText({
 			message: `Enter your ${dialect === "mysql" ? "MySQL" : "PostgreSQL"} connection string:`,
 			placeholder: dialect === "mysql" ? "mysql://user:pass@host:3306/database" : "postgresql://user:pass@host:5432/database"
@@ -278,19 +278,29 @@ async function runPush(root, dialect) {
 	outro("Done.");
 }
 async function runGenerate(root, dialect) {
-	const { prepareProject } = await import("./prepare-CBetXvsN.mjs");
+	const { prepareProject } = await import("./prepare-CtDJjoOj.mjs");
 	const { writeDrizzleConfig } = await import("./config-NOG_U1aK.mjs").then((n) => n.t);
 	await prepareProject(root);
 	const authSchemaPath = join(root, ".void", "better-auth-schema.ts");
 	const additionalSchemas = existsSync(authSchemaPath) ? [authSchemaPath] : void 0;
 	const configPath = writeDrizzleConfig(root, dialect === "postgresql" ? "postgresql://dummy" : dialect === "mysql" ? "mysql://dummy" : ":memory:", dialect, { additionalSchemas });
 	try {
-		runDrizzleKit(root, [
+		if (dialect === "sqlite") {
+			const { generateValidatedSqliteMigrations } = await import("./generate-RTK8_kK1.mjs");
+			await generateValidatedSqliteMigrations(readProjectPaths(root).migrationsDir, () => {
+				runDrizzleKit(root, [
+					"generate",
+					"--config",
+					configPath
+				]);
+			});
+		} else runDrizzleKit(root, [
 			"generate",
 			"--config",
 			configPath
 		]);
-	} catch {
+	} catch (error) {
+		log.error(getErrorMessage(error));
 		process.exit(1);
 	}
 	outro("Done.");
@@ -334,7 +344,7 @@ async function runStatus(root, dialect) {
 		localApplied = [];
 	}
 	else {
-		const { getAppliedMigrations } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+		const { getAppliedMigrations } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 		const { databasePath: dbPath } = getLocalD1Target(root);
 		localApplied = await getAppliedMigrations(dbPath);
 	}
@@ -344,12 +354,12 @@ async function runStatus(root, dialect) {
 		if (dialect !== "sqlite") {
 			const databaseUrl = process.env.DATABASE_URL;
 			if (!databaseUrl) throw new Error("DATABASE_URL is not available.");
-			remoteApplied = (dialect === "postgresql" ? await (await import("./runner-pg-DCkWPsWS.mjs").then((n) => n.n)).getPgAppliedMigrations(databaseUrl) : await (await import("./runner-mysql-CgRFl3s6.mjs").then((n) => n.n)).getMySqlAppliedMigrations(databaseUrl)).map((name) => ({
+			remoteApplied = (dialect === "postgresql" ? await (await import("./runner-pg-BkEza-dX.mjs").then((n) => n.n)).getPgAppliedMigrations(databaseUrl) : await (await import("./runner-mysql-7BPUNGmL.mjs").then((n) => n.n)).getMySqlAppliedMigrations(databaseUrl)).map((name) => ({
 				name,
 				applied_at: ""
 			}));
 		} else {
-			const { readCloudflareD1Migrations, resolveCloudflareD1Context } = await import("./cloudflare-operations-CPTpRW6d.mjs").then((n) => n.t);
+			const { readCloudflareD1Migrations, resolveCloudflareD1Context } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
 			remoteApplied = (await readCloudflareD1Migrations(resolveCloudflareD1Context(root, resolveBindingNames(readConfig(root).inference?.bindings)?.d1 ?? "DB"))).map((name) => ({
 				name,
 				applied_at: ""
@@ -425,12 +435,12 @@ async function resetDatabase(root, dialect) {
 			}
 		});
 		if (migrations.length > 0) {
-			const { applyMySqlMigrations } = await import("./runner-mysql-CgRFl3s6.mjs").then((n) => n.n);
+			const { applyMySqlMigrations } = await import("./runner-mysql-7BPUNGmL.mjs").then((n) => n.n);
 			await withMySqlClient(root, (client) => applyMySqlMigrations(client, migrations));
 		}
 		return migrations.length;
 	}
-	const { runMigrations } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+	const { runMigrations } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 	const { databasePath: dbPath } = getLocalD1Target(root);
 	rmSync(dbPath, { force: true });
 	rmSync(dbPath + "-wal", { force: true });
@@ -465,7 +475,7 @@ async function runSeed(root, file, dialect) {
 			outro("Done.");
 			return;
 		}
-		const { openSqliteDatabase } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+		const { openSqliteDatabase } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 		const { databasePath: dbPath } = getLocalD1Target(root);
 		const db = await openSqliteDatabase(dbPath);
 		try {
@@ -591,7 +601,7 @@ async function runExecute(root, command, file, dialect, remote) {
 				process.exit(0);
 			}
 			if (dialect === "sqlite") {
-				const { executeCloudflareD1Sql, resolveCloudflareD1Context } = await import("./cloudflare-operations-CPTpRW6d.mjs").then((n) => n.t);
+				const { executeCloudflareD1Sql, resolveCloudflareD1Context } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
