void 0.20.2 → 0.21.0

package/dist/{client-dHfSJvAN.mjs → client-PdAJ-F0t.mjs}

@@ -1,18 +1,88 @@
-import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
-import { o as join } from "./dist-BrsS7cai.mjs";
-import { B as ensureCloudflaredToken, U as isCloudflareAccessChallenge, V as ensurePlatformAccessToken, X as normalizePlatformApiUrl, p as getPackageDir } from "./output-B0cfNSx5.mjs";
+import { a as join } from "./dist-4WkAWhWx.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { o as getApiUrl } from "./auth-DPl6kck4.mjs";
+import { a as getApiUrl } from "./auth-B9_D6ygs.mjs";
+import { s as normalizePlatformApiUrl } from "./platform-registry-BJbgZLS1.mjs";
+import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-rAZxzMkL.mjs";
+import { n as getPackageDir } from "./agents-gni4eqBu.mjs";
 import { readFileSync } from "node:fs";
+import { stripVTControlCharacters } from "node:util";
+//#region src/cli/platform-errors.ts
+function parsePlatformErrorBody(body) {
+	try {
+		const parsed = JSON.parse(body);
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+		const result = {};
+		for (const key of [
+			"error",
+			"message",
+			"deployment",
+			"minVersion",
+			"clientVersion"
+		]) {
+			const value = parsed[key];
+			if (typeof value === "string") result[key] = value;
+		}
+		return result;
+	} catch {
+		return null;
+	}
+}
+function plainExplanation(value) {
+	const text = value ? stripVTControlCharacters(value).replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, " ").trim() : void 0;
+	return text && !text.startsWith("{") && !text.startsWith("[") && !/<[^>]+>/.test(text) ? text : void 0;
+}
+function platformErrorMessage(payload) {
+	const message = plainExplanation(payload?.message);
+	return message && !/^(forbidden|unauthorized|access denied|permission denied)[.!]?$/i.test(message) ? message : void 0;
+}
+function unexplainedRejection(status) {
+	if (status === 401) return "Authentication was rejected. Check the credentials for the selected platform and any access gateway in front of it.";
+	if (status === 403) return "Access was denied by the platform or its access gateway. Check the selected platform and ask its administrator to confirm your access.";
+	return "The platform did not provide an explanation. Retry the operation; if it still fails, contact the platform administrator.";
+}
+function permissionMessage(permission) {
+	if (permission === "owner") return "Only the project owner can perform this action. Ask the owner to run it using their platform login.";
+	if (permission === "read") return "This action requires project membership (reader or higher). Ask a project admin or owner for access.";
+	if (permission === "settings" || permission === "members") return "This action requires admin or owner access. Ask a project admin or owner to confirm your access.";
+	if (permission === "configure" || permission === "deploy") return "This action requires collaborator, admin, or owner access. Ask a project admin or owner to confirm your access.";
+	return "Ask the platform administrator to check your access to this action.";
+}
+const rejectionMessages = {
+	"invalid or expired token": "The platform reported an invalid or expired token. Sign in again with `void connect <platform-url>`, or replace `VOID_TOKEN` if you supplied it.",
+	"missing authorization header": "A platform login or token is required. Sign in with `void connect <platform-url>`, or supply a valid `VOID_TOKEN` for that platform.",
+	"session revoked; sign in again": "Your platform session was revoked. Sign in again with `void connect <platform-url>`, or replace `VOID_TOKEN` if you supplied it.",
+	"user not found": "This account is no longer available. Contact the platform administrator or sign in with an active account on this platform.",
+	"deploy credential revoked or expired": "This project deploy credential was revoked or expired. Ask the project owner to issue a replacement and update the credential used by your automation.",
+	"deploy token build is no longer active": "This build is no longer active. Start a new build to obtain a valid deployment credential.",
+	github_identity_required: "Link your GitHub account with `void github link`, then retry this operation.",
+	connect_authorization_required: "This GitHub repository requires authorization. Run `void github connect` in an interactive terminal to authorize access, then retry.",
+	"invalid connect grant": "GitHub authorization failed or expired. Run `void github connect` again.",
+	"installation access revoked": "Access to this GitHub installation was revoked. Ask its administrator to restore access, then run `void github join`.",
+	"account suspended": "This account is suspended. Contact the platform administrator to restore access.",
+	"project owner suspended": "The project owner is suspended. Ask the owner to contact the platform administrator.",
+	"project is being deleted": "This project is being deleted. Wait for deletion to finish before creating a replacement.",
+	"registered user not found": "No registered account matches that email address. Ask the recipient to sign in to this platform first, then invite their registered email.",
+	"the project owner cannot be invited or changed as a member": "The project owner cannot be invited or changed through team membership commands. Choose another member.",
+	"the project owner cannot leave the project": "The project owner cannot leave. Ask a platform administrator to transfer ownership first.",
+	"user is already a project member": "This user is already a project member. Use `void project team list` to find their user ID, then `void project team role` to change their role.",
+	"project member not found": "This user is no longer a project member. Run `void project team list` to check current members.",
+	"project has too many pending invitations": "This project has reached its pending invitation limit. Run `void project team invitations` and revoke invitations that are no longer needed."
