void 0.22.0 → 0.24.0

package/dist/{cache-D0sWhgKI.mjs → cache-ZtQmyxVV.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-DLNN0D3Z.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
-import { a as dim, i as createSpinner, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { H as outro, L as log, N as intro } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { a as dim, i as createSpinner, r as cliTitle } from "./output-CbM85T4k.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {

package/dist/{cancel-deploy-D4NUqFbi.mjs → cancel-deploy-Box0kkEV.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-DLNN0D3Z.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { E as confirm, O as intro, P as outro, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-BTZ3XkrB.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { A as confirm, H as outro, L as log, N as intro, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { r as cliTitle } from "./output-CbM85T4k.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([
 	"pending",

package/dist/{cf-access-P0iZnu0q.mjs → cf-access-BGe5sWXF.mjs}

@@ -1,5 +1,5 @@
-import { n as isVoidAccessGatedUrl, t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { S as writeKeyringPassword, c as platformCredentialAccount, s as normalizePlatformApiUrl, x as readKeyringPassword } from "./platform-registry-QBa4DK32.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { C as writeKeyringPassword, S as readKeyringPassword, c as platformCredentialAccount, s as normalizePlatformApiUrl } from "./platform-registry-DkPPXfp_.mjs";
 import { spawnSync } from "node:child_process";
 //#region src/cli/cf-access.ts
 const ACCESS_KEYRING_SERVICE = "dev.void.cli.access";
@@ -106,53 +106,9 @@ function ensurePlatformAccessToken(apiUrl, challenged = false, required = false,
 	keyringTokens.set(origin, token);
 	writeKeyringPassword(ACCESS_KEYRING_SERVICE, account, token);
 }
-const probedHosts = /* @__PURE__ */ new Set();
-/**
-* If the CLI is about to talk to a Cloudflare-Access-gated staging host,
-* probe the locally-installed `cloudflared` binary for a cached user JWT
-* and export it as `CF_ACCESS_TOKEN`. On interactive shells with no cached
-* token, open a browser login flow to populate the cache, then re-read it.
-*
-* Cached per-host so that an early non-gated call (e.g. prod) does not
-* permanently disable the probe for a later gated call (e.g. staging) in
-* the same process. Noop when:
-*   - a service-token pair is already set (CI path)
-*   - `CF_ACCESS_TOKEN` is already set (manual override or prior probe)
-*   - the target host is not gated
-*   - `cloudflared` is not installed
-*/
+/** Restore only credentials scoped to this explicitly selected platform origin. */
 function ensureCloudflaredToken(apiUrl) {
-	if (!isVoidAccessGatedUrl(apiUrl) || process.env.VOID_ACCESS_ORIGIN || process.env.VOID_ACCESS_CREDENTIALS) {
-		ensurePlatformAccessToken(apiUrl);
-		return;
-	}
-	if (process.env.CF_ACCESS_CLIENT_ID && process.env.CF_ACCESS_CLIENT_SECRET) return;
-	if (process.env.CF_ACCESS_TOKEN) return;
-	if (!isVoidAccessGatedUrl(apiUrl)) return;
-	const host = new URL(apiUrl).hostname;
-	if (probedHosts.has(host)) return;
-	probedHosts.add(host);
-	let token = runCloudflared([
-		"access",
-		"token",
-		`-app=${apiUrl}`
-	]);
-	if (!token && process.stdin.isTTY && process.stdout.isTTY) {
-		runCloudflared([
-			"access",
-			"login",
-			apiUrl
-		], {
-			inherit: true,
-			timeoutMs: 12e4
-		});
-		token = runCloudflared([
-			"access",
-			"token",
-			`-app=${apiUrl}`
-		]);
-	}
-	if (token) process.env.CF_ACCESS_TOKEN = token;
+	ensurePlatformAccessToken(apiUrl);
 }
 function runCloudflared(args, opts) {
 	try {

package/dist/{cf-access-DRsQRe6k.mjs → cf-access-TWNzXltp.mjs}

@@ -7,14 +7,6 @@
 *   2. User JWT (`CF_ACCESS_TOKEN`) — dev path, typically populated via `cloudflared access token`
 *   3. No headers — prod, or unprotected hostnames
 */
-function isVoidAccessGatedUrl(targetUrl) {
-	try {
-		const url = new URL(targetUrl);
-		return url.protocol === "https:" && (url.hostname.endsWith(".staging.void.cloud") || url.hostname.endsWith(".staging.void.app"));
-	} catch {
-		return false;
-	}
-}
 function accessHeaders(env) {
 	const id = env.CF_ACCESS_CLIENT_ID;
 	const secret = env.CF_ACCESS_CLIENT_SECRET;
@@ -26,7 +18,7 @@ function accessHeaders(env) {
 	if (typeof token === "string" && token.length > 0) return { "cf-access-token": token };
 	return {};
 }
-/** Attach shared Void Access credentials only to known hosted staging origins. */
+/** Attach Access credentials only to their explicitly scoped origin. */
 function cfAccessHeaders(env, targetUrl) {
 	let origin;
 	try {
@@ -52,7 +44,7 @@ function cfAccessHeaders(env, targetUrl) {
 	} catch {
 		return {};
 	}
-	return isVoidAccessGatedUrl(targetUrl) ? accessHeaders(env) : {};
+	return {};
 }
 /**
 * Capture credentials for a Cloudflare Worker readiness request whose target
@@ -72,4 +64,4 @@ function scopedAccessCredentials(env, targetUrl) {
 	} : { CF_ACCESS_TOKEN: headers["cf-access-token"] } });
 }
 //#endregion
-export { trustedCloudflareWorkerAccessHeaders as i, isVoidAccessGatedUrl as n, scopedAccessCredentials as r, cfAccessHeaders as t };
+export { scopedAccessCredentials as n, trustedCloudflareWorkerAccessHeaders as r, cfAccessHeaders as t };

package/dist/{cf-build-output-BJ6yGEIS.mjs → cf-build-output-BPqOT964.mjs}

@@ -1,7 +1,6 @@
 import { a as join, i as isAbsolute, l as relative, n as dirname, r as extname, t as basename, u as resolve } from "./dist-BVqXeR_h.mjs";
 import { copyFileSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { build } from "vite";
 import { randomUUID } from "node:crypto";
 import { tmpdir } from "node:os";
 import { spawn, spawnSync } from "node:child_process";
@@ -487,6 +486,7 @@ async function prepareCfStaticBuildOutput(options) {
 	if (!existsSync(entry)) return null;
 	const scratch = mkdtempSync(join(tmpdir(), "void-cf-static-"));
 	try {
+		const { build } = await import("vite");
 		await build({
 			configFile: false,
 			root: options.projectRoot,
@@ -552,6 +552,7 @@ async function prepareCfFrameworkBuildOutput(options) {
 				copyFileSync(target, destination);
 			} else if (file.isFile()) copyFileSync(absolute, destination);
 		}
+		const { build } = await import("vite");
 		await build({
 			configFile: false,
 			root: options.projectRoot,

package/dist/cf-build-output-_0HNWysu.mjs

@@ -0,0 +1,2 @@
+import { t as prepareCfBuildOutput } from "./cf-build-output-BPqOT964.mjs";
+export { prepareCfBuildOutput };