void 0.21.1 → 0.21.2

package/dist/{help-sBhFH6pi.mjs → help-iQOt7WHk.mjs}

@@ -772,8 +772,35 @@ const HELP_TREE = {
 		]
 	},
 	auth: {
-		summary: "Log in, link login methods, log out, and inspect local auth state.",
-		usage: ["void auth <command>"],
+		summary: "Authenticate with this project’s saved Cloudflare or Void destination. Without one, choose interactively or pass --platform.",
+		usage: ["void auth <login|status|logout> [--platform cloudflare|void]"],
+		commands: [
+			{
+				command: "login",
+				description: "Sign in to the selected destination"
+			},
+			{
+				command: "status",
+				description: "Show the selected destination’s identity"
+			},
+			{
+				command: "logout",
+				description: "Sign out of the selected destination"
+			}
+		],
+		options: [{
+			command: "--platform <cloudflare|void>",
+			description: "Choose the destination explicitly"
+		}],
+		children: {
+			login: basicSubcommand("Sign in to the selected destination.", "void auth login [--platform cloudflare|void]"),
+			status: basicSubcommand("Show the selected destination’s identity.", "void auth status [--platform cloudflare|void]"),
+			logout: basicSubcommand("Sign out of the selected destination.", "void auth logout [--platform cloudflare|void]")
+		}
+	},
+	account: {
+		summary: "Manage your Void platform account.",
+		usage: ["void account <command>"],
 		commands: [
 			{
 				command: "login",
@@ -797,11 +824,11 @@ const HELP_TREE = {
 			}
 		],
 		children: {
-			login: basicSubcommand("Log in with an enabled platform login method.", "void auth login"),
-			link: basicSubcommand("Sign in again, then verify and link another login method to your existing account.", "void auth link [connection-id]"),
-			logout: basicSubcommand("Log out and remove credentials.", "void auth logout"),
-			whoami: basicSubcommand("Show the logged-in username.", "void auth whoami"),
-			token: basicSubcommand("Copy auth token to clipboard.", "void auth token")
+			login: basicSubcommand("Log in with an enabled platform login method.", "void account login"),
+			link: basicSubcommand("Sign in again, then verify and link another login method to your existing account.", "void account link [connection-id]"),
+			logout: basicSubcommand("Log out and remove credentials.", "void account logout"),
+			whoami: basicSubcommand("Show the logged-in username.", "void account whoami"),
+			token: basicSubcommand("Copy auth token to clipboard.", "void account token")
 		}
 	},
 	cloudflare: {
@@ -2086,6 +2113,10 @@ function printGlobalHelp() {
 		"",
 		...globalCommandGroup("auth"),
 		"",
+		...globalCommandGroup("account"),
+		"",
+		...globalCommandGroup("cloudflare"),
+		"",
 		...globalCommandGroup("platform"),
 		"",
 		...globalCommandGroup("project"),
@@ -2124,7 +2155,7 @@ function printGlobalHelp() {
 		helpLine("void help <command>", "Show command-specific help"),
 		helpLine("void <command> --help", "Show command-specific help")
 	].join("\n"), sectionTitle("Commands"));
-	note([helpLine("VOID_TOKEN", "Auth token (or use `void auth login`)"), helpLine("VOID_PROJECT", "Deploy target project name override")].join("\n"), sectionTitle("Environment"));
+	note([helpLine("VOID_TOKEN", "Auth token (or use `void account login`)"), helpLine("VOID_PROJECT", "Deploy target project name override")].join("\n"), sectionTitle("Environment"));
 	outro("https://void.cloud");
 }
 function printVoidHeader() {

package/dist/help-r_vrpH_d.mjs

@@ -0,0 +1,2 @@
+import { r as printHelpPage } from "./help-iQOt7WHk.mjs";
+export { printHelpPage };

