void 0.23.0 → 0.24.0

package/dist/index.mjs

@@ -12,15 +12,15 @@ import { a as validateSsrEntries, n as SSR_SERVER_ENTRY_RELATIVE_PATHS, o as val
 import { r as hasEmailHandlers } from "./email--tEtMoj_.mjs";
 import { i as resolveLayoutIds } from "./scan-C7okrLyM.mjs";
 import { a as hasSandboxSqliteMigration, c as resolveSandboxConfig, i as assertSandboxNamespaceConfig, l as sandboxContainerConfig, n as DEFAULT_SANDBOX_CLASS_NAME, r as SANDBOX_MIGRATION_TAG } from "./config-C_XRIPx2.mjs";
-import { Ct as hasDocumentRoutes, G as resolveWorkerDirName, St as hasApiRoutes, Tt as resolveAssetRoutingPolicy, V as resolveDistDir, ct as selectNativeVersionMetadataBinding, ft as collectPages, ht as SEND_EMAIL_BINDING, lt as prerenderPages, mt as hasRevalidate, ot as generateQueueResolverSource, pt as collectRevalidate, st as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV, ut as prerenderPagesNode } from "./deploy-DzAIwqNU.mjs";
-import { r as scopedAccessCredentials } from "./cf-access-DRsQRe6k.mjs";
-import { a as getApiUrl, c as getToken, o as getProxyUrl, u as isStagingMode } from "./auth-CSkdO2Bb.mjs";
-import { r as ensurePlatformProxyAccess } from "./cf-access-P0iZnu0q.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
+import { Ct as hasDocumentRoutes, G as resolveWorkerDirName, St as hasApiRoutes, Tt as resolveAssetRoutingPolicy, V as resolveDistDir, ct as selectNativeVersionMetadataBinding, ft as collectPages, ht as SEND_EMAIL_BINDING, lt as prerenderPages, mt as hasRevalidate, ot as generateQueueResolverSource, pt as collectRevalidate, st as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV, ut as prerenderPagesNode } from "./deploy-gCVaiJbS.mjs";
+import { n as scopedAccessCredentials } from "./cf-access-TWNzXltp.mjs";
+import { r as ensurePlatformProxyAccess } from "./cf-access-BGe5sWXF.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { a as getApiUrl, c as getToken, o as getProxyUrl } from "./auth-CQkSDS50.mjs";
 import { a as restoreCloudflarePreviewPointer, r as materializeCloudflareConfig, s as stashCloudflareDeployPointer } from "./cloudflare-config-Bktvwtpf.mjs";
 import { D as syncWranglerDurableObjects, E as syncWranglerBindings, O as syncWranglerWebSockets, T as resolveLiveBindingConfig, _ as readExistingLiveBindingConfig, a as LIVE_MIGRATION_TAG, b as readWranglerCompat, d as ensureWranglerCompatibilityDate, f as ensureWranglerNodejsAlsFlag, g as normalizeWranglerCompatibilityFlags, h as nextDurableObjectMigrationTag, m as hasDurableObjectSqliteMigration, p as findBindingNameOwner, u as ensureWranglerCompat, w as readWranglerWebSocketTombstones } from "./wrangler-7K-bW_DL.mjs";
-import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-ChfPKsVd.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-DWi2IXWx.mjs";
+import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-vqY3pqwI.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-2rKda9Y6.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B8GeM0RM.mjs";
 import { n as writeLocalD1PersistState, t as resolveLocalD1Target } from "./local-d1-2CMnpuW_.mjs";
 import { n as parseDotenvFile } from "./dotenv-VQxupEUv.mjs";
@@ -28,8 +28,8 @@ import { i as generateDbDts, n as generateQueueTypes, r as DRIZZLE_OPERATORS, t
 import { t as discoverSchema } from "./discover-BcPPiF1o.mjs";
 import { _ as parseCapturedMessage, a as DEV_INBOX_ENV_VAR, c as DEV_INBOX_TOKEN_ENV_VAR, f as clearDevBuffer, g as listDevMessages, l as DEV_INBOX_TOKEN_HEADER, m as findDevMessage, n as DEV_INBOX_ACK_VALUE, o as DEV_INBOX_MAX_CAPTURE_BYTES, s as DEV_INBOX_PREFIX, t as DEV_INBOX_ACK_HEADER, u as DEV_INBOX_TOKEN_QUERY, v as pushToDevBuffer, y as registerEmailSink } from "./dev-inbox-P0u4tM8Y.mjs";
