void 0.26.0 → 0.27.0

package/dist/cli/cli.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { a as join } from "../dist-BVqXeR_h.mjs";
-import { L as log } from "../prompts-6OSVA7DJ.mjs";
+import { L as log } from "../dist-D3m88sjf.mjs";
+import { l as import_picocolors } from "../output-C50ag2r3.mjs";
 import { n as getPackageDir } from "../agents-B_pX_HmQ.mjs";
 import { t as formatCloudflareUserMessage } from "../cloudflare-user-output-Q-k0QoNQ.mjs";
-import { c as import_picocolors } from "../output-BvdaehtE.mjs";
-import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-Bv44e2tm.mjs";
-import { r as OperatorClientError } from "../operator-client-BFqpp6z0.mjs";
-import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-DSV2p4nY.mjs";
+import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-0bTe_lID.mjs";
+import { r as OperatorClientError } from "../operator-client-DbDv4vtE.mjs";
+import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-DUeXY9Om.mjs";
 import { readFileSync } from "node:fs";
 import { parseArgs } from "node:util";
 //#region src/cli/account-args.ts
@@ -137,13 +137,9 @@ function parseAuthArgs(args) {
 	if (!subcommand || ![
 		"login",
 		"logout",
-		"status",
-		"whoami",
-		"link",
-		"token"
+		"status"
 	].includes(subcommand)) throw new Error("auth: Usage: void auth <login|status|logout> [--platform cloudflare|void].");
 	let platform;
-	let connectionId;
 	for (let index = 0; index < rest.length; index++) {
 		const value = rest[index];
 		if (value === "--platform") {
@@ -151,14 +147,11 @@ function parseAuthArgs(args) {
 			if (target !== "cloudflare" && target !== "void") throw new Error("auth: --platform must be cloudflare or void.");
 			if (platform) throw new Error("auth: --platform may be supplied only once.");
 			platform = target;
-		} else if (subcommand === "link" && !connectionId && /^[a-z][a-z0-9_-]{0,63}$/.test(value)) connectionId = value;
-		else throw new Error(`auth: Unexpected argument '${value}'.`);
+		} else throw new Error(`auth: Unexpected argument '${value}'.`);
 	}
-	if ((subcommand === "link" || subcommand === "token") && platform === "cloudflare") throw new Error(`auth: ${subcommand} belongs to a Void account. Use \`void account ${subcommand}\`.`);
 	return {
 		subcommand,
-		...platform ? { platform } : {},
-		...connectionId ? { connectionId } : {}
+		...platform ? { platform } : {}
 	};
 }
 //#endregion
@@ -886,13 +879,14 @@ function parseRouteArgs(args) {
 		methods
 	};
 }
-function parseMiddlewareArgs(args) {
+/** Shared parser for the single-name generators whose names may contain hyphens. */
+function parseHyphenatedNameArgs(args, subcommand, label) {
 	const [name, extra] = args;
-	if (!name) throw new Error("gen: Usage: void gen middleware <name>.");
+	if (!name) throw new Error(`gen: Usage: void gen ${subcommand} <name>.`);
 	if (extra) throw new Error(`gen: Unexpected argument '${extra}'.`);
-	if (!NAME_WITH_HYPHENS_RE.test(name)) throw new Error("gen: Middleware name must be lowercase alphanumeric with underscores or hyphens and no leading digits.");
+	if (!NAME_WITH_HYPHENS_RE.test(name)) throw new Error(`gen: ${label} name must be lowercase alphanumeric with underscores or hyphens and no leading digits.`);
 	return {
-		subcommand: "middleware",
+		subcommand,
 		name
 	};
 }
@@ -921,35 +915,15 @@ function parseSsrArgs(args) {
 		framework: frameworks[0]
 	};
 }
-function parseCronArgs(args) {
-	const [name, extra] = args;
-	if (!name) throw new Error("gen: Usage: void gen cron <name>.");
-	if (extra) throw new Error(`gen: Unexpected argument '${extra}'.`);
-	if (!NAME_WITH_HYPHENS_RE.test(name)) throw new Error("gen: Cron name must be lowercase alphanumeric with underscores or hyphens and no leading digits.");
-	return {
-		subcommand: "cron",
-		name
-	};
-}
-function parseQueueArgs(args) {
-	const [name, extra] = args;
-	if (!name) throw new Error("gen: Usage: void gen queue <name>.");
-	if (extra) throw new Error(`gen: Unexpected argument '${extra}'.`);
-	if (!NAME_WITH_HYPHENS_RE.test(name)) throw new Error("gen: Queue name must be lowercase alphanumeric with underscores or hyphens and no leading digits.");
-	return {
-		subcommand: "queue",
-		name
-	};
-}
