void 0.28.0 → 1.0.3

package/dist/{env-validation-cE0zcmzO.mjs → env-validation-DYxjz_Wo.mjs}

@@ -65,6 +65,8 @@ async function validateProdEnv(root, options) {
 	};
 	const reservedInSchema = findReservedEnvKeys(Object.keys(mod._getRegisteredSchema() ?? {}));
 	if (reservedInSchema.length > 0) throw new Error(`env: ${reservedEnvKeysMessage("env.ts", reservedInSchema)}`);
+	const serverVarKeys = Object.keys(mod._getRegisteredSchema() ?? {}).filter((key) => !isClientEnvKey(key) && Object.hasOwn(options.workerVars ?? {}, key));
+	if (serverVarKeys.length > 0) throw new Error(`env: Server env keys cannot be Worker plaintext vars: ${serverVarKeys.join(", ")}. Remove them from worker.vars and set them with the remote secret store.`);
 	const local = options.productionOnly ? {} : loadLocalEnv(root, { onWarn: (message) => voidWarn(message) });
 	const shell = options.productionOnly ? Object.fromEntries(Object.entries(process.env).filter(([key]) => isClientEnvKey(key))) : process.env;
 	const merged = {

package/dist/{gen-CnN1Xidx.mjs → gen-CufHEf42.mjs}

@@ -2,8 +2,8 @@ import { a as join, n as dirname, s as relative } from "./dist-ipQi0Q8y.mjs";
 import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
 import { d as readConfig, s as getDatabaseDialect } from "./config-Bx_1SpnO.mjs";
 import { n as readJournal, t as collectMigrations } from "./collect-xjffdCdk.mjs";
-import { K as select, L as log, O as cancel, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { m as printSuccess } from "./output-FNHKw5Ac.mjs";
+import { K as select, L as log, O as cancel, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
 import { n as ensureProjectTsconfig } from "./project-tsconfig-bveqhlYA.mjs";
 import { r as writeDrizzleConfig, t as PLACEHOLDER_DB_URL } from "./config-BEm9vRvS.mjs";
 import { t as assertJournalCoherence } from "./validate-CheZGRE7.mjs";

package/dist/gen-sXyp5DFO.mjs

@@ -0,0 +1 @@
+export { r as runGenCommand } from "./gen-CufHEf42.mjs";

package/dist/generate-ClI89brV.mjs

@@ -0,0 +1 @@
+export { t as generateValidatedSqliteMigrations } from "./generate-Dat0UTry.mjs";

package/dist/{github-cmd-BdkU4Nhe.mjs → github-cmd-FU8EjFyU.mjs}

@@ -1,9 +1,9 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken, n as createCodeChallenge, r as createCodeVerifier, t as awaitBrowserCallback, u as openBrowser } from "./auth-B6iOCjKI.mjs";
-import { A as confirm, K as select, L as log, O as cancel, X as text, tt as isCancel } from "./dist-D3m88sjf.mjs";
-import { f as import_picocolors, l as formatUrl, m as printSuccess } from "./output-FNHKw5Ac.mjs";
+import { A as confirm, K as select, L as log, O as cancel, X as text, tt as isCancel } from "./dist-BVdsO7Py.mjs";
+import { f as import_picocolors, l as formatUrl, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
 import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-DM9Kcf4e.mjs";
-import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-C_Cu7E8a.mjs";
+import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/cli/github-cmd.ts

package/dist/{help-Bug7pyK_.mjs → help-BT2hovNI.mjs}

@@ -1,5 +1,5 @@
-import { H as outro } from "./dist-D3m88sjf.mjs";
-import { d as helpLine, f as import_picocolors, g as sectionTitle, l as formatUrl, p as note, t as categoryTitle } from "./output-FNHKw5Ac.mjs";
+import { H as outro } from "./dist-BVdsO7Py.mjs";
+import { d as helpLine, f as import_picocolors, g as sectionTitle, l as formatUrl, p as note, t as categoryTitle } from "./output-Ba6ZbrzY.mjs";
 import { n as getOwnVersion } from "./agents-CuNtT0D_.mjs";
 import { n as operatorGroups, t as operatorCommands } from "./operator-args-UnE8Y2eK.mjs";
 //#region src/cli/ascii.ts
@@ -339,7 +339,7 @@ const HELP_TREE = {
 			},
 			{
 				command: "repair [id]",
-				description: "Reconcile an installed Void platform"
+				description: "Reconcile an installed Void platform or its unfinished login setup"
 			},
 			{
 				command: "disable [id]",
@@ -687,7 +687,7 @@ const HELP_TREE = {
 					}
 				]
 			},
-			repair: lifecycleHelp("repair", "Reconcile drift using the installation ownership manifest."),
+			repair: lifecycleHelp("repair", "Reconcile drift using the installation ownership manifest, or change the login settings while first administrator setup is pending."),
 			disable: lifecycleHelp("disable", "Disable platform traffic without deleting data."),
 			enable: lifecycleHelp("enable", "Restore configured traffic for a disabled platform."),
 			uninstall: {
@@ -1685,7 +1685,7 @@ function withProjectOption(summary, usage) {
 function lifecycleHelp(command, summary) {
 	return {
 		summary,
-		usage: [`void platform ${command} [id] [--plan]${command === "disable" ? "" : " [--runtime <path>]"}${command === "upgrade" || command === "repair" ? " [--dashboard-url <origin>]" : ""} [--yes]`],
+		usage: [`void platform ${command} [id] [--plan]${command === "disable" ? "" : " [--runtime <path>]"}${command === "upgrade" || command === "repair" ? " [--dashboard-url <origin>]" : ""}${command === "repair" ? " [--auth-config <path>]" : ""} [--yes]`],
 		options: [
 			{
 				command: "--plan",
@@ -1699,6 +1699,10 @@ function lifecycleHelp(command, summary) {
 				command: "--dashboard-url <origin>",
 				description: "Configure a separately deployed dashboard; omission keeps its saved origin"
 			}] : [],
+			...command === "repair" ? [{
+				command: "--auth-config <path>",
+				description: "While first administrator setup is pending, replace its login settings (install file format)"
+			}] : [],
 			{
 				command: "--yes",
 				description: "Acknowledge non-interactive Cloudflare changes"

package/dist/help-i2YGGnTH.mjs

@@ -0,0 +1 @@
+export { r as printHelpPage } from "./help-BT2hovNI.mjs";

package/dist/{inbound-DmkTQeWp.mjs → inbound-BuTfm11U.mjs}

@@ -1,6 +1,6 @@
 import { t as base64ToBytes } from "./base64-DVrOndmI.mjs";
 import { c as validateAddressParts, i as indexOfControl, n as MimeError, o as normalizeEmail, r as buildMime } from "./mime-srOklVVv.mjs";
-import { a as getRawRuntimeEnv } from "./env-raw-Cklzcde3.mjs";
+import { a as getRawRuntimeEnv } from "./env-raw-D74P4ebM.mjs";
 import { o as withTimeout } from "./email-protocol-D9nTvhCp.mjs";
 import { EMAIL_MAX_ACTIONS, EMAIL_MAX_INBOUND_BYTES, EMAIL_MAX_INBOUND_HEADERS, EMAIL_MAX_METADATA_BYTES, EMAIL_MAX_REPLY_BYTES, EMAIL_MAX_RESPONSE_BYTES } from "@void/platform/email-protocol";
 //#region src/runtime/email/inbound.ts