void 0.21.8 → 0.22.0

package/dist/index.mjs

@@ -1,28 +1,28 @@
 import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
 import { a as join, l as relative, n as dirname, u as resolve } from "./dist-BVqXeR_h.mjs";
-import { d as require_picocolors } from "./output-CCH48AMM.mjs";
-import { G as resolveWorkerDirName, St as hasDocumentRoutes, V as resolveDistDir, ct as prerenderPagesNode, dt as collectRevalidate, ft as hasRevalidate, mt as SEND_EMAIL_BINDING, ot as generateQueueResolverSource, pt as scanDurableObjectModules, st as prerenderPages, ut as collectPages, wt as resolveAssetRoutingPolicy, xt as hasApiRoutes } from "./deploy-C0JaQSWS.mjs";
+import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
+import { G as resolveWorkerDirName, St as hasDocumentRoutes, V as resolveDistDir, ct as prerenderPagesNode, dt as collectRevalidate, ft as hasRevalidate, mt as SEND_EMAIL_BINDING, ot as generateQueueResolverSource, pt as scanDurableObjectModules, st as prerenderPages, ut as collectPages, wt as resolveAssetRoutingPolicy, xt as hasApiRoutes } from "./deploy-CH-o2CaZ.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-GgcMozYz.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-DPByhVck.mjs";
 import { r as scopedAccessCredentials } from "./cf-access-DRsQRe6k.mjs";
 import { a as getApiUrl, c as getToken, o as getProxyUrl, u as isStagingMode } from "./auth-DLNN0D3Z.mjs";
 import { r as ensurePlatformProxyAccess } from "./cf-access-P0iZnu0q.mjs";
 import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { d as isNodeTarget, h as resolveBindingNames, m as readConfig, u as getDatabaseDialect } from "./config-CafTW6Cz.mjs";
-import { C as readWranglerWebSocketTombstones, D as syncWranglerWebSockets, E as syncWranglerDurableObjects, L as materializeCloudflareConfig, M as isSandboxEnabled, P as resolveSandboxConfig, T as syncWranglerBindings, V as stashCloudflareDeployPointer, a as LIVE_MIGRATION_TAG, d as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, j as SANDBOX_MIGRATION_TAG, l as ensureWranglerCompat, m as nextDurableObjectMigrationTag, p as hasDurableObjectSqliteMigration, u as ensureWranglerCompatibilityDate, w as resolveLiveBindingConfig, y as readWranglerCompat, z as restoreCloudflarePreviewPointer } from "./wrangler-BymcxrRa.mjs";
+import { d as isNodeTarget, h as resolveBindingNames, m as readConfig, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
+import { B as materializeCloudflareConfig, C as readWranglerWebSocketTombstones, D as syncWranglerWebSockets, E as syncWranglerDurableObjects, H as restoreCloudflarePreviewPointer, I as resolveSandboxConfig, L as sandboxContainerConfig, M as SANDBOX_MIGRATION_TAG, N as assertSandboxNamespaceConfig, P as isSandboxEnabled, T as syncWranglerBindings, W as stashCloudflareDeployPointer, a as LIVE_MIGRATION_TAG, d as ensureWranglerNodejsAlsFlag, g as readExistingLiveBindingConfig, h as normalizeWranglerCompatibilityFlags, j as DEFAULT_SANDBOX_CLASS_NAME, l as ensureWranglerCompat, m as nextDurableObjectMigrationTag, p as hasDurableObjectSqliteMigration, u as ensureWranglerCompatibilityDate, w as resolveLiveBindingConfig, y as readWranglerCompat } from "./wrangler-DQF1vKyf.mjs";
 import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-ChfPKsVd.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BOg_velo.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-DWi2IXWx.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B8GeM0RM.mjs";
 import { i as isMemberExpression, n as isIdentifier, r as isLiteral } from "./ast-CPGPjb0V.mjs";
 import { i as resolveLayoutIds } from "./scan-4tfN-PSn.mjs";
 import { a as scanJobsSync, i as scanQueuesSync, n as scanRoutePatternsSync, r as scanRoutes, t as scanMiddlewareSync } from "./scan-ClYmX3sa.mjs";
 import { c as inferBindingsFromSource, i as inferProjectBindings, l as walk, n as FRAMEWORK_SCAN_DIRS, r as detectFramework, s as scanWebSocketRoutesSync, t as DEFAULT_SCAN_DIRS } from "./plugin-inference-BMfKRSqE.mjs";
-import { n as writeLocalD1PersistState, t as resolveLocalD1Target } from "./local-d1-CC8sKFGu.mjs";
+import { n as writeLocalD1PersistState, t as resolveLocalD1Target } from "./local-d1-Bg9OzEEO.mjs";
 import { n as parseDotenvFile } from "./dotenv-VQxupEUv.mjs";
 import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t as generateRouteTypes } from "./route-types-Clm4WD0B.mjs";
 import { t as discoverSchema } from "./discover-BcPPiF1o.mjs";
 import { _ as parseCapturedMessage, a as DEV_INBOX_ENV_VAR, c as DEV_INBOX_TOKEN_ENV_VAR, f as clearDevBuffer, g as listDevMessages, l as DEV_INBOX_TOKEN_HEADER, m as findDevMessage, n as DEV_INBOX_ACK_VALUE, o as DEV_INBOX_MAX_CAPTURE_BYTES, s as DEV_INBOX_PREFIX, t as DEV_INBOX_ACK_HEADER, u as DEV_INBOX_TOKEN_QUERY, v as pushToDevBuffer, y as registerEmailSink } from "./dev-inbox-P0u4tM8Y.mjs";
