void 1.0.3 → 1.1.11

package/dist/{account-cmd-BTcUzv9L.mjs → account-cmd-R35a4Oa8.mjs}

@@ -1,14 +1,14 @@
 import { c as getToken, f as removeToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
 import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
-import { n as runLoginCommand } from "./login-C2T1oVG-.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { n as runLoginCommand } from "./login-BJvGW5Eu.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-DUJuvRx5.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-VHmiKZmP.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
 			if (removeToken(root)) printSuccess("Logged out.");
 			else log.info("Not logged in.");

package/dist/{application-analysis-AB_YYWgH.mjs → application-analysis-D7nNmNJb.mjs}

@@ -1,15 +1,15 @@
 import { a as join, i as isAbsolute, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { c as scanWebSocketRoutesSync, f as readResourceDefinition, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listConventionFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-DsARdQKE.mjs";
-import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
-import { t as findVoidAuthConfig } from "./config-D0GY5ItR.mjs";
-import { f as resolveBindingNames, s as getDatabaseDialect } from "./config-Bx_1SpnO.mjs";
+import { c as scanWebSocketRoutesSync, f as readResourceDefinition, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listConventionFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-Bekzjuqw.mjs";
+import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
+import { t as findVoidAuthConfig } from "./config-CyUJzi3q.mjs";
+import { f as resolveBindingNames, s as getDatabaseDialect } from "./config-D26zcdKy.mjs";
 import { n as globSync } from "./dist-Bn8Kodjp.mjs";
 import { n as isIdentifier } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, i as staticExportInitializers, n as parseRouteFilename, o as unwrapStaticExpression, t as isRouteEnabledForEnvironment } from "./parse-filename-CUbj-1MP.mjs";
 import { n as resourceNameWords } from "./resource-name-C7LVpcRm.mjs";
-import { t as collectMigrations } from "./collect-xjffdCdk.mjs";
+import { t as collectMigrations } from "./collect-Dew86qce.mjs";
 import { i as scanEmailHandlersSync } from "./email-BcjSyAL0.mjs";
-import { t as scanPages } from "./scan-C0BMdmEd.mjs";
+import { t as scanPages } from "./scan-D2-FcLHs.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { parseSync } from "vite";

package/dist/{application-routing-L7V-TFhZ.mjs → application-routing-CZH66gXn.mjs}

@@ -1,4 +1,4 @@
-import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-AB_YYWgH.mjs";
+import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-D7nNmNJb.mjs";
 //#region src/application-routing.ts
 /** Complete route/page analysis using the same resource and handler inventories. */
 async function completeApplicationAnalysis(analysis) {

package/dist/{auth-link-DUJuvRx5.mjs → auth-link-VHmiKZmP.mjs}

@@ -1,9 +1,9 @@
 import { a as getApiUrl, c as getToken, m as savePlatformToken, p as runPlatformLogin, u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
 import { l as formatUrl } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
-import { r as selectPlatformLoginMethod } from "./login-C2T1oVG-.mjs";
-import { t as discoverPlatform } from "./platform-cmd-DaAOiWTl.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { r as selectPlatformLoginMethod } from "./login-BJvGW5Eu.mjs";
+import { t as discoverPlatform } from "./platform-cmd-CXrjk4fb.mjs";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {
 	const token = getToken(root);