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
 import { a as join, l as relative, n as dirname, u as resolve } from "./dist-4WkAWhWx.mjs";
 import { d as require_picocolors } from "./output-CCH48AMM.mjs";
-import { B as resolveDistDir, Ct as resolveAssetRoutingPolicy, W as resolveWorkerDirName, at as generateQueueResolverSource, bt as hasApiRoutes, dt as hasRevalidate, ft as scanDurableObjectModules, lt as collectPages, ot as prerenderPages, pt as SEND_EMAIL_BINDING, st as prerenderPagesNode, ut as collectRevalidate, xt as hasDocumentRoutes } from "./deploy-DEsMVrCY.mjs";
+import { B as resolveDistDir, Ct as resolveAssetRoutingPolicy, W as resolveWorkerDirName, at as generateQueueResolverSource, bt as hasApiRoutes, dt as hasRevalidate, ft as scanDurableObjectModules, lt as collectPages, ot as prerenderPages, pt as SEND_EMAIL_BINDING, st as prerenderPagesNode, ut as collectRevalidate, xt as hasDocumentRoutes } from "./deploy-Bsymb0_c.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-CKQ-Q5JS.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-uP7ZDtVZ.mjs";
 import { r as scopedAccessCredentials } from "./cf-access-DRsQRe6k.mjs";
@@ -6196,7 +6196,7 @@ function voidPlugin(options) {
 					});
 				} else if (credentials.status === "no-token") afterReady(() => {
 					console.log();
-					voidWarn("Remote mode requires authentication. Run `void auth login`, then restart.");
+					voidWarn("Remote mode requires authentication. Run `void account login`, then restart.");
 					voidWarn("Falling back to local bindings.");
 				});
 				else afterReady(() => {
@@ -6209,7 +6209,7 @@ function voidPlugin(options) {
 				const credentials = readVoidDevCredentials(root);
 				if (credentials.status === "no-token") afterReady(() => {
 					console.log();
-					voidWarn("AI requires authentication. Run `void auth login`, then restart the dev server.");
+					voidWarn("AI requires authentication. Run `void account login`, then restart the dev server.");
 				});
 				else if (credentials.status === "no-project") {
 					if (process.stdin.isTTY) afterReady(() => {

package/dist/{init-C--Yyj1b.mjs → init-D5niUPAz.mjs}

@@ -17,8 +17,8 @@ import { r as formatProjectCommand } from "./preset-Dowh9tTt.mjs";
 import { n as writeVoidProjectConfig, t as canRewriteVoidProjectConfig } from "./config-write-y3CBI_ux.mjs";
 import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-BV8qHiCb.mjs";
 import { i as promptProjectSelection, r as promptAndCreateProject } from "./create-project-BZBl_gQ0.mjs";
-import { t as promptForLoginToken } from "./login-jKe_0QZL.mjs";
-import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-0tEh2ZtA.mjs";
+import { t as promptForLoginToken } from "./login-BgQJzxAl.mjs";
+import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-CudokNIg.mjs";
 import { t as connectCloudflare } from "./cloudflare-connect-DloREDlc.mjs";
 import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-CVEc3gE7.mjs";
 import { createRequire } from "node:module";

package/dist/{link-BC-mNG9-.mjs → link-3lGrfXzd.mjs}

@@ -22,7 +22,7 @@ async function runLink(root, slug) {
 	}
 	const token = getToken(root);
 	if (!token) {
-		cancel("No auth token found. Run `void auth login` first.");
+		cancel("No auth token found. Run `void account login` first.");
 		process.exit(1);
 	}
 	const client = new PlatformClient(token, { root });

package/dist/{list-DHU1Wj6c.mjs → list-CVjGr_C6.mjs}

@@ -13,7 +13,7 @@ async function runListCommand(root, slug) {
 	if (platform === "none") throw new Error("project: Deployment is disabled. Run `void init` to choose a platform.");
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	let projectId;

package/dist/{login-jKe_0QZL.mjs → login-BgQJzxAl.mjs}

@@ -29,7 +29,7 @@ async function selectPlatformLoginMethod(platform, requestedId) {
 	return methods.find((method) => method.id === provider);
 }
 async function promptForLoginToken(root = process.cwd(), platform) {
-	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-DE6dw45v.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
+	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-Cl9Uhzru.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
 	const s = createSpinner();
 	s.start(`Opening browser for ${providerName} login...`);
 	try {
@@ -62,7 +62,7 @@ async function runLoginCommand(root = process.cwd()) {
 				return;
 			}
 			log.warn("Already logged in.");
-			outro("To re-login, run `void auth logout` first.");
+			outro("To re-login, run `void account logout` first.");
 			return;
 		} catch (error) {
 			if (!isExpiredTokenError(error)) throw error;

package/dist/login-Bz0zEPoy.mjs

@@ -0,0 +1,2 @@
+import { r as selectPlatformLoginMethod } from "./login-BgQJzxAl.mjs";
+export { selectPlatformLoginMethod };

package/dist/{logs-BG11f5PR.mjs → logs-DbzD-QDf.mjs}

@@ -22,7 +22,7 @@ async function runLogsCommand(root, filter, range, deployment, level) {
 	if (platform === "none") throw new Error("logs: Deployment is disabled. Run `void init` to choose a platform.");
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	if (!/^\d+(m|h|d)$/.test(range)) {

