void 0.21.8 → 0.21.9

package/dist/{account-cmd-CQ2wi4Th.mjs → account-cmd-DZZGK80W.mjs}

@@ -1,13 +1,13 @@
 import { c as getToken, p as removeToken } from "./auth-DLNN0D3Z.mjs";
 import { j as log } from "./dist-Dn6nn2IU.mjs";
 import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
-import { n as runLoginCommand } from "./login-DZldyb8c.mjs";
+import { n as runLoginCommand } from "./login-DvqXsfGs.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-B_lceSHK.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-B_CeugBw.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
 			if (removeToken(root)) log.success("Logged out.");
 			else log.info("Not logged in.");

package/dist/{auth-link-B_lceSHK.mjs → auth-link-B_CeugBw.mjs}

@@ -1,8 +1,8 @@
 import { a as getApiUrl, c as getToken, d as openBrowser, g as savePlatformToken, h as runPlatformLogin } from "./auth-DLNN0D3Z.mjs";
 import { j as log } from "./dist-Dn6nn2IU.mjs";
 import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
-import { r as selectPlatformLoginMethod } from "./login-DZldyb8c.mjs";
-import { t as discoverPlatform } from "./platform-cmd-BtxZrT6w.mjs";
+import { r as selectPlatformLoginMethod } from "./login-DvqXsfGs.mjs";
+import { t as discoverPlatform } from "./platform-cmd-DNl8WosH.mjs";
 import { execFile } from "node:child_process";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {

package/dist/{auth-router-cZq0HuWe.mjs → auth-router-BgEFRuvZ.mjs}

@@ -37,7 +37,7 @@ async function chooseDestination(root, args, interactive) {
 }
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
 	if (args.subcommand === "link") {
-		const { runAccountCommand } = await import("./account-cmd-CQ2wi4Th.mjs");
+		const { runAccountCommand } = await import("./account-cmd-DZZGK80W.mjs");
 		await runAccountCommand(root, {
 			subcommand: "link",
 			...args.connectionId ? { connectionId: args.connectionId } : {}
@@ -45,7 +45,7 @@ async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isT
 		return;
 	}
 	if (args.subcommand === "token") {
-		const { runAccountCommand } = await import("./account-cmd-CQ2wi4Th.mjs");
+		const { runAccountCommand } = await import("./account-cmd-DZZGK80W.mjs");
 		await runAccountCommand(root, { subcommand: "token" });
 		return;
 	}
@@ -55,7 +55,7 @@ async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isT
 		await runCloudflareCommand(root, { subcommand: args.subcommand === "whoami" || args.subcommand === "status" ? "status" : args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-CQ2wi4Th.mjs");
+	const { runAccountCommand } = await import("./account-cmd-DZZGK80W.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });

package/dist/cli/cf-compat.mjs

@@ -22,7 +22,7 @@ function cfEnvironment() {
 		CF_DELEGATION: "1",
 		CF_SEND_TELEMETRY: "false",
 		CF_NO_OSC_PROGRESS: "1",
-		CLOUDFLARE_AUTH_USE_KEYRING: "true"
+		CLOUDFLARE_AUTH_USE_KEYRING: process.env.CLOUDFLARE_AUTH_USE_KEYRING ?? "true"
 	};
 	if (env.HTTP_PROXY || env.HTTPS_PROXY || env.http_proxy || env.https_proxy) env.NODE_USE_ENV_PROXY = "1";
 	for (const [canonical, alias] of [
@@ -287,16 +287,24 @@ async function sessionCredential() {
 	const dist = join(dirname(fileURLToPath(import.meta.resolve("cf/package.json"))), "dist");
 	const entry = readdirSync(dist).find((name) => /^cf-[^/]+\.mjs$/.test(name));
 	if (!entry) throw new Error("The bundled Cloudflare credential reader is unavailable.");
-	const module = await import(pathToFileURL(join(dist, entry)).href);
-	if (typeof module.t !== "function") throw new Error("The bundled Cloudflare credential reader is unavailable.");
-	const noop = () => {};
-	const stored = module.t({ logger: {
-		debug: noop,
-		info: noop,
-		log: noop,
-		warn: noop,
-		error: noop
-	} }).readAuthCredentials();
+	const previousKeyringSetting = process.env.CLOUDFLARE_AUTH_USE_KEYRING;
+	process.env.CLOUDFLARE_AUTH_USE_KEYRING = previousKeyringSetting ?? "true";
+	let stored;
+	try {
+		const module = await import(pathToFileURL(join(dist, entry)).href);
+		if (typeof module.t !== "function") throw new Error("The bundled Cloudflare credential reader is unavailable.");
+		const noop = () => {};
+		stored = module.t({ logger: {
+			debug: noop,
+			info: noop,
+			log: noop,
+			warn: noop,
+			error: noop
+		} }).readAuthCredentials();
+	} finally {
+		if (previousKeyringSetting === void 0) delete process.env.CLOUDFLARE_AUTH_USE_KEYRING;
+		else process.env.CLOUDFLARE_AUTH_USE_KEYRING = previousKeyringSetting;
+	}
 	const credential = stored && typeof stored === "object" ? stored : null;
 	return credential && typeof credential.oauth_token === "string" && credential.oauth_token ? {
 		type: "oauth",

package/dist/cli/cli.mjs

@@ -2020,7 +2020,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-BM_LoBXC.mjs").then(({ runDeploy }) => {
+	import("../deploy-DDz7c8LK.mjs").then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -2039,21 +2039,21 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-BY38i-9E.mjs");
+	const { runConnectCommand } = await import("../connect-BsUSRzln.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
-else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-cZq0HuWe.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed)));
-else if (command === "account") runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-CQ2wi4Th.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed)));
-else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-CjNB09OF.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
+else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-BgEFRuvZ.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed)));
+else if (command === "account") runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-DZZGK80W.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed)));
+else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-C4ZV3Vpy.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
 else if (command === "cloudflare") runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-bSmZ1d5L.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed)));
 else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-B44I8J_W.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
 else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-DN9sSNiV.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
 else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-Dmhvb2oU.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-dMnE_Lat.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-BIo37Y7H.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DFi-s2t4.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-hRrvZaq_.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
 else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-Csi-tMbT.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
 else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-Vnv2f65C.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
 else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BED3_9JD.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
@@ -2075,7 +2075,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-CJSnEcuj.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-WO0JlPx8.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -2207,12 +2207,12 @@ else if (command === "prepare") {
 		const root = process.cwd();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-BY38i-9E.mjs");
+				const { runConnectCommand } = await import("../connect-BsUSRzln.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-CJSnEcuj.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-WO0JlPx8.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
@@ -2222,21 +2222,21 @@ else if (command === "prepare") {
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-BM_LoBXC.mjs");
+				const { runDeploy } = await import("../deploy-DDz7c8LK.mjs");
 				await runDeploy(root);
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-router-cZq0HuWe.mjs").then(({ runAuthRouter }) => runAuthRouter(r, p)));
-			case "account": return runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (r, p) => import("../account-cmd-CQ2wi4Th.mjs").then(({ runAccountCommand }) => runAccountCommand(r, p)));
-			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-CjNB09OF.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-router-BgEFRuvZ.mjs").then(({ runAuthRouter }) => runAuthRouter(r, p)));
+			case "account": return runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (r, p) => import("../account-cmd-DZZGK80W.mjs").then(({ runAccountCommand }) => runAccountCommand(r, p)));
+			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-C4ZV3Vpy.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
 			case "cloudflare": return runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (r, p) => import("../cloudflare-cmd-bSmZ1d5L.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(r, p)));
 			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-B44I8J_W.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
 			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-DN9sSNiV.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
 			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-Dmhvb2oU.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
 			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-BED3_9JD.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
 			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-Dpt0jd-x.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-dMnE_Lat.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-BIo37Y7H.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-DFi-s2t4.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-hRrvZaq_.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
 			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-Csi-tMbT.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
 			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-Vnv2f65C.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {

