void 0.22.0 → 0.24.0

package/dist/platform-args-3k8X9-H_.mjs

@@ -0,0 +1,514 @@
+import { n as operatorGroups, r as parseOperatorArgs } from "./operator-args-B3BTmSoi.mjs";
+import { PLATFORM_LOGIN_KINDS, normalizePlatformDashboardUrl, parsePlatformLoginId } from "@void/platform";
+import { parsePlatformPlanId } from "@void/platform/plans";
+//#region src/cli/platform-config-args.ts
+const PLATFORM_AUTH_ACTIONS = [
+	"list",
+	"show",
+	"initialize",
+	"add",
+	"configure",
+	"test",
+	"enable",
+	"disable",
+	"link",
+	"admission",
+	"protection",
+	"recover"
+];
+function parsePlatformConfigArgs(args) {
+	if (args.length && args[0] !== "auth") throw new Error("platform: Usage: void platform config auth [command] [options].");
+	const positional = [];
+	const flags = /* @__PURE__ */ new Set();
+	const values = /* @__PURE__ */ new Map();
+	const valueFlags = [
+		"connection",
+		"installation",
+		"id",
+		"file",
+		"client-secret-env",
+		"test-id"
+	];
+	for (let index = 1; index < args.length; index++) {
+		const arg = args[index];
+		if (!arg.startsWith("-")) {
+			positional.push(arg);
+			continue;
+		}
+		const name = arg.slice(2);
+		if (!arg.startsWith("--") || ![
+			"json",
+			"plan",
+			"yes"
+		].includes(name) && !valueFlags.includes(name)) throw new Error(`platform: Unknown config auth flag ${arg}.`);
+		if (flags.has(name) || values.has(name)) throw new Error(`platform: Duplicate flag ${arg}.`);
+		if (!valueFlags.includes(name)) {
+			flags.add(name);
+			continue;
+		}
+		const value = args[++index];
+		if (!value || value.startsWith("-")) throw new Error(`platform: ${arg} requires a value.`);
+		values.set(name, value);
+	}
+	const [action = "", target = "", ...extra] = positional;
+	if (extra.length || action && !PLATFORM_AUTH_ACTIONS.includes(action)) throw new Error(`platform: Usage: void platform config auth <${PLATFORM_AUTH_ACTIONS.join("|")}>.`);
+	const needsTarget = action && action !== "list" && action !== "initialize" && action !== "admission";
+	if (needsTarget && !target || !needsTarget && target) throw new Error(`platform: ${action || "config auth"} ${needsTarget ? "requires a method" : "does not accept a method"}.`);
+	if (action === "add") {
+		if (!PLATFORM_LOGIN_KINDS.includes(target)) throw new Error(`platform: Login kind must be ${PLATFORM_LOGIN_KINDS.join(", ")}.`);
+	} else if (action === "protection") {
+		if (![
+			"enable",
+			"disable",
+			"show"
+		].includes(target)) throw new Error("platform: Usage: void platform config auth protection <enable|disable|show>.");
+	} else if (target) parsePlatformLoginId(target);
+	if (flags.has("plan") && flags.has("yes")) throw new Error("platform: --plan and --yes cannot be combined.");
+	if ((!action || action === "list" || action === "show") && (flags.has("plan") || flags.has("yes"))) throw new Error("platform: Select a configuration change before using --plan or --yes.");
+	if (values.has("id") && action !== "add") throw new Error("platform: --id is only valid when adding a login method.");
+	if (values.has("installation") && action !== "recover" && action !== "protection") throw new Error("platform: --installation is only valid for recovery or platform protection.");
+	if (values.has("file") && ![
+		"add",
+		"configure",
+		"admission",
+		"recover",
+		"protection"
+	].includes(action) || values.has("client-secret-env") && ![
+		"add",
+		"configure",
+		"recover"
+	].includes(action)) throw new Error("platform: --file is valid for add, configure, admission, recover, or protection; --client-secret-env is valid for add, configure, or recover.");
+	if (values.has("test-id") && action !== "enable" && action !== "link") throw new Error("platform: --test-id is only valid for enable or link.");
+	const secretEnv = values.get("client-secret-env") ?? "";
