void 0.23.0 → 0.24.0

package/dist/{provision-C4ORE7G7.mjs → provision-CVku1JFU.mjs}

@@ -1,3 +1,3 @@
 import { r as scanWranglerDotenvKeys } from "./dotenv-VQxupEUv.mjs";
-import { _ as resolvePinnedApiBaseUrl, a as checkCloudflareProvisionDrift, c as enableD1ReadReplicationViaApi, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionEnv, h as provisionCloudflareResources, i as assertValidResourceName, l as isAlreadyGoneKillError, m as normalizeRunWranglerResult, n as acquireProvisionLock, o as createDefaultRunWrangler, p as isRealKvId, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, t as WranglerQuarantineError, u as isQuarantineError, v as resolveProperLockfileKey } from "./provision-CJFgTZY8.mjs";
+import { _ as resolvePinnedApiBaseUrl, a as checkCloudflareProvisionDrift, c as enableD1ReadReplicationViaApi, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionEnv, h as provisionCloudflareResources, i as assertValidResourceName, l as isAlreadyGoneKillError, m as normalizeRunWranglerResult, n as acquireProvisionLock, o as createDefaultRunWrangler, p as isRealKvId, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, t as WranglerQuarantineError, u as isQuarantineError, v as resolveProperLockfileKey } from "./provision-CaoxO_U7.mjs";
 export { WranglerQuarantineError, acquireProvisionLock, assertNoTransportRedirectInProjectDotenv, assertValidResourceName, checkCloudflareProvisionDrift, createDefaultRunWrangler, deleteEnvVarCaseAware, enableD1ReadReplicationViaApi, isAlreadyGoneKillError, isQuarantineError, isQueueConfirmedAbsent, isRealD1Id, isRealKvId, normalizeRunWranglerResult, provisionCloudflareResources, provisionEnv, resolvePinnedApiBaseUrl, resolveProperLockfileKey, scanWranglerDotenvKeys };

package/dist/{provision-CJFgTZY8.mjs → provision-CaoxO_U7.mjs}

@@ -1,7 +1,7 @@
 import { a as join, n as dirname, o as normalize, t as basename, u as resolve$2 } from "./dist-BVqXeR_h.mjs";
 import { i as persistCloudflareConfig } from "./cloudflare-config-Bktvwtpf.mjs";
 import { A as writeProvisionedWranglerConfig, s as assertNoDuplicateMembers, v as readProvisionedBindingEntry } from "./wrangler-7K-bW_DL.mjs";
-import { i as voidWarn, r as voidLog } from "./log-ChfPKsVd.mjs";
+import { i as voidWarn, r as voidLog } from "./log-vqY3pqwI.mjs";
 import { r as scanWranglerDotenvKeys } from "./dotenv-VQxupEUv.mjs";
 import { c as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-B-wekeR6.mjs";
 import { createRequire } from "node:module";

package/dist/{requests-MhxYnau8.mjs → requests-BOjIVAeF.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, c as import_picocolors, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { H as outro, L as log, N as intro } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { a as dim, c as import_picocolors, r as cliTitle } from "./output-CbM85T4k.mjs";
 //#region src/cli/requests.ts
 async function runRequestsCommand(root, range, status) {
 	console.log();

package/dist/{rollback-CJ6iSDoU.mjs → rollback-CwR3pLj3.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { E as confirm, I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, c as import_picocolors, i as createSpinner, o as ensureUtc, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { A as confirm, H as outro, K as select, L as log, N as intro, O as cancel, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { a as dim, c as import_picocolors, i as createSpinner, o as ensureUtc, r as cliTitle } from "./output-CbM85T4k.mjs";
 //#region src/cli/rollback.ts
 async function runRollbackCommand(root, deployId) {
 	console.log();
@@ -83,7 +83,7 @@ async function runRollbackCommand(root, deployId) {
 	outro(dim("Traffic is now serving the rolled-back deployment."));
 }
 async function runCloudflareRollback(root, deployId) {
-	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-AiWashgg.mjs");
+	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BCdXSsmo.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	const status = await readCloudflareWorkerStatus(context);
 	const deployedVersionIds = new Set(status.deployedVersionIds);

package/dist/runtime/ai.mjs

@@ -1,4 +1,4 @@
-import { t as cfAccessHeaders } from "../cf-access-DRsQRe6k.mjs";
+import { t as cfAccessHeaders } from "../cf-access-TWNzXltp.mjs";
 import { a as getRawRuntimeEnv } from "../env-raw-Cx8ElDdj.mjs";
 import { a as readUsageLimit, i as limitOperation, r as limitFromResponse, t as UsageLimit } from "../limits-Cjuk2VPm.mjs";
 //#region src/runtime/ai-types.ts
@@ -27,8 +27,6 @@ const PROVIDER_KEY_MAP = {
 };
 //#endregion
 //#region src/runtime/ai.ts
-const PROXY_URL = "https://proxy.void.cloud/ai";
-const STAGING_PROXY_URL = "https://proxy.staging.void.cloud/ai";
 const VOID_FILE_MARKER = "__voidFile";
 const PROVIDER_AUTH_DEFAULTS = {
 	"google-ai-studio": {
@@ -239,8 +237,8 @@ function resolveProviderKey(provider, runtimeEnv, options) {
 }
 function getProxyUrl(runtimeEnv) {
 	const custom = runtimeEnv.__VOID_PROXY_URL;
-	if (typeof custom === "string" && custom.length > 0) return custom + "/ai";
-	return runtimeEnv.__VOID_STAGING ? STAGING_PROXY_URL : PROXY_URL;
+	if (typeof custom === "string" && custom.length > 0) return custom.replace(/\/+$/, "") + "/ai";
+	throw new Error("ai: No connected platform proxy is available. Run `void connect <url>` first.");
 }
 function providerAuthDefaults(provider) {
 	return PROVIDER_AUTH_DEFAULTS[provider] ?? {

