void 0.21.9 → 0.23.0

package/dist/cli/cli.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { a as join } from "../dist-BVqXeR_h.mjs";
-import { j as log } from "../dist-Dn6nn2IU.mjs";
+import { j as log } from "../dist-CTBk70IR.mjs";
 import { n as getPackageDir } from "../agents-B_pX_HmQ.mjs";
 import { t as formatCloudflareUserMessage } from "../cloudflare-user-output-Q-k0QoNQ.mjs";
-import { a as operatorGroups, i as printVoidHeader, n as printGlobalHelp, o as parseOperatorArgs, r as printHelpPage, t as getHelpPath } from "../help-DC7gdz7L.mjs";
+import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-daGKjXGk.mjs";
 import { r as OperatorClientError } from "../operator-client-DUwumHpQ.mjs";
+import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-BJdRtlLq.mjs";
 import { readFileSync } from "node:fs";
-import { PLATFORM_LOGIN_KINDS, parsePlatformLoginId } from "@void/platform";
 import { parseArgs } from "node:util";
 //#region src/cli/account-args.ts
 const accountSubcommands = [
@@ -63,7 +63,6 @@ function parseDeployArgs(args) {
 				"skip-build": { type: "boolean" },
 				debug: { type: "boolean" },
 				platform: { type: "string" },
-				backend: { type: "string" },
 				provision: { type: "boolean" },
 				"require-email": { type: "boolean" },
 				atomic: { type: "boolean" }
@@ -75,9 +74,7 @@ function parseDeployArgs(args) {
 	} catch (error) {
 		const message = error instanceof Error ? error.message : String(error);
 		if (message.includes("argument missing") || message.includes("argument is ambiguous")) {
-			const optionMatch = message.match(/Option '(--[a-z-]+)/);
-			if (optionMatch?.[1] === "--platform") throw new Error("deploy: --platform requires a value ('cloudflare' or 'void').");
-			if (optionMatch?.[1] === "--backend") throw new Error("deploy: --backend requires a value ('cloudflare').");
+			if (message.match(/Option '(--[a-z-]+)/)?.[1] === "--platform") throw new Error("deploy: --platform requires a value ('cloudflare' or 'void').");
 			throw new Error("deploy: --project requires a slug.");
 		}
 		const unknownOptionMatch = message.match(/Unknown option '([^']+)'/);
@@ -86,11 +83,7 @@ function parseDeployArgs(args) {
 	}
 	const tokens = parsed.tokens ?? [];
 	if (tokens.filter((token) => token.kind === "option" && token.name === "project").length > 1) throw new Error("deploy: --project can only be specified once.");
-	const backendTokens = tokens.filter((token) => token.kind === "option" && token.name === "backend");
-	if (backendTokens.length > 1) throw new Error("deploy: --backend can only be specified once.");
-	const platformTokens = tokens.filter((token) => token.kind === "option" && token.name === "platform");
-	if (platformTokens.length > 1) throw new Error("deploy: --platform can only be specified once.");
-	if (platformTokens.length > 0 && backendTokens.length > 0) throw new Error("deploy: --platform and --backend cannot be used together.");
+	if (tokens.filter((token) => token.kind === "option" && token.name === "platform").length > 1) throw new Error("deploy: --platform can only be specified once.");
 	if (parsed.positionals.length > 0) throw new Error(`deploy: Unexpected argument '${parsed.positionals[0]}'.`);
 	const projectValue = parsed.values.project;
 	const projectSlug = typeof projectValue === "string" ? projectValue : void 0;
@@ -102,15 +95,12 @@ function parseDeployArgs(args) {
 	const platformValue = typeof parsed.values.platform === "string" ? parsed.values.platform : void 0;
 	if (platformValue !== void 0 && platformValue !== "cloudflare" && platformValue !== "void") throw new Error("deploy: --platform must be 'cloudflare' or 'void'.");
 	const platform = platformValue;
-	const backendValue = typeof parsed.values.backend === "string" ? parsed.values.backend : void 0;
-	if (backendValue !== void 0 && backendValue !== "cloudflare") throw new Error("deploy: --backend must be 'cloudflare'.");
-	const backend = backendValue;
 	const provision = parsed.values.provision === true ? true : void 0;
-	if (provision && backend !== "cloudflare" && platform !== "cloudflare") throw new Error("deploy: --provision requires --platform cloudflare.");
+	if (provision && platform !== "cloudflare") throw new Error("deploy: --provision requires --platform cloudflare.");
