void 0.23.0 → 0.25.0

package/dist/{dev-inbox-P0u4tM8Y.mjs → dev-inbox-D64ZKUod.mjs}

@@ -207,12 +207,12 @@ const DEFAULT_BUFFER_LIMIT = 100;
 * workerd — so that is the dev server's own heap.
 */
 const DEFAULT_BUFFER_BYTES = 67108864;
+const inboxGlobal = globalThis;
 function registry() {
-	const g = globalThis;
-	let r = g[SINK_KEY];
+	let r = inboxGlobal[SINK_KEY];
 	if (!r) {
 		r = { sinks: /* @__PURE__ */ new Set() };
-		g[SINK_KEY] = r;
+		inboxGlobal[SINK_KEY] = r;
 	}
 	return r;
 }
@@ -236,15 +236,14 @@ function hasActiveSink() {
 }
 /** Get or create the shared dev-server ring buffer. */
 function getDevBuffer(limit = DEFAULT_BUFFER_LIMIT) {
-	const g = globalThis;
-	let b = g[BUFFER_KEY];
+	let b = inboxGlobal[BUFFER_KEY];
 	if (!b) {
 		b = {
 			limit,
 			bytes: 0,
 			items: []
 		};
-		g[BUFFER_KEY] = b;
+		inboxGlobal[BUFFER_KEY] = b;
 	}
 	return b;
 }

package/dist/{domain-y5Tvydvo.mjs → domain-D3uA9ize.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { N as note, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { B as note, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { c as import_picocolors } from "./output-BBsUwdyT.mjs";
 //#region src/cli/domain.ts
 async function runDomainCommand(root, args) {
 	const platform = readDeploymentPlatform(root);
@@ -40,7 +40,7 @@ async function runDomainCommand(root, args) {
 }
 async function runCloudflareDomainCommand(root, args) {
 	if (args.projectSlug) throw new Error("domain: --project selects a Void platform project and is not used for direct Cloudflare apps.");
-	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-AiWashgg.mjs");
+	const { changeCloudflareDomain, listCloudflareDomains } = await import("./cloudflare-operations-BhbK6yTq.mjs");
 	if (args.subcommand === "add") {
 		const result = await changeCloudflareDomain(root, args.hostname, "add");
 		log.success(result.modified ? `Domain ${args.hostname} added and activated on Cloudflare.` : `Domain ${args.hostname} is already configured.`);
@@ -123,7 +123,7 @@ function computeRollup(status) {
 	};
 	if (status.cf_status === "pending_issuance" || status.cf_status === "active" && status.ssl_status !== "active") return {
 		state: "issuing_cert",
-		diagnostic: status.cname_target ? "Cloudflare is issuing the SSL certificate automatically (typically <5 minutes). If this persists, confirm the traffic CNAME below is published." : "Cloudflare is issuing the SSL certificate automatically (typically <5 minutes)."
+		diagnostic: "Cloudflare is issuing the SSL certificate automatically (typically <5 minutes). If this persists, confirm the traffic CNAME below is published."
 	};
 	if (status.cf_status === "pending_deployment") return {
 		state: "deploying_cert",
@@ -157,7 +157,7 @@ async function domainStatus(client, projectId, hostname, verbose) {
 	note(rollupLines.join("\n"), "Domain Status");
 	let cnameSection;
 	let ownershipSection;
-	if (status.cname_target && status.ssl_status !== "active") cnameSection = `CNAME (traffic)\n    ${status.hostname} → ${status.cname_target}`;
+	if (status.ssl_status !== "active") cnameSection = `CNAME (traffic)\n    ${status.hostname} → ${status.cname_target}`;
 	if (status.ownership_verification) ownershipSection = `TXT (ownership verification)\n    ${status.ownership_verification.name} → ${status.ownership_verification.value}`;
 	const pendingRecords = [cnameSection, ownershipSection].filter((s) => s !== void 0);
 	if (pendingRecords.length > 0) note(pendingRecords.join("\n\n"), pendingRecords.length === 1 ? "Add this DNS record to your provider" : "Add these DNS records to your provider");

