void 0.21.8 → 0.22.0

package/dist/{dist-Dn6nn2IU.mjs → dist-CTBk70IR.mjs}

@@ -287,7 +287,7 @@ function wrapAnsi(string, columns, options) {
 	return String(string).normalize().split(CRLF_OR_LF).map((line) => exec(line, columns, options)).join("\n");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@clack+core@1.5.0/node_modules/@clack/core/dist/index.mjs
+//#region ../../node_modules/.pnpm/@clack+core@1.5.1/node_modules/@clack/core/dist/index.mjs
 var import_src = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const ESC = "\x1B";
 	const CSI = `${ESC}[`;
@@ -794,7 +794,7 @@ var n = class extends y {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/@clack+prompts@1.8.0/node_modules/@clack/prompts/dist/index.mjs
+//#region ../../node_modules/.pnpm/@clack+prompts@1.8.1/node_modules/@clack/prompts/dist/index.mjs
 function isUnicodeSupported() {
 	if (process$1.platform !== "win32") return process$1.env.TERM !== "linux";
 	return Boolean(process$1.env.CI) || Boolean(process$1.env.WT_SESSION) || Boolean(process$1.env.TERMINUS_SUBLIME) || process$1.env.ConEmuTask === "{cmd::Cmder}" || process$1.env.TERM_PROGRAM === "Terminus-Sublime" || process$1.env.TERM_PROGRAM === "vscode" || process$1.env.TERM === "xterm-256color" || process$1.env.TERM === "alacritty" || process$1.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
@@ -891,28 +891,28 @@ const limitOptions = ({ cursor: l, options: e, style: w, output: p = process.std
 	for (const t of s) for (const n of t) x.push(n);
 	return c && x.push(M), x;
 };
-const confirm = (i) => {
-	const a = i.active ?? "Yes", s = i.inactive ?? "No";
+const confirm = (e) => {
+	const a = e.active ?? "Yes", o = e.inactive ?? "No";
 	return new r({
 		active: a,
-		inactive: s,
-		signal: i.signal,
-		input: i.input,
-		output: i.output,
-		initialValue: i.initialValue ?? true,
+		inactive: o,
+		signal: e.signal,
+		input: e.input,
+		output: e.output,
+		initialValue: e.initialValue ?? true,
 		render() {
-			const e = i.withGuide ?? settings.withGuide, u = `${symbol(this.state)}  `, l = e ? `${styleText("gray", S_BAR)}  ` : "", f = wrapTextWithPrefix(i.output, i.message, l, u), o = `${e ? `${styleText("gray", S_BAR)}
+			const i = e.withGuide ?? settings.withGuide, u = `${symbol(this.state)}  `, l = i ? `${styleText("gray", S_BAR)}  ` : "", f = wrapTextWithPrefix(e.output, e.message, l, u), s = `${i ? `${styleText("gray", S_BAR)}
 ` : ""}${f}
-`, c = this.value ? a : s;
+`, c = this.value ? a : o;
 			switch (this.state) {
-				case "submit": return `${o}${e ? `${styleText("gray", S_BAR)}  ` : ""}${styleText("dim", c)}`;
-				case "cancel": return `${o}${e ? `${styleText("gray", S_BAR)}  ` : ""}${styleText(["strikethrough", "dim"], c)}${e ? `
+				case "submit": return `${s}${i ? `${styleText("gray", S_BAR)}  ` : ""}${styleText("dim", c)}`;
+				case "cancel": return `${s}${i ? `${styleText("gray", S_BAR)}  ` : ""}${styleText(["strikethrough", "dim"], c)}${i ? `
 ${styleText("gray", S_BAR)}` : ""}`;
 				default: {
-					const r = e ? `${styleText("cyan", S_BAR)}  ` : "", g = e ? styleText("cyan", S_BAR_END) : "";
-					return `${o}${r}${this.value ? `${styleText("green", S_RADIO_ACTIVE)} ${a}` : `${styleText("dim", S_RADIO_INACTIVE)} ${styleText("dim", a)}`}${i.vertical ? e ? `