package/dist/runtime/email/testing.mjs

@@ -1,7 +1,7 @@
 import { i as normalizeEmail, r as buildMime } from "../../mime-D5Nmdzf7.mjs";
 import { n as compileEmailPattern, t as compareEmailRoutes } from "../../email--tEtMoj_.mjs";
 import { y as registerEmailSink } from "../../dev-inbox-P0u4tM8Y.mjs";
-import { i as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-aVHEUhKo.mjs";
+import { i as createMessageProxy, n as MAX_INBOUND_HEADERS, t as MAX_INBOUND_BYTES } from "../../inbound-fRkqcXaC.mjs";
 //#region src/runtime/email/testing.ts
 /**
 * Test harnesses for void/email.

package/dist/runtime/email.mjs

@@ -1,7 +1,7 @@
 import { i as normalizeEmail, n as MimeError, r as buildMime } from "../mime-D5Nmdzf7.mjs";
 import { a as DEV_INBOX_ENV_VAR, b as serializeCapturedMessage, c as DEV_INBOX_TOKEN_ENV_VAR, d as captureMessage, h as hasActiveSink, i as DEV_INBOX_CAPTURE_URL, p as dispatchToSinks } from "../dev-inbox-P0u4tM8Y.mjs";
 import { a as getRawRuntimeEnv } from "../env-raw-Cx8ElDdj.mjs";
-import { a as defineEmail, c as parseEmail, i as createMessageProxy, l as replyEmail, o as enactEmailActions, r as ParseEmailError, s as isForwardableEmailMessage } from "../inbound-aVHEUhKo.mjs";
+import { a as defineEmail, c as parseEmail, i as createMessageProxy, l as replyEmail, o as enactEmailActions, r as ParseEmailError, s as isForwardableEmailMessage } from "../inbound-fRkqcXaC.mjs";
 //#region src/runtime/email.ts
 const VALID_SLUG = /^[a-z0-9](?:[a-z0-9-]{0,54}[a-z0-9])?$/;
 function makeError(code, message, cause) {

package/dist/runtime/remote/index.mjs

@@ -1,4 +1,4 @@
-import { t as cfAccessHeaders } from "../../cf-access-DRsQRe6k.mjs";
+import { t as cfAccessHeaders } from "../../cf-access-TWNzXltp.mjs";
 import { n as serializeR2Conditional } from "../../r2-conditions-D1Wk8i7b.mjs";
 //#region src/runtime/remote/client.ts
 function readableMessage(value) {
@@ -49,7 +49,7 @@ async function proxyError(response) {
 	return /* @__PURE__ */ new Error(`remote: Proxy request failed with ${response.status}: ${message}`);
 }
 /**
-* HTTP client for the remote bindings proxy (proxy.void.cloud).
+* HTTP client for the connected platform's remote bindings proxy.
 *
 * Used by ProxyD1Database, ProxyKVNamespace, and ProxyR2Bucket to forward
 * binding operations to the platform proxy during local development.

package/dist/{secret-Dli5fP0B.mjs → secret-ByWJWBUG.mjs}

@@ -1,9 +1,9 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { _ as validateSecretValues } from "./env-validation-BPn7vk-V.mjs";
-import { E as confirm, F as password, N as note, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-DKG5Ra8p.mjs";
+import { c as getToken } from "./auth-CQkSDS50.mjs";
+import { _ as validateSecretValues } from "./env-validation-C_8tPdhs.mjs";
+import { A as confirm, B as note, H as outro, L as log, N as intro, O as cancel, U as password, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
+import { n as PlatformClient } from "./client-DKAsFA4X.mjs";
+import { r as cliTitle } from "./output-CbM85T4k.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
@@ -78,7 +78,7 @@ async function runSecretCommand(root, args) {
 }
 async function runCloudflareSecretCommand(root, args) {
 	if (args.projectName) throw new Error("secret: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-AiWashgg.mjs");
+	const { deleteCloudflareSecret, listCloudflareSecrets, putCloudflareSecret, resolveCloudflareOperationContext, syncCloudflareSecrets } = await import("./cloudflare-operations-BCdXSsmo.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	if (args.action === "list") {
 		const secrets = await listCloudflareSecrets(context);