 				const rows = await executeCloudflareD1Sql(resolveCloudflareD1Context(root, resolveBindingNames(readConfig(root).inference?.bindings)?.d1 ?? "DB"), sql);
 				if (rows.length > 0) printTable(rows);
 				else log.success("Executed successfully.");
@@ -633,21 +643,38 @@ async function runExecute(root, command, file, dialect, remote) {
 			if (d1Resource) binding = d1Resource.binding_name;
 		} catch {}
 		const proxyUrl = getProxyUrl(root);
-		const res = await fetch(`${proxyUrl}/d1/query`, {
-			method: "POST",
-			headers: {
-				Authorization: `Bearer ${token}`,
-				"Content-Type": "application/json",
-				...cfAccessHeaders(process.env, proxyUrl)
-			},
-			body: JSON.stringify({
-				projectId: projectConfig.projectId,
-				binding,
-				sql,
-				params: [],
-				method: "all"
-			})
-		});
+		ensurePlatformProxyAccess(platformClient.apiUrl, proxyUrl);
+		const capturedAccessHeaders = cfAccessHeaders(process.env, proxyUrl);
+		const requestProxy = () => {
+			const currentAccessHeaders = cfAccessHeaders(process.env, proxyUrl);
+			const accessHeaders = Object.keys(currentAccessHeaders).length > 0 ? currentAccessHeaders : capturedAccessHeaders;
+			return {
+				accessHeaders,
+				response: fetch(`${proxyUrl}/d1/query`, {
+					method: "POST",
+					headers: {
+						Authorization: `Bearer ${token}`,
+						"Content-Type": "application/json",
+						...accessHeaders
+					},
+					body: JSON.stringify({
+						projectId: projectConfig.projectId,
+						binding,
+						sql,
+						params: [],
+						method: "all"
+					}),
+					redirect: "manual"
+				})
+			};
+		};
+		const first = requestProxy();
+		let res = await first.response;
+		if (isCloudflareAccessChallenge(res) && !first.accessHeaders["CF-Access-Client-Id"]) {
+			await res.body?.cancel();
+			ensurePlatformAccessToken(proxyUrl, true, false, first.accessHeaders["cf-access-token"]);
+			res = await requestProxy().response;
+		}
 		if (!res.ok) {
 			const text = await res.text().catch(() => res.statusText);
 			log.error(`db: Proxy request failed with ${res.status}: '${text}'.`);
@@ -679,7 +706,7 @@ async function runExecute(root, command, file, dialect, remote) {
 		outro("Done.");
 		return;
 	}
-	const { openSqliteDatabase } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+	const { openSqliteDatabase } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 	const { databasePath: dbPath } = getLocalD1Target(root);
 	if (!existsSync(dbPath)) {
 		log.error("No local database found. Run `void dev` first.");
@@ -747,11 +774,11 @@ async function runMigrate(root, dialect, remote) {
 				let appliedNames;
 				let applyMigrations;
 				if (dialect === "postgresql") {
-					const { getPgAppliedMigrations, runPgMigrations } = await import("./runner-pg-DCkWPsWS.mjs").then((n) => n.n);
+					const { getPgAppliedMigrations, runPgMigrations } = await import("./runner-pg-BkEza-dX.mjs").then((n) => n.n);
 					appliedNames = await getPgAppliedMigrations(databaseUrl);
 					applyMigrations = () => runPgMigrations(migrationsDir, databaseUrl);
 				} else {
-					const { getMySqlAppliedMigrations, runMySqlMigrations } = await import("./runner-mysql-CgRFl3s6.mjs").then((n) => n.n);
+					const { getMySqlAppliedMigrations, runMySqlMigrations } = await import("./runner-mysql-7BPUNGmL.mjs").then((n) => n.n);
 					appliedNames = await getMySqlAppliedMigrations(databaseUrl);
 					applyMigrations = () => runMySqlMigrations(migrationsDir, databaseUrl);
 				}
@@ -779,7 +806,7 @@ async function runMigrate(root, dialect, remote) {
 				outro("Done.");
 				return;
 			}
-			const { applyCloudflareD1Migrations, readCloudflareD1Migrations, resolveCloudflareD1Context } = await import("./cloudflare-operations-CPTpRW6d.mjs").then((n) => n.t);
+			const { applyCloudflareD1Migrations, readCloudflareD1Migrations, resolveCloudflareD1Context } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
 			const binding = resolveBindingNames(readConfig(root).inference?.bindings)?.d1 ?? "DB";
 			const context = resolveCloudflareD1Context(root, binding);
 			const remoteBefore = new Set(await readCloudflareD1Migrations(context));
@@ -795,7 +822,7 @@ async function runMigrate(root, dialect, remote) {
 				log.error(getErrorMessage(error));
 				process.exit(1);
 			}
-			const { checkWranglerMigrationApplySet, parseRootWranglerConfig } = await import("./deploy-CcDoeBIf.mjs").then((n) => n.n);
+			const { checkWranglerMigrationApplySet, parseRootWranglerConfig } = await import("./deploy-DTaWUS1S.mjs").then((n) => n.n);
 			const applySet = await checkWranglerMigrationApplySet(context.operation.configPath, parseRootWranglerConfig(context.operation.configPath), binding, context.migrationsDir, rawMigrations);