+					const r = i ? `${styleText("cyan", S_BAR)}  ` : "", g = i ? styleText("cyan", S_BAR_END) : "";
+					return `${s}${r}${this.value ? `${styleText("green", S_RADIO_ACTIVE)} ${a}` : `${styleText("dim", S_RADIO_INACTIVE)} ${styleText("dim", a)}`}${e.vertical ? i ? `
 ${styleText("cyan", S_BAR)}  ` : `
-` : ` ${styleText("dim", "/")} `}${this.value ? `${styleText("dim", S_RADIO_INACTIVE)} ${styleText("dim", s)}` : `${styleText("green", S_RADIO_ACTIVE)} ${s}`}
+` : ` ${styleText("dim", "/")} `}${this.value ? `${styleText("dim", S_RADIO_INACTIVE)} ${styleText("dim", o)}` : `${styleText("green", S_RADIO_ACTIVE)} ${o}`}
 ${g}
 `;
 				}
@@ -932,7 +932,7 @@ const multiselect = (i) => {
 	const u = (t, a) => {
 		const r = t.label ?? String(t.value);
 		return a === "disabled" ? `${styleText("gray", S_CHECKBOX_INACTIVE)} ${m(r, (o) => styleText(["strikethrough", "gray"], o))}${t.hint ? ` ${styleText("dim", `(${t.hint ?? "disabled"})`)}` : ""}` : a === "active" ? `${styleText("cyan", S_CHECKBOX_ACTIVE)} ${r}${t.hint ? ` ${styleText("dim", `(${t.hint})`)}` : ""}` : a === "selected" ? `${styleText("green", S_CHECKBOX_SELECTED)} ${m(r, (o) => styleText("dim", o))}${t.hint ? ` ${styleText("dim", `(${t.hint})`)}` : ""}` : a === "cancelled" ? `${m(r, (o) => styleText(["strikethrough", "dim"], o))}` : a === "active-selected" ? `${styleText("green", S_CHECKBOX_SELECTED)} ${r}${t.hint ? ` ${styleText("dim", `(${t.hint})`)}` : ""}` : a === "submitted" ? `${m(r, (o) => styleText("dim", o))}` : `${styleText("dim", S_CHECKBOX_INACTIVE)} ${m(r, (o) => styleText("dim", o))}`;
-	}, d = i.required ?? true, v = i.showInstructions ?? true;
+	}, d = i.required ?? true, x = i.showInstructions ?? true;
 	return new a({
 		options: i.options,
 		signal: i.signal,
@@ -952,7 +952,7 @@ ${styleText("reset", styleText("dim", `Press ${styleText([
 		render() {
 			const t = i.withGuide ?? settings.withGuide, a = wrapTextWithPrefix(i.output, i.message, t ? `${symbolBar(this.state)}  ` : "", `${symbol(this.state)}  `), r = `${t ? `${styleText("gray", S_BAR)}
 ` : ""}${a}
-`, o = this.value ?? [], p = (n, l) => {
+`, o = this.value ?? [], g = (n, l) => {
 				if (n.disabled) return u(n, "disabled");
 				const s = o.includes(n.value);
 				return l && s ? u(n, "active-selected") : s ? u(n, "selected") : u(n, l ? "active" : "inactive");
@@ -970,7 +970,7 @@ ${styleText("gray", S_BAR)}` : ""}`;
 				}
 				case "error": {
 					const n = t ? `${styleText("yellow", S_BAR)}  ` : "", l = this.error.split(`
-`).map(($, C) => C === 0 ? `${t ? `${styleText("yellow", S_BAR_END)}  ` : ""}${styleText("yellow", $)}` : `   ${$}`).join(`
+`).map(($, v) => v === 0 ? `${t ? `${styleText("yellow", S_BAR_END)}  ` : ""}${styleText("yellow", $)}` : `   ${$}`).join(`
 `), s = r.split(`
 `).length, h = l.split(`
 `).length + 1;
@@ -981,7 +981,7 @@ ${styleText("gray", S_BAR)}` : ""}`;
 						maxItems: i.maxItems,
 						columnPadding: n.length,
 						rowPadding: s + h,
-						style: p
+						style: g
 					}).join(`
 ${n}`)}
 ${l}
@@ -989,7 +989,7 @@ ${l}
 				}
 				default: {
 					const n = t ? `${styleText("cyan", S_BAR)}  ` : "", l = r.split(`
-`).length, s = v ? formatInstructionFooter(MULTISELECT_INSTRUCTIONS, t) : t ? [styleText("cyan", S_BAR_END)] : [], h = s.join(`