 function parseGenArgs(args) {
 	const [subcommand, ...rest] = args;
 	if (subcommand === "model") return parseModelArgs(rest);
 	if (subcommand === "migration") return parseMigrationArgs(rest);
 	if (subcommand === "route") return parseRouteArgs(rest);
-	if (subcommand === "middleware") return parseMiddlewareArgs(rest);
+	if (subcommand === "middleware") return parseHyphenatedNameArgs(rest, "middleware", "Middleware");
 	if (subcommand === "ssr") return parseSsrArgs(rest);
-	if (subcommand === "cron") return parseCronArgs(rest);
-	if (subcommand === "queue") return parseQueueArgs(rest);
+	if (subcommand === "cron") return parseHyphenatedNameArgs(rest, "cron", "Cron");
+	if (subcommand === "queue") return parseHyphenatedNameArgs(rest, "queue", "Queue");
 	throw new Error("gen: Usage: void gen <model|migration|route|middleware|ssr|cron|queue>.");
 }
 //#endregion
@@ -1613,7 +1587,7 @@ async function runSubcommandGroup(command, subcommands, parse, run) {
 	const hasNamedSubcommand = args.slice(1).some((arg) => subcommands.some(({ name }) => name === arg));
 	try {
 		if ((!sub || sub.startsWith("-") && !hasNamedSubcommand) && process.stdin.isTTY) {
-			const { promptSubcommand } = await import("../subcommand-prompt-B6WS9Aoz.mjs");
+			const { promptSubcommand } = await import("../subcommand-prompt-BSlnD1fI.mjs");
 			if (command === "platform" && !sub) log.info("A Void platform lets a team deploy Void apps to a shared Cloudflare account.\nThis command sets up and manages platforms. Join with `void connect <url>`.\nDocs: https://void.cloud/guide/self-hosted-platform");
 			const result = await promptSubcommand(command, subcommands);
 			if (!result) process.exit(0);
@@ -1638,6 +1612,21 @@ async function runSubcommandGroup(command, subcommands, parse, run) {
 const args = process.argv.slice(2);
 const command = args[0];
 const helpPath = getHelpPath(args);
+const subcommandGroups = {
+	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-DvsCUVw4.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
+	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-l-FM7Ioq.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
+	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-BbmJiq5O.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
+	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-lHqNlJGW.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
+	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DaoRrn-8.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
+	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-BvtB7IjY.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
+	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-BsDUBAvt.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
+	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-_lGAHOhp.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
+	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-Xs80hcaA.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
+	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-C74QepDE.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
+	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-dA9hW7AV.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
+	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-DaDdBbSS.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
+	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-D6we0VjO.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
+};
 if (helpPath) {
 	if (helpPath.length === 0) printGlobalHelp();
 	else try {
@@ -1655,7 +1644,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-qmiLE1G1.mjs").then(({ runDeploy }) => {
+	import("../deploy-VsWsVQkw.mjs").then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -1673,26 +1662,14 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-H6EvP62X.mjs");
+	const { runConnectCommand } = await import("../connect-BfPBHHm-.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
-else if (command === "auth") runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-BRxIuqDi.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed)));
-else if (command === "account") runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-CDry3B5V.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed)));
