void 0.20.1 → 0.20.3

package/dist/cf-access-AJ1ehiFR.mjs

@@ -1,42 +0,0 @@
-//#region src/shared/cf-access.ts
-/**
-* Resolve Cloudflare Access headers from an env-like object.
-*
-* Priority:
-*   1. Service token pair (`CF_ACCESS_CLIENT_ID` + `CF_ACCESS_CLIENT_SECRET`) — CI path
-*   2. User JWT (`CF_ACCESS_TOKEN`) — dev path, typically populated via `cloudflared access token`
-*   3. No headers — prod, or unprotected hostnames
-*/
-function isVoidAccessGatedUrl(targetUrl) {
-	try {
-		const url = new URL(targetUrl);
-		return url.protocol === "https:" && (url.hostname.endsWith(".staging.void.cloud") || url.hostname.endsWith(".staging.void.app"));
-	} catch {
-		return false;
-	}
-}
-function accessHeaders(env) {
-	const id = env.CF_ACCESS_CLIENT_ID;
-	const secret = env.CF_ACCESS_CLIENT_SECRET;
-	if (typeof id === "string" && typeof secret === "string" && id.length > 0 && secret.length > 0) return {
-		"CF-Access-Client-Id": id,
-		"CF-Access-Client-Secret": secret
-	};
-	const token = env.CF_ACCESS_TOKEN;
-	if (typeof token === "string" && token.length > 0) return { "cf-access-token": token };
-	return {};
-}
-/** Attach shared Void Access credentials only to known hosted staging origins. */
-function cfAccessHeaders(env, targetUrl) {
-	return isVoidAccessGatedUrl(targetUrl) ? accessHeaders(env) : {};
-}
-/**
-* Capture credentials for a Cloudflare Worker readiness request whose target
-* is resolved and constrained by the direct-deploy adapter rather than a
-* user-connected Void platform URL.
-*/
-function trustedCloudflareWorkerAccessHeaders(env) {
-	return accessHeaders(env);
-}
-//#endregion
-export { isVoidAccessGatedUrl as n, trustedCloudflareWorkerAccessHeaders as r, cfAccessHeaders as t };

package/dist/cf-access-DsSsZUPr.mjs

@@ -1,67 +0,0 @@
-import { n as isVoidAccessGatedUrl } from "./cf-access-AJ1ehiFR.mjs";
-import { spawnSync } from "node:child_process";
-//#region src/cli/cf-access.ts
-const probedHosts = /* @__PURE__ */ new Set();
-/**
-* If the CLI is about to talk to a Cloudflare-Access-gated staging host,
-* probe the locally-installed `cloudflared` binary for a cached user JWT
-* and export it as `CF_ACCESS_TOKEN`. On interactive shells with no cached
-* token, open a browser login flow to populate the cache, then re-read it.
-*
-* Cached per-host so that an early non-gated call (e.g. prod) does not
-* permanently disable the probe for a later gated call (e.g. staging) in
-* the same process. Noop when:
-*   - a service-token pair is already set (CI path)
-*   - `CF_ACCESS_TOKEN` is already set (manual override or prior probe)
-*   - the target host is not gated
-*   - `cloudflared` is not installed
-*/
-function ensureCloudflaredToken(apiUrl) {
-	if (process.env.CF_ACCESS_CLIENT_ID && process.env.CF_ACCESS_CLIENT_SECRET) return;
-	if (process.env.CF_ACCESS_TOKEN) return;
-	if (!isVoidAccessGatedUrl(apiUrl)) return;
-	const host = new URL(apiUrl).hostname;
-	if (probedHosts.has(host)) return;
-	probedHosts.add(host);
-	let token = runCloudflared([
-		"access",
-		"token",
-		`-app=${apiUrl}`
-	]);
-	if (!token && process.stdin.isTTY && process.stdout.isTTY) {
-		runCloudflared([
-			"access",
-			"login",
-			apiUrl
-		], {
-			inherit: true,
-			timeoutMs: 12e4
-		});
-		token = runCloudflared([
-			"access",
-			"token",
-			`-app=${apiUrl}`
-		]);
-	}
-	if (token) process.env.CF_ACCESS_TOKEN = token;
-}
-function runCloudflared(args, opts) {
-	try {
-		const result = spawnSync("cloudflared", args, {
-			encoding: "utf-8",
-			stdio: opts?.inherit ? "inherit" : [
-				"ignore",
-				"pipe",
-				"pipe"
-			],
-			timeout: opts?.timeoutMs ?? 5e3
-		});
-		if (result.error || result.status !== 0) return null;
-		const out = (result.stdout ?? "").trim();
-		return out.length > 0 ? out : null;
-	} catch {
-		return null;
-	}
-}
-//#endregion
-export { ensureCloudflaredToken as t };