+`).length, s = x ? formatInstructionFooter(MULTISELECT_INSTRUCTIONS, t) : t ? [styleText("cyan", S_BAR_END)] : [], h = s.join(`
 `), $ = s.length + 1;
 					return `${r}${n}${limitOptions({
 						output: i.output,
@@ -998,7 +998,7 @@ ${l}
 						maxItems: i.maxItems,
 						columnPadding: n.length,
 						rowPadding: l + $,
-						style: p
+						style: g
 					}).join(`
 ${n}`)}
 ${h}
@@ -1102,29 +1102,29 @@ ${h}
 ${styleText("gray", l$1 + S_BAR_H.repeat(t + 2) + S_CORNER_BOTTOM_RIGHT)}
 `);
 };
-const password = (r) => new u$1({
-	validate: r.validate,
-	mask: r.mask ?? S_PASSWORD_MASK,
-	signal: r.signal,
-	input: r.input,
-	output: r.output,
+const password = (e) => new u$1({
+	validate: e.validate,
+	mask: e.mask ?? S_PASSWORD_MASK,
+	signal: e.signal,
+	input: e.input,
+	output: e.output,
 	render() {
-		const e = r.withGuide ?? settings.withGuide, o = `${e ? `${styleText("gray", S_BAR)}
-` : ""}${symbol(this.state)}  ${r.message}
-`, c = this.userInputWithCursor, i = this.masked;
+		const r = e.withGuide ?? settings.withGuide, o = `${r ? `${styleText("gray", S_BAR)}
+` : ""}${symbol(this.state)}  ${e.message}
+`, m = this.userInputWithCursor, i = this.masked;
 		switch (this.state) {
 			case "error": {
-				const s = e ? `${styleText("yellow", S_BAR)}  ` : "", n = e ? `${styleText("yellow", S_BAR_END)}  ` : "", l = i ?? "";
-				return r.clearOnError && this.clear(), `${o.trim()}
-${s}${l}
+				const s = r ? `${styleText("yellow", S_BAR)}  ` : "", n = r ? `${styleText("yellow", S_BAR_END)}  ` : "", d = i ?? "";
+				return e.clearOnError && this.clear(), `${o.trim()}
+${s}${d}
 ${n}${styleText("yellow", this.error)}
 `;
 			}
-			case "submit": return `${o}${e ? `${styleText("gray", S_BAR)}  ` : ""}${i ? styleText("dim", i) : ""}`;
-			case "cancel": return `${o}${e ? `${styleText("gray", S_BAR)}  ` : ""}${i ? styleText(["strikethrough", "dim"], i) : ""}${i && e ? `
+			case "submit": return `${o}${r ? `${styleText("gray", S_BAR)}  ` : ""}${i ? styleText("dim", i) : ""}`;
+			case "cancel": return `${o}${r ? `${styleText("gray", S_BAR)}  ` : ""}${i ? styleText(["strikethrough", "dim"], i) : ""}${i && r ? `
 ${styleText("gray", S_BAR)}` : ""}`;
-			default: return `${o}${e ? `${styleText("cyan", S_BAR)}  ` : ""}${c}
-${e ? styleText("cyan", S_BAR_END) : ""}
+			default: return `${o}${r ? `${styleText("cyan", S_BAR)}  ` : ""}${m}
+${r ? styleText("cyan", S_BAR_END) : ""}
 `;
 		}
 	}
@@ -1245,19 +1245,19 @@ ${styleText("gray", S_BAR)}` : ""}`;
 				}
 				default: {
 					const r = n ? `${styleText("cyan", S_BAR)}  ` : "", a = u.split(`
-`).length, p = d ? formatInstructionFooter(SELECT_INSTRUCTIONS, n) : n ? [styleText("cyan", S_BAR_END)] : [], b = p.join(`
-`), f = p.length + 1;
+`).length, p = d ? formatInstructionFooter(SELECT_INSTRUCTIONS, n) : n ? [styleText("cyan", S_BAR_END)] : [], f = p.join(`
+`), b = p.length + 1;
 					return `${u}${r}${limitOptions({
 						output: t.output,
 						cursor: this.cursor,
 						options: this.options,
 						maxItems: t.maxItems,
 						columnPadding: r.length,
-						rowPadding: a + f,
+						rowPadding: a + b,
 						style: (g, x) => o(g, g.disabled ? "disabled" : x ? "active" : "inactive")
 					}).join(`
 ${r}`)}
-${b}
+${f}
 `;
 				}
 			}