-else if (command === "platform") runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-dyFUof0t.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed)));
-else if (command === "cloudflare") runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-bhwCxAN6.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed)));
-else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-BbH2LptN.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
-else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-AKnNXNP5.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
-else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-B_9VgOm6.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "email") runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-BokHgjKj.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-DpCKZto0.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-BdTc-K2L.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-qCBwH3fZ.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-hhkTzlGS.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
-else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-Ce3C8huo.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
-else if (command === "info") import("../info-DhtTKh65.mjs").then(async ({ runInfoCommand }) => {
+else if (command && Object.hasOwn(subcommandGroups, command)) subcommandGroups[command]();
+else if (command === "info") import("../info-PYWwkWyt.mjs").then(async ({ runInfoCommand }) => {
 	try {
 		await runInfoCommand(process.cwd(), parseInfoArgs(args.slice(1)));
 	} catch (err) {
@@ -1714,7 +1691,7 @@ else if (command === "prepare") {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-BMrRWLwP.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-Dq9hTIbo.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1722,7 +1699,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-BMf4T03q.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-DaBGmaXC.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1740,7 +1717,7 @@ else if (command === "prepare") {
 		log.error("migrate: This command takes no arguments.");
 		process.exit(1);
 	}
-	import("../migrate-CEu2X5DB.mjs").then(({ runMigrateCommand }) => {
+	import("../migrate-BHp07yJE.mjs").then(({ runMigrateCommand }) => {
 		runMigrateCommand(process.cwd()).catch((err) => {
 			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
@@ -1756,7 +1733,7 @@ else if (command === "prepare") {
 	const topLevelCommands = [
 		{
 			name: "init",
-			hint: "--agents | --tsconfig | --github | --git | --no-git",
+			hint: "--tsconfig | --github | --git | --no-git",
 			description: "Set up void in a new or existing project"
 		},
 		{
@@ -1852,52 +1829,40 @@ else if (command === "prepare") {
 	];
 	(async () => {
 		printVoidHeader();
-		const { promptSubcommand } = await import("../subcommand-prompt-B6WS9Aoz.mjs");
+		const { promptSubcommand } = await import("../subcommand-prompt-BSlnD1fI.mjs");
 		const result = await promptSubcommand("", topLevelCommands);
 		if (!result) process.exit(0);
 		const cmd = result.subcommand;
 		const root = process.cwd();
+		if (Object.hasOwn(subcommandGroups, cmd)) return subcommandGroups[cmd]();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-H6EvP62X.mjs");
+				const { runConnectCommand } = await import("../connect-BfPBHHm-.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-BMf4T03q.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-DaBGmaXC.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "migrate": {
-				const { runMigrateCommand } = await import("../migrate-CEu2X5DB.mjs");
+				const { runMigrateCommand } = await import("../migrate-BHp07yJE.mjs");
 				await runMigrateCommand(root);
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-qmiLE1G1.mjs");
+				const { runDeploy } = await import("../deploy-VsWsVQkw.mjs");
 				await runDeploy(root);
 				return;
 			}
-			case "auth": return runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (r, p) => import("../auth-router-BRxIuqDi.mjs").then(({ runAuthRouter }) => runAuthRouter(r, p)));
-			case "account": return runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (r, p) => import("../account-cmd-CDry3B5V.mjs").then(({ runAccountCommand }) => runAccountCommand(r, p)));
