void 1.1.11 → 1.1.12

package/dist/{platform-lifecycle-Dz2cJsLX.mjs → platform-lifecycle-CWc5gr6c.mjs}

@@ -1 +1 @@
-export { r as runPlatformLifecycleCommand } from "./platform-lifecycle-D0TdyXbN.mjs";
+export { r as runPlatformLifecycleCommand } from "./platform-lifecycle-3CR98Tg2.mjs";

package/dist/{platform-management-BvgbusqL.mjs → platform-management-DAE6g2QU.mjs}

@@ -1 +1 @@
-export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-CnXhgxTM.mjs";
+export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-o3LCCeE4.mjs";

package/dist/{platform-management-CnXhgxTM.mjs → platform-management-o3LCCeE4.mjs}

@@ -1,8 +1,8 @@
 import { S as writePendingInstallationSecrets, _ as removePlatformConnectionForInstallation, g as removeInstallationRecoverySecrets, h as readPendingInstallationSecrets, m as readInstallationRecoverySecrets, o as listInstallationManifests, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest, x as writeInstallationManifest } from "./platform-registry-B9mWX9LO.mjs";
 import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
 import { A as confirm, H as outro, K as select, L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { f as import_picocolors, l as formatUrl, m as printSuccess, p as note, r as createSpinner } from "./output-Ba6ZbrzY.mjs";
-import { A as matchesRecordedR2Fingerprint, B as activatePlatformAccessCredentials, C as platformTrafficAttachmentWorker, D as formatPlatformInstallPlan, E as dnsRecordConfigHash, F as platformDatabaseNameFromOwnerUrl, G as PlatformCloudflareClient, I as turnOffInstalledProjectZeroTrust, J as hyperdriveOriginMatches, K as hyperdriveOriginConfigHash, L as assertPlatformOperatorCredentialCanApplyPlan, M as r2BucketConfigHash, N as resourceMarkerProblem, O as hasProvisionIntentStep, P as revalidatePlatformInstallAction, R as resolvePlatformCloudflareCredential, T as createPlatformInstallPlan, W as PlatformCloudflareApiError, Y as verifyPlatformRuntimeTokenPermissions, _ as readPlatformDatabase, a as authenticationSetupRequestHash, b as createPlatformInstallationSecrets, c as REMOTE_INSTALLATION_MANIFEST_KEY, g as formatZeroTrustApplications, h as assertProjectZeroTrustAllowsUninstall, j as platformAdoptionIntentHash, k as legacyResourceConfigHash, l as installPlatform, m as readPlatformProjectZeroTrustState, n as resolvePlatformInstallDatabaseUrl, o as readLoginReplacementFile, p as readPlatformProjectSlugs, q as hyperdriveOriginFromConnectionString, s as replacePendingInstallationAuthentication, t as assertNoninteractivePlatformMutationAcknowledged, u as acquirePlatformDatabaseLifecycleLock, v as loadPlatformRuntime, x as resolveBootstrapGitHubId, y as createPlatformHealthProbeToken, z as verifyPlatformCloudflareCredential } from "./platform-lifecycle-D0TdyXbN.mjs";
+import { f as import_picocolors, l as formatUrl, m as printSuccess, p as note, r as createSpinner } from "./output-CKguMgr7.mjs";
+import { $ as hyperdriveOriginMatches, A as dnsRecordConfigHash, B as turnOffInstalledProjectZeroTrust, C as createPlatformHealthProbeToken, D as platformTrafficAttachmentWorker, F as platformAdoptionIntentHash, H as resolvePlatformCloudflareCredential, I as r2BucketConfigHash, J as PlatformCloudflareApiError, L as resourceMarkerProblem, M as hasProvisionIntentStep, N as legacyResourceConfigHash, P as matchesRecordedR2Fingerprint, Q as hyperdriveOriginFromConnectionString, R as revalidatePlatformInstallAction, S as loadPlatformRuntime, T as resolveBootstrapGitHubId, U as verifyPlatformCloudflareCredential, V as assertPlatformOperatorCredentialCanApplyPlan, W as activatePlatformAccessCredentials, X as PlatformRuntimeTokenEmailPermissionError, Y as PlatformCloudflareClient, Z as hyperdriveOriginConfigHash, _ as readPlatformProjectSlugs, a as findPlatformWorkerOutsideChanges, b as formatZeroTrustApplications, c as uploadPlatformWorkerOutsideChanges, d as replacePendingInstallationAuthentication, et as verifyPlatformRuntimeTokenEmailPermissions, f as REMOTE_INSTALLATION_MANIFEST_KEY, j as formatPlatformInstallPlan, k as createPlatformInstallPlan, l as authenticationSetupRequestHash, m as acquirePlatformDatabaseLifecycleLock, n as resolvePlatformInstallDatabaseUrl, o as formatPlatformWorkerOutsideChanges, p as installPlatform, s as reviewPlatformWorkerOutsideChanges, t as assertNoninteractivePlatformMutationAcknowledged, tt as verifyPlatformRuntimeTokenPermissions, u as readLoginReplacementFile, v as readPlatformProjectZeroTrustState, w as createPlatformInstallationSecrets, x as readPlatformDatabase, y as assertProjectZeroTrustAllowsUninstall, z as platformDatabaseNameFromOwnerUrl } from "./platform-lifecycle-3CR98Tg2.mjs";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, parsePlatformInstallationManifest, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