 import { t as MagicString } from "./dist-AoCzRTJE.mjs";
-import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
-import { y as loadUserEnvFile } from "./env-validation-BPn7vk-V.mjs";
+import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
+import { y as loadUserEnvFile } from "./env-validation-C_8tPdhs.mjs";
 import { a as loadLocalEnv, o as resolveRemoteMode, r as findLegacyEnvFiles, s as stripInternalEnvKeys, t as CLIENT_ENV_PREFIX$2 } from "./env-_v349JBd.mjs";
 import { n as completeApplicationAnalysis } from "./application-routing-B7QEjqSR.mjs";
 import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-Beb2Am5S.mjs";
@@ -4310,14 +4310,12 @@ function createWranglerCompatPersistPlugin(root, config) {
 function readVoidDevCredentials(root) {
 	const token = getToken(root);
 	if (!token) return { status: "no-token" };
-	const staging = isStagingMode(root) || void 0;
 	const apiUrl = getApiUrl(root);
 	const project = readProjectConfig(root);
 	if (!project) return {
 		status: "no-project",
 		apiUrl,
-		token,
-		staging
+		token
 	};
 	const proxyUrl = getProxyUrl(root);
 	ensurePlatformProxyAccess(apiUrl, proxyUrl);
@@ -4326,8 +4324,7 @@ function readVoidDevCredentials(root) {
 		token,
 		projectId: project.projectId,
 		proxyUrl,
-		accessCredentials: scopedAccessCredentials(process.env, proxyUrl),
-		staging
+		accessCredentials: scopedAccessCredentials(process.env, proxyUrl)
 	};
 }
 /**
@@ -4336,9 +4333,9 @@ function readVoidDevCredentials(root) {
 * block the server. On completion, writes project.json and restarts the server.
 */
 async function runAiSetupPrompt(root, token, apiUrl, server) {
-	const { select, text, isCancel, log } = await import("./dist-BuDuKZJv.mjs");
-	const { PlatformClient } = await import("./client-Cu7jWiF1.mjs");
-	const { attachSelectedPlatform, writeProjectConfig } = await import("./project-BuUwfj6f.mjs");
+	const { select, text, isCancel, log } = await import("./prompts-2TGE6oXx.mjs");
+	const { PlatformClient } = await import("./client-B9UBI03V.mjs");
+	const { attachSelectedPlatform, writeProjectConfig } = await import("./project-DsblYifa.mjs");
 	const { inferDefaultSlug } = await import("./resolve-project-DtbidV4y.mjs");
 	const client = new PlatformClient(token, apiUrl);
 	let projects;
@@ -4366,7 +4363,7 @@ async function runAiSetupPrompt(root, token, apiUrl, server) {
 	let slug;
 	if (result === "__create__") {
 		const { validateProjectSlug } = await import("./project-slug-DofjTFd-.mjs");
-		const { createProjectWithSlugRetry } = await import("./create-project-Boczwj5r.mjs");
+		const { createProjectWithSlugRetry } = await import("./create-project-FWbf5Olo.mjs");
 		let created;
 		try {
 			created = await createProjectWithSlugRetry(client, inferDefaultSlug(root), async (defaultSlug) => {
@@ -4876,7 +4873,6 @@ function voidPlugin(options) {
 				vars.__VOID_PROJECT_ID = credentials.projectId;
 				vars.__VOID_PROXY_URL = credentials.proxyUrl;
 				if (credentials.accessCredentials) vars.__VOID_ACCESS_CREDENTIALS = credentials.accessCredentials;
-				if (credentials.staging) vars.__VOID_STAGING = "1";
 				result.vars = vars;
 			}
 		}
@@ -4972,7 +4968,7 @@ function voidPlugin(options) {
 			if (remoteMode && (bindings.needsD1 || bindings.needsKV || bindings.needsR2)) {
 				const credentials = readVoidDevCredentials(root);
 				if (credentials.status === "ok") {
-					const lines = ["\x1B[36mRemote bindings active\x1B[39m"];
+					const lines = [import_picocolors.default.blue("Remote bindings active")];
 					if (bindings.needsD1) lines.push("  DB      \x1B[2m→ remote D1\x1B[22m");
 					if (bindings.needsKV) lines.push("  KV      \x1B[2m→ remote KV\x1B[22m");
 					if (bindings.needsR2) lines.push("  STORAGE \x1B[2m→ remote R2\x1B[22m");