package/dist/{domain-Dmhvb2oU.mjs → domain-JRF59P_r.mjs}

@@ -1,8 +1,8 @@
-import { c as import_picocolors } from "./output-CCH48AMM.mjs";
 import { c as getToken } from "./auth-DLNN0D3Z.mjs";
 import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { N as note, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { N as note, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
 //#region src/cli/domain.ts
 async function runDomainCommand(root, args) {
 	const platform = readDeploymentPlatform(root);
@@ -40,7 +40,7 @@ async function runDomainCommand(root, args) {
 }
 async function runCloudflareDomainCommand(root, args) {
 	if (args.projectSlug) throw new Error("domain: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-BipGMJ5O.mjs");
+	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-BT6OWFBk.mjs");
 	if (args.subcommand === "add") {
 		const result = await changeCloudflareDomain(root, args.hostname, "add");
 		log.success(result.modified ? `Domain ${args.hostname} added and activated on Cloudflare.` : `Domain ${args.hostname} is already configured.`);

package/dist/{email-dMnE_Lat.mjs → email-Bo6G9LOZ.mjs}

@@ -1,14 +1,14 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { c as import_picocolors, i as createSpinner } from "./output-CCH48AMM.mjs";
-import { L as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, X as runWranglerAuthToken, _ as deriveWorkerName, _t as findEmailConfigConflicts, bt as renderEmailChecklist, gt as createNodeEmailDns, h as createDeployWranglerRunner, ht as applyEmailSetup, k as loadProvisionModule, v as discoverRootWranglerConfig, vt as preflightEmail, yt as renderAddressMap } from "./deploy-C0JaQSWS.mjs";
+import { L as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, X as runWranglerAuthToken, _ as deriveWorkerName, _t as findEmailConfigConflicts, bt as renderEmailChecklist, gt as createNodeEmailDns, h as createDeployWranglerRunner, ht as applyEmailSetup, k as loadProvisionModule, v as discoverRootWranglerConfig, vt as preflightEmail, yt as renderAddressMap } from "./deploy-CH-o2CaZ.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
 import { c as getToken, d as openBrowser } from "./auth-DLNN0D3Z.mjs";
 import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { m as readConfig } from "./config-CafTW6Cz.mjs";
-import { k as writeProvisionedWranglerConfig } from "./wrangler-BymcxrRa.mjs";
-import { E as confirm, F as password, N as note, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
+import { m as readConfig } from "./config-Br_JZD6u.mjs";
+import { k as writeProvisionedWranglerConfig } from "./wrangler-DQF1vKyf.mjs";
+import { E as confirm, F as password, N as note, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
 import { a as scanEmailHandlersSync } from "./email--tEtMoj_.mjs";
-import { n as PlatformClient, t as PlatformApiError } from "./client-QTl6ko_D.mjs";
+import { n as PlatformClient, t as PlatformApiError } from "./client-BTZ3XkrB.mjs";
+import { c as import_picocolors, i as createSpinner } from "./output-Dm_A4Tbv.mjs";
 import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { execSync } from "node:child_process";

package/dist/{env-Csi-tMbT.mjs → env-BYOrWQnv.mjs}

@@ -1,11 +1,11 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { r as cliTitle } from "./output-CCH48AMM.mjs";
 import { c as getToken } from "./auth-DLNN0D3Z.mjs";
 import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
 import { r as generateEnvTypes, t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
 import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-BB4GkLxn.mjs";
-import { N as note, O as intro, P as outro, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { N as note, O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
@@ -26,7 +26,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BipGMJ5O.mjs");
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BT6OWFBk.mjs");
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);

package/dist/{env-public-D_6u46fX.d.mts → env-public-BxU_0yTL.d.mts}

@@ -1,3 +1,4 @@
+import { c as VoidPlatformSandbox } from "./sandbox-qpNBT8a3.mjs";
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 //#region src/runtime/env-public.d.ts
 type AnyValidator = StandardSchemaV1<unknown, unknown>;
@@ -112,7 +113,7 @@ declare global {
       KV: KVNamespace;
       STORAGE: R2Bucket;
       AI: Ai;
-      SANDBOX: DurableObjectNamespace<import("@cloudflare/sandbox").Sandbox>;
+      SANDBOX: DurableObjectNamespace<VoidPlatformSandbox>;
       /** @internal Service binding to proxy worker (AI, revalidation, future features) */
       __VOID_PROXY?: Fetcher;
       /** @internal Custom proxy URL override */

