void 0.24.0 → 0.25.0

package/dist/{platform-auth-protection-BLadnnct.mjs → platform-auth-protection-DFeJ-JkK.mjs}

@@ -1,13 +1,13 @@
+import { b as writePendingInstallationSecrets, d as promoteInstallationSecrets, f as readInstallationRecoverySecrets, g as resolveInstallationManifest, s as normalizePlatformApiUrl, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-KfNEF84O.mjs";
 import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { b as writePendingInstallationSecrets, d as promoteInstallationSecrets, f as readInstallationRecoverySecrets, g as resolveInstallationManifest, s as normalizePlatformApiUrl, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-DkPPXfp_.mjs";
-import { n as ensurePlatformAccessToken } from "./cf-access-BGe5sWXF.mjs";
-import { A as confirm, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
-import { n as OperatorClient } from "./operator-client-CpHjTd0t.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-7erYc6Lt.mjs";
-import { A as PlatformCloudflareClient, D as checkpointPlatformAccessResources, E as resolvePlatformCloudflareCredential, O as parsePlatformAccessSetupSpec, k as preparePlatformAccessSetup, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-BBoNzojY.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
-import { createHmac } from "node:crypto";
+import { n as ensurePlatformAccessToken } from "./cf-access-AHKBzmuu.mjs";
+import { A as confirm, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { n as OperatorClient } from "./operator-client-LmwjxT6q.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-CkmTE3rt.mjs";
+import { A as PlatformCloudflareClient, D as checkpointPlatformAccessResources, E as resolvePlatformCloudflareCredential, O as parsePlatformAccessSetupSpec, k as preparePlatformAccessSetup, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-Dm09JNkn.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-BSEc_ZeG.mjs";
 import { parsePlatformAccessProtection, platformProtectionProofMessage } from "@void/platform";
+import { createHmac } from "node:crypto";
 import { readFile } from "node:fs/promises";
 //#region src/cli/platform-auth-protection.ts
 /** Read every externally routed control-plane Worker before changing its preview settings. */

package/dist/{platform-auth-recovery-CmCzX2Fl.mjs → platform-auth-recovery-ICy4muq6.mjs}

@@ -1,12 +1,12 @@
-import { f as readInstallationRecoverySecrets, g as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-DkPPXfp_.mjs";
-import { u as openBrowser } from "./auth-CQkSDS50.mjs";
-import { A as confirm, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
-import { a as resolveOperatorOrigin } from "./operator-auth-7erYc6Lt.mjs";
-import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLockConnection } from "./platform-lifecycle-BBoNzojY.mjs";
-import { c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
+import { f as readInstallationRecoverySecrets, g as resolveInstallationManifest, t as acquirePlatformLifecycleLock } from "./platform-registry-KfNEF84O.mjs";
+import { u as openBrowser } from "./auth-7wuZ5ob8.mjs";
+import { A as confirm, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { a as resolveOperatorOrigin } from "./operator-auth-CkmTE3rt.mjs";
+import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, c as acquirePlatformDatabaseLifecycleLockConnection, l as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl } from "./platform-lifecycle-Dm09JNkn.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-BSEc_ZeG.mjs";
+import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";
 import { createCipheriv, createDecipheriv, createHash, createHmac, hkdfSync, randomBytes, randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
-import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";
 import { setTimeout } from "node:timers/promises";
 import { readFile } from "node:fs/promises";
 //#region src/cli/platform-auth-recovery-core.ts

package/dist/{platform-cmd-pMTRhvYs.mjs → platform-cmd-BPySFOew.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-DMDEc9uS.mjs";
+import { r as runPlatformCommand, t as discoverPlatform } from "./platform-cmd-D7vSWMvV.mjs";
 export { discoverPlatform, runPlatformCommand };