+};
+function formatPlatformApiError(action, status, body, permission) {
+	const parsed = parsePlatformErrorBody(body);
+	const message = platformErrorMessage(parsed);
+	if (status === 426 && parsed?.error === "cli_outdated" && message) return message;
+	if (!parsed) {
+		if (status === 401 || status === 403) {
+			const plain = plainExplanation(body);
+			return `${action} (HTTP ${status}): ${plain && !/^(forbidden|unauthorized|access denied|permission denied)[.!]?$/i.test(plain) ? plain.replace(/\s+/g, " ").slice(0, 240) : unexplainedRejection(status)}`;
+		}
+		return `${action}: ${status} ${body}`;
+	}
+	return `${action} (HTTP ${status}): ${(message ?? (status === 403 && parsed.error === "forbidden" ? `Access denied. ${permissionMessage(permission)}` : (parsed.error && Object.hasOwn(rejectionMessages, parsed.error) ? rejectionMessages[parsed.error] : void 0) ?? (status === 401 && ["unauthorized", "missing token"].includes(parsed.error ?? "") ? rejectionMessages["invalid or expired token"] : plainExplanation(parsed.error)))) || unexplainedRejection(status)}`;
+}
+//#endregion
 //#region src/cli/client.ts
-var client_exports = /* @__PURE__ */ __exportAll({
-	PlatformApiError: () => PlatformApiError,
-	PlatformClient: () => PlatformClient,
-	isCliOutdatedError: () => isCliOutdatedError,
-	isExpiredTokenError: () => isExpiredTokenError,
-	parsePlatformErrorBody: () => parsePlatformErrorBody,
-	readCliVersion: () => readCliVersion
-});
 /**
 * Current CLI version. Sent as `X-Void-CLI-Version` on every platform
 * request so the platform's CLI-version gate can refuse stale CLIs
@@ -36,15 +106,6 @@ function readCliVersion() {
 	}
 }
 const VOID_CLI_VERSION = readCliVersion();
-function parsePlatformErrorBody(body) {
-	try {
-		const parsed = JSON.parse(body);
-		if (!parsed || typeof parsed !== "object") return null;
-		return parsed;
-	} catch {
-		return null;
-	}
-}
 /**
 * Detects the `cli_outdated` 426 response shape emitted by the platform's
 * `cliVersionGate` middleware. When present, callers should surface the
@@ -61,23 +122,25 @@ var PlatformApiError = class extends Error {
 	status;
 	body;
 	code;
-	constructor(action, status, body) {
+	constructor(action, status, body, permission) {
 		const parsed = parsePlatformErrorBody(body);
-		const message = status === 426 && parsed?.error === "cli_outdated" && parsed.message ? parsed.message : `${action}: ${status} ${body}`;
-		super(message);
+		super(formatPlatformApiError(action, status, body, permission));
 		this.name = "PlatformApiError";
 		this.status = status;
 		this.body = body;
 		this.code = parsed?.error ?? parsed?.message;
 	}
 };
-async function throwPlatformApiError(action, res) {
-	throw new PlatformApiError(action, res.status, await res.text());
+async function throwPlatformApiError(action, res, permission) {
+	throw new PlatformApiError(action, res.status, await res.text(), isCloudflareAccessChallenge(res) ? void 0 : permission);
 }
 function isExpiredTokenError(error) {
 	if (error instanceof PlatformApiError) return error.status === 401 && error.code === "invalid or expired token";
 	return false;
 }
+function isPreflightRejection(error) {
+	return error instanceof PlatformApiError && ([401, 403].includes(error.status) && !!parsePlatformErrorBody(error.body)?.error || isCliOutdatedError(error));
+}
 /**
 * Retry contract for the deploy POST's transport phase.