+	if (secretEnv && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(secretEnv)) throw new Error("platform: --client-secret-env requires an environment-variable name.");
+	if (values.has("id")) parsePlatformLoginId(values.get("id"));
+	return {
+		subcommand: "config",
+		action,
+		target,
+		connection: values.get("connection") ?? "",
+		installation: values.get("installation") ?? "",
+		id: values.get("id") ?? "",
+		file: values.get("file") ?? "",
+		clientSecretEnv: secretEnv,
+		testId: values.get("test-id") ?? "",
+		json: flags.has("json"),
+		plan: flags.has("plan"),
+		yes: flags.has("yes")
+	};
+}
+//#endregion
+//#region src/cli/platform-plans-args.ts
+const PLATFORM_PLAN_ACTIONS = [
+	"show",
+	"add",
+	"set",
+	"reset",
+	"archive",
+	"restore",
+	"remove",
+	"default",
+	"sync"
+];
+function parsePlatformPlansArgs(args) {
+	const positional = [];
+	const flags = /* @__PURE__ */ new Set();
+	const values = /* @__PURE__ */ new Map();
+	const valueFlags = [
+		"connection",
+		"file",
+		"name",
+		"copy",
+		"replacement"
+	];
+	for (let index = 1; index < args.length; index++) {
+		const arg = args[index];
+		if (!arg.startsWith("-")) {
+			positional.push(arg);
+			continue;
+		}
+		const name = arg.slice(2);
+		if (!arg.startsWith("--") || ![
+			"json",
+			"plan",
+			"yes"
+		].includes(name) && !valueFlags.includes(name)) throw new Error(`platform: Unknown config plans flag ${arg}.`);
+		if (flags.has(name) || values.has(name)) throw new Error(`platform: Duplicate flag ${arg}.`);
+		if (!valueFlags.includes(name)) {
+			flags.add(name);
+			continue;
+		}
+		const value = args[++index];
+		if (!value || value.startsWith("-")) throw new Error(`platform: ${arg} requires a value.`);
+		values.set(name, value);
+	}
+	const [action = "", target = "", ...extra] = positional;
+	if (extra.length || action && !PLATFORM_PLAN_ACTIONS.includes(action)) throw new Error(`platform: Usage: void platform config plans [${PLATFORM_PLAN_ACTIONS.join("|")}] [plan-id] [options].`);
+	const needsTarget = action && action !== "show" && action !== "sync";
+	if (needsTarget && !target || (!action || action === "sync") && target) throw new Error(`platform: ${action || "config plans"} ${needsTarget ? "requires" : "does not accept"} a plan ID.`);
+	for (const id of [
+		target,
+		values.get("copy"),
+		values.get("replacement")
+	].filter(Boolean)) parsePlatformPlanId(id);
+	if (flags.has("plan") && flags.has("yes")) throw new Error("platform: --plan and --yes cannot be combined.");
+	if ((!action || action === "show") && (flags.has("plan") || flags.has("yes"))) throw new Error("platform: Select a configuration change before using --plan or --yes.");
+	for (const [name, actions] of [
+		["file", ["add", "set"]],
+		["name", ["add", "set"]],
+		["copy", ["add"]],
+		["replacement", ["remove"]]
+	]) if (values.has(name) && !actions.includes(action)) throw new Error(`platform: --${name} is only valid for ${actions.join(" or ")}.`);
+	return {
+		subcommand: "config",
+		configGroup: "plans",
+		action,
+		target,
+		connection: values.get("connection") ?? "",
+		file: values.get("file") ?? "",
+		name: values.get("name") ?? "",
+		copy: values.get("copy") ?? "",
+		replacement: values.get("replacement") ?? "",
+		json: flags.has("json"),
+		plan: flags.has("plan"),
+		yes: flags.has("yes")
+	};
+}
+//#endregion
+//#region src/cli/platform-args.ts
+const platformSubcommands = [
+	{
+		name: "config",
+		hint: "Authentication, plans, and limits",
+		description: "Configure login methods, protection, plans, or limits"
+	},
+	...operatorGroups.map((name) => ({
+		name,
+		hint: name === "email" ? "Domains, shared recipients, policy, limits, and recovery" : name === "zero-trust" ? "Configure Access protection and project overrides" : name === "project" ? "Inspect, normalize, transfer, or remove projects" : "Operator commands",
+		description: `Administer platform ${name}`
