void 0.20.1 → 0.20.3

package/dist/{env-D4Emu-M_.mjs → env-DBKmK4vc.mjs}

@@ -55,6 +55,7 @@ function resolveRemoteMode(configRemote) {
 	return configRemote === true;
 }
 const INTERNAL_ENV_KEY_SET = /* @__PURE__ */ new Set([
+	"__VOID_ACCESS_CREDENTIALS",
 	"__VOID_TOKEN",
 	"__VOID_PROJECT_ID",
 	"__VOID_REMOTE",

package/dist/{env-BcQzYgoG.mjs → env-DP_EErve.mjs}

@@ -1,9 +1,9 @@
 import { o as join } from "./dist-BrsS7cai.mjs";
-import { D as log, E as intro, O as note, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
-import { b as readDeploymentPlatform, c as getToken, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
+import { A as outro, D as log, E as intro, k as note, r as cliTitle } from "./output-B0cfNSx5.mjs";
+import { S as readProjectConfig, l as getToken, x as readDeploymentPlatform } from "./auth-DPl6kck4.mjs";
 import { r as generateEnvTypes, t as findEnvFile } from "./env-types-BNPhro-M.mjs";
-import { c as fetchRemoteSecretNames, l as formatEnvReport, p as validateProdEnv } from "./env-validation-ENpMy6Ez.mjs";
-import { n as PlatformClient } from "./client-Clirrol3.mjs";
+import { c as fetchRemoteSecretNames, l as formatEnvReport, p as validateProdEnv } from "./env-validation-CF6KvTRf.mjs";
+import { n as PlatformClient } from "./client-BQBrZoCX.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
@@ -24,7 +24,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-CPTpRW6d.mjs").then((n) => n.t);
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BzWnlC1_.mjs").then((n) => n.t);
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);

package/dist/{env-validation-ENpMy6Ez.mjs → env-validation-CF6KvTRf.mjs}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
 import { l as resolve, n as dirname, o as join } from "./dist-BrsS7cai.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
 import { t as findEnvFile } from "./env-types-BNPhro-M.mjs";
-import { a as loadLocalEnv, i as isClientEnvKey, r as findLegacyEnvFiles } from "./env-D4Emu-M_.mjs";
+import { a as loadLocalEnv, i as isClientEnvKey, r as findLegacyEnvFiles } from "./env-DBKmK4vc.mjs";
 import { o as resolveWranglerArgv } from "./preset-lAy0B0BQ.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
@@ -1003,6 +1003,8 @@ function secretListEnv(accountId, platform) {
 	};
 	scrub("CF_ACCESS_CLIENT_ID");
 	scrub("CF_ACCESS_CLIENT_SECRET");
+	scrub("VOID_ACCESS_CREDENTIALS");
+	scrub("VOID_ACCESS_ORIGIN");
 	scrub("WRANGLER_LOG_SANITIZE");
 	env.WRANGLER_LOG_SANITIZE = "true";
 	if (accountId) {

package/dist/{gen-DI2YwdBM.mjs → gen-B_wPnVTK.mjs}

@@ -1,7 +1,7 @@
 import { c as relative, n as dirname, o as join } from "./dist-BrsS7cai.mjs";
-import { C as cancel, D as log, E as intro, F as isCancel, j as select, k as outro, r as cliTitle } from "./output-tFQLLj26.mjs";
+import { A as outro, C as cancel, D as log, E as intro, I as isCancel, M as select, r as cliTitle } from "./output-B0cfNSx5.mjs";
 import { n as readProjectPaths } from "./project-paths-SK8nMHPp.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-BQFq7QvD.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-uNGuFsI2.mjs";
 import { n as ensureProjectTsconfig } from "./project-tsconfig-Ql2XsSQp.mjs";
 import { c as collectMigrations, n as listDrizzleArtifacts, t as assertJournalCoherence, u as readJournal } from "./validate-tBBN_dXH.mjs";
 import { n as writeDrizzleConfig } from "./config-NOG_U1aK.mjs";