 *
@@ -176,7 +239,7 @@ var PlatformClient = class {
 	}
 	async listProjectTokens(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/tokens`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list project tokens", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list project tokens", res, "owner");
 		return res.json();
 	}
 	async createProjectToken(projectId, input) {
@@ -188,17 +251,17 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify(input)
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to create project token", res);
+		if (!res.ok) await throwPlatformApiError("Failed to create project token", res, "owner");
 		return res.json();
 	}
 	async listProjectMembers(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/members`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list project members", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list project members", res, "read");
 		return (await res.json()).members;
 	}
 	async listProjectInvitations(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/invitations`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list project invitations", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list project invitations", res, "members");
 		return (await res.json()).invitations;
 	}
 	async inviteProjectMember(projectId, email, role) {
@@ -213,7 +276,7 @@ var PlatformClient = class {
 				role
 			})
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to invite project member", res);
+		if (!res.ok) await throwPlatformApiError("Failed to invite project member", res, "members");
 		return res.json();
 	}
 	async renewProjectToken(projectId, credentialId, expiresInDays) {
@@ -225,7 +288,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify(expiresInDays ? { expiresInDays } : {})
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to renew project token", res);
+		if (!res.ok) await throwPlatformApiError("Failed to renew project token", res, "owner");
 		return res.json();
 	}
 	async updateProjectMemberRole(projectId, userId, role) {
@@ -237,7 +300,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ role })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to change project member role", res);
+		if (!res.ok) await throwPlatformApiError("Failed to change project member role", res, "members");
 		return res.json();
 	}
 	async revokeProjectToken(projectId, credentialId) {
@@ -245,7 +308,7 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to revoke project token", res);
+		if (!res.ok) await throwPlatformApiError("Failed to revoke project token", res, "owner");
 		return res.json();
 	}
 	async removeProjectMember(projectId, userId) {
@@ -253,14 +316,14 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to remove project member", res);
+		if (!res.ok) await throwPlatformApiError("Failed to remove project member", res, "members");
 	}
 	async revokeProjectInvitation(projectId, invitationId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/invitations/${encodeURIComponent(invitationId)}`, {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to revoke project invitation", res);
+		if (!res.ok) await throwPlatformApiError("Failed to revoke project invitation", res, "members");
 	}
 	async leaveProject(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/leave`, {
@@ -283,7 +346,7 @@ var PlatformClient = class {
 	}
 	async listDeployments(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/deployments`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list deployments", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list deployments", res, "read");
 		return res.json();
 	}
 	async rollback(projectId, deploymentId, options) {
@@ -297,7 +360,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify(body)
 		});
-		if (!res.ok) await throwPlatformApiError("Rollback failed", res);
+		if (!res.ok) await throwPlatformApiError("Rollback failed", res, "deploy");
 		return res.json();
 	}
 	async cancelDeployment(projectId, deploymentId) {
@@ -305,7 +368,7 @@ var PlatformClient = class {
 			method: "POST",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Cancel deployment failed", res);
+		if (!res.ok) await throwPlatformApiError("Cancel deployment failed", res, "deploy");
 		return res.json();
 	}
 	async createProject(slug) {
@@ -335,8 +398,8 @@ var PlatformClient = class {
 				})
 			});
 			if (!res.ok) {
-				const error = new PlatformApiError("Preflight failed", res.status, await res.text());
-				if (isExpiredTokenError(error)) throw error;
+				const error = new PlatformApiError("Preflight failed", res.status, await res.text(), isCloudflareAccessChallenge(res) ? void 0 : "deploy");
+				if (isPreflightRejection(error)) throw error;
 				return {
 					needed: Object.keys(assetManifest),
 					total,
@@ -345,7 +408,7 @@ var PlatformClient = class {
 			}
 			return res.json();
 		} catch (error) {
-			if (isExpiredTokenError(error)) throw error;
+			if (isPreflightRejection(error)) throw error;
