void 0.27.0 → 1.0.3

package/dist/{platform-auth-protection-BJimB_p9.mjs → platform-auth-protection-BXwZiJSF.mjs}

@@ -1,12 +1,12 @@
-import { S as writePendingInstallationSecrets, c as normalizePlatformApiUrl, m as readInstallationRecoverySecrets, p as promoteInstallationSecrets, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest, x as writeInstallationManifest } from "./platform-registry-Cjv2Qf0r.mjs";
-import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { n as ensurePlatformAccessToken } from "./cf-access-BcIBSKqG.mjs";
-import { A as confirm, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess } from "./output-C50ag2r3.mjs";
-import { n as OperatorClient } from "./operator-client-DbDv4vtE.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-BEZ_u0Cz.mjs";
-import { G as preparePlatformAccessSetup, K as PlatformCloudflareClient, U as checkpointPlatformAccessResources, V as resolvePlatformCloudflareCredential, W as parsePlatformAccessSetupSpec, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-DzCwqhFq.mjs";
-import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-CuuVDhyt.mjs";
+import { S as writePendingInstallationSecrets, c as normalizePlatformApiUrl, m as readInstallationRecoverySecrets, p as promoteInstallationSecrets, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest, x as writeInstallationManifest } from "./platform-registry-B9mWX9LO.mjs";
+import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
+import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
+import { A as confirm, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
+import { n as OperatorClient } from "./operator-client-C-ROjk1I.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-Cr2zCc-J.mjs";
+import { G as PlatformCloudflareClient, H as parsePlatformAccessSetupSpec, R as resolvePlatformCloudflareCredential, U as preparePlatformAccessSetup, V as checkpointPlatformAccessResources, n as resolvePlatformInstallDatabaseUrl, u as acquirePlatformDatabaseLifecycleLock } from "./platform-lifecycle-DBiS0cJd.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-DhEFdQAf.mjs";
 import { parsePlatformAccessProtection, platformProtectionProofMessage } from "@void/platform";
 import { createHmac } from "node:crypto";
 import { readFile } from "node:fs/promises";
@@ -55,6 +55,21 @@ async function verifyProtectionWorkerOrigins(client, manifest, origins, disableP
 		if (current.enabled !== update.enabled || current.previews_enabled !== false) throw new Error("platform: Worker alternate origins changed during protection setup. Reconcile them before retrying.");
 	}
 }
+function stringList(value) {
+	return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : void 0;
+}
+function protectionContext(value) {
+	const { installationId, userId, sessionId, revision, lifecycleVersion } = value;
+	const origins = stringList(value.origins);
+	return typeof installationId === "string" && typeof userId === "string" && typeof sessionId === "string" && typeof revision === "number" && Number.isSafeInteger(revision) && typeof lifecycleVersion === "string" && origins ? {
+		installationId,
+		userId,
+		sessionId,
+		revision,
+		lifecycleVersion,
+		origins
+	} : void 0;
+}
 async function runPlatformProtectionConfig(args) {
 	const manifest = args.target === "show" ? void 0 : resolveInstallationManifest(args.installation);
 	const origin = args.connection ? resolveOperatorOrigin(args.connection) : manifest?.endpoints.apiUrl ? normalizePlatformApiUrl(manifest.endpoints.apiUrl) : resolveOperatorOrigin("");
@@ -64,16 +79,16 @@ async function runPlatformProtectionConfig(args) {
 		const provisioning = saved?.accessProvisioningJson ? JSON.parse(saved.accessProvisioningJson) : void 0;
 		if (manifest.deployment.authentication.accessProtection || provisioning?.resources?.protection?.id) ensurePlatformAccessToken(origin, false, true);
 	}
-	let context = await operator.request("/config/auth/protection");
+	const live = await operator.request("/config/auth/protection");
 	if (args.target === "show") {
 		console.log(JSON.stringify({
-			protection: context.protection,
-			origins: context.origins
+			protection: live.protection,
+			origins: live.origins
 		}, null, 2));
 		return;
 	}
-	if (!manifest || manifest.status !== "installed" || !manifest.endpoints.proxyUrl || normalizePlatformApiUrl(manifest.endpoints.apiUrl ?? "") !== origin || context.installationId !== manifest.id || typeof context.userId !== "string" || typeof context.sessionId !== "string" || typeof context.revision !== "number" || typeof context.lifecycleVersion !== "string" || !Number.isSafeInteger(context.revision) || !Array.isArray(context.origins) || context.origins.some((value) => typeof value !== "string")) throw new Error("platform: Protection settings must belong to this completed installation. Repair or upgrade it first.");