package/dist/{init-Bvy7zrBo.mjs → init-BTQEZZGJ.mjs}

@@ -2,25 +2,25 @@ import { a as join, i as isAbsolute, l as relative, n as dirname, t as basename,
 import { r as detectFramework } from "./plugin-inference-CXWnn79A.mjs";
 import { n as readProjectPaths, o as TYPED_CONFIG_FILE } from "./project-paths-GgcMozYz.mjs";
 import { m as readConfig, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
-import { c as getToken, u as isStagingMode } from "./auth-CSkdO2Bb.mjs";
-import { d as writeProjectConfig, i as readDeploymentPlatform, l as writeDeploymentPlatform, o as readProjectConfig, t as attachSelectedPlatform } from "./project-C0Fqu05O.mjs";
+import { l as writeProjectConfig, n as readDeploymentPlatform, r as readProjectConfig, s as writeDeploymentPlatform, t as attachSelectedPlatform } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
 import { r as materializeCloudflareConfig } from "./cloudflare-config-Bktvwtpf.mjs";
 import { A as writeProvisionedWranglerConfig, i as LATEST_KNOWN_COMPAT_DATE } from "./wrangler-7K-bW_DL.mjs";
 import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-B8GeM0RM.mjs";
 import { n as parseDotenvFile, t as expandDotenv } from "./dotenv-VQxupEUv.mjs";
 import { t as MagicString } from "./dist-AoCzRTJE.mjs";
-import { B as text, E as confirm, I as select, N as note, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
+import { A as confirm, B as note, H as outro, K as select, L as log, N as intro, O as cancel, X as text, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
 import { t as writeDrizzleConfig } from "./config-D8MOgiQV.mjs";
 import { n as getPackageDir, t as detectAgents } from "./agents-B_pX_HmQ.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
 import { o as formatProjectCommand } from "./cloudflare-process-B-wekeR6.mjs";
 import { n as writeVoidProjectConfig, t as canRewriteVoidProjectConfig } from "./config-write-B1f88wJA.mjs";
-import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-DHul7PRV.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
-import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-bMf6ffLZ.mjs";
-import { t as promptForLoginToken } from "./login-UZKFM_u7.mjs";
-import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-DMcQStSc.mjs";
-import { t as connectCloudflare } from "./cloudflare-connect-B8uPZ4nx.mjs";
+import { i as migrateFrameworkAdapterPaths, t as migrateLegacyVoidConfig } from "./migrate-q4_njtaW.mjs";
+import { r as cliTitle } from "./output-CbM85T4k.mjs";
+import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-CYOOAYcn.mjs";
+import { t as promptForLoginToken } from "./login-BuiMyUrx.mjs";
+import { i as saveDiscoveredPlatform, t as discoverPlatform } from "./platform-cmd-DMDEc9uS.mjs";
+import { t as connectCloudflare } from "./cloudflare-connect-IiR3ZieC.mjs";
 import { n as findInstalledYarnPnpRuntime, r as hasLocalLockfile, t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-BV4AzNul.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
@@ -34,7 +34,7 @@ async function ensureToken(root) {
 	const existing = getToken(root);
 	if (existing) return existing;
 	const token = await promptForLoginToken(root);
-	log.success(isStagingMode(root) ? "Staging token saved." : "Token saved.");
+	log.success("Token saved.");
 	return token;
 }
 async function maybeSetupDeployProject(root) {
@@ -1102,11 +1102,12 @@ async function resolveInitRoot(root) {
 		process.exit(0);
 	}
 	if (choice === "current") return root;
+	const defaultFolder = "my-void-app";
 	const folder = await text({
 		message: "New project folder name:",
-		placeholder: "my-void-app",
-		initialValue: "my-void-app",
-		validate: (value) => validateSubfolderName(root, value)
+		placeholder: defaultFolder,
+		defaultValue: defaultFolder,
+		validate: (value) => validateSubfolderName(root, value || defaultFolder)
 	});
 	if (isCancel(folder) || typeof folder === "symbol") {
 		cancel("Setup cancelled.");
@@ -1932,11 +1933,11 @@ async function ensureVoidPlatformConnection(root) {
 	let selectedApiUrl = null;
 	let promptedForPlatform = false;
 	try {
-		const { getApiUrl, getSiteDomain } = await import("./auth-CCjt0hcq.mjs");
+		const { getApiUrl, getSiteDomain } = await import("./auth-DX3JURcX.mjs");
 		selectedApiUrl = getApiUrl(root);
 		getSiteDomain(root);
 	} catch (error) {
-		if (!(error instanceof Error) || !error.message.includes("No Void platform selected")) throw error;
+		if (!(error instanceof Error) || !error.message.includes("No Void platform connected")) throw error;
 	}
 	if (!selectedApiUrl) {
 		promptedForPlatform = true;
@@ -1976,7 +1977,6 @@ function getNodeVersionLine(root) {
 	if (existsSync(join(root, ".node-version"))) return "node-version-file: .node-version";
 	return "node-version: lts/*";
 }
-const WORKFLOW_DEFAULT_API_URL = "https://api.void.cloud";
 function getWorkflowSetupSteps(root, pm) {
 	const nodeVersion = getNodeVersionLine(root);
 	switch (pm) {
@@ -2025,7 +2025,7 @@ function getWorkflowSetupSteps(root, pm) {
 * otherwise a `${{ vars.VOID_PROJECT }}` placeholder is emitted with a comment
 * telling the user to set the repository variable.
 */
-function getWorkflowYaml(root, pm, slug, platform = "void", platformApiUrl = WORKFLOW_DEFAULT_API_URL) {
+function getWorkflowYaml(root, pm, slug, platform = "void", platformApiUrl) {
 	const { setup, install, runner } = getWorkflowSetupSteps(root, pm);
 	if (platform === "cloudflare") return `name: Deploy to Cloudflare
 on:
@@ -2059,6 +2059,7 @@ ${install}
           CF_ACCESS_CLIENT_SECRET: \${{ secrets.CF_ACCESS_CLIENT_SECRET }}
         run: ${runner} deploy --platform cloudflare
 `;
+	if (!platformApiUrl) throw new Error("init: Connect to a Void platform before generating a deployment workflow. Run `void connect <url>` first.");
 	return `name: Deploy to Void
 on:
   push:
@@ -2094,10 +2095,12 @@ jobs:
 ${setup}
 ${install}
       - name: Deploy
-        run: ${runner} deploy --platform void --project "$VOID_PROJECT"
+        run: |
+          ${runner} connect "$VOID_API_URL" --no-login
+          ${runner} deploy --platform void --project "$VOID_PROJECT"
 `;
 }
-function setupGithubActions(root, state, platform = "void", platformApiUrl = WORKFLOW_DEFAULT_API_URL) {
+function setupGithubActions(root, state, platform = "void", platformApiUrl) {
 	const workflowDir = join(root, ".github", "workflows");
 	const workflowPath = join(workflowDir, "void-deploy.yml");
 	if (existsSync(workflowPath)) {
@@ -2677,7 +2680,7 @@ async function runInitCommand(root, initArgs) {
 		injectAgentBlock(root);
 		const agents = detectAgents(root);
 		if (agents.length > 0) {
-			const { linkSkillsForSpecificAgents } = await import("./skills-D1II1Juz.mjs");
+			const { linkSkillsForSpecificAgents } = await import("./skills-C1PlclPt.mjs");
 			linkSkillsForSpecificAgents(root, agents);
 		} else log.info("No coding agent detected; read the bundled docs linked in AGENTS.md");
 	}
@@ -2711,7 +2714,7 @@ async function runInitCommand(root, initArgs) {
 	let shouldSetupGithub = targeted ? initArgs?.github === true : deploymentPlatform !== "none";
 	if (shouldSetupGithub && !githubStepSkipForSubpackage && deploymentPlatform !== "cloudflare" && deploymentPlatform !== "none") {
 		if (!voidPlatformDiscovery) {
-			const { getApiUrl } = await import("./auth-CCjt0hcq.mjs");
+			const { getApiUrl } = await import("./auth-DX3JURcX.mjs");
 			voidPlatformDiscovery = await discoverPlatform(getApiUrl(root));
 		}
 		if (!voidPlatformDiscovery.capabilities.githubActions) {