 	const requireEmail = parsed.values["require-email"] === true ? true : void 0;
 	const atomic = parsed.values.atomic === true ? true : void 0;
-	if (requireEmail && backend !== "cloudflare" && platform !== "cloudflare") throw new Error("deploy: --require-email requires --platform cloudflare.");
-	if (backend === "cloudflare" || platform === "cloudflare") {
+	if (requireEmail && platform !== "cloudflare") throw new Error("deploy: --require-email requires --platform cloudflare.");
+	if (platform === "cloudflare") {
 		if (projectSlug !== void 0) throw new Error("deploy: --project is not supported with --platform cloudflare — this platform deploys to your own Cloudflare account and no Void project is involved.");
 	}
 	return {
@@ -120,7 +110,6 @@ function parseDeployArgs(args) {
 		skipBuild,
 		debug,
 		platform,
-		backend,
 		provision,
 		requireEmail,
 		atomic
@@ -614,7 +603,6 @@ function parseEmailArgs(args) {
 	let limit;
 	const projectValues = [];
 	const platformValues = [];
-	const backendValues = [];
 	const subdomainValues = [];
 	const positional = [];
 	const rest = args.slice(1);
@@ -635,12 +623,8 @@ function parseEmailArgs(args) {
 		if (value === void 0) throw new Error("email: --platform requires a value ('cloudflare' or 'void').");
 		platformValues.push(value);
 		i = next;
-	} else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) {
-		const { value, next } = readFlagValue(rest, i, "--backend");
-		if (value === void 0) throw new Error("email: --backend requires a value ('cloudflare').");
-		backendValues.push(value);
-		i = next;
-	} else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) {
+	} else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) throw new Error("email: Unknown option '--backend'.");
+	else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) {
 		const { value, next } = readFlagValue(rest, i, "--subdomain");
 		if (value === void 0 || value.trim() === "") throw new Error("email: --subdomain requires a value (a subdomain label or host).");
 		subdomainValues.push(value);
@@ -648,20 +632,13 @@ function parseEmailArgs(args) {
 	} else positional.push(rest[i]);
 	if (projectValues.length > 1) throw new Error("email: --project can only be specified once.");
 	const projectSlug = projectValues[0];
-	if (backendValues.length > 1) throw new Error("email: --backend can only be specified once.");
 	if (platformValues.length > 1) throw new Error("email: --platform can only be specified once.");
-	if (platformValues.length > 0 && backendValues.length > 0) throw new Error("email: --platform and --backend cannot be used together.");
 	let platform;
 	const platformValue = platformValues[0];
 	if (platformValue !== void 0) {
 		if (platformValue !== "cloudflare" && platformValue !== "void") throw new Error("email: --platform must be 'cloudflare' or 'void'.");
 		platform = platformValue;
 	}
-	const backendValue = backendValues[0];
-	if (backendValue !== void 0) {
-		if (backendValue !== "cloudflare") throw new Error("email: --backend must be 'cloudflare'.");
-		platform = "cloudflare";
-	}
 	if (subdomainValues.length > 1) throw new Error("email: --subdomain can only be specified once.");
 	const subdomain = subdomainValues[0];
 	if (subcommand === "domain") {
@@ -1172,390 +1149,16 @@ function parseGithubArgs(args) {
 	throw new Error("github: Usage: void github <install|installations|connect|update|status|disconnect|link|join>.");
 }
 //#endregion
-//#region src/cli/platform-config-args.ts
-const PLATFORM_AUTH_ACTIONS = [
-	"list",
-	"show",
-	"initialize",
-	"add",
-	"configure",
-	"test",
-	"enable",
-	"disable",
-	"link",
-	"admission",
-	"protection",
-	"recover"
-];
-function parsePlatformConfigArgs(args) {
-	if (args.length && args[0] !== "auth") throw new Error("platform: Usage: void platform config auth [command] [options].");
-	const positional = [];
-	const flags = /* @__PURE__ */ new Set();
-	const values = /* @__PURE__ */ new Map();
-	const valueFlags = [
-		"connection",
-		"installation",
-		"id",
-		"file",
-		"client-secret-env",
-		"test-id"
-	];
-	for (let index = 1; index < args.length; index++) {
-		const arg = args[index];
-		if (!arg.startsWith("-")) {