package/dist/{email-B3umsW75.mjs → email-z3o2cwjH.mjs}

@@ -2,13 +2,13 @@ import { a as join } from "./dist-BVqXeR_h.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
 import { m as readConfig } from "./config-Br_JZD6u.mjs";
 import { a as scanEmailHandlersSync } from "./email--tEtMoj_.mjs";
-import { L as resolveDeployTransport, O as isWranglerNonInteractiveOrCI, X as runWranglerAuthToken, _ as deriveWorkerName, _t as createNodeEmailDns, bt as renderAddressMap, gt as applyEmailSetup, h as createDeployWranglerRunner, k as loadProvisionModule, v as discoverRootWranglerConfig, vt as findEmailConfigConflicts, xt as renderEmailChecklist, yt as preflightEmail } from "./deploy-DzAIwqNU.mjs";
-import { c as getToken, d as openBrowser } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { A as writeProvisionedWranglerConfig } from "./wrangler-7K-bW_DL.mjs";
-import { E as confirm, F as password, N as note, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient, t as PlatformApiError } from "./client-RV8NVeB8.mjs";
-import { c as import_picocolors, i as createSpinner } from "./output-Dm_A4Tbv.mjs";
+import { B as resolveDeployTransport, F as isWranglerNonInteractiveOrCI, G as deriveWorkerName, I as runWranglerAuthToken, N as createDeployWranglerRunner, d as applyEmailSetup, f as createNodeEmailDns, g as renderEmailChecklist, h as renderAddressMap, j as discoverRootWranglerConfig, m as preflightEmail, p as findEmailConfigConflicts, q as loadProvisionModule } from "./deploy-DfsAe-T0.mjs";
+import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { A as writeProvisionedWranglerConfig } from "./wrangler-DhUerFkW.mjs";
+import { c as getToken, u as openBrowser } from "./auth-7wuZ5ob8.mjs";
+import { A as confirm, B as note, L as log, U as password, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-RsPo8wsP.mjs";
+import { c as import_picocolors, r as createSpinner } from "./output-BBsUwdyT.mjs";
 import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { execSync } from "node:child_process";
@@ -387,7 +387,7 @@ async function emailDomainAdd(client, projectId, rawDomain, subdomain, deps = {}
 				"Create the token in three clicks: Continue to summary → Create Token → Copy.",
 				"Watching the clipboard for it — nothing is read until you copy, and it is cleared afterwards.",
 				"(Enter pastes it yourself instead.)",
-				`If the browser didn't open, visit:\n${import_picocolors.default.cyan(url)}`
+				`If the browser didn't open, visit:\n${import_picocolors.default.blue(url)}`
 			].join("\n"));
 			const spinner = watchSpinner;
 			const deadline = Date.now() + (deps.watchTimeoutMs ?? 6e5);

package/dist/{env-BS6qYHDb.mjs → env-3Q8-_2IH.mjs}

@@ -1,16 +1,14 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { c as getToken } from "./auth-CSkdO2Bb.mjs";
-import { i as readDeploymentPlatform, o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { r as generateEnvTypes, t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
-import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-BPn7vk-V.mjs";
-import { N as note, O as intro, P as outro, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient } from "./client-RV8NVeB8.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken } from "./auth-7wuZ5ob8.mjs";
+import { r as generateEnvTypes, t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
+import { d as formatEnvReport, g as validateProdEnv, u as fetchRemoteSecretNames } from "./env-validation-vBSQ8gw5.mjs";
+import { B as note, H as outro, L as log } from "./prompts-6OSVA7DJ.mjs";
+import { r as PlatformClient } from "./client-RsPo8wsP.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/env.ts
 async function runEnvCommand(root, args) {
 	console.log();
-	intro(cliTitle(`env ${args.subcommand}`));
 	if (args.subcommand === "check") {
 		await runCheck(root, args.useRemoteSecrets);
 		return;
@@ -26,7 +24,7 @@ async function runCheck(root, useRemoteSecrets) {
 		const platform = readDeploymentPlatform(root);
 		if (platform === "none") throw new Error("env: Deployment is disabled. Run `void init` to choose a platform.");
 		if (platform === "cloudflare") {
-			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-AiWashgg.mjs");
+			const { listCloudflareSecrets, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BhbK6yTq.mjs");
 			remoteSecrets = await listCloudflareSecrets(resolveCloudflareOperationContext(root));
 		} else {
 			const token = getToken(root);

package/dist/{env-types-C2_bIk_b.mjs → env-types-D5kds_OZ.mjs}

@@ -1,6 +1,6 @@
 import { l as relative } from "./dist-BVqXeR_h.mjs";
 import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
-import { i as voidWarn } from "./log-ChfPKsVd.mjs";
+import { i as voidWarn } from "./log-vqY3pqwI.mjs";
 import { existsSync } from "node:fs";
 //#region src/codegen/env-types.ts
 /** Roots already warned about duplicate env.ts files — dedupes noisy repeat calls. */

