void 0.23.0 → 0.25.0

package/dist/{platform-management-CjwLVQwN.mjs → platform-management-BSEc_ZeG.mjs}

@@ -1,9 +1,9 @@
-import { a as listInstallationManifests, d as readInstallationRecoverySecrets, h as resolveInstallationManifest, m as removePlatformConnectionForInstallation, p as removeInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
-import { E as confirm, I as select, N as note, P as outro, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { i as createSpinner } from "./output-Dm_A4Tbv.mjs";
-import { A as PlatformCloudflareClient, C as revalidatePlatformInstallAction, E as resolvePlatformCloudflareCredential, M as hyperdriveOriginFromConnectionString, N as hyperdriveOriginMatches, P as verifyPlatformRuntimeTokenPermissions, S as platformProvisionIntentHash, T as assertPlatformOperatorCredentialCanApplyPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as formatPlatformInstallPlan, d as loadPlatformRuntime, g as assertProjectZeroTrustAllowsUninstall, h as resolveBootstrapGitHubId, j as hyperdriveOriginConfigHash, l as createPlatformInstallationSecrets, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, p as readPlatformProjectZeroTrustState, t as assertNoninteractivePlatformMutationAcknowledged, u as installPlatform, v as trackedPlatformWorkerTraffic, w as platformDatabaseNameFromOwnerUrl, x as platformAdoptionIntentHash, y as createPlatformInstallPlan } from "./platform-lifecycle-9OyBALhH.mjs";
-import { createHash } from "node:crypto";
+import { a as listInstallationManifests, f as readInstallationRecoverySecrets, g as resolveInstallationManifest, h as removePlatformConnectionForInstallation, m as removeInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-KfNEF84O.mjs";
+import { A as confirm, B as note, H as outro, K as select, L as log, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { r as createSpinner } from "./output-BBsUwdyT.mjs";
+import { A as PlatformCloudflareClient, C as revalidatePlatformInstallAction, E as resolvePlatformCloudflareCredential, M as hyperdriveOriginFromConnectionString, N as hyperdriveOriginMatches, P as verifyPlatformRuntimeTokenPermissions, S as platformProvisionIntentHash, T as assertPlatformOperatorCredentialCanApplyPlan, a as REMOTE_INSTALLATION_MANIFEST_KEY, b as formatPlatformInstallPlan, d as assertProjectZeroTrustAllowsUninstall, f as loadPlatformRuntime, h as resolveBootstrapGitHubId, j as hyperdriveOriginConfigHash, m as createPlatformInstallationSecrets, n as resolvePlatformInstallDatabaseUrl, o as installPlatform, s as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, u as readPlatformProjectZeroTrustState, v as trackedPlatformWorkerTraffic, w as platformDatabaseNameFromOwnerUrl, x as platformAdoptionIntentHash, y as createPlatformInstallPlan } from "./platform-lifecycle-Dm09JNkn.mjs";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, createPlatformResourceOwnershipMarker, parsePlatformInstallationManifest, parsePlatformResourceOwnershipMarker, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
+import { createHash } from "node:crypto";
 //#region src/cli/platform-management.ts
 async function verifyPlatformInstallationOwnership(client, manifest, options = {}) {
 	const ready = manifest.resources.filter((resource) => resource.state === "ready" && isOwnershipVerifiableKind(resource.kind) && !options.retainedReplacementKeys?.has(resource.key));
@@ -23,6 +23,22 @@ function selectAuthoritativePlatformManifest(local, authoritative) {
 	if (authoritative.id !== local.id || authoritative.ownershipNonce !== local.ownershipNonce || authoritative.account.id !== local.account.id) throw new Error("platform: The authoritative lifecycle state belongs to another installation.");
 	return authoritative;
 }
+function commandArgument(value) {
+	return /^[a-zA-Z0-9_./:@-]+$/.test(value) ? value : `'${value.replaceAll("'", "'\\''")}'`;
+}
+function platformLifecycleResumeCommand(args, installationId) {
+	const command = [
+		"void",
+		"platform",
+		args.subcommand,
+		commandArgument(installationId)
+	];
+	if (args.runtime) command.push("--runtime", commandArgument(args.runtime));
+	if (args.subcommand === "rollback" && args.fromRuntime) command.push("--from-runtime", commandArgument(args.fromRuntime));
+	if ("dashboardUrl" in args && args.dashboardUrl) command.push("--dashboard-url", commandArgument(args.dashboardUrl));
+	if (args.yes) command.push("--yes");
+	return command.join(" ");
+}
 async function runInstalledPlatformCommand(args) {
 	if (args.subcommand !== "upgrade" && args.subcommand !== "rollback" && args.subcommand !== "repair" && args.subcommand !== "disable" && args.subcommand !== "enable" && args.subcommand !== "uninstall") throw new Error(`platform: Unsupported lifecycle command ${args.subcommand}.`);
 	assertNoninteractivePlatformMutationAcknowledged(args, process.stdin.isTTY === true);
@@ -35,7 +51,7 @@ async function runInstalledPlatformCommand(args) {
 		timingPrevious = current;
 	};
 	const manifest = await resolveInstalledPlatformManifest(args.selector);
-	const operatorCredential = await resolvePlatformCloudflareCredential();
+	const operatorCredential = await resolvePlatformCloudflareCredential({ savedManagementToken: readInstallationRecoverySecrets(manifest)?.managementApiToken });
 	const operatorClient = new PlatformCloudflareClient(operatorCredential.token);
 	const runtime = args.subcommand === "uninstall" || args.subcommand === "disable" ? null : loadPlatformRuntime(args.runtime);
 	const rollbackSourceRuntime = args.subcommand === "rollback" ? loadPlatformRuntime(args.fromRuntime) : null;
@@ -94,11 +110,16 @@ async function runInstalledPlatformCommand(args) {
 		markPhase("plan");