-			positional.push(arg);
-			continue;
-		}
-		const name = arg.slice(2);
-		if (!arg.startsWith("--") || ![
-			"json",
-			"plan",
-			"yes"
-		].includes(name) && !valueFlags.includes(name)) throw new Error(`platform: Unknown config auth flag ${arg}.`);
-		if (flags.has(name) || values.has(name)) throw new Error(`platform: Duplicate flag ${arg}.`);
-		if (!valueFlags.includes(name)) {
-			flags.add(name);
-			continue;
-		}
-		const value = args[++index];
-		if (!value || value.startsWith("-")) throw new Error(`platform: ${arg} requires a value.`);
-		values.set(name, value);
-	}
-	const [action = "", target = "", ...extra] = positional;
-	if (extra.length || action && !PLATFORM_AUTH_ACTIONS.includes(action)) throw new Error(`platform: Usage: void platform config auth <${PLATFORM_AUTH_ACTIONS.join("|")}>.`);
-	const needsTarget = action && action !== "list" && action !== "initialize" && action !== "admission";
-	if (needsTarget && !target || !needsTarget && target) throw new Error(`platform: ${action || "config auth"} ${needsTarget ? "requires a method" : "does not accept a method"}.`);
-	if (action === "add") {
-		if (!PLATFORM_LOGIN_KINDS.includes(target)) throw new Error(`platform: Login kind must be ${PLATFORM_LOGIN_KINDS.join(", ")}.`);
-	} else if (action === "protection") {
-		if (![
-			"enable",
-			"disable",
-			"show"
-		].includes(target)) throw new Error("platform: Usage: void platform config auth protection <enable|disable|show>.");
-	} else if (target) parsePlatformLoginId(target);
-	if (flags.has("plan") && flags.has("yes")) throw new Error("platform: --plan and --yes cannot be combined.");
-	if ((!action || action === "list" || action === "show") && (flags.has("plan") || flags.has("yes"))) throw new Error("platform: Select a configuration change before using --plan or --yes.");
-	if (values.has("id") && action !== "add") throw new Error("platform: --id is only valid when adding a login method.");
-	if (values.has("installation") && action !== "recover" && action !== "protection") throw new Error("platform: --installation is only valid for recovery or platform protection.");
-	if (values.has("file") && ![
-		"add",
-		"configure",
-		"admission",
-		"recover",
-		"protection"
-	].includes(action) || values.has("client-secret-env") && ![
-		"add",
-		"configure",
-		"recover"
-	].includes(action)) throw new Error("platform: --file is valid for add, configure, admission, recover, or protection; --client-secret-env is valid for add, configure, or recover.");
-	if (values.has("test-id") && action !== "enable" && action !== "link") throw new Error("platform: --test-id is only valid for enable or link.");
-	const secretEnv = values.get("client-secret-env") ?? "";
-	if (secretEnv && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(secretEnv)) throw new Error("platform: --client-secret-env requires an environment-variable name.");
-	if (values.has("id")) parsePlatformLoginId(values.get("id"));
-	return {
-		subcommand: "config",
-		action,
-		target,
-		connection: values.get("connection") ?? "",
-		installation: values.get("installation") ?? "",
-		id: values.get("id") ?? "",
-		file: values.get("file") ?? "",
-		clientSecretEnv: secretEnv,
-		testId: values.get("test-id") ?? "",
-		json: flags.has("json"),
-		plan: flags.has("plan"),
-		yes: flags.has("yes")
-	};
-}
-//#endregion
-//#region src/cli/platform-args.ts
-const platformSubcommands = [
-	{
-		name: "config",
-		hint: "Configure authentication",
-		description: "Configure login methods, company protection, or provider recovery"
-	},
-	...operatorGroups.map((name) => ({
-		name,
-		hint: name === "email" ? "Domains, policy, limits, outcomes, and recovery" : "Operator commands",
-		description: `Administer platform ${name}`
-	})),
-	{
-		name: "list",
-		description: "List installed and connected platforms"
-	},
-	{
-		name: "use",
-		arg: "[id]",
-		description: "Select the default Void platform"
-	},
-	{
-		name: "status",
-		arg: "[id]",
-		description: "Inspect a platform and its health"
-	},
-	{
-		name: "discover",
-		description: "Recover installations from a Cloudflare account"
-	},
-	{
-		name: "domain",
-		hint: "Set an application domain",
-		description: "Add a domain to a workers.dev test platform"
