void 1.2.1 → 1.4.0

package/dist/cli/cli.mjs

@@ -4,10 +4,10 @@ import { t as formatCloudflareUserMessage } from "../cloudflare-user-output-Q-k0
 import { n as getOwnVersion } from "../agents-CuNtT0D_.mjs";
 import { f as import_picocolors, l as formatUrl } from "../output-BpgYODYx.mjs";
 import { n as isD1Bookmark } from "../cf-command-values-ByHk0xg4.mjs";
-import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-CxSlPpzJ.mjs";
+import { i as printVoidHeader, n as printGlobalHelp, r as printHelpPage, t as getHelpPath } from "../help-CKbrhZha.mjs";
 import { r as OperatorClientError } from "../operator-client-C-ROjk1I.mjs";
-import { n as operatorGroups } from "../operator-args-UnE8Y2eK.mjs";
-import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-DVbVClZl.mjs";
+import { n as operatorGroups } from "../operator-args-BsJIYXaT.mjs";
+import { n as platformSubcommands, t as parsePlatformArgs } from "../platform-args-BMD2gjc_.mjs";
 import { parseArgs } from "node:util";
 //#region src/cli/account-args.ts
 const accountSubcommands = [
@@ -627,6 +627,11 @@ const emailSubcommands = [
 		arg: "<address>",
 		description: "Remove a verified recipient"
 	},
+	{
+		name: "alias",
+		arg: "[name]",
+		description: "Show the shared mail address, or set a shorter permanent name for it"
+	},
 	{
 		name: "domain",
 		arg: "<add|status|list|sync|rotate-secret|remove>",
@@ -649,6 +654,7 @@ const EMAIL_SUBCOMMANDS = [
 	"destinations",
 	"allow",
 	"disallow",
+	"alias",
 	"domain",
 	"status",
 	"setup"
@@ -685,11 +691,12 @@ function readFlagValue(rest, i, flag) {
 }
 function parseEmailArgs(args) {
 	const subcommand = args[0];
-	if (!subcommand || !EMAIL_SUBCOMMANDS.includes(subcommand)) throw new Error("email: Usage: void email <usage|logs|destinations|allow|disallow|domain|status|setup> [args] [--project <name>] [--limit <n>] [--platform cloudflare].");
+	if (!subcommand || !EMAIL_SUBCOMMANDS.includes(subcommand)) throw new Error("email: Usage: void email <usage|logs|destinations|allow|disallow|alias|domain|status|setup> [args] [--project <name>] [--limit <n>] [--platform cloudflare].");
 	let limit;
 	const projectValues = [];
 	const platformValues = [];
 	const positional = [];
+	let yes = false;
 	const rest = args.slice(1);
 	for (let i = 0; i < rest.length; i++) if (rest[i] === "--project" || rest[i]?.startsWith("--project=")) {
 		const { value, next } = readFlagValue(rest, i, "--project");
@@ -708,7 +715,8 @@ function parseEmailArgs(args) {
 		if (value === void 0) throw new Error("email: --platform requires a value ('cloudflare' or 'void').");
 		platformValues.push(value);
 		i = next;
-	} else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) throw new Error("email: Unknown option '--backend'.");
+	} else if (rest[i] === "--yes" && subcommand === "alias") yes = true;
+	else if (rest[i] === "--backend" || rest[i]?.startsWith("--backend=")) throw new Error("email: Unknown option '--backend'.");
 	else if (rest[i] === "--subdomain" || rest[i]?.startsWith("--subdomain=")) throw new Error("email: Unknown option '--subdomain'.");
 	else positional.push(rest[i]);
 	if (projectValues.length > 1) throw new Error("email: --project can only be specified once.");
@@ -741,7 +749,8 @@ function parseEmailArgs(args) {
 		projectSlug,
 		limit,
 		address,
-		platform
+		platform,
+		...yes ? { yes } : {}
 	};
 }
 /**
@@ -1632,19 +1641,19 @@ const args = process.argv.slice(2);
 const command = args[0];
 const helpPath = getHelpPath(args);
 const subcommandGroups = {
-	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-6I81r-ix.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
-	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-CdUll_35.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
-	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-PiNRkopU.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
-	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-DMzCv12s.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
-	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DA4K5faU.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
-	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-BbXHfLAt.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
-	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CA2wBgra.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
-	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DXpCc77w.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
-	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-DVOkLH5X.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
-	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-DgOQ9_8S.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
-	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-NrOlWZaG.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
-	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-CY9LUqLh.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