package/dist/{connect-BY38i-9E.mjs → connect-BsUSRzln.mjs}

@@ -3,8 +3,8 @@ import { o as listPlatformConnections, s as normalizePlatformApiUrl } from "./pl
 import { i as readDeploymentPlatform, l as writeDeploymentPlatform, u as writePlatformSelection } from "./project-C0Fqu05O.mjs";
 import { I as select, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
 import { i as isExpiredTokenError, n as PlatformClient } from "./client-QTl6ko_D.mjs";
-import { t as promptForLoginToken } from "./login-DZldyb8c.mjs";
-import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-BtxZrT6w.mjs";
+import { t as promptForLoginToken } from "./login-DvqXsfGs.mjs";
+import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-DNl8WosH.mjs";
 import { t as connectCloudflare } from "./cloudflare-connect-jAwacxxP.mjs";
 //#region src/cli/connect.ts
 async function selectVoidPlatform(interactive) {

package/dist/{db-BIo37Y7H.mjs → db-hRrvZaq_.mjs}

@@ -862,7 +862,7 @@ async function runMigrate(root, dialect, remote) {
 				log.error(getErrorMessage(error));
 				process.exit(1);
 			}
-			const { checkWranglerMigrationApplySet, parseRootWranglerConfig } = await import("./deploy-BM_LoBXC.mjs");
+			const { checkWranglerMigrationApplySet, parseRootWranglerConfig } = await import("./deploy-DDz7c8LK.mjs");
 			const applySet = await checkWranglerMigrationApplySet(context.operation.configPath, parseRootWranglerConfig(context.operation.configPath), binding, context.migrationsDir, rawMigrations);
 			if (!applySet.ok) {
 				log.error(applySet.reason);

package/dist/{deploy-BM_LoBXC.mjs → deploy-DDz7c8LK.mjs}

@@ -1,2 +1,2 @@
-import { A as parseRootWranglerConfig, J as runDeploy, f as checkWranglerMigrationApplySet } from "./deploy-C0JaQSWS.mjs";
+import { A as parseRootWranglerConfig, J as runDeploy, f as checkWranglerMigrationApplySet } from "./deploy-WaAQez1O.mjs";
 export { checkWranglerMigrationApplySet, parseRootWranglerConfig, runDeploy };

package/dist/{deploy-C0JaQSWS.mjs → deploy-WaAQez1O.mjs}

@@ -44,7 +44,7 @@ import { t as formatCloudflareUserMessage } from "./cloudflare-user-output-Q-k0Q
 import { a as promptProjectSetupAction, i as promptProjectSelection, r as promptAndCreateProject } from "./create-project-DBfFSZKY.mjs";
 import { t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
-import { t as promptForLoginToken } from "./login-DZldyb8c.mjs";
+import { t as promptForLoginToken } from "./login-DvqXsfGs.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/dist/{email-dMnE_Lat.mjs → email-DFi-s2t4.mjs}

@@ -1,6 +1,6 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
 import { c as import_picocolors, i as createSpinner } from "./output-CCH48AMM.mjs";
-import { L as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, X as runWranglerAuthToken, _ as deriveWorkerName, _t as findEmailConfigConflicts, bt as renderEmailChecklist, gt as createNodeEmailDns, h as createDeployWranglerRunner, ht as applyEmailSetup, k as loadProvisionModule, v as discoverRootWranglerConfig, vt as preflightEmail, yt as renderAddressMap } from "./deploy-C0JaQSWS.mjs";
+import { L as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, X as runWranglerAuthToken, _ as deriveWorkerName, _t as findEmailConfigConflicts, bt as renderEmailChecklist, gt as createNodeEmailDns, h as createDeployWranglerRunner, ht as applyEmailSetup, k as loadProvisionModule, v as discoverRootWranglerConfig, vt as preflightEmail, yt as renderAddressMap } from "./deploy-WaAQez1O.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
 import { c as getToken, d as openBrowser } from "./auth-DLNN0D3Z.mjs";
 import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
 import { a as join, l as relative, n as dirname, u as resolve } from "./dist-BVqXeR_h.mjs";
 import { d as require_picocolors } from "./output-CCH48AMM.mjs";
-import { G as resolveWorkerDirName, St as hasDocumentRoutes, V as resolveDistDir, ct as prerenderPagesNode, dt as collectRevalidate, ft as hasRevalidate, mt as SEND_EMAIL_BINDING, ot as generateQueueResolverSource, pt as scanDurableObjectModules, st as prerenderPages, ut as collectPages, wt as resolveAssetRoutingPolicy, xt as hasApiRoutes } from "./deploy-C0JaQSWS.mjs";
+import { G as resolveWorkerDirName, St as hasDocumentRoutes, V as resolveDistDir, ct as prerenderPagesNode, dt as collectRevalidate, ft as hasRevalidate, mt as SEND_EMAIL_BINDING, ot as generateQueueResolverSource, pt as scanDurableObjectModules, st as prerenderPages, ut as collectPages, wt as resolveAssetRoutingPolicy, xt as hasApiRoutes } from "./deploy-WaAQez1O.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-GgcMozYz.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-DPByhVck.mjs";
 import { r as scopedAccessCredentials } from "./cf-access-DRsQRe6k.mjs";

package/dist/{init-CJSnEcuj.mjs → init-WO0JlPx8.mjs}

@@ -17,8 +17,8 @@ import { r as formatProjectCommand } from "./preset-UHj9ARyP.mjs";
 import { n as writeVoidProjectConfig, t as canRewriteVoidProjectConfig } from "./config-write-BSduPMY8.mjs";
 import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-B8KuoYsO.mjs";
 import { i as promptProjectSelection, r as promptAndCreateProject } from "./create-project-DBfFSZKY.mjs";
-import { t as promptForLoginToken } from "./login-DZldyb8c.mjs";
-import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-BtxZrT6w.mjs";
+import { t as promptForLoginToken } from "./login-DvqXsfGs.mjs";
+import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-DNl8WosH.mjs";
 import { t as connectCloudflare } from "./cloudflare-connect-jAwacxxP.mjs";
 import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-BV4AzNul.mjs";
 import { createRequire } from "node:module";

package/dist/login-DFQk7rbW.mjs

@@ -0,0 +1,2 @@
+import { r as selectPlatformLoginMethod } from "./login-DvqXsfGs.mjs";
+export { selectPlatformLoginMethod };

package/dist/{login-DZldyb8c.mjs → login-DvqXsfGs.mjs}

@@ -29,7 +29,7 @@ async function selectPlatformLoginMethod(platform, requestedId) {
 	return methods.find((method) => method.id === provider);
 }
 async function promptForLoginToken(root = process.cwd(), platform) {
-	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-CjNB09OF.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
+	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-C4ZV3Vpy.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
 	const s = createSpinner();
 	s.start(`Opening browser for ${providerName} login...`);
 	try {

package/dist/{operator-cmd-B9dbG3Od.mjs → operator-cmd-03819ATr.mjs}

@@ -137,8 +137,8 @@ async function runAuth(origin, args) {
 	if (args.action === "login" || args.action === "token" && args.tokenStdin) {
 		if (!args.tokenStdin && !process.stdin.isTTY) throw new OperatorClientError("Browser login requires an interactive terminal. Use --token-stdin to exchange an API session.", "interactive_login_required");
 		const apiToken = args.tokenStdin ? await readOperatorApiTokenStdin() : await (async () => {
-			const { discoverPlatform } = await import("./platform-cmd-CjNB09OF.mjs");
-			const { selectPlatformLoginMethod } = await import("./login-t6rndSRW.mjs");
+			const { discoverPlatform } = await import("./platform-cmd-C4ZV3Vpy.mjs");
+			const { selectPlatformLoginMethod } = await import("./login-DFQk7rbW.mjs");
 			const { runPlatformLogin } = await import("./auth-CZuiVsFh.mjs");
 			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.providerExplicit ? args.provider : void 0)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
 		})();

package/dist/{platform-auth-config-Bex45lQt.mjs → platform-auth-config-z92h63q5.mjs}

