void 1.3.0 → 1.4.0

package/dist/{account-cmd-B4i71m7k.mjs → account-cmd-HP8bixYo.mjs}

@@ -1,14 +1,14 @@
 import { c as getToken, f as removeToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
-import { n as runLoginCommand } from "./login-BjSyhXlT.mjs";
+import { n as runLoginCommand } from "./login-PcFy5mlC.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-BKwHPbdv.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-CedYpDCy.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
 			if (removeToken(root)) printSuccess("Logged out.");
 			else log.info("Not logged in.");

package/dist/{application-analysis-DYdVoMAY.mjs → application-analysis-DDOQwiXk.mjs}

@@ -1,8 +1,8 @@
 import { a as join, i as isAbsolute, t as basename } from "./dist-ipQi0Q8y.mjs";
 import { c as scanWebSocketRoutesSync, d as readResourceDefinition, f as listConventionFiles, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listRouteFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-CeiB6BG5.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { r as findVoidAuthConfig } from "./config-BTu1o3Dc.mjs";
-import { l as getDatabaseDialect, m as resolveBindingNames } from "./config-DHgSEWT7.mjs";
+import { r as findVoidAuthConfig } from "./config-D-6q7EBH.mjs";
+import { l as getDatabaseDialect, m as resolveBindingNames } from "./config-OFOAimzt.mjs";
 import { n as globSync } from "./dist-D15hFhP0.mjs";
 import { m as parseRouteFilename, n as scanPages, p as isRouteEnabledForEnvironment } from "./scan-N9WzdcAl.mjs";
 import { n as isIdentifier, o as moduleExportName } from "./ast-CsZ_q_gc.mjs";
@@ -11,8 +11,8 @@ import { n as resourceNameWords } from "./resource-name-C7LVpcRm.mjs";
 import { t as collectMigrations } from "./collect-Dew86qce.mjs";
 import { i as scanEmailHandlersSync } from "./email-B9ayYQEG.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 import { parseSync } from "vite";
+import { fileURLToPath } from "node:url";
 import { isSandboxRegistryImage } from "@void/deploy-core";
 //#region src/crons/scan.ts
 function extractJobName(filePath) {
@@ -206,10 +206,14 @@ async function scanRoutes(root, options) {
 		checkRoutes: options.checkPageRoutes,
 		environment: options.environment
 	});
-	const routes = inventory.routes.map((route) => ({
-		...route,
-		methods: detectHttpExports(join(paths.routesDir, route.filePath))
-	})).sort(compareRouteSpecificity);
+	const routes = inventory.routes.map((route) => {
+		const methods = detectHttpExports(join(paths.routesDir, route.filePath));
+		if (methods.includes("HEAD")) throw new Error(`routes: '${route.filePath}' exports HEAD. HEAD requests are answered by the GET handler; remove the HEAD export.`);
+		return {
+			...route,
+			methods
+		};
+	}).sort(compareRouteSpecificity);
 	return {
 		...inventory,
 		routes,

package/dist/{application-routing-C8EqRDfv.mjs → application-routing-4719u_kf.mjs}

@@ -1,4 +1,4 @@
-import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-DYdVoMAY.mjs";
+import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-DDOQwiXk.mjs";
 //#region src/application-routing.ts
 /** Complete route/page analysis using the same resource and handler inventories. */
 async function completeApplicationAnalysis(analysis) {