package/dist/{skills-D1II1Juz.mjs → skills-C1PlclPt.mjs}

@@ -1,5 +1,5 @@
 import { a as join, l as relative } from "./dist-BVqXeR_h.mjs";
-import { j as log } from "./dist-CTBk70IR.mjs";
+import { L as log } from "./prompts-BNUoTiaf.mjs";
 import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, symlinkSync } from "node:fs";
 //#region src/cli/skills.ts

package/dist/{subcommand-prompt-CY1C4fvl.mjs → subcommand-prompt-klFCfcor.mjs}

@@ -1,5 +1,5 @@
-import { S as S_STEP_SUBMIT, _ as S_RADIO_ACTIVE, c as S_CHECKBOX_INACTIVE, i as S_BAR_END, q as wrapAnsi, r as S_BAR, s as S_CHECKBOX_ACTIVE, v as S_RADIO_INACTIVE, y as S_STEP_ACTIVE } from "./dist-CTBk70IR.mjs";
-import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
+import { $ as wrapTextWithPrefix, G as promptTitle, M as getGuide, V as optionText, b as S_RADIO_ACTIVE, d as S_CHECKBOX_SELECTED, i as S_BAR_END, it as wrapAnsi, j as formatInstructionFooter, n as SELECT_INSTRUCTIONS, r as S_BAR, t as MULTISELECT_INSTRUCTIONS, u as S_CHECKBOX_INACTIVE, w as S_STEP_SUBMIT } from "./prompts-BNUoTiaf.mjs";
+import { c as import_picocolors } from "./output-CbM85T4k.mjs";
 //#region src/cli/subcommand-prompt.ts
 function promptSubcommand(command, subcommands) {
 	return new Promise((resolve) => {
@@ -45,16 +45,25 @@ function promptSubcommand(command, subcommands) {
 			}
 			return `${lines[0]}…`;
 		}
+		function guidePrefix() {
+			return getGuide() ? import_picocolors.default.gray(S_BAR) + " " : "  ";
+		}
+		function renderOption(marker, label, focused, suffix = "") {
+			return guidePrefix() + optionText(stdout, marker + " ", label, focused ? (value) => import_picocolors.default.blue(import_picocolors.default.bold(value)) : import_picocolors.default.dim, suffix);
+		}
+		function instructions(items) {
+			return formatInstructionFooter(items, getGuide(), stdout);
+		}
 		function writeFrame(header, options, footer) {
-			const count = Math.max(1, Math.min(7, (stdout.rows || 24) - footer.length - 5));
+			const heading = header.trimEnd().split("\n");
+			const end = getGuide() ? [import_picocolors.default.gray(S_BAR_END)] : [];
+			const count = Math.max(1, Math.min(7, (stdout.rows || 24) - heading.length - footer.length - end.length - 1));
 			const start = Math.max(0, Math.min(cursor - Math.floor(count / 2), options.length - count));
 			previousFrame = [
-				truncate(header),
-				import_picocolors.default.gray(S_BAR),
+				...heading.map((line) => truncate(line)),
 				...options.slice(start, start + count).map((option) => truncate(option)),
-				import_picocolors.default.gray(S_BAR),
 				...footer.map((line) => truncate(line)),
-				import_picocolors.default.gray(S_BAR_END)
+				...end
 			].join("\n");
 			stdout.write(previousFrame + "\n");
 		}
@@ -69,7 +78,7 @@ function promptSubcommand(command, subcommands) {
 		const title = command ? `void ${command}` : "void";
 		function headerLine() {
 			const argPart = selectedArg ? ` ${selectedArg}` : "";
-			return `${import_picocolors.default.cyan(S_STEP_ACTIVE)}  ${import_picocolors.default.cyan(title)} ${import_picocolors.default.dim("·")} ${import_picocolors.default.cyan(`${selectedSub.name}${argPart}`)}`;
+			return promptTitle(`${import_picocolors.default.blue(title)} ${import_picocolors.default.dim("·")} ${selectedSub.name}${argPart}`, "active", { output: stdout });
 		}
 		function renderSelect() {
 			const lines = [];
@@ -78,22 +87,21 @@ function promptSubcommand(command, subcommands) {
 			for (let i = 0; i < subcommands.length; i++) {
 				const sub = subcommands[i];
 				const isFocused = i === cursor;
-				const radio = isFocused ? import_picocolors.default.green(S_RADIO_ACTIVE) : import_picocolors.default.dim(S_RADIO_INACTIVE);
+				const radio = isFocused ? import_picocolors.default.blue(S_RADIO_ACTIVE) : import_picocolors.default.dim(" ");
 				const name = sub.name.padEnd(maxName);
 				let suffix = "";
-				if (sub.arg) {
-					if (isFocused && input.length > 0) suffix = `  ${import_picocolors.default.cyan(truncate(input, (stdout.columns || 80) - maxName - 9, true))}`;