-	let lifecycleVersion = context.lifecycleVersion;
+	let context = protectionContext(live);
+	if (!manifest || manifest.status !== "installed" || !manifest.endpoints.proxyUrl || normalizePlatformApiUrl(manifest.endpoints.apiUrl ?? "") !== origin || !context || context.installationId !== manifest.id) throw new Error("platform: Protection settings must belong to this completed installation. Repair or upgrade it first.");
 	let origins = context.origins;
 	if (!origins.includes(origin) || !origins.includes(new URL(manifest.endpoints.proxyUrl).origin)) throw new Error("platform: The live API and proxy origins differ from installation recovery state. Repair the installation first.");
 	const spec = args.file ? parsePlatformAccessSetupSpec(JSON.parse(await readFile(args.file, "utf8"))) : void 0;
@@ -126,10 +141,9 @@ async function runPlatformProtectionConfig(args) {
 				currentManifest = selectAuthoritativePlatformManifest(currentManifest, releaseDatabase.authoritativeManifest);
 				if (!releaseDatabase.authoritativeManifest) await releaseDatabase.checkpoint?.(currentManifest);
 				else writeInstallationManifest(currentManifest);
-				context = await operator.request("/config/auth/protection");
-				const rawLockedOrigins = context.origins;
-				const lockedOrigins = Array.isArray(rawLockedOrigins) ? rawLockedOrigins.filter((value) => typeof value === "string") : [];
-				if (normalizePlatformApiUrl(currentManifest.endpoints.apiUrl ?? "") !== origin || !currentManifest.endpoints.proxyUrl || context.installationId !== currentManifest.id || lockedOrigins.length !== (Array.isArray(rawLockedOrigins) ? rawLockedOrigins.length : -1) || !lockedOrigins.includes(origin) || !lockedOrigins.includes(new URL(currentManifest.endpoints.proxyUrl).origin)) throw new Error("platform: Platform origins changed before Access provisioning. Review and retry.");
+				const locked = await operator.request("/config/auth/protection");
+				const lockedOrigins = stringList(locked.origins);
+				if (normalizePlatformApiUrl(currentManifest.endpoints.apiUrl ?? "") !== origin || !currentManifest.endpoints.proxyUrl || locked.installationId !== currentManifest.id || !lockedOrigins || !lockedOrigins.includes(origin) || !lockedOrigins.includes(new URL(currentManifest.endpoints.proxyUrl).origin)) throw new Error("platform: Platform origins changed before Access provisioning. Review and retry.");
 				origins = lockedOrigins;
 				await verifyPlatformInstallationOwnership(cloudflare, currentManifest);
 				await verifyProtectionWorkerOrigins(cloudflare, currentManifest, origins, true);
@@ -168,9 +182,8 @@ async function runPlatformProtectionConfig(args) {
 			}
 			ensurePlatformAccessToken(origin, false, true);
 			if (!cfAccessHeaders(process.env, origin)["cf-access-token"]) throw new Error("platform: Sign in interactively through company Access to enable protection. Service credentials cannot authorize this change.");
-			context = await operator.request("/config/auth/protection");
-			if (context.installationId !== currentManifest.id || typeof context.userId !== "string" || typeof context.sessionId !== "string" || typeof context.revision !== "number" || typeof context.lifecycleVersion !== "string" || !Array.isArray(context.origins) || context.origins.some((value) => typeof value !== "string") || JSON.stringify(context.origins) !== JSON.stringify(origins)) throw new Error("platform: Protection settings changed while Access resources were being checkpointed. Review and retry.");
-			lifecycleVersion = context.lifecycleVersion;
+			context = protectionContext(await operator.request("/config/auth/protection"));
+			if (!context || context.installationId !== currentManifest.id || JSON.stringify(context.origins) !== JSON.stringify(origins)) throw new Error("platform: Protection settings changed while Access resources were being checkpointed. Review and retry.");
 			await verifyProtectionWorkerOrigins(cloudflare, currentManifest, origins, false);
 		}
 		const expiresAt = new Date(Date.now() + 3e5).toISOString();
@@ -180,13 +193,13 @@ async function runPlatformProtectionConfig(args) {
 			userId: context.userId,
 			sessionId: context.sessionId,
 			revision: context.revision,
-			lifecycleVersion,
+			lifecycleVersion: context.lifecycleVersion,
 			protection,
 			expiresAt
 		})).digest("base64url");
 		const body = {
 			revision: context.revision,
-			lifecycleVersion,
+			lifecycleVersion: context.lifecycleVersion,
 			protection,
 			expiresAt,
 			signature
@@ -203,10 +216,7 @@ async function runPlatformProtectionConfig(args) {
 			method: "POST",
 			body
 		});
-		save({ protectionUpdateJson: JSON.stringify({
-			revision: result.revision,
-			protection
-		}) });
+		writePendingInstallationSecrets(currentManifest, checkpoint);
 		promoteInstallationSecrets(currentManifest);
 		console.log(JSON.stringify({
 			...result,