 import { setTimeout } from "node:timers/promises";
 //#region src/cli/platform-teardown.ts
@@ -738,6 +738,8 @@ async function runInstalledPlatformCommand(args) {
 		log.info(manifest.desiredState === "disabled" && args.subcommand !== "enable" ? "Application traffic will stay paused because this installation is disabled." : "Application traffic may pause briefly during a safe cutover.");
 		if (args.plan) {
 			if (loginFile !== void 0) log.info(`Login settings will be replaced from ${loginFile}; a new setup code is printed at the end.`);
+			const outsideChanges = await findPlatformWorkerOutsideChanges(client, plan, runtime, { manifest });
+			if (outsideChanges.length > 0) log.warn(`${formatPlatformWorkerOutsideChanges(outsideChanges)}\nThis command replaces their configuration with the Void configuration. Run it in a terminal to review them first.`);
 			outro("No Cloudflare or local installation state was changed.");
 			return;
 		}
@@ -789,14 +791,41 @@ async function runInstalledPlatformCommand(args) {
 			...replacedLogin
 		});
 		const runtimeTokenToPreflight = resolvePlatformRuntimeTokenToPreflight(plan, secrets);
+		const emailZoneId = installation.desiredState !== "disabled" && plan.deployment.capabilities.email ? plan.deployment.emailSharedZoneId : void 0;
 		if (runtimeTokenToPreflight) await verifyPlatformRuntimeTokenPermissions(new PlatformCloudflareClient(runtimeTokenToPreflight), {
 			accountId: manifest.account.id,
 			applicationDomain: deployment.application.baseDomain,
 			customDomains: plan.deployment.capabilities.customDomains,
+			...emailZoneId ? { emailZoneId } : {},
 			zoneId: plan.zone?.id ?? null
 		});
+		else if (emailZoneId && secrets.cloudflareApiToken) try {
+			await verifyPlatformRuntimeTokenEmailPermissions(new PlatformCloudflareClient(secrets.cloudflareApiToken), {
+				accountId: manifest.account.id,
+				savedToken: true,
+				zoneId: emailZoneId
+			});
+		} catch (error) {
+			if (!(error instanceof PlatformRuntimeTokenEmailPermissionError) || !error.tokenNotValid) throw error;
+			log.warn("The runtime API token saved on this machine is not valid (HTTP 401). Void cannot check the platform email permissions before it changes the platform, and it continues without this check. To do the check, set VOID_PLATFORM_RUNTIME_CLOUDFLARE_API_TOKEN to the runtime token of the platform.");
+		}
 		markPhase("runtime token");
 		if (!databaseLock?.readAuthenticationState) throw new Error("platform: The database lifecycle lock cannot read authoritative authentication settings.");
+		const outsideChanges = await reviewPlatformWorkerOutsideChanges({
+			client,
+			plan,
+			runtime,
+			installation: {
+				manifest: installation,
+				readAuthenticationState: databaseLock.readAuthenticationState
+			},
+			interactive: process.stdin.isTTY === true && process.stdout.isTTY === true && !args.yes,
+			command: platformLifecycleResumeCommand({
+				...args,
+				yes: false
+			}, manifest.id)
+		});
+		markPhase("outside changes");
 		progress = createSpinner({ onCancel: () => {
 			if (!process.emit("SIGINT")) process.exit(130);
 		} });
@@ -825,6 +854,15 @@ async function runInstalledPlatformCommand(args) {
 			}),
 			client,
 			operatorApiToken: operatorCredential.token,
+			...outsideChanges.length > 0 ? {
+				replaceOutsideChanges: outsideChanges.map((change) => change.name),
+				uploadOutsideChanges: (configs) => uploadPlatformWorkerOutsideChanges(configs, {
+					changes: outsideChanges,
+					client,
+					operatorApiToken: operatorCredential.token,
+					progress
+				})
+			} : {},
 			databaseRollbackSource: rollbackSourceRuntime ?? void 0,
 			onProgress: (message) => {
 				markPhase(message);