package/dist/gen-CNJ62MM7.mjs

@@ -0,0 +1,2 @@
+import { r as runGenCommand } from "./gen-sCtlCOdA.mjs";
+export { runGenCommand };

package/dist/{gen-Dz3X1Qab.mjs → gen-sCtlCOdA.mjs}

@@ -1,12 +1,12 @@
 import { a as join, l as relative, n as dirname } from "./dist-BVqXeR_h.mjs";
-import { r as cliTitle } from "./output-CCH48AMM.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
-import { m as readConfig, u as getDatabaseDialect } from "./config-CafTW6Cz.mjs";
+import { m as readConfig, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
 import { n as ensureProjectTsconfig } from "./project-tsconfig-B8GeM0RM.mjs";
 import { n as readJournal, t as collectMigrations } from "./collect-DiTn9yr6.mjs";
-import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
+import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
 import { t as writeDrizzleConfig } from "./config-D8MOgiQV.mjs";
 import { r as listDrizzleArtifacts, t as assertJournalCoherence } from "./validate-CIUwFpjB.mjs";
+import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 import { t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-BV4AzNul.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/dist/{github-cmd-BED3_9JD.mjs → github-cmd-0-7PexDq.mjs}

@@ -1,8 +1,8 @@
-import { c as import_picocolors } from "./output-CCH48AMM.mjs";
 import { c as getToken, d as openBrowser, n as createCodeChallenge, r as createCodeVerifier, t as awaitBrowserCallback } from "./auth-DLNN0D3Z.mjs";
 import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { B as text, E as confirm, I as select, T as cancel, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient, o as parsePlatformErrorBody, s as platformErrorMessage, t as PlatformApiError } from "./client-QTl6ko_D.mjs";
+import { B as text, E as confirm, I as select, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient, o as parsePlatformErrorBody, s as platformErrorMessage, t as PlatformApiError } from "./client-BTZ3XkrB.mjs";
+import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
 import { randomBytes } from "node:crypto";
@@ -90,14 +90,12 @@ function formatInstallations(installations) {
 function formatConnection(connection) {
 	const row = (label, value) => `  ${label.padEnd(16)}${value}`;
 	const workflow = connection.build_executor === "github_actions" ? connection.workflow_path : `${connection.workflow_path} (unused for container builds)`;
-	const rows = [
+	return [
 		row("Repository", connection.repo_full_name),
 		row("Branch", connection.branch),
 		row("Build executor", connection.build_executor),
 		row("Deploy workflow", workflow)
-	];
-	if (connection.requires_reconnect) rows.push(row("Authorization", "Reconnect required: run `void github connect` for this repository"));
-	return rows.join("\n");
+	].join("\n");
 }
 async function runGithubCommand(root, args) {
 	const token = getToken(root);

package/dist/{handler-BXJTXd02.d.mts → handler-HEcZsaij.d.mts}

@@ -1,3 +1,4 @@
+import { c as VoidPlatformSandbox } from "./sandbox-qpNBT8a3.mjs";
 import { t as StandardSchemaV1 } from "./standard-schema-Fo_vCAZh.mjs";
 import { n as HeadDescriptor } from "./head-Do8P4puT.mjs";
 import { r as AuthUser, t as AuthSession } from "./auth-DkcFflXV.mjs";
@@ -98,7 +99,7 @@ interface CloudBindings extends VoidGeneratedEnvBindings {
   KV: KVNamespace;
   STORAGE: R2Bucket;
   AI: Ai;
-  SANDBOX: DurableObjectNamespace<import("@cloudflare/sandbox").Sandbox>;
+  SANDBOX: DurableObjectNamespace<VoidPlatformSandbox>;
   [key: string]: unknown;
 }
 type CloudEnv = Env & {