-	},
-	{
-		name: "install",
-		description: "Install a Void platform with a domain or workers.dev for testing"
-	},
-	{
-		name: "upgrade",
-		arg: "[id]",
-		description: "Upgrade an installed Void platform"
-	},
-	{
-		name: "rollback",
-		arg: "[id]",
-		description: "Restore a compatible earlier platform runtime"
-	},
-	{
-		name: "repair",
-		arg: "[id]",
-		description: "Reconcile an installed Void platform"
-	},
-	{
-		name: "disable",
-		arg: "[id]",
-		description: "Disable traffic without deleting data"
-	},
-	{
-		name: "enable",
-		arg: "[id]",
-		description: "Restore traffic for a disabled platform"
-	},
-	{
-		name: "uninstall",
-		arg: "[id]",
-		description: "Safely remove an installed Void platform"
-	}
-];
-function readValue(rest, index, flag) {
-	const value = rest[index + 1];
-	if (!value || value.startsWith("-")) throw new Error(`platform: ${flag} requires a value.`);
-	return [value, index + 1];
-}
-function parseSelector(rest, subcommand, options = {}) {
-	let selector = "";
-	let plan = false;
-	let yes = false;
-	for (const arg of rest) if (arg === "--plan") plan = true;
-	else if (arg === "--yes" && options.allowYes) yes = true;
-	else if (arg.startsWith("-")) throw new Error(`platform: Unknown flag '${arg}'.`);
-	else if (selector) throw new Error(`platform: Unexpected argument '${arg}'.`);
-	else selector = arg;
-	if ((subcommand === "use" || subcommand === "status") && plan) throw new Error("platform: Unknown flag '--plan'.");
-	return {
-		selector,
-		plan,
-		yes
-	};
-}
-function parseLifecycleSelector(rest, subcommand) {
-	const positional = [];
-	let runtime = "";
-	let fromRuntime = "";
-	for (let index = 0; index < rest.length; index++) {
-		const arg = rest[index];
-		if (arg === "--runtime") {
-			if (subcommand === "disable") throw new Error("platform: Unknown flag '--runtime'.");
-			const [value, next] = readValue(rest, index, arg);
-			runtime = value;
-			index = next;
-		} else if (arg === "--from-runtime" && subcommand === "rollback") {
-			const [value, next] = readValue(rest, index, arg);
-			fromRuntime = value;
-			index = next;
-		} else positional.push(arg);
-	}
-	const parsed = parseSelector(positional, subcommand, { allowYes: true });
-	if (subcommand === "rollback" && !runtime) throw new Error("platform: rollback requires --runtime <earlier-runtime-directory>.");
-	return {
-		...parsed,
-		runtime,
-		fromRuntime
-	};
-}
-function parsePlatformArgs(args) {
-	if (operatorGroups.includes(args[0] ?? "") || [
-		"--connection",
-		"--json",
-		"--plan",
-		"--yes",
-		"--timeout"
-	].includes(args[0] ?? "")) return parseOperatorArgs(args);
-	const [subcommand, ...rest] = args;
-	if (subcommand === "config") return parsePlatformConfigArgs(rest);
-	if (subcommand === "domain") {
-		if (rest.length === 0) return {
-			subcommand,
-			domain: "",
-			selector: "",
-			zone: "",
-			dedicatedZone: false,
-			plan: false,
-			yes: false
-		};
-		if (rest[0] !== "set") throw new Error("platform: Usage: void platform domain set <domain> [--installation <id>] [--zone <domain>] [--dedicated-zone] [--plan] [--yes].");
-		let domain = "";
-		let selector = "";
-		let zone = "";
-		let plan = false;
-		let yes = false;
-		let dedicatedZone = false;
-		for (let index = 1; index < rest.length; index++) {
-			const arg = rest[index];
-			if (arg === "--installation" || arg === "--zone") {
-				const [value, next] = readValue(rest, index, arg);
-				index = next;
-				if (arg === "--zone") zone = value;
-				else selector = value;
-			} else if (arg === "--plan") plan = true;
-			else if (arg === "--yes") yes = true;
-			else if (arg === "--dedicated-zone") dedicatedZone = true;
-			else if (!arg.startsWith("-") && !domain) domain = arg;
-			else throw new Error(`platform: Unexpected argument '${arg}'.`);
-		}
-		if (!domain) throw new Error("platform: domain set requires an application domain.");
-		if (plan && yes) throw new Error("platform: Use either --plan or --yes.");
-		return {
-			subcommand,
-			domain,
-			selector,
-			zone,
-			dedicatedZone,
-			plan,
-			yes
-		};
-	}
-	if (subcommand === "list") {
-		if (rest.length > 0) throw new Error(`platform: Unexpected argument '${rest[0]}'.`);
-		return { subcommand };