package/dist/{platform-plans-config-BWn1S2Rv.mjs → platform-plans-config-CBMZxCep.mjs}

@@ -1,5 +1,5 @@
 import { A as confirm, K as select, X as text, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess } from "./output-Ba6ZbrzY.mjs";
+import { m as printSuccess } from "./output-CKguMgr7.mjs";
 import { n as OperatorClient, r as OperatorClientError } from "./operator-client-C-ROjk1I.mjs";
 import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-Cr2zCc-J.mjs";
 import { stripVTControlCharacters } from "node:util";

package/dist/{platform-recovery-CH_fThW6.mjs → platform-recovery-Dmsg7lWA.mjs}

@@ -1,7 +1,7 @@
 import { o as listInstallationManifests, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-B9mWX9LO.mjs";
 import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
-import { T as createPlatformInstallPlan, c as REMOTE_INSTALLATION_MANIFEST_KEY } from "./platform-lifecycle-D0TdyXbN.mjs";
-import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-CnXhgxTM.mjs";
+import { f as REMOTE_INSTALLATION_MANIFEST_KEY, k as createPlatformInstallPlan } from "./platform-lifecycle-3CR98Tg2.mjs";
+import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-o3LCCeE4.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
 //#region src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {

package/dist/{platform-setup-YvN9VQXV.mjs → platform-setup-hFbnWAVQ.mjs}

@@ -1,6 +1,6 @@
 import { u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { f as import_picocolors, s as formatLink } from "./output-Ba6ZbrzY.mjs";
+import { f as import_picocolors, s as formatLink } from "./output-CKguMgr7.mjs";
 //#region src/cli/platform-setup.ts
 /** Return a prompt answer, or stop the platform command when the prompt was cancelled. */
 function platformPromptAnswer(value) {

package/dist/{prepare-2XD6kh77.mjs → prepare-HKo7Rh5V.mjs}

@@ -1,5 +1,5 @@
 import { L as log } from "./dist-BVdsO7Py.mjs";
-import { m as printSuccess, p as note } from "./output-Ba6ZbrzY.mjs";
+import { m as printSuccess, p as note } from "./output-CKguMgr7.mjs";
 import { t as prepareProject } from "./prepare-DepAGBcV.mjs";
 //#region src/cli/prepare.ts
 async function runPrepareCommand(root) {

