void 1.0.3 → 1.1.11

package/dist/{platform-lifecycle-DBiS0cJd.mjs → platform-lifecycle-D0TdyXbN.mjs}

@@ -5,10 +5,10 @@ import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
 import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
 import { A as confirm, H as outro, K as select, L as log, U as password, X as text$1, tt as isCancel, z as multiselect } from "./dist-BVdsO7Py.mjs";
 import { f as import_picocolors, l as formatUrl, m as printSuccess, n as cliCommandName, p as note, r as createSpinner, u as getErrorMessage } from "./output-Ba6ZbrzY.mjs";
-import { l as resolveCloudflareOperationArgv } from "./cloudflare-process-CeDWJRhj.mjs";
-import { d as resolvePinnedApiBaseUrl, i as createDefaultRunWrangler } from "./provision-BnSSkiED.mjs";
-import { t as parsePlatformArgs } from "./platform-args-CaCL_1Ch.mjs";
-import { o as runCloudflareAuthCommand } from "./cloudflare-auth-CqFBDo52.mjs";
+import { l as resolveCloudflareOperationArgv } from "./cloudflare-process-CZJ4viYl.mjs";
+import { o as createDefaultRunWrangler, v as resolvePinnedApiBaseUrl } from "./provision-BuifYvLc.mjs";
+import { t as parsePlatformArgs } from "./platform-args-B7ke06up.mjs";
+import { o as runCloudflareAuthCommand } from "./cloudflare-auth-DSvBc1Gu.mjs";
 import { a as platformManagementSetupPage, c as platformSetupLink, i as platformInstallCommandArguments, l as platformSetupPages, n as formatPlatformSetupPlan, o as platformPromptAnswer, r as openPlatformSetupPage, s as platformSetupFieldHelp, t as formatPlatformInstallCommand } from "./platform-setup-YvN9VQXV.mjs";
 import { copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -5287,7 +5287,7 @@ async function verifyInstalledPlatformAccessProtection(input) {
 	}
 	const existingWorkers = input.plan.actions.filter((action) => action.kind === "worker" && action.action === "update").map((action) => action.name);
 	if (existingWorkers.length) {
-		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-BXwZiJSF.mjs");
+		const { verifyProtectionWorkerOrigins } = await import("./platform-auth-protection-U9HCqoXv.mjs");
 		await verifyProtectionWorkerOrigins({
 			request: input.client.request.bind(input.client),
 			listWorkerDomains: input.client.listWorkerDomains.bind(input.client),
@@ -6447,6 +6447,7 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 	const runtime = resolvedRuntime.manifest;
 	if (plan.deployment.appAccess && runtime.appAccessSetup !== 1) throw new Error("platform: This runtime does not support the installation’s app access setup.");
 	const hasEmailGatewayArtifact = runtime.artifacts.emailGateway !== void 0;
+	if (existing?.steps.some((step) => step.key === "private-previews-initialized:v1") && runtime.privatePreviews !== 1) throw new Error("platform: This installation has private previews. Use a runtime with private preview support.");
 	if (runtime.emailProtocolVersion !== 1 && plan.deployment.capabilities.email) throw new Error("platform: This runtime cannot serve enabled platform email without email protocol version 1.");
 	if (runtime.emailProtocolVersion !== 1 && existing?.resources.some((resource) => resource.key === "email-gateway-worker" && resource.state === "ready")) throw new Error("platform: This runtime cannot replace an installed email gateway Worker. Use a runtime with email protocol version 1.");
 	const workerKeys = hasEmailGatewayArtifact ? [
@@ -6657,7 +6658,7 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 		const createsWorker = state.plan.actions.some((action) => action.kind === "worker" && action.action === "create" && (hasEmailGatewayArtifact || action.key !== "email-gateway-worker"));
 		const recoveringCreatedWorker = interruptedCutover !== null && [...interruptedCutover.staged.values()].some((snapshot) => snapshot.previousVersionId === null);
 		const requiresSandboxDrain = !preserveDisabled && targetSandboxDrainProtocol >= 1 && sandboxDrainState === "pending";
-		const requiresTrafficGuard = !previousPublicEndpoints || recoveringUnsafeTraffic || createsWorker || recoveringCreatedWorker || state.manifest.usageProtocolVersion !== targetUsageProtocolVersion || authenticationProtocolTransition || shouldBootstrapSharedEmail || requiresSandboxDrain || !!state.plan.deployment.appAccess && !state.manifest.steps.some((step) => step.key === "app-access-initialized:v1");
+		const requiresTrafficGuard = !previousPublicEndpoints || recoveringUnsafeTraffic || createsWorker || recoveringCreatedWorker || state.manifest.usageProtocolVersion !== targetUsageProtocolVersion || runtime.privatePreviews === 1 && !state.manifest.steps.some((step) => step.key === "private-previews-initialized:v1") || authenticationProtocolTransition || shouldBootstrapSharedEmail || requiresSandboxDrain || !!state.plan.deployment.appAccess && !state.manifest.steps.some((step) => step.key === "app-access-initialized:v1");