 		note(formatPlatformInstallPlan(plan), args.subcommand === "upgrade" ? "Upgrade plan" : args.subcommand === "rollback" ? "Rollback plan" : args.subcommand === "enable" ? "Enable plan" : "Repair plan");
 		note([
-			`Version: ${runtime.manifest.platformVersion}`,
+			`Version: ${manifest.platformVersion} → ${runtime.manifest.platformVersion}`,
 			`Source: ${runtime.source}`,
 			`Revision: ${runtime.manifest.sourceRevision ?? "not recorded"}`,
 			`Manifest SHA-256: ${runtime.manifestSha256}`
 		].join("\n"), "Platform runtime");
+		note([
+			manifest.desiredState === "disabled" && args.subcommand !== "enable" ? "Application traffic will stay paused because this installation is disabled." : "Application traffic may pause during a safe cutover. Traffic resumes after verification.",
+			"Saved progress survives an interruption. Resume with the same runtime files.",
+			`Administrator status: ${plan.apiUrl}/admin/status`
+		].join("\n"), "Availability and progress");
 		if (args.plan) {
 			outro("No Cloudflare or local installation state was changed.");
 			return;
@@ -165,6 +186,7 @@ async function runInstalledPlatformCommand(args) {
 				progress?.message(message);
 			},
 			runtime,
+			operation: args.subcommand,
 			replanWorkers: async (recoveryManifest) => (await createPlatformInstallPlan(client, planInput, recoveryManifest, {
 				authoritativeProvisionIntents: true,
 				repairMissing: true,
@@ -183,14 +205,22 @@ async function runInstalledPlatformCommand(args) {
 			progress?.stop(result.waitingForDns || result.waitingForSandboxDrain ? "Platform operation paused; progress is saved." : `Platform ${args.subcommand} complete.`);
 			progress = void 0;
 			if (result.waitingForDns) {
-				note(`Wait for ${deployment.application.zoneName} to become active, then rerun this command.`, "Waiting for nameservers");
+				note(`Wait for ${deployment.application.zoneName} to become active, then resume:\n${platformLifecycleResumeCommand(args, manifest.id)}`, "Waiting for nameservers");
 				return;
 			}
 			if (result.waitingForSandboxDrain) {
-				note("The compatible candidate runtime is live in sandbox-drain maintenance mode and application traffic remains disabled. Preview bounded work with `void platform system sandbox-drain --plan`; follow any returned `nextCursor` with `--cursor '<value>'`. Then apply with `void platform system sandbox-drain --yes` and rerun until it reports DB-backed `complete: true`. Rerun this lifecycle command afterward to enable traffic.", "Waiting for managed Sandbox drain");
+				note([
+					"Application traffic is paused. Saved progress is ready to resume.",
+					"1. Review remaining Sandbox work: void platform system sandbox-drain --plan",
+					"2. Apply: void platform system sandbox-drain --yes (follow nextCursor with --cursor '<value>' until complete: true).",
+					`3. Resume: ${platformLifecycleResumeCommand(args, manifest.id)}`,
+					`Administrator status: ${plan.apiUrl}/admin/status`
+				].join("\n"), "Waiting for managed Sandbox drain");
 				return;
 			}
-			log.success(args.subcommand === "rollback" ? `${deployment.displayName} is running compatible runtime ${runtime.manifest.platformVersion}; PostgreSQL remains at schema ${rollbackSourceRuntime.manifest.database.schemaDigest}.` : `${deployment.displayName} is healthy at ${plan.apiUrl}.`);
+			log.success(`${deployment.displayName}: runtime ${runtime.manifest.platformVersion} ${args.subcommand === "rollback" ? "restored" : "ready"}.`);
+			log.info(result.manifest.desiredState === "disabled" ? "Application traffic remains paused. Enable the installation when you are ready." : `Platform verification passed. Traffic is enabled at ${plan.apiUrl}.`);
+			if (args.subcommand === "rollback") log.info("PostgreSQL migrations were retained; rollback changes the runtime only.");
 			if (result.emailOperationId) log.info(`Shared email routing ready (operation ${result.emailOperationId}).`);
 			if (result.setupPending) {
 				const code = readInstallationRecoverySecrets(result.manifest)?.authBootstrapCode;
@@ -226,8 +256,15 @@ async function runInstalledPlatformCommand(args) {
 		reportResult?.();
 		markPhase("complete");
 	} catch (error) {
+		const operationStarted = progress !== void 0;
 		progress?.error(`Platform ${args.subcommand} failed.`);
 		progress = void 0;
+		if (operationStarted && args.subcommand !== "uninstall" && args.subcommand !== "disable") note([
+			"Traffic may remain paused. Inspect the saved state before continuing:",
+			`void platform status ${commandArgument(manifest.id)}`,
+			"After resolving the error, resume with the same runtime:",
+			platformLifecycleResumeCommand(args, manifest.id)
+		].join("\n"), "Recovery");
 		throw error;
 	} finally {
 		try {
@@ -791,4 +828,4 @@ async function promptForConfirmation(message, initialValue) {
 	return answer;
 }
 //#endregion
-export { resolveInstalledPlatformManifest as a, selectAuthoritativePlatformManifest as c, recoverDurablyMarkedProvisionIntents as i, uninstallPlatform as l, disablePlatform as n, resolvePlatformRuntimeTokenToPreflight as o, isPlatformManifestMonotonicExtension as r, runInstalledPlatformCommand as s, assertPlatformRollbackCompatibility as t, verifyPlatformInstallationOwnership as u };
+export { recoverDurablyMarkedProvisionIntents as a, runInstalledPlatformCommand as c, verifyPlatformInstallationOwnership as d, platformLifecycleResumeCommand as i, selectAuthoritativePlatformManifest as l, disablePlatform as n, resolveInstalledPlatformManifest as o, isPlatformManifestMonotonicExtension as r, resolvePlatformRuntimeTokenToPreflight as s, assertPlatformRollbackCompatibility as t, uninstallPlatform as u };