package/dist/{operator-cmd-BwAS2XZt.mjs → operator-cmd-CR6Lxzt0.mjs}

@@ -137,8 +137,8 @@ async function runAuth(origin, args) {
 	if (args.action === "login" || args.action === "token" && args.tokenStdin) {
 		if (!args.tokenStdin && !process.stdin.isTTY) throw new OperatorClientError("Browser login requires an interactive terminal. Use --token-stdin to exchange an API session.", "interactive_login_required");
 		const apiToken = args.tokenStdin ? await readOperatorApiTokenStdin() : await (async () => {
-			const { discoverPlatform } = await import("./platform-cmd-DE6dw45v.mjs");
-			const { selectPlatformLoginMethod } = await import("./login-BwiopVdg.mjs");
+			const { discoverPlatform } = await import("./platform-cmd-Cl9Uhzru.mjs");
+			const { selectPlatformLoginMethod } = await import("./login-Bz0zEPoy.mjs");
 			const { runPlatformLogin } = await import("./auth-CAw7zHqj.mjs");
 			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.providerExplicit ? args.provider : void 0)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
 		})();
@@ -279,7 +279,7 @@ async function followOperatorLogs(client, args, signal, pollIntervalMs = 2e3) {
 }
 async function runOperatorCommand(args) {
 	if (!args.action) {
-		const { printHelpPage } = await import("./help-B403BLBB.mjs");
+		const { printHelpPage } = await import("./help-r_vrpH_d.mjs");
 		printHelpPage(["platform", args.group]);
 		return;
 	}

package/dist/{platform-auth-config-C-hv-_Ok.mjs → platform-auth-config-De7BqRJm.mjs}

@@ -140,11 +140,11 @@ async function configurationInput(args, existing) {
 }
 async function runPlatformAuthConfig(args) {
 	if (args.action === "recover") {
-		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-Cr0r8TEb.mjs");
+		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-C9gsM640.mjs");
 		return runPlatformAuthRecovery(args);
 	}
 	if (args.action === "protection") {
-		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-DjTE5Hj-.mjs");
+		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-Dcat-6zu.mjs");
 		return runPlatformProtectionConfig(args);
 	}
 	const origin = resolveOperatorOrigin(args.connection);

package/dist/{platform-auth-protection-DjTE5Hj-.mjs → platform-auth-protection-Dcat-6zu.mjs}

@@ -4,8 +4,8 @@ import { n as ensurePlatformAccessToken } from "./cf-access-rAZxzMkL.mjs";
 import { E as confirm, W as isCancel } from "./dist-Dn6nn2IU.mjs";
 import { n as OperatorClient } from "./operator-client-A0iex2yi.mjs";
 import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-BkVgJqv-.mjs";
-import { D as preparePlatformAccessSetup, E as parsePlatformAccessSetupSpec, O as PlatformCloudflareClient, T as checkpointPlatformAccessResources, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Di0LbhPM.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-eaiaU3uM.mjs";
+import { D as preparePlatformAccessSetup, E as parsePlatformAccessSetupSpec, O as PlatformCloudflareClient, T as checkpointPlatformAccessResources, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-DVzM2T4j.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-ibuS1as0.mjs";
 import { createHmac } from "node:crypto";
 import { parsePlatformAccessProtection, platformProtectionProofMessage } from "@void/platform";
 import { readFile } from "node:fs/promises";

package/dist/{platform-auth-recovery-Cr0r8TEb.mjs → platform-auth-recovery-C9gsM640.mjs}

@@ -2,8 +2,8 @@ import { d as openBrowser } from "./auth-B9_D6ygs.mjs";
 import { d as readInstallationRecoverySecrets, h as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-BJbgZLS1.mjs";
 import { E as confirm, W as isCancel } from "./dist-Dn6nn2IU.mjs";
 import { a as resolveOperatorOrigin } from "./operator-auth-BkVgJqv-.mjs";
-import { O as PlatformCloudflareClient, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Di0LbhPM.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-eaiaU3uM.mjs";
+import { O as PlatformCloudflareClient, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-DVzM2T4j.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-ibuS1as0.mjs";
 import { createCipheriv, createDecipheriv, createHash, createHmac, hkdfSync, randomBytes, randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";

package/dist/{platform-cmd-DE6dw45v.mjs → platform-cmd-Cl9Uhzru.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-0tEh2ZtA.mjs";
+import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-CudokNIg.mjs";
 export { discoverPlatform, runPlatformCommand };

package/dist/{platform-cmd-0tEh2ZtA.mjs → platform-cmd-CudokNIg.mjs}

@@ -92,12 +92,12 @@ function saveDiscoveredPlatform(discovery) {
 }
 async function runPlatformCommand(_root, args) {
 	if (args.subcommand === "config") {
-		const { runPlatformAuthConfig } = await import("./platform-auth-config-C-hv-_Ok.mjs");
+		const { runPlatformAuthConfig } = await import("./platform-auth-config-De7BqRJm.mjs");
 		await runPlatformAuthConfig(args);
 		return;
 	}
 	if (args.subcommand === "operator") {
-		const { runOperatorCommand } = await import("./operator-cmd-BwAS2XZt.mjs");
+		const { runOperatorCommand } = await import("./operator-cmd-CR6Lxzt0.mjs");
 		await runOperatorCommand(args);
 		return;
 	}
@@ -129,7 +129,7 @@ async function runPlatformCommand(_root, args) {
 		console.log(`Capabilities: ${Object.entries(discovery.capabilities).filter(([, enabled]) => enabled).map(([name]) => name).join(", ")}`);
 		return;
 	}
-	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-Dhx9Pnub.mjs");
+	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-DlpiGcjr.mjs");
 	await runPlatformLifecycleCommand(args);
 }
 //#endregion