+				if (isFocused && sub.arg) {
+					if (isFocused && input.length > 0) suffix = `  ${import_picocolors.default.blue(truncate(input, (stdout.columns || 80) - maxName - 9, true))}`;
 					else suffix = `  ${import_picocolors.default.dim(sub.arg)}`;
-				} else if (sub.hint) suffix = `  ${import_picocolors.default.dim(sub.hint)}`;
-				if (isFocused) lines.push(`${import_picocolors.default.gray(S_BAR)}  ${radio} ${import_picocolors.default.reset(name)}${suffix}`);
-				else lines.push(`${import_picocolors.default.gray(S_BAR)}  ${radio} ${import_picocolors.default.dim(name)}${suffix}`);
+				} else if (isFocused && sub.hint) suffix = `  ${import_picocolors.default.dim(sub.hint)}`;
+				lines.push(renderOption(radio, name, isFocused, suffix));
 			}
-			const footer = [`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(focused.description)}`];
+			const footer = [guidePrefix() + import_picocolors.default.dim(focused.description), ...instructions(SELECT_INSTRUCTIONS)];
 			if (focused.arg) {
-				if (focused.arg.startsWith("<")) footer.push(`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(`Type ${focused.arg}, then press Enter`)}`);
-				else footer.push(`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(`Type ${focused.arg}, then press Enter, or press Enter to skip`)}`);
+				if (focused.arg.startsWith("<")) footer.push(`${guidePrefix()}${import_picocolors.default.dim(`Type ${focused.arg}, then press Enter`)}`);
+				else footer.push(`${guidePrefix()}${import_picocolors.default.dim(`Type ${focused.arg}, then press Enter, or press Enter to skip`)}`);
 			}
-			writeFrame(`${import_picocolors.default.cyan(S_STEP_ACTIVE)}  ${import_picocolors.default.cyan(title)}`, lines, footer);
+			writeFrame(promptTitle(import_picocolors.default.blue(title), "active", { output: stdout }), lines, footer);
 		}
 		function renderFlags() {
 			const flags = selectedSub.flags;
@@ -104,19 +112,19 @@ function promptSubcommand(command, subcommands) {
 				const flag = flags[i];
 				const state = flagStates[i];
 				const isFocused = i === cursor;
-				const checkbox = state.enabled ? import_picocolors.default.green(S_CHECKBOX_ACTIVE) : isFocused ? S_CHECKBOX_INACTIVE : import_picocolors.default.dim(S_CHECKBOX_INACTIVE);
+				const checkbox = state.enabled ? import_picocolors.default.blue(S_CHECKBOX_SELECTED) : isFocused ? import_picocolors.default.blue(S_CHECKBOX_INACTIVE) : import_picocolors.default.dim(S_CHECKBOX_INACTIVE);
 				const name = flag.name.padEnd(maxFlag);
 				let valueText = "";
 				if (flag.arg) {
 					if (state.enabled && state.value.length > 0) {
 						const value = truncate(state.value, (stdout.columns || 80) - maxFlag - 9, true);
-						valueText = `  ${isFocused ? import_picocolors.default.cyan(value) : import_picocolors.default.dim(value)}`;
+						valueText = `  ${isFocused ? import_picocolors.default.blue(value) : import_picocolors.default.dim(value)}`;
 					} else valueText = `  ${import_picocolors.default.dim(flag.arg)}`;
 				}
-				if (isFocused) lines.push(`${import_picocolors.default.gray(S_BAR)}  ${checkbox} ${import_picocolors.default.reset(name)}${valueText}`);
-				else lines.push(`${import_picocolors.default.gray(S_BAR)}  ${checkbox} ${import_picocolors.default.dim(name)}${valueText}`);
+				const pointer = isFocused ? import_picocolors.default.blue(S_RADIO_ACTIVE) : " ";
+				lines.push(renderOption(pointer + " " + checkbox, name, isFocused, valueText));
 			}
-			writeFrame(headerLine(), lines, [`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(focused.description)}`]);
+			writeFrame(headerLine(), lines, [guidePrefix() + import_picocolors.default.dim(focused.description), ...instructions(MULTISELECT_INSTRUCTIONS)]);
 		}
 		function renderMultiSelect() {
 			const options = selectedSub.followUp.options;
@@ -126,21 +134,21 @@ function promptSubcommand(command, subcommands) {
 				const opt = options[i];
 				const selected = multiSelectStates[i];
 				const isFocused = i === cursor;
-				const checkbox = selected ? import_picocolors.default.green(S_CHECKBOX_ACTIVE) : isFocused ? S_CHECKBOX_INACTIVE : import_picocolors.default.dim(S_CHECKBOX_INACTIVE);