@@ -140,11 +140,11 @@ async function configurationInput(args, existing) {
 }
 async function runPlatformAuthConfig(args) {
 	if (args.action === "recover") {
-		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-COOhMCvx.mjs");
+		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-o_340Ixx.mjs");
 		return runPlatformAuthRecovery(args);
 	}
 	if (args.action === "protection") {
-		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-Dma02l6-.mjs");
+		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-DeE3yr2R.mjs");
 		return runPlatformProtectionConfig(args);
 	}
 	const origin = resolveOperatorOrigin(args.connection);

package/dist/{platform-auth-protection-Dma02l6-.mjs → platform-auth-protection-DeE3yr2R.mjs}

@@ -4,8 +4,8 @@ import { n as ensurePlatformAccessToken } from "./cf-access-P0iZnu0q.mjs";
 import { E as confirm, W as isCancel } from "./dist-Dn6nn2IU.mjs";
 import { n as OperatorClient } from "./operator-client-DUwumHpQ.mjs";
 import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-8KnOVXVd.mjs";
-import { D as preparePlatformAccessSetup, E as parsePlatformAccessSetupSpec, O as PlatformCloudflareClient, T as checkpointPlatformAccessResources, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-BpDlxT3t.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-BKYenDlE.mjs";
+import { D as preparePlatformAccessSetup, E as parsePlatformAccessSetupSpec, O as PlatformCloudflareClient, T as checkpointPlatformAccessResources, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Bc047IeT.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CVpGI9Y5.mjs";
 import { createHmac } from "node:crypto";
 import { parsePlatformAccessProtection, platformProtectionProofMessage } from "@void/platform";
 import { readFile } from "node:fs/promises";

package/dist/{platform-auth-recovery-COOhMCvx.mjs → platform-auth-recovery-o_340Ixx.mjs}

@@ -2,8 +2,8 @@ import { d as openBrowser } from "./auth-DLNN0D3Z.mjs";
 import { d as readInstallationRecoverySecrets, h as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-QBa4DK32.mjs";
 import { E as confirm, W as isCancel } from "./dist-Dn6nn2IU.mjs";
 import { a as resolveOperatorOrigin } from "./operator-auth-8KnOVXVd.mjs";
-import { O as PlatformCloudflareClient, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-BpDlxT3t.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-BKYenDlE.mjs";
+import { O as PlatformCloudflareClient, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Bc047IeT.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CVpGI9Y5.mjs";
 import { createCipheriv, createDecipheriv, createHash, createHmac, hkdfSync, randomBytes, randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";

package/dist/{platform-cmd-CjNB09OF.mjs → platform-cmd-C4ZV3Vpy.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-BtxZrT6w.mjs";
+import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-DNl8WosH.mjs";
 export { discoverPlatform, runPlatformCommand };

package/dist/{platform-cmd-BtxZrT6w.mjs → platform-cmd-DNl8WosH.mjs}

@@ -92,12 +92,12 @@ function saveDiscoveredPlatform(discovery) {
 }
 async function runPlatformCommand(_root, args) {
 	if (args.subcommand === "config") {
-		const { runPlatformAuthConfig } = await import("./platform-auth-config-Bex45lQt.mjs");
+		const { runPlatformAuthConfig } = await import("./platform-auth-config-z92h63q5.mjs");
 		await runPlatformAuthConfig(args);
 		return;
 	}
 	if (args.subcommand === "operator") {
-		const { runOperatorCommand } = await import("./operator-cmd-B9dbG3Od.mjs");
+		const { runOperatorCommand } = await import("./operator-cmd-03819ATr.mjs");
 		await runOperatorCommand(args);
 		return;
 	}
@@ -129,7 +129,7 @@ async function runPlatformCommand(_root, args) {
 		console.log(`Capabilities: ${Object.entries(discovery.capabilities).filter(([, enabled]) => enabled).map(([name]) => name).join(", ")}`);
 		return;
 	}
-	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-CYll-oKE.mjs");
+	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-Bs2qx1E3.mjs");
 	await runPlatformLifecycleCommand(args);
 }
 //#endregion

package/dist/{platform-domain-DppaTARe.mjs → platform-domain-CU1JtJkW.mjs}

@@ -1,8 +1,8 @@
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
 import { d as readInstallationRecoverySecrets, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
 import { B as text, E as confirm, N as note, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { C as assertPlatformOperatorCredentialCanApplyPlan, O as PlatformCloudflareClient, _ as createPlatformInstallPlan, c as createPlatformHealthProbeToken, h as recordPlatformWorkerTraffic, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, p as recordResource, t as assertNoninteractivePlatformMutationAcknowledged, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-BpDlxT3t.mjs";
-import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-BKYenDlE.mjs";
+import { C as assertPlatformOperatorCredentialCanApplyPlan, O as PlatformCloudflareClient, _ as createPlatformInstallPlan, c as createPlatformHealthProbeToken, h as recordPlatformWorkerTraffic, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, p as recordResource, t as assertNoninteractivePlatformMutationAcknowledged, w as resolvePlatformCloudflareCredential } from "./platform-lifecycle-Bc047IeT.mjs";
+import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CVpGI9Y5.mjs";
 import { randomUUID } from "node:crypto";
 import { PLATFORM_APPLICATION_KEY, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, createApplicationRoutes, createPlatformDeploymentManifest, normalizeApplicationDomain } from "@void/platform";
 //#region src/cli/platform-domain.ts