-	}
-	if (subcommand === "use") {
-		const { selector } = parseSelector(rest, subcommand);
-		return {
-			subcommand,
-			selector
-		};
-	}
-	if (subcommand === "status") {
-		const { selector, plan } = parseSelector(rest, subcommand);
-		if (plan) throw new Error("platform: Unknown flag '--plan'.");
-		return {
-			subcommand,
-			selector
-		};
-	}
-	if (subcommand === "discover") {
-		let account = "";
-		let selector = "";
-		for (let index = 0; index < rest.length; index++) {
-			const arg = rest[index];
-			if (arg === "--account" || arg === "--installation") {
-				const [value, next] = readValue(rest, index, arg);
-				if (arg === "--account") account = value;
-				else selector = value;
-				index = next;
-			} else throw new Error("platform: Usage: void platform discover [--account <id>] [--installation <id-or-name>].");
-		}
-		return {
-			subcommand,
-			account,
-			selector
-		};
-	}
-	if (subcommand === "upgrade" || subcommand === "rollback" || subcommand === "repair" || subcommand === "disable" || subcommand === "enable") {
-		const { selector, plan, runtime, fromRuntime, yes } = parseLifecycleSelector(rest, subcommand);
-		return subcommand === "rollback" ? {
-			subcommand,
-			selector,
-			plan,
-			runtime,
-			fromRuntime,
-			yes
-		} : {
-			subcommand,
-			selector,
-			plan,
-			runtime,
-			yes
-		};
-	}
-	if (subcommand === "uninstall") {
-		const parsed = parseSelector(rest.filter((arg) => ![
-			"--purge-data",
-			"--delete-zone",
-			"--keep-zone"
-		].includes(arg)), subcommand, { allowYes: true });
-		if (rest.includes("--delete-zone") && rest.includes("--keep-zone")) throw new Error("platform: --delete-zone and --keep-zone cannot be used together.");
-		return {
-			subcommand,
-			selector: parsed.selector,
-			plan: parsed.plan,
-			purgeData: rest.includes("--purge-data"),
-			yes: parsed.yes,
-			deleteZone: rest.includes("--delete-zone") ? true : rest.includes("--keep-zone") ? false : null
-		};
-	}
-	if (subcommand === "install") {
-		const values = /* @__PURE__ */ new Map();
-		let plan = false;
-		let resume = false;
-		let dedicatedZone = false;
-		let yes = false;
-		const valueFlags = /* @__PURE__ */ new Set([
-			"--account",
-			"--auth-config",
-			"--application-domain",
-			"--control-plane-domain",
-			"--display-name",
-			"--name",
-			"--runtime",
-			"--zone"
-		]);
-		let workersDev = false;
-		for (let i = 0; i < rest.length; i++) {
-			const arg = rest[i];
-			if (valueFlags.has(arg)) {
-				const [value, next] = readValue(rest, i, arg);
-				values.set(arg, value);
-				i = next;
-			} else if (arg === "--plan") plan = true;
-			else if (arg === "--resume") resume = true;
-			else if (arg === "--dedicated-zone") dedicatedZone = true;
-			else if (arg === "--yes") yes = true;
-			else if (arg === "--workers-dev") workersDev = true;
-			else throw new Error(`platform: Unexpected argument '${arg}'.`);
-		}
-		if (workersDev && (values.has("--application-domain") || values.has("--zone") || dedicatedZone)) throw new Error("platform: --workers-dev cannot be combined with a domain, zone, or --dedicated-zone.");
-		return {
-			subcommand,
-			...workersDev ? { workersDev: true } : {},
-			...values.has("--auth-config") ? { authConfig: values.get("--auth-config") } : {},
-			account: values.get("--account") ?? "",
-			applicationDomain: values.get("--application-domain") ?? "",
-			controlPlaneDomain: values.get("--control-plane-domain") ?? "",
-			dedicatedZone,
-			displayName: values.get("--display-name") ?? "",
-			name: values.get("--name") ?? "",
-			plan,
-			resume,
-			runtime: values.get("--runtime") ?? "",
-			yes,
-			zone: values.get("--zone") ?? ""
-		};
-	}
-	throw new Error("platform: Usage: void platform <config|auth|user|project|deployment|build|signup|invitation|email|system|worker|list|use|status|discover|install|domain|upgrade|rollback|repair|disable|enable|uninstall>.");
+//#region src/cli/info-args.ts
+function parseInfoArgs(args) {
+	const parsed = parseArgs({
+		args,
+		options: { json: { type: "boolean" } },
+		allowPositionals: true,
+		strict: true
+	});
+	if (parsed.positionals.length > 0) throw new Error(`info: Unexpected argument '${parsed.positionals[0]}'.`);