+				const checkbox = selected ? import_picocolors.default.blue(S_CHECKBOX_SELECTED) : isFocused ? import_picocolors.default.blue(S_CHECKBOX_INACTIVE) : import_picocolors.default.dim(S_CHECKBOX_INACTIVE);
 				const label = opt.label.padEnd(maxLabel);
-				if (isFocused) lines.push(`${import_picocolors.default.gray(S_BAR)}  ${checkbox} ${import_picocolors.default.reset(label)}`);
-				else lines.push(`${import_picocolors.default.gray(S_BAR)}  ${checkbox} ${import_picocolors.default.dim(label)}`);
+				const pointer = isFocused ? import_picocolors.default.blue(S_RADIO_ACTIVE) : " ";
+				lines.push(renderOption(pointer + " " + checkbox, label, isFocused));
 			}
-			writeFrame(headerLine(), lines, [`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim("space to toggle, enter to confirm")}`]);
+			writeFrame(headerLine(), lines, instructions(MULTISELECT_INSTRUCTIONS));
 		}
 		function renderRepeatInput() {
 			const followUp = selectedSub.followUp;
 			const lines = [];
-			for (const entry of repeatEntries) lines.push(`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(entry)}`);
-			if (repeatInput.length > 0) lines.push(`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.cyan(truncate(repeatInput, (stdout.columns || 80) - 4, true))}`);
-			else lines.push(`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim(followUp.placeholder)}`);
+			for (const entry of repeatEntries) lines.push(`${guidePrefix()}${import_picocolors.default.dim(entry)}`);
+			if (repeatInput.length > 0) lines.push(`${guidePrefix()}${import_picocolors.default.blue(truncate(repeatInput, (stdout.columns || 80) - 4, true))}`);
+			else lines.push(`${guidePrefix()}${import_picocolors.default.dim(followUp.placeholder)}`);
 			cursor = lines.length - 1;
-			writeFrame(headerLine(), lines, [`${import_picocolors.default.gray(S_BAR)}  ${import_picocolors.default.dim("enter to add, empty to finish")}`]);
+			writeFrame(headerLine(), lines, instructions(["Enter add", "Empty input finish"]));
 		}
 		function cleanup() {
 			if (resolved) return;
@@ -163,7 +171,7 @@ function promptSubcommand(command, subcommands) {
 					if (typeof value === "string") summary += ` ${value}`;
 				}
 				if (result.extraArgs && result.extraArgs.length > 0) summary += ` ${result.extraArgs.join(" ")}`;
-				stdout.write(`${import_picocolors.default.gray(S_STEP_SUBMIT)}  ${import_picocolors.default.dim(title)} ${import_picocolors.default.dim("·")} ${import_picocolors.default.dim(summary)}\n`);
+				stdout.write(wrapTextWithPrefix(stdout, `${import_picocolors.default.dim(title)} ${import_picocolors.default.dim("·")} ${import_picocolors.default.dim(summary)}`, "  ", `${import_picocolors.default.gray(S_STEP_SUBMIT)} `) + "\n");
 			}
 			resolve(result);
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -339,11 +339,11 @@
     "@cloudflare/workers-auth": "0.9.5",
     "@cloudflare/workers-types": "^4.20260702.1",
     "@napi-rs/keyring": "2.1.0",
-    "@void/deploy-cloudflare": "0.23.0",
-    "@void/deploy-core": "0.23.0",
-    "@void/edge": "0.23.0",
-    "@void/isr": "0.23.0",
-    "@void/platform": "0.23.0",
+    "@void/deploy-cloudflare": "0.24.0",
+    "@void/deploy-core": "0.24.0",
+    "@void/edge": "0.24.0",
+    "@void/isr": "0.24.0",
+    "@void/platform": "0.24.0",
     "acorn": "^8.18.0",
     "better-auth": "^1.7.6",
     "better-sqlite3": "^13.0.3",
@@ -370,13 +370,12 @@
     "undici": "8.11.2"
   },
   "devDependencies": {
-    "@clack/core": "^1.5.1",
-    "@clack/prompts": "^1.8.1",
     "@electric-sql/pglite": "0.5.8",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.6.3",
     "@types/pg": "^8.23.1",
     "@types/proper-lockfile": "^4.1.4",
+    "@voidzero-dev/vite-plus-prompts": "0.0.0",
     "arktype": "^2.2.5",
     "ci-info": "^4.4.0",
     "estree-walker": "^3.0.3",
@@ -394,7 +393,7 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@void/md": "0.23.0",
+    "@void/md": "0.24.0",
     "arktype": ">=2.0.0",
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",