package/dist/{platform-lifecycle-BpDlxT3t.mjs → platform-lifecycle-Bc047IeT.mjs}

@@ -1,5 +1,5 @@
 import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
-import { a as join } from "./dist-BVqXeR_h.mjs";
+import { a as join, n as dirname, u as resolve } from "./dist-BVqXeR_h.mjs";
 import { c as import_picocolors$1, d as require_picocolors, i as createSpinner, n as cliCommandName, r as cliTitle } from "./output-CCH48AMM.mjs";
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
 import { d as openBrowser } from "./auth-DLNN0D3Z.mjs";
@@ -9,7 +9,8 @@ import { B as text$1, E as confirm, F as password, G as settings, I as select, K
 import { o as resolveWranglerArgv } from "./preset-UHj9ARyP.mjs";
 import { c as runCloudflareAuthCommand, n as announceCloudflareLogin } from "./cloudflare-auth-C4_GPZr0.mjs";
 import { _ as resolvePinnedApiBaseUrl, o as createDefaultRunWrangler } from "./provision-BhreDAOS.mjs";
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { copyFileSync, cpSync, existsSync, lstatSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 import { createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
 import { tmpdir } from "node:os";
 import { execFile } from "node:child_process";
@@ -1499,7 +1500,7 @@ async function verifyInstalledPlatformAccessProtection(input) {
 	}
 	const existingWorkers = input.plan.actions.filter((action) => action.kind === "worker" && action.action === "update").map((action) => action.name);
 	if (existingWorkers.length) {
-		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-Dma02l6-.mjs");
+		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-DeE3yr2R.mjs");
 		await verifyProtectionWorkerOrigins({
 			request: input.client.request.bind(input.client),
 			listWorkerDomains: input.client.listWorkerDomains.bind(input.client),
@@ -3076,17 +3077,28 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 		}
 		for (const key of workerKeys) {
 			dependencies.onProgress?.(`Deploying the ${key} service`);
+			let workerStepStarted = performance.now();
+			const markWorkerStep = (step) => {
+				if (process.env.VOID_PLATFORM_TIMINGS === "1") process.stderr.write(`[platform timing] worker ${key} ${step} ${(performance.now() - workerStepStarted).toFixed(0)} ms\n`);
+				workerStepStarted = performance.now();
+			};
 			const action = workerActions.find((entry) => entry.key === (key === "emailGateway" ? "email-gateway-worker" : `${key}-worker`));
 			const workerSecrets = platformWorkerSecretPayload(key, workerDeploymentSecrets, plan.account.id, zoneId, action.action !== "create");
-			manifest = recordProvisionIntent(manifest, action, now());
-			writeInstallationManifest(manifest);
-			await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+			const intended = recordProvisionIntent(manifest, action, now());
+			if (intended !== manifest) {
+				manifest = intended;
+				writeInstallationManifest(manifest);
+				await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+			}
 			await dependencies.revalidateBeforeWorkerDeploy(manifest, action);
+			markWorkerStep("revalidate");
 			const preservedRoutes = dependencies.deployWorker ? [] : action.action === "create" ? [] : await inventoryUnmanagedPlatformWorkerTraffic(dependencies.client, plan, action.name);
+			markWorkerStep("traffic inventory");
 			const workerConfig = mergePlatformWorkerTrafficConfig(configs[key], preservedRoutes);
 			const previousWorkerConfig = mergePlatformWorkerTrafficConfig(previousConfigs[key], preservedRoutes);
 			const rollback = dependencies.deployWorker ? await dependencies.deployWorker(workerConfig, workerSecrets, previousWorkerConfig) : await deployPlatformWorker(workerConfig, workerSecrets, {
 				apiBaseUrl: cloudflareApiBaseUrl,
+				...dependencies.client.request ? { readCloudflare: (path) => dependencies.client.request(path) } : {},
 				onStaged: async (previousVersionId, stagedVersionId, previousTriggers) => {
 					manifest = recordWorkerCutoverStage(manifest, workerCutoverGeneration, key, previousVersionId, stagedVersionId, action.name, previousTriggers, now());
 					writeInstallationManifest(manifest);
@@ -3095,12 +3107,15 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 				onTrafficPublished: async () => {
 					if (!dependencies.client.listWorkerDomains || !dependencies.client.listWorkerRoutes) throw new Error("platform: Cloudflare traffic inventory is unavailable.");
 					const [customDomains, routes] = await Promise.all([dependencies.client.listWorkerDomains(plan.account.id), zoneId ? dependencies.client.listWorkerRoutes(zoneId) : Promise.resolve([])]);
-					manifest = recordPlatformWorkerTraffic(manifest, action.name, {
+					const next = recordPlatformWorkerTraffic(manifest, action.name, {
 						customDomains,
 						routes
 					}, now());
-					writeInstallationManifest(manifest);
-					await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+					if (JSON.stringify(next.resources) !== JSON.stringify(manifest.resources)) {
+						manifest = next;
+						writeInstallationManifest(manifest);
+						await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+					}
 				},
 				onUnsafeTraffic: async () => {
 					manifest = recordWorkerUnsafeTraffic(manifest, workerCutoverGeneration, key, action.name, now());
@@ -3128,10 +3143,15 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 				runner: runPinnedPlatformWrangler,
 				workerExisted: action.action !== "create"
 			});
+			markWorkerStep("deploy");
 			if (rollback) workerRollbacks.push(rollback);
-			manifest = recordResource(manifest, action, action.name, "created", now());
-			writeInstallationManifest(manifest);
-			await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+			const recorded = recordResource(manifest, action, action.name, "created", now());
+			if (rollback || dependencies.deployWorker || JSON.stringify(recorded.resources) !== JSON.stringify(manifest.resources)) {
+				manifest = recorded;
+				writeInstallationManifest(manifest);
+				await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+			}
+			markWorkerStep("record");
 		}
 		manifest = setInstallationEndpoints(manifest, {
 			apiUrl: plan.apiUrl,
@@ -3276,6 +3296,7 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 				const previousWorkerConfig = mergePlatformWorkerTrafficConfig(configs[key], preservedRoutes);
 				const rollback = dependencies.deployWorker ? await dependencies.deployWorker(workerConfig, workerSecrets, previousWorkerConfig) : await deployPlatformWorker(workerConfig, workerSecrets, {
 					apiBaseUrl: cloudflareApiBaseUrl,
+					...dependencies.client.request ? { readCloudflare: (path) => dependencies.client.request(path) } : {},
 					onStaged: async (previousVersionId, stagedVersionId, previousTriggers) => {
 						manifest = recordWorkerCutoverStage(manifest, workerCutoverGeneration, key, previousVersionId, stagedVersionId, action.name, previousTriggers, now());
 						writeInstallationManifest(manifest);
@@ -3284,12 +3305,15 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 					onTrafficPublished: async () => {
 						if (!dependencies.client.listWorkerDomains || !dependencies.client.listWorkerRoutes) throw new Error("platform: Cloudflare traffic inventory is unavailable.");