package/dist/{platform-domain-B_7x6Iqx.mjs → platform-domain-Ckpd2kXw.mjs}

@@ -1,8 +1,8 @@
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
 import { d as readInstallationRecoverySecrets, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-BJbgZLS1.mjs";
 import { B as text, E as confirm, N as note, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { C as assertPlatformOperatorCredentialCanApplyPlan, O as PlatformCloudflareClient, _ as createPlatformInstallPlan, c as createPlatformHealthProbeToken, h as recordPlatformWorkerTraffic, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, p as recordResource, t as assertNoninteractivePlatformMutationAcknowledged, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Di0LbhPM.mjs";
-import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-eaiaU3uM.mjs";
+import { C as assertPlatformOperatorCredentialCanApplyPlan, O as PlatformCloudflareClient, _ as createPlatformInstallPlan, c as createPlatformHealthProbeToken, h as recordPlatformWorkerTraffic, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, p as recordResource, t as assertNoninteractivePlatformMutationAcknowledged, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-DVzM2T4j.mjs";
+import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-ibuS1as0.mjs";
 import { randomUUID } from "node:crypto";
 import { PLATFORM_APPLICATION_KEY, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, createApplicationRoutes, createPlatformDeploymentManifest, normalizeApplicationDomain } from "@void/platform";
 //#region src/cli/platform-domain.ts

package/dist/{platform-lifecycle-Di0LbhPM.mjs → platform-lifecycle-DVzM2T4j.mjs}

@@ -1499,7 +1499,7 @@ async function verifyInstalledPlatformAccessProtection(input) {
 	}
 	const existingWorkers = input.plan.actions.filter((action) => action.kind === "worker" && action.action === "update").map((action) => action.name);
 	if (existingWorkers.length) {
-		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-DjTE5Hj-.mjs");
+		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-Dcat-6zu.mjs");
 		await verifyProtectionWorkerOrigins({
 			request: input.client.request.bind(input.client),
 			listWorkerDomains: input.client.listWorkerDomains.bind(input.client),
@@ -5532,14 +5532,14 @@ function resolvePlatformInstallDatabaseUrl(checkpoint, manifest = null) {
 }
 async function runPlatformLifecycleCommand(args) {
 	if (args.subcommand === "domain") {
-		const { runPlatformDomainCommand } = await import("./platform-domain-B_7x6Iqx.mjs");
+		const { runPlatformDomainCommand } = await import("./platform-domain-Ckpd2kXw.mjs");
 		await runPlatformDomainCommand(args);
 		return;
 	}
 	if (args.subcommand === "discover") {
 		const client = new PlatformCloudflareClient((await resolvePlatformCloudflareCredential()).token);
 		const accountId = await selectAccount(await readAccounts(client), args.account);
-		const { recoverPlatformInstallations } = await import("./platform-recovery-BxfA8E5C.mjs");
+		const { recoverPlatformInstallations } = await import("./platform-recovery-D_KmvdSk.mjs");
 		const recovered = await recoverPlatformInstallations(client, accountId, void 0, args.selector);
 		if (recovered.length === 0) {
 			log.info(`No recoverable Void platform installations were found in ${accountId}.`);
@@ -5549,7 +5549,7 @@ async function runPlatformLifecycleCommand(args) {
 		return;
 	}
 	if (args.subcommand !== "install") {
-		const { runInstalledPlatformCommand } = await import("./platform-management-B9LUtMt9.mjs");
+		const { runInstalledPlatformCommand } = await import("./platform-management-44Bxd3YC.mjs");
 		await runInstalledPlatformCommand(args);
 		return;
 	}
@@ -5761,7 +5761,7 @@ async function runPlatformLifecycleCommand(args) {
 			progress?.stop("Read the saved installation.");
 			progress = void 0;
 			if (authoritative) {
-				const { selectAuthoritativePlatformManifest } = await import("./platform-management-B9LUtMt9.mjs");
+				const { selectAuthoritativePlatformManifest } = await import("./platform-management-44Bxd3YC.mjs");
 				const selected = selectAuthoritativePlatformManifest(existing, authoritative);
 				authoritativeProvisionIntents = true;
 				if (!args.plan && JSON.stringify(selected) !== JSON.stringify(existing)) writeInstallationManifest(selected);
@@ -5990,7 +5990,7 @@ async function runPlatformLifecycleCommand(args) {
 			})).actions.filter((action) => action.kind === "worker"),
 			revalidateBeforeWorkerDeploy: (manifest, action) => revalidatePlatformInstallAction(client, plan, manifest, action),
 			verifyExistingOwnership: async (manifest, databaseCheckpointExists) => {
-				const { verifyPlatformInstallationOwnership } = await import("./platform-management-B9LUtMt9.mjs");
+				const { verifyPlatformInstallationOwnership } = await import("./platform-management-44Bxd3YC.mjs");
 				const retainedReplacementKeys = new Set(plan.actions.filter((action) => {
 					const previous = manifest.resources.find((resource) => resource.key === action.key);
 					return action.action === "create" && previous && previous.name !== action.name;
@@ -6024,7 +6024,7 @@ async function runPlatformLifecycleCommand(args) {
 			log.info("Confirm your identity in the browser, then test and enable any additional login methods in Settings.");
 		}
 		if (!plan.deployment.application.zoneName) log.info("Apps will use workers.dev addresses. When your domain is ready: void platform domain set <domain>");
-		outro("Run `void auth login`, then deploy an app with `void deploy --platform void`.");
+		outro("Run `void account login`, then deploy an app with `void deploy --platform void`.");
 	} catch (error) {
 		progress?.error("Platform installation failed.");
 		progress = void 0;