package/dist/{link-CDqqCjFl.mjs → link-B46sYH0K.mjs}

@@ -1,9 +1,9 @@
-import { c as getToken, s as getSiteDomain } from "./auth-CSkdO2Bb.mjs";
-import { d as writeProjectConfig, o as readProjectConfig, t as attachSelectedPlatform } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, T as cancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { c as import_picocolors, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
-import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-bMf6ffLZ.mjs";
+import { l as writeProjectConfig, r as readProjectConfig, t as attachSelectedPlatform } from "./project-DKG5Ra8p.mjs";
+import { c as getToken, s as getSiteDomain } from "./auth-CQkSDS50.mjs";
+import { H as outro, L as log, N as intro, O as cancel } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { c as import_picocolors, r as cliTitle } from "./output-CbM85T4k.mjs";
+import { a as promptProjectSelection, r as promptAndCreateProject } from "./create-project-CYOOAYcn.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/link.ts
 function projectLabel(slug, root, url) {

package/dist/{list-CZj0dzKY.mjs → list-BnPrIsU_.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, c as import_picocolors, d as tablePrefix, o as ensureUtc, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { H as outro, L as log, N as intro } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { a as dim, c as import_picocolors, d as tablePrefix, o as ensureUtc, r as cliTitle } from "./output-CbM85T4k.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/list.ts
 async function runListCommand(root, slug) {
@@ -43,7 +43,7 @@ async function runListCommand(root, slug) {
 }
 async function showCloudflareDeployments(root, slug) {
 	if (slug) throw new Error("project: A project name selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-AiWashgg.mjs");
+	const { readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BCdXSsmo.mjs");
 	const status = await readCloudflareWorkerStatus(resolveCloudflareOperationContext(root));
 	if (status.versions.length === 0) {
 		outro(`No deployments for ${status.workerName}.`);

package/dist/log-vqY3pqwI.mjs

@@ -0,0 +1,29 @@
+import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
+import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
+//#region src/log.ts
+var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
+const tag = import_picocolors.default.bold(import_picocolors.default.blue("[void]"));
+const timeFormat = new Intl.DateTimeFormat(void 0, {
+	hour: "numeric",
+	minute: "numeric",
+	second: "numeric"
+});
+let showTimestamp = true;
+function setShowTimestamp(value) {
+	showTimestamp = value;
+}
+function prefix() {
+	if (!showTimestamp) return tag;
+	return `${import_picocolors.default.dim(timeFormat.format())} ${tag}`;
+}
+function voidLog(msg) {
+	console.log(`${prefix()} ${msg}`);
+}
+function voidWarn(msg) {
+	console.log(`${prefix()} ${import_picocolors.default.yellow(msg)}`);
+}
+function voidError(msg) {
+	console.log(`${prefix()} ${import_picocolors.default.red(msg)}`);
+}
+//#endregion
+export { voidWarn as i, voidError as n, voidLog as r, setShowTimestamp as t };