-import { t as MagicString } from "./dist-BR1quN_w.mjs";
+import { t as MagicString } from "./dist-AoCzRTJE.mjs";
 import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
 import { y as loadUserEnvFile } from "./env-validation-BB4GkLxn.mjs";
 import { a as loadLocalEnv, o as resolveRemoteMode, r as findLegacyEnvFiles, s as stripInternalEnvKeys, t as CLIENT_ENV_PREFIX$2 } from "./env-_v349JBd.mjs";
@@ -2035,7 +2035,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 					if (applied.length > 0) voidLog(`Applied ${applied.length} migration(s): ${applied.join(", ")}`);
 				}
 				if (auth?.enabled) {
-					const { runLocalVoidAuthMigrations } = await import("./node-BM43oz4G.mjs");
+					const { runLocalVoidAuthMigrations } = await import("./node-Dt7z256D.mjs");
 					await runLocalVoidAuthMigrations(root, dialect, persistRoot, databaseId, auth.configPath);
 					voidLog("Applied Better Auth migrations");
 				}
@@ -4024,12 +4024,39 @@ function compileAssetFallbackHelper(assetsDir = "assets", serveSpaFallback = fal
   }
   return response;` : `  return response;`;
 	return `
+const __voidAssetContentTypes = {
+  ".avif": "image/avif",
+  ".css": "text/css; charset=utf-8",
+  ".gif": "image/gif",
+  ".html": "text/html; charset=utf-8",
+  ".ico": "image/x-icon",
+  ".jpeg": "image/jpeg",
+  ".jpg": "image/jpeg",
+  ".js": "text/javascript; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".mjs": "text/javascript; charset=utf-8",
+  ".png": "image/png",
+  ".svg": "image/svg+xml",
+  ".txt": "text/plain; charset=utf-8",
+  ".wasm": "application/wasm",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+};
+
 async function serveWithAssets(request, env, response) {
   if (response.status !== 404 || !env.ASSETS || (request.method !== "GET" && request.method !== "HEAD")) return response;
   const asset = await env.ASSETS.fetch(new Request(request.url, { method: request.method, headers: request.headers }));
   if (asset.status !== 404) {
     const res = new Response(asset.body, asset);
-    if (new URL(request.url).pathname.startsWith(${JSON.stringify("/" + assetsDir + "/")})) {
+    const pathname = new URL(request.url).pathname;
+    // Directly uploaded assets can reach the binding without a MIME type.
+    if (!res.headers.get("Content-Type")) {
+      const filename = pathname.slice(pathname.lastIndexOf("/") + 1);
+      const contentType = __voidAssetContentTypes[filename.slice(filename.lastIndexOf(".")).toLowerCase()];
+      if (contentType) res.headers.set("Content-Type", contentType);
+    }
+    if (pathname.startsWith(${JSON.stringify("/" + assetsDir + "/")})) {
       res.headers.set("Cache-Control", "public, max-age=31536000, immutable");
     } else {
       res.headers.set("Cache-Control", "no-store");
@@ -4064,11 +4091,12 @@ function compileWorkerEntry(options = {}) {
 	const remoteBindingNames = JSON.stringify(remote?.bindingNames);
 	const createRemoteEnvCall = `createRemoteEnv(env${remote?.bindingNames ? `, ${remoteBindingNames}` : ""})`;
 	const hasSandbox = sandbox === true || typeof sandbox === "object";
-	const sandboxClassName = typeof sandbox === "object" ? sandbox.className ?? "Sandbox" : "Sandbox";
+	const sandboxClassName = typeof sandbox === "object" ? sandbox.className ?? "SandboxV1" : DEFAULT_SANDBOX_CLASS_NAME;
 	const sandboxBindingName = typeof sandbox === "object" ? sandbox.bindingName ?? "SANDBOX" : "SANDBOX";
 	const sandboxRuntimePath = typeof sandbox === "object" ? sandbox.runtimePath ?? "void/sandbox" : "void/sandbox";
 	const sandboxImport = hasSandbox ? `import { VoidPlatformSandbox as __VoidSandbox, __setSandboxBindingName } from ${JSON.stringify(sandboxRuntimePath)};\n` : "";
-	const sandboxExport = hasSandbox ? sandboxClassName === "Sandbox" ? `export { __VoidSandbox as Sandbox };\n__setSandboxBindingName(${JSON.stringify(sandboxBindingName)});\n` : `export class ${sandboxClassName} extends __VoidSandbox {}\n__setSandboxBindingName(${JSON.stringify(sandboxBindingName)});\n` : "";
+	const sandboxInstanceType = typeof sandbox === "object" ? sandbox.instanceType : void 0;
+	const sandboxExport = hasSandbox ? sandboxClassName === "SandboxV1" && !sandboxInstanceType ? `export { __VoidSandbox as SandboxV1 };\n__setSandboxBindingName(${JSON.stringify(sandboxBindingName)});\n` : `export class ${sandboxClassName} extends __VoidSandbox {${sandboxInstanceType ? ` protected override instanceType = ${JSON.stringify(sandboxInstanceType)} as const; ` : ""}}\n__setSandboxBindingName(${JSON.stringify(sandboxBindingName)});\n` : "";
 	const hasLive = live === true || typeof live === "object";
 	const liveBindingName = typeof live === "object" ? live.bindingName ?? "VOID_LIVE" : "VOID_LIVE";