 		if (requiresTrafficGuard) {
 			await dependencies.client.putKvValue(state.plan.account.id, requireId(ids, "routing-kv"), PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE);
 			workerTrafficGuarded = true;
@@ -6703,16 +6704,19 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 		const requiresStagedCommit = !preserveDisabled && requiresTrafficGuard;
 		const enabledConfigs = createPlatformWorkerConfigs({
 			...configInput,
+			privatePreviews: runtime.privatePreviews === 1,
 			publicEndpoints: !preserveDisabled,
 			trafficState: preserveDisabled ? "staging" : "enabled"
 		});
 		const configs = requiresStagedCommit ? createPlatformWorkerConfigs({
 			...configInput,
+			privatePreviews: runtime.privatePreviews === 1,
 			publicEndpoints: true,
 			trafficState: requiresSandboxDrain ? "sandbox-drain" : "staging"
 		}) : enabledConfigs;
 		const previousConfigs = createPlatformWorkerConfigs({
 			...configInput,
+			privatePreviews: existing?.steps.some((step) => step.key === "private-previews-initialized:v1"),
 			publicEndpoints: previousPublicEndpoints,
 			trafficState: previousPublicEndpoints ? "enabled" : "staging"
 		});
@@ -6943,6 +6947,11 @@ async function installPlatform(plan, secrets, existing, dependencies) {
 			runtime,
 			runtimeProvenance
 		})).emailOperationId;
+		if (runtime.privatePreviews === 1) state.manifest = recordInstallationStep(state.manifest, {
+			key: "private-previews-initialized:v1",
+			completedAt: now(),
+			resultHash: hash("private-previews:v1")
+		}, now());
 		await checkpointOperation("complete");
 		writeInstallationManifest(state.manifest);
 		await writeRemoteInstallationCheckpoint(dependencies.client, state.plan, state.manifest);
@@ -7428,14 +7437,14 @@ function resolvePlatformInstallDatabaseUrl(checkpoint, manifest = null) {
 }
 async function runPlatformLifecycleCommand(commandArgs) {
 	if (commandArgs.subcommand === "domain") {
-		const { runPlatformDomainCommand } = await import("./platform-domain-CxpvUeo0.mjs");
+		const { runPlatformDomainCommand } = await import("./platform-domain-CXyq-68_.mjs");
 		await runPlatformDomainCommand(commandArgs);
 		return;
 	}
 	if (commandArgs.subcommand === "discover") {
 		const client = new PlatformCloudflareClient((await resolvePlatformCloudflareCredential()).token);
 		const accountId = await selectAccount(await readAccounts(client), commandArgs.account);
-		const { recoverPlatformInstallations } = await import("./platform-recovery-BUGOB4RC.mjs");
+		const { recoverPlatformInstallations } = await import("./platform-recovery-CH_fThW6.mjs");
 		const recovered = await recoverPlatformInstallations(client, accountId, void 0, commandArgs.selector);
 		if (recovered.length === 0) {
 			log.info(`No recoverable Void platform installations were found in ${accountId}.`);
@@ -7446,7 +7455,7 @@ async function runPlatformLifecycleCommand(commandArgs) {
 		return;
 	}
 	if (commandArgs.subcommand !== "install") {
-		const { runInstalledPlatformCommand } = await import("./platform-management-DvBS83rC.mjs");
+		const { runInstalledPlatformCommand } = await import("./platform-management-BvgbusqL.mjs");
 		await runInstalledPlatformCommand(commandArgs);
 		return;
 	}
@@ -7622,7 +7631,7 @@ async function runPlatformLifecycleCommand(commandArgs) {
 			progress?.stop("Read the saved installation.");
 			progress = void 0;
 			if (authoritative) {
-				const { selectAuthoritativePlatformManifest } = await import("./platform-management-DvBS83rC.mjs");
+				const { selectAuthoritativePlatformManifest } = await import("./platform-management-BvgbusqL.mjs");
 				const selected = selectAuthoritativePlatformManifest(existing, authoritative);
 				authoritativeProvisionIntents = true;
 				if (!args.plan && JSON.stringify(selected) !== JSON.stringify(existing)) writeInstallationManifest(selected);
@@ -8040,7 +8049,7 @@ async function runPlatformLifecycleCommand(commandArgs) {
 			})).actions.filter((action) => action.kind === "worker"),
 			revalidateBeforeWorkerDeploy: (manifest, action) => revalidatePlatformInstallAction(client, plan, manifest, action),
 			verifyExistingOwnership: async (manifest, databaseCheckpointExists) => {
-				const { verifyPlatformInstallationOwnership } = await import("./platform-management-DvBS83rC.mjs");
+				const { verifyPlatformInstallationOwnership } = await import("./platform-management-BvgbusqL.mjs");
 				const retainedReplacementKeys = new Set(plan.actions.filter((action) => {
 					const previous = manifest.resources.find((resource) => resource.key === action.key);
 					return action.action === "create" && previous && previous.name !== action.name;