package/dist/{project-cmd-CpLYflCH.mjs → project-cmd-8ylYGx-O.mjs}

@@ -1,8 +1,8 @@
 import { n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
 import { c as getToken, s as getSiteDomain } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { _ as tablePrefix, f as import_picocolors, i as dim, l as formatUrl, o as formatCount } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { _ as tablePrefix, f as import_picocolors, i as dim, l as formatUrl, o as formatCount } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 //#region src/cli/projects.ts
 async function runProjectsCommand(root) {
 	console.log();
@@ -38,77 +38,77 @@ async function runProjectsCommand(root) {
 async function runProjectCommand(root, args) {
 	const cloudflare = readDeploymentPlatform(root) === "cloudflare";
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-CUfD9RSb.mjs");
+		const { runListCommand } = await import("./list-hKoW5z-b.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare apps are identified by cloudflare.name in void.config.ts and do not need linking.");
-		const { runLink } = await import("./link-CgOVn9EC.mjs");
+		const { runLink } = await import("./link-CwrfpjIM.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") {
 		if (cloudflare) {
-			const { runListCommand } = await import("./list-CUfD9RSb.mjs");
+			const { runListCommand } = await import("./list-hKoW5z-b.mjs");
 			return runListCommand(root);
 		}
 		return runProjectsCommand(root);
 	}
 	if (args.subcommand === "token") {
 		if (cloudflare) throw new Error("project: CI deploy credentials are available only for Void platform projects.");
-		const { runProjectTokenCommand } = await import("./project-token-Cybtlfbl.mjs");
+		const { runProjectTokenCommand } = await import("./project-token-QWHoJH2t.mjs");
 		return runProjectTokenCommand(root, args);
 	}
 	if (args.subcommand === "team") {
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-DOFygYi4.mjs");
+			const { printHelpPage } = await import("./help-w-xlx_kq.mjs");
 			printHelpPage(["project", "team"]);
 			return;
 		}
 		const accountInvitationAction = args.action === "pending" || args.action === "accept" || args.action === "decline";
 		if (cloudflare && !accountInvitationAction) throw new Error("project: Teams are available only for projects hosted on a Void platform, not direct Cloudflare deployments.");
-		const { runProjectTeamCommand } = await import("./project-team-CTSY7W7Q.mjs");
+		const { runProjectTeamCommand } = await import("./project-team-Bvpl78we.mjs");
 		return runProjectTeamCommand(root, args);
 	}
 	if (args.subcommand === "zero-trust") {
 		if (cloudflare) throw new Error("project: Zero Trust overrides are available only for projects hosted on a Void platform.");
 		if (args.action === "") {
-			const { printHelpPage } = await import("./help-DOFygYi4.mjs");
+			const { printHelpPage } = await import("./help-w-xlx_kq.mjs");
 			printHelpPage(["project", "zero-trust"]);
 			return;
 		}
 		const action = args.action;
-		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-DKOtqyvu.mjs");
+		const { runProjectZeroTrustCommand } = await import("./project-zero-trust-8tJ-RFvu.mjs");
 		return runProjectZeroTrustCommand(root, {
 			...args,
 			action
 		});
 	}
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-DeizBI4j.mjs");
+		const { runLogsCommand } = await import("./logs-CEWqD-_B.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "requests") {
 		if (cloudflare) throw new Error("project: Historical request analytics require the Void platform. Use `void project logs` for a live Cloudflare tail.");
-		const { runRequestsCommand } = await import("./requests-Ryiazz9i.mjs");
+		const { runRequestsCommand } = await import("./requests-Vk5Zyhcy.mjs");
 		return runRequestsCommand(root, args.range, args.status || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-Or0EV3rP.mjs");
-		return runRollbackCommand(root, args.deployId || void 0);
+		const { runRollbackCommand } = await import("./rollback-CH4yMQys.mjs");
+		return runRollbackCommand(root, args.deployId || void 0, args.platform);
 	}
 	if (args.subcommand === "cancel") {
 		if (cloudflare) throw new Error("project: Direct Cloudflare deploys activate only after readiness succeeds, so there is no remote build to cancel.");
-		const { runCancelDeployCommand } = await import("./cancel-deploy-DXoR6oC3.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-CaARY26n.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
 		if (cloudflare) throw new Error("project: Refusing to delete Cloudflare resources through this command. Direct deployments are additive and existing resources may be shared.");
-		const { runDeleteCommand } = await import("./delete-PgN6L_9N.mjs");
+		const { runDeleteCommand } = await import("./delete-CAma7nFi.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
 		if (cloudflare) throw new Error("project: `void project purge-cache` is available only for projects hosted on a Void platform. For a direct Cloudflare deploy, redeploy or purge the configured ISR KV namespace.");
-		const { runPurgeCacheCommand } = await import("./cache-TZ5Ab3d7.mjs");
+		const { runPurgeCacheCommand } = await import("./cache-CEFb5ban.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{project-team-CTSY7W7Q.mjs → project-team-Bvpl78we.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken, i as getAccountCredential } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { h as sanitizeTerminalText, l as formatUrl, m as printSuccess, o as formatCount, p as note } from "./output-Ba6ZbrzY.mjs";
-import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-GuSO3v_x.mjs";
+import { h as sanitizeTerminalText, l as formatUrl, m as printSuccess, o as formatCount, p as note } from "./output-CKguMgr7.mjs";
+import { c as platformErrorMessage, n as PlatformApiError, r as PlatformClient, s as parsePlatformErrorBody } from "./client-BdzxubTS.mjs";
 import { r as requireProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-team.ts
 function clean(value) {