-	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-ex1g-j_e.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
+	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-vafo7x8w.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
+	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-HP8bixYo.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
+	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-CV8NxIIn.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
+	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-D-b_u3T4.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
+	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DBYqAIbe.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
+	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-3X0PxmuX.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
+	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-DyhNtdYf.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
+	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DM2wDcBN.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
+	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-Cdvr3zwG.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
+	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-78hbN-oI.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
+	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-BhWBT4iu.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
+	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-De-_IWbM.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
+	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-9vUAQ1_V.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
 };
 if (helpPath) {
 	if (helpPath.length === 0) printGlobalHelp();
@@ -1663,7 +1672,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-CE0Ev0Ob.mjs").then(({ runDeploy }) => {
+	import("../deploy-CX94CmKa.mjs").then(({ runDeploy }) => {
 		runDeploy(root, deployArgs).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1671,14 +1680,14 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-k7R2rPVA.mjs");
+	const { runConnectCommand } = await import("../connect-BOM6zvFX.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
 else if (command && Object.hasOwn(subcommandGroups, command)) subcommandGroups[command]();
-else if (command === "info") import("../info-7VDlhtyy.mjs").then(async ({ runInfoCommand }) => {
+else if (command === "info") import("../info-Yg0-V5Rs.mjs").then(async ({ runInfoCommand }) => {
 	try {
 		await runInfoCommand(process.cwd(), parseInfoArgs(args.slice(1)));
 	} catch (err) {
@@ -1699,7 +1708,7 @@ else if (command === "prepare") {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-BcAE5Sdj.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-BuOS18AM.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1707,7 +1716,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-DxYyOs4-.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-CDiJQycf.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1725,7 +1734,7 @@ else if (command === "prepare") {
 		log.error("migrate: This command takes no arguments.");
 		process.exit(1);
 	}
-	import("../migrate-n49ZeS1X.mjs").then(({ runMigrateCommand }) => {
+	import("../migrate-BIYTPQE6.mjs").then(({ runMigrateCommand }) => {
 		runMigrateCommand(process.cwd()).catch((err) => {
 			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
@@ -1800,7 +1809,7 @@ else if (command) {
 		},
 		{
 			name: "email",
-			hint: "usage | logs | destinations | allow | disallow | domain | status | setup",
+			hint: "usage | logs | destinations | allow | disallow | alias | domain | status | setup",
 			description: "Inspect email activity and manage verified recipients"
 		},
 		{
@@ -1847,32 +1856,32 @@ else if (command) {
 		if (Object.hasOwn(subcommandGroups, cmd)) return subcommandGroups[cmd]();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-k7R2rPVA.mjs");
+				const { runConnectCommand } = await import("../connect-BOM6zvFX.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-DxYyOs4-.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-CDiJQycf.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "migrate": {
-				const { runMigrateCommand } = await import("../migrate-n49ZeS1X.mjs");
+				const { runMigrateCommand } = await import("../migrate-BIYTPQE6.mjs");
 				await runMigrateCommand(root);
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-CE0Ev0Ob.mjs");
+				const { runDeploy } = await import("../deploy-CX94CmKa.mjs");
 				await runDeploy(root);
 				return;
 			}
 			case "info": {
-				const { runInfoCommand } = await import("../info-7VDlhtyy.mjs");
+				const { runInfoCommand } = await import("../info-Yg0-V5Rs.mjs");
 				await runInfoCommand(root, parseInfoArgs([]));
 				return;
 			}
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-BcAE5Sdj.mjs");
+				const { runPrepareCommand } = await import("../prepare-BuOS18AM.mjs");
 				await runPrepareCommand(root);
 				return;
 			}