package/dist/{headers-BOg_velo.mjs → headers-DWi2IXWx.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { a as convertFallbacksConfig, c as convertRewritesConfig, f as isProtocolRelative, l as countSplats, n as VALID_REDIRECT_STATUSES, o as convertHeadersConfig, p as parseHostPrefixedSource, s as convertRedirectsConfig } from "./config-CafTW6Cz.mjs";
+import { a as convertFallbacksConfig, c as convertRewritesConfig, f as isProtocolRelative, l as countSplats, n as VALID_REDIRECT_STATUSES, o as convertHeadersConfig, p as parseHostPrefixedSource, s as convertRedirectsConfig } from "./config-Br_JZD6u.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/headers.ts

package/dist/help-CmZzxUba.mjs

@@ -0,0 +1,2 @@
+import { r as printHelpPage } from "./help-GKtwl07I.mjs";
+export { printHelpPage };

package/dist/{help-DC7gdz7L.mjs → help-GKtwl07I.mjs}

@@ -1,7 +1,7 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { c as import_picocolors, l as sectionTitle, s as helpLine, t as categoryTitle } from "./output-CCH48AMM.mjs";
-import { N as note, P as outro } from "./dist-Dn6nn2IU.mjs";
+import { N as note, P as outro } from "./dist-CTBk70IR.mjs";
 import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
+import { c as import_picocolors, s as helpLine, t as categoryTitle, u as sectionTitle } from "./output-Dm_A4Tbv.mjs";
 import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-DUwumHpQ.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/ascii.ts
@@ -135,6 +135,71 @@ const operatorCommands = [
 		positional: ["id", "userId"],
 		method: "POST"
 	},
+	{
+		group: "zero-trust",
+		action: "status",
+		description: "Inspect saved platform Zero Trust configuration and project state counts",
+		path: "/zero-trust",
+		booleans: ["check"]
+	},
+	{
+		group: "zero-trust",
+		action: "configure",
+		description: "Configure and reconcile project Zero Trust protection",
+		path: "/zero-trust/configure",
+		values: {
+			"identity-providers": "Comma-separated Access identity provider IDs",
+			policies: "Comma-separated reusable Access policy IDs",
+			"existing-projects": "Required when enabling: protected or public for existing projects"
+		},
+		booleans: ["token-stdin", "protect-new-projects"],
+		method: "POST"
+	},
+	{
+		group: "zero-trust",
+		action: "reconcile",
+		description: "Repair platform and project Access configuration drift",
+		path: "/zero-trust/reconcile",
+		method: "POST"
+	},
+	{
+		group: "zero-trust",
+		action: "disable",
+		description: "Remove Void-managed Access applications and make projects public",
+		path: "/zero-trust/disable",
+		method: "POST"
+	},
+	{
+		group: "zero-trust",
+		action: "project-status",
+		description: "Inspect one project Zero Trust override and effective state",
+		path: "/zero-trust/projects/:id",
+		positional: ["id"]
+	},
+	{
+		group: "zero-trust",
+		action: "project-protect",
+		description: "Protect one project, overriding the platform default",
+		path: "/zero-trust/projects/:id",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "zero-trust",
+		action: "project-public",
+		description: "Make one project public, overriding the platform default",
+		path: "/zero-trust/projects/:id",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "zero-trust",
+		action: "project-reconcile",
+		description: "Repair Access configuration drift for one project",
+		path: "/zero-trust/projects/:id/reconcile",
+		positional: ["id"],
+		method: "POST"
+	},
 	{
 		group: "deployment",
 		action: "list",
@@ -478,7 +543,8 @@ function parseOperatorArgs(args) {
 		"follow",
 		"token-stdin",
 		"force",
-		"ended"
+		"ended",
+		...operatorCommands.flatMap((command) => command.booleans ?? [])
 	]);
 	for (let index = 0; index < args.length; index++) {
 		const arg = args[index];
@@ -580,6 +646,24 @@ function parseOperatorArgs(args) {
 		"identity"
 	].includes(String(parsed.body.type))) throw new Error("platform: Signup grant type must be github, email, or identity.");
 	for (const name of command.booleans ?? []) if (name !== "token-stdin" && flags.has(name)) parsed.body[name] = true;
+	if (group === "zero-trust" && action === "configure") {
+		if (!parsed.tokenStdin) throw new Error("platform: zero-trust configure requires --token-stdin.");
+		const identityProviderIds = values["identity-providers"]?.split(",").map((entry) => entry.trim()).filter(Boolean);
+		const policyIds = values.policies?.split(",").map((entry) => entry.trim()).filter(Boolean);
+		const existingProjects = values["existing-projects"];