+	})),
+	{
+		name: "list",
+		description: "List installed and connected platforms"
+	},
+	{
+		name: "use",
+		arg: "[id]",
+		description: "Select the default Void platform"
+	},
+	{
+		name: "status",
+		arg: "[id]",
+		description: "Inspect a platform and its health"
+	},
+	{
+		name: "discover",
+		description: "Recover installations from a Cloudflare account"
+	},
+	{
+		name: "domain",
+		hint: "Set an application domain",
+		description: "Add a domain to a workers.dev test platform"
+	},
+	{
+		name: "install",
+		hint: "Preview and save choices with --plan, then select the saved plan to install",
+		description: "Install a Void platform and choose who can access its apps"
+	},
+	{
+		name: "upgrade",
+		arg: "[id]",
+		description: "Upgrade an installed Void platform"
+	},
+	{
+		name: "rollback",
+		arg: "[id]",
+		description: "Restore a compatible earlier platform runtime"
+	},
+	{
+		name: "repair",
+		arg: "[id]",
+		description: "Reconcile a platform or configure its dashboard origin"
+	},
+	{
+		name: "disable",
+		arg: "[id]",
+		description: "Disable traffic without deleting data"
+	},
+	{
+		name: "enable",
+		arg: "[id]",
+		description: "Restore traffic for a disabled platform"
+	},
+	{
+		name: "uninstall",
+		arg: "[id]",
+		description: "Safely remove an installed Void platform"
+	}
+];
+function readValue(rest, index, flag) {
+	const value = rest[index + 1];
+	if (!value || value.startsWith("-")) throw new Error(`platform: ${flag} requires a value.`);
+	return [value, index + 1];
+}
+function parseSelector(rest, subcommand, options = {}) {
+	let selector = "";
+	let plan = false;
+	let yes = false;
+	for (const arg of rest) if (arg === "--plan") plan = true;
+	else if (arg === "--yes" && options.allowYes) yes = true;
+	else if (arg.startsWith("-")) throw new Error(`platform: Unknown flag '${arg}'.`);
+	else if (selector) throw new Error(`platform: Unexpected argument '${arg}'.`);
+	else selector = arg;
+	if ((subcommand === "use" || subcommand === "status") && plan) throw new Error("platform: Unknown flag '--plan'.");
+	return {
+		selector,
+		plan,
+		yes
+	};
+}
+function parseLifecycleSelector(rest, subcommand) {
+	const positional = [];
+	let runtime = "";
+	let fromRuntime = "";
+	let dashboardUrl;
+	for (let index = 0; index < rest.length; index++) {
+		const arg = rest[index];
+		if (arg === "--runtime") {
+			if (subcommand === "disable") throw new Error("platform: Unknown flag '--runtime'.");
+			const [value, next] = readValue(rest, index, arg);
+			runtime = value;
+			index = next;
+		} else if (arg === "--dashboard-url" && (subcommand === "upgrade" || subcommand === "repair")) {
+			const [value, next] = readValue(rest, index, arg);
+			dashboardUrl = normalizePlatformDashboardUrl(value);
+			index = next;
+		} else if (arg === "--from-runtime" && subcommand === "rollback") {
+			const [value, next] = readValue(rest, index, arg);
+			fromRuntime = value;
+			index = next;
+		} else positional.push(arg);
+	}
+	const parsed = parseSelector(positional, subcommand, { allowYes: true });
+	if (subcommand === "rollback" && !runtime) throw new Error("platform: rollback requires --runtime <earlier-runtime-directory>.");
+	return {
+		...parsed,
+		runtime,
+		fromRuntime,
+		...dashboardUrl !== void 0 ? { dashboardUrl } : {}
+	};
+}
+function parsePlatformArgs(args) {
+	if (operatorGroups.includes(args[0] ?? "") || [
+		"--connection",
+		"--json",
+		"--plan",
+		"--yes",
+		"--timeout"
+	].includes(args[0] ?? "")) return parseOperatorArgs(args);
+	const [subcommand, ...rest] = args;
+	if (subcommand === "config") {
+		if (rest.length === 0) return {
+			subcommand: "config",
+			configGroup: "",
+			plan: false,
+			yes: false
+		};
+		return rest[0] === "plans" ? parsePlatformPlansArgs(rest) : parsePlatformConfigArgs(rest);
+	}