package/dist/{platform-lifecycle-u9pMOvxC.mjs → platform-lifecycle-Dz2cJsLX.mjs}

@@ -1 +1 @@
-export { r as runPlatformLifecycleCommand } from "./platform-lifecycle-DBiS0cJd.mjs";
+export { r as runPlatformLifecycleCommand } from "./platform-lifecycle-D0TdyXbN.mjs";

package/dist/{platform-management-DvBS83rC.mjs → platform-management-BvgbusqL.mjs}

@@ -1 +1 @@
-export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-DhEFdQAf.mjs";
+export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-CnXhgxTM.mjs";

package/dist/{platform-management-DhEFdQAf.mjs → platform-management-CnXhgxTM.mjs}

@@ -2,7 +2,7 @@ import { S as writePendingInstallationSecrets, _ as removePlatformConnectionForI
 import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
 import { A as confirm, H as outro, K as select, L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
 import { f as import_picocolors, l as formatUrl, m as printSuccess, p as note, r as createSpinner } from "./output-Ba6ZbrzY.mjs";
-import { A as matchesRecordedR2Fingerprint, B as activatePlatformAccessCredentials, C as platformTrafficAttachmentWorker, D as formatPlatformInstallPlan, E as dnsRecordConfigHash, F as platformDatabaseNameFromOwnerUrl, G as PlatformCloudflareClient, I as turnOffInstalledProjectZeroTrust, J as hyperdriveOriginMatches, K as hyperdriveOriginConfigHash, L as assertPlatformOperatorCredentialCanApplyPlan, M as r2BucketConfigHash, N as resourceMarkerProblem, O as hasProvisionIntentStep, P as revalidatePlatformInstallAction, R as resolvePlatformCloudflareCredential, T as createPlatformInstallPlan, W as PlatformCloudflareApiError, Y as verifyPlatformRuntimeTokenPermissions, _ as readPlatformDatabase, a as authenticationSetupRequestHash, b as createPlatformInstallationSecrets, c as REMOTE_INSTALLATION_MANIFEST_KEY, g as formatZeroTrustApplications, h as assertProjectZeroTrustAllowsUninstall, j as platformAdoptionIntentHash, k as legacyResourceConfigHash, l as installPlatform, m as readPlatformProjectZeroTrustState, n as resolvePlatformInstallDatabaseUrl, o as readLoginReplacementFile, p as readPlatformProjectSlugs, q as hyperdriveOriginFromConnectionString, s as replacePendingInstallationAuthentication, t as assertNoninteractivePlatformMutationAcknowledged, u as acquirePlatformDatabaseLifecycleLock, v as loadPlatformRuntime, x as resolveBootstrapGitHubId, y as createPlatformHealthProbeToken, z as verifyPlatformCloudflareCredential } from "./platform-lifecycle-DBiS0cJd.mjs";
+import { A as matchesRecordedR2Fingerprint, B as activatePlatformAccessCredentials, C as platformTrafficAttachmentWorker, D as formatPlatformInstallPlan, E as dnsRecordConfigHash, F as platformDatabaseNameFromOwnerUrl, G as PlatformCloudflareClient, I as turnOffInstalledProjectZeroTrust, J as hyperdriveOriginMatches, K as hyperdriveOriginConfigHash, L as assertPlatformOperatorCredentialCanApplyPlan, M as r2BucketConfigHash, N as resourceMarkerProblem, O as hasProvisionIntentStep, P as revalidatePlatformInstallAction, R as resolvePlatformCloudflareCredential, T as createPlatformInstallPlan, W as PlatformCloudflareApiError, Y as verifyPlatformRuntimeTokenPermissions, _ as readPlatformDatabase, a as authenticationSetupRequestHash, b as createPlatformInstallationSecrets, c as REMOTE_INSTALLATION_MANIFEST_KEY, g as