-			case "platform": return runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (r, p) => import("../platform-cmd-dyFUof0t.mjs").then(({ runPlatformCommand }) => runPlatformCommand(r, p)));
-			case "cloudflare": return runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (r, p) => import("../cloudflare-cmd-bhwCxAN6.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(r, p)));
-			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-BbH2LptN.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
-			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-AKnNXNP5.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
-			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-B_9VgOm6.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-hhkTzlGS.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
-			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-Ce3C8huo.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "email": return runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (r, p) => import("../email-BokHgjKj.mjs").then(({ runEmailCommand }) => runEmailCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-DpCKZto0.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-BdTc-K2L.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-qCBwH3fZ.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "info": {
-				const { runInfoCommand } = await import("../info-DhtTKh65.mjs");
+				const { runInfoCommand } = await import("../info-PYWwkWyt.mjs");
 				await runInfoCommand(root, parseInfoArgs([]));
 				return;
 			}
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-BMrRWLwP.mjs");
+				const { runPrepareCommand } = await import("../prepare-Dq9hTIbo.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}

package/dist/cli/cloudflare-operation-process.mjs

@@ -2,13 +2,15 @@
 import { n as __toESM } from "../rolldown-runtime-DXIUcv95.mjs";
 import { a as join, n as dirname, u as resolve } from "../dist-BVqXeR_h.mjs";
 import { t as require_picocolors } from "../picocolors-BTps1_gs.mjs";
+import { n as getVoidUserAgent, t as getCfCliVersion } from "../cf-user-agent-lKblH3zU.mjs";
+import { t as sanitizeTerminalLogText } from "../terminal-log-text-D9ACPOuG.mjs";
 import { copyFileSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { tmpdir } from "node:os";
 import { parse } from "jsonc-parser";
 import { stripVTControlCharacters } from "node:util";
 import { spawn, spawnSync } from "node:child_process";
-import { EnvHttpProxyAgent, fetch as fetch$1 } from "undici";
+import { setGlobalProxyFromEnv } from "node:http";
 import { getCloudflareAuthUseKeyringFromEnv } from "@cloudflare/workers-auth";
 import { createCfAuth, createCfProfileStore, readUserPreferences, setKeyringPreference } from "@cloudflare/workers-auth/cf";
 //#region src/cli/cf-session.ts
@@ -40,8 +42,9 @@ function readCfSessionCredential(root, identity) {
 	const auth = session(root);
 	if (identity.authSource !== `OAuth token from ${auth.getCredentialStore().path()}`) return null;
 	const token = auth.readAuthCredentials()?.oauth_token;
-	if (typeof token === "string" && token.length > 0) persistCfKeyringPreference(root);
-	return typeof token === "string" && token.length > 0 ? token : null;
+	if (typeof token !== "string" || token.length === 0) return null;
+	persistCfKeyringPreference(root);
+	return token;
 }
 /** Keep subsequent cf logins on the encrypted profile adopted by Void. */
 function persistCfKeyringPreference(root) {
@@ -81,15 +84,23 @@ const operation = (() => {
 	}
 })();
 process.env.CLOUDFLARE_AUTH_USE_KEYRING ??= "true";
+if (hasProxyEnvironment(process.env)) setGlobalProxyFromEnv();
+function hasProxyEnvironment(env) {
+	return Boolean(env.HTTP_PROXY || env.HTTPS_PROXY || env.http_proxy || env.https_proxy);
+}
+function apiBaseUrl() {
+	return (process.env.CLOUDFLARE_API_BASE_URL ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "");
+}
 function cfEnvironment() {
 	const env = {
 		...process.env,
 		CF_DELEGATION: "1",
+		CLI_VERSION: getCfCliVersion(),
 		CF_SEND_TELEMETRY: "false",
 		CF_NO_OSC_PROGRESS: "1",
 		CLOUDFLARE_AUTH_USE_KEYRING: process.env.CLOUDFLARE_AUTH_USE_KEYRING
 	};