 						const [customDomains, routes] = await Promise.all([dependencies.client.listWorkerDomains(plan.account.id), zoneId ? dependencies.client.listWorkerRoutes(zoneId) : Promise.resolve([])]);
-						manifest = recordPlatformWorkerTraffic(manifest, action.name, {
+						const next = recordPlatformWorkerTraffic(manifest, action.name, {
 							customDomains,
 							routes
 						}, now());
-						writeInstallationManifest(manifest);
-						await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+						if (JSON.stringify(next.resources) !== JSON.stringify(manifest.resources)) {
+							manifest = next;
+							writeInstallationManifest(manifest);
+							await writeRemoteInstallationCheckpoint(dependencies.client, plan, manifest);
+						}
 					},
 					onUnsafeTraffic: async () => {
 						manifest = recordWorkerUnsafeTraffic(manifest, workerCutoverGeneration, key, action.name, now());
@@ -3407,10 +3431,14 @@ function saveInstalledPlatformConnection(plan, manifest) {
 	});
 }
 async function writeRemoteInstallationCheckpointWithoutDatabase(client, plan, manifest, databaseLock) {
+	const startedAt = performance.now();
 	await databaseLock?.checkpoint?.(manifest);
+	if (process.env.VOID_PLATFORM_TIMINGS === "1") process.stderr.write(`[platform timing] database checkpoint ${(performance.now() - startedAt).toFixed(0)} ms\n`);
 	const routing = manifest.resources.find((resource) => resource.key === "routing-kv" && resource.kind === "kv-namespace" && resource.ownership === "created" && resource.state === "ready");
 	if (!routing) return;
+	const kvStartedAt = performance.now();
 	await client.putKvValue(plan.account.id, routing.id, REMOTE_INSTALLATION_MANIFEST_KEY, JSON.stringify(manifest));
+	if (process.env.VOID_PLATFORM_TIMINGS === "1") process.stderr.write(`[platform timing] remote checkpoint ${(performance.now() - kvStartedAt).toFixed(0)} ms\n`);
 }
 function recordProvisionIntent(manifest, action, now) {
 	const previousResourceId = manifest.resources.find((resource) => resource.key === action.key)?.id ?? null;
@@ -4122,6 +4150,146 @@ async function claimPlatformDatabaseConnection(client, installationId, ownership
 		throw error;
 	}
 }
+let cachedPlatformUploaderHash;
+function platformWorkerUploaderHash() {
+	if (cachedPlatformUploaderHash !== void 0) return cachedPlatformUploaderHash;
+	try {
+		const launcher = resolveWranglerArgv(process.cwd())[1];
+		if (!launcher) return cachedPlatformUploaderHash = null;
+		const digest = createHash("sha256");
+		digest.update("platform-uploader:v1\0");
+		digest.update(process.version);
+		digest.update(readFileSync(resolve(dirname(launcher), "..", "..", "package.json")));
+		const cfDirectory = dirname(fileURLToPath(import.meta.resolve("cf/package.json")));
+		digest.update(readFileSync(join(cfDirectory, "package.json")));
+		digest.update(readFileSync(join(cfDirectory, "bin", "cf")));
+		const cfCodeHash = platformWorkerDirectoryHash(join(cfDirectory, "dist"));
+		if (!cfCodeHash) throw new Error("Cloudflare CLI code is unavailable.");
+		digest.update(cfCodeHash);
+		let dependencyDirectory = dirname(fileURLToPath(import.meta.resolve("@cloudflare/build-output-utils")));
+		while (!existsSync(join(dependencyDirectory, "package.json"))) {
+			const parent = dirname(dependencyDirectory);
+			if (parent === dependencyDirectory) throw new Error("Cloudflare build output package is unavailable.");
+			dependencyDirectory = parent;
+		}
+		digest.update(readFileSync(join(dependencyDirectory, "package.json")));
+		const buildOutputCodeHash = platformWorkerDirectoryHash(join(dependencyDirectory, "dist"));
+		if (!buildOutputCodeHash) throw new Error("Cloudflare build output code is unavailable.");
+		digest.update(buildOutputCodeHash);
+		const visited = /* @__PURE__ */ new Set();
+		const visit = (path, name) => {
+			if (visited.has(path)) return;
+			visited.add(path);
+			const source = readFileSync(path);
+			digest.update(`${name}\0`);
+			digest.update(source);
+			const imports = [...source.toString("utf8").matchAll(/\b(?:from|import)\s*(?:\(\s*)?['"](\.{1,2}\/[^'"]+)['"]/g)].map((match) => match[1]).sort();
+			for (const specifier of imports) visit(resolve(dirname(path), specifier), specifier);
+		};
+		visit(launcher, "launcher");
+		return cachedPlatformUploaderHash = digest.digest("hex");
+	} catch {
+		return cachedPlatformUploaderHash = null;
+	}
+}
+function platformWorkerDirectoryHash(directory) {
+	if (!lstatSync(directory).isDirectory()) return null;
+	const digest = createHash("sha256");
+	const visit = (path, prefix) => {
+		for (const entry of readdirSync(path, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+			const relativePath = `${prefix}${entry.name}`;
+			const absolutePath = join(path, entry.name);
+			if (entry.isDirectory()) {
+				digest.update(`directory:${relativePath}\0`);
+				if (!visit(absolutePath, `${relativePath}/`)) return false;
+			} else if (entry.isFile()) {
+				digest.update(`file:${relativePath}\0`);
+				digest.update(createHash("sha256").update(readFileSync(absolutePath)).digest("hex"));
+			} else return false;
+		}
+		return true;
+	};
+	return visit(directory, "") ? digest.digest("hex") : null;
+}
+/** Hash every input that can change a version upload; missing or unusual files disable reuse. */
+function platformWorkerUploadFingerprint(config, managedRoutes = []) {
+	const uploaderHash = platformWorkerUploaderHash();
+	if (typeof config.main !== "string" || !uploaderHash) return null;
+	try {
+		if (!lstatSync(config.main).isFile()) return null;
+		const mainSha256 = createHash("sha256").update(readFileSync(config.main)).digest("hex");
+		const normalized = {
+			...config,
+			main: { sha256: mainSha256 }
+		};
+		if (config.assets !== void 0) {
+			const assets = config.assets;
+			if (!assets || typeof assets !== "object" || Array.isArray(assets)) return null;
+			const directory = assets.directory;
+			if (typeof directory !== "string") return null;
+			const assetsHash = platformWorkerDirectoryHash(directory);
+			if (!assetsHash) return null;
+			normalized.assets = {
+				...assets,
+				directory: assetsHash
+			};
+		}
+		return createHash("sha256").update(JSON.stringify({
+			schema: 2,
+			config: normalized,
+			managedRoutes,
+			uploaderHash
+		})).digest("hex");
+	} catch {
+		return null;
+	}
+}
+function snapshotPlatformWorkerUploadInputs(config, directory) {
+	const main = config.main;
+	if (typeof main !== "string") throw new Error("platform: Worker upload has no script artifact.");
+	const snapshotMain = join(directory, "worker-upload.js");
+	copyFileSync(main, snapshotMain);
+	const snapshot = {
+		...config,
+		main: snapshotMain
+	};
+	if (config.assets !== void 0) {
+		const assets = config.assets;
+		const sourceDirectory = assets.directory;
+		if (typeof sourceDirectory !== "string") throw new Error("platform: Worker upload has no assets directory.");
+		const snapshotDirectory = join(directory, "worker-assets");
+		cpSync(sourceDirectory, snapshotDirectory, { recursive: true });
+		snapshot.assets = {
+			...assets,
+			directory: snapshotDirectory
+		};
+	}
+	return snapshot;
+}
+function platformWorkerApiReadRunner(accountId, workerName, readCloudflare, fallback) {