formatZeroTrustApplications, h as assertProjectZeroTrustAllowsUninstall, j as platformAdoptionIntentHash, k as legacyResourceConfigHash, l as installPlatform, m as readPlatformProjectZeroTrustState, n as resolvePlatformInstallDatabaseUrl, o as readLoginReplacementFile, p as readPlatformProjectSlugs, q as hyperdriveOriginFromConnectionString, s as replacePendingInstallationAuthentication, t as assertNoninteractivePlatformMutationAcknowledged, u as acquirePlatformDatabaseLifecycleLock, v as loadPlatformRuntime, x as resolveBootstrapGitHubId, y as createPlatformHealthProbeToken, z as verifyPlatformCloudflareCredential } from "./platform-lifecycle-D0TdyXbN.mjs";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, parsePlatformInstallationManifest, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
 import { setTimeout } from "node:timers/promises";
 //#region src/cli/platform-teardown.ts
@@ -1007,10 +1007,8 @@ async function uninstallPlatform(client, initialManifest, args, dependencies = {
 	const routingKv = manifest.resources.find((resource) => resource.key === "routing-kv");
 	const reopenedRouting = purgeResources && routingKv?.state === "retained" && isPurgeResourcesCandidate(manifest, routingKv);
 	const hasRoutingCheckpoint = routingKv?.state === "ready" || reopenedRouting;
-	const createdZone = manifest.resources.find((resource) => resource.key === "zone" && resource.ownership === "created");
 	const interactive = dependencies.interactive ?? process.stdin.isTTY;
 	const confirmAction = dependencies.confirm ?? promptForConfirmation;
-	if (createdZone && args.deleteZone === true) throw new Error(`platform: Refusing to delete Cloudflare zone ${JSON.stringify(createdZone.name)} automatically. A zone can contain unrelated DNS, settings, and products that the installer cannot exhaustively prove ownership of. Uninstall with --keep-zone, inspect the retained zone in Cloudflare, and delete it manually if appropriate.`);
 	const zeroTrust = await assertProjectZeroTrustAllowsUninstall(dependencies.readProjectZeroTrust, { canTurnOff: !!dependencies.turnOffProjectZeroTrust });
 	if (purgeResources) await assertNoPlatformProjects(dependencies.readProjects);
 	if (args.plan || interactive && !args.yes) note([...zeroTrust ? zeroTrust.turnOff.length ? ["Turn off project Zero Trust; no platform user exists yet. Delete its Access applications:", formatZeroTrustApplications(zeroTrust.turnOff)] : ["Turn off project Zero Trust; no platform user exists yet."] : [], purgeResources ? purgeResourcesPlanText(manifest) : [

package/dist/{platform-recovery-BUGOB4RC.mjs → platform-recovery-CH_fThW6.mjs}

@@ -1,7 +1,7 @@
 import { o as listInstallationManifests, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-B9mWX9LO.mjs";
 import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
-import { T as createPlatformInstallPlan, c as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-DBiS0cJd.mjs";
-import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-DhEFdQAf.mjs";
+import { T as createPlatformInstallPlan, c as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-D0TdyXbN.mjs";
+import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-CnXhgxTM.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
 //#region src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {

package/dist/{plugin-inference-DsARdQKE.mjs → plugin-inference-Bekzjuqw.mjs}

@@ -1,10 +1,10 @@
 import { a as join, l as toSlash, s as relative } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
 import { n as globSync } from "./dist-Bn8Kodjp.mjs";
 import { a as isObjectExpression, i as isMemberExpression, n as isIdentifier, r as isLiteral, t as isCallExpression } from "./ast-CPGPjb0V.mjs";
 import { a as staticLiteral, n as parseRouteFilename, o as unwrapStaticExpression, r as parseWebSocketFilename, t as isRouteEnabledForEnvironment } from "./parse-filename-CUbj-1MP.mjs";
 import { n as resourceNameWords, t as isResourceName } from "./resource-name-C7LVpcRm.mjs";
-import { r as getSsrServerEntryPath } from "./entry-ehmBvs5w.mjs";
+import { r as getSsrServerEntryPath } from "./entry-B_0IhV64.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
 //#region src/application-features.ts

package/dist/{prepare-PQCgsny0.mjs → prepare-2XD6kh77.mjs}

@@ -1,6 +1,6 @@
 import { L as log } from "./dist-BVdsO7Py.mjs";
 import { m as printSuccess, p as note } from "./output-Ba6ZbrzY.mjs";
-import { t as prepareProject } from "./prepare-DEB5SeVJ.mjs";
+import { t as prepareProject } from "./prepare-DepAGBcV.mjs";
 //#region src/cli/prepare.ts
 async function runPrepareCommand(root) {
 	console.log();

package/dist/{prepare-DEB5SeVJ.mjs → prepare-DepAGBcV.mjs}

@@ -1,13 +1,13 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { n as loadVoidAuthConfig } from "./config-D0GY5ItR.mjs";
-import { d as readConfig } from "./config-Bx_1SpnO.mjs";
-import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-bveqhlYA.mjs";
-import { n as generateDbDts } from "./db-types-Bb4WBWIs.mjs";
-import { t as discoverSchema } from "./discover-D2PGT63u.mjs";
+import { n as loadVoidAuthConfig } from "./config-CyUJzi3q.mjs";
+import { d as readConfig } from "./config-D26zcdKy.mjs";
+import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-Itv1f4WC.mjs";
+import { n as generateDbDts } from "./db-types-NGxPwnlt.mjs";
+import { t as discoverSchema } from "./discover-LaV0tbIu.mjs";
 import { o as loadLocalEnv } from "./env-BJjULvL0.mjs";
-import { n as findEnvFileForPaths, r as generateEnvTypes } from "./env-types-DS2_y4X8.mjs";
-import { t as analyzeApplication } from "./application-routing-L7V-TFhZ.mjs";
-import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-CF84FOVM.mjs";
+import { n as findEnvFileForPaths, r as generateEnvTypes } from "./env-types-GRchm5dw.mjs";
+import { t as analyzeApplication } from "./application-routing-CZH66gXn.mjs";
+import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-BQfyvQKX.mjs";
 import { n as generateQueueTypes, t as generateRouteTypes } from "./route-types-BZi26DVS.mjs";
 import { existsSync, rmSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -37,7 +37,7 @@ async function prepareProject(root) {
 		const { dts } = generateRouteTypes(scan, paths.routesDir, outDir, paths.pagesDir);
 		writeGeneratedFile(outDir, "routes.d.ts", dts, written);
 	} else removeGeneratedFile(outDir, "routes.d.ts", removed);
-	if (scan.queues.length > 0) writeGeneratedFile(outDir, "queues.d.ts", generateQueueTypes(scan.queues, paths.queuesDir, outDir), written);
+	if (existsSync(paths.queuesDir)) writeGeneratedFile(outDir, "queues.d.ts", generateQueueTypes(scan.queues, paths.queuesDir, outDir), written);
 	else removeGeneratedFile(outDir, "queues.d.ts", removed);
 	const schema = discoverSchema(root, paths);
 	const hasDbRuntime = schema != null || authEnabled;

package/dist/prepare-EVEbQ9n2.mjs

@@ -0,0 +1 @@
+export { t as prepareProject } from "./prepare-DepAGBcV.mjs";