package/dist/platform-management-Bp6aoH2C.mjs

@@ -0,0 +1,2 @@
+import { c as runInstalledPlatformCommand, d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-BSEc_ZeG.mjs";
+export { runInstalledPlatformCommand, selectAuthoritativePlatformManifest, verifyPlatformInstallationOwnership };

package/dist/{platform-plans-config-BNGKGr4P.mjs → platform-plans-config-B0pOVQyW.mjs}

@@ -1,6 +1,6 @@
-import { B as text, E as confirm, I as select, W as isCancel } from "./dist-CTBk70IR.mjs";
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-DUwumHpQ.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-8KnOVXVd.mjs";
+import { A as confirm, K as select, X as text, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-LmwjxT6q.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-CkmTE3rt.mjs";
 import { stripVTControlCharacters } from "node:util";
 import { PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanId } from "@void/platform/plans";
 import { readFile } from "node:fs/promises";

package/dist/{platform-recovery-D6KSpuFm.mjs → platform-recovery-WOZ95Uze.mjs}

@@ -1,7 +1,7 @@
-import { t as cfAccessHeaders } from "./cf-access-DRsQRe6k.mjs";
-import { a as listInstallationManifests, g as savePlatformConnection, t as acquirePlatformLifecycleLock, v as writeInstallationManifest } from "./platform-registry-QBa4DK32.mjs";
-import { a as REMOTE_INSTALLATION_MANIFEST_KEY, y as createPlatformInstallPlan } from "./platform-lifecycle-9OyBALhH.mjs";
-import { i as recoverDurablyMarkedProvisionIntents, r as isPlatformManifestMonotonicExtension, u as verifyPlatformInstallationOwnership } from "./platform-management-CjwLVQwN.mjs";
+import { _ as savePlatformConnection, a as listInstallationManifests, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-KfNEF84O.mjs";
+import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
+import { a as REMOTE_INSTALLATION_MANIFEST_KEY, y as createPlatformInstallPlan } from "./platform-lifecycle-Dm09JNkn.mjs";
+import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-BSEc_ZeG.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
 //#region src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {

package/dist/{platform-registry-QBa4DK32.mjs → platform-registry-KfNEF84O.mjs}

@@ -1,9 +1,9 @@
 import { a as join, u as resolve } from "./dist-BVqXeR_h.mjs";
 import { closeSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { parsePlatformInstallationManifest } from "@void/platform";
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { homedir, hostname } from "node:os";
 import { Entry } from "@napi-rs/keyring";
-import { parsePlatformInstallationManifest } from "@void/platform";
 //#region src/cli/keyring.ts
 function readKeyringPassword(service, account) {
 	try {
@@ -66,7 +66,7 @@ function parseConnection(value) {
 	const lastUsedAt = String(entry.lastUsedAt ?? "");
 	if (!Number.isFinite(Date.parse(lastUsedAt))) throw new Error("platform: Invalid connection timestamp in the local registry.");
 	const optionalString = (input) => typeof input === "string" && input !== "" ? input : null;
-	const proxyUrl = optionalString(entry.proxyUrl) ?? (apiUrl === "https://api.void.cloud" ? "https://proxy.void.cloud" : apiUrl === "https://api.staging.void.cloud" ? "https://proxy.staging.void.cloud" : null);
+	const proxyUrl = optionalString(entry.proxyUrl);
 	return {
 		accountId: optionalString(entry.accountId),
 		apiUrl,
@@ -428,4 +428,4 @@ function removePlatformConnectionForInstallation(installationId, directory = pla
 	});
 }
 //#endregion
-export { writeKeyringPassword as S, selectPlatformConnection as _, listInstallationManifests as a, deleteKeyringPassword as b, platformCredentialAccount as c, readInstallationRecoverySecrets as d, readPendingInstallationSecrets as f, savePlatformConnection as g, resolveInstallationManifest as h, latestPlatformWorkerCutoverGeneration as i, platformWorkerSecretUpdateIntentState as l, removePlatformConnectionForInstallation as m, assertPlatformInstallationSlugAvailable as n, listPlatformConnections as o, removeInstallationRecoverySecrets as p, getActivePlatformConnection as r, normalizePlatformApiUrl as s, acquirePlatformLifecycleLock as t, promoteInstallationSecrets as u, writeInstallationManifest as v, readKeyringPassword as x, writePendingInstallationSecrets as y };
+export { writeKeyringPassword as C, readKeyringPassword as S, savePlatformConnection as _, listInstallationManifests as a, writePendingInstallationSecrets as b, platformCredentialAccount as c, promoteInstallationSecrets as d, readInstallationRecoverySecrets as f, resolveInstallationManifest as g, removePlatformConnectionForInstallation as h, latestPlatformWorkerCutoverGeneration as i, platformRegistryDirectory as l, removeInstallationRecoverySecrets as m, assertPlatformInstallationSlugAvailable as n, listPlatformConnections as o, readPendingInstallationSecrets as p, getActivePlatformConnection as r, normalizePlatformApiUrl as s, acquirePlatformLifecycleLock as t, platformWorkerSecretUpdateIntentState as u, selectPlatformConnection as v, deleteKeyringPassword as x, writeInstallationManifest as y };

package/dist/{prepare-B5Mkic5u.mjs → prepare-39EvOhI6.mjs}

@@ -1,10 +1,8 @@
-import { N as note, O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
-import { t as prepareProject } from "./prepare-DOsL0CC9.mjs";
+import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { t as prepareProject } from "./prepare-DnaKBi--.mjs";
 //#region src/cli/prepare.ts
 async function runPrepareCommand(root, _args) {
 	console.log();
-	intro(cliTitle("prepare"));
 	const result = await prepareProject(root);
 	if (result.written.length > 0) note(result.written.join("\n"), "Wrote");
 	if (result.removed.length > 0) note(result.removed.join("\n"), "Removed stale files");

package/dist/prepare-CnjcTV2s.mjs

@@ -0,0 +1,2 @@
+import { t as prepareProject } from "./prepare-DnaKBi--.mjs";
+export { prepareProject };

package/dist/{prepare-DOsL0CC9.mjs → prepare-DnaKBi--.mjs}

@@ -4,7 +4,7 @@ import { m as readConfig } from "./config-Br_JZD6u.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B8GeM0RM.mjs";
 import { i as generateDbDts, n as generateQueueTypes, t as generateRouteTypes } from "./route-types-Clm4WD0B.mjs";
 import { t as discoverSchema } from "./discover-BcPPiF1o.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
 import { a as loadLocalEnv } from "./env-_v349JBd.mjs";
 import { t as analyzeApplication } from "./application-routing-B7QEjqSR.mjs";
 import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-Beb2Am5S.mjs";