-	if (env.HTTP_PROXY || env.HTTPS_PROXY || env.http_proxy || env.https_proxy) env.NODE_USE_ENV_PROXY = "1";
+	if (hasProxyEnvironment(env)) env.NODE_USE_ENV_PROXY = "1";
 	for (const [canonical, alias] of [
 		["CLOUDFLARE_API_TOKEN", "CF_API_TOKEN"],
 		["CLOUDFLARE_API_KEY", "CF_API_KEY"],
@@ -219,7 +230,7 @@ async function withBuildOutput(raw, sourceMain, action) {
 		}), { mode: 384 });
 		const accountId = process.env.CLOUDFLARE_ACCOUNT_ID ?? raw.account_id;
 		if (typeof accountId !== "string" || !accountId) throw new Error("Cloudflare account is not pinned for Worker deployment.");
-		const { prepareCfBuildOutput } = await import("../cf-build-output-ChY6-XWP.mjs");
+		const { prepareCfBuildOutput } = await import("../cf-build-output-H9a97vME.mjs");
 		const output = await prepareCfBuildOutput(scratch, accountId);
 		if (!output) throw new Error("Could not prepare the Cloudflare Worker build output.");
 		try {
@@ -291,80 +302,62 @@ function accountId() {
 	return accountId;
 }
 async function cloudflareApiGet(path, failure, extraHeaders = {}) {
-	const url = `${(process.env.CLOUDFLARE_API_BASE_URL ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "")}${path}`;
-	const proxy = process.env.HTTP_PROXY || process.env.HTTPS_PROXY || process.env.http_proxy || process.env.https_proxy ? new EnvHttpProxyAgent() : null;
-	try {
-		const response = await fetch$1(url, {
-			headers: {
-				...await apiHeaders(),
-				...extraHeaders
-			},
-			redirect: "error",
-			signal: AbortSignal.timeout(3e4),
-			...proxy ? { dispatcher: proxy } : {}
-		});
-		const body = object(await response.json());
-		if (!response.ok || body.success !== true) throw new Error(`${failure} (HTTP ${response.status})`);
-		return body;
-	} finally {
-		await proxy?.close();
-	}
+	const url = `${apiBaseUrl()}${path}`;
+	const response = await fetch(url, {
+		headers: {
+			...await apiHeaders(),
+			...extraHeaders
+		},
+		redirect: "error",
+		signal: AbortSignal.timeout(3e4)
+	});
+	const body = object(await response.json());
+	if (!response.ok || body.success !== true) throw new Error(`${failure} (HTTP ${response.status})`);
+	return body;
 }
 async function clearWorkerCronSchedules(worker) {
-	const endpoint = `${(process.env.CLOUDFLARE_API_BASE_URL ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "")}/accounts/${encodeURIComponent(accountId())}/workers/scripts/${encodeURIComponent(worker)}/schedules`;
-	const proxy = process.env.HTTP_PROXY || process.env.HTTPS_PROXY || process.env.http_proxy || process.env.https_proxy ? new EnvHttpProxyAgent() : null;
-	try {
-		const response = await fetch$1(endpoint, {
-			method: "PUT",
-			headers: {
-				...await apiHeaders(),
-				"Content-Type": "application/json"
-			},
-			body: "[]",
-			redirect: "error",
-			signal: AbortSignal.timeout(3e4),
-			...proxy ? { dispatcher: proxy } : {}
-		});
-		const body = object(await response.json());
-		const schedules = object(body.result).schedules;
-		if (!response.ok || body.success !== true || !Array.isArray(schedules) || schedules.length !== 0) throw new Error(`Cloudflare did not clear the Worker Cron Triggers (HTTP ${response.status}).`);
-		return result(0);
-	} finally {
-		await proxy?.close();
-	}
+	const endpoint = `${apiBaseUrl()}/accounts/${encodeURIComponent(accountId())}/workers/scripts/${encodeURIComponent(worker)}/schedules`;
+	const response = await fetch(endpoint, {
+		method: "PUT",
+		headers: {
+			...await apiHeaders(),
+			"Content-Type": "application/json"
+		},
+		body: "[]",
+		redirect: "error",
+		signal: AbortSignal.timeout(3e4)
+	});
+	const body = object(await response.json());
+	const schedules = object(body.result).schedules;
+	if (!response.ok || body.success !== true || !Array.isArray(schedules) || schedules.length !== 0) throw new Error(`Cloudflare did not clear the Worker Cron Triggers (HTTP ${response.status}).`);
+	return result(0);
 }
 async function clearWorkerCustomDomains(worker) {
-	const endpoint = `${(process.env.CLOUDFLARE_API_BASE_URL ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "")}/accounts/${encodeURIComponent(accountId())}/workers/scripts/${encodeURIComponent(worker)}/domains/records`;