package/dist/{platform-auth-recovery-BU6izFAU.mjs → platform-auth-recovery-CXjfqyOv.mjs}

@@ -1,13 +1,12 @@
-import { m as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest } from "./platform-registry-Cjv2Qf0r.mjs";
-import { u as openBrowser } from "./auth-Dn2vw-SG.mjs";
-import { A as confirm, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess } from "./output-C50ag2r3.mjs";
-import { a as resolveOperatorOrigin } from "./operator-auth-BEZ_u0Cz.mjs";
-import { K as PlatformCloudflareClient, V as resolvePlatformCloudflareCredential, c as acquirePlatformDatabaseLifecycleLockConnection, l as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl } from "./platform-lifecycle-DzCwqhFq.mjs";
-import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-CuuVDhyt.mjs";
+import { m as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest } from "./platform-registry-B9mWX9LO.mjs";
+import { u as openBrowser } from "./auth-B6iOCjKI.mjs";
+import { A as confirm, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { l as formatUrl, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
+import { a as resolveOperatorOrigin } from "./operator-auth-Cr2zCc-J.mjs";
+import { G as PlatformCloudflareClient, R as resolvePlatformCloudflareCredential, d as acquirePlatformDatabaseLifecycleLockConnection, f as platformDatabaseClientUrl, n as resolvePlatformInstallDatabaseUrl } from "./platform-lifecycle-DBiS0cJd.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest } from "./platform-management-DhEFdQAf.mjs";
 import { parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformLoginConfiguration, platformAuthenticationRecoveryMessage, validatePlatformAdmissionPolicy } from "@void/platform";
 import { createCipheriv, createDecipheriv, createHash, createHmac, hkdfSync, randomBytes, randomUUID } from "node:crypto";
-import { execFile } from "node:child_process";
 import { setTimeout } from "node:timers/promises";
 import { readFile } from "node:fs/promises";
 //#region src/cli/platform-auth-recovery-core.ts
@@ -271,8 +270,8 @@ async function runPlatformAuthRecovery(args) {
 				const url = new URL("/auth/test", manifest.endpoints.apiUrl);
 				url.searchParams.set("id", testId);
 				url.searchParams.set("proof", proof);
-				console.log(`Complete the recovery login in your browser: ${url.href}`);
-				if (process.stdin.isTTY) openBrowser(url.href, execFile);
+				console.log(`Complete the recovery login in your browser: ${formatUrl(url.href)}`);
+				if (process.stdin.isTTY) openBrowser(url.href);
 				let tested;
 				while (Date.now() < Date.parse(expiresAt)) {
 					tested = (await db.query("SELECT issuer,subject,login FROM platform_login_tests WHERE id = $1 AND user_id = $2 AND expires_at > now()", [testId, input.administratorUserId])).rows[0];