 			return {
 				needed: Object.keys(assetManifest),
 				total,
@@ -380,7 +443,7 @@ var PlatformClient = class {
 			cfRay,
 			cfCacheStatus
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to request upload URLs", res);
+		if (!res.ok) await throwPlatformApiError("Failed to request upload URLs", res, "deploy");
 		return (await res.json()).urls;
 	}
 	/**
@@ -440,11 +503,7 @@ var PlatformClient = class {
 		if (!res.ok) {
 			const body = await res.text();
 			if (res.status === 409) {
-				let parsed = null;
-				try {
-					const raw = JSON.parse(body);
-					if (raw !== null && typeof raw === "object") parsed = raw;
-				} catch {}
+				const parsed = parsePlatformErrorBody(body);
 				if (parsed?.deployment) {
 					cliLog?.warn("deploy_conflict", {
 						url,
@@ -454,12 +513,12 @@ var PlatformClient = class {
 					yield {
 						event: "error",
 						step: "finalize",
-						message: `${parsed.error ?? "deploy in progress"}: deployment ${parsed.deployment} — it may be an earlier attempt of this deploy or a concurrent one; inspect with \`void project status\` before redeploying`
+						message: `${platformErrorMessage(parsed) ?? platformErrorMessage({ message: parsed.error }) ?? "deploy in progress"}: deployment ${parsed.deployment} — it may be an earlier attempt of this deploy or a concurrent one; inspect with \`void project status\` before redeploying`
 					};
 					return;
 				}
 			}
-			throw new PlatformApiError("Deploy failed", res.status, body);
+			throw new PlatformApiError("Deploy failed", res.status, body, isCloudflareAccessChallenge(res) ? void 0 : "deploy");
 		}
 		const reader = res.body.getReader();
 		const decoder = new TextDecoder();
@@ -514,7 +573,7 @@ var PlatformClient = class {
 	}
 	async listSecrets(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/secrets`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list secrets", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list secrets", res, "configure");
 		return res.json();
 	}
 	async setSecret(projectId, name, value) {
@@ -526,7 +585,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ value })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to set secret", res);
+		if (!res.ok) await throwPlatformApiError("Failed to set secret", res, "configure");
 		return res.json();
 	}
 	async deleteProject(projectId) {
@@ -534,14 +593,14 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to delete project", res);
+		if (!res.ok) await throwPlatformApiError("Failed to delete project", res, "owner");
 		return res.json();
 	}
 	async getMigrationStatus(projectId, dialect) {
 		const url = new URL(`${this.baseUrl}/projects/${projectId}/migrations`);
 		if (dialect) url.searchParams.set("dialect", dialect);
 		const res = await this.request(url, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to get migration status", res);
+		if (!res.ok) await throwPlatformApiError("Failed to get migration status", res, "read");
 		return res.json();
 	}
 	async applyRemoteMigrations(projectId, migrations) {
@@ -553,7 +612,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ migrations })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to apply remote migrations", res);
+		if (!res.ok) await throwPlatformApiError("Failed to apply remote migrations", res, "configure");
 		return res.json();
 	}
 	async renameMigrations(projectId, renames) {
@@ -565,7 +624,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ renames })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to rename remote migrations", res);
+		if (!res.ok) await throwPlatformApiError("Failed to rename remote migrations", res, "configure");
 		return res.json();
 	}
 	async addDomain(projectId, hostname) {
@@ -577,17 +636,17 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ hostname })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to add domain", res);
+		if (!res.ok) await throwPlatformApiError("Failed to add domain", res, "settings");
 		return res.json();
 	}
 	async listDomains(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/domains`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list domains", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list domains", res, "read");
 		return res.json();
 	}
 	async getDomainStatus(projectId, domainId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/domains/${domainId}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to get domain status", res);
+		if (!res.ok) await throwPlatformApiError("Failed to get domain status", res, "read");
 		return res.json();
 	}
 	async removeDomain(projectId, domainId) {
@@ -595,7 +654,7 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to remove domain", res);
+		if (!res.ok) await throwPlatformApiError("Failed to remove domain", res, "settings");
 		return res.json();
 	}
 	async deleteSecret(projectId, name) {
@@ -603,12 +662,12 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to delete secret", res);