package/dist/{login-UZKFM_u7.mjs → login-BuiMyUrx.mjs}

@@ -1,7 +1,7 @@
-import { _ as saveToken, a as getApiUrl, c as getToken, g as savePlatformToken, h as runPlatformLogin, l as getTokenSource, m as runLogin, p as removeToken, u as isStagingMode } from "./auth-CSkdO2Bb.mjs";
-import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { i as isExpiredTokenError, n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { c as import_picocolors, i as createSpinner, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { a as getApiUrl, c as getToken, f as removeToken, g as saveToken, h as savePlatformToken, l as getTokenSource, m as runPlatformLogin, p as runLogin } from "./auth-CQkSDS50.mjs";
+import { H as outro, K as select, L as log, N as intro, O as cancel, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { i as isExpiredTokenError, n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { c as import_picocolors, i as createSpinner, r as cliTitle } from "./output-CbM85T4k.mjs";
 //#region src/cli/login.ts
 async function selectPlatformLoginMethod(platform, requestedId) {
 	const providers = platform?.authenticationProviders ?? ["github", "google"];
@@ -29,12 +29,12 @@ async function selectPlatformLoginMethod(platform, requestedId) {
 	return methods.find((method) => method.id === provider);
 }
 async function promptForLoginToken(root = process.cwd(), platform) {
-	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-Bt-1w6pY.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
+	const { id: provider, label: providerName } = await selectPlatformLoginMethod(platform ?? await import("./platform-cmd-pMTRhvYs.mjs").then(({ discoverPlatform }) => discoverPlatform(getApiUrl(root))));
 	const s = createSpinner();
 	s.start(`Opening browser for ${providerName} login...`);
 	try {
 		const onUrl = (url) => {
-			s.message(`Waiting for ${providerName} login. If your browser didn't open, visit:\n${import_picocolors.default.cyan(url)}`);
+			s.message(`Waiting for ${providerName} login. If your browser didn't open, visit:\n${import_picocolors.default.blue(url)}`);
 		};
 		const token = platform ? await runPlatformLogin(platform.apiUrl, provider, onUrl) : await runLogin(root, provider, onUrl);
 		if (platform) savePlatformToken(token, platform.apiUrl);
@@ -77,10 +77,10 @@ async function runLoginCommand(root = process.cwd()) {
 	}
 	await promptForLoginToken(root);
 	if (expiredEnvToken) {
-		outro(`${isStagingMode(root) ? "Staging token saved." : "Token saved."} Unset \`VOID_TOKEN\` to use it.`);
+		outro("Token saved. Unset `VOID_TOKEN` to use it.");
 		return;
 	}
-	outro(isStagingMode(root) ? "Staging token saved." : "Token saved.");
+	outro("Token saved.");
 }
 //#endregion
 export { runLoginCommand as n, selectPlatformLoginMethod as r, promptForLoginToken as t };

package/dist/login-DIy9Sb-U.mjs

@@ -0,0 +1,2 @@
+import { r as selectPlatformLoginMethod } from "./login-BuiMyUrx.mjs";
+export { selectPlatformLoginMethod };

package/dist/{logs-CUZ6t9t3.mjs → logs-CZG9d-ic.mjs}

@@ -1,15 +1,15 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, c as import_picocolors, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { $ as wrapTextWithPrefix, H as outro, L as log, N as intro } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { a as dim, c as import_picocolors, r as cliTitle } from "./output-CbM85T4k.mjs";
 //#region src/cli/logs.ts
 async function runLogsCommand(root, filter, range, deployment, level) {
 	console.log();
 	intro(cliTitle("project logs"));
 	const platform = readDeploymentPlatform(root);
 	if (platform === "cloudflare") {
-		const { resolveCloudflareOperationContext, tailCloudflareWorker } = await import("./cloudflare-operations-AiWashgg.mjs");
+		const { resolveCloudflareOperationContext, tailCloudflareWorker } = await import("./cloudflare-operations-BCdXSsmo.mjs");
 		if (range !== "1h") log.warn("Cloudflare tail streams live logs; --range does not select historical entries.");
 		if (level && level !== "all" && level !== "error") log.warn("Cloudflare tail cannot filter individual console levels; showing all invocation logs.");
 		await tailCloudflareWorker(resolveCloudflareOperationContext(root), {
@@ -57,15 +57,14 @@ function printEntry(entry) {
 	const status = entry.status || "-";
 	const statusNum = parseInt(status, 10);
 	const coloredStatus = entry.outcome === "exception" || statusNum >= 500 ? import_picocolors.default.red(status) : statusNum >= 400 ? import_picocolors.default.yellow(status) : status;
-	console.log(`${dim(time)} ${method} ${url} ${coloredStatus}`);
+	console.log(wrapTextWithPrefix(process.stdout, `${method} ${url} ${coloredStatus}`, " ".repeat(time.length + 1), `${dim(time)} `));
 	for (const l of entry.logs) {
 		const text = l.message.map(String).join(" ");
 		const level = l.level ?? "log";
-		if (level === "error") console.log(`  ${import_picocolors.default.red(`[${level}]`)} ${text}`);
-		else if (level === "warn") console.log(`  ${import_picocolors.default.yellow(`[${level}]`)} ${text}`);
-		else console.log(`  ${dim(`[${level}]`)} ${text}`);
+		const marker = level === "error" ? import_picocolors.default.red(`[${level}]`) : level === "warn" ? import_picocolors.default.yellow(`[${level}]`) : dim(`[${level}]`);
+		console.log(wrapTextWithPrefix(process.stdout, text, " ".repeat(level.length + 5), `  ${marker} `));
 	}
-	for (const ex of entry.exceptions) console.log(`  ${import_picocolors.default.red("[exception]")} ${ex.name}: ${ex.message}`);
+	for (const ex of entry.exceptions) console.log(wrapTextWithPrefix(process.stdout, `${ex.name}: ${ex.message}`, " ".repeat(14), `  ${import_picocolors.default.red("[exception]")} `));
 }
 function formatTime(ts) {
 	return new Date(ts).toLocaleTimeString("en-GB", { hour12: false });