package/dist/{platform-cmd-BbY1dWiM.mjs → platform-cmd-DaAOiWTl.mjs}

@@ -1,9 +1,9 @@
-import { b as selectPlatformConnection, c as normalizePlatformApiUrl, i as getActivePlatformConnection, l as platformConnectionSlug, o as listInstallationManifests, s as listPlatformConnections, y as savePlatformConnection } from "./platform-registry-Cjv2Qf0r.mjs";
-import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { i as isCloudflareAccessChallenge, n as ensurePlatformAccessToken, t as ensureCloudflaredToken } from "./cf-access-BcIBSKqG.mjs";
-import { K as select, L as log, X as text, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess, l as import_picocolors } from "./output-C50ag2r3.mjs";
-import { n as readPlatformDiscoveryResponse, t as PlatformDisabledError } from "./platform-discovery-DIYz8V63.mjs";
+import { b as selectPlatformConnection, c as normalizePlatformApiUrl, i as getActivePlatformConnection, l as platformConnectionSlug, o as listInstallationManifests, s as listPlatformConnections, y as savePlatformConnection } from "./platform-registry-B9mWX9LO.mjs";
+import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
+import { r as isCloudflareAccessChallenge, t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
+import { K as select, L as log, X as text, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { f as import_picocolors, l as formatUrl, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
+import { n as readPlatformDiscoveryResponse, t as PlatformDisabledError } from "./platform-discovery-CHhNs8Nn.mjs";
 //#region src/cli/platform-cmd.ts
 function normalizePlatformInputUrl(input) {
 	const value = input.trim();
@@ -12,7 +12,7 @@ function normalizePlatformInputUrl(input) {
 }
 async function discoverPlatform(input, fetcher = fetch) {
 	const apiUrl = normalizePlatformInputUrl(input);
-	ensureCloudflaredToken(apiUrl);
+	ensurePlatformAccessToken(apiUrl);
 	const request = () => fetcher(`${apiUrl}/.well-known/void-platform`, {
 		headers: {
 			Accept: "application/json",
@@ -66,7 +66,7 @@ async function resolveConnection(selector) {
 function showPlatform(connection, installations) {
 	const slug = platformConnectionSlug(connection, installations);
 	console.log(`  ${import_picocolors.default.bold(connection.displayName)}${slug ? ` ${import_picocolors.default.dim(`(${slug})`)}` : ""}`);
-	console.log(`    ${connection.apiUrl}`);
+	console.log(`    ${formatUrl(connection.apiUrl)}`);
 	if (connection.applicationDomain) console.log(connection.applicationDomain.endsWith(".workers.dev") ? "    apps: workers.dev (testing)" : `    apps: *.${connection.applicationDomain}`);
 }
 function saveDiscoveredPlatform(discovery) {
@@ -96,19 +96,19 @@ async function runPlatformCommand(_root, args) {
 					}]
 				});
 				if (isCancel(group)) return;
-				const { parsePlatformArgs } = await import("./platform-args-D4E1PjVw.mjs");
+				const { parsePlatformArgs } = await import("./platform-args-B0HeTh0C.mjs");
 				return runPlatformCommand(_root, parsePlatformArgs(["config", group]));
 			}
-			const { runPlatformPlansConfig } = await import("./platform-plans-config-CN-heS4q.mjs");
+			const { runPlatformPlansConfig } = await import("./platform-plans-config-BWn1S2Rv.mjs");
 			await runPlatformPlansConfig(args);
 			return;
 		}
-		const { runPlatformAuthConfig } = await import("./platform-auth-config-CkSx3usH.mjs");
+		const { runPlatformAuthConfig } = await import("./platform-auth-config-Z16-I8nT.mjs");
 		await runPlatformAuthConfig(args);
 		return;
 	}
 	if (args.subcommand === "operator") {
-		const { runOperatorCommand } = await import("./operator-cmd-CwBB-1yb.mjs");
+		const { runOperatorCommand } = await import("./operator-cmd-D6gnZsnK.mjs");
 		await runOperatorCommand(args);
 		return;
 	}
@@ -166,8 +166,8 @@ async function runPlatformCommand(_root, args) {
 			throw error;
 		}
 		log.info(`${discovery.displayName} is reachable.`);
-		console.log(`API: ${discovery.apiUrl}`);
-		console.log(`Proxy: ${discovery.proxyUrl}`);
+		console.log(`API: ${formatUrl(discovery.apiUrl)}`);
+		console.log(`Proxy: ${formatUrl(discovery.proxyUrl)}`);
 		if (discovery.applicationRouting?.workersDev && !discovery.applicationRouting.zoneName) {
 			console.log("Application domain: workers.dev (testing)");
 			console.log("Add a domain: void platform domain set <domain>");
@@ -176,7 +176,7 @@ async function runPlatformCommand(_root, args) {
 		console.log(`Capabilities: ${Object.entries(discovery.capabilities).filter(([, enabled]) => enabled).map(([name]) => name).join(", ")}`);
 		return;
 	}
-	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-ByAlpkhV.mjs");
+	const { runPlatformLifecycleCommand } = await import("./platform-lifecycle-u9pMOvxC.mjs");
 	await runPlatformLifecycleCommand(args);
 }
 function showSavedInstallationStatus(manifest) {
@@ -187,7 +187,7 @@ function showSavedInstallationStatus(manifest) {
 		console.log(`Saved operation: ${operation.action} — ${operation.phase}`);
 		console.log(`Runtime: ${operation.fromVersion ?? "new installation"} → ${operation.toVersion}`);
 	}
-	if (manifest.endpoints.apiUrl) console.log(`Administrator status: ${manifest.endpoints.apiUrl}/admin/status`);
+	if (manifest.endpoints.apiUrl) console.log(`Administrator status: ${formatUrl(`${manifest.endpoints.apiUrl}/admin/status`)}`);
 }
 //#endregion
 export { saveDiscoveredPlatform as i, promptPlatformUrl as n, runPlatformCommand as r, discoverPlatform as t };