+	const base = `/accounts/${encodeURIComponent(accountId)}/workers/scripts/${encodeURIComponent(workerName)}`;
+	return async (args, account, cwd, capture) => {
+		if (args[0] === "deployments" && (args[1] === "status" || args[1] === "list")) {
+			const response = await readCloudflare(`${base}/deployments`);
+			const deployments = response && typeof response === "object" && !Array.isArray(response) ? response.deployments : null;
+			if (!Array.isArray(deployments)) throw new Error(`platform: Cloudflare returned malformed deployment history for ${workerName}.`);
+			return {
+				status: args[1] === "status" && deployments.length === 0 ? 1 : 0,
+				stderr: "",
+				stdout: JSON.stringify(args[1] === "status" ? deployments[0] : deployments)
+			};
+		}
+		if (args[0] === "versions" && args[1] === "view" && args[2]) {
+			const version = await readCloudflare(`${base}/versions/${encodeURIComponent(args[2])}`);
+			return {
+				status: 0,
+				stderr: "",
+				stdout: JSON.stringify(version)
+			};
+		}
+		return fallback(args, account, cwd, capture);
+	};
+}
 async function deployPlatformWorker(config, secrets, options) {
 	const directory = mkdtempSync(join(tmpdir(), "void-platform-deploy-"));
 	const workerName = String(config.name);
@@ -4136,10 +4304,67 @@ async function deployPlatformWorker(config, secrets, options) {
 	const previousTraffic = isolatePlatformWorkerCustomDomains(options.previousConfig);
 	let uploadConfig = withoutPlatformWorkerTrafficAttachments(nextTraffic.wranglerConfig);
 	const nextTriggers = readTriggerConfigFromObject(nextTraffic.wranglerConfig);
+	const contentHash = secrets === null ? platformWorkerUploadFingerprint(config, options.managedRoutes) : null;
 	let previousTriggers = readTriggerConfigFromObject(previousTraffic.wranglerConfig);
 	try {
 		const configPath = join(directory, "wrangler.json");
 		writeFileSync(configPath, `${JSON.stringify(uploadConfig, null, 2)}\n`, { mode: 384 });
+		const reconcileExistingVersion = async (versionId, triggerConfig, runner, deploymentId) => {
+			try {
+				assertPlatformTriggerStabilization(await stabilizeCloudflareVersionTriggers({
+					configPath,
+					knownTriggerConfigs: { [versionId]: nextTriggers },
+					manageRoutes: false,
+					previousTriggerConfig: triggerConfig,
+					publishEmptyCustomDomains: async () => {
+						await options.removeCustomDomains();
+						return cleanPlatformCommandResult();
+					},
+					runWrangler: platformWorkerCommandRunner(accountId, directory, runner),
+					targetTriggerConfig: nextTriggers,
+					targetVersionId: versionId,
+					workerName
+				}), workerName, versionId, "publish");
+				if (nextTraffic.customDomains.length > 0) await options.publishCustomDomains(workerName, nextTraffic.customDomains);
+				if (options.managedRoutes.length > 0) await options.publishRoutes(workerName, options.managedRoutes);
+				await options.onTrafficPublished();
+				if (!deploymentId && await readActivePlatformWorkerVersion(configPath, accountId, workerName, runner) !== versionId) throw new Error(`platform: Worker ${workerName} changed during traffic reconciliation.`);
+				if (deploymentId) {
+					const after = await readPlatformWorkerDeployments(configPath, accountId, workerName, runner);
+					if (after[0]?.id !== deploymentId || !deploymentRunsOnlyVersion(after[0], versionId)) throw new Error(`platform: Worker ${workerName} changed deployment lineage during reconciliation.`);
+				}
+				return null;
+			} catch (error) {
+				const failures = await recoverFailedPlatformWorkerDeployment({
+					checkpointUnsafeTraffic: options.onUnsafeTraffic,
+					closeRoutingGate: options.retainNewWorker,
+					rollback: null,
+					unsafeTraffic: true
+				});
+				throw new PlatformWorkerRecoveryIncompleteError(`platform: Worker ${workerName} traffic reconciliation failed: ${errorMessage(error)}${failures.length > 0 ? ` Safety recovery also failed: ${failures.join("; ")}` : ""}`, { cause: error });
+			}
+		};
+		if (options.workerExisted && contentHash && options.readCloudflare) {
+			const directRunner = platformWorkerApiReadRunner(accountId, workerName, options.readCloudflare, options.runner);
+			let candidate;
+			let changedDuringRead = false;
+			try {
+				const before = await readPlatformWorkerDeployments(configPath, accountId, workerName, directRunner);
+				const activeVersion = before[0]?.versions.length === 1 && before[0].versions[0]?.percentage === 100 ? before[0].versions[0].versionId : null;
+				if (!activeVersion) throw new Error(`platform: Existing Worker ${workerName} has no single active production version.`);
+				const snapshot = await readPlatformWorkerVersionSnapshot(configPath, accountId, workerName, readPlatformWorkerOwnershipMarker(config), activeVersion, directRunner);
+				const after = await readPlatformWorkerDeployments(configPath, accountId, workerName, directRunner);
+				changedDuringRead = before[0]?.id !== after[0]?.id || !deploymentRunsOnlyVersion(after[0], snapshot.versionId);
+				if (!changedDuringRead && snapshot.contentHash === contentHash) candidate = {
+					deploymentId: after[0].id,
+					snapshot
+				};
+			} catch (error) {
+				if (error instanceof Error && (error.message.includes("changed concurrently") || error.message.includes("does not belong to this installation"))) throw error;
+			}
+			if (changedDuringRead) throw new Error(`platform: Worker ${workerName} changed concurrently while its deployment lineage was inspected.`);
+			if (candidate && platformWorkerUploadFingerprint(config, options.managedRoutes) === contentHash) return await reconcileExistingVersion(candidate.snapshot.versionId, candidate.snapshot.triggerConfig, directRunner, candidate.deploymentId);
+		}
 		if (options.workerExisted) {
 			const previous = await readActivePlatformWorkerSnapshot(configPath, accountId, workerName, readPlatformWorkerOwnershipMarker(config), options.runner);
 			previousVersionId = previous.versionId;
@@ -4147,11 +4372,22 @@ async function deployPlatformWorker(config, secrets, options) {
 			if (!deploymentRunsOnlyVersion(deployments[0], previousVersionId)) throw new Error(`platform: Worker ${workerName} changed concurrently while its deployment lineage was inspected.`);
 			previousDeployment = deployments[0];
 			previousDeploymentId = previousDeployment.id;
+			if (contentHash && previous.contentHash === contentHash && platformWorkerUploadFingerprint(config, options.managedRoutes) === contentHash) return await reconcileExistingVersion(previousVersionId, previous.triggerConfig, options.runner);
 			uploadConfig = withoutCompletedPlatformWorkerMigrations(uploadConfig, previous.migrationTag);
 			writeFileSync(configPath, `${JSON.stringify(uploadConfig, null, 2)}\n`, { mode: 384 });
 			previousTriggers = resolvePlatformPreviousTriggerConfig(withoutPlatformCustomDomainTriggers(previous.triggerConfig), previousTriggers, options.previousPublicEndpoints);
 			previousTriggers = withoutPlatformCustomDomainTriggers(mergePreservedTriggerRoutes(previousTriggers, options.preservedRoutes));
 		}
+		const immutableConfig = contentHash ? snapshotPlatformWorkerUploadInputs(config, directory) : null;
+		const uploadedContentHash = immutableConfig ? platformWorkerUploadFingerprint(immutableConfig, options.managedRoutes) : null;