+	if (subcommand === "domain") {
+		if (rest.length === 0) return {
+			subcommand,
+			domain: "",
+			selector: "",
+			zone: "",
+			dedicatedZone: false,
+			plan: false,
+			yes: false
+		};
+		if (rest[0] !== "set") throw new Error("platform: Usage: void platform domain set <domain> [--installation <id>] [--zone <domain>] [--dedicated-zone] [--plan] [--yes].");
+		let domain = "";
+		let selector = "";
+		let zone = "";
+		let plan = false;
+		let yes = false;
+		let dedicatedZone = false;
+		for (let index = 1; index < rest.length; index++) {
+			const arg = rest[index];
+			if (arg === "--installation" || arg === "--zone") {
+				const [value, next] = readValue(rest, index, arg);
+				index = next;
+				if (arg === "--zone") zone = value;
+				else selector = value;
+			} else if (arg === "--plan") plan = true;
+			else if (arg === "--yes") yes = true;
+			else if (arg === "--dedicated-zone") dedicatedZone = true;
+			else if (!arg.startsWith("-") && !domain) domain = arg;
+			else throw new Error(`platform: Unexpected argument '${arg}'.`);
+		}
+		if (!domain) throw new Error("platform: domain set requires an application domain.");
+		if (plan && yes) throw new Error("platform: Use either --plan or --yes.");
+		return {
+			subcommand,
+			domain,
+			selector,
+			zone,
+			dedicatedZone,
+			plan,
+			yes
+		};
+	}
+	if (subcommand === "list") {
+		if (rest.length > 0) throw new Error(`platform: Unexpected argument '${rest[0]}'.`);
+		return { subcommand };
+	}
+	if (subcommand === "use") {
+		const { selector } = parseSelector(rest, subcommand);
+		return {
+			subcommand,
+			selector
+		};
+	}
+	if (subcommand === "status") {
+		const { selector, plan } = parseSelector(rest, subcommand);
+		if (plan) throw new Error("platform: Unknown flag '--plan'.");
+		return {
+			subcommand,
+			selector
+		};
+	}
+	if (subcommand === "discover") {
+		let account = "";
+		let selector = "";
+		for (let index = 0; index < rest.length; index++) {
+			const arg = rest[index];
+			if (arg === "--account" || arg === "--installation") {
+				const [value, next] = readValue(rest, index, arg);
+				if (arg === "--account") account = value;
+				else selector = value;
+				index = next;
+			} else throw new Error("platform: Usage: void platform discover [--account <id>] [--installation <id-or-name>].");
+		}
+		return {
+			subcommand,
+			account,
+			selector
+		};
+	}
+	if (subcommand === "upgrade" || subcommand === "rollback" || subcommand === "repair" || subcommand === "disable" || subcommand === "enable") {
+		const { selector, plan, runtime, fromRuntime, yes, dashboardUrl } = parseLifecycleSelector(rest, subcommand);
+		return subcommand === "rollback" ? {
+			subcommand,
+			selector,
+			plan,
+			runtime,
+			fromRuntime,
+			yes
+		} : {
+			subcommand,
+			selector,
+			plan,
+			runtime,
+			yes,
+			...dashboardUrl !== void 0 ? { dashboardUrl } : {}
+		};
+	}
+	if (subcommand === "uninstall") {
+		const parsed = parseSelector(rest.filter((arg) => ![
+			"--purge-data",
+			"--delete-zone",
+			"--keep-zone"
+		].includes(arg)), subcommand, { allowYes: true });
+		if (rest.includes("--delete-zone") && rest.includes("--keep-zone")) throw new Error("platform: --delete-zone and --keep-zone cannot be used together.");
+		return {
+			subcommand,
+			selector: parsed.selector,
+			plan: parsed.plan,
+			purgeData: rest.includes("--purge-data"),
+			yes: parsed.yes,
+			deleteZone: rest.includes("--delete-zone") ? true : rest.includes("--keep-zone") ? false : null
+		};
+	}
+	if (subcommand === "install") {
+		const values = /* @__PURE__ */ new Map();
+		let plan = false;
+		let resume = false;
+		let dedicatedZone = false;
+		let yes = false;
+		let noControlPlaneDomain = false;
+		let noDedicatedZone = false;
+		let accessProtection;
+		const valueFlags = /* @__PURE__ */ new Set([
+			"--account",