package/dist/{env-validation-DbTg7-ar.mjs → env-validation-cZBvGWaP.mjs}

@@ -1,2 +1,2 @@
-import { a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars, r as SelfHostSchemaError } from "./env-validation-BPn7vk-V.mjs";
+import { a as computeInvalidEmittedKeys, c as deriveSelfHostSchemaFacts, p as readEmittedWorkerVars, r as SelfHostSchemaError } from "./env-validation-vBSQ8gw5.mjs";
 export { SelfHostSchemaError, computeInvalidEmittedKeys, deriveSelfHostSchemaFacts, readEmittedWorkerVars };

package/dist/{env-validation-BPn7vk-V.mjs → env-validation-vBSQ8gw5.mjs}

@@ -1,12 +1,12 @@
 import { a as join, n as dirname, u as resolve } from "./dist-BVqXeR_h.mjs";
-import { i as voidWarn } from "./log-ChfPKsVd.mjs";
-import { t as findEnvFile } from "./env-types-C2_bIk_b.mjs";
+import { i as voidWarn } from "./log-vqY3pqwI.mjs";
+import { t as findEnvFile } from "./env-types-D5kds_OZ.mjs";
 import { a as loadLocalEnv, i as isClientEnvKey, r as findLegacyEnvFiles } from "./env-_v349JBd.mjs";
 import { c as resolveCloudflareOperationArgv, n as decodeCloudflareOperationResult, r as encodeCloudflareOperation } from "./cloudflare-process-B-wekeR6.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { pathToFileURL } from "node:url";
-import { spawn } from "node:child_process";
 import { parse } from "jsonc-parser";
+import { spawn } from "node:child_process";
 //#region src/host/load-user-env.ts
 /**
 * Loader for the user's `env.ts`.

package/dist/gen-ById9r2j.mjs

@@ -0,0 +1,2 @@
+import { r as runGenCommand } from "./gen-NjwoG9FK.mjs";
+export { runGenCommand };

package/dist/{gen-B580--vC.mjs → gen-NjwoG9FK.mjs}

@@ -3,10 +3,9 @@ import { n as readProjectPaths } from "./project-paths-GgcMozYz.mjs";
 import { m as readConfig, u as getDatabaseDialect } from "./config-Br_JZD6u.mjs";
 import { n as readJournal, t as collectMigrations } from "./collect-DiTn9yr6.mjs";
 import { n as ensureProjectTsconfig } from "./project-tsconfig-B8GeM0RM.mjs";
-import { I as select, O as intro, P as outro, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { t as writeDrizzleConfig } from "./config-D8MOgiQV.mjs";
+import { H as outro, K as select, L as log, O as cancel, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
 import { r as listDrizzleArtifacts, t as assertJournalCoherence } from "./validate-ctOrgiS3.mjs";
-import { r as cliTitle } from "./output-Dm_A4Tbv.mjs";
+import { t as writeDrizzleConfig } from "./config-D8MOgiQV.mjs";
 import { t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-BV4AzNul.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -15,7 +14,6 @@ import { spawnSync } from "node:child_process";
 const drizzleKitBin = join(fileURLToPath(import.meta.resolve("drizzle-kit")), "..", "bin.cjs");
 async function runGenCommand(root, args) {
 	console.log();
-	intro(cliTitle("gen"));
 	if (args.subcommand === "model") await runModel(root, args.name, args.columns);
 	else if (args.subcommand === "migration") runMigration(root, args.name);
 	else if (args.subcommand === "route") runRoute(root, args.path, args.methods);