package/dist/migrate-BCiJ8w0f.mjs

@@ -0,0 +1,2 @@
+import { n as runMigrateCommand } from "./migrate-q4_njtaW.mjs";
+export { runMigrateCommand };

package/dist/{migrate-DHul7PRV.mjs → migrate-q4_njtaW.mjs}

@@ -3,8 +3,8 @@ import { o as TYPED_CONFIG_FILE, s as loadTypedVoidConfigFile } from "./project-
 import { g as validateConfig } from "./config-Br_JZD6u.mjs";
 import { n as VOID_LOCK_FILE, o as seedCloudflareConfig, s as stashCloudflareDeployPointer } from "./cloudflare-config-Bktvwtpf.mjs";
 import "./wrangler-7K-bW_DL.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { H as outro, L as log, N as intro } from "./prompts-BNUoTiaf.mjs";
+import { r as cliTitle } from "./output-CbM85T4k.mjs";
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
 import { parseSync } from "vite";
 import { randomUUID } from "node:crypto";

package/dist/{operator-args-CLgKGlwU.mjs → operator-args-B3BTmSoi.mjs}

@@ -1,4 +1,4 @@
-import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-DUwumHpQ.mjs";
+import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-CpHjTd0t.mjs";
 //#region src/cli/operator-args.ts
 const operatorCommands = [
 	{
@@ -133,7 +133,11 @@ const operatorCommands = [
 			policies: "Comma-separated reusable Access policy IDs",
 			"existing-projects": "Required when enabling: protected or public for existing projects"
 		},
-		booleans: ["token-stdin", "protect-new-projects"],
+		booleans: [
+			"token-stdin",
+			"protect-new-projects",
+			"public-apps"
+		],
 		method: "POST"
 	},
 	{
@@ -671,11 +675,14 @@ function parseOperatorArgs(args) {
 		const identityProviderIds = values["identity-providers"]?.split(",").map((entry) => entry.trim()).filter(Boolean);
 		const policyIds = values.policies?.split(",").map((entry) => entry.trim()).filter(Boolean);
 		const existingProjects = values["existing-projects"];
-		if (!identityProviderIds?.length || !policyIds?.length) throw new Error("platform: zero-trust configure requires --identity-providers and --policies.");
+		const publicAccess = flags.has("public-apps");
+		if (publicAccess && (identityProviderIds?.length || policyIds?.length || flags.has("protect-new-projects") || existingProjects === "protected")) throw new Error("platform: --public-apps cannot include identity policies or protected project choices.");
+		if (!publicAccess && (!identityProviderIds?.length || !policyIds?.length)) throw new Error("platform: zero-trust configure requires --identity-providers and --policies.");
 		if (existingProjects !== void 0 && existingProjects !== "protected" && existingProjects !== "public") throw new Error("platform: --existing-projects must be protected or public.");
 		parsed.body = {
-			identityProviderIds,
-			policyIds,
+			identityProviderIds: identityProviderIds ?? [],
+			policyIds: policyIds ?? [],
+			...publicAccess ? { publicAccess: true } : {},
 			...existingProjects ? { existingProjects } : {},
 			protectNewProjects: flags.has("protect-new-projects")
 		};

package/dist/{operator-auth-8KnOVXVd.mjs → operator-auth-7erYc6Lt.mjs}

@@ -1,5 +1,5 @@
-import { S as writeKeyringPassword, b as deleteKeyringPassword, c as platformCredentialAccount, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl, x as readKeyringPassword } from "./platform-registry-QBa4DK32.mjs";
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-DUwumHpQ.mjs";
+import { C as writeKeyringPassword, S as readKeyringPassword, c as platformCredentialAccount, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl, x as deleteKeyringPassword } from "./platform-registry-DkPPXfp_.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-CpHjTd0t.mjs";
 /** Operator authority never comes from repository-controlled metadata. */
 function resolveOperatorOrigin(connection = "") {
 	if (connection) {