package/dist/{project-token-Cybtlfbl.mjs → project-token-QWHoJH2t.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { _ as tablePrefix, i as dim, m as printSuccess } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { _ as tablePrefix, i as dim, m as printSuccess } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 import { r as requireProjectBySlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-token.ts
 async function resolveTarget(root, args) {

package/dist/{project-zero-trust-DKOtqyvu.mjs → project-zero-trust-8tJ-RFvu.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { h as sanitizeTerminalText, m as printSuccess, p as note } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { h as sanitizeTerminalText, m as printSuccess, p as note } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 import { r as requireProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
 //#region src/cli/project-zero-trust.ts
 async function resolveTarget(root, args) {

package/dist/{protocol-B8sI8dRD.d.mts → protocol-Ssc_LhHj.d.mts}

@@ -1,5 +1,5 @@
 import { n as HeadDescriptor, t as HeadConfig } from "./head-C8K_iGe6.mjs";
-import { n as CloudBindings, r as CloudContext } from "./handler-_PqY82xe.mjs";
+import { n as CloudBindings, r as CloudContext } from "./handler-D5K_yP6T.mjs";
 import { a as PageRenderMode, t as DevCssAsset } from "./types-7AIz0OZu.mjs";
 //#region src/pages/protocol.d.ts
 /** Escape characters that are unsafe inside inline <script> tags to prevent XSS. */

package/dist/{protocol-RNP0u7UY.mjs → protocol-bAUUkx70.mjs}

@@ -1,7 +1,7 @@
 import { n as isConvertedResponse } from "./response-Tn7rU0MV.mjs";
 import { i as separateDeferred, n as DEFERRED, t as ValidationError } from "./validation-error-Dg9Recn1.mjs";
 import { i as resolveHead, n as renderHeadToString, r as renderHtmlAttrs, t as renderBodyAttrs } from "./head-D2VF4ApL.mjs";
-import { n as escapeScriptJson, t as serializePageData } from "./serialize-BtQyaYoC.mjs";
+import { i as escapeScriptJson, r as serializePageData } from "./serialize-YHvlcG3Q.mjs";
 //#region src/pages/protocol.ts
 const POWERED_BY = { "X-Powered-By": "Void" };
 const RENDER_ERROR_ASSET_TAGS_KEY = "__voidPageAssetTags";

package/dist/{provision-UcYjpTRh.mjs → provision-BgXFDv0d.mjs}

@@ -1 +1 @@
-export { f as isRealD1Id, p as isRealHyperdriveId } from "./provision-BuifYvLc.mjs";
+export { f as isRealD1Id, p as isRealHyperdriveId } from "./provision-DZKYCEJg.mjs";

package/dist/{provision-BuifYvLc.mjs → provision-DZKYCEJg.mjs}

@@ -455,6 +455,7 @@ function createDefaultRunWrangler(root, options) {
 	const teardownDeadlineMs = options?.signalTeardownDeadlineMs ?? confirmGraceMs + SIGNAL_TEARDOWN_DEADLINE_MARGIN_MS;
 	return (args, opts) => new Promise((resolvePromise, rejectPromise) => {
 		const parallelWorkerUpload = options?.parallelWorkerUpload === true && args.type === "versions.upload";
+		const interactive = (args.type === "versions.upload" || args.type === "worker.deploy") && args.interactive === true;
 		if (activeTeardown !== void 0) {
 			rejectPromise(/* @__PURE__ */ new Error(`provision: refusing to spawn a Cloudflare operation process — a fatal ${activeTeardown.signal} is being handled and this process is terminating; no new Cloudflare operation may start.`));
 			return;
@@ -474,7 +475,7 @@ function createDefaultRunWrangler(root, options) {
 				}),
 				...opts.suppressLogs ? { WRANGLER_WRITE_LOGS: "false" } : {}
 			},
-			stdio: [
+			stdio: interactive ? "inherit" : [
 				opts.input === void 0 ? "ignore" : "pipe",
 				"pipe",
 				"pipe"
@@ -556,7 +557,7 @@ function createDefaultRunWrangler(root, options) {
 			settled = true;
 			clearTimeout(commandTimer);
 			deregisterSelf();
-			resolvePromise(decodeCloudflareOperationResult(result));
+			resolvePromise(interactive ? result : decodeCloudflareOperationResult(result));
 		};
 		const quarantine = (detail) => {
 			if (settled) return;