package/dist/cli/cloudflare-operation-process.mjs

@@ -4,7 +4,7 @@ import { a as join, c as resolve, n as dirname } from "../dist-ipQi0Q8y.mjs";
 import { t as require_picocolors } from "../picocolors-BsDfhxIw.mjs";
 import { l as formatUrl } from "../output-BpgYODYx.mjs";
 import { i as safePositional, n as isD1Bookmark, r as readCfUploadOutput, t as CF_VERSION_SOURCE_MAX_OUTPUT_BYTES } from "../cf-command-values-ByHk0xg4.mjs";
-import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareObservability } from "../cf-worker-settings-BECvvTVd.mjs";
+import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareWorkerSettings } from "../cf-worker-settings-Dg27RzyT.mjs";
 import { t as sanitizeTerminalLogText } from "../terminal-log-text-D9ACPOuG.mjs";
 import { copyFileSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -254,7 +254,7 @@ async function withBuildOutput(raw, sourceMain, action) {
 		}), { mode: 384 });
 		const accountId = process.env.CLOUDFLARE_ACCOUNT_ID ?? raw.account_id;
 		if (typeof accountId !== "string" || !accountId) throw new Error("Cloudflare account is not pinned for Worker deployment.");
-		const { prepareCfBuildOutput } = await import("../cf-build-output-BJHuSsVN.mjs");
+		const { prepareCfBuildOutput } = await import("../cf-build-output-bd8Uwv1P.mjs");
 		const output = await prepareCfBuildOutput(scratch, accountId);
 		if (!output) throw new Error("Could not prepare the Cloudflare Worker build output.");
 		try {
@@ -530,6 +530,25 @@ function listAllResourcePages(command, extraFlags = []) {
 	}
 	throw new Error(`Cloudflare ${command.join(" ")} exceeded the supported page limit.`);
 }
+/**
+* Each consumer's Worker script name, or null for one that is not a Worker (HTTP pull).
+* Undefined when the list is incomplete or unreadable; only queue naming needs it.
+*/
+function queueConsumerWorkers(queue) {
+	const consumers = queue.consumers;
+	if (!Array.isArray(consumers) || queue.consumers_total_count !== void 0 && queue.consumers_total_count !== consumers.length) return;
+	const workers = [];
+	for (const entry of consumers) {
+		const consumer = object(entry);
+		const { script_name: scriptName, script } = consumer;
+		if (scriptName !== void 0 && (typeof scriptName !== "string" || !scriptName) || script !== void 0 && (typeof script !== "string" || !script) || scriptName !== void 0 && script !== void 0 && scriptName !== script) return;
+		const name = scriptName ?? script;
+		if (typeof name === "string" && (consumer.type === void 0 || consumer.type === "worker")) workers.push(name);
+		else if (name === void 0 && consumer.type === "http_pull") workers.push(null);
+		else return;
+	}
+	return workers;
+}
 async function readAllQueues() {
 	const queues = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -550,12 +569,16 @@ async function readAllQueues() {
 }
 async function resources() {
 	switch (operation.type) {
+		case "workers.subdomain.get": {
+			const { subdomain } = object((await cloudflareApiGet(`/accounts/${encodeURIComponent(accountId())}/workers/subdomain`, "Cloudflare did not return the account workers.dev subdomain.")).result);
+			if (typeof subdomain !== "string" || !subdomain.trim()) throw new Error("Cloudflare returned an invalid account workers.dev subdomain.");
+			return result(0, "", "", { subdomain });
+		}
 		case "d1.execute": return runCf([
 			"d1",
 			"query",
 			d1Database(operation.database).id,
-			"--sql",
-			operation.sql
+			`--sql=${operation.sql}`
 		]);
 		case "d1.migrations.list":
 		case "d1.migrations.apply": {
@@ -718,9 +741,11 @@ async function resources() {
 		]);
 		case "queues.info": {
 			const queue = (await readAllQueues()).find((item) => item.queue_name === operation.name);
+			const consumers = queue && queueConsumerWorkers(queue);
 			return queue ? result(0, "", "", {
 				id: queue.queue_id,
-				name: queue.queue_name
+				name: queue.queue_name,
+				...consumers ? { consumers } : {}
 			}) : {
 				...result(1, "", "Cloudflare Queue does not exist."),
 				failure: "not-found"
@@ -944,7 +969,8 @@ async function workerHistory() {
 					strategy: "percentage",
 					versions,
 					...operation.message ? { annotations: { "workers/message": operation.message } } : {}
-				})
+				}),
+				...operation.bypassDeploymentChecks ? ["--bypass-deployment-checks"] : []
 			]);
 		}
 		default: throw new Error("Unsupported Cloudflare Worker history operation.");
@@ -1002,11 +1028,12 @@ async function workerChanges() {
 			"deploy",
 			"--prebuilt"
 		], directory));
-		if (deployed.status === 0 && raw.observability !== void 0) await publishCloudflareObservability({
+		if (deployed.status === 0 && (raw.observability !== void 0 || raw.logpush !== void 0)) await publishCloudflareWorkerSettings({
 			apiBaseUrl: apiBaseUrl(),
 			accountId: accountId(),
 			workerName: name,
 			observability: raw.observability,
+			logpush: raw.logpush,
 			headers: await apiHeaders()
 		});
 		return deployed;
@@ -1023,7 +1050,7 @@ async function workerChanges() {
 				"create"
 			],
 			"--prebuilt",
-			...request.message ? ["--message", request.message] : [],
+			...request.message ? [`--message=${request.message}`] : [],
 			...request.secretsFilePath ? ["--secrets-file", request.secretsFilePath] : []
 		], directory, void 0, request.interactive === true));
 		if (called.status !== 0 || request.interactive === true) return called;