package/dist/auth-g2TQbDLD.d.mts

@@ -0,0 +1,70 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { Auth, BetterAuthOptions, Session, User } from "better-auth";
+import { Context, Env } from "hono";
+//#region src/runtime/auth.d.ts
+/**
+ * Filled in by the generated `.void/auth.d.ts` with the user and session types
+ * Better Auth infers from the app's `auth.ts`. Empty when the app has no
+ * `auth.ts`, so `AuthUser`/`AuthSession` fall back to Better Auth's base shapes.
+ *
+ * `AuthUser`/`AuthSession` stay type aliases (not merged interfaces) so they
+ * remain assignable to `Record<string, unknown>`, and a union config (a function
+ * form that returns different shapes per branch) stays a valid union type.
+ */
+interface VoidAuthTypes {}
+/**
+ * Better Auth's inferred `{ user, session }` for an `auth.ts` default export.
+ * Used by the generated `.void/auth.d.ts`; it lives here so `better-auth`
+ * resolves from Void's own dependencies, not the app's.
+ *
+ * An `any` default export (an `auth.js` without `allowJs`, or an import that
+ * does not resolve) keeps Better Auth's base shapes instead of a user type that
+ * accepts any key. The tuple check also catches the error `any` of an untyped
+ * import.
+ */
+type InferAuthSession<T> = [unknown] extends [T] ? {
+  user: User;
+  session: Session;
+} : Auth<Extract<T extends ((...args: Array<never>) => infer R) ? R : T, BetterAuthOptions>>["$Infer"]["Session"];
+type AuthUser = VoidAuthTypes extends {
+  user: infer U;
+} ? U : User;
+type AuthSession = VoidAuthTypes extends {
+  session: infer S;
+} ? S : Session;
+type AuthState = {
+  session: AuthSession;
+  user: AuthUser;
+};
+type VoidAuthConfigContext = {
+  defaults: BetterAuthOptions;
+  env: Record<string, unknown>;
+  dialect: "sqlite" | "postgresql" | "mysql";
+  request: Request;
+};
+type VoidAuthConfig = BetterAuthOptions | ((ctx: VoidAuthConfigContext) => BetterAuthOptions);
+/**
+ * Shared AsyncLocalStorage that holds the authenticated Better Auth state for the
+ * current request.
+ *
+ * Stored on `globalThis` under a `Symbol.for` key so duplicate module loads
+ * (e.g. once by void's bundled runtime and once by Vite's SSR module runner
+ * when user code imports from `void/auth`) share a single ALS instance. Without
+ * this, the middleware writes to one instance and `getUser()` reads another,
+ * always returning null.
+ */
+type AuthContextStore = {
+  user: AuthUser | null;
+  state: AuthState | null;
+};
+declare const authContext: AsyncLocalStorage<AuthContextStore>;
+declare function defineAuth<T extends VoidAuthConfig>(config: T): T;
+declare function getUser(): AuthUser | null;
+declare function getSession(): AuthState | null;
+declare function requireAuth<E extends Env & {
+  Variables: {
+    user: AuthUser | null;
+  };
+}>(c: Context<E>): AuthUser;
+//#endregion
+export { VoidAuthConfig as a, authContext as c, getUser as d, requireAuth as f, InferAuthSession as i, defineAuth as l, AuthState as n, VoidAuthConfigContext as o, AuthUser as r, VoidAuthTypes as s, AuthSession as t, getSession as u };

package/dist/{auth-link-BKwHPbdv.mjs → auth-link-CedYpDCy.mjs}

@@ -1,9 +1,9 @@
 import { a as getApiUrl, c as getToken, m as savePlatformToken, p as runPlatformLogin, u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { l as formatUrl } from "./output-BpgYODYx.mjs";
-import { r as selectPlatformLoginMethod } from "./login-BjSyhXlT.mjs";
-import { t as discoverPlatform } from "./platform-cmd-HByuZAO7.mjs";
+import { r as selectPlatformLoginMethod } from "./login-PcFy5mlC.mjs";
+import { t as discoverPlatform } from "./platform-cmd-DZK2ixMl.mjs";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {
 	const token = getToken(root);