-	const proxy = process.env.HTTP_PROXY || process.env.HTTPS_PROXY || process.env.http_proxy || process.env.https_proxy ? new EnvHttpProxyAgent() : null;
+	const endpoint = `${apiBaseUrl()}/accounts/${encodeURIComponent(accountId())}/workers/scripts/${encodeURIComponent(worker)}/domains/records`;
+	const response = await fetch(endpoint, {
+		method: "PUT",
+		headers: {
+			...await apiHeaders(),
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			override_scope: true,
+			override_existing_origin: false,
+			override_existing_dns_record: false,
+			origins: []
+		}),
+		redirect: "error",
+		signal: AbortSignal.timeout(3e4)
+	});
+	if (!response.ok) throw new Error(`Cloudflare rejected the empty custom-domain set (HTTP ${response.status}).`);
+	let body;
 	try {
-		const response = await fetch$1(endpoint, {
-			method: "PUT",
-			headers: {
-				...await apiHeaders(),
-				"Content-Type": "application/json"
-			},
-			body: JSON.stringify({
-				override_scope: true,
-				override_existing_origin: false,
-				override_existing_dns_record: false,
-				origins: []
-			}),
-			redirect: "error",
-			signal: AbortSignal.timeout(3e4),
-			...proxy ? { dispatcher: proxy } : {}
-		});
-		if (!response.ok) throw new Error(`Cloudflare rejected the empty custom-domain set (HTTP ${response.status}).`);
-		let body;
-		try {
-			body = await response.json();
-		} catch {
-			throw new Error(`Cloudflare returned HTTP ${response.status} with a non-JSON custom-domain response.`);
-		}
-		if (object(body).success !== true) throw new Error(`Cloudflare rejected the empty custom-domain set (HTTP ${response.status}).`);
-		return result(0);
-	} finally {
-		await proxy?.close();
+		body = await response.json();
+	} catch {
+		throw new Error(`Cloudflare returned HTTP ${response.status} with a non-JSON custom-domain response.`);
 	}
+	if (object(body).success !== true) throw new Error(`Cloudflare rejected the empty custom-domain set (HTTP ${response.status}).`);
+	return result(0);
 }
 async function assertExistingProvisionableResources(directory, account) {
 	const { readBuildOutput } = await import("@cloudflare/build-output-utils");
@@ -410,12 +403,16 @@ async function apiHeaders() {
 	const key = process.env.CLOUDFLARE_API_KEY ?? process.env.CF_API_KEY;
 	const email = process.env.CLOUDFLARE_EMAIL ?? process.env.CF_EMAIL;
 	if (key && email) return {
+		"User-Agent": getVoidUserAgent(),
 		"X-Auth-Key": key,
 		"X-Auth-Email": email
 	};
 	const credential = await sessionCredential();
 	if (!credential) throw new Error("Cloudflare session bearer is unavailable.");
-	return { Authorization: `Bearer ${credential.token}` };
+	return {
+		"User-Agent": getVoidUserAgent(),
+		Authorization: `Bearer ${credential.token}`
+	};
 }
 async function withSecretFile(content, action) {
 	const directory = mkdtempSync(join(tmpdir(), "void-cf-secret-"));
@@ -990,7 +987,7 @@ async function tail() {
 		"exceededMemory",
 		"unknown"
 	] });
-	const endpoint = `${(process.env.CLOUDFLARE_API_BASE_URL ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "")}/accounts/${encodeURIComponent(accountId)}/workers/scripts/${encodeURIComponent(worker)}/tails`;
+	const endpoint = `${apiBaseUrl()}/accounts/${encodeURIComponent(accountId)}/workers/scripts/${encodeURIComponent(worker)}/tails`;
 	const headers = {
 		...await apiHeaders(),
 		"Content-Type": "application/json"
@@ -1035,9 +1032,12 @@ async function tail() {
 					const detail = object(log.event ?? {});
 					const request = object(detail.request ?? {});
 					const prefix = typeof request.url === "string" ? `${request.method ?? "GET"} ${request.url}` : typeof detail.queue === "string" ? `Queue ${detail.queue}` : typeof detail.mailFrom === "string" ? `Email from ${detail.mailFrom}` : "Worker event";
-					process.stdout.write(`${prefix} - ${log.outcome ?? "unknown"} @ ${new Date(Number(log.eventTimestamp)).toLocaleString()}\n`);
-					if (Array.isArray(log.logs)) for (const line of log.logs.map(object)) process.stdout.write(`  (${line.level ?? "log"}) ${Array.isArray(line.message) ? line.message.join(" ") : ""}\n`);
-					if (Array.isArray(log.exceptions)) for (const exception of log.exceptions.map(object)) process.stderr.write(`  ${exception.name ?? "Error"}: ${exception.message ?? ""}\n`);