package/skills/void/SKILL.md

@@ -16,7 +16,12 @@ workflows. Mention Wrangler only when the user needs to recognize a literal
 configuration file or environment variable.
 
 Use `void` and `@void/*` in imports, examples, and package manifests. Follow the
-project's existing framework and deployment destination.
+project's existing framework and deployment destination. Deploying to a Void
+platform requires an explicit `void connect <url>` first; never infer a platform
+from old examples, tokens, or project IDs.
+For a one-time deployment elsewhere, connect to that platform, then set
+`VOID_API_URL` for the deploy command and pass `--project <slug>`. This preserves
+the app's existing saved destination, including when the target project is new.
 
 ## Task Routing
 

package/skills/void/docs/guide/deployment.md

@@ -55,6 +55,23 @@ To set up deployment later, use `void connect --platform cloudflare` or `void co
 
 Owners can [share a platform project](./project-collaboration.md) with readers, collaborators, and project administrators. This does not apply to direct Cloudflare deployments.
 
+### Deploy to another Void platform
+
+Connect to the additional platform once, then select it for the deployment:
+
+```sh
+void connect https://second.example.com
+VOID_API_URL=https://second.example.com void deploy --platform void --project my-app
+```
+
+Void uses `my-app` on that platform and offers to create it if needed. Your saved
+destination stays unchanged, including when a new project is created or deployment
+fails. The next plain `void deploy` still uses your original destination.
+
+Pass `--project` or `VOID_PROJECT` when selecting a different platform; project links
+belong to their original platform. Each platform has its own projects, secrets, and
+data. For an app without a saved destination, its first deployment still saves a link.
+
 ### Migrations
 
 Deploy applies pending SQL migrations from `db/migrations/`. If your schema has changes without a migration, deploy stops. Run `void db generate`, review and commit the SQL, then deploy again. See the [Database guide](./database.md).
@@ -84,6 +101,11 @@ If none is set, Void asks you to choose a project. Direct Cloudflare deploys use
 
 ### CI preparation
 
+For a Void platform, run `void connect "$VOID_API_URL" --no-login` in each fresh
+CI environment before deployment. Set `VOID_API_URL` to the platform you selected;
+there is no default hosted platform. The generated GitHub Actions workflow
+includes this connection step.
+
 If your CI pipeline runs typechecking or other static analysis before deploy, run `void prepare` after install to generate the `.void/` artifacts without booting Vite.
 
 ### Environment variables

package/skills/void/docs/guide/edge/headers.md

@@ -35,7 +35,7 @@ Header rules do not apply to ISR cache responses.
 
 ### Blocked headers
 
-`Set-Cookie` and `Clear-Site-Data` are ignored in header rules. On a shared domain such as `*.void.app`, a rule could otherwise affect cookies or data belonging to another project's subdomain.
+`Set-Cookie` and `Clear-Site-Data` are ignored in header rules. On a shared domain such as `*.apps.example.com`, a rule could otherwise affect cookies or data belonging to another project's subdomain.
 
 ## Framework `_headers` files
 

package/skills/void/docs/guide/email/domains.md

@@ -50,7 +50,9 @@ Use a mail subdomain to keep existing mail on `acme.com` with its current provid
 
 Sign in with `void cloudflare login`, or use a `CLOUDFLARE_API_TOKEN` with **Email Routing Edit** and **Email Sending Edit** in addition to deploy permissions. If your browser session lacks email permissions, log out and sign in again. Global API Keys aren't supported.
 
-Run `void deploy --platform cloudflare`. Void shows the domain, routing, sending, DNS, and handler addresses it would configure. Accept to set up email and deploy. Later deploys reuse the setup. Without `email.from`, or if you decline the initial setup, the app deploys without email.
+Run `void deploy --platform cloudflare`. Void shows the domain, routing, sending, DNS, and handler addresses it would configure. Accept to set up email and deploy. Later deploys reuse the setup. If you decline the initial setup, the app deploys without email.
+
+Without `email.from`, Void skips automatic setup and preserves authored `cloudflare.send_email` bindings and `cloudflare.addresses`; check their readiness yourself. `--require-email` still refuses deployment when automatic setup cannot be verified.
 
 If subdomain setup needs a dashboard step, follow the checklist under **Email → Settings → Subdomains**, then retry. After DNS changes, check readiness with:
 
@@ -78,6 +80,8 @@ Setup enables the zone's plus addressing so `support+T-42@mail.acme.com` reaches
 
 On Workers Free, `sendEmail()` can send to verified destinations listed under **Email Routing → Destination addresses** in Cloudflare.
 
+Configure your sender domain's SPF, DKIM, and DMARC records using [Cloudflare's email authentication guidance](https://developers.cloudflare.com/email-service/concepts/email-authentication/), then check the authentication results in a received message's original headers. A successful `sendEmail()` result confirms provider acceptance; it does not confirm delivery or authentication readiness.
+
 Sending to arbitrary recipients requires [Workers Paid](https://dash.cloudflare.com/?to=/:account/workers/plans) and Email Sending onboarding. After upgrading, run `void email setup --platform cloudflare`. Void doesn't retry onboarding during ordinary deploys.
 
 Existing DMARC or bounce-domain records can block onboarding; the checklist identifies conflicts to resolve. Inbound mail remains available.

package/skills/void/docs/guide/email/sending.md

@@ -34,7 +34,7 @@ Check both failure shapes: `result.error` reports a request failure, while `resu
 
 ## Setup {#setup}
 
-On a platform with email enabled, deploy without additional email configuration. Ask your administrator for its shared mail domain. Administrators [enable email during installation or upgrade](/guide/platform/installation/credentials#runtime-token-permissions); Void Cloud uses `mail.void.cloud`.
+On a platform with email enabled, deploy without additional email configuration. Ask your administrator for its shared mail domain. Administrators [enable email during installation or upgrade](/guide/platform/installation/credentials#runtime-token-permissions).
 
 Each project on an email-enabled platform has:
 

package/skills/void/docs/guide/platform/administration/zero-trust.md

@@ -8,6 +8,17 @@ Project Zero Trust puts Cloudflare Access in front of the hostnames of projects
 
 This is separate from the Access login and protection for the platform API. Projects deployed directly to Cloudflare are not affected.
 