+	return { json: parsed.values.json ?? false };
 }
 //#endregion
 //#region src/cli/prepare-args.ts
@@ -1610,6 +1213,11 @@ const projectSubcommands = [
 		hint: "list | invite | invitations | role | remove | revoke | leave | pending | accept | decline",
 		description: "Manage project members and invitations"
 	},
+	{
+		name: "zero-trust",
+		hint: "status | protect | public | reconcile",
+		description: "Inspect or override Cloudflare Zero Trust protection"
+	},
 	{
 		name: "logs",
 		description: "Show runtime logs from the deployed project"
@@ -1702,6 +1310,30 @@ function parseProjectArgs(args) {
 		};
 	}
 	if (subcommand === "team") return parseTeamArgs(rest);
+	if (subcommand === "zero-trust") {
+		const [action = "", ...args] = rest;
+		if (action && ![
+			"status",
+			"protect",
+			"public",
+			"reconcile"
+		].includes(action)) throw new Error("project: Usage: void project zero-trust <status|protect|public|reconcile> [--project <slug>].");
+		let projectSlug = "";
+		for (let index = 0; index < args.length; index++) {
+			const arg = args[index];
+			if (arg === "--project") {
+				const value = args[++index];
+				if (!value || value.startsWith("-")) throw new Error("project: --project requires a value.");
+				if (projectSlug) throw new Error("project: Duplicate flag '--project'.");
+				projectSlug = value;
+			} else throw new Error(`project: Unexpected argument '${arg}'.`);
+		}
+		return {
+			subcommand,
+			action,
+			projectSlug
+		};
+	}
 	if (subcommand === "logs") {
 		let filter = "";
 		let range = "1h";
@@ -1778,7 +1410,7 @@ function parseProjectArgs(args) {
 			projectSlug
 		};
 	}
-	throw new Error("project: Usage: void project <status|link|list|team|token|logs|requests|rollback|cancel|delete|purge-cache>.");
+	throw new Error("project: Usage: void project <status|link|list|team|token|zero-trust|logs|requests|rollback|cancel|delete|purge-cache>.");
 }
 function parseTeamArgs(rest) {
 	const [action, ...args] = rest;
@@ -1980,7 +1612,7 @@ async function runSubcommandGroup(command, subcommands, parse, run) {
 	const hasNamedSubcommand = args.slice(1).some((arg) => subcommands.some(({ name }) => name === arg));
 	try {
 		if ((!sub || sub.startsWith("-") && !hasNamedSubcommand) && process.stdin.isTTY) {
-			const { promptSubcommand } = await import("../subcommand-prompt-BuGYkAkC.mjs");
+			const { promptSubcommand } = await import("../subcommand-prompt-CY1C4fvl.mjs");
 			if (command === "platform" && !sub) log.info("A Void platform lets a team deploy Void apps to a shared Cloudflare account.\nThis command sets up and manages platforms. Join with `void connect <url>`.\nDocs: https://void.cloud/guide/self-hosted-platform");
 			const result = await promptSubcommand(command, subcommands);
 			if (!result) process.exit(0);
@@ -2020,7 +1652,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-DDz7c8LK.mjs").then(({ runDeploy }) => {
+	import("../deploy-bjXdFCtn.mjs").then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -2028,7 +1660,6 @@ if (helpPath) {
 			skipBuild: deployArgs.skipBuild,
 			debug: deployArgs.debug,
 			platform: deployArgs.platform,
-			backend: deployArgs.backend,
 			provision: deployArgs.provision,
 			requireEmail: deployArgs.requireEmail,
 			atomic: deployArgs.atomic
@@ -2039,25 +1670,38 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-BsUSRzln.mjs");
+	const { runConnectCommand } = await import("../connect-Bd4kJd9U.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
-else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-BgEFRuvZ.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed)));
-else if (command === "account") runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-DZZGK80W.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed)));
-else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-C4ZV3Vpy.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
-else if (command === "cloudflare") runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-bSmZ1d5L.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-B44I8J_W.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-DN9sSNiV.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-Dmhvb2oU.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DFi-s2t4.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-hRrvZaq_.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-Csi-tMbT.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-Vnv2f65C.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BED3_9JD.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