+					process.stdout.write(`${sanitizeTerminalLogText(prefix)} - ${log.outcome ?? "unknown"} @ ${new Date(Number(log.eventTimestamp)).toLocaleString()}\n`);
+					if (Array.isArray(log.logs)) for (const line of log.logs.map(object)) {
+						const message = Array.isArray(line.message) ? line.message.join(" ") : "";
+						process.stdout.write(`  (${line.level ?? "log"}) ${sanitizeTerminalLogText(message)}\n`);
+					}
+					if (Array.isArray(log.exceptions)) for (const exception of log.exceptions.map(object)) process.stderr.write(`  ${sanitizeTerminalLogText(`${exception.name ?? "Error"}: ${exception.message ?? ""}`)}\n`);
 				}).catch(() => {
 					process.stderr.write("Cloudflare returned a malformed tail event.\n");
 				});

package/dist/cli/env-schema-probe.mjs

@@ -1,4 +1,4 @@
-import { t as findEnvFile } from "../env-types-D5kds_OZ.mjs";
+import { t as findEnvFile } from "../env-types-CwXgeMgL.mjs";
 import { writeSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { spawnSync } from "node:child_process";
@@ -125,9 +125,8 @@ async function validateEmittedVarsViaSubprocess(input, env, spawn = defaultSpawn
 }
 /**
 * Parse the child's framed result from the DEDICATED fd-3 channel. The whole buffer
-* is the JSON result (nothing else writes to fd 3), so no sentinel scan is needed —
-* that is the truncation fix: config/env.ts stdout noise lives on a different fd and
-* can never reach here. Returns undefined on a missing/unparseable/ill-shaped result
+* is the JSON result (nothing else writes to fd 3), so no sentinel scan is needed:
+* config/env.ts stdout noise lives on a different fd and can never reach here. Returns undefined on a missing/unparseable/ill-shaped result
 * so the caller fails closed.
 */
 function parseProbeResult(fd3) {
@@ -169,7 +168,7 @@ function emitResult(result) {
 * facts. The import stays isolated because env.ts is arbitrary project code.
 */
 async function runFactsChild(root) {
-	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-cZBvGWaP.mjs");
+	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-CrVNjsPm.mjs");
 	try {
 		emitResult({
 			kind: "ok",
@@ -194,7 +193,7 @@ async function runFactsChild(root) {
 * fault → fail closed as a values-free schema error.
 */
 async function runValidateEmittedChild(root) {
-	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-cZBvGWaP.mjs");
+	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-CrVNjsPm.mjs");
 	const emitted = readEmittedWorkerVars(root);
 	if (!emitted.ok) {
 		emitResult({

package/dist/{client-mC-dFGDD.mjs → client-DlDJuY0s.mjs}

@@ -1,10 +1,10 @@
 import { a as join } from "./dist-BVqXeR_h.mjs";
-import { c as normalizePlatformApiUrl } from "./platform-registry-P387v42A.mjs";
+import { c as normalizePlatformApiUrl } from "./platform-registry-Cjv2Qf0r.mjs";
 import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-YTlqvAsk.mjs";
-import { a as getApiUrl } from "./auth-D52yG7hl.mjs";
+import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-BcIBSKqG.mjs";
+import { a as getApiUrl } from "./auth-Dn2vw-SG.mjs";
 import { n as getPackageDir } from "./agents-B_pX_HmQ.mjs";
-import { n as readPlatformDiscoveryResponse } from "./platform-discovery-BC0HCKYt.mjs";
+import { n as readPlatformDiscoveryResponse } from "./platform-discovery-DIYz8V63.mjs";
 import { readFileSync } from "node:fs";
 import { stripVTControlCharacters } from "node:util";
 //#region src/cli/platform-errors.ts
@@ -108,7 +108,7 @@ function readCliVersion() {
 }
 const VOID_CLI_VERSION = readCliVersion();
 /** The oldest Void platform release this CLI supports. */
-const MIN_PLATFORM_VERSION = "0.26.0";
+const MIN_PLATFORM_VERSION = "0.27.0";
 const RELEASE_VERSION = /^(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$/;
 /**
 * Version checks keyed by platform base URL. Every outcome (pass, inconclusive,
@@ -174,6 +174,20 @@ function isExpiredTokenError(error) {
 	if (error instanceof PlatformApiError) return error.status === 401 && error.code === "invalid or expired token";
 	return false;
 }
+/**
+* True when `fetch` gave up waiting for response headers (undici's
+* `HeadersTimeoutError`, 300 seconds by default). The request reached the
+* server, which is still working on it.