+New installations choose app access during `void platform install`. The installer
+reuses the platform policy or helps you select separate company rules, and finishes
+setup before opening traffic. Existing installations keep their settings when
+upgraded; use this page to configure app access if it has not been set up yet.
+
+If you choose public apps in an account with Default-Deny, Void manages scoped
+public rules instead. New projects and custom domains remain public automatically.
+Keep these rules enabled while Default-Deny is on; removing them can block traffic.
+Public-only installations need no identity providers or company policies until you
+choose to protect apps. To renew their token in Admin, leave the policy fields blank.
+
 ## Requirements
 
 - A Cloudflare Zero Trust organization in the account that hosts the platform, with the identity providers and reusable Access policies you want to use. Select at least one Allow policy that matches people by identity. Void rejects Bypass and Service Auth policies, and rules that allow Everyone or any service token.
@@ -116,22 +127,29 @@ If a project must accept such requests:
 
 Void creates and owns these self-hosted applications in your Zero Trust organization:
 
-| Application                | Covers                                                                    | Policy                                                           | Exists                                                             |
-| -------------------------- | ------------------------------------------------------------------------- | ---------------------------------------------------------------- | ------------------------------------------------------------------ |
-| Shared project application | `*.<your domain>` and this installation's `workers.dev` testing URLs      | Your selected policies and identity providers                    | Once, while Zero Trust is enabled                                  |
-| Public exception           | One public project's `<slug>.<your domain>` and `workers.dev` testing URL | A Bypass policy for Everyone, named `Void project is public`     | One for each public project                                        |
-| Custom domain application  | All custom domains of one protected project                               | Your selected policies and identity providers                    | One for each protected project that has custom domains             |
-| Health check exception     | `void-platform-health.<your domain>/health`                               | A Bypass policy for Everyone, named `Void platform health check` | Once, while Zero Trust is enabled on an installation with a domain |
+| Application                 | Covers                                                                    | Policy                                                                   | Exists                                                             |
+| --------------------------- | ------------------------------------------------------------------------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------ |
+| Shared project application  | `*.<your domain>` and this installation's `workers.dev` testing URLs      | Your selected policies and identity providers                            | Once for protected-app configurations                              |
+| Public app management check | A reserved, unused dispatch check path                                    | Deny Everyone; verifies management permissions without opening hostnames | Once, instead of the shared wildcard in public-only mode           |
+| Public exception            | One public project's `<slug>.<your domain>` and `workers.dev` testing URL | A Bypass policy for Everyone, named `Void project is public`             | One for each public project                                        |
+| Custom domain application   | All managed custom domains of one project                                 | Company policies for protected projects; Bypass for public ones          | One for each project with managed custom domains                   |
+| Health check exception      | `void-platform-health.<your domain>/health`                               | A Bypass policy for Everyone, named `Void platform health check`         | Once, while Zero Trust is enabled on an installation with a domain |
+
+Installations configured through the installer also manage public custom-domain
+rules. Their custom-domain application changes policy when a project switches
+between public and protected access.
 
-Custom domains of a public project need no Access application.
+If the installer already configured the same health-check exception, Zero Trust
+reuses it. Disabling project Zero Trust leaves that existing exception in place
+so platform health checks continue to work.
 
 The number of applications Void needs is:
 
 ```text
-2 + public projects + protected projects that have custom domains
+1 + health-check applications + public projects + projects with managed custom domains
 ```
 
-Use 1 instead of 2 on an installation without a domain. For example, 40 projects with 10 public and 5 protected projects that have custom domains need 2 + 10 + 5 = 17 applications. Void stops with an error when the account has more than 500 Access applications.
+The first application is the shared company policy or the public-app management check. Count a health exception once, including when it is shared with the installer. For example, 40 projects with one health exception, 10 public projects, and 5 projects with managed custom domains need 1 + 1 + 10 + 5 = 17 applications. Void stops with an error when the account has more than 500 Access applications.
 