package/dist/{auth-migrations-Cgs0k6lS.mjs → auth-migrations-BO27GDNr.mjs}

@@ -48,7 +48,7 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 		if (useIdType) {
 			if (fieldName === "id" && idStrategy === "serial") return "integer GENERATED BY DEFAULT AS IDENTITY";
 			if (idStrategy === "serial") return "integer";
-			if (idStrategy === "uuid") return "uuid";
+			if (idStrategy === "uuid") return fieldName === "id" ? "uuid DEFAULT gen_random_uuid()" : "uuid";
 			return "text";
 		}
 		if (field.type === "boolean") return "boolean";
@@ -61,10 +61,18 @@ function resolveColumnType(dialect, idStrategy, fieldName, field) {
 	if (field.type === "boolean" || field.type === "date" || field.type === "number") return "INTEGER";
 	return "TEXT";
 }
+function renderDefaultLiteral(dialect, value) {
+	if (typeof value === "boolean") return dialect === "sqlite" ? value ? "1" : "0" : value ? "TRUE" : "FALSE";
+	if (typeof value === "number") return String(value);
+	if (dialect === "mysql" && value.includes("\\")) return `_utf8mb4 X'${Array.from(new TextEncoder().encode(value), (byte) => byte.toString(16).padStart(2, "0")).join("")}'`;
+	if (dialect === "postgresql" && value.includes("\\")) return `E'${value.replaceAll("\\", "\\\\").replaceAll("'", "''")}'`;
+	return `'${value.replaceAll("'", "''")}'`;
+}
 function buildColumnDefinition(dialect, schema, fieldName, field, options = {}) {
 	const parts = [`${quoteIdentifier(fieldName, dialect)} ${resolveColumnType(dialect, schema.idStrategy, fieldName, field)}`];
 	if (options.primaryKey) parts.push("PRIMARY KEY");
 	if (field.required || options.primaryKey) parts.push("NOT NULL");
+	if (options.withDefault && field.defaultValue !== void 0) parts.push(`DEFAULT ${renderDefaultLiteral(dialect, field.defaultValue)}`);
 	if (field.references) parts.push(`REFERENCES ${quoteIdentifier(field.references.table, dialect)}(${quoteIdentifier(field.references.field, dialect)}) ON DELETE ${String(field.references.onDelete ?? "cascade").toUpperCase()}`);
 	return parts.join(" ");
 }
@@ -81,7 +89,7 @@ function buildCreateTableSql(schema, table) {
 }
 function buildAddColumnSql(schema, tableName, fieldName, field) {
 	const ifNotExists = schema.dialect === "postgresql" ? " IF NOT EXISTS" : "";
-	return `ALTER TABLE ${quoteIdentifier(tableName, schema.dialect)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field)}`;
+	return `ALTER TABLE ${quoteIdentifier(tableName, schema.dialect)} ADD COLUMN${ifNotExists} ${buildColumnDefinition(schema.dialect, schema, fieldName, field, { withDefault: true })}`;
 }
 function buildModifyMySqlColumnSql(schema, tableName, fieldName, field) {
 	return `ALTER TABLE ${quoteIdentifier(tableName, "mysql")} MODIFY COLUMN ${buildColumnDefinition("mysql", schema, fieldName, field)}`;
@@ -105,6 +113,31 @@ async function ensurePgIndexes(runner, schemaName, table) {
 	const indexRows = await runner.all("SELECT indexname FROM pg_indexes WHERE schemaname = $1 AND tablename = $2", [schemaName, table.name]);
 	await createMissingIndexes(runner, "postgresql", table, new Set(indexRows.map((row) => String(row.indexname))));
 }
+/**
+* Name the fields that a table with rows cannot take, and the fix, before the table changes.
+* SQLite and PostgreSQL cannot add a NOT NULL column with no default to a table that has rows;
+* MySQL fills those rows itself. On each dialect, a new required column gives every row the same
+* value, so its unique index fails when the table has two or more rows.
+*/
+async function assertRequiredColumnsCanBeAdded(runner, dialect, table, missing) {
+	const required = missing.filter((fieldName) => table.fields[fieldName].required);
+	const unique = required.filter((fieldName) => table.fields[fieldName].unique);
+	const noDefault = dialect === "mysql" ? [] : required.filter((fieldName) => table.fields[fieldName].defaultValue === void 0);
+	if (unique.length === 0 && noDefault.length === 0) return;
+	const rows = await runner.all(`SELECT 1 AS present FROM ${quoteIdentifier(table.name, dialect)} LIMIT 2`);
+	const describe = (fieldNames) => ({
+		names: fieldNames.map((fieldName) => JSON.stringify(fieldName)).join(", "),
+		noun: fieldNames.length === 1 ? "field" : "fields"
+	});
+	if (rows.length >= 2 && unique.length > 0) {
+		const { names, noun } = describe(unique);
+		throw new Error(`Cannot add required unique auth ${noun} ${names} to table ${JSON.stringify(table.name)}: the table has more than one row, and a new column gives every row the same value. Set \`required: false\` on the ${noun}, or add the ${unique.length === 1 ? "column" : "columns"} in a migration that gives each row its own value.`);
+	}
+	if (rows.length >= 1 && noDefault.length > 0) {
+		const { names, noun } = describe(noDefault);
+		throw new Error(`Cannot add required auth ${noun} ${names} to table ${JSON.stringify(table.name)}: the table has rows, and there is no fixed default value to fill them. Set \`required: false\` on the ${noun}. A string, number or boolean field can use a fixed \`defaultValue\` instead.`);
+	}
+}
 async function applySqliteAuthMigrations(runner, schema) {
 	const tableRows = await runner.all("SELECT name FROM sqlite_master WHERE type = 'table'");
 	const existingTables = new Set(tableRows.map((row) => String(row.name)));
@@ -117,6 +150,7 @@ async function applySqliteAuthMigrations(runner, schema) {
 		}
 		const columnRows = await runner.all(`PRAGMA table_info(${quotePragmaArg(table.name)})`);
 		const existingColumns = new Set(columnRows.map((row) => String(row.name)));
+		await assertRequiredColumnsCanBeAdded(runner, "sqlite", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 		for (const [fieldName, field] of Object.entries(table.fields)) {
 			if (existingColumns.has(fieldName)) continue;
 			await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));
@@ -138,6 +172,7 @@ async function applyPgAuthMigrations(runner, schema) {
 		}
 		const columnRows = await runner.all("SELECT column_name FROM information_schema.columns WHERE table_schema = $1 AND table_name = $2", [schemaName, table.name]);
 		const existingColumns = new Set(columnRows.map((row) => String(row.column_name)));
+		await assertRequiredColumnsCanBeAdded(runner, "postgresql", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 		for (const [fieldName, field] of Object.entries(table.fields)) {
 			if (existingColumns.has(fieldName)) continue;
 			await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));
@@ -157,6 +192,7 @@ async function applyMySqlAuthMigrations(runner, schema) {
 		} else {
 			const columnRows = await runner.all("SELECT COLUMN_NAME AS column_name, DATA_TYPE AS data_type FROM information_schema.columns WHERE table_schema = ? AND table_name = ?", [databaseName, table.name]);
 			const existingColumns = new Map(columnRows.map((row) => [String(row.column_name), row]));
+			await assertRequiredColumnsCanBeAdded(runner, "mysql", table, Object.keys(table.fields).filter((fieldName) => !existingColumns.has(fieldName)));
 			for (const [fieldName, field] of Object.entries(table.fields)) {
 				const existingColumn = existingColumns.get(fieldName);
 				if (!existingColumn) await runner.run(buildAddColumnSql(schema, table.name, fieldName, field));