-else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-Dpt0jd-x.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
+else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-BsR981d4.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed)));
+else if (command === "account") runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-C84Ee8cO.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed)));
+else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-Bt-1w6pY.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
+else if (command === "cloudflare") runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-BcrVyTmJ.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed)));
+else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-CNzrqvBv.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
+else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-Dli5fP0B.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
+else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-y5Tvydvo.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
+else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-B3umsW75.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-8uG64XLl.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-BS6qYHDb.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-BVaUUumi.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-v45BdfKX.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-LzvNJORH.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
+else if (command === "info") import("../info-B97bTX9N.mjs").then(async ({ runInfoCommand }) => {
+	try {
+		await runInfoCommand(process.cwd(), parseInfoArgs(args.slice(1)));
+	} catch (err) {
+		const message = formatCloudflareUserMessage(err instanceof Error ? err.message : String(err));
+		if (args.includes("--json")) console.error(JSON.stringify({
+			error: "invalid_command",
+			message
+		}));
+		else log.error(message);
+		process.exit(1);
+	}
+});
 else if (command === "prepare") {
 	const root = process.cwd();
 	let prepareArgs;
@@ -2067,7 +1711,7 @@ else if (command === "prepare") {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-DyZ-Yok5.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-B5Mkic5u.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -2075,7 +1719,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-WO0JlPx8.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-Bvy7zrBo.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -2093,7 +1737,7 @@ else if (command === "prepare") {
 		log.error("migrate: This command takes no arguments.");
 		process.exit(1);
 	}
-	import("../migrate-TsHGBnDA.mjs").then(({ runMigrateCommand }) => {
+	import("../migrate-8_2u55MD.mjs").then(({ runMigrateCommand }) => {
 		runMigrateCommand(process.cwd()).catch((err) => {
 			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
@@ -2116,6 +1760,11 @@ else if (command === "prepare") {
 			name: "migrate",
 			description: "Migrate legacy project configuration"
 		},
+		{
+			name: "info",
+			hint: "--json",
+			description: "Inspect persistent resource names in this project"
+		},
 		{
 			name: "connect",
 			description: "Connect to Cloudflare or a Void platform"
@@ -2136,8 +1785,8 @@ else if (command === "prepare") {
 		},
 		{
 			name: "platform",
-			hint: "auth | user | project | deployment | signup | email | system | install",
-			description: "Install platforms and administer users, projects, access, and operations"
+			hint: "config | auth | user | project | deployment | signup | email | zero-trust | system | install",
+			description: "Install platforms and administer plans, users, projects, access, and operations"
 		},
 		{
 			name: "cloudflare",
@@ -2146,7 +1795,7 @@ else if (command === "prepare") {
 		},
 		{
 			name: "project",
-			hint: "status | link | list | team | token | logs | requests | rollback | cancel | delete | purge-cache",