+		if (!res.ok) await throwPlatformApiError("Failed to delete secret", res, "configure");
 		return res.json();
 	}
 	async getResources(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/resources`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to get resources", res);
+		if (!res.ok) await throwPlatformApiError("Failed to get resources", res, "read");
 		return res.json();
 	}
 	async createPrerenderToken(projectId) {
@@ -616,7 +675,7 @@ var PlatformClient = class {
 			method: "POST",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to create prerender token", res);
+		if (!res.ok) await throwPlatformApiError("Failed to create prerender token", res, "deploy");
 		return (await res.json()).token;
 	}
 	async provisionDatabase(projectId, connectionString) {
@@ -628,7 +687,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ connectionString })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to provision database", res);
+		if (!res.ok) await throwPlatformApiError("Failed to provision database", res, "configure");
 		return res.json();
 	}
 	async setDatabaseUrl(projectId, connectionString) {
@@ -640,12 +699,12 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ connectionString })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to update database URL", res);
+		if (!res.ok) await throwPlatformApiError("Failed to update database URL", res, "configure");
 		return res.json();
 	}
 	async getDatabaseUrl(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/database-url`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch database URL", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch database URL", res, "owner");
 		return res.json();
 	}
 	async purgeCache(projectId) {
@@ -657,7 +716,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ all: true })
 		});
-		if (!res.ok) await throwPlatformApiError("Cache purge failed", res);
+		if (!res.ok) await throwPlatformApiError("Cache purge failed", res, "deploy");
 		return res.json();
 	}
 	async getLogs(projectId, since, limit = 200, deploymentId, level) {
@@ -668,7 +727,7 @@ var PlatformClient = class {
 		if (deploymentId) params.set("deploymentId", deploymentId);
 		if (level && level !== "all") params.set("level", level);
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/logs?${params}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch logs", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch logs", res, "read");
 		return (await res.json()).data;
 	}
 	async getRequests(projectId, since, limit = 200, status) {
@@ -678,19 +737,19 @@ var PlatformClient = class {
 		});
 		if (status && status !== "all") params.set("status", status);
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/requests?${params}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch requests", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch requests", res, "read");
 		return (await res.json()).data;
 	}
 	async listBuilds(projectId, limit = 20) {
 		const params = new URLSearchParams({ limit: String(limit) });
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/builds?${params}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list builds", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list builds", res, "read");
 		return (await res.json()).builds;
 	}
 	async getBuildLogs(projectId, buildId, since = 0) {
 		const params = new URLSearchParams({ since: String(since) });
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/builds/${buildId}/logs?${params}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch build logs", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch build logs", res, "read");
 		return res.json();
 	}
 	async getGithubInstallUrl() {
@@ -712,7 +771,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify(body)
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to connect GitHub repository", res);
+		if (!res.ok) await throwPlatformApiError("Failed to connect GitHub repository", res, "settings");
 		return res.json();
 	}
 	/**
@@ -736,7 +795,7 @@ var PlatformClient = class {
 	}
 	async getGithubConnection(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/github`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to get GitHub connection", res);
+		if (!res.ok) await throwPlatformApiError("Failed to get GitHub connection", res, "read");
 		return res.json();
 	}
 	async updateGithubConnection(projectId, body) {
@@ -748,7 +807,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify(body)
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to update GitHub connection", res);
+		if (!res.ok) await throwPlatformApiError("Failed to update GitHub connection", res, "settings");
 		return res.json();
 	}
 	async deleteGithubConnection(projectId) {
@@ -756,7 +815,7 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to disconnect GitHub repository", res);
+		if (!res.ok) await throwPlatformApiError("Failed to disconnect GitHub repository", res, "settings");
 		return res.json();
 	}
 	async getGithubLinkUrl(redirect, codeChallenge) {