package/dist/{github-cmd-v45BdfKX.mjs → github-cmd-DquUq-b1.mjs}

@@ -1,8 +1,8 @@
-import { c as getToken, d as openBrowser, n as createCodeChallenge, r as createCodeVerifier, t as awaitBrowserCallback } from "./auth-CSkdO2Bb.mjs";
-import { o as readProjectConfig } from "./project-C0Fqu05O.mjs";
-import { B as text, E as confirm, I as select, T as cancel, W as isCancel, j as log } from "./dist-CTBk70IR.mjs";
-import { n as PlatformClient, o as parsePlatformErrorBody, s as platformErrorMessage, t as PlatformApiError } from "./client-RV8NVeB8.mjs";
-import { c as import_picocolors } from "./output-Dm_A4Tbv.mjs";
+import { r as readProjectConfig } from "./project-BkbfDs0V.mjs";
+import { c as getToken, n as createCodeChallenge, r as createCodeVerifier, t as awaitBrowserCallback, u as openBrowser } from "./auth-7wuZ5ob8.mjs";
+import { A as confirm, K as select, L as log, O as cancel, X as text, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-RsPo8wsP.mjs";
+import { c as import_picocolors } from "./output-BBsUwdyT.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BG5ORGID.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
 import { randomBytes } from "node:crypto";
@@ -145,7 +145,7 @@ async function runInstall(root, client, linkIdentity = runGithubLink) {
 			}
 		} else throw err;
 	}
-	log.message(`Open this URL to install the Void GitHub App:\n${import_picocolors.default.cyan(url)}`);
+	log.message(`Open this URL to install the Void GitHub App:\n${import_picocolors.default.blue(url)}`);
 	const { execFile } = await import("node:child_process");
 	openBrowser(url, execFile);
 	log.message("After installing, run `void github connect` to link a repository to your project.");
@@ -173,7 +173,7 @@ async function runGithubLink(root, client) {
 				return url;
 			},
 			describeError: (p) => p.get("error") ? "GitHub authorization failed." : null,
-			onUrl: (url) => log.message(`Open this URL to link your GitHub account:\n${import_picocolors.default.cyan(url)}`),
+			onUrl: (url) => log.message(`Open this URL to link your GitHub account:\n${import_picocolors.default.blue(url)}`),
 			finalize: async (params) => {
 				const linkCode = params.get("link_code");
 				if (!linkCode) throw new Error("github: link callback did not return a link code.");
@@ -214,7 +214,7 @@ async function performGithubJoin(client) {
 			return url;
 		},
 		describeError: (p) => p.get("error") ? "GitHub authorization failed." : null,
-		onUrl: (url) => log.message(`Open this URL to join your organization's shared GitHub App installations:\n${import_picocolors.default.cyan(url)}`),
+		onUrl: (url) => log.message(`Open this URL to join your organization's shared GitHub App installations:\n${import_picocolors.default.blue(url)}`),
 		finalize: async (params) => {
 			const joinCode = params.get("join_code");
 			if (!joinCode) throw new Error("github: join callback did not return a join code.");
@@ -280,7 +280,7 @@ async function runGithubConnectAuthorize(client, installationId, repoFullName) {
 			if (e === "repo_not_accessible") return `You don't have access to ${repoFullName} under this installation on GitHub.`;
 			return e ? "GitHub authorization failed." : null;
 		},
-		onUrl: (url) => log.message(`Open this URL to authorize access to ${repoFullName}:\n${import_picocolors.default.cyan(url)}`),
+		onUrl: (url) => log.message(`Open this URL to authorize access to ${repoFullName}:\n${import_picocolors.default.blue(url)}`),
 		finalize: async (params) => {
 			const grant = params.get("connect_grant");
 			if (!grant) throw new Error("github: connect authorization did not return a grant.");
@@ -303,8 +303,8 @@ async function promptRepoFullName(root) {
 	const input = await text({
 		message: "Repository (owner/repo):",
 		placeholder: gitDefault ?? "owner/repo",
-		initialValue: gitDefault ?? "",
-		validate: (value) => /^[^/\s]+\/[^/\s]+$/.test((value ?? "").trim()) ? void 0 : "Enter the repository as owner/repo."
+		defaultValue: gitDefault ?? void 0,
+		validate: (value) => /^[^/\s]+\/[^/\s]+$/.test((value || gitDefault || "").trim()) ? void 0 : "Enter the repository as owner/repo."
 	});
 	if (isCancel(input)) {
 		cancel("Cancelled.");
@@ -447,7 +447,7 @@ async function runConnect(root, client, args) {
 		const input = await text({
 			message: "Branch to deploy from:",
 			placeholder: branchDefault,
-			initialValue: branchDefault
+			defaultValue: branchDefault
 		});
 		if (isCancel(input)) {
 			cancel("Cancelled.");
@@ -483,7 +483,7 @@ async function runConnect(root, client, args) {
 		const input = await text({
 			message: "Deploy workflow file:",
 			placeholder: DEFAULT_WORKFLOW_PATH,
-			initialValue: DEFAULT_WORKFLOW_PATH,
+			defaultValue: DEFAULT_WORKFLOW_PATH,
 			validate(value) {
 				const v = (value ?? "").trim();
 				if (v.length === 0 || isValidWorkflowPath(v)) return;
@@ -505,9 +505,8 @@ async function runConnect(root, client, args) {
 		workflowPath,
 		...extra
 	});
-	let connection;
 	try {
-		connection = await attemptConnect();
+		await attemptConnect();
 	} catch (err) {
 		if (!(err instanceof PlatformApiError)) throw err;
 		if (err.status === 403 && err.code === "connect_authorization_required") {
@@ -517,7 +516,7 @@ async function runConnect(root, client, args) {
 			}
 			const grant = await runGithubConnectAuthorize(client, installation.installation_id, repoFullName);
 			try {
-				connection = await attemptConnect({
+				await attemptConnect({
 					connectGrant: grant.connectGrant,
 					codeVerifier: grant.codeVerifier
 				});
@@ -537,10 +536,6 @@ async function runConnect(root, client, args) {
 			throw err;
 		}
 	}
-	if (workflowPath !== void 0 && connection.workflow_path !== workflowPath) {
-		log.error(`connect: server did not apply workflow path ${workflowPath} (got ${connection.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
-		process.exit(1);
-	}
 	log.success(`Connected ${repoFullName} (${branch}) → project. Push to ${branch} to deploy.`);
 }
 async function runGithubUpdate(root, client, args) {
@@ -677,10 +672,6 @@ async function runGithubUpdate(root, client, args) {
 		}
 		throw err;
 	}
-	if (patch.workflowPath !== void 0 && updated.workflow_path !== patch.workflowPath) {
-		log.error(`update: server did not apply workflow path ${patch.workflowPath} (got ${updated.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
-		process.exit(1);
-	}
 	log.success(`Updated ${updated.repo_full_name} → branch ${updated.branch}, executor ${updated.build_executor}, workflow ${updated.workflow_path}.`);
 }
 /**