package/dist/{project-cmd-DVatD8Ev.mjs → project-cmd-CpLYflCH.mjs}

@@ -2,7 +2,7 @@ import { n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
 import { c as getToken, s as getSiteDomain } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
 import { _ as tablePrefix, f as import_picocolors, i as dim, l as formatUrl, o as formatCount } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 //#region src/cli/projects.ts
 async function runProjectsCommand(root) {
 	console.log();
@@ -38,77 +38,77 @@ async function runProjectsCommand(root) {
 async function runProjectCommand(root, args) {
 	const cloudflare = readDeploymentPlatform(root) === "cloudflare";
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-CQ2EQEHL.mjs");
+		const { runListCommand } = await import("./list-CUfD9RSb.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare apps are identified by cloudflare.name in void.config.ts and do not need linking.");
-		const { runLink } = await import("./link-WMoJFf4i.mjs");
+		const { runLink } = await import("./link-CgOVn9EC.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") {
 		if (cloudflare) {
-			const { runListCommand } = await import("./list-CQ2EQEHL.mjs");
+			const { runListCommand } = await import("./list-CUfD9RSb.mjs");
 			return runListCommand(root);
 		}
 		return runProjectsCommand(root);
 	}
 	if (args.subcommand === "token") {
 		if (cloudflare) throw new Error("project: CI deploy credentials are available only for Void platform projects.");
-		const { runProjectTokenCommand } = await import("./project-token-CBgLBuL6.mjs");
+		const { runProjectTokenCommand } = await import("./project-token-Cybtlfbl.mjs");
 		return runProjectTokenCommand(root, args);
 	}
 	if (args.subcommand === "team") {
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-i2YGGnTH.mjs");
+			const { printHelpPage } = await import("./help-DOFygYi4.mjs");
 			printHelpPage(["project", "team"]);
 			return;
 		}
 		const accountInvitationAction = args.action === "pending" || args.action === "accept" || args.action === "decline";
 		if (cloudflare && !accountInvitationAction) throw new Error("project: Teams are available only for projects hosted on a Void platform, not direct Cloudflare deployments.");
-		const { runProjectTeamCommand } = await import("./project-team-DJrWEAG1.mjs");
+		const { runProjectTeamCommand } = await import("./project-team-CTSY7W7Q.mjs");
 		return runProjectTeamCommand(root, args);
 	}
 	if (args.subcommand === "zero-trust") {
 		if (cloudflare) throw new Error("project: Zero Trust overrides are available only for projects hosted on a Void platform.");
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-i2YGGnTH.mjs");
+			const { printHelpPage } = await import("./help-DOFygYi4.mjs");
 			printHelpPage(["project", "zero-trust"]);
 			return;
 		}
 		const action = args.action;
-		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-92gLtZ25.mjs");
+		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-DKOtqyvu.mjs");
 		return runProjectZeroTrustCommand(root, {
 			...args,
 			action
 		});
 	}
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-DnC1d7xB.mjs");
+		const { runLogsCommand } = await import("./logs-DeizBI4j.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "requests") {
 		if (cloudflare) throw new Error("project: Historical request analytics require the Void platform. Use `void project logs` for a live Cloudflare tail.");
-		const { runRequestsCommand } = await import("./requests-7W1Pygt2.mjs");
+		const { runRequestsCommand } = await import("./requests-Ryiazz9i.mjs");
 		return runRequestsCommand(root, args.range, args.status || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-BcASVnwP.mjs");
+		const { runRollbackCommand } = await import("./rollback-Or0EV3rP.mjs");
 		return runRollbackCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "cancel") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare deploys activate only after readiness succeeds, so there is no remote build to cancel.");
-		const { runCancelDeployCommand } = await import("./cancel-deploy-CD9o-SsC.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-DXoR6oC3.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
 		if (cloudflare) throw new Error("project: Refusing to delete Cloudflare resources through this command. Direct deployments are additive and existing resources may be shared.");
-		const { runDeleteCommand } = await import("./delete-Cy-M1u-r.mjs");
+		const { runDeleteCommand } = await import("./delete-PgN6L_9N.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
-		if (cloudflare) throw new Error("project: Direct Cloudflare ISR cache purge is not available yet; redeploy or purge the configured KV namespace explicitly.");
-		const { runPurgeCacheCommand } = await import("./cache-Ctzfig-W.mjs");
+		if (cloudflare) throw new Error("project: `void project purge-cache` is available only for projects hosted on a Void platform. For a direct Cloudflare deploy, redeploy or purge the configured ISR KV namespace.");
+		const { runPurgeCacheCommand } = await import("./cache-TZ5Ab3d7.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{project-paths-DMvEeSau.mjs → project-paths-DGu_QZ_Q.mjs}