package/dist/{project-C0Fqu05O.mjs → project-BkbfDs0V.mjs}

@@ -1,60 +1,7 @@
 import { a as join, n as dirname } from "./dist-BVqXeR_h.mjs";
-import { o as listPlatformConnections, s as normalizePlatformApiUrl } from "./platform-registry-QBa4DK32.mjs";
+import { o as listPlatformConnections, s as normalizePlatformApiUrl } from "./platform-registry-KfNEF84O.mjs";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { normalizeApplicationDomain } from "@void/platform";
-//#region src/cli/hosted-platform.ts
-const VOID_CLOUD_PLATFORM = Object.freeze({
-	apiUrl: "https://api.void.cloud",
-	applicationDomain: "void.app",
-	displayName: "Void Cloud",
-	proxyUrl: "https://proxy.void.cloud"
-});
-const VOID_CLOUD_STAGING_PLATFORM = Object.freeze({
-	apiUrl: "https://api.staging.void.cloud",
-	applicationDomain: "staging.void.app",
-	displayName: "Void Cloud staging",
-	proxyUrl: "https://proxy.staging.void.cloud"
-});
-const HOSTED_PLATFORMS = [VOID_CLOUD_PLATFORM, VOID_CLOUD_STAGING_PLATFORM];
-function hostedPlatformForApiUrl(apiUrl) {
-	if (typeof apiUrl !== "string") return null;
-	let normalized;
-	try {
-		const parsed = new URL(apiUrl);
-		if (parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.search || parsed.hash || parsed.pathname !== "/" && parsed.pathname !== "") return null;
-		normalized = parsed.origin;
-	} catch {
-		return null;
-	}
-	return HOSTED_PLATFORMS.find((platform) => platform.apiUrl === normalized) ?? null;
-}
-/** Resolve an old ~/.void/config.json selection without returning credential values. */
-function readLegacyHostedPlatformSelection(configPath = join(homedir(), ".void", "config.json")) {
-	let value = {};
-	try {
-		value = JSON.parse(readFileSync(configPath, "utf8"));
-	} catch {
-		return null;
-	}
-	if (value.api !== void 0) {
-		const platform = hostedPlatformForApiUrl(value.api);
-		return platform ? {
-			...platform,
-			source: "configured-api"
-		} : null;
-	}
-	if (typeof value.token === "string" && value.token !== "") return {
-		...VOID_CLOUD_PLATFORM,
-		source: "legacy-credential"
-	};
-	if (typeof value.stagingToken === "string" && value.stagingToken !== "") return {
-		...VOID_CLOUD_STAGING_PLATFORM,
-		source: "legacy-credential"
-	};
-	return null;
-}
-//#endregion
 //#region src/cli/project.ts
 const PROJECT_FILE = ".void/project.json";
 function readProjectConfigFile(root) {
@@ -83,7 +30,6 @@ function readProjectConfig(root) {
 	if (typeof config.platformUrl === "string") result.platformUrl = normalizePlatformApiUrl(config.platformUrl);
 	if (typeof config.applicationDomain === "string") result.applicationDomain = normalizeApplicationDomain(config.applicationDomain);
 	if (typeof config.proxyUrl === "string") result.proxyUrl = normalizePlatformApiUrl(config.proxyUrl);
-	if (config.voidInternalStaging === true) result.voidInternalStaging = true;
 	return result;
 }
 /**
@@ -112,7 +58,6 @@ function writeDeploymentPlatform(root, platform) {
 	if (typeof existing?.applicationDomain === "string") next.applicationDomain = existing.applicationDomain;
 	if (typeof existing?.proxyUrl === "string") next.proxyUrl = existing.proxyUrl;
 	if (typeof existing?.slug === "string") next.slug = existing.slug;
-	if (existing?.voidInternalStaging === true) next.voidInternalStaging = true;
 	mkdirSync(dirname(filePath), { recursive: true });
 	writeFileSync(filePath, JSON.stringify(next, null, 2) + "\n");
 }
@@ -120,12 +65,18 @@ function writeDeploymentPlatform(root, platform) {
 function writePlatformSelection(root, connection) {
 	const existing = readProjectConfigFile(root);
 	const linked = readProjectConfig(root);
-	const pinnedUrl = isVoidInternalStaging(root) ? VOID_CLOUD_STAGING_PLATFORM.apiUrl : linked ? linked.platformUrl ?? VOID_CLOUD_PLATFORM.apiUrl : null;
+	const pinnedUrl = linked?.platformUrl;
 	if (pinnedUrl && pinnedUrl !== connection.apiUrl) return false;
+	const metadata = { ...existing };
+	delete metadata.voidInternalStaging;
+	if (linked && !pinnedUrl) {
+		delete metadata.projectId;
+		delete metadata.slug;
+	}