 			if (!applySet.ok) {
 				log.error(applySet.reason);
@@ -864,7 +891,7 @@ async function runMigrate(root, dialect, remote) {
 		return;
 	}
 	if (dialect === "postgresql") {
-		const { applyPgMigrations } = await import("./runner-pg-DCkWPsWS.mjs").then((n) => n.n);
+		const { applyPgMigrations } = await import("./runner-pg-BkEza-dX.mjs").then((n) => n.n);
 		const applied = await withPgClient(root, async (client) => {
 			let existingRows = [];
 			try {
@@ -889,7 +916,7 @@ async function runMigrate(root, dialect, remote) {
 		return;
 	}
 	if (dialect === "mysql") {
-		const { applyMySqlMigrations } = await import("./runner-mysql-CgRFl3s6.mjs").then((n) => n.n);
+		const { applyMySqlMigrations } = await import("./runner-mysql-7BPUNGmL.mjs").then((n) => n.n);
 		const applied = await withMySqlClient(root, async (client) => {
 			let existingRows = [];
 			try {
@@ -913,7 +940,7 @@ async function runMigrate(root, dialect, remote) {
 		outro("Done.");
 		return;
 	}
-	const { getAppliedMigrations, runMigrations } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+	const { getAppliedMigrations, runMigrations } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 	const { databasePath: dbPath } = getLocalD1Target(root);
 	try {
 		const existingRows = await getAppliedMigrations(dbPath);
@@ -1223,7 +1250,7 @@ async function runRenameMigrations(root, dialect) {
 		process.exit(1);
 	}
 	else {
-		const { openSqliteDatabase } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+		const { openSqliteDatabase } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 		const { databasePath: dbPath } = getLocalD1Target(root);
 		if (existsSync(dbPath)) try {
 			const db = await openSqliteDatabase(dbPath);
@@ -1353,7 +1380,7 @@ async function runExport(root, args, dialect) {
 		} else process.stdout.write(output);
 		return;
 	}
-	const { openSqliteDatabase } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+	const { openSqliteDatabase } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 	const { databasePath: dbPath } = getLocalD1Target(root);
 	if (!existsSync(dbPath)) {
 		log.error("No local database found. Run `void dev` first.", errOut);
@@ -1409,7 +1436,7 @@ async function runExport(root, args, dialect) {
 	}
 }
 async function runSetUrl(root) {
-	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-BQFq7QvD.mjs").then((n) => n.n);
+	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-uNGuFsI2.mjs").then((n) => n.n);
 	const dialect = getDialect(readVoidConfig(root));
 	if (dialect === "sqlite") {
 		log.error("db: This command is only for PostgreSQL and MySQL projects. Set \"database\" to \"pg\" or \"mysql\" in void.json.");
@@ -1425,7 +1452,7 @@ async function runSetUrl(root) {
 		log.error("No project linked. Run `void deploy` first or link a project.");
 		process.exit(1);
 	}
-	const { text: promptText, isCancel: isCancelCheck } = await import("./output-tFQLLj26.mjs").then((n) => n.T);
+	const { text: promptText, isCancel: isCancelCheck } = await import("./output-B0cfNSx5.mjs").then((n) => n.T);
 	const connectionString = await promptText({
 		message: `Enter your ${dialect === "mysql" ? "MySQL" : "PostgreSQL"} connection string:`,
 		placeholder: dialect === "mysql" ? "mysql://user:pass@host:3306/dbname" : "postgresql://user:pass@host:5432/dbname",
@@ -1512,7 +1539,7 @@ async function runSeedModule(root, seedPath, dialect) {
 		return;
 	}
 	const { drizzle } = await import("drizzle-orm/better-sqlite3");
-	const { openSqliteDatabase } = await import("./local-d1-BE8KBbMy.mjs").then((n) => n.i);
+	const { openSqliteDatabase } = await import("./local-d1-D2I6Ox5F.mjs").then((n) => n.i);
 	const { databasePath: dbPath } = getLocalD1Target(root);
 	const sqlite = await openSqliteDatabase(dbPath);
 	try {

package/dist/{delete-iJOqxBz1.mjs → delete-DouASY9P.mjs}

@@ -1,6 +1,6 @@
-import { C as cancel, D as log, E as intro, F as isCancel, N as text, O as note, i as createSpinner, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
-import { S as removeProjectConfig, c as getToken, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
-import { n as PlatformClient } from "./client-CyCHWSO_.mjs";
+import { A as outro, C as cancel, D as log, E as intro, I as isCancel, P as text, i as createSpinner, k as note, r as cliTitle } from "./output-B0cfNSx5.mjs";
+import { C as removeProjectConfig, S as readProjectConfig, l as getToken } from "./auth-DPl6kck4.mjs";
+import { n as PlatformClient } from "./client-dHfSJvAN.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project--Vxawf7z.mjs";
 //#region src/cli/delete.ts
 async function runDeleteCommand(root, slug, options) {