package/dist/{auth-router-CIxiMG7i.mjs → auth-router-O_Wrs5kg.mjs}

@@ -22,7 +22,8 @@ async function chooseDestination(root, args, interactive) {
 		...connections.length === 0 ? [{
 			value: "void",
 			label: "Void platform",
-			hint: "Use the current Void account origin"
+			hint: "Run `void connect <url>` first",
+			disabled: true
 		}] : []
 	];
 	const selected = await select({
@@ -32,17 +33,17 @@ async function chooseDestination(root, args, interactive) {
 	if (isCancel(selected) || typeof selected !== "string") throw new Error("auth: Cancelled.");
 	return selected === "cloudflare" ? { platform: "cloudflare" } : {
 		platform: "void",
-		...selected === "void" ? {} : { apiUrl: selected }
+		apiUrl: selected
 	};
 }
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
 	const destination = await chooseDestination(root, args, interactive);
 	if (destination.platform === "cloudflare") {
-		const { runCloudflareCommand } = await import("./cloudflare-cmd-BIAF_BIY.mjs");
+		const { runCloudflareCommand } = await import("./cloudflare-cmd-ZSErUl6Y.mjs");
 		await runCloudflareCommand(root, { subcommand: args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-BTcUzv9L.mjs");
+	const { runAccountCommand } = await import("./account-cmd-R35a4Oa8.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });

package/dist/{better-auth-shared-B74NJIus.d.mts → better-auth-shared-Bv18bB-l.d.mts}