package/dist/platform-cmd-PT4YwMLM.mjs

@@ -0,0 +1 @@
+export { t as discoverPlatform, r as runPlatformCommand } from "./platform-cmd-DaAOiWTl.mjs";

package/dist/{platform-discovery-DIYz8V63.mjs → platform-discovery-CHhNs8Nn.mjs}

@@ -1,4 +1,4 @@
-import { c as normalizePlatformApiUrl } from "./platform-registry-Cjv2Qf0r.mjs";
+import { c as normalizePlatformApiUrl } from "./platform-registry-B9mWX9LO.mjs";
 import { parsePlatformDiscoveryDocument } from "@void/platform";
 //#region src/cli/platform-discovery.ts
 /** Discovery was refused because the platform traffic gate is closed. */

package/dist/{platform-domain-CHVS6cV0.mjs → platform-domain-CxpvUeo0.mjs}

@@ -1,9 +1,9 @@
-import { m as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-Cjv2Qf0r.mjs";
-import { t as cfAccessHeaders } from "./cf-access-TWNzXltp.mjs";
-import { A as confirm, X as text, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { d as printSuccess, u as note } from "./output-C50ag2r3.mjs";
-import { B as assertPlatformOperatorCredentialCanApplyPlan, K as PlatformCloudflareClient, M as recordPlatformWorkerTraffic, O as createPlatformHealthProbeToken, P as createPlatformInstallPlan, V as resolvePlatformCloudflareCredential, j as recordResource, n as resolvePlatformInstallDatabaseUrl, s as acquirePlatformDatabaseLifecycleLock, t as assertNoninteractivePlatformMutationAcknowledged } from "./platform-lifecycle-DzCwqhFq.mjs";
-import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest, o as resolveInstalledPlatformManifest } from "./platform-management-CuuVDhyt.mjs";
+import { m as readInstallationRecoverySecrets, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-B9mWX9LO.mjs";
+import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
+import { A as confirm, X as text, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { m as printSuccess, p as note } from "./output-Ba6ZbrzY.mjs";
+import { G as PlatformCloudflareClient, L as assertPlatformOperatorCredentialCanApplyPlan, R as resolvePlatformCloudflareCredential, S as recordResource, T as createPlatformInstallPlan, n as resolvePlatformInstallDatabaseUrl, t as assertNoninteractivePlatformMutationAcknowledged, u as acquirePlatformDatabaseLifecycleLock, w as recordPlatformWorkerTraffic, y as createPlatformHealthProbeToken } from "./platform-lifecycle-DBiS0cJd.mjs";
+import { d as verifyPlatformInstallationOwnership, l as selectAuthoritativePlatformManifest, o as resolveInstalledPlatformManifest } from "./platform-management-DhEFdQAf.mjs";
 import { PLATFORM_HEALTH_HOSTNAME_LABEL, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, createApplicationRoutes, createPlatformDeploymentManifest, normalizeApplicationDomain } from "@void/platform";
 //#region src/cli/platform-domain.ts
 function platformDomainTarget(manifest, domain, zone, dedicatedZone) {