package/dist/{platform-cmd-DMDEc9uS.mjs → platform-cmd-D7vSWMvV.mjs}

@@ -1,9 +1,9 @@
+import { _ as savePlatformConnection, a as listInstallationManifests, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl, v as selectPlatformConnection } from "./platform-registry-KfNEF84O.mjs";
 import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { _ as savePlatformConnection, o as listPlatformConnections, r as getActivePlatformConnection, s as normalizePlatformApiUrl, v as selectPlatformConnection } from "./platform-registry-DkPPXfp_.mjs";
-import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-BGe5sWXF.mjs";
-import { K as select, L as log, X as text, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
-import { c as import_picocolors } from "./output-CbM85T4k.mjs";
-import { parsePlatformDiscoveryDocument } from "@void/platform";
+import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-AHKBzmuu.mjs";
+import { K as select, L as log, X as text, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { t as readPlatformDiscoveryResponse } from "./platform-discovery-DDDUvnqp.mjs";
+import { c as import_picocolors } from "./output-BBsUwdyT.mjs";
 //#region src/cli/platform-cmd.ts
 async function discoverPlatform(input, fetcher = fetch) {
 	const apiUrl = normalizePlatformApiUrl(input);
@@ -22,22 +22,7 @@ async function discoverPlatform(input, fetcher = fetch) {
 		ensurePlatformAccessToken(apiUrl, true);
 		response = await request();
 	}
-	if (!response.ok) throw new Error(`platform: Discovery failed at ${apiUrl} (HTTP ${response.status}).`);
-	let value;
-	try {
-		value = await response.json();
-	} catch {
-		throw new Error(`platform: ${apiUrl} returned invalid discovery metadata.`);
-	}
-	let discovery;
-	try {
-		discovery = parsePlatformDiscoveryDocument(value);
-	} catch (error) {
-		throw new Error(`platform: ${apiUrl} returned invalid discovery metadata: ${error instanceof Error ? error.message : String(error)}`);
-	}
-	const finalOrigin = normalizePlatformApiUrl(response.url ? new URL(response.url).origin : apiUrl);
-	if (discovery.apiUrl !== finalOrigin) throw new Error(`platform: Discovery origin mismatch. The response came from ${finalOrigin}, but identifies ${discovery.apiUrl}.`);
-	return discovery;
+	return readPlatformDiscoveryResponse(apiUrl, response);
 }
 async function promptPlatformUrl() {
 	if (!process.stdin.isTTY) throw new Error("platform: A platform URL is required in non-interactive mode.");
@@ -106,19 +91,19 @@ async function runPlatformCommand(_root, args) {
 					}]
 				});
 				if (isCancel(group)) return;
-				const { parsePlatformArgs } = await import("./platform-args-DdnM6WIf.mjs");
+				const { parsePlatformArgs } = await import("./platform-args-Cq6EjQro.mjs");
 				return runPlatformCommand(_root, parsePlatformArgs(["config", group]));
 			}
-			const { runPlatformPlansConfig } = await import("./platform-plans-config-Vl9BP3H4.mjs");
+			const { runPlatformPlansConfig } = await import("./platform-plans-config-B0pOVQyW.mjs");
 			await runPlatformPlansConfig(args);
 			return;
 		}
-		const { runPlatformAuthConfig } = await import("./platform-auth-config-DDrxUy4m.mjs");
+		const { runPlatformAuthConfig } = await import("./platform-auth-config-0V0lA3pF.mjs");
 		await runPlatformAuthConfig(args);
 		return;
 	}
 	if (args.subcommand === "operator") {
-		const { runOperatorCommand } = await import("./operator-cmd-DGqPJUD3.mjs");
+		const { runOperatorCommand } = await import("./operator-cmd-d-IEKgNk.mjs");
 		await runOperatorCommand(args);
 		return;
 	}
@@ -138,7 +123,22 @@ async function runPlatformCommand(_root, args) {
 		return;
 	}
 	if (args.subcommand === "status") {
-		const discovery = await discoverPlatform((await resolveConnection(args.selector)).apiUrl);
+		const local = args.selector ? listInstallationManifests().find((manifest) => manifest.id === args.selector && manifest.status !== "uninstalled") : void 0;
+		const connection = local ? null : await resolveConnection(args.selector);
+		const saved = local ?? (connection?.installationId ? listInstallationManifests().find((manifest) => manifest.id === connection.installationId) : void 0);
+		if (saved) showSavedInstallationStatus(saved);
+		const apiUrl = local?.endpoints.apiUrl ?? connection?.apiUrl;
+		if (!apiUrl) {
+			log.info("No verified API endpoint is saved yet. Live traffic availability is unknown.");
+			return;
+		}
+		let discovery;
+		try {
+			discovery = await discoverPlatform(apiUrl);
+		} catch (error) {
+			if (saved) log.info("Live availability could not be confirmed. The saved checkpoint above may be out of date.");
+			throw error;
+		}
 		log.success(`${discovery.displayName} is reachable.`);
 		console.log(`API: ${discovery.apiUrl}`);
 		console.log(`Proxy: ${discovery.proxyUrl}`);
@@ -150,8 +150,18 @@ async function runPlatformCommand(_root, args) {
 		console.log(`Capabilities: ${Object.entries(discovery.capabilities).filter(([, enabled]) => enabled).map(([name]) => name).join(", ")}`);
 		return;
 	}
-	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-BFdSi9Qt.mjs");
+	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-BaUdTRPU.mjs");
 	await runPlatformLifecycleCommand(args);
 }
+function showSavedInstallationStatus(manifest) {
+	console.log(`Saved installation: ${manifest.id} (${manifest.status})`);
+	console.log(`Checkpoint: ${manifest.updatedAt}`);
+	if (manifest.operation) {
+		const operation = manifest.operation;
+		console.log(`Saved operation: ${operation.action} — ${operation.phase}`);
+		console.log(`Runtime: ${operation.fromVersion ?? "new installation"} → ${operation.toVersion}`);
+	}
+	if (manifest.endpoints.apiUrl) console.log(`Administrator status: ${manifest.endpoints.apiUrl}/admin/status`);
+}
 //#endregion
 export { saveDiscoveredPlatform as i, promptPlatformUrl as n, runPlatformCommand as r, discoverPlatform as t };