 #### Recognizing Void's Applications
 

package/skills/void/docs/guide/platform/installation/ci.md

@@ -49,7 +49,7 @@ void platform install \
   --yes
 ```
 
-Mutations require `--yes` in CI; a read-only `--plan` does not. Custom runtimes also require `--runtime <directory>`. For a new installation, run `--plan` with the same account, name, and domain options as the unattended install. If you use `--auth-config`, pass the same file to both commands. Register the printed callback when creating a login provider's OAuth or OIDC client manually; automatic Access setup manages its own application. A custom API hostname is optional.
+Mutations require `--yes` in CI; a read-only `--plan` does not. Custom runtimes also require `--runtime <directory>`. For a new installation, run `--plan` with the same account, name, and domain options as the unattended install. If you use `--auth-config`, pass the same file to both commands. Register `<platform-api-url>/auth/callback` when creating a login provider's OAuth or OIDC client manually; automatic Access setup manages its own application. A custom API hostname is optional.
 
 :::
 

package/skills/void/docs/guide/platform/installation/credentials.md

@@ -8,15 +8,20 @@ Keep one password-manager entry for this platform. Paste the saved values into t
 
 ## Cloudflare API Tokens {#runtime-token-permissions}
 
-For a domain installation, create two custom tokens using Cloudflare's [API token setup](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). Name them **Void Platform Management** and **Void Platform Runtime**. Scope them to your selected account and application zone.
+For a domain installation or Cloudflare Access setup, the installer guides you through creating separate management and runtime tokens using Cloudflare's [API token setup](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). Its links preselect the permissions and suggest names based on your platform's display name. Scope the tokens to your selected account and, when using a domain, its zone, save them in your password manager, and paste them into the masked CLI prompts.
 
-For workers.dev testing with the default API hostname, browser login can authorize installation: you only need to create the runtime token and R2 credentials below. Skip the zone permissions until you add a domain.
+For workers.dev testing with the default API hostname, browser login can authorize
+infrastructure setup. Void also checks account-wide Access requirements; if the
+current credential cannot read them, the installer asks for a scoped Access token.
+Protected apps and public apps under Default-Deny need an ongoing app-management
+token, stored encrypted. Access setup requires a management token even on
+workers.dev. Skip zone permissions until you add a domain.
 
 Browser login does not grant AI Gateway access. Include **Account → AI Gateway → Edit** on the runtime token so Void can verify and create that resource.
 
 The management token lets your CLI install and maintain the platform. The runtime token is stored as a Worker secret so the platform can deploy apps after you close your terminal. They are separate credentials.
 
-The installer’s runtime-token link preselects required account permissions. Compare the form with the checklist shown beside the link, and select the indicated zone for a domain installation.
+Compare each token's form with the permission checklist below, and select the indicated account and zone for a domain installation. The installer saves a management token entered at the prompt in this installation’s encrypted local checkpoint and reuses it on resume. Upgrades, repairs, and other lifecycle maintenance also use that saved management token. During installation, a rejected token can be replaced at the prompt. An explicit `CLOUDFLARE_API_TOKEN` or `CF_API_TOKEN` takes precedence. Keep your password-manager copy for maintenance or another machine; scripts supply it through `CLOUDFLARE_API_TOKEN`.
 
 ::: details Permissions to select for each token
 
@@ -39,6 +44,8 @@ Use the following permissions for the core platform. Cloudflare may label write
 | Zone    | Workers Routes     | Edit       | —                                       |
 | Zone    | Cache Purge        | —          | Purge                                   |
 
+When Void configures Access in the installation account, the initial management-token link also selects **Account → Access: Apps and Policies → Edit** and **Account → Access: Organizations, Identity Providers, and Groups → Read**. Protection adds **Account → Access: Service Tokens → Edit**. When the authentication configuration or saved setup selects existing applications, the link requests Read access instead of Edit. These permissions belong to the management token; the runtime token does not need them.
+
 The management token also needs **Zone Edit** with authority to create zones if you ask Void to create the zone. If it already exists, use the selected zone with Zone Read and DNS Edit. Nested application domains additionally need **SSL and Certificates: Read** on the management token. A custom runtime that enables custom project domains needs **SSL and Certificates: Edit** on the runtime token; the core runtime does not enable that feature.
 
 Void checks access before provisioning. If it reports a missing permission, update the token's permissions for the selected account or zone and retry.

package/skills/void/docs/guide/platform/installation/domains.md

@@ -66,9 +66,14 @@ void platform repair <installation-id> --dashboard-url https://dash.example.com
 
 The origin must contain no credentials, path, query, or fragment. Void saves it
 for login callbacks and keeps it across upgrades and repairs. The command does
-not create a dashboard Worker or DNS records; deploy that app separately. Omit
-the option to keep the saved origin. The dashboard provides sign-in, linked
-login methods, and sign-out; use the CLI for user project and team management.
+not create a dashboard Worker or DNS records. Follow the source app’s
+[standalone dashboard preparation](https://github.com/voidzero-dev/void/tree/main/platform/packages/dashboard#standalone-deployment)
+to deploy your own copy with an unused Worker name, your dashboard hostname,
+and the installed API Worker’s service binding. Set its `API_URL` to the public
+API origin, `DASHBOARD_URL` to the dashboard origin, and `SITE_DOMAIN` to the
+installation’s application domain. Omit the option to keep the saved origin.
+The dashboard provides sign-in, linked login methods, and sign-out; use the CLI
+for user project and team management.
 
 If Access protects the platform, its application must cover this dashboard
 origin too. Configure the origin when installing protection. To change it on an

package/skills/void/docs/guide/platform/installation/first-deployment.md

@@ -33,8 +33,8 @@ void project token create --name ci --expires-in 30
 ```
 
 Store the printed `VOID_TOKEN` and `VOID_API_URL` in the CI secret manager, then
-use `void connect <url> --no-login` in a fresh checkout if connection metadata
-is not committed. Rotate with `void project token renew <id>` and revoke with
+run `void connect "$VOID_API_URL" --no-login` before deploying in each fresh CI
+environment. Project files do not replace this connection step. Rotate with `void project token renew <id>` and revoke with
 `void project token revoke <id>`. A human login token is not a CI credential.
 
 If Cloudflare Access protects the platform, Access proof and the project