package/dist/{platform-lifecycle-Dhx9Pnub.mjs → platform-lifecycle-DlpiGcjr.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-Di0LbhPM.mjs";
+import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-DVzM2T4j.mjs";
 export { runPlatformLifecycleCommand };

package/dist/{platform-management-B9LUtMt9.mjs → platform-management-44Bxd3YC.mjs}

@@ -1,2 +1,2 @@
-import { c as selectAuthoritativePlatformManifest, s as runInstalledPlatformCommand, u as verifyPlatformInstallationOwnership } from "./platform-management-eaiaU3uM.mjs";
+import { c as selectAuthoritativePlatformManifest, s as runInstalledPlatformCommand, u as verifyPlatformInstallationOwnership } from "./platform-management-ibuS1as0.mjs";
 export { runInstalledPlatformCommand, selectAuthoritativePlatformManifest, verifyPlatformInstallationOwnership };

package/dist/{platform-management-eaiaU3uM.mjs → platform-management-ibuS1as0.mjs}

@@ -1,7 +1,7 @@
 import { i as createSpinner } from "./output-CCH48AMM.mjs";
 import { a as listInstallationManifests, d as readInstallationRecoverySecrets, h as resolveInstallationManifest, m as removePlatformConnectionForInstallation, p as removeInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-BJbgZLS1.mjs";
 import { E as confirm, I as select, N as note, P as outro, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { A as hyperdriveOriginFromConnectionString, C as assertPlatformOperatorCredentialCanApplyPlan, M as verifyPlatformRuntimeTokenPermissions, O as PlatformCloudflareClient, S as platformDatabaseNameFromOwnerUrl, _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as platformProvisionIntentHash, d as loadPlatformRuntime, g as trackedPlatformWorkerTraffic, j as hyperdriveOriginMatches, k as hyperdriveOriginConfigHash, l as createPlatformInstallationSecrets, m as resolveBootstrapGitHubId, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, u as installPlatform, v as formatPlatformInstallPlan, w as resolvePlatformCloudflareCredential, x as revalidatePlatformInstallAction, y as platformAdoptionIntentHash } from "./platform-lifecycle-Di0LbhPM.mjs";
+import { A as hyperdriveOriginFromConnectionString, C as assertPlatformOperatorCredentialCanApplyPlan, M as verifyPlatformRuntimeTokenPermissions, O as PlatformCloudflareClient, S as platformDatabaseNameFromOwnerUrl, _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as platformProvisionIntentHash, d as loadPlatformRuntime, g as trackedPlatformWorkerTraffic, j as hyperdriveOriginMatches, k as hyperdriveOriginConfigHash, l as createPlatformInstallationSecrets, m as resolveBootstrapGitHubId, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, u as installPlatform, v as formatPlatformInstallPlan, w as resolvePlatformCloudflareCredential, x as revalidatePlatformInstallAction, y as platformAdoptionIntentHash } from "./platform-lifecycle-DVzM2T4j.mjs";
 import { createHash } from "node:crypto";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, createPlatformResourceOwnershipMarker, parsePlatformInstallationManifest, parsePlatformResourceOwnershipMarker, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
 //#region src/cli/platform-management.ts