package/dist/platform-discovery-DDDUvnqp.mjs

@@ -0,0 +1,27 @@
+import { s as normalizePlatformApiUrl } from "./platform-registry-KfNEF84O.mjs";
+import { parsePlatformDiscoveryDocument } from "@void/platform";
+//#region src/cli/platform-discovery.ts
+/** Validates a `GET /.well-known/void-platform` response from `apiUrl`. */
+async function readPlatformDiscoveryResponse(apiUrl, response) {
+	if (!response.ok) {
+		await response.body?.cancel();
+		throw new Error(`platform: Discovery failed at ${apiUrl} (HTTP ${response.status}).`);
+	}
+	let value;
+	try {
+		value = await response.json();
+	} catch {
+		throw new Error(`platform: ${apiUrl} returned invalid discovery metadata.`);
+	}
+	let discovery;
+	try {
+		discovery = parsePlatformDiscoveryDocument(value);
+	} catch (error) {
+		throw new Error(`platform: ${apiUrl} returned invalid discovery metadata: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	const finalOrigin = normalizePlatformApiUrl(response.url ? new URL(response.url).origin : apiUrl);
+	if (discovery.apiUrl !== finalOrigin) throw new Error(`platform: Discovery origin mismatch. The response came from ${finalOrigin}, but identifies ${discovery.apiUrl}.`);
+	return discovery;
+}
+//#endregion
+export { readPlatformDiscoveryResponse as t };

package/dist/{platform-domain-Di6EYrQl.mjs → platform-domain-CUdY064e.mjs}

@@ -1,8 +1,8 @@
+import { _ as savePlatformConnection, f as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-KfNEF84O.mjs";
 import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { _ as savePlatformConnection, f as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, y as writeInstallationManifest } from "./platform-registry-DkPPXfp_.mjs";
-import { A as confirm, B as note, L as log, X as text, tt as isCancel } from "./prompts-BNUoTiaf.mjs";
-import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, T as assertPlatformOperatorCredentialCanApplyPlan, _ as recordPlatformWorkerTraffic, c as createPlatformHealthProbeToken, m as recordResource, n as resolvePlatformInstallDatabaseUrl, o as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, y as createPlatformInstallPlan } from "./platform-lifecycle-BBoNzojY.mjs";
-import { a as resolveInstalledPlatformManifest, c as selectAuthoritativePlatformManifest, u as verifyPlatformInstallationOwnership } from "./platform-management-CWOQOWXm.mjs";
+import { A as confirm, B as note, L as log, X as text, tt as isCancel } from "./prompts-6OSVA7DJ.mjs";
+import { A as PlatformCloudflareClient, E as resolvePlatformCloudflareCredential, T as assertPlatformOperatorCredentialCanApplyPlan, _ as recordPlatformWorkerTraffic, g as recordResource, n as resolvePlatformInstallDatabaseUrl, p as createPlatformHealthProbeToken, s as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged, y as createPlatformInstallPlan } from "./platform-lifecycle-Dm09JNkn.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest, o as resolveInstalledPlatformManifest } from "./platform-management-BSEc_ZeG.mjs";
 import { PLATFORM_HEALTH_HOSTNAME_LABEL, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, createApplicationRoutes, createPlatformDeploymentManifest, normalizeApplicationDomain } from "@void/platform";
 //#region src/cli/platform-domain.ts
 function platformDomainTarget(manifest, domain, zone, dedicatedZone) {

package/dist/{platform-lifecycle-BFdSi9Qt.mjs → platform-lifecycle-BaUdTRPU.mjs}

@@ -1,2 +1,2 @@
-import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-BBoNzojY.mjs";
+import { r as runPlatformLifecycleCommand } from "./platform-lifecycle-Dm09JNkn.mjs";
 export { runPlatformLifecycleCommand };