 	const liveClassName = typeof live === "object" ? live.className ?? "VoidLiveStreamDurableObject" : "VoidLiveStreamDurableObject";
@@ -4915,6 +4943,7 @@ function routingPlugin(root, options) {
 		sandbox: options.hasSandbox ? {
 			bindingName: options.sandboxBindingName,
 			className: options.sandboxClassName,
+			instanceType: options.sandboxInstanceType,
 			runtimePath: sandboxRuntimePath
 		} : false,
 		live: options.live,
@@ -5007,6 +5036,7 @@ function routingPlugin(root, options) {
 					sandbox: options.hasSandbox ? {
 						bindingName: options.sandboxBindingName,
 						className: options.sandboxClassName,
+						instanceType: options.sandboxInstanceType,
 						runtimePath: sandboxRuntimePath
 					} : false,
 					hasEmail: hasEmailHandlers(),
@@ -5073,6 +5103,7 @@ function routingPlugin(root, options) {
 					sandbox: options.hasSandbox ? {
 						bindingName: options.sandboxBindingName,
 						className: options.sandboxClassName,
+						instanceType: options.sandboxInstanceType,
 						runtimePath: sandboxRuntimePath
 					} : false,
 					hasEmail: hasEmailHandlers(),
@@ -5540,8 +5571,8 @@ function readVoidDevCredentials(root) {
 * block the server. On completion, writes project.json and restarts the server.
 */
 async function runAiSetupPrompt(root, token, apiUrl, server) {
-	const { select, text, isCancel, log } = await import("./dist-C5fND3R0.mjs");
-	const { PlatformClient } = await import("./client-4cDVv7BO.mjs");
+	const { select, text, isCancel, log } = await import("./dist-BuDuKZJv.mjs");
+	const { PlatformClient } = await import("./client-Czz8o5jP.mjs");
 	const { attachSelectedPlatform, writeProjectConfig } = await import("./project-BuUwfj6f.mjs");
 	const { inferDefaultSlug } = await import("./resolve-project-DtbidV4y.mjs");
 	const client = new PlatformClient(token, apiUrl);
@@ -5570,7 +5601,7 @@ async function runAiSetupPrompt(root, token, apiUrl, server) {
 	let slug;
 	if (result === "__create__") {
 		const { validateProjectSlug } = await import("./project-slug-DofjTFd-.mjs");
-		const { createProjectWithSlugRetry } = await import("./create-project-BniEV0OW.mjs");
+		const { createProjectWithSlugRetry } = await import("./create-project-DdoqwFLF.mjs");
 		let created;
 		try {
 			created = await createProjectWithSlugRetry(client, inferDefaultSlug(root), async (defaultSlug) => {
@@ -6038,23 +6069,20 @@ function voidPlugin(options) {
 			if (migrationAdditions.length > 0) result.migrations = [...existingMigrations, ...migrationAdditions];
 		}
 		if (bindings.needsSandbox && sandboxConfig) {
+			assertSandboxNamespaceConfig({
+				...resolved,
+				...result
+			}, sandboxConfig);
 			const existingDurableObjectBindings = (result.durable_objects ?? resolved.durable_objects)?.bindings ?? [];
 			if (!existingDurableObjectBindings.some((binding) => binding.name === sandboxConfig.binding)) result.durable_objects = { bindings: [...existingDurableObjectBindings, {
 				name: sandboxConfig.binding,
 				class_name: sandboxConfig.className
 			}] };
-			const existingContainers = result.containers ?? resolved.containers ?? [];
-			if (!existingContainers.some((container) => container.class_name === sandboxConfig.className)) result.containers = [...existingContainers, {
-				name: sandboxConfig.containerName,
-				class_name: sandboxConfig.className,
-				image: sandboxConfig.image,
-				...sandboxConfig.imageBuildContext && { image_build_context: sandboxConfig.imageBuildContext },
-				...sandboxConfig.instanceType && { instance_type: sandboxConfig.instanceType },
-				...sandboxConfig.maxInstances != null && { max_instances: sandboxConfig.maxInstances }
-			}];
+			result.containers = [...(result.containers ?? resolved.containers ?? []).filter((container) => container.class_name !== sandboxConfig.className), sandboxContainerConfig(sandboxConfig)];
+			resolved.containers = [];
 			const currentMigrations = result.migrations ?? resolved.migrations;
 			const existingMigrations = Array.isArray(currentMigrations) ? currentMigrations : [];
-			if (!existingMigrations.some((migration) => migration.tag === "void-sandbox-v1" || migration.new_sqlite_classes?.includes(sandboxConfig.className))) result.migrations = [...existingMigrations, {
+			if (!existingMigrations.some((migration) => migration.tag === "void-sandbox-v2" || migration.new_sqlite_classes?.includes(sandboxConfig.className))) result.migrations = [...existingMigrations, {
 				tag: SANDBOX_MIGRATION_TAG,
 				new_sqlite_classes: [sandboxConfig.className]
 			}];
@@ -6426,6 +6454,7 @@ function voidPlugin(options) {
 			},
 			sandboxBindingName: sandboxConfig?.binding,
 			sandboxClassName: sandboxConfig?.className,
+			sandboxInstanceType: sandboxConfig?.instanceType,
 			get live() {
 				return shouldEmitLive() ? liveConfig : void 0;
 			},