+		if (immutableConfig) {
+			uploadConfig = {
+				...uploadConfig,
+				main: immutableConfig.main,
+				...immutableConfig.assets === void 0 ? {} : { assets: immutableConfig.assets }
+			};
+			writeFileSync(configPath, `${JSON.stringify(uploadConfig, null, 2)}\n`, { mode: 384 });
+		}
 		const argv = [
 			...options.workerExisted ? ["versions", "upload"] : ["deploy"],
 			"--config",
@@ -4161,7 +4397,7 @@ async function deployPlatformWorker(config, secrets, options) {
 			"--experimental-auto-create=false",
 			...!options.workerExisted ? ["--autoconfig=false"] : [],
 			"--message",
-			encodeCloudflareVersionMessage([], nextTriggers)
+			encodeCloudflareVersionMessage([], nextTriggers, uploadedContentHash ?? void 0)
 		];
 		if (secrets) {
 			const secretsPath = join(directory, "secrets.json");
@@ -4388,6 +4624,7 @@ async function runPlatformWrangler(args, accountId, cwd, capture) {
 }
 const PLATFORM_WRANGLER_TIMEOUT_MS = 6e5;
 async function runPlatformWranglerAtApiBase(args, accountId, cwd, capture, apiBaseUrl = resolvePinnedApiBaseUrl()) {
+	const startedAt = performance.now();
 	const result = await createDefaultRunWrangler(process.cwd(), {
 		launcher: resolveWranglerArgv(process.cwd()),
 		timeoutMs: PLATFORM_WRANGLER_TIMEOUT_MS
@@ -4397,6 +4634,10 @@ async function runPlatformWranglerAtApiBase(args, accountId, cwd, capture, apiBa
 		captureJson: capture,
 		cwd
 	});
+	if (process.env.VOID_PLATFORM_TIMINGS === "1") {
+		const operation = args[0] === "versions" || args[0] === "deployments" ? `${args[0]} ${args[1] ?? ""}` : args[0] ?? "unknown";
+		process.stderr.write(`[platform timing] wrangler ${operation} ${(performance.now() - startedAt).toFixed(0)} ms\n`);
+	}
 	const stdout = result.stdout || "";
 	const stderr = result.stderr || "";
 	if (!capture && result.status !== 0) {
@@ -4655,6 +4896,11 @@ async function readActivePlatformWorkerSnapshot(configPath, accountId, workerNam
 	const readActiveVersion = () => readActivePlatformWorkerVersion(configPath, accountId, workerName, runner);
 	const versionId = await readActiveVersion();
 	if (!versionId) throw new Error(`platform: Existing Worker ${workerName} has no single active production version.`);
+	return await readPlatformWorkerVersionSnapshot(configPath, accountId, workerName, expectedOwnershipMarker, versionId, runner, async () => {
+		if (await readActiveVersion() !== versionId) throw new Error(`platform: Worker ${workerName} changed concurrently while its active version was inspected.`);
+	});
+}
+async function readPlatformWorkerVersionSnapshot(configPath, accountId, workerName, expectedOwnershipMarker, versionId, runner, validateCurrentVersion) {
 	const result = await runner([
 		"versions",
 		"view",
@@ -4677,13 +4923,15 @@ async function readActivePlatformWorkerSnapshot(configPath, accountId, workerNam
 	const bindings = resources && typeof resources === "object" && !Array.isArray(resources) ? resources.bindings : null;
 	const ownershipBindings = Array.isArray(bindings) ? bindings.filter((binding) => binding && typeof binding === "object" && binding.name === "PLATFORM_OWNERSHIP_MARKER" && binding.type === "plain_text" && typeof binding.text === "string") : [];
 	if (ownershipBindings.length !== 1 || ownershipBindings[0].text !== expectedOwnershipMarker) throw new Error(`platform: Active Worker version ${versionId} for ${workerName} does not belong to this installation.`);
-	if (await readActiveVersion() !== versionId) throw new Error(`platform: Worker ${workerName} changed concurrently while its active version was inspected.`);
+	await validateCurrentVersion?.();
 	const annotations = value.annotations;
 	const message = annotations && typeof annotations === "object" && typeof annotations["workers/message"] === "string" ? annotations["workers/message"] ?? null : null;
 	const metadata = parseCloudflareVersionMessage(message);
 	if (metadata?.schema !== 2) throw new Error(`platform: Active Worker ${workerName} predates safe trigger snapshots. Refusing to upgrade because its routes, cron, and queue consumers could not be restored after a failed cutover.`);
+	const migrationTag = readCloudflareVersionMigrationTag(value);
 	return {
-		migrationTag: readCloudflareVersionMigrationTag(value),
+		...metadata.contentHash ? { contentHash: metadata.contentHash } : {},
+		migrationTag,
 		triggerConfig: metadata.triggerConfig,
 		versionId
 	};
@@ -5568,14 +5816,14 @@ function resolvePlatformInstallDatabaseUrl(checkpoint, manifest = null) {
 }
 async function runPlatformLifecycleCommand(args) {
 	if (args.subcommand === "domain") {
-		const { runPlatformDomainCommand } = await import("./platform-domain-DppaTARe.mjs");
+		const { runPlatformDomainCommand } = await import("./platform-domain-CU1JtJkW.mjs");
 		await runPlatformDomainCommand(args);
 		return;
 	}
 	if (args.subcommand === "discover") {
 		const client = new PlatformCloudflareClient((await resolvePlatformCloudflareCredential()).token);
 		const accountId = await selectAccount(await readAccounts(client), args.account);
-		const { recoverPlatformInstallations } = await import("./platform-recovery-dJ5Me-I0.mjs");
+		const { recoverPlatformInstallations } = await import("./platform-recovery-dvUaptLr.mjs");
 		const recovered = await recoverPlatformInstallations(client, accountId, void 0, args.selector);
 		if (recovered.length === 0) {
 			log.info(`No recoverable Void platform installations were found in ${accountId}.`);
@@ -5585,7 +5833,7 @@ async function runPlatformLifecycleCommand(args) {
 		return;
 	}
 	if (args.subcommand !== "install") {
-		const { runInstalledPlatformCommand } = await import("./platform-management-BS5r6Ao8.mjs");
+		const { runInstalledPlatformCommand } = await import("./platform-management-C8tt6D8h.mjs");
 		await runInstalledPlatformCommand(args);
 		return;
 	}
@@ -5809,7 +6057,7 @@ async function runPlatformLifecycleCommand(args) {
 			progress?.stop("Read the saved installation.");
 			progress = void 0;
 			if (authoritative) {
-				const { selectAuthoritativePlatformManifest } = await import("./platform-management-BS5r6Ao8.mjs");
+				const { selectAuthoritativePlatformManifest } = await import("./platform-management-C8tt6D8h.mjs");
 				const selected = selectAuthoritativePlatformManifest(existing, authoritative);
 				authoritativeProvisionIntents = true;
 				if (!args.plan && JSON.stringify(selected) !== JSON.stringify(existing)) writeInstallationManifest(selected);
@@ -6038,7 +6286,7 @@ async function runPlatformLifecycleCommand(args) {
 			})).actions.filter((action) => action.kind === "worker"),
 			revalidateBeforeWorkerDeploy: (manifest, action) => revalidatePlatformInstallAction(client, plan, manifest, action),
 			verifyExistingOwnership: async (manifest, databaseCheckpointExists) => {
-				const { verifyPlatformInstallationOwnership } = await import("./platform-management-BS5r6Ao8.mjs");
+				const { verifyPlatformInstallationOwnership } = await import("./platform-management-C8tt6D8h.mjs");
 				const retainedReplacementKeys = new Set(plan.actions.filter((action) => {
 					const previous = manifest.resources.find((resource) => resource.key === action.key);
 					return action.action === "create" && previous && previous.name !== action.name;