package/dist/cli/env-schema-probe.mjs

@@ -109,7 +109,7 @@ function emitResult(result) {
 	writeSync(RESULT_FD, JSON.stringify(result));
 }
 async function runFactsChild(root) {
-	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BmsdCZEk.mjs");
+	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BUfFZ6bt.mjs");
 	try {
 		emitResult({
 			kind: "ok",
@@ -128,7 +128,7 @@ async function runFactsChild(root) {
 }
 /** The parent already found the emitted config, so a read failure here fails closed. */
 async function runValidateEmittedChild(root) {
-	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BmsdCZEk.mjs");
+	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BUfFZ6bt.mjs");
 	const emitted = readEmittedWorkerVars(root);
 	if (!emitted.ok) {
 		emitResult({

package/dist/{client-BEkdj1kx.mjs → client-B3LnB_bE.mjs}

@@ -95,7 +95,7 @@ function readCliVersion() {
 }
 const VOID_CLI_VERSION = readCliVersion();
 /** The oldest Void platform release this CLI supports. */
-const MIN_PLATFORM_VERSION = "1.2.0";
+const MIN_PLATFORM_VERSION = "1.4.0";
 const RELEASE_VERSION = /^(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$/;
 /**
 * Discovery probes keyed by platform base URL. Every outcome (pass,
@@ -1013,6 +1013,13 @@ var PlatformClient = class {
 	async getEmailSettings(projectId) {
 		return this.json(`${this.baseUrl}/projects/${projectId}/email/settings`, "Failed to read email settings", { permission: "read" });
 	}
+	async setEmailAlias(projectId, alias) {
+		return this.json(`${this.baseUrl}/projects/${projectId}/email/alias`, "Failed to set the email alias", {
+			method: "PUT",
+			body: { alias },
+			permission: "settings"
+		});
+	}
 	async listEmailDomains(projectId) {
 		return this.json(`${this.baseUrl}/projects/${projectId}/email/domains`, "Failed to list email domains", { permission: "read" });
 	}

package/dist/client-BZb9j66F.mjs

@@ -0,0 +1 @@
+export { r as PlatformClient } from "./client-B3LnB_bE.mjs";

package/dist/{cloudflare-auth-Byo_0_N9.mjs → cloudflare-auth-DyD_kVFr.mjs}

@@ -145,7 +145,7 @@ function cloudflareAuthEnvironment(source = process.env) {
 		"WRANGLER_LOG_SANITIZE",
 		"CLOUDFLARE_AUTH_USE_KEYRING"
 	]);
-	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedKeys.has(key.toUpperCase())) delete env[key];
+	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|CF_ACCESS_READINESS_ORIGIN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedKeys.has(key.toUpperCase())) delete env[key];
 	env.CLOUDFLARE_AUTH_USE_KEYRING = "true";
 	return env;
 }

package/dist/{cloudflare-cmd-DMzCv12s.mjs → cloudflare-cmd-D-b_u3T4.mjs}

@@ -1,9 +1,9 @@
 import { t as basename } from "./dist-ipQi0Q8y.mjs";
-import { b as readRootWranglerConfig } from "./wrangler-F96NnLyb.mjs";
+import { b as readRootWranglerConfig } from "./wrangler-I-scB_1t.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
 import { i as isCleanCloudflareExit } from "./cloudflare-process-8jEYIeim.mjs";
-import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-Byo_0_N9.mjs";
+import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-DyD_kVFr.mjs";
 //#region src/cli/cloudflare-cmd.ts
 async function runCloudflareCommand(root, args) {
 	const runWrangler = createBundledCloudflareAuthRunner(root);