package/dist/{init-CJSnEcuj.mjs → init-FZx3Elvz.mjs}

@@ -1,25 +1,25 @@
 import { a as join, i as isAbsolute, l as relative, n as dirname, t as basename, u as resolve } from "./dist-BVqXeR_h.mjs";
-import { r as cliTitle } from "./output-CCH48AMM.mjs";
 import { n as readProjectPaths, o as TYPED_CONFIG_FILE } from "./project-paths-GgcMozYz.mjs";
 import { c as getToken, u as isStagingMode } from "./auth-DLNN0D3Z.mjs";
 import { d as writeProjectConfig, i as readDeploymentPlatform, l as writeDeploymentPlatform, o as readProjectConfig, t as attachSelectedPlatform } from "./project-C0Fqu05O.mjs";
-import { m as readConfig, u as getDatabaseDialect } from "./config-CafTW6Cz.mjs";
-import { L as materializeCloudflareConfig, i as LATEST_KNOWN_COMPAT_DATE, k as writeProvisionedWranglerConfig } from "./wrangler-BymcxrRa.mjs";
+import { m as readConfig, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
+import { B as materializeCloudflareConfig, i as LATEST_KNOWN_COMPAT_DATE, k as writeProvisionedWranglerConfig } from "./wrangler-DQF1vKyf.mjs";
 import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-B8GeM0RM.mjs";
 import { r as detectFramework } from "./plugin-inference-BMfKRSqE.mjs";
 import { n as parseDotenvFile, t as expandDotenv } from "./dotenv-VQxupEUv.mjs";
-import { t as MagicString } from "./dist-BR1quN_w.mjs";
-import { B as text, E as confirm, I as select, N as note, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
+import { t as MagicString } from "./dist-AoCzRTJE.mjs";
+import { B as text, E as confirm, I as select, N as note, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
 import { t as writeDrizzleConfig } from "./config-D8MOgiQV.mjs";
 import { n as getPackageDir, t as detectAgents } from "./agents-B_pX_HmQ.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
 import { r as formatProjectCommand } from "./preset-UHj9ARyP.mjs";
-import { n as writeVoidProjectConfig, t as canRewriteVoidProjectConfig } from "./config-write-BSduPMY8.mjs";
-import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-B8KuoYsO.mjs";
-import { i as promptProjectSelection, r as promptAndCreateProject } from "./create-project-DBfFSZKY.mjs";
-import { t as promptForLoginToken } from "./login-DZldyb8c.mjs";
-import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-BtxZrT6w.mjs";
-import { t as connectCloudflare } from "./cloudflare-connect-jAwacxxP.mjs";
+import { n as writeVoidProjectConfig, t as canRewriteVoidProjectConfig } from "./config-write-B1f88wJA.mjs";
+import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-BPITvDJN.mjs";
+import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-l9J7pbtm.mjs";
+import { t as promptForLoginToken } from "./login-CAsAsQ-_.mjs";
+import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-B3hwKrFK.mjs";
+import { t as connectCloudflare } from "./cloudflare-connect-Ctmrw579.mjs";
 import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-BV4AzNul.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
@@ -2646,7 +2646,7 @@ async function runInitCommand(root, initArgs) {
 		injectAgentBlock(root);
 		const agents = detectAgents(root);
 		if (agents.length > 0) {
-			const { linkSkillsForSpecificAgents } = await import("./skills-O6FUaizK.mjs");
+			const { linkSkillsForSpecificAgents } = await import("./skills-D1II1Juz.mjs");
 			linkSkillsForSpecificAgents(root, agents);
 		} else log.info("No coding agent detected; read the bundled docs linked in AGENTS.md");
 	}