package/dist/{requests-Ryiazz9i.mjs → requests-Vk5Zyhcy.mjs}

@@ -1,8 +1,8 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-BVdsO7Py.mjs";
-import { f as import_picocolors, i as dim } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { f as import_picocolors, i as dim } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 //#region src/cli/requests.ts
 async function runRequestsCommand(root, range, status) {
 	console.log();

package/dist/{rollback-Or0EV3rP.mjs → rollback-CH4yMQys.mjs}

@@ -1,13 +1,13 @@
 import { n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, K as select, L as log, O as cancel, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { c as formatRelativeTime, i as dim, m as printSuccess, o as formatCount, r as createSpinner } from "./output-Ba6ZbrzY.mjs";
-import { r as PlatformClient } from "./client-GuSO3v_x.mjs";
+import { c as formatRelativeTime, i as dim, m as printSuccess, o as formatCount, r as createSpinner } from "./output-CKguMgr7.mjs";
+import { r as PlatformClient } from "./client-BdzxubTS.mjs";
 //#region src/cli/rollback.ts
-async function runRollbackCommand(root, deployId) {
+async function runRollbackCommand(root, deployId, explicitPlatform) {
 	console.log();
 	const platform = readDeploymentPlatform(root);
-	if (platform === "cloudflare") return runCloudflareRollback(root, deployId);
+	if (explicitPlatform === "cloudflare" || platform === "cloudflare") return runCloudflareRollback(root, deployId, platform !== "cloudflare");
 	if (platform === "none") throw new Error("rollback: Deployment is disabled. Run `void init` to choose a platform.");
 	const token = getToken(root);
 	if (!token) {
@@ -73,8 +73,8 @@ async function runRollbackCommand(root, deployId) {
 		process.exit(1);
 	}
 }
-async function runCloudflareRollback(root, deployId) {
-	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-Cm8lVx7W.mjs");
+async function runCloudflareRollback(root, deployId, restorePlatformFlag) {
+	const { activateCloudflareExistingVersion, readCloudflareWorkerStatus, resolveCloudflareOperationContext } = await import("./cloudflare-operations-BFLCpUCV.mjs");
 	const context = resolveCloudflareOperationContext(root);
 	const status = await readCloudflareWorkerStatus(context);
 	const deployedVersionIds = new Set(status.deployedVersionIds);
@@ -116,7 +116,7 @@ async function runCloudflareRollback(root, deployId) {
 		await confirmRollbackOrExit();
 	} else {
 		const targetSet = new Set(target.metadata.migrations);
-		await confirmUnrevertedMigrations(current.metadata.migrations.filter((migration) => !targetSet.has(migration)), "version");
+		await confirmUnrevertedMigrations(current.metadata.migrations.filter((migration) => !targetSet.has(migration)), "version", restorePlatformFlag);
 	}
 	const spinner = createSpinner();
 	spinner.start("Rolling back...");
@@ -139,11 +139,12 @@ async function confirmRollbackOrExit() {
 	}
 }
 /** List migrations the rollback will not revert and ask before continuing. */
-async function confirmUnrevertedMigrations(migrationDiff, noun) {
+async function confirmUnrevertedMigrations(migrationDiff, noun, restorePlatformFlag = false) {
 	if (migrationDiff.length === 0) return;
 	log.warn(`The current database has ${formatCount(migrationDiff.length, "migration")} applied after this ${noun}:`);
 	for (const migration of migrationDiff) log.message(`  ${dim("•")} ${migration}`);
 	log.message(dim("Rolling back will NOT revert these migrations. The older code will run against the current schema."));
+	if (noun === "version") log.message(dim(`For D1, \`void db restore${restorePlatformFlag ? " --platform cloudflare" : ""} --bookmark <bookmark>\` undoes them with the restore point deploy printed before migrating. Restore points expire after 7 days on Workers Free and 30 days on Paid; undo older migrations with a new migration.`));
 	await confirmRollbackOrExit();
 }
 //#endregion

package/dist/runtime/client-react.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-react-7GFffu8R.mjs";
-import { a as fetch, o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-react.mjs