package/dist/{headers-DWi2IXWx.mjs → headers-2rKda9Y6.mjs}

@@ -1,6 +1,6 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
 import { a as convertFallbacksConfig, c as convertRewritesConfig, f as isProtocolRelative, l as countSplats, n as VALID_REDIRECT_STATUSES, o as convertHeadersConfig, p as parseHostPrefixedSource, s as convertRedirectsConfig } from "./config-Br_JZD6u.mjs";
-import { i as voidWarn } from "./log-ChfPKsVd.mjs";
+import { i as voidWarn } from "./log-vqY3pqwI.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/headers.ts
 /**

package/dist/help-DPGBwomV.mjs

@@ -0,0 +1,2 @@
+import { r as printHelpPage } from "./help-DRZXC4fj.mjs";
+export { printHelpPage };

package/dist/{help-daGKjXGk.mjs → help-DRZXC4fj.mjs}

@@ -1,8 +1,8 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { N as note, P as outro } from "./dist-CTBk70IR.mjs";
+import { B as note, H as outro } from "./prompts-6OSVA7DJ.mjs";
 import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
-import { c as import_picocolors, s as helpLine, t as categoryTitle, u as sectionTitle } from "./output-Dm_A4Tbv.mjs";
-import { n as operatorGroups, t as operatorCommands } from "./operator-args-CLgKGlwU.mjs";
+import { c as import_picocolors, s as helpLine, t as categoryTitle, u as sectionTitle } from "./output-BBsUwdyT.mjs";
+import { n as operatorGroups, t as operatorCommands } from "./operator-args-CAVcmwUt.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/ascii.ts
 const asciiArts = [
@@ -82,7 +82,7 @@ function operatorHelpTree() {
 					})),
 					...(entry.booleans ?? []).map((flag) => ({
 						command: `--${flag}`,
-						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : flag === "ended" ? "Attest that the original provider execution has ended" : flag === "protect-new-projects" ? "Protect newly created projects by default" : flag === "check" && group === "zero-trust" ? "Also check the saved settings against Cloudflare Access (several API calls)" : flag === "token-stdin" && group === "zero-trust" ? "Read the Access management API token from stdin" : flag === "token-stdin" && group === "email" ? entry.action === "domain-remove" ? "Read a replacement Cloudflare token for blocked project cleanup from stdin" : "Read a scoped Cloudflare API token from stdin" : "Read a full API session from stdin for explicit operator session exchange"
+						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : flag === "ended" ? "Attest that the original provider execution has ended" : flag === "public-apps" ? "Manage public app rules without identity policies" : flag === "protect-new-projects" ? "Protect newly created projects by default" : flag === "check" && group === "zero-trust" ? "Also check the saved settings against Cloudflare Access (several API calls)" : flag === "token-stdin" && group === "zero-trust" ? "Read the Access management API token from stdin" : flag === "token-stdin" && group === "email" ? entry.action === "domain-remove" ? "Read a replacement Cloudflare token for blocked project cleanup from stdin" : "Read a scoped Cloudflare API token from stdin" : "Read a full API session from stdin for explicit operator session exchange"
 					}))
 				]
 			}]))
@@ -607,6 +607,10 @@ const HELP_TREE = {
 						command: "--no-access-protection",
 						description: "Skip Cloudflare Access protection"
 					},
+					{
+						command: "--app-access <public|platform|custom>",
+						description: "Choose public apps, reuse platform Access, or select separate app policies"
+					},
 					{
 						command: "--hyperdrive <create|id>",
 						description: "Create Hyperdrive or use the specified existing configuration"