package/dist/{operator-client-DUwumHpQ.mjs → operator-client-CpHjTd0t.mjs}

@@ -1,6 +1,6 @@
-import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { s as normalizePlatformApiUrl } from "./platform-registry-QBa4DK32.mjs";
-import { t as ensureCloudflaredToken } from "./cf-access-P0iZnu0q.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { s as normalizePlatformApiUrl } from "./platform-registry-DkPPXfp_.mjs";
+import { t as ensureCloudflaredToken } from "./cf-access-BGe5sWXF.mjs";
 const OPERATOR_MAX_TIMEOUT_MS = 36e5;
 var OperatorClientError = class extends Error {
 	code;

package/dist/{operator-cmd-DBA6dl0m.mjs → operator-cmd-DGqPJUD3.mjs}

@@ -1,5 +1,5 @@
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-DUwumHpQ.mjs";
-import { a as resolveOperatorOrigin, i as removeOperatorToken, n as readOperatorApiTokenStdin, o as saveOperatorToken, r as readOperatorToken, t as exchangeOperatorSession } from "./operator-auth-8KnOVXVd.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-CpHjTd0t.mjs";
+import { a as resolveOperatorOrigin, i as removeOperatorToken, n as readOperatorApiTokenStdin, o as saveOperatorToken, r as readOperatorToken, t as exchangeOperatorSession } from "./operator-auth-7erYc6Lt.mjs";
 import { createHash } from "node:crypto";
 import { setTimeout } from "node:timers/promises";
 import { createInterface } from "node:readline/promises";
@@ -137,9 +137,9 @@ async function runAuth(origin, args) {
 	if (args.action === "login" || args.action === "token" && args.tokenStdin) {
 		if (!args.tokenStdin && !process.stdin.isTTY) throw new OperatorClientError("Browser login requires an interactive terminal. Use --token-stdin to exchange an API session.", "interactive_login_required");
 		const apiToken = args.tokenStdin ? await readOperatorApiTokenStdin() : await (async () => {
-			const { discoverPlatform } = await import("./platform-cmd-Bt-1w6pY.mjs");
-			const { selectPlatformLoginMethod } = await import("./login-DYt_An22.mjs");
-			const { runPlatformLogin } = await import("./auth-CCjt0hcq.mjs");
+			const { discoverPlatform } = await import("./platform-cmd-pMTRhvYs.mjs");
+			const { selectPlatformLoginMethod } = await import("./login-DIy9Sb-U.mjs");
+			const { runPlatformLogin } = await import("./auth-DX3JURcX.mjs");
 			return runPlatformLogin(origin, (await selectPlatformLoginMethod(await discoverPlatform(origin), args.providerExplicit ? args.provider : void 0)).id, (url) => process.stderr.write(`Sign in at ${url}\n`));
 		})();
 		const session = await exchangeOperatorSession(origin, apiToken);
@@ -313,7 +313,7 @@ async function migrateDeploymentAssets(client, origin, args) {
 }
 async function runOperatorCommand(args) {
 	if (!args.action) {
-		const { printHelpPage } = await import("./help-DofyZuY7.mjs");
+		const { printHelpPage } = await import("./help-mabuIV98.mjs");
 		printHelpPage(["platform", args.group]);
 		return;
 	}

package/dist/{output-Dm_A4Tbv.mjs → output-CbM85T4k.mjs}

@@ -1,6 +1,6 @@
 import { n as __toESM } from "./rolldown-runtime-DXIUcv95.mjs";
 import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
-import { L as spinner, j as log, k as isCI } from "./dist-CTBk70IR.mjs";
+import { L as log, P as isCI, nt as settings, q as spinner } from "./prompts-BNUoTiaf.mjs";
 //#region src/cli/output.ts
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 /** Keep recovery commands on the same CLI when using the local checkout launcher. */
@@ -8,18 +8,21 @@ function cliCommandName() {
 	const entryName = process.argv[1]?.split(/[\\/]/).at(-1);
 	return entryName === "void-dev" || entryName === "void-dev.cmd" ? "void-dev" : "void";
 }
-/**
-* Terminal-safe spinner wrapper. In CI and redirected output,
-* `@clack/prompts` spinner emits DEC Private Mode cursor hide/show codes
-* (`\x1b[?25l` / `\x1b[?25h`) that render as text artifacts. This wrapper
-* replaces the spinner with plain log output.
-*/
+/** Keep phase updates visible in static progress output, including redirected terminals. */
 function createSpinner(options, isTerminal = process.stdout.isTTY === true) {
-	if (!isCI() && isTerminal) return spinner(options);
+	const accessible = settings?.accessible ?? ![
+		void 0,
+		"",
+		"0",
+		"false"
+	].includes(process.env.ACCESSIBLE);
+	if (!isCI() && isTerminal && !accessible) return spinner(options);
 	let currentMessage = "";
+	let cancelled = false;
 	return {
 		start(msg = "") {
 			currentMessage = msg;
+			cancelled = false;
 			if (msg) log.step(msg);
 		},
 		stop(msg = "") {
@@ -32,14 +35,19 @@ function createSpinner(options, isTerminal = process.stdout.isTTY === true) {
 			}
 		},
 		cancel(msg = "") {
+			cancelled = true;
 			if (msg) log.warn(msg);
 		},
 		error(msg = "") {
 			if (msg) log.error(msg);
 		},
+		pause() {},
+		resume(msg = "") {
+			this.message(msg);
+		},
 		clear() {},
 		get isCancelled() {
-			return false;
+			return cancelled;
 		}
 	};
 }
@@ -50,7 +58,7 @@ function sectionTitle(title) {
 	return import_picocolors.default.reset(import_picocolors.default.blue(title));
 }
 function categoryTitle(title) {
-	return import_picocolors.default.reset(import_picocolors.default.bold(import_picocolors.default.cyan(title)));
+	return import_picocolors.default.reset(import_picocolors.default.bold(title));
 }
 function dim(text) {
 	return import_picocolors.default.dim(text);