package/dist/{cloudflare-config-DchHxPTo.mjs → cloudflare-config-CH1AylZT.mjs}

@@ -1,15 +1,26 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
 import "./project-paths-DGu_QZ_Q.mjs";
-import { p as readConfig } from "./config-DHgSEWT7.mjs";
+import { p as readConfig } from "./config-OFOAimzt.mjs";
 import { t as writeFileAtomic } from "./atomic-write-Dq6R0BPN.mjs";
 import { t as parseJsoncObject } from "./generated-wrangler-config-DeWj5F9Y.mjs";
-import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { isRecord } from "@void/deploy-core";
 import { isDeepStrictEqual } from "node:util";
 //#region src/cloudflare-config.ts
 const MATERIALIZED_CLOUDFLARE_FILE = ".void-wrangler.jsonc";
 const VOID_LOCK_FILE = "void.lock.json";
 const PREVIEW_POINTER_FILE = "preview-deploy-config.json";
+/** Add the generated Cloudflare config to `.gitignore` unless a line already ignores it. */
+function ignoreMaterializedCloudflareConfig(root) {
+	const path = join(root, ".gitignore");
+	const source = existsSync(path) ? readFileSync(path, "utf8") : "";
+	if (source.split("\n").some((line) => {
+		const entry = line.trim();
+		return entry === ".void-wrangler.jsonc" || entry === `/.void-wrangler.jsonc`;
+	})) return;
+	const separator = source && !source.endsWith("\n") ? "\n" : "";
+	writeFileSync(path, `${source}${separator}${MATERIALIZED_CLOUDFLARE_FILE}\n`);
+}
 function arrayIdentity(value) {
 	if (isRecord(value)) {
 		for (const key of [
@@ -167,4 +178,4 @@ function seedCloudflareConfig(root, source, text) {
 	});
 }
 //#endregion
-export { restoreCloudflarePreviewPointer as a, persistCloudflareConfig as i, VOID_LOCK_FILE as n, seedCloudflareConfig as o, materializeCloudflareConfig as r, stashCloudflareDeployPointer as s, MATERIALIZED_CLOUDFLARE_FILE as t };
+export { persistCloudflareConfig as a, stashCloudflareDeployPointer as c, materializeCloudflareConfig as i, VOID_LOCK_FILE as n, restoreCloudflarePreviewPointer as o, ignoreMaterializedCloudflareConfig as r, seedCloudflareConfig as s, MATERIALIZED_CLOUDFLARE_FILE as t };

package/dist/{cloudflare-connect-CCRTVg-I.mjs → cloudflare-connect-zTJh8UnN.mjs}

@@ -1,7 +1,7 @@
 import { a as join, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { M as writeProvisionedWranglerConfig, b as readRootWranglerConfig, i as LATEST_KNOWN_COMPAT_DATE } from "./wrangler-F96NnLyb.mjs";
+import { M as writeProvisionedWranglerConfig, b as readRootWranglerConfig, i as LATEST_KNOWN_COMPAT_DATE } from "./wrangler-I-scB_1t.mjs";
 import { K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { i as ensureCloudflareAuthentication, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-Byo_0_N9.mjs";
+import { i as ensureCloudflareAuthentication, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-DyD_kVFr.mjs";
 import { existsSync } from "node:fs";
 //#region src/cli/cloudflare-connect.ts
 async function connectCloudflare(root, interactive = Boolean(process.stdin.isTTY)) {

package/dist/{cloudflare-operations-Dh9dEHJj.mjs → cloudflare-operations-Bc-7fN44.mjs}