package/dist/{inbound-aVHEUhKo.mjs → inbound-fRkqcXaC.mjs}

@@ -91,7 +91,7 @@ async function parseEmail(message) {
 const proxyRawCache = /* @__PURE__ */ new WeakMap();
 /**
 * Remove the platform-injected `<slug>+` prefix from a recipient address.
-* The platform's shared sender (e.g. `mail.void.cloud`) rewrites every recipient to
+* The platform's shared sender (e.g. `mail.example.com`) rewrites every recipient to
 * `<slug>+<tag>@<domain>`; user handlers expect `<tag>@<domain>`. If the
 * slug is unknown, missing, or doesn't match the local-part prefix, the
 * address is returned unchanged so callers without slug context (e.g. the

package/dist/index.d.mts

@@ -7,20 +7,7 @@ import { Plugin } from "vite";
 //#region src/router/parse-filename.d.ts
 type RouteEnvironment = "dev" | "prod";
 //#endregion
-//#region src/index.d.ts
-/**
- * Decide whether to inject a Workers AI binding into the built wrangler config.
- *
- * Builds use the production binding. During dev, a project explicitly saved
- * with the direct Cloudflare destination uses Cloudflare's remote binding;
- * managed and unsaved projects keep using the Void HTTPS proxy.
- *
- * `!resolvedAi` is load-bearing: mergeBindings' return is defu-merged over the
- * resolved root-wrangler config and wins, so skipping when the user already
- * declared an `ai` binding avoids clobbering theirs. `!resultAi` is harmless
- * defense-in-depth (nothing else in mergeBindings sets `result.ai`).
- */
-export declare function shouldBindWorkersAi(command: string, needsAI: boolean, resolvedAi: unknown, resultAi: unknown, directCloudflareDev?: boolean): boolean;
+//#region src/plugin-binding-utils.d.ts
 /**
  * Decide whether to inject the `void dev` email-inbox loopback var.
  *
@@ -43,8 +30,25 @@ export declare function shouldBindWorkersAi(command: string, needsAI: boolean, r
  * only arm a path that must then fail; gate on it instead.
  */
 export declare function shouldInjectEmailDevInboxVar(routeEnvironment: RouteEnvironment, needsEmail: boolean | undefined, assetsBinding: string | undefined): boolean;
+//#endregion
+//#region src/plugin-ai-setup.d.ts
+/**
+ * Decide whether to inject a Workers AI binding into the built wrangler config.
+ *
+ * Builds use the production binding. During dev, a project explicitly saved
+ * with the direct Cloudflare destination uses Cloudflare's remote binding;
+ * managed and unsaved projects keep using the Void HTTPS proxy.
+ *
+ * `!resolvedAi` is load-bearing: mergeBindings' return is defu-merged over the
+ * resolved root-wrangler config and wins, so skipping when the user already
+ * declared an `ai` binding avoids clobbering theirs. `!resultAi` is harmless
+ * defense-in-depth (nothing else in mergeBindings sets `result.ai`).
+ */
+export declare function shouldBindWorkersAi(command: string, needsAI: boolean, resolvedAi: unknown, resultAi: unknown, directCloudflareDev?: boolean): boolean;
 /** Resolve the runtime Workers AI binding, preserving a root Wrangler declaration. */
 export declare function resolveWorkersAiBindingName(resolvedAi: unknown, configuredName?: string): string;
+//#endregion
+//#region src/index.d.ts
 export declare function voidPlugin(options?: {
   persistTo?: string;
   auxiliaryWorkers?: PluginConfig["auxiliaryWorkers"];