package/dist/pages/index.mjs

@@ -2,7 +2,7 @@ import { a as join } from "../dist-BVqXeR_h.mjs";
 import { r as resolvePagesDir } from "../project-paths-GgcMozYz.mjs";
 import { m as readConfig } from "../config-Br_JZD6u.mjs";
 import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, r as resolveLayoutChain, t as scanPages } from "../scan-C7okrLyM.mjs";
-import { i as parseRedirectsFile } from "../headers-DWi2IXWx.mjs";
+import { i as parseRedirectsFile } from "../headers-2rKda9Y6.mjs";
 import { i as resolveHead, n as renderHeadToString, r as renderHtmlAttrs, t as renderBodyAttrs } from "../head-D_QRR5Yd.mjs";
 import { t as serializePageData } from "../serialize-BPvnNQuA.mjs";
 //#region src/pages/manifest.ts

package/dist/{platform-args-BJdRtlLq.mjs → platform-args-3k8X9-H_.mjs}

@@ -1,4 +1,4 @@
-import { n as operatorGroups, r as parseOperatorArgs } from "./operator-args-CLgKGlwU.mjs";
+import { n as operatorGroups, r as parseOperatorArgs } from "./operator-args-B3BTmSoi.mjs";
 import { PLATFORM_LOGIN_KINDS, normalizePlatformDashboardUrl, parsePlatformLoginId } from "@void/platform";
 import { parsePlatformPlanId } from "@void/platform/plans";
 //#region src/cli/platform-config-args.ts
@@ -212,8 +212,8 @@ const platformSubcommands = [
 	},
 	{
 		name: "install",
-		hint: "Preview choices with --plan, then run the printed install command",
-		description: "Install a Void platform with a domain or workers.dev for testing"
+		hint: "Preview and save choices with --plan, then select the saved plan to install",
+		description: "Install a Void platform and choose who can access its apps"
 	},
 	{
 		name: "upgrade",
@@ -442,6 +442,7 @@ function parsePlatformArgs(args) {
 			"--account",
 			"--auth-config",
 			"--login-methods",
+			"--app-access",
 			"--hyperdrive",
 			"--application-domain",
 			"--control-plane-domain",
@@ -474,6 +475,12 @@ function parsePlatformArgs(args) {
 		if (noControlPlaneDomain && values.has("--control-plane-domain")) throw new Error("platform: Choose either --control-plane-domain or --no-control-plane-domain.");
 		if (noDedicatedZone && dedicatedZone) throw new Error("platform: Choose either --dedicated-zone or --no-dedicated-zone.");
 		if (values.has("--auth-config") && (values.has("--login-methods") || accessProtection !== void 0)) throw new Error("platform: --auth-config cannot be combined with login or Access protection options.");
+		const appAccess = values.get("--app-access");
+		if (appAccess !== void 0 && ![
+			"public",
+			"platform",
+			"custom"
+		].includes(appAccess)) throw new Error("platform: --app-access accepts public, platform, or custom.");
 		const loginMethods = values.get("--login-methods")?.split(",");
 		if (loginMethods && loginMethods.some((method) => !PLATFORM_LOGIN_KINDS.includes(method))) throw new Error("platform: --login-methods accepts github, google, oidc, and cloudflare-access.");
 		if (workersDev && (values.has("--application-domain") || values.has("--zone") || dedicatedZone)) throw new Error("platform: --workers-dev cannot be combined with a domain, zone, or --dedicated-zone.");
@@ -484,6 +491,7 @@ function parsePlatformArgs(args) {
 			...values.has("--hyperdrive") ? { hyperdrive: values.get("--hyperdrive") } : {},
 			...loginMethods ? { loginMethods: [...new Set(loginMethods)] } : {},
 			...accessProtection !== void 0 ? { accessProtection } : {},
+			...appAccess !== void 0 ? { appAccess } : {},
 			...workersDev ? { workersDev: true } : {},
 			...values.has("--auth-config") ? { authConfig: values.get("--auth-config") } : {},
 			account: values.get("--account") ?? "",