package/dist/{platform-recovery-BxfA8E5C.mjs → platform-recovery-D_KmvdSk.mjs}

@@ -1,7 +1,7 @@
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
 import { a as listInstallationManifests, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-BJbgZLS1.mjs";
-import { _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-Di0LbhPM.mjs";
-import { i as recoverDurablyMarkedProvisionIntents, r as isPlatformManifestMonotonicExtension, u as verifyPlatformInstallationOwnership } from "./platform-management-eaiaU3uM.mjs";
+import { _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-DVzM2T4j.mjs";
+import { i as recoverDurablyMarkedProvisionIntents, r as isPlatformManifestMonotonicExtension, u as verifyPlatformInstallationOwnership } from "./platform-management-ibuS1as0.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
 //#region src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {

package/dist/{project-cmd-DrnRJdep.mjs → project-cmd-BuF9doku.mjs}

@@ -9,7 +9,7 @@ async function runProjectsCommand(root) {
 	intro(cliTitle("project list"));
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	const projects = await new PlatformClient(token, { root }).listProjects();
@@ -39,17 +39,17 @@ async function runProjectsCommand(root) {
 async function runProjectCommand(root, args) {
 	const cloudflare = readDeploymentPlatform(root) === "cloudflare";
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-DHU1Wj6c.mjs");
+		const { runListCommand } = await import("./list-CVjGr_C6.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare apps are identified by cloudflare.name in void.config.ts and do not need linking.");
-		const { runLink } = await import("./link-BC-mNG9-.mjs");
+		const { runLink } = await import("./link-3lGrfXzd.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") {
 		if (cloudflare) {
-			const { runListCommand } = await import("./list-DHU1Wj6c.mjs");
+			const { runListCommand } = await import("./list-CVjGr_C6.mjs");
 			return runListCommand(root);
 		}
 		return runProjectsCommand(root);
@@ -61,41 +61,41 @@ async function runProjectCommand(root, args) {
 	}
 	if (args.subcommand === "team") {
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-B403BLBB.mjs");
+			const { printHelpPage } = await import("./help-r_vrpH_d.mjs");
 			printHelpPage(["project", "team"]);
 			return;
 		}
 		const accountInvitationAction = args.action === "pending" || args.action === "accept" || args.action === "decline";
 		if (cloudflare && !accountInvitationAction) throw new Error("project: Teams are available only for projects hosted on a Void platform, not direct Cloudflare deployments.");
-		const { runProjectTeamCommand } = await import("./project-team-CzRbO_kA.mjs");
+		const { runProjectTeamCommand } = await import("./project-team-B1Tia8vd.mjs");
 		return runProjectTeamCommand(root, args);
 	}
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-BG11f5PR.mjs");
+		const { runLogsCommand } = await import("./logs-DbzD-QDf.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "requests") {
 		if (cloudflare) throw new Error("project: Historical request analytics require the Void platform. Use `void project logs` for a live Cloudflare tail.");
-		const { runRequestsCommand } = await import("./requests-DwrqUQZ8.mjs");
+		const { runRequestsCommand } = await import("./requests-CphRF98D.mjs");
 		return runRequestsCommand(root, args.range, args.status || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-B4tFWmkN.mjs");
+		const { runRollbackCommand } = await import("./rollback-BYHJV2yD.mjs");
 		return runRollbackCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "cancel") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare deploys activate only after readiness succeeds, so there is no remote build to cancel.");
-		const { runCancelDeployCommand } = await import("./cancel-deploy-BgmyOwhe.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-BAKmkX4f.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
 		if (cloudflare) throw new Error("project: Refusing to delete Cloudflare resources through this command. Direct deployments are additive and existing resources may be shared.");
-		const { runDeleteCommand } = await import("./delete-Ri6JemSU.mjs");
+		const { runDeleteCommand } = await import("./delete-BEEyqlwd.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare ISR cache purge is not available yet; redeploy or purge the configured KV namespace explicitly.");
-		const { runPurgeCacheCommand } = await import("./cache-Be0Fu5Ka.mjs");
+		const { runPurgeCacheCommand } = await import("./cache-CKV1Gz2w.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{project-team-CzRbO_kA.mjs → project-team-B1Tia8vd.mjs}