+			hint: "status | link | list | team | token | zero-trust | logs | requests | rollback | cancel | delete | purge-cache",
 			description: "Manage projects, teams, deployments, and scoped CI credentials"
 		},
 		{
@@ -2200,47 +1849,52 @@ else if (command === "prepare") {
 	];
 	(async () => {
 		printVoidHeader();
-		const { promptSubcommand } = await import("../subcommand-prompt-BuGYkAkC.mjs");
+		const { promptSubcommand } = await import("../subcommand-prompt-CY1C4fvl.mjs");
 		const result = await promptSubcommand("", topLevelCommands);
 		if (!result) process.exit(0);
 		const cmd = result.subcommand;
 		const root = process.cwd();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-BsUSRzln.mjs");
+				const { runConnectCommand } = await import("../connect-Bd4kJd9U.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-WO0JlPx8.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-Bvy7zrBo.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "migrate": {
-				const { runMigrateCommand } = await import("../migrate-TsHGBnDA.mjs");
+				const { runMigrateCommand } = await import("../migrate-8_2u55MD.mjs");
 				await runMigrateCommand(root);
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-DDz7c8LK.mjs");
+				const { runDeploy } = await import("../deploy-bjXdFCtn.mjs");
 				await runDeploy(root);
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-router-BgEFRuvZ.mjs").then(({ runAuthRouter }) => runAuthRouter(r, p)));
-			case "account": return runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (r, p) => import("../account-cmd-DZZGK80W.mjs").then(({ runAccountCommand }) => runAccountCommand(r, p)));
-			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-C4ZV3Vpy.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
-			case "cloudflare": return runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (r, p) => import("../cloudflare-cmd-bSmZ1d5L.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-B44I8J_W.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-DN9sSNiV.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-Dmhvb2oU.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-BED3_9JD.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
-			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-Dpt0jd-x.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-DFi-s2t4.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-hRrvZaq_.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-Csi-tMbT.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-Vnv2f65C.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-router-BsR981d4.mjs").then(({ runAuthRouter }) => runAuthRouter(r, p)));
+			case "account": return runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (r, p) => import("../account-cmd-C84Ee8cO.mjs").then(({ runAccountCommand }) => runAccountCommand(r, p)));
+			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-Bt-1w6pY.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
+			case "cloudflare": return runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (r, p) => import("../cloudflare-cmd-BcrVyTmJ.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(r, p)));
+			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-CNzrqvBv.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
+			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-Dli5fP0B.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
+			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-y5Tvydvo.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-v45BdfKX.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-LzvNJORH.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
+			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-B3umsW75.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-8uG64XLl.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-BS6qYHDb.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-BVaUUumi.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "info": {
+				const { runInfoCommand } = await import("../info-B97bTX9N.mjs");
+				await runInfoCommand(root, parseInfoArgs([]));
+				return;
+			}
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-DyZ-Yok5.mjs");
+				const { runPrepareCommand } = await import("../prepare-B5Mkic5u.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}