@@ -12,6 +12,8 @@ type VoidAuthMigrationField = {
   index: boolean;
   bigint: boolean;
   unbounded?: boolean;
+  /** A fixed default of a required field. Adding the column fills rows that exist with it. */
+  defaultValue?: string | number | boolean;
   references?: {
     table: string;
     field: string;

package/dist/{better-auth-shared-CMXlZG7W.mjs → better-auth-shared-D-6z0q0f.mjs}

@@ -1,4 +1,4 @@
-import { a as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BXuhmuub.mjs";
+import { i as getVoidAuthProviderSettingEnvNames, o as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BUHwJlmM.mjs";
 import { t as authContext } from "./auth-3sGB0zJ1.mjs";
 import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
 import { betterAuth } from "better-auth";
@@ -64,11 +64,37 @@ function resolveSocialProviderCredentials(env, provider) {
 	const clientId = readEnvString(env, envNames.clientId);
 	const clientSecret = readEnvString(env, envNames.clientSecret);
 	if (!clientId || !clientSecret) throw new Error(`auth: Missing credentials for provider '${provider}'. Set ${envNames.clientId} and ${envNames.clientSecret}, or remove '${provider}' from auth.providers.`);
+	const settings = {};
+	for (const [option, envName] of Object.entries(getVoidAuthProviderSettingEnvNames(provider))) {
+		const value = readEnvString(env, envName);
+		if (value) settings[option] = value;
+	}
 	return {
+		...settings,
 		clientId,
 		clientSecret
 	};
 }
+/** Fail early when a configured provider still lacks a required setting after auth.ts runs. */
+function assertSocialProviderSettings(options, configuredProviders) {
+	const socialProviders = options.socialProviders;
+	for (const provider of configuredProviders ?? []) {
+		if (!isVoidSocialAuthProvider(provider)) continue;
+		const config = socialProviders?.[provider];
+		if (typeof config !== "object" || config === null) continue;
+		const values = config;
+		if (values.enabled === false) continue;
+		const missing = Object.entries(getVoidAuthProviderSettingEnvNames(provider)).filter(([option]) => !values[option]);
+		if (missing.length > 0) {
+			const options = joinNames(missing.map(([option]) => option));
+			throw new Error(`auth: Missing ${options} for the ${provider} provider. Set ${joinNames(missing.map(([, envName]) => envName))}, or set ${options} in auth.ts.`);
+		}
+	}
+}
+/** `a`, `a and b`, `a, b and c`. */
+function joinNames(names) {
+	return names.length > 1 ? `${names.slice(0, -1).join(", ")} and ${names.at(-1)}` : names[0];
+}
 function resolveSocialProviders(env, configuredProviders) {
 	if (!configuredProviders) return;
 	const providers = {};
@@ -215,6 +241,7 @@ function createVoidAuthRuntime(dialect, applyMigrations) {
 			trustedOrigins: [origin]
 		};
 		const resolved = resolveUserConfig(runtime.userConfig, defaults, request, env, dialect);
+		assertSocialProviderSettings(resolved, runtime.providers);
 		return runtime.dev !== true && cloudflareClientIp(request) ? applyCloudflareRateLimitDefaults(resolved) : resolved;
 	}
 	async function createVoidAuth(request, env, runtime, database) {

package/dist/{build-cmd-BkIv25PA.mjs → build-cmd-CMZiMn46.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
 import { f as import_picocolors, i as dim, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-GuSO3v_x.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";
 //#region src/cli/build-cmd.ts

package/dist/{cache-Ctzfig-W.mjs → cache-TZ5Ab3d7.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-BVdsO7Py.mjs";
 import { m as printSuccess, o as formatCount, r as createSpinner } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/cache.ts
 async function runPurgeCacheCommand(root, projectSlug) {

package/dist/{cancel-deploy-CD9o-SsC.mjs → cancel-deploy-DXoR6oC3.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
 import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([
 	"pending",