@@ -1,5 +1,5 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch } from "../fetch-CtESUYWd.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-react-CMLwT2xI.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-solid.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-solid-DyTFL4cq.mjs";
-import { a as fetch, o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-solid.mjs

@@ -1,5 +1,5 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch } from "../fetch-CtESUYWd.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-solid-UoreJWZG.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-svelte.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-svelte-zetW0KIH.mjs";
-import { a as fetch, o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-svelte.mjs

@@ -1,5 +1,5 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch } from "../fetch-CtESUYWd.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-svelte-Cv_WvrRk.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-vue.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-vue-bChShbQP.mjs";
-import { a as fetch, o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-vue.mjs

@@ -1,5 +1,5 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch } from "../fetch-CtESUYWd.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-vue-CFk7Xbv3.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client.d.mts

@@ -1,5 +1,5 @@
 import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-DkcFflXV.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-Bawdj38n.mjs";
-import { a as fetch, o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError, s as fetch } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client.mjs

@@ -1,5 +1,5 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch } from "../fetch-CtESUYWd.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 import { n as createAuthClient, t as auth } from "../auth-client-BWBT8HLp.mjs";
 export { FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/fetch-server.d.mts

@@ -0,0 +1,8 @@
+import { a as UntypedFetchOptions, c as FetchError } from "../fetch-CUX0tB78.mjs";
+//#region src/runtime/fetch-server.d.ts
+/** Keep local calls in the app while using the browser client's request and error handling. */
+export declare function createServerFetch<Context extends {
+  request?: Request;
+}>(dispatch: (request: Request, context: Context | undefined) => Response | Promise<Response>, getContext: () => Context | undefined, fallbackOrigin: string): (path: string, options?: UntypedFetchOptions) => Promise<unknown>;
+//#endregion
+export { FetchError };

package/dist/runtime/fetch-server.mjs

@@ -0,0 +1,30 @@
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { t as createRouteFetch } from "../fetch-CtESUYWd.mjs";
+//#region src/runtime/fetch-server.ts
+/** Keep local calls in the app while using the browser client's request and error handling. */
+function createServerFetch(dispatch, getContext, fallbackOrigin) {
+	return createRouteFetch(async (input, init) => {
+		const store = getContext();
+		const origin = store?.request ? new URL(store.request.url).origin : fallbackOrigin;
+		const request = new Request(new URL(String(input), origin), init);
+		if (new URL(request.url).origin !== origin) return globalThis.fetch(request);
+		for (const name of ["cookie", "authorization"]) if (!request.headers.has(name)) {
+			const value = store?.request?.headers.get(name);
+			if (value) request.headers.set(name, value);
+		}
+		const signal = request.signal;
+		signal.throwIfAborted();
+		let abort;
+		try {
+			return await new Promise((resolve, reject) => {
+				abort = () => reject(signal.reason);
+				signal.addEventListener("abort", abort, { once: true });
+				Promise.resolve(dispatch(request, store)).then(resolve, reject);
+			});
+		} finally {
+			signal.removeEventListener("abort", abort);
+		}
+	});
+}
+//#endregion
+export { FetchError, createServerFetch };

package/dist/runtime/fetch-stream.d.mts

@@ -1,3 +1,3 @@
-import { o as FetchError } from "../fetch-DHLOuPyk.mjs";
-import { t as fetchStream } from "../fetch-stream-CNxOrBdP.mjs";
+import { c as FetchError } from "../fetch-CUX0tB78.mjs";
+import { t as fetchStream } from "../fetch-stream-DfkAzZf-.mjs";
 export { FetchError as StreamError, fetchStream };

package/dist/runtime/fetch-stream.mjs

@@ -1,3 +1,3 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetchStream } from "../fetch-stream-PGgz4uGz.mjs";
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { t as fetchStream } from "../fetch-stream-BspOeTAI.mjs";
 export { FetchError as StreamError, fetchStream };