package/dist/{github-cmd-xItS5Zwf.mjs → github-cmd-C-z_xRrQ.mjs}

@@ -1,6 +1,6 @@
-import { C as cancel, D as log, F as isCancel, N as text, c as import_picocolors, j as select, w as confirm } from "./output-tFQLLj26.mjs";
-import { c as getToken, d as openBrowser, i as createCodeVerifier, n as awaitBrowserCallback, r as createCodeChallenge, x as readProjectConfig } from "./auth-W9WII-mN.mjs";
-import { n as PlatformClient, o as parsePlatformErrorBody, t as PlatformApiError } from "./client-Clirrol3.mjs";
+import { C as cancel, D as log, I as isCancel, M as select, P as text, c as import_picocolors, w as confirm } from "./output-B0cfNSx5.mjs";
+import { S as readProjectConfig, f as openBrowser, i as createCodeVerifier, l as getToken, n as awaitBrowserCallback, r as createCodeChallenge } from "./auth-DPl6kck4.mjs";
+import { n as PlatformClient, o as parsePlatformErrorBody, s as platformErrorMessage, t as PlatformApiError } from "./client-BQBrZoCX.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project--Vxawf7z.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
 import { randomBytes } from "node:crypto";
@@ -30,7 +30,6 @@ function describeConnectError(status, errorCode) {
 		if (code.includes("not active")) return "Installation is not active. Re-install the GitHub App and try again.";
 	}
 	if (status === 400 && code.includes("not accessible")) return "Repository not accessible by this installation. Check the App has access to it.";
-	if (status === 403) return "You don't have access to this project.";
 	if (status === 404) return "Project or installation not found.";
 	return null;
 }
@@ -46,6 +45,11 @@ function describeUpdateError(status, errorCode) {
 	if (status === 404 && code.includes("connection not found")) return "This project is not connected to a GitHub repository. Run `void github connect` first.";
 	return describeConnectError(status, code);
 }
+function describeGithubClientError(error, describe) {
+	const body = parsePlatformErrorBody(error.body);
+	if (platformErrorMessage(body) || error.status === 403) return error.message;
+	return describe(error.status, error.code);
+}
 /**
 * Extract `owner/repo` from a `https://github.com/owner/repo(.git)?` URL.
 * Returns null for non-GitHub URLs or null input.
@@ -518,16 +522,14 @@ async function runConnect(root, client, args) {
 					codeVerifier: grant.codeVerifier
 				});
 			} catch (retryErr) {
-				if (retryErr instanceof PlatformApiError && retryErr.status === 403) {
+				if (retryErr instanceof PlatformApiError && retryErr.status === 403 && retryErr.code === "invalid connect grant") {
 					log.error("connect: GitHub authorization failed or expired. Run `void github connect` again.");
 					process.exit(1);
 				}
 				throw retryErr;
 			}
 		} else {
-			const body = parsePlatformErrorBody(err.body);
-			const code = body?.error ?? body?.message ?? "";
-			const message = describeConnectError(err.status, code);
+			const message = describeGithubClientError(err, describeConnectError);
 			if (message !== null) {
 				log.error(`connect: ${message}`);
 				process.exit(1);
@@ -588,9 +590,7 @@ async function runGithubUpdate(root, client, args) {
 		current = await client.getGithubConnection(projectId);
 	} catch (err) {
 		if (err instanceof PlatformApiError) {
-			const body = parsePlatformErrorBody(err.body);
-			const code = body?.error ?? body?.message ?? "";
-			const message = describeUpdateError(err.status, code);
+			const message = describeGithubClientError(err, describeUpdateError);
 			if (message !== null) {
 				log.error(`update: ${message}`);
 				process.exit(1);
@@ -668,9 +668,7 @@ async function runGithubUpdate(root, client, args) {
 		updated = await client.updateGithubConnection(projectId, patch);
 	} catch (err) {
 		if (err instanceof PlatformApiError) {
-			const body = parsePlatformErrorBody(err.body);
-			const code = body?.error ?? body?.message ?? "";
-			const message = describeUpdateError(err.status, code);
+			const message = describeGithubClientError(err, describeUpdateError);
 			if (message !== null) {
 				log.error(`update: ${message}`);
 				process.exit(1);
@@ -734,9 +732,7 @@ async function runStatus(root, client, args) {
 		connection = await client.getGithubConnection(projectId);
 	} catch (err) {
 		if (err instanceof PlatformApiError) {
-			const body = parsePlatformErrorBody(err.body);
-			const code = body?.error ?? body?.message ?? "";
-			const message = describeUpdateError(err.status, code);
+			const message = describeGithubClientError(err, describeUpdateError);
 			if (message !== null) {
 				log.error(`status: ${message}`);
 				process.exit(1);
@@ -803,7 +799,7 @@ async function runGithubDisconnect(root, client, args) {
 				log.info("This project is not connected to a GitHub repository. Nothing to disconnect.");
 				return;
 			}
-			const message = describeConnectError(err.status, code);
+			const message = describeGithubClientError(err, describeConnectError);
 			if (message !== null) {
 				log.error(`disconnect: ${message}`);
 				process.exit(1);
@@ -833,9 +829,7 @@ async function runGithubDisconnect(root, client, args) {
 		await client.deleteGithubConnection(projectId);
 	} catch (err) {
 		if (err instanceof PlatformApiError) {
-			const body = parsePlatformErrorBody(err.body);
-			const code = body?.error ?? body?.message ?? "";
-			const message = describeConnectError(err.status, code);
+			const message = describeGithubClientError(err, describeConnectError);
 			if (message !== null) {
 				log.error(`disconnect: ${message}`);
 				process.exit(1);

package/dist/{headers-D8QfRX9Y.mjs → headers-BAHwgHdW.mjs}

@@ -1,5 +1,5 @@
 import { o as join } from "./dist-BrsS7cai.mjs";
-import { a as convertRedirectsConfig, d as parseHostPrefixedSource, i as convertHeadersConfig, o as convertRewritesConfig, r as convertFallbacksConfig, s as countSplats, t as VALID_REDIRECT_STATUSES, u as isProtocolRelative } from "./config-BQFq7QvD.mjs";
+import { a as convertRedirectsConfig, d as parseHostPrefixedSource, i as convertHeadersConfig, o as convertRewritesConfig, r as convertFallbacksConfig, s as countSplats, t as VALID_REDIRECT_STATUSES, u as isProtocolRelative } from "./config-uNGuFsI2.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/headers.ts