@@ -1,10 +1,10 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-DchHxPTo.mjs";
-import { N as writeWranglerPublishedTrafficSnapshot, S as readWranglerCustomDomains, j as updateWranglerCustomDomain, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-F96NnLyb.mjs";
+import { a as persistCloudflareConfig, i as materializeCloudflareConfig } from "./cloudflare-config-CH1AylZT.mjs";
+import { N as writeWranglerPublishedTrafficSnapshot, S as readWranglerCustomDomains, j as updateWranglerCustomDomain, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-I-scB_1t.mjs";
 import { u as getErrorMessage } from "./output-BpgYODYx.mjs";
 import { t as createCloudflareProcessRunner } from "./cloudflare-process-8jEYIeim.mjs";
-import { _ as provisionEnv, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, v as resolvePinnedApiBaseUrl } from "./provision-DtROpNNI.mjs";
-import { a as findWranglerCiOverrideDotenvFile, i as findAmbientConfigOverride } from "./deploy-transport-BzGEj0Ge.mjs";
+import { _ as provisionEnv, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, v as resolvePinnedApiBaseUrl } from "./provision-DztLJ97X.mjs";
+import { a as findWranglerCiOverrideDotenvFile, i as findAmbientConfigOverride } from "./deploy-transport-DIq_gFTP.mjs";
 import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { deployCloudflareVersionTraffic, encodeCloudflareVersionMessage, parseCloudflareVersionMessage, parseRootWranglerConfig, readBindingFieldPresence, readCloudflareTriggerConfig, readWranglerTopLevelString, resolveD1MigrateTarget, stabilizeCloudflareVersionTriggers } from "@void/deploy-cloudflare";

package/dist/{cloudflare-operations-DsSaw2BT.mjs → cloudflare-operations-BtulCNOg.mjs}

@@ -1 +1 @@
-export { t as activateCloudflareExistingVersion, n as applyCloudflareD1Migrations, r as changeCloudflareDomain, o as deleteCloudflareSecret, s as executeCloudflareD1Sql, c as listCloudflareDomains, l as listCloudflareSecrets, m as putCloudflareSecret, h as readCloudflareD1Migrations, g as readCloudflareWorkerStatus, _ as resolveCloudflareD1Context, v as resolveCloudflareOperationContext, y as restoreCloudflareD1Database, b as syncCloudflareSecrets, x as tailCloudflareWorker } from "./cloudflare-operations-Dh9dEHJj.mjs";
+export { t as activateCloudflareExistingVersion, n as applyCloudflareD1Migrations, r as changeCloudflareDomain, o as deleteCloudflareSecret, s as executeCloudflareD1Sql, c as listCloudflareDomains, l as listCloudflareSecrets, m as putCloudflareSecret, h as readCloudflareD1Migrations, g as readCloudflareWorkerStatus, _ as resolveCloudflareD1Context, v as resolveCloudflareOperationContext, y as restoreCloudflareD1Database, b as syncCloudflareSecrets, x as tailCloudflareWorker } from "./cloudflare-operations-Bc-7fN44.mjs";

package/dist/{config-BU6hMu1W.mjs → config-BV2ASlpn.mjs}

@@ -1 +1 @@
-export { t as PLACEHOLDER_DB_URL, n as withPrivateDrizzleConfig, r as writeDrizzleConfig } from "./config-BIaXIkkv.mjs";
+export { t as PLACEHOLDER_DB_URL, n as withPrivateDrizzleConfig, r as writeDrizzleConfig } from "./config-tqMM6DwY.mjs";

package/dist/{config-DQfHOKh9.d.mts → config-CAdZVTLN.d.mts}

@@ -1,7 +1,7 @@
 import "./types-CKWnYgfy.mjs";
 import { t as VoidAuthProvider } from "./providers-BNKRacMr.mjs";
 import { t as HeadConfig } from "./head-C8K_iGe6.mjs";
-import "@void/deploy-core";
+import { AssetConfig } from "@void/deploy-core";
 import { RewriteDestination } from "void/routes";
 //#region src/sandbox/config.d.ts
 type SandboxInstanceType = "lite" | "standard-1" | "standard-2" | "standard-3" | "standard-4";
@@ -46,6 +46,8 @@ type WranglerConfig = {
 type NotFoundHandling = "single-page-application" | "404-page" | "none";
 /** Routing configuration — headers, redirects, rewrites, fallbacks, revalidation, prerendering. */
 type RoutingConfig = {
+  /** Redirect HTTP to HTTPS with a 308. Requires the Cloudflare target. Omitted means off. */
+  alwaysUseHttps?: boolean;
   /** Disable ISR and edge prerendering, including per-page policies. Static output is unaffected. */
   isr?: boolean;
   revalidate?: number | Record<string, number>;
@@ -166,6 +168,7 @@ type CloudflareConfig = Record<string, unknown> & {
     directory?: string;
     binding?: string;
     not_found_handling?: NotFoundHandling;
+    html_handling?: AssetConfig["html_handling"];
     run_worker_first?: boolean | Array<string>;
   }>;
   triggers?: CloudflareField<{