+			"--auth-config",
+			"--login-methods",
+			"--app-access",
+			"--hyperdrive",
+			"--application-domain",
+			"--control-plane-domain",
+			"--dashboard-url",
+			"--display-name",
+			"--name",
+			"--runtime",
+			"--zone"
+		]);
+		let workersDev = false;
+		for (let i = 0; i < rest.length; i++) {
+			const arg = rest[i];
+			if (valueFlags.has(arg)) {
+				const [value, next] = readValue(rest, i, arg);
+				values.set(arg, value);
+				i = next;
+			} else if (arg === "--plan") plan = true;
+			else if (arg === "--resume") resume = true;
+			else if (arg === "--dedicated-zone") dedicatedZone = true;
+			else if (arg === "--no-dedicated-zone") noDedicatedZone = true;
+			else if (arg === "--no-control-plane-domain") noControlPlaneDomain = true;
+			else if (arg === "--access-protection" || arg === "--no-access-protection") {
+				const enabled = arg === "--access-protection";
+				if (accessProtection !== void 0 && accessProtection !== enabled) throw new Error("platform: Choose either --access-protection or --no-access-protection.");
+				accessProtection = enabled;
+			} else if (arg === "--yes") yes = true;
+			else if (arg === "--workers-dev") workersDev = true;
+			else throw new Error(`platform: Unexpected argument '${arg}'.`);
+		}
+		if (noControlPlaneDomain && values.has("--control-plane-domain")) throw new Error("platform: Choose either --control-plane-domain or --no-control-plane-domain.");
+		if (noDedicatedZone && dedicatedZone) throw new Error("platform: Choose either --dedicated-zone or --no-dedicated-zone.");
+		if (values.has("--auth-config") && (values.has("--login-methods") || accessProtection !== void 0)) throw new Error("platform: --auth-config cannot be combined with login or Access protection options.");
+		const appAccess = values.get("--app-access");
+		if (appAccess !== void 0 && ![
+			"public",
+			"platform",
+			"custom"
+		].includes(appAccess)) throw new Error("platform: --app-access accepts public, platform, or custom.");
+		const loginMethods = values.get("--login-methods")?.split(",");
+		if (loginMethods && loginMethods.some((method) => !PLATFORM_LOGIN_KINDS.includes(method))) throw new Error("platform: --login-methods accepts github, google, oidc, and cloudflare-access.");
+		if (workersDev && (values.has("--application-domain") || values.has("--zone") || dedicatedZone)) throw new Error("platform: --workers-dev cannot be combined with a domain, zone, or --dedicated-zone.");
+		return {
+			subcommand,
+			...noControlPlaneDomain ? { noControlPlaneDomain: true } : {},
+			...noDedicatedZone ? { dedicatedZoneSpecified: true } : {},
+			...values.has("--hyperdrive") ? { hyperdrive: values.get("--hyperdrive") } : {},
+			...loginMethods ? { loginMethods: [...new Set(loginMethods)] } : {},
+			...accessProtection !== void 0 ? { accessProtection } : {},
+			...appAccess !== void 0 ? { appAccess } : {},
+			...workersDev ? { workersDev: true } : {},
+			...values.has("--auth-config") ? { authConfig: values.get("--auth-config") } : {},
+			account: values.get("--account") ?? "",
+			applicationDomain: values.get("--application-domain") ?? "",
+			controlPlaneDomain: values.get("--control-plane-domain") ?? "",
+			...values.has("--dashboard-url") ? { dashboardUrl: normalizePlatformDashboardUrl(values.get("--dashboard-url")) } : {},
+			dedicatedZone,
+			displayName: values.get("--display-name") ?? "",
+			name: values.get("--name") ?? "",
+			plan,
+			resume,
+			runtime: values.get("--runtime") ?? "",
+			yes,
+			zone: values.get("--zone") ?? ""
+		};
+	}
+	throw new Error("platform: Usage: void platform <config|auth|user|project|deployment|build|signup|invitation|email|system|worker|list|use|status|discover|install|domain|upgrade|rollback|repair|disable|enable|uninstall>.");
+}
+//#endregion
+export { platformSubcommands as n, parsePlatformArgs as t };