 	const filePath = join(root, PROJECT_FILE);
 	mkdirSync(dirname(filePath), { recursive: true });
 	writeFileSync(filePath, JSON.stringify({
-		...existing,
+		...metadata,
 		platform: "void",
 		platformUrl: normalizePlatformApiUrl(connection.apiUrl),
 		applicationDomain: normalizeApplicationDomain(connection.applicationDomain),
@@ -133,32 +84,19 @@ function writePlatformSelection(root, connection) {
 	}, null, 2) + "\n");
 	return true;
 }
-/**
-* Internal-only platform developers' staging switch.
-* This intentionally lives with the project link state, not public void.json.
-*/
-function isVoidInternalStaging(root) {
-	return readProjectConfigFile(root)?.voidInternalStaging === true;
-}
 function readProjectPlatformUrl(root) {
 	const value = readProjectConfigFile(root)?.platformUrl;
 	return typeof value === "string" && value !== "" ? normalizePlatformApiUrl(value) : null;
 }
-function readProjectApplicationDomain(root) {
-	const value = readProjectConfigFile(root)?.applicationDomain;
-	return typeof value === "string" && value !== "" ? normalizeApplicationDomain(value) : null;
+/** A deploy can establish a first link, but must never replace a saved destination. */
+function shouldLinkDeployProject(root, apiUrl) {
+	const platform = readDeploymentPlatform(root);
+	const selectedUrl = readProjectPlatformUrl(root);
+	return !readProjectConfig(root) && platform !== "cloudflare" && platform !== "none" && (!selectedUrl || selectedUrl === normalizePlatformApiUrl(apiUrl));
 }
 /** Resolve the immutable platform identity that every newly linked project records. */
 function attachSelectedPlatform(root, config, platformApiUrl) {
 	const apiUrl = normalizePlatformApiUrl(platformApiUrl);
-	const hosted = hostedPlatformForApiUrl(apiUrl);
-	if (hosted) return {
-		...config,
-		applicationDomain: hosted.applicationDomain,
-		platformUrl: hosted.apiUrl,
-		proxyUrl: hosted.proxyUrl,
-		...isVoidInternalStaging(root) && hosted.apiUrl === VOID_CLOUD_STAGING_PLATFORM.apiUrl ? { voidInternalStaging: true } : {}
-	};
 	const connection = listPlatformConnections().find((entry) => entry.apiUrl === apiUrl);
 	if (connection?.applicationDomain && connection.proxyUrl) return {
 		...config,
@@ -168,10 +106,6 @@ function attachSelectedPlatform(root, config, platformApiUrl) {
 	};
 	throw new Error(`platform: No verified metadata is registered for ${apiUrl}. Run \`void connect ${apiUrl}\` before linking a project.`);
 }
-function isLegacyVoidCloudProject(root) {
-	const config = readProjectConfigFile(root);
-	return typeof config?.projectId === "string" && typeof config.slug === "string" && typeof config.platformUrl !== "string";
-}
 /**
 * Write the project config to the project root.
 */
@@ -189,7 +123,6 @@ function writeProjectConfig(root, config) {
 	else if (typeof existing?.applicationDomain === "string") next.applicationDomain = existing.applicationDomain;
 	if (config.proxyUrl) next.proxyUrl = normalizePlatformApiUrl(config.proxyUrl);
 	else if (typeof existing?.proxyUrl === "string") next.proxyUrl = existing.proxyUrl;
-	if (config.voidInternalStaging === true || existing?.voidInternalStaging === true) next.voidInternalStaging = true;
 	mkdirSync(dirname(filePath), { recursive: true });
 	writeFileSync(filePath, JSON.stringify(next, null, 2) + "\n");
 }
@@ -206,4 +139,4 @@ function removeProjectConfig(root) {
 	}
 }
 //#endregion
-export { readProjectApplicationDomain as a, removeProjectConfig as c, writeProjectConfig as d, VOID_CLOUD_PLATFORM as f, readDeploymentPlatform as i, writeDeploymentPlatform as l, readLegacyHostedPlatformSelection as m, isLegacyVoidCloudProject as n, readProjectConfig as o, VOID_CLOUD_STAGING_PLATFORM as p, isVoidInternalStaging as r, readProjectPlatformUrl as s, attachSelectedPlatform as t, writePlatformSelection as u };
+export { removeProjectConfig as a, writePlatformSelection as c, readProjectPlatformUrl as i, writeProjectConfig as l, readDeploymentPlatform as n, shouldLinkDeployProject as o, readProjectConfig as r, writeDeploymentPlatform as s, attachSelectedPlatform as t };