package/dist/config-D-6q7EBH.mjs

@@ -0,0 +1,87 @@
+import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
+import { t as discoverSchema } from "./discover-LaV0tbIu.mjs";
+import { existsSync, readFileSync } from "node:fs";
+import { isRunnableDevEnvironment, parseSync, runnerImport } from "vite";
+//#region src/auth/config.ts
+function isVoidAuthConfigSource(code, filename) {
+	if (!code.includes("void/auth")) return false;
+	let program;
+	try {
+		program = parseSync(filename, code).program;
+	} catch {
+		return false;
+	}
+	return (program.body ?? []).some((node) => {
+		if (node.type !== "ImportDeclaration" && node.type !== "ExportNamedDeclaration" && node.type !== "ExportAllDeclaration") return false;
+		return node.source?.value === "void/auth";
+	});
+}
+function findVoidAuthConfig(root, paths = readProjectPaths(root)) {
+	for (const absPath of paths.authConfigCandidates) {
+		if (!existsSync(absPath)) continue;
+		if (isVoidAuthConfigSource(readFileSync(absPath, "utf-8"), absPath)) return absPath;
+	}
+	return null;
+}
+/**
+* The dev server evaluates the auth config in this Node environment. A native
+* `import()` would keep the first evaluation for the life of the process; the
+* module runner reads the config again once its files are invalidated, and the
+* module graph lists the local files the config imports.
+*/
+const AUTH_CONFIG_ENVIRONMENT = "void_auth_config";
+/**
+* The dev server's importer for the auth config: its auth config environment, or
+* a one-off runner with the server's aliases when it has no such environment.
+*/
+function devAuthConfigImporter(server) {
+	const environment = server.environments[AUTH_CONFIG_ENVIRONMENT];
+	return environment && isRunnableDevEnvironment(environment) ? (path) => environment.runner.import(path) : (path) => {
+		const { root, mode, resolve } = server.config;
+		return viteAuthConfigImporter(root, mode, resolve)(path);
+	};
+}
+/**
+* Builds and CLI commands evaluate the auth config once in a throwaway module
+* runner, so its imports resolve as in dev: without file extensions and through
+* the app's aliases. A native `import()` resolves neither.
+*/
+function viteAuthConfigImporter(root, mode, resolve) {
+	return async (path) => {
+		const { module } = await runnerImport(path, {
+			root,
+			mode,
+			logLevel: "silent",
+			resolve: {
+				alias: resolve?.alias,
+				tsconfigPaths: resolve?.tsconfigPaths
+			}
+		});
+		return module;
+	};
+}
+/**
+* The importer for commands outside Vite, such as `void prepare`. It does not load
+* the app's Vite config: evaluating it constructs the app's plugins, and Void's
+* write generated files and Cloudflare config when constructed. Imports resolve
+* without extensions, through tsconfig `paths`, and through Void's `@schema`
+* alias; an alias set only in vite.config resolves in dev and builds.
+*/
+function projectAuthConfigImporter(root) {
+	return (path) => {
+		const schema = discoverSchema(root);
+		return viteAuthConfigImporter(root, "development", {
+			alias: schema ? { "@schema": schema.path } : void 0,
+			tsconfigPaths: true
+		})(path);
+	};
+}
+/** Evaluate the auth config through the importer of the current command. */
+async function loadVoidAuthConfig(configPath, importModule) {
+	if (!configPath) return;
+	const mod = await importModule(configPath);
+	if (!Object.hasOwn(mod, "default")) throw new Error(`${configPath} has no default export. Export the auth config with \`export default defineAuth(...)\`.`);
+	return mod.default;
+}
+//#endregion
+export { projectAuthConfigImporter as a, loadVoidAuthConfig as i, devAuthConfigImporter as n, viteAuthConfigImporter as o, findVoidAuthConfig as r, AUTH_CONFIG_ENVIRONMENT as t };