package/dist/{link-CsHOinF7.mjs → link-BrQfb_CU.mjs}

@@ -1,9 +1,9 @@
-import { c as import_picocolors, r as cliTitle } from "./output-CCH48AMM.mjs";
 import { c as getToken, s as getSiteDomain } from "./auth-DLNN0D3Z.mjs";
 import { d as writeProjectConfig, o as readProjectConfig, t as attachSelectedPlatform } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, T as cancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
-import { i as promptProjectSelection, r as promptAndCreateProject } from "./create-project-DBfFSZKY.mjs";
+import { O as intro, P as outro, T as cancel, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { c as import_picocolors, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-l9J7pbtm.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/link.ts
 function projectLabel(slug, root, url) {

package/dist/{list-CDb-4bZ1.mjs → list-D44jmIAM.mjs}

@@ -1,8 +1,8 @@
-import { a as dim, c as import_picocolors, o as ensureUtc, r as cliTitle, u as tablePrefix } from "./output-CCH48AMM.mjs";
 import { c as getToken } from "./auth-DLNN0D3Z.mjs";
 import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { a as dim, c as import_picocolors, d as tablePrefix, o as ensureUtc, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/list.ts
 async function runListCommand(root, slug) {
@@ -43,7 +43,7 @@ async function runListCommand(root, slug) {
 }
 async function showCloudflareDeployments(root, slug) {
 	if (slug) throw new Error("project: A project name selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BipGMJ5O.mjs");
+	const { readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BT6OWFBk.mjs");
 	const status = await readCloudflareWorkerStatus(resolveCloudflareOperationContext(root));
 	if (status.versions.length === 0) {
 		outro(`No deployments for ${status.workerName}.`);

package/dist/{live-CKiJilLr.d.mts → live-CKJlvlNp.d.mts}

@@ -1,5 +1,5 @@
 import { r as AuthUser } from "./auth-DkcFflXV.mjs";
-import { a as CloudEnv, r as CloudContext } from "./handler-BXJTXd02.mjs";
+import { a as CloudEnv, r as CloudContext } from "./handler-HEcZsaij.mjs";
 //#region src/runtime/live.d.ts
 type MaybePromise<T> = T | Promise<T>;
 type LiveControlRequest = {

package/dist/{local-d1-CC8sKFGu.mjs → local-d1-Bg9OzEEO.mjs}

@@ -1,5 +1,5 @@
 import { a as join, i as isAbsolute, u as resolve } from "./dist-BVqXeR_h.mjs";
-import { v as readRootWranglerConfig } from "./wrangler-BymcxrRa.mjs";
+import { v as readRootWranglerConfig } from "./wrangler-DQF1vKyf.mjs";
 import { r as getMiniflareDatabasePath } from "./runner-p-dMs2UN.mjs";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";

package/dist/{login-DZldyb8c.mjs → login-CAsAsQ-_.mjs}

@@ -1,7 +1,7 @@
-import { c as import_picocolors, i as createSpinner, r as cliTitle } from "./output-CCH48AMM.mjs";
 import { _ as saveToken, a as getApiUrl, c as getToken, g as savePlatformToken, h as runPlatformLogin, l as getTokenSource, m as runLogin, p as removeToken, u as isStagingMode } from "./auth-DLNN0D3Z.mjs";
-import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-Dn6nn2IU.mjs";
-import { i as isExpiredTokenError, n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
+import { i as isExpiredTokenError, n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { c as import_picocolors, i as createSpinner, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 //#region src/cli/login.ts
 async function selectPlatformLoginMethod(platform, requestedId) {
 	const providers = platform?.authenticationProviders ?? ["github", "google"];
@@ -29,7 +29,7 @@ async function selectPlatformLoginMethod(platform, requestedId) {
 	return methods.find((method) => method.id === provider);
 }
 async function promptForLoginToken(root = process.cwd(), platform) {
-	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-CjNB09OF.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
+	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-E0FuL212.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
 	const s = createSpinner();
 	s.start(`Opening browser for ${providerName} login...`);
 	try {

package/dist/login-CGcRKEoi.mjs

@@ -0,0 +1,2 @@
+import { r as selectPlatformLoginMethod } from "./login-CAsAsQ-_.mjs";
+export { selectPlatformLoginMethod };