+		if (!identityProviderIds?.length || !policyIds?.length) throw new Error("platform: zero-trust configure requires --identity-providers and --policies.");
+		if (existingProjects !== void 0 && existingProjects !== "protected" && existingProjects !== "public") throw new Error("platform: --existing-projects must be protected or public.");
+		parsed.body = {
+			identityProviderIds,
+			policyIds,
+			...existingProjects ? { existingProjects } : {},
+			protectNewProjects: flags.has("protect-new-projects")
+		};
+	} else if (group === "zero-trust" && action === "status") {
+		delete parsed.body.check;
+		if (flags.has("check")) parsed.query.check = "true";
+	} else if (group === "zero-trust" && action === "project-protect") parsed.body.protected = true;
+	else if (group === "zero-trust" && action === "project-public") parsed.body.protected = false;
 	return parsed;
 }
 //#endregion
@@ -638,7 +722,7 @@ function operatorHelpTree() {
 					})),
 					...(entry.booleans ?? []).map((flag) => ({
 						command: `--${flag}`,
-						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : flag === "ended" ? "Attest that the original provider execution has ended" : flag === "token-stdin" && group === "email" ? entry.action === "domain-remove" ? "Read a replacement Cloudflare token for blocked project cleanup from stdin" : "Read a scoped Cloudflare API token from stdin" : "Read a full API session from stdin for explicit operator session exchange"
+						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : flag === "ended" ? "Attest that the original provider execution has ended" : flag === "protect-new-projects" ? "Protect newly created projects by default" : flag === "check" && group === "zero-trust" ? "Also check the saved settings against Cloudflare Access (several API calls)" : flag === "token-stdin" && group === "zero-trust" ? "Read the Access management API token from stdin" : flag === "token-stdin" && group === "email" ? entry.action === "domain-remove" ? "Read a replacement Cloudflare token for blocked project cleanup from stdin" : "Read a scoped Cloudflare API token from stdin" : "Read a full API session from stdin for explicit operator session exchange"
 					}))
 				]
 			}]))
@@ -1193,6 +1277,10 @@ const HELP_TREE = {
 				command: "team <command>",
 				description: "Manage members and project invitations"
 			},
+			{
+				command: "zero-trust <command>",
+				description: "Inspect or override Cloudflare Zero Trust protection"
+			},
 			{
 				command: "logs",
 				description: "Show runtime logs from the deployed project"
@@ -1319,6 +1407,38 @@ const HELP_TREE = {
 					decline: basicSubcommand("Decline your invitation on the active platform connection (VOID_API_URL overrides it).", "void project team decline <invitation-id>")
 				}
 			},
+			"zero-trust": {
+				summary: "Inspect and manage Zero Trust protection for a Void platform project.",
+				usage: ["void project zero-trust <status|protect|public|reconcile> [options]"],
+				commands: [
+					{
+						command: "status",
+						description: "Show desired and effective protection state"
+					},
+					{
+						command: "protect",
+						description: "Protect the project"
+					},
+					{
+						command: "public",
+						description: "Make the project public"
+					},
+					{
+						command: "reconcile",
+						description: "Repair Cloudflare Access configuration drift"
+					}
+				],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}],
+				children: Object.fromEntries([
+					"status",
+					"protect",
+					"public",
+					"reconcile"
+				].map((action) => [action, withProjectOption(action === "status" ? "Show desired and effective Zero Trust protection." : action === "protect" ? "Protect the project with the platform Access policy." : action === "public" ? "Make the project public with a managed Access bypass." : "Repair Cloudflare Access configuration drift for the project.", `void project zero-trust ${action} [options]`)]))
+			},
 			logs: {
 				summary: "Show runtime logs from the deployed project.",
 				usage: ["void project logs [options]"],

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { n as HeadDescriptor } from "./head-Do8P4puT.mjs";
 import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, x as DeferredState, y as defineScheduled } from "./handler-BXJTXd02.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, x as DeferredState, y as defineScheduled } from "./handler-HEcZsaij.mjs";
 import { t as QueueMap } from "./queues-BWKt1Xo4.mjs";
 import { PluginConfig } from "@cloudflare/vite-plugin";
 import { Plugin } from "vite";