@@ -24,7 +24,7 @@ function loadVoidConfig(root) {
 	const jsonPath = join(root, LEGACY_CONFIG_FILE);
 	const hasTyped = existsSync(typedPath);
 	const hasJson = existsSync(jsonPath);
-	if (hasTyped && hasJson) throw new Error(`config: Found both ${TYPED_CONFIG_FILE} and ${LEGACY_CONFIG_FILE}. Keep one source of truth.`);
+	if (hasTyped && hasJson) throw new Error(`config: Found both ${TYPED_CONFIG_FILE} and ${LEGACY_CONFIG_FILE}. Move the settings from ${LEGACY_CONFIG_FILE} into ${TYPED_CONFIG_FILE}, then delete ${LEGACY_CONFIG_FILE}.`);
 	if (!hasTyped && !hasJson) return null;
 	if (hasTyped) try {
 		return {

package/dist/{project-team-DJrWEAG1.mjs → project-team-CTSY7W7Q.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken, i as getAccountCredential } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
 import { h as sanitizeTerminalText, l as formatUrl, m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
-import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-DM9Kcf4e.mjs";
+import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-GuSO3v_x.mjs";
 import { r as requireProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-team.ts
 function clean(value) {

package/dist/{project-token-CBgLBuL6.mjs → project-token-Cybtlfbl.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
 import { _ as tablePrefix, i as dim, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 import { r as requireProjectBySlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-token.ts
 async function resolveTarget(root, args) {

package/dist/{project-tsconfig-bveqhlYA.mjs → project-tsconfig-Itv1f4WC.mjs}

@@ -1,5 +1,5 @@
 import { a as join, n as dirname, s as relative } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DMvEeSau.mjs";
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/codegen/write-if-changed.ts
 function writeFileIfChanged(path, content) {

package/dist/{project-zero-trust-92gLtZ25.mjs → project-zero-trust-DKOtqyvu.mjs}

@@ -2,7 +2,7 @@ import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
 import { h as sanitizeTerminalText, m as printSuccess, p as note } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-DM9Kcf4e.mjs";
+import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
 import { r as requireProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-zero-trust.ts
 async function resolveTarget(root, args) {

package/dist/{protocol-4H7V_3Os.d.mts → protocol-B8sI8dRD.d.mts}

@@ -1,6 +1,6 @@
 import { n as HeadDescriptor, t as HeadConfig } from "./head-C8K_iGe6.mjs";
 import { n as CloudBindings, r as CloudContext } from "./handler-_PqY82xe.mjs";
-import { a as PageRenderMode, t as DevCssAsset } from "./types-BAp5AEBU.mjs";
+import { a as PageRenderMode, t as DevCssAsset } from "./types-7AIz0OZu.mjs";
 //#region src/pages/protocol.d.ts
 /** Escape characters that are unsafe inside inline <script> tags to prevent XSS. */
 declare function safeJsonStringify(value: unknown): string;

package/dist/{providers-BXuhmuub.mjs → providers-BUHwJlmM.mjs}

@@ -45,6 +45,15 @@ function isVoidSocialAuthProvider(value) {
 function isVoidAuthProvider(value) {
 	return VOID_AUTH_PROVIDER_SET.has(value);
 }
+/** Provider options other than the client credentials, with the env var that holds each one. */
+const VOID_AUTH_PROVIDER_SETTING_ENV_NAMES = { cognito: {
+	domain: "AUTH_COGNITO_DOMAIN",
+	region: "AUTH_COGNITO_REGION",
+	userPoolId: "AUTH_COGNITO_USER_POOL_ID"
+} };
+function getVoidAuthProviderSettingEnvNames(provider) {
+	return VOID_AUTH_PROVIDER_SETTING_ENV_NAMES[provider] ?? {};
+}
 function getVoidAuthProviderEnvNames(provider) {
 	const normalized = provider.toUpperCase().replaceAll("-", "_");
 	return {
@@ -53,4 +62,4 @@ function getVoidAuthProviderEnvNames(provider) {
 	};
 }
 //#endregion
-export { isVoidSocialAuthProvider as a, isVoidAuthProvider as i, VOID_EMAIL_AUTH_PROVIDER as n, getVoidAuthProviderEnvNames as r, VOID_AUTH_PROVIDERS as t };
+export { isVoidAuthProvider as a, getVoidAuthProviderSettingEnvNames as i, VOID_EMAIL_AUTH_PROVIDER as n, isVoidSocialAuthProvider as o, getVoidAuthProviderEnvNames as r, VOID_AUTH_PROVIDERS as t };