package/dist/{logs-BdfiOezj.mjs → logs-BjKvFnVM.mjs}

@@ -1,15 +1,15 @@
-import { a as dim, c as import_picocolors, r as cliTitle } from "./output-CCH48AMM.mjs";
 import { c as getToken } from "./auth-DLNN0D3Z.mjs";
 import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-Dn6nn2IU.mjs";
-import { n as PlatformClient } from "./client-QTl6ko_D.mjs";
+import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
+import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
+import { a as dim, c as import_picocolors, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 //#region src/cli/logs.ts
 async function runLogsCommand(root, filter, range, deployment, level) {
 	console.log();
 	intro(cliTitle("project logs"));
 	const platform = readDeploymentPlatform(root);
 	if (platform === "cloudflare") {
-		const { resolveCloudflareOperationContext, tailCloudflareWorker } = await import("./cloudflare-operations-BipGMJ5O.mjs");
+		const { resolveCloudflareOperationContext, tailCloudflareWorker } = await import("./cloudflare-operations-BT6OWFBk.mjs");
 		if (range !== "1h") log.warn("Cloudflare tail streams live logs; --range does not select historical entries.");
 		if (level && level !== "all" && level !== "error") log.warn("Cloudflare tail cannot filter individual console levels; showing all invocation logs.");
 		await tailCloudflareWorker(resolveCloudflareOperationContext(root), {

package/dist/{migrate-B8KuoYsO.mjs → migrate-BPITvDJN.mjs}

@@ -1,9 +1,9 @@
 import { a as join, n as dirname } from "./dist-BVqXeR_h.mjs";
-import { r as cliTitle } from "./output-CCH48AMM.mjs";
 import { o as TYPED_CONFIG_FILE, s as loadTypedVoidConfigFile } from "./project-paths-GgcMozYz.mjs";
-import { g as validateConfig } from "./config-CafTW6Cz.mjs";
-import { B as seedCloudflareConfig, I as VOID_LOCK_FILE, V as stashCloudflareDeployPointer } from "./wrangler-BymcxrRa.mjs";
-import { O as intro, P as outro, j as log } from "./dist-Dn6nn2IU.mjs";
+import { g as validateConfig } from "./config-Br_JZD6u.mjs";
+import { U as seedCloudflareConfig, W as stashCloudflareDeployPointer, z as VOID_LOCK_FILE } from "./wrangler-DQF1vKyf.mjs";
+import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
+import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { parseSync } from "vite";
 import { randomUUID } from "node:crypto";

package/dist/migrate-CYfbKkXh.mjs

@@ -0,0 +1,2 @@
+import { n as runMigrateCommand } from "./migrate-BPITvDJN.mjs";
+export { runMigrateCommand };

package/dist/{node-BM43oz4G.mjs → node-Dt7z256D.mjs}

@@ -1,6 +1,6 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
 import { n as loadVoidAuthConfig, t as findVoidAuthConfig } from "./config-DPByhVck.mjs";
-import { m as readConfig } from "./config-CafTW6Cz.mjs";
+import { m as readConfig } from "./config-Br_JZD6u.mjs";
 import { r as getMiniflareDatabasePath } from "./runner-p-dMs2UN.mjs";
 import { a as loadLocalEnv } from "./env-_v349JBd.mjs";
 import { r as resolveVoidAuthMigrationSchema } from "./drizzle-Beb2Am5S.mjs";

package/dist/{operator-cmd-B9dbG3Od.mjs → operator-cmd-BK5CCiT9.mjs}

@@ -137,8 +137,8 @@ async function runAuth(origin, args) {
 	if (args.action === "login" || args.action === "token" && args.tokenStdin) {
 		if (!args.tokenStdin && !process.stdin.isTTY) throw new OperatorClientError("Browser login requires an interactive terminal. Use --token-stdin to exchange an API session.", "interactive_login_required");
 		const apiToken = args.tokenStdin ? await readOperatorApiTokenStdin() : await (async () => {
-			const { discoverPlatform } = await import("./platform-cmd-CjNB09OF.mjs");
-			const { selectPlatformLoginMethod } = await import("./login-t6rndSRW.mjs");
+			const { discoverPlatform } = await import("./platform-cmd-E0FuL212.mjs");
+			const { selectPlatformLoginMethod } = await import("./login-CGcRKEoi.mjs");
 			const { runPlatformLogin } = await import("./auth-CZuiVsFh.mjs");
 			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.providerExplicit ? args.provider : void 0)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
 		})();
@@ -279,7 +279,7 @@ async function followOperatorLogs(client, args, signal, pollIntervalMs = 2e3) {
 }
 async function runOperatorCommand(args) {
 	if (!args.action) {
-		const { printHelpPage } = await import("./help-DQMfeKMz.mjs");
+		const { printHelpPage } = await import("./help-CmZzxUba.mjs");
 		printHelpPage(["platform", args.group]);
 		return;
 	}
@@ -288,7 +288,7 @@ async function runOperatorCommand(args) {
 	const client = new OperatorClient(origin, readOperatorToken(origin));
 	if (args.method === "POST") {
 		if (!args.plan && !args.yes && (!process.stdin.isTTY || !process.stderr.isTTY)) throw new OperatorClientError("Mutations in non-interactive mode require --yes or --plan.", "confirmation_required");
-		if (args.tokenStdin && args.group === "email" && (args.action === "domain-add" || args.action === "domain-remove")) args = {
+		if (args.tokenStdin && (args.group === "email" && (args.action === "domain-add" || args.action === "domain-remove") || args.group === "zero-trust" && args.action === "configure")) args = {
 			...args,
 			body: {
 				...args.body,