package/dist/{platform-lifecycle-CYll-oKE.mjs → platform-lifecycle-Bs2qx1E3.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-BpDlxT3t.mjs";
+import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-Bc047IeT.mjs";
 export { runPlatformLifecycleCommand };

package/dist/{platform-management-BS5r6Ao8.mjs → platform-management-C8tt6D8h.mjs}

@@ -1,2 +1,2 @@
-import { c as selectAuthoritativePlatformManifest, s as runInstalledPlatformCommand, u as verifyPlatformInstallationOwnership } from "./platform-management-BKYenDlE.mjs";
+import { c as selectAuthoritativePlatformManifest, s as runInstalledPlatformCommand, u as verifyPlatformInstallationOwnership } from "./platform-management-CVpGI9Y5.mjs";
 export { runInstalledPlatformCommand, selectAuthoritativePlatformManifest, verifyPlatformInstallationOwnership };

package/dist/{platform-management-BKYenDlE.mjs → platform-management-CVpGI9Y5.mjs}

@@ -1,7 +1,7 @@
 import { i as createSpinner } from "./output-CCH48AMM.mjs";
 import { a as listInstallationManifests, d as readInstallationRecoverySecrets, h as resolveInstallationManifest, m as removePlatformConnectionForInstallation, p as removeInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
 import { E as confirm, I as select, N as note, P as outro, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { A as hyperdriveOriginFromConnectionString, C as assertPlatformOperatorCredentialCanApplyPlan, M as verifyPlatformRuntimeTokenPermissions, O as PlatformCloudflareClient, S as platformDatabaseNameFromOwnerUrl, _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as platformProvisionIntentHash, d as loadPlatformRuntime, g as trackedPlatformWorkerTraffic, j as hyperdriveOriginMatches, k as hyperdriveOriginConfigHash, l as createPlatformInstallationSecrets, m as resolveBootstrapGitHubId, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, u as installPlatform, v as formatPlatformInstallPlan, w as resolvePlatformCloudflareCredential, x as revalidatePlatformInstallAction, y as platformAdoptionIntentHash } from "./platform-lifecycle-BpDlxT3t.mjs";
+import { A as hyperdriveOriginFromConnectionString, C as assertPlatformOperatorCredentialCanApplyPlan, M as verifyPlatformRuntimeTokenPermissions, O as PlatformCloudflareClient, S as platformDatabaseNameFromOwnerUrl, _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as platformProvisionIntentHash, d as loadPlatformRuntime, g as trackedPlatformWorkerTraffic, j as hyperdriveOriginMatches, k as hyperdriveOriginConfigHash, l as createPlatformInstallationSecrets, m as resolveBootstrapGitHubId, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, u as installPlatform, v as formatPlatformInstallPlan, w as resolvePlatformCloudflareCredential, x as revalidatePlatformInstallAction, y as platformAdoptionIntentHash } from "./platform-lifecycle-Bc047IeT.mjs";
 import { createHash } from "node:crypto";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, createPlatformResourceOwnershipMarker, parsePlatformInstallationManifest, parsePlatformResourceOwnershipMarker, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
 //#region src/cli/platform-management.ts
@@ -26,6 +26,14 @@ function selectAuthoritativePlatformManifest(local, authoritative) {
 async function runInstalledPlatformCommand(args) {
 	if (args.subcommand !== "upgrade" && args.subcommand !== "rollback" && args.subcommand !== "repair" && args.subcommand !== "disable" && args.subcommand !== "enable" && args.subcommand !== "uninstall") throw new Error(`platform: Unsupported lifecycle command ${args.subcommand}.`);
 	assertNoninteractivePlatformMutationAcknowledged(args, process.stdin.isTTY === true);
+	const timingStart = performance.now();
+	let timingPrevious = timingStart;
+	const markPhase = (phase) => {
+		if (process.env.VOID_PLATFORM_TIMINGS !== "1") return;
+		const current = performance.now();
+		process.stderr.write(`[platform timing] phase ${phase} ${(current - timingPrevious).toFixed(0)} ms, total ${(current - timingStart).toFixed(0)} ms\n`);
+		timingPrevious = current;
+	};
 	const manifest = await resolveInstalledPlatformManifest(args.selector);
 	const operatorCredential = await resolvePlatformCloudflareCredential();
 	const operatorClient = new PlatformCloudflareClient(operatorCredential.token);
@@ -77,6 +85,7 @@ async function runInstalledPlatformCommand(args) {
 			includeEmailGateway: runtime.manifest.artifacts.emailGateway !== void 0,
 			enableSandbox: runtime.manifest.safetyProtocols.sandboxDrain >= 3
 		});
+		markPhase("plan");
 		note(formatPlatformInstallPlan(plan), args.subcommand === "upgrade" ? "Upgrade plan" : args.subcommand === "rollback" ? "Rollback plan" : args.subcommand === "enable" ? "Enable plan" : "Repair plan");
 		note([
 			`Version: ${runtime.manifest.platformVersion}`,
@@ -99,6 +108,7 @@ async function runInstalledPlatformCommand(args) {
 			allowUninitializedRoutingCheckpoint: args.subcommand === "repair" && databaseCheckpointExists,
 			databaseUrl
 		});
+		markPhase("ownership");
 		const installation = args.subcommand === "enable" ? setInstallationDesiredState(manifest, "enabled", (/* @__PURE__ */ new Date()).toISOString()) : manifest;
 		if (installation !== manifest) writeInstallationManifest(installation);
 		const bootstrapGitHubLogin = process.env.VOID_PLATFORM_ADMIN_GITHUB_LOGIN || recovery?.bootstrapGitHubLogin || "";
@@ -130,6 +140,7 @@ async function runInstalledPlatformCommand(args) {
 			customDomains: plan.deployment.capabilities.customDomains,
 			zoneId: plan.zone?.id ?? null
 		});
+		markPhase("runtime token");
 		if (!databaseLock?.readAuthenticationState) throw new Error("platform: The database lifecycle lock cannot read authoritative authentication settings.");
 		const result = await installPlatform(plan, secrets, installation, {
 			acquireDatabaseLifecycleLock: async () => Object.assign(async () => {}, {
@@ -142,7 +153,10 @@ async function runInstalledPlatformCommand(args) {
 			}),
 			client,
 			databaseRollbackSource: rollbackSourceRuntime ?? void 0,
-			onProgress: (message) => progress?.message(message),
+			onProgress: (message) => {
+				markPhase(message);
+				progress?.message(message);
+			},
 			runtime,
 			replanWorkers: async (recoveryManifest) => (await createPlatformInstallPlan(client, planInput, recoveryManifest, {
 				authoritativeProvisionIntents: true,
@@ -153,6 +167,7 @@ async function runInstalledPlatformCommand(args) {
 			revalidateBeforeWorkerDeploy: (manifest, action) => revalidatePlatformInstallAction(client, plan, manifest, action, { repairMissing: args.subcommand === "repair" })
 		});
 		progress.message("Finalizing platform changes");
+		markPhase("installer complete");
 		reportResult = () => {
 			progress?.stop(result.waitingForDns || result.waitingForSandboxDrain ? "Platform operation paused; progress is saved." : `Platform ${args.subcommand} complete.`);
 			progress = void 0;
@@ -186,6 +201,7 @@ async function runInstalledPlatformCommand(args) {
 		const databaseUrl = resolvePlatformInstallDatabaseUrl(recovery, current);
 		if (!databaseUrl) throw new Error("platform: DATABASE_URL is required to safely serialize lifecycle changes across hosts.");
 		const releaseDatabase = await acquirePlatformDatabaseLifecycleLock(databaseUrl, current.id, current.ownershipNonce);
+		markPhase("database lock");
 		try {
 			const authoritative = releaseDatabase.authoritativeManifest;
 			const databaseCheckpointExists = authoritative !== null && authoritative !== void 0;
@@ -197,6 +213,7 @@ async function runInstalledPlatformCommand(args) {
 			await releaseDatabase();
 		}
 		reportResult?.();
+		markPhase("complete");
 	} catch (error) {
 		progress?.error(`Platform ${args.subcommand} failed.`);
 		progress = void 0;

package/dist/{platform-recovery-dJ5Me-I0.mjs → platform-recovery-dvUaptLr.mjs}

@@ -1,7 +1,7 @@
 import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
 import { a as listInstallationManifests, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
-import { _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-BpDlxT3t.mjs";
-import { i as recoverDurablyMarkedProvisionIntents, r as isPlatformManifestMonotonicExtension, u as verifyPlatformInstallationOwnership } from "./platform-management-BKYenDlE.mjs";
+import { _ as createPlatformInstallPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-Bc047IeT.mjs";
+import { i as recoverDurablyMarkedProvisionIntents, r as isPlatformManifestMonotonicExtension, u as verifyPlatformInstallationOwnership } from "./platform-management-CVpGI9Y5.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
 //#region src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.21.8",
+  "version": "0.21.9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -325,11 +325,11 @@
     "@cloudflare/vite-plugin": "1.54.7",
     "@cloudflare/workers-types": "^4.20260702.1",
     "@napi-rs/keyring": "2.0.0",
-    "@void/deploy-cloudflare": "0.21.8",
-    "@void/deploy-core": "0.21.8",
-    "@void/edge": "0.21.8",
-    "@void/isr": "0.21.8",
-    "@void/platform": "0.21.8",
+    "@void/deploy-cloudflare": "0.21.9",
+    "@void/deploy-core": "0.21.9",
+    "@void/edge": "0.21.9",
+    "@void/isr": "0.21.9",
+    "@void/platform": "0.21.9",
     "acorn": "^8.15.0",
     "better-auth": "^1.7.3",
     "better-sqlite3": "^13.0.3",
@@ -379,7 +379,7 @@
     "zod": "^4.6.1"
   },
   "peerDependencies": {
-    "@void/md": "0.21.8",
+    "@void/md": "0.21.9",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/dist/login-t6rndSRW.mjs

@@ -1,2 +0,0 @@
-import { r as selectPlatformLoginMethod } from "./login-DZldyb8c.mjs";
-export { selectPlatformLoginMethod };