package/dist/cli/cli.mjs

@@ -3,9 +3,10 @@ import { L as log } from "../dist-BVdsO7Py.mjs";
 import { f as import_picocolors, l as formatUrl } from "../output-Ba6ZbrzY.mjs";
 import { t as formatCloudflareUserMessage } from "../cloudflare-user-output-Q-k0QoNQ.mjs";
 import { n as getOwnVersion } from "../agents-CuNtT0D_.mjs";
-import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-BT2hovNI.mjs";
+import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-D49SL_lN.mjs";
 import { r as OperatorClientError } from "../operator-client-C-ROjk1I.mjs";
-import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-CaCL_1Ch.mjs";
+import { n as operatorGroups } from "../operator-args-UnE8Y2eK.mjs";
+import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-B7ke06up.mjs";
 import { parseArgs } from "node:util";
 //#region src/cli/account-args.ts
 const accountSubcommands = [
@@ -245,7 +246,7 @@ function parseConnectArgs(args) {
 const dbSubcommands = [
 	{
 		name: "push",
-		description: "Push schema to local D1 (no migration files)"
+		description: "Push schema to the development database (no migration files)"
 	},
 	{
 		name: "generate",
@@ -287,7 +288,7 @@ const dbSubcommands = [
 	},
 	{
 		name: "studio",
-		description: "Open Drizzle Studio against the database (use --remote for the deployed PostgreSQL database)",
+		description: "Open Drizzle Studio against the database (use --remote for the deployed PostgreSQL or MySQL database)",
 		flags: [{
 			name: "--remote",
 			description: "Open Studio against the deployed database"
@@ -366,6 +367,30 @@ const MAX_POSITIONALS = {
 	"rename-migrations": 0,
 	export: 0
 };
+const ACTION_FLAGS = {
+	push: [],
+	generate: [],
+	status: [],
+	reset: ["yes"],
+	seed: ["file", "yes"],
+	execute: ["file", "remote"],
+	migrate: ["remote"],
+	studio: ["remote"],
+	"set-url": [],
+	connect: [
+		"provider",
+		"name",
+		"region",
+		"local-only"
+	],
+	"rename-migrations": [],
+	export: [
+		"output",
+		"no-data",
+		"no-schema",
+		"table"
+	]
+};
 function isDbAction(value) {
 	return value !== void 0 && Object.hasOwn(MAX_POSITIONALS, value);
 }
@@ -390,7 +415,9 @@ function parseDbArgs(args) {
 	});
 	const [action, ...rest] = positionals;
 	if (!isDbAction(action)) throw new Error("db: Usage: void db <push|generate|status|reset|seed|execute|migrate|studio|export|connect|set-url|rename-migrations>.");
-	if (action === "export" && values.remote) throw new Error("`void db export --remote` is not yet supported. Local export only for now.");
+	if (action === "export" && values.remote) throw new Error("db: `void db export` reads only the local database; --remote is not supported.");
+	const unsupported = Object.keys(values).find((flag) => !ACTION_FLAGS[action].includes(flag));
+	if (unsupported) throw new Error(`db: \`void db ${action}\` does not support --${unsupported}.`);
 	const maxPositionals = MAX_POSITIONALS[action];
 	if (rest.length > maxPositionals) throw new Error(`db: Unexpected argument '${rest[maxPositionals]}'.`);
 	switch (action) {
@@ -525,7 +552,7 @@ const emailSubcommands = [
 	},
 	{
 		name: "status",
-		description: "Show the email setup state and address map",
+		description: "Show the email setup state on your own Cloudflare account (--platform cloudflare)",
 		flags: [PLATFORM_FLAG]
 	},
 	{
@@ -544,7 +571,6 @@ const EMAIL_SUBCOMMANDS = [
 	"status",
 	"setup"
 ];
-const SUBDOMAIN_ADD_ONLY = "email: --subdomain applies to `void email domain add` only.";
 const EMAIL_DOMAIN_VERBS = [
 	"add",
 	"status",
@@ -581,7 +607,6 @@ function parseEmailArgs(args) {
 	let limit;
 	const projectValues = [];
 	const platformValues = [];
-	const subdomainValues = [];
 	const positional = [];
 	const rest = args.slice(1);
 	for (let i = 0; i < rest.length; i++) if (rest[i] === "--project" || rest[i]?.startsWith("--project=")) {
@@ -602,12 +627,8 @@ function parseEmailArgs(args) {
 		platformValues.push(value);
 		i = next;
 	} else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) throw new Error("email: Unknown option '--backend'.");
-	else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) {
-		const { value, next } = readFlagValue(rest, i, "--subdomain");
-		if (value === void 0 || value.trim() === "") throw new Error("email: --subdomain requires a value (a subdomain label or host).");
-		subdomainValues.push(value);
-		i = next;
-	} else positional.push(rest[i]);
+	else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) throw new Error("email: Unknown option '--subdomain'.");
+	else positional.push(rest[i]);
 	if (projectValues.length > 1) throw new Error("email: --project can only be specified once.");
 	const projectSlug = projectValues[0];
 	if (platformValues.length > 1) throw new Error("email: --platform can only be specified once.");
@@ -617,18 +638,14 @@ function parseEmailArgs(args) {
 		if (platformValue !== "cloudflare" && platformValue !== "void") throw new Error("email: --platform must be 'cloudflare' or 'void'.");
 		platform = platformValue;
 	}
-	if (subdomainValues.length > 1) throw new Error("email: --subdomain can only be specified once.");
-	const subdomain = subdomainValues[0];
 	if (subcommand === "domain") {
 		if (platform === "cloudflare") throw new Error("email: --platform cloudflare applies to `void email status` and `void email setup` only (`domain` is a Void platform command).");
 		return parseEmailDomainArgs(positional, {
 			projectSlug,
 			limit,
-			platform,
-			subdomain
+			platform
 		});
 	}
-	if (subdomain !== void 0) throw new Error(SUBDOMAIN_ADD_ONLY);
 	if (positional.length > 1) throw new Error(`email: \`void email ${subcommand}\` takes exactly one positional argument (got ${positional.length}: ${positional.map((p) => JSON.stringify(p)).join(", ")}).`);
 	const address = positional[0];
 	if ((subcommand === "allow" || subcommand === "disallow") && !address) throw new Error(`email: Usage: void email ${subcommand} <address> [--project <name>].`);
@@ -652,7 +669,6 @@ function parseEmailArgs(args) {
 function parseEmailDomainArgs(positional, flags) {
 	const verb = positional[0];
 	if (!verb || !EMAIL_DOMAIN_VERBS.includes(verb)) throw new Error("email: Usage: void email domain <add|status|list|sync|rotate-secret|remove> [<domain>] [--project <name>].");
-	if (flags.subdomain !== void 0 && verb !== "add") throw new Error(SUBDOMAIN_ADD_ONLY);
 	const domain = positional[1];
 	if (verb === "list") {
 		if (domain !== void 0) throw new Error("email: `void email domain list` takes no domain argument.");
@@ -662,7 +678,6 @@ function parseEmailDomainArgs(positional, flags) {
 		subcommand: "domain",
 		domainVerb: verb,
 		domain,
-		subdomain: flags.subdomain,
 		projectSlug: flags.projectSlug,
 		limit: flags.limit,
 		platform: flags.platform
@@ -708,7 +723,7 @@ const genSubcommands = [
 	{
 		name: "model",
 		arg: "<name>",
-		description: "Generate migration + CRUD routes + db types",
+		description: "Scaffold a Drizzle table, API routes, and DB types",
 		followUp: {
 			type: "repeat-input",
 			placeholder: "name:type or name:type?"