package/dist/output-Dm_A4Tbv.mjs

@@ -0,0 +1,81 @@
+import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
+import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
+import { L as spinner, j as log, k as isCI } from "./dist-CTBk70IR.mjs";
+//#region src/cli/output.ts
+var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
+/** Keep recovery commands on the same CLI when using the local checkout launcher. */
+function cliCommandName() {
+	const entryName = process.argv[1]?.split(/[\\/]/).at(-1);
+	return entryName === "void-dev" || entryName === "void-dev.cmd" ? "void-dev" : "void";
+}
+/**
+* Terminal-safe spinner wrapper. In CI and redirected output,
+* `@clack/prompts` spinner emits DEC Private Mode cursor hide/show codes
+* (`\x1b[?25l` / `\x1b[?25h`) that render as text artifacts. This wrapper
+* replaces the spinner with plain log output.
+*/
+function createSpinner(options, isTerminal = process.stdout.isTTY === true) {
+	if (!isCI() && isTerminal) return spinner(options);
+	let currentMessage = "";
+	return {
+		start(msg = "") {
+			currentMessage = msg;
+			if (msg) log.step(msg);
+		},
+		stop(msg = "") {
+			if (msg) log.info(msg);
+		},
+		message(msg = "") {
+			if (msg && msg !== currentMessage) {
+				currentMessage = msg;
+				log.step(msg);
+			}
+		},
+		cancel(msg = "") {
+			if (msg) log.warn(msg);
+		},
+		error(msg = "") {
+			if (msg) log.error(msg);
+		},
+		clear() {},
+		get isCancelled() {
+			return false;
+		}
+	};
+}
+function cliTitle(command) {
+	return import_picocolors.default.blue(`void ${command}`);
+}
+function sectionTitle(title) {
+	return import_picocolors.default.reset(import_picocolors.default.blue(title));
+}
+function categoryTitle(title) {
+	return import_picocolors.default.reset(import_picocolors.default.bold(import_picocolors.default.cyan(title)));
+}
+function dim(text) {
+	return import_picocolors.default.dim(text);
+}
+function tablePrefix() {
+	return `${import_picocolors.default.gray("│")}  `;
+}
+/** Strip terminal control characters from text received from a platform. */
+function sanitizeTerminalText(value) {
+	return value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ");
+}
+function helpLine(command, description) {
+	return `${import_picocolors.default.reset(command.padEnd(34))} ${import_picocolors.default.dim(description)}`;
+}
+/**
+* Ensure a timestamp string will be parsed as UTC by `new Date()`.
+* DB timestamps lack timezone info — appends 'Z' only when no
+* existing indicator (Z, z, or numeric offset) is present.
+*/
+function ensureUtc(s) {
+	const last = s.at(-1);
+	if (last === "Z" || last === "z") return s;
+	if (s.includes("+", 10)) return s;
+	if (s.lastIndexOf("-") > 9) return s;
+	return s + "Z";
+}
+//#endregion
+export { dim as a, import_picocolors as c, tablePrefix as d, createSpinner as i, sanitizeTerminalText as l, cliCommandName as n, ensureUtc as o, cliTitle as r, helpLine as s, categoryTitle as t, sectionTitle as u };

package/dist/pages/client.d.mts

@@ -1,4 +1,4 @@
-import { t as PageObject } from "../protocol-ZH3jP4a7.mjs";
+import { t as PageObject } from "../protocol-BBa6cstI.mjs";
 import { n as CacheForInput, r as CacheForResult } from "../prefetch-Ce6la4EI.mjs";
 //#region src/pages/action-result.d.ts
 type ActionErrorHandlingScope = "callSite" | "boundary";

package/dist/pages/index.d.mts

@@ -1,5 +1,5 @@
 import { a as renderHtmlAttrs, i as renderHeadToString, n as HeadDescriptor, o as resolveHead, r as renderBodyAttrs, t as HeadConfig } from "../head-Do8P4puT.mjs";
-import "../config-CF69HgXc.mjs";
+import "../config-VavjpDnp.mjs";
 import { i as PageDefinition, n as LayoutDefinition, o as PageScanResult, r as NamedLayoutDefinition } from "../types-BAp5AEBU.mjs";
 import { t as serializePageData } from "../serialize-CfSwWfF2.mjs";
 //#region src/project-paths.d.ts