@@ -47,7 +47,7 @@ function invitationResponseError(error, apiUrl) {
 	if (platformErrorMessage(parsePlatformErrorBody(error.body))) return error;
 	let message;
 	if (error.code === "project invitation not found") message = `Invitation not found on ${apiUrl}. Check VOID_API_URL if set, connect to the platform in your invitation with \`void connect <url>\`, then run \`void project team pending\` to check the invitation ID. If it is missing, ask a project administrator for a new invitation.`;
-	else if (error.code === "forbidden") message = `Your account cannot respond to this invitation on ${apiUrl}. Sign in with the account whose registered email received the invitation. To switch accounts, set VOID_API_URL to ${apiUrl}, unset VOID_TOKEN if present, then run \`void auth logout\` and \`void auth login\`. Run \`void project team pending\` to see that account's invitations.`;
+	else if (error.code === "forbidden") message = `Your account cannot respond to this invitation on ${apiUrl}. Sign in with the account whose registered email received the invitation. To switch accounts, set VOID_API_URL to ${apiUrl}, unset VOID_TOKEN if present, then run \`void account logout\` and \`void account login\`. Run \`void project team pending\` to see that account's invitations.`;
 	else if (error.code === "project invitation has expired") message = "This invitation has expired. Ask a project administrator to invite you again, then run `void project team pending`.";
 	else if (error.code === "project invitation is no longer pending") message = "This invitation has already been answered or revoked. Run `void project team pending` to see invitations awaiting your response, or ask a project administrator to check your access.";
 	else return error;
@@ -63,7 +63,7 @@ async function runProjectTeamCommand(root, args) {
 	};
 	if (apiUrl) log.info(`Platform: ${apiUrl}`);
 	if (!token) {
-		log.error(apiUrl ? `Not logged in to ${apiUrl}. Run \`void connect ${apiUrl}\` to sign in.` : "Not logged in. Run `void auth login` first.");
+		log.error(apiUrl ? `Not logged in to ${apiUrl}. Run \`void connect ${apiUrl}\` to sign in.` : "Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	const client = new PlatformClient(token, apiUrl ? { apiUrl } : { root });

package/dist/{requests-DwrqUQZ8.mjs → requests-CphRF98D.mjs}

@@ -9,7 +9,7 @@ async function runRequestsCommand(root, range, status) {
 	intro(cliTitle("project requests"));
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	if (!/^\d+(m|h|d)$/.test(range)) {

package/dist/{rollback-B4tFWmkN.mjs → rollback-BYHJV2yD.mjs}

@@ -12,7 +12,7 @@ async function runRollbackCommand(root, deployId) {
 	if (platform === "none") throw new Error("rollback: Deployment is disabled. Run `void init` to choose a platform.");
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	const linked = readProjectConfig(root);

package/dist/{secret-UtrRjhEO.mjs → secret-Rt9c4Ttw.mjs}

@@ -15,7 +15,7 @@ async function runSecretCommand(root, args) {
 	if (platform === "none") throw new Error("secret: Deployment is disabled. Run `void init` to choose a platform.");
 	const token = getToken(root);
 	if (!token) {
-		log.error("Not logged in. Run `void auth login` first.");
+		log.error("Not logged in. Run `void account login` first.");
 		process.exit(1);
 	}
 	const client = new PlatformClient(token, { root });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -325,11 +325,11 @@
     "@cloudflare/vite-plugin": "1.54.7",
     "@cloudflare/workers-types": "^4.20260702.1",
     "@napi-rs/keyring": "2.0.0",
-    "@void/deploy-cloudflare": "0.21.1",
-    "@void/deploy-core": "0.21.1",
-    "@void/edge": "0.21.1",
-    "@void/isr": "0.21.1",
-    "@void/platform": "0.21.1",
+    "@void/deploy-cloudflare": "0.21.2",
+    "@void/deploy-core": "0.21.2",
+    "@void/edge": "0.21.2",
+    "@void/isr": "0.21.2",
+    "@void/platform": "0.21.2",
     "acorn": "^8.15.0",
     "better-auth": "^1.7.3",
     "better-sqlite3": "^13.0.3",
@@ -379,7 +379,7 @@
     "zod": "^4.6.1"
   },
   "peerDependencies": {
-    "@void/md": "0.21.1",
+    "@void/md": "0.21.2",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/skills/migrate-vite-cloudflare-to-void/SKILL.md

@@ -83,7 +83,7 @@ export default defineConfig({
 7. Deploy workflow migration
 
 - Replace old deploy instructions with:
-  - `void auth login`
+  - `void account login`
   - `void deploy`
 - If CI must target a specific project, use:
   - `void deploy --project <slug>`

package/skills/void/SKILL.md

@@ -59,7 +59,7 @@ dedicated Access applications or connect existing ones, including a separate
 identity account. Protection setup verifies API/proxy coverage and uses scoped
 service credentials for installation and CI. Use `platform config auth protection`
 to show, enable, or disable protection; retain the company gate when probes fail.
-Users link another enabled method with `void auth link [connection-id]` after
+Users link another enabled method with `void account link [connection-id]` after
 recent sign-in and explicit browser identity confirmation. For expired first-admin
 codes, resume installation or repair completed provisioning. Lost-provider recovery
 uses `platform config auth recover` with installation ownership, original recovery
@@ -79,6 +79,8 @@ For Void platform project access, use `void project team`: invite only an email
 
 Use Void commands for every user-facing workflow. Never ask the user to install, authenticate, or run Wrangler directly. Say Cloudflare or Void instead, except when naming literal `wrangler.jsonc` / `wrangler.json` files or `WRANGLER_*` environment variables the user must inspect.
 