package/dist/project-IOjBU8R6.mjs

@@ -0,0 +1,2 @@
+import { l as writeProjectConfig, t as attachSelectedPlatform } from "./project-BkbfDs0V.mjs";
+export { attachSelectedPlatform, writeProjectConfig };

package/dist/{project-cmd-CNzrqvBv.mjs → project-cmd-Bs5A392E.mjs}

@@ -1,12 +1,11 @@
-import { c as getToken, s as getSiteDomain } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, c as import_picocolors, d as tablePrefix, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform } from "./project-BkbfDs0V.mjs";
+import { c as getToken, s as getSiteDomain } from "./auth-7wuZ5ob8.mjs";
+import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { c as import_picocolors, d as tablePrefix, i as dim, o as formatCount } from "./output-BBsUwdyT.mjs";
 //#region src/cli/projects.ts
 async function runProjectsCommand(root) {
 	console.log();
-	intro(cliTitle("project list"));
 	const token = getToken(root);
 	if (!token) {
 		log.error("Not logged in. Run `void account login` first.");
@@ -19,7 +18,7 @@ async function runProjectsCommand(root) {
 	}
 	const rows = projects.map((p) => ({
 		slug: p.slug,
-		role: p.role ?? "owner",
+		role: p.role,
 		appType: p.type ?? "worker",
 		url: p.custom_domain ? `https://${p.custom_domain}` : p.url ?? `https://${p.slug}.${getSiteDomain(root)}`
 	}));
@@ -32,84 +31,84 @@ async function runProjectsCommand(root) {
 	console.log(prefix);
 	console.log(header);
 	for (const line of lines) console.log(line);
-	outro(`${projects.length} project(s)`);
+	outro(formatCount(projects.length, "project"));
 }
 //#endregion
 //#region src/cli/project-cmd.ts
 async function runProjectCommand(root, args) {
 	const cloudflare = readDeploymentPlatform(root) === "cloudflare";
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-CZj0dzKY.mjs");
+		const { runListCommand } = await import("./list-eEWVJEPn.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare apps are identified by cloudflare.name in void.config.ts and do not need linking.");
-		const { runLink } = await import("./link-CDqqCjFl.mjs");
+		const { runLink } = await import("./link-CXOlqh2F.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") {
 		if (cloudflare) {
-			const { runListCommand } = await import("./list-CZj0dzKY.mjs");
+			const { runListCommand } = await import("./list-eEWVJEPn.mjs");
 			return runListCommand(root);
 		}
 		return runProjectsCommand(root);
 	}
 	if (args.subcommand === "token") {
 		if (cloudflare) throw new Error("project: CI deploy credentials are available only for Void platform projects.");
-		const { runProjectTokenCommand } = await import("./project-token-CTDYU0Cc.mjs");
+		const { runProjectTokenCommand } = await import("./project-token-CP01Jna6.mjs");
 		return runProjectTokenCommand(root, args);
 	}
 	if (args.subcommand === "team") {
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-DofyZuY7.mjs");
+			const { printHelpPage } = await import("./help-DPGBwomV.mjs");
 			printHelpPage(["project", "team"]);
 			return;
 		}
 		const accountInvitationAction = args.action === "pending" || args.action === "accept" || args.action === "decline";
 		if (cloudflare && !accountInvitationAction) throw new Error("project: Teams are available only for projects hosted on a Void platform, not direct Cloudflare deployments.");
-		const { runProjectTeamCommand } = await import("./project-team-DQOWPfQT.mjs");
+		const { runProjectTeamCommand } = await import("./project-team-ohAWWaew.mjs");
 		return runProjectTeamCommand(root, args);
 	}
 	if (args.subcommand === "zero-trust") {
 		if (cloudflare) throw new Error("project: Zero Trust overrides are available only for projects hosted on a Void platform.");
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-DofyZuY7.mjs");
+			const { printHelpPage } = await import("./help-DPGBwomV.mjs");
 			printHelpPage(["project", "zero-trust"]);
 			return;
 		}
 		const action = args.action;
-		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-BNAkW-_0.mjs");
+		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-BzkVgx35.mjs");
 		return runProjectZeroTrustCommand(root, {
 			...args,
 			action
 		});
 	}
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-CUZ6t9t3.mjs");
+		const { runLogsCommand } = await import("./logs-DnxVX7TR.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "requests") {
 		if (cloudflare) throw new Error("project: Historical request analytics require the Void platform. Use `void project logs` for a live Cloudflare tail.");
-		const { runRequestsCommand } = await import("./requests-MhxYnau8.mjs");
+		const { runRequestsCommand } = await import("./requests-B3PBuGlX.mjs");
 		return runRequestsCommand(root, args.range, args.status || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-CJ6iSDoU.mjs");
+		const { runRollbackCommand } = await import("./rollback-DDub9GsO.mjs");
 		return runRollbackCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "cancel") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare deploys activate only after readiness succeeds, so there is no remote build to cancel.");
-		const { runCancelDeployCommand } = await import("./cancel-deploy-abUxpP2n.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-CYoZmcmR.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
 		if (cloudflare) throw new Error("project: Refusing to delete Cloudflare resources through this command. Direct deployments are additive and existing resources may be shared.");
-		const { runDeleteCommand } = await import("./delete-NvbiyeJf.mjs");
+		const { runDeleteCommand } = await import("./delete-pKMVsrpJ.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare ISR cache purge is not available yet; redeploy or purge the configured KV namespace explicitly.");
-		const { runPurgeCacheCommand } = await import("./cache-C4MvnrMH.mjs");
+		const { runPurgeCacheCommand } = await import("./cache-TcZnBLtH.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{project-team-DQOWPfQT.mjs → project-team-ohAWWaew.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken, i as getAccountCredential } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { N as note, O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient, o as parsePlatformErrorBody, s as platformErrorMessage, t as PlatformApiError } from "./client-RV8NVeB8.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken, i as getAccountCredential } from "./auth-7wuZ5ob8.mjs";
+import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-RsPo8wsP.mjs";
+import { o as formatCount } from "./output-BBsUwdyT.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/project-team.ts
 function clean(value) {
@@ -56,7 +56,6 @@ function invitationResponseError(error, apiUrl) {
 }
 async function runProjectTeamCommand(root, args) {
 	console.log();
-	intro(cliTitle(`project team ${args.action}`));
 	const { apiUrl, token } = args.action === "pending" || args.action === "accept" || args.action === "decline" ? getAccountCredential() : {
 		apiUrl: void 0,
 		token: getToken(root)
@@ -74,7 +73,7 @@ async function runProjectTeamCommand(root, args) {
 			return;
 		}
 		note(invitationLines(invitations, true), "Pending Project Invitations");
-		outro(`${invitations.length} invitation(s)`);
+		outro(formatCount(invitations.length, "invitation"));
 		return;
 	}
 	if (args.action === "accept" || args.action === "decline") {
@@ -91,7 +90,7 @@ async function runProjectTeamCommand(root, args) {
 	if (args.action === "list") {
 		const members = await client.listProjectMembers(projectId);
 		note(memberLines(members), "Project Team");
-		outro(`${members.length} member(s)`);
+		outro(formatCount(members.length, "member"));
 		return;
 	}
 	if (args.action === "invitations") {
@@ -101,7 +100,7 @@ async function runProjectTeamCommand(root, args) {
 			return;
 		}
 		note(invitationLines(invitations, false), "Project Invitations");
-		outro(`${invitations.length} invitation(s)`);
+		outro(formatCount(invitations.length, "invitation"));
 		return;
 	}
 	if (args.action === "invite") {