package/dist/platform-args-DdnM6WIf.mjs

@@ -0,0 +1,2 @@
+import { t as parsePlatformArgs } from "./platform-args-3k8X9-H_.mjs";
+export { parsePlatformArgs };

package/dist/{platform-auth-config-BlN8xTdD.mjs → platform-auth-config-DDrxUy4m.mjs}

@@ -1,7 +1,7 @@
-import { d as openBrowser } from "./auth-DLNN0D3Z.mjs";
-import { B as text, E as confirm, F as password, I as select, M as multiselect, W as isCancel } from "./dist-CTBk70IR.mjs";
-import { n as OperatorClient } from "./operator-client-DUwumHpQ.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-8KnOVXVd.mjs";
+import { u as openBrowser } from "./auth-CQkSDS50.mjs";
+import { A as confirm, K as select, U as password, X as text, tt as isCancel, z as multiselect } from "./prompts-BNUoTiaf.mjs";
+import { n as OperatorClient } from "./operator-client-CpHjTd0t.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-7erYc6Lt.mjs";
 import { execFile } from "node:child_process";
 import { parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration } from "@void/platform";
 import { stripVTControlCharacters } from "node:util";
@@ -140,11 +140,11 @@ async function configurationInput(args, existing) {
 }
 async function runPlatformAuthConfig(args) {
 	if (args.action === "recover") {
-		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-Dxij8ZbR.mjs");
+		const { runPlatformAuthRecovery } = await import("./platform-auth-recovery-CmCzX2Fl.mjs");
 		return runPlatformAuthRecovery(args);
 	}
 	if (args.action === "protection") {
-		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-7d5aV2Jg.mjs");
+		const { runPlatformProtectionConfig } = await import("./platform-auth-protection-BLadnnct.mjs");
 		return runPlatformProtectionConfig(args);
 	}
 	const origin = resolveOperatorOrigin(args.connection);

package/dist/{platform-auth-protection-7d5aV2Jg.mjs → platform-auth-protection-BLadnnct.mjs}

@@ -1,11 +1,11 @@
-import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { d as readInstallationRecoverySecrets, h as resolveInstallationManifest, s as normalizePlatformApiUrl, t as acquirePlatformLifecycleLock, u as promoteInstallationSecrets, v as writeInstallationManifest, y as writePendingInstallationSecrets } from "./platform-registry-QBa4DK32.mjs";
-import { n as ensurePlatformAccessToken } from "./cf-access-P0iZnu0q.mjs";
-import { E as confirm, W as isCancel } from "./dist-CTBk70IR.mjs";
-import { n as OperatorClient } from "./operator-client-DUwumHpQ.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-8KnOVXVd.mjs";
-import { A as PlatformCloudflareClient, D as checkpointPlatformAccessResources, E as resolvePlatformCloudflareCredential, O as parsePlatformAccessSetupSpec, k as preparePlatformAccessSetup, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-k0E0xoxx.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-Brz_BDiT.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { b as writePendingInstallationSecrets, d as promoteInstallationSecrets, f as readInstallationRecoverySecrets, g as resolveInstallationManifest, s as normalizePlatformApiUrl, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-DkPPXfp_.mjs";
+import { n as ensurePlatformAccessToken } from "./cf-access-BGe5sWXF.mjs";
+import { A as confirm, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { n as OperatorClient } from "./operator-client-CpHjTd0t.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-7erYc6Lt.mjs";
+import { A as PlatformCloudflareClient, D as checkpointPlatformAccessResources, E as resolvePlatformCloudflareCredential, O as parsePlatformAccessSetupSpec, k as preparePlatformAccessSetup, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-BBoNzojY.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
 import { createHmac } from "node:crypto";
 import { parsePlatformAccessProtection, platformProtectionProofMessage } from "@void/platform";
 import { readFile } from "node:fs/promises";

package/dist/{platform-auth-recovery-Dxij8ZbR.mjs → platform-auth-recovery-CmCzX2Fl.mjs}

@@ -1,9 +1,9 @@
-import { d as openBrowser } from "./auth-DLNN0D3Z.mjs";
-import { d as readInstallationRecoverySecrets, h as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-QBa4DK32.mjs";
-import { E as confirm, W as isCancel } from "./dist-CTBk70IR.mjs";
-import { a as resolveOperatorOrigin } from "./operator-auth-8KnOVXVd.mjs";
-import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection } from "./platform-lifecycle-k0E0xoxx.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-Brz_BDiT.mjs";
+import { f as readInstallationRecoverySecrets, g as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-DkPPXfp_.mjs";
+import { u as openBrowser } from "./auth-CQkSDS50.mjs";
+import { A as confirm, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { a as resolveOperatorOrigin } from "./operator-auth-7erYc6Lt.mjs";
+import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection } from "./platform-lifecycle-BBoNzojY.mjs";
+import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
 import { createCipheriv, createDecipheriv, createHash, createHmac, hkdfSync, randomBytes, randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";