@@ -1138,7 +1153,7 @@ const projectSubcommands = [
 	},
 	{
 		name: "purge-cache",
-		description: "Purge all cached pages"
+		description: "Purge all cached pages (Void platform)"
 	}
 ];
 function parseProjectArgs(args) {
@@ -1513,19 +1528,19 @@ const args = process.argv.slice(2);
 const command = args[0];
 const helpPath = getHelpPath(args);
 const subcommandGroups = {
-	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-CIxiMG7i.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
-	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-BTcUzv9L.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
-	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-PT4YwMLM.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
-	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-BIAF_BIY.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
-	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DVatD8Ev.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
-	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-bg73f1Ge.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
-	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CZGxPv9u.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
-	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DzyNVuoU.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
-	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-7I_gfdVq.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
-	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-Nx3yf50r.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
-	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-sXyp5DFO.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
-	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-FU8EjFyU.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
-	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-BkIv25PA.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
+	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-O_Wrs5kg.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
+	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-R35a4Oa8.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
+	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-D9lwFpcl.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
+	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-ZSErUl6Y.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
+	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-CpLYflCH.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
+	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-CClHaFxm.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
+	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-DKlNI0SR.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
+	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-C0s3OvJk.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
+	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-COI-yTJE.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
+	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-BX2JFsgF.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
+	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-DsCukhuw.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
+	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-DQDryS-5.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
+	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CMZiMn46.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
 };
 if (helpPath) {
 	if (helpPath.length === 0) printGlobalHelp();
@@ -1544,7 +1559,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-9lgfhrXS.mjs").then(({ runDeploy }) => {
+	import("../deploy-CxNgEYr4.mjs").then(({ runDeploy }) => {
 		runDeploy(root, deployArgs).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1552,14 +1567,14 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-CKtk-EZe.mjs");
+	const { runConnectCommand } = await import("../connect-yQuLbuiJ.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
 else if (command && Object.hasOwn(subcommandGroups, command)) subcommandGroups[command]();
-else if (command === "info") import("../info-l249eUdH.mjs").then(async ({ runInfoCommand }) => {
+else if (command === "info") import("../info-Bxunp14X.mjs").then(async ({ runInfoCommand }) => {
 	try {
 		await runInfoCommand(process.cwd(), parseInfoArgs(args.slice(1)));
 	} catch (err) {
@@ -1580,7 +1595,7 @@ else if (command === "prepare") {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-PQCgsny0.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-2XD6kh77.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1588,7 +1603,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-D0A6M64Q.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-DyTEY04s.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1606,7 +1621,7 @@ else if (command === "prepare") {
 		log.error("migrate: This command takes no arguments.");
 		process.exit(1);
 	}
-	import("../migrate-BRwU-blY.mjs").then(({ runMigrateCommand }) => {
+	import("../migrate-D2odrAmh.mjs").then(({ runMigrateCommand }) => {
 		runMigrateCommand(process.cwd()).catch((err) => {
 			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
@@ -1652,7 +1667,11 @@ else if (command) {
 		},
 		{
 			name: "platform",
-			hint: "config | auth | user | project | deployment | signup | email | zero-trust | system | install",
+			hint: [
+				"config",
+				...operatorGroups,
+				"install"
+			].join(" | "),
 			description: "Install platforms and administer plans, users, projects, access, and operations"
 		},
 		{
@@ -1692,7 +1711,7 @@ else if (command) {
 		},
 		{
 			name: "db",
-			hint: "connect | status | reset | seed | execute | migrate | studio | export",
+			hint: dbSubcommands.map(({ name }) => name).join(" | "),
 			description: "Database migrations and management"
 		},
 		{
@@ -1724,32 +1743,32 @@ else if (command) {
 		if (Object.hasOwn(subcommandGroups, cmd)) return subcommandGroups[cmd]();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-CKtk-EZe.mjs");
+				const { runConnectCommand } = await import("../connect-yQuLbuiJ.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-D0A6M64Q.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-DyTEY04s.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "migrate": {
-				const { runMigrateCommand } = await import("../migrate-BRwU-blY.mjs");
+				const { runMigrateCommand } = await import("../migrate-D2odrAmh.mjs");
 				await runMigrateCommand(root);
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-9lgfhrXS.mjs");
+				const { runDeploy } = await import("../deploy-CxNgEYr4.mjs");
 				await runDeploy(root);
 				return;
 			}
 			case "info": {
-				const { runInfoCommand } = await import("../info-l249eUdH.mjs");
+				const { runInfoCommand } = await import("../info-Bxunp14X.mjs");
 				await runInfoCommand(root, parseInfoArgs([]));
 				return;
 			}
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-PQCgsny0.mjs");
+				const { runPrepareCommand } = await import("../prepare-2XD6kh77.mjs");
 				await runPrepareCommand(root);
 				return;
 			}