package/dist/{project-token-CTDYU0Cc.mjs → project-token-CP01Jna6.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { a as dim, d as tablePrefix, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { d as tablePrefix, i as dim } from "./output-BBsUwdyT.mjs";
 import { r as resolveProjectBySlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/project-token.ts
 async function resolveTarget(root, args) {
@@ -39,10 +39,7 @@ function printIssued(args, result, apiUrl) {
 	console.log(`\nVOID_TOKEN=${result.token}\nVOID_API_URL=${apiUrl}\n`);
 }
 async function runProjectTokenCommand(root, args) {
-	if (!args.json) {
-		console.log();
-		intro(cliTitle(`project token ${args.action}`));
-	}
+	if (!args.json) console.log();
 	const { client, projectId, slug } = await resolveTarget(root, args);
 	if (args.action === "create") printIssued(args, await client.createProjectToken(projectId, {
 		...args.name ? { name: args.name } : {},

package/dist/{project-zero-trust-BNAkW-_0.mjs → project-zero-trust-BzkVgx35.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { N as note, O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { l as sanitizeTerminalText, r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { l as sanitizeTerminalText } from "./output-BBsUwdyT.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 //#region src/cli/project-zero-trust.ts
 async function resolveTarget(root, args) {
@@ -44,7 +44,6 @@ function statusLines(result) {
 }
 async function runProjectZeroTrustCommand(root, args) {
 	console.log();
-	intro(cliTitle(`project zero-trust ${args.action}`));
 	const { client, projectId, slug } = await resolveTarget(root, args);
 	if (args.action === "status") {
 		note(statusLines(await client.getProjectZeroTrust(projectId)), slug);