@@ -811,24 +870,24 @@ var PlatformClient = class {
 	}
 	async getEmailUsage(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/email/usage`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch email usage", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email usage", res, "read");
 		return res.json();
 	}
 	async getEmailLogs(projectId, limit) {
 		const url = new URL(`${this.baseUrl}/projects/${projectId}/email/logs`);
 		if (limit !== void 0) url.searchParams.set("limit", String(limit));
 		const res = await this.request(url, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch email logs", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email logs", res, "read");
 		return res.json();
 	}
 	async getEmailOperation(projectId, operationId) {
 		const res = await this.request(`${this.baseUrl}/projects/${encodeURIComponent(projectId)}/email/operations/${encodeURIComponent(operationId)}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch email operation", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email operation", res, "read");
 		return res.json();
 	}
 	async listEmailDestinations(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/email/destinations`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list email destinations", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list email destinations", res, "read");
 		return res.json();
 	}
 	async addEmailDestination(projectId, address) {
@@ -840,7 +899,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ address })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to add email destination", res);
+		if (!res.ok) await throwPlatformApiError("Failed to add email destination", res, "settings");
 		return {
 			...await res.json(),
 			created: res.status === 201
@@ -851,18 +910,18 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to remove email destination", res);
+		if (!res.ok) await throwPlatformApiError("Failed to remove email destination", res, "settings");
 		return res.json();
 	}
 	/** Installation email settings the CLI reads before starting a credential flow. */
 	async getEmailSettings(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/email/settings`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to read email settings", res);
+		if (!res.ok) await throwPlatformApiError("Failed to read email settings", res, "read");
 		return res.json();
 	}
 	async listEmailDomains(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/email/domains`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to list email domains", res);
+		if (!res.ok) await throwPlatformApiError("Failed to list email domains", res, "read");
 		return res.json();
 	}
 	/** Submit a scoped token once; later operations address the domain without it. */
@@ -879,12 +938,12 @@ var PlatformClient = class {
 				...input.attemptId !== void 0 ? { attemptId: input.attemptId } : {}
 			})
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to add email domain", res);
+		if (!res.ok) await throwPlatformApiError("Failed to add email domain", res, "settings");
 		return res.json();
 	}
 	async getEmailDomain(projectId, domain) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/email/domains/${encodeURIComponent(domain)}`, { headers: { ...this.authHeaders } });
-		if (!res.ok) await throwPlatformApiError("Failed to fetch email domain status", res);
+		if (!res.ok) await throwPlatformApiError("Failed to fetch email domain status", res, "read");
 		return res.json();
 	}
 	/** Rotates the shared zone connection secret. */
@@ -897,7 +956,7 @@ var PlatformClient = class {
 			},
 			body: JSON.stringify({ attemptId })
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to rotate email connection secret", res);
+		if (!res.ok) await throwPlatformApiError("Failed to rotate email connection secret", res, "settings");
 		return res.json();
 	}
 	async syncEmailDomain(projectId, domain) {
@@ -905,7 +964,7 @@ var PlatformClient = class {
 			method: "POST",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to sync email domain", res);
+		if (!res.ok) await throwPlatformApiError("Failed to sync email domain", res, "settings");
 		return res.json();
 	}
 	async removeEmailDomain(projectId, domain) {
@@ -913,7 +972,7 @@ var PlatformClient = class {
 			method: "DELETE",
 			headers: { ...this.authHeaders }
 		});
-		if (!res.ok) await throwPlatformApiError("Failed to remove email domain", res);
+		if (!res.ok) await throwPlatformApiError("Failed to remove email domain", res, "settings");
 		return res.json();
 	}
 };
@@ -921,4 +980,4 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 //#endregion
-export { isExpiredTokenError as a, isCliOutdatedError as i, PlatformClient as n, parsePlatformErrorBody as o, client_exports as r, PlatformApiError as t };
+export { readCliVersion as a, isExpiredTokenError as i, PlatformClient as n, parsePlatformErrorBody as o, isCliOutdatedError as r, platformErrorMessage as s, PlatformApiError as t };