+`void auth login|status|logout` follows the saved deploy destination or asks the user to choose; `void account` explicitly manages a Void platform account.
+
 Use `void` in examples and commands in this skill. For first-time setup, prefer `void init` followed by `void deploy`; in an empty directory, install `void` first and let `void init` add the matching Pages adapter and starter dependencies with Vite+ as the default scaffold toolchain. In an existing app, `void init` configures Void in place by adding missing Vite scripts and creating or patching `vite.config.*` with `voidPlugin()`. For Cloudflare deployment, Void uses bundled tooling and secure browser OAuth; init or the first deploy saves the selected `account_id`, and `void cloudflare login|status|logout` manages the session; Void-managed deployment requires an explicitly connected platform. Use `void connect <url>` for an existing platform or `void platform install --plan` to preview a company control plane in the user's Cloudflare account. The core self-hosted platform excludes the dashboard, GitHub App, and build Containers; lifecycle commands are resumable and verify remote, Worker, and R2 ownership before mutations. `void platform disable` gates traffic through installation-owned routing storage and remains disabled through repair or upgrade; `void platform enable` explicitly restores traffic. Safe uninstall retains name-addressed Workers, R2, AI Gateway, external PostgreSQL, and zones for explicit manual cleanup. Direct Cloudflare deploys support native Void apps, static/SPA/SSG output, and Cloudflare builds from TanStack Start, React Router, vinext, SvelteKit, Nuxt, Analog, and Astro. They provision inferred resources, validate and apply migrations, require schema-declared server values in encrypted remote secret storage, upload and probe an immutable Worker Version, then activate and synchronize triggers. Native Void features are Workers Free-compatible by default; `void/sandbox` is an explicit exception because it uses Cloudflare Containers and therefore requires Workers Paid. A Sandbox deploy checks Containers access before provisioning/building, while apps without Sandbox perform no entitlement probe. Versions without preview URLs are staged at 0% and probed through workers.dev using a version override; the same safe fallback applies when Access blocks a generated preview alias but admits the stable Worker hostname. Set `CLOUDFLARE_WORKERS_SUBDOMAIN` in a fresh CI checkout, while local deploys cache it automatically. When Cloudflare Access protects `workers.dev`, use an admitted `CF_ACCESS_CLIENT_ID` / `CF_ACCESS_CLIENT_SECRET` service-token pair for CI, or a short-lived `CF_ACCESS_TOKEN` from `cloudflared` for an interactive local readiness probe. With Cloudflare saved in `.void/project.json`, secret, domain, project status/log/rollback, and remote database commands operate directly on the pinned Worker/account. Logs are a live tail. Rollback restores the selected version's saved schedules, queues, workflows, routes, and domains but never reverses database migrations; versions without complete trigger snapshots use code-only rollback and keep the current routes and schedules. On either deployment platform, auth-enabled `void deploy` preserves an existing `BETTER_AUTH_SECRET` or creates a persistent encrypted secret when missing; always use Void's deployment flow so it can manage that secret safely.
 
 Use `void` and `@void/*` in code examples and package manifests.
@@ -110,7 +112,7 @@ If invoked without a concrete task, do a brief app status check and report:
 3. Runtime signals (`void/db`, `void/kv`, `void/storage`, queue usage).
 4. Auth signals (`void/auth`, `auth` client imports, OAuth env vars).
 5. Deployment platform and optional Void project linkage (`.void/project.json`), plus config readiness (`void.config.ts`, Cloudflare `account_id`, tsconfig extends).
-6. Optional health checks (`void auth whoami`, `void db status` when relevant).
+6. Optional health checks (`void account whoami`, `void db status` when relevant).
 
 Then ask what to do next.
 

package/skills/void/docs/guide/platform/administration/access.md

@@ -107,7 +107,7 @@ Cloudflare applications for deliberate cleanup. Disabling an Access login method
 does not remove the gate.
 
 Users can add another enabled login to their existing account with
-`void auth link <connection-id>` or **Account** in the optional
+`void account link <connection-id>` or **Account** in the optional
 dashboard. Sign in again first if prompted, then authenticate with the additional
 provider and confirm the identity shown. Matching email addresses alone do not
 link accounts.

package/skills/void/docs/guide/project-collaboration.md

@@ -77,7 +77,7 @@ and run `void project link`.
 
 If the invitation is missing, check the platform and signed-in account. To
 switch accounts, set `VOID_API_URL` to the invitation's platform URL, unset
-`VOID_TOKEN` if present, then run `void auth logout` and `void auth login` using
+`VOID_TOKEN` if present, then run `void account logout` and `void account login` using
 the invited email address. For an expired or revoked invitation, ask a project
 administrator to invite you again.