package/dist/pages/index.mjs

@@ -1,7 +1,7 @@
 import { a as join } from "../dist-BVqXeR_h.mjs";
 import { r as resolvePagesDir } from "../project-paths-GgcMozYz.mjs";
-import { m as readConfig } from "../config-CafTW6Cz.mjs";
-import { i as parseRedirectsFile } from "../headers-BOg_velo.mjs";
+import { m as readConfig } from "../config-Br_JZD6u.mjs";
+import { i as parseRedirectsFile } from "../headers-DWi2IXWx.mjs";
 import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, r as resolveLayoutChain, t as scanPages } from "../scan-4tfN-PSn.mjs";
 import { i as resolveHead, n as renderHeadToString, r as renderHtmlAttrs, t as renderBodyAttrs } from "../head-D_QRR5Yd.mjs";
 import { t as serializePageData } from "../serialize-BPvnNQuA.mjs";

package/dist/pages/islands-plugin.d.mts

@@ -1,6 +1,6 @@
 import { o as PageScanResult } from "../types-BAp5AEBU.mjs";
 import { ResolvedConfig, ViteDevServer } from "vite";
-//#region ../../node_modules/.pnpm/magic-string@1.3.1/node_modules/magic-string/dist/index.d.mts
+//#region ../../node_modules/.pnpm/magic-string@1.4.2/node_modules/magic-string/dist/index.d.mts
 //#region src/SourceMap.d.ts
 interface SourceMapOptions {
   /**
@@ -56,7 +56,9 @@ declare class SourceMap {
   x_google_ignoreList: number[] | undefined;
   debugId: string | undefined;
   rangeMappings: string | undefined;
-  constructor(properties: DecodedSourceMap);
+  constructor(properties: DecodedSourceMap | (Omit<DecodedSourceMap, "mappings"> & {
+    mappings: string;
+  }));
   /**
    * Returns the equivalent of `JSON.stringify(map)`
    */
@@ -90,8 +92,7 @@ interface UpdateOptions {
 }
 type ReplacementFunction = (substring: string, ...args: any[]) => string;
 declare class MagicString {
-  original: string;
-  indentExclusionRanges: MagicStringOptions["indentExclusionRanges"];
+  readonly original: string;
   offset: number;
   constructor(string: string, options?: MagicStringOptions);
   /**
@@ -143,8 +144,14 @@ declare class MagicString {
   indent(indentStr?: string, options?: IndentOptions): this;
   /**
    * Moves the characters from `start` and `end` to `index`.
+   *
+   * `affinity` controls where the range is anchored at `index`. With the
+   * default `'right'`, it is inserted before the content that starts at `index`;
+   * with `'left'`, it is inserted after the content that ends at `index`. The
+   * two differ only when other content has already been moved to that boundary,
+   * mirroring the `appendLeft`/`appendRight` distinction.
    */
-  move(start: number, end: number, index: number): this;
+  move(start: number, end: number, index: number, affinity?: "left" | "right"): this;
   /**
    * Replaces the characters from `start` to `end` with `content`, along with the appended/prepended content in
    * that range. The same restrictions as `s.remove()` apply.
@@ -178,7 +185,10 @@ declare class MagicString {
   prependRight(index: number, content: string): this;
   /**
    * Removes the characters from `start` to `end` (of the original string, **not** the generated string).
-   * Removing the same content twice, or making removals that partially overlap, will cause an error.
+   * Content appended or prepended at positions strictly inside the range is removed with it, while
+   * content attached at `start` or `end` is preserved — use `s.overwrite(start, end, '')` to remove
+   * the range including its edge inserts.
+   * Repeated removals and removals with partially overlapping ranges are allowed.
    */
   remove(start: number, end: number): this;
   /**

package/dist/pages/islands-plugin.mjs

@@ -1,7 +1,7 @@
 import { n as dirname, u as resolve } from "../dist-BVqXeR_h.mjs";
 import { n as isIdentifier, r as isLiteral } from "../ast-CPGPjb0V.mjs";
 import { n as resolveEffectiveLayoutChain, t as scanPages } from "../scan-4tfN-PSn.mjs";
-import { t as MagicString } from "../dist-BR1quN_w.mjs";
+import { t as MagicString } from "../dist-AoCzRTJE.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { normalizePath, parseSync } from "vite";
 //#region src/pages/island-imports.ts

package/dist/pages/protocol.d.mts

@@ -1,3 +1,3 @@
-import { w as ValidationError } from "../handler-BXJTXd02.mjs";
-import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-ZH3jP4a7.mjs";
+import { w as ValidationError } from "../handler-HEcZsaij.mjs";
+import { a as handlePageMutation, i as handlePageGet, n as PageRenderResult, o as safeJsonStringify, r as flattenValidationErrors, t as PageObject } from "../protocol-BBa6cstI.mjs";
 export { PageObject, PageRenderResult, ValidationError, flattenValidationErrors, handlePageGet, handlePageMutation, safeJsonStringify };