package/dist/{platform-cmd-B3hwKrFK.mjs → platform-cmd-DMDEc9uS.mjs}

@@ -1,8 +1,8 @@
-import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { _ as selectPlatformConnection, g as savePlatformConnection, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl } from "./platform-registry-QBa4DK32.mjs";
-import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-P0iZnu0q.mjs";
-import { B as text, I as select, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { _ as savePlatformConnection, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl, v as selectPlatformConnection } from "./platform-registry-DkPPXfp_.mjs";
+import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-BGe5sWXF.mjs";
+import { K as select, L as log, X as text, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { c as import_picocolors } from "./output-CbM85T4k.mjs";
 import { parsePlatformDiscoveryDocument } from "@void/platform";
 //#region src/cli/platform-cmd.ts
 async function discoverPlatform(input, fetcher = fetch) {
@@ -92,12 +92,33 @@ function saveDiscoveredPlatform(discovery) {
 }
 async function runPlatformCommand(_root, args) {
 	if (args.subcommand === "config") {
-		const { runPlatformAuthConfig } = await import("./platform-auth-config-BlN8xTdD.mjs");
+		if ("configGroup" in args) {
+			if (args.configGroup === "") {
+				if (!process.stdin.isTTY) throw new Error("platform: Choose void platform config auth or void platform config plans.");
+				const group = await select({
+					message: "Platform configuration:",
+					options: [{
+						value: "auth",
+						label: "Authentication and protection"
+					}, {
+						value: "plans",
+						label: "Plans and limits"
+					}]
+				});
+				if (isCancel(group)) return;
+				const { parsePlatformArgs } = await import("./platform-args-DdnM6WIf.mjs");
+				return runPlatformCommand(_root, parsePlatformArgs(["config", group]));
+			}
+			const { runPlatformPlansConfig } = await import("./platform-plans-config-Vl9BP3H4.mjs");
+			await runPlatformPlansConfig(args);
+			return;
+		}
+		const { runPlatformAuthConfig } = await import("./platform-auth-config-DDrxUy4m.mjs");
 		await runPlatformAuthConfig(args);
 		return;
 	}
 	if (args.subcommand === "operator") {
-		const { runOperatorCommand } = await import("./operator-cmd-BK5CCiT9.mjs");
+		const { runOperatorCommand } = await import("./operator-cmd-DGqPJUD3.mjs");
 		await runOperatorCommand(args);
 		return;
 	}
@@ -129,7 +150,7 @@ async function runPlatformCommand(_root, args) {
 		console.log(`Capabilities: ${Object.entries(discovery.capabilities).filter(([, enabled]) => enabled).map(([name]) => name).join(", ")}`);
 		return;
 	}
-	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-DMh_qrry.mjs");
+	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-BFdSi9Qt.mjs");
 	await runPlatformLifecycleCommand(args);
 }
 //#endregion

package/dist/{platform-cmd-E0FuL212.mjs → platform-cmd-pMTRhvYs.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-B3hwKrFK.mjs";
+import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-DMDEc9uS.mjs";
 export { discoverPlatform, runPlatformCommand };

package/dist/{platform-domain-D6Xcy9ZX.mjs → platform-domain-Di6EYrQl.mjs}

@@ -1,8 +1,8 @@
-import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { d as readInstallationRecoverySecrets, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
-import { B as text, E as confirm, N as note, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, T as assertPlatformOperatorCredentialCanApplyPlan, _ as recordPlatformWorkerTraffic, c as createPlatformHealthProbeToken, m as recordResource, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, y as createPlatformInstallPlan } from "./platform-lifecycle-k0E0xoxx.mjs";
-import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-Brz_BDiT.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { _ as savePlatformConnection, f as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-DkPPXfp_.mjs";
+import { A as confirm, B as note, L as log, X as text, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, T as assertPlatformOperatorCredentialCanApplyPlan, _ as recordPlatformWorkerTraffic, c as createPlatformHealthProbeToken, m as recordResource, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, y as createPlatformInstallPlan } from "./platform-lifecycle-BBoNzojY.mjs";
+import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
 import { PLATFORM_HEALTH_HOSTNAME_LABEL, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, createApplicationRoutes, createPlatformDeploymentManifest, normalizeApplicationDomain } from "@void/platform";
 //#region src/cli/platform-domain.ts
 function platformDomainTarget(manifest, domain, zone, dedicatedZone) {