package/dist/runtime/fetch.d.mts

@@ -1,2 +1,2 @@
-import { a as fetch, i as QueryOption, n as MethodsOf, o as FetchError, r as ParamsOption, t as BodyOption } from "../fetch-DHLOuPyk.mjs";
-export { BodyOption, FetchError, MethodsOf, ParamsOption, QueryOption, fetch };
+import { a as UntypedFetchOptions, c as FetchError, i as QueryOption, n as MethodsOf, o as createRouteFetch, r as ParamsOption, s as fetch, t as BodyOption } from "../fetch-CUX0tB78.mjs";
+export { BodyOption, FetchError, MethodsOf, ParamsOption, QueryOption, UntypedFetchOptions, createRouteFetch, fetch };

package/dist/runtime/fetch.mjs

@@ -1,3 +1,3 @@
-import { t as FetchError } from "../fetch-error-Dj3crt0e.mjs";
-import { t as fetch } from "../fetch-sAcwjzLO.mjs";
-export { FetchError, fetch };
+import { t as FetchError } from "../fetch-error-Bw0n-IY-.mjs";
+import { n as fetch, t as createRouteFetch } from "../fetch-CtESUYWd.mjs";
+export { FetchError, createRouteFetch, fetch };

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-_PqY82xe.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-D5K_yP6T.mjs";
 export { BasicAuthOptions, CloudBindings, CloudContext, CloudContextVariables, CloudEnv, type Deferred, type HandlerInput, type InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, type ValidatorSlots, VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/live-client.d.mts

@@ -1,4 +1,4 @@
-import { t as LiveClientEvent } from "../live-DJONVlQK.mjs";
+import { t as LiveClientEvent } from "../live-JheIDZKc.mjs";
 //#region src/runtime/live-client.d.ts
 export type LiveSubscribeOptions<Data = unknown> = {
   id: string;

package/dist/runtime/live.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { _ as __getLiveBindingName, a as LiveControlErrorCode, b as defineLiveStream, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as __setLiveDev } from "../live-DJONVlQK.mjs";
+import { _ as __getLiveBindingName, a as LiveControlErrorCode, b as defineLiveStream, c as LiveControlOptions, d as LiveHookContext, f as LiveLimits, g as LiveSubscribeHookContext, h as LiveStreamOptions, i as LiveControlError, l as LiveControlRequest, m as LiveStream, n as LiveConnectHookContext, o as LiveControlOperation, p as LivePublishOptions, r as LiveConnectOptions, s as LiveControlOperationResult, t as LiveClientEvent, u as LiveControlResponse, v as __setLiveBindingName, y as __setLiveDev } from "../live-JheIDZKc.mjs";
 export { LiveClientEvent, LiveConnectHookContext, LiveConnectOptions, LiveControlError, LiveControlErrorCode, LiveControlOperation, LiveControlOperationResult, LiveControlOptions, LiveControlRequest, LiveControlResponse, LiveHookContext, LiveLimits, LivePublishOptions, LiveStream, LiveStreamOptions, LiveSubscribeHookContext, __getLiveBindingName, __setLiveBindingName, __setLiveDev, defineLiveStream };

package/dist/runtime/routing.d.mts

@@ -1,5 +1,5 @@
 import { t as DevCssAsset } from "../types-7AIz0OZu.mjs";
-import { a as handlePageMutation, i as handlePageGet } from "../protocol-B8sI8dRD.mjs";
+import { a as handlePageMutation, i as handlePageGet } from "../protocol-Ssc_LhHj.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Context, ExecutionContext, Hono, MiddlewareHandler } from "hono";
 //#region src/runtime/routing-errors.d.ts

package/dist/runtime/routing.mjs

@@ -1,6 +1,6 @@
 import { n as createClientAssetTags, r as createManifestLoader, t as ASSET_EXTENSIONS } from "../routing-assets-VkrKIbxE.mjs";
 import { t as convertReturnValue } from "../response-Tn7rU0MV.mjs";
-import { n as handlePageGet, r as handlePageMutation } from "../protocol-RNP0u7UY.mjs";
+import { n as handlePageGet, r as handlePageMutation } from "../protocol-bAUUkx70.mjs";
 import { t as VoidAssetRewriteError } from "../handler-BZ1t7-Rv.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { compilePattern, matchPattern, matchPatternCaptures, mergeQueryIntoLocation, substituteParams } from "@void/edge";