+*/
+function isHeadersTimeoutError(error) {
+	let current = error;
+	for (let depth = 0; depth < 6 && current !== null && typeof current === "object"; depth++) {
+		const { code, name } = current;
+		if (code === "UND_ERR_HEADERS_TIMEOUT" || name === "HeadersTimeoutError") return true;
+		current = current.cause;
+	}
+	return false;
+}
 function isPreflightRejection(error) {
 	return error instanceof PlatformApiError && ([401, 403].includes(error.status) && !!parsePlatformErrorBody(error.body)?.error || isCliOutdatedError(error));
 }
@@ -183,6 +197,10 @@ function isPreflightRejection(error) {
 * - Only `fetch` rejections (`TypeError` — no HTTP response) are retried.
 *   A Response of any status means the server answered; surface it
 *   verbatim rather than replay a request it may have accepted.
+* - A headers timeout is retried too. Every attempt sends the same
+*   idempotency key, so once an earlier request has created its deployment,
+*   a receipt-aware platform answers the retry with that deployment's
+*   receipt and the CLI follows it to the real result.
 * - A rejected fetch does NOT prove the request never arrived — the
 *   connection may have dropped after delivery. Arbitration is left to
 *   the server's precheck, the only atomic (project-locked) verdict: if
@@ -415,7 +433,11 @@ var PlatformClient = class {
 	async listProjectMembers(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/members`, { headers: { ...this.authHeaders } });
 		if (!res.ok) await throwPlatformApiError("Failed to list project members", res, "read");
-		return (await res.json()).members;
+		const body = await res.json();
+		return {
+			members: body.members,
+			...body.warnings ? { warnings: body.warnings } : {}
+		};
 	}
 	async listProjectInvitations(projectId) {
 		const res = await this.request(`${this.baseUrl}/projects/${projectId}/invitations`, { headers: { ...this.authHeaders } });
@@ -1039,7 +1061,7 @@ var PlatformClient = class {
 	}
 	/**
 	* Start the per-repo connect-authorization round-trip used by a non-owner org
-	* member (Task 7 platform contract). The callback redirects back to `redirect`
+	* member. The callback redirects back to `redirect`
 	* with either `?connect_grant=<signed>` (proof of per-repo access) or
 	* `?error=repo_not_accessible`. Mirrors {@link getGithubLinkUrl} but carries
 	* the installation + repo the grant is scoped to.
@@ -1243,4 +1265,4 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 //#endregion
-export { isExpiredTokenError as a, platformErrorMessage as c, isCliOutdatedError as i, PlatformApiError as n, readCliVersion as o, PlatformClient as r, parsePlatformErrorBody as s, MIN_PLATFORM_VERSION as t };
+export { isExpiredTokenError as a, parsePlatformErrorBody as c, isCliOutdatedError as i, platformErrorMessage as l, PlatformApiError as n, isHeadersTimeoutError as o, PlatformClient as r, readCliVersion as s, MIN_PLATFORM_VERSION as t };

package/dist/client-tso2OfcG.mjs

@@ -0,0 +1,2 @@
+import { r as PlatformClient } from "./client-DlDJuY0s.mjs";
+export { PlatformClient };