package/dist/cli/env-schema-probe.mjs

@@ -1,4 +1,4 @@
-import { t as findEnvFile } from "../env-types-DS2_y4X8.mjs";
+import { t as findEnvFile } from "../env-types-GRchm5dw.mjs";
 import { writeSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { spawnSync } from "node:child_process";
@@ -109,7 +109,7 @@ function emitResult(result) {
 	writeSync(RESULT_FD, JSON.stringify(result));
 }
 async function runFactsChild(root) {
-	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BT7z-qpQ.mjs");
+	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-CuGfWRJd.mjs");
 	try {
 		emitResult({
 			kind: "ok",
@@ -128,7 +128,7 @@ async function runFactsChild(root) {
 }
 /** The parent already found the emitted config, so a read failure here fails closed. */
 async function runValidateEmittedChild(root) {
-	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BT7z-qpQ.mjs");
+	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-CuGfWRJd.mjs");
 	const emitted = readEmittedWorkerVars(root);
 	if (!emitted.ok) {
 		emitResult({

package/dist/client-DrdeJgHR.mjs

@@ -0,0 +1 @@
+export { r as PlatformClient } from "./client-GuSO3v_x.mjs";

package/dist/{client-DM9Kcf4e.mjs → client-GuSO3v_x.mjs}

@@ -95,7 +95,7 @@ function readCliVersion() {
 }
 const VOID_CLI_VERSION = readCliVersion();
 /** The oldest Void platform release this CLI supports. */
-const MIN_PLATFORM_VERSION = "0.28.0";
+const MIN_PLATFORM_VERSION = "1.1.11";
 const RELEASE_VERSION = /^(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$/;
 /**
 * Version checks keyed by platform base URL. Every outcome (pass, inconclusive,