package/dist/{config-DHgSEWT7.mjs → config-OFOAimzt.mjs}

@@ -113,12 +113,12 @@ const LITERAL_HOSTNAME_REGEX = /^([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,}$/;
 /**
 * Split an optional `https://host` prefix from a rule source. The host is
 * lowercased (dispatch compares `url.hostname`), and a bare `https://host` gets
-* path `/`. Returns `{ error }` for `//` and `http://` sources (only HTTPS
-* requests reach the runtime) and for non-literal hosts.
+* path `/`. Sources scope rules by hostname and path, without matching the
+* request scheme. Returns `{ error }` for unsupported schemes and non-literal hosts.
 */
 function parseHostPrefixedSource(raw) {
 	if (raw.startsWith("//")) return { error: `must not start with "//" (protocol-relative URLs are ambiguous; use "/path" for path-only or "https://host/path")` };
-	if (raw.startsWith("http://")) return { error: `must not start with "http://" (TLS terminates upstream of the worker; only "https://" requests reach the runtime — use "https://host/path" instead)` };
+	if (raw.startsWith("http://")) return { error: `must not start with "http://" (use "https://host/path" to scope a rule by hostname, or "routing.alwaysUseHttps" to redirect HTTP to HTTPS)` };
 	if (!raw.startsWith("https://")) return {
 		host: void 0,
 		path: raw
@@ -239,6 +239,8 @@ function validateConfigObject(obj) {
 	if (obj.routing !== void 0) {
 		if (!isRecord(obj.routing)) throw new Error(`config: "routing" in ${CONFIG_FILE} must be an object.`);
 		const routing = obj.routing;
+		if (routing.alwaysUseHttps !== void 0 && typeof routing.alwaysUseHttps !== "boolean") throw new Error(`config: "routing.alwaysUseHttps" in ${CONFIG_FILE} must be a boolean.`);
+		if (routing.alwaysUseHttps === true && isNodeTarget(obj.target)) throw new Error(`config: "routing.alwaysUseHttps" in ${CONFIG_FILE} requires target: "cloudflare". It is not available with target: "${obj.target}".`);
 		if (routing.notFound !== void 0) {
 			if (typeof routing.notFound !== "string" || !VALID_NOT_FOUND_HANDLING.has(routing.notFound)) throw new Error(`config: "routing.notFound" in ${CONFIG_FILE} must be one of: ${[...VALID_NOT_FOUND_HANDLING].join(", ")}.`);
 		}

package/dist/config-entry.d.mts

@@ -1,4 +1,4 @@
-import { t as VoidConfig } from "./config-DQfHOKh9.mjs";
+import { t as VoidConfig } from "./config-CAdZVTLN.mjs";
 //#region src/config-entry.d.ts
 /** Define a typed Void project configuration without loading the Vite plugin. */
 export declare function defineConfig<const T extends VoidConfig>(config: T): T;

package/dist/{config-BIaXIkkv.mjs → config-tqMM6DwY.mjs}

@@ -1,7 +1,7 @@
 import { a as join, s as relative } from "./dist-ipQi0Q8y.mjs";
 import { i as resolveProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { c as getDatabaseCasing, p as readConfig } from "./config-DHgSEWT7.mjs";
 import { n as schemaSpecifier, t as discoverSchema } from "./discover-LaV0tbIu.mjs";
+import { c as getDatabaseCasing, p as readConfig } from "./config-OFOAimzt.mjs";
 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 //#region src/drizzle/config.ts

package/dist/{connect-k7R2rPVA.mjs → connect-BOM6zvFX.mjs}

@@ -2,11 +2,11 @@ import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./pl
 import { c as writeDeploymentPlatform, l as writePlatformSelection, n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
 import { d as readPlatformToken } from "./auth-B6iOCjKI.mjs";
 import { K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { a as isExpiredTokenError, r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { a as isExpiredTokenError, r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
-import { t as promptForLoginToken } from "./login-Cttnagmm.mjs";
-import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-D5I1beUX.mjs";
-import { t as connectCloudflare } from "./cloudflare-connect-CCRTVg-I.mjs";
+import { t as promptForLoginToken } from "./login-PcFy5mlC.mjs";
+import { i as saveDiscoveredPlatform, n as promptPlatformUrl, t as discoverPlatform } from "./platform-cmd-DZK2ixMl.mjs";
+import { t as connectCloudflare } from "./cloudflare-connect-zTJh8UnN.mjs";
 //#region src/cli/connect.ts
 async function selectVoidPlatform(interactive) {
 	if (!interactive) throw new Error("connect: Supply a Void platform URL in non-interactive mode.");