package/dist/{auth-router-DqLx8E0F.mjs → auth-router-vafo7x8w.mjs}

@@ -1,4 +1,4 @@
-import { s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
+import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
 import { n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
 import { K as select, tt as isCancel } from "./dist-Cor9XGoz.mjs";
 //#region src/cli/auth-router.ts
@@ -39,23 +39,28 @@ async function chooseDestination(root, args, interactive) {
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
 	const destination = await chooseDestination(root, args, interactive);
 	if (destination.platform === "cloudflare") {
-		const { runCloudflareCommand } = await import("./cloudflare-cmd-BaqIigwI.mjs");
+		const { runCloudflareCommand } = await import("./cloudflare-cmd-D-b_u3T4.mjs");
 		await runCloudflareCommand(root, { subcommand: args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-B4i71m7k.mjs");
+	const { runAccountCommand } = await import("./account-cmd-HP8bixYo.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });
 		return;
 	}
-	const previous = process.env.VOID_API_URL;
+	const previous = {
+		VOID_API_URL: process.env.VOID_API_URL,
+		VOID_TOKEN: process.env.VOID_TOKEN
+	};
+	const tokenBound = Boolean(previous.VOID_TOKEN && previous.VOID_API_URL && normalizePlatformApiUrl(previous.VOID_API_URL) === destination.apiUrl);
 	process.env.VOID_API_URL = destination.apiUrl;
+	if (previous.VOID_TOKEN && !tokenBound) delete process.env.VOID_TOKEN;
 	try {
 		await runAccountCommand(root, { subcommand });
 	} finally {
-		if (previous === void 0) delete process.env.VOID_API_URL;
-		else process.env.VOID_API_URL = previous;
+		for (const [name, value] of Object.entries(previous)) if (value === void 0) delete process.env[name];
+		else process.env[name] = value;
 	}
 }
 //#endregion

package/dist/{better-auth-shared-DVk2DkTW.d.mts → better-auth-shared-BHB8kiTE.d.mts}

@@ -1,5 +1,5 @@
 import { t as VoidAuthProvider } from "./providers-BNKRacMr.mjs";
-import { i as VoidAuthConfig, n as AuthState } from "./auth-DkcFflXV.mjs";
+import { a as VoidAuthConfig, n as AuthState } from "./auth-g2TQbDLD.mjs";
 import { BetterAuthOptions, betterAuth } from "better-auth";
 import { Context } from "hono";
 import { DBFieldAttribute } from "better-auth/db";

package/dist/{build-cmd-Dy4psnt1.mjs → build-cmd-9vUAQ1_V.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-Cor9XGoz.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { f as import_picocolors, i as dim, m as printSuccess } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";

package/dist/{cache-DV37S6dl.mjs → cache-jvwLNb0h.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess, o as formatCount, r as createSpinner } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 //#region src/cli/cache.ts

package/dist/{cancel-deploy-DMPyu1Vt.mjs → cancel-deploy-Dw0UmWKO.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEMtySaV.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([

package/dist/{cf-build-output-Bapzc_8Z.mjs → cf-build-output-XpNR9zoh.mjs}

@@ -394,10 +394,24 @@ function copyBundle(source, destination) {
 	}
 	return modules;
 }
+function stagePackageContext(directory, projectRoot) {
+	const root = resolve(projectRoot);
+	const manifest = join(root, "package.json");
+	if (!existsSync(manifest)) return;
+	copyFileSync(manifest, join(directory, "package.json"));
+	for (let parent = root;; parent = dirname(parent)) {
+		const modules = join(parent, "node_modules");
+		if (existsSync(modules)) {
+			symlinkSync(modules, join(directory, "node_modules"), process.platform === "win32" ? "junction" : "dir");
+			break;
+		}
+		if (parent === dirname(parent)) break;
+	}
+}
 /** Create a disposable cf Build Output tree from an existing Cloudflare Worker build. */
-async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
+async function prepareCfBuildOutput(workerDirectory, accountId, mode, projectRoot = workerDirectory) {
 	const source = resolve(workerDirectory);
-	if (existsSync(getRootConfigPath(source))) return prepareNativeBuildOutput(source, accountId, mode);
+	if (existsSync(getRootConfigPath(source))) return prepareNativeBuildOutput(source, accountId, mode, projectRoot);
 	if (!existsSync(join(source, "wrangler.json"))) throw new Error(`No Cloudflare Worker build found in ${source}. Pass the project root that contains .cloudflare/output/v0, or the Worker output directory that contains wrangler.json.`);
 	const raw = record(JSON.parse(readFileSync(join(source, "wrangler.json"), "utf8")));
 	if (!raw) return null;
@@ -421,6 +435,7 @@ async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
 		await Promise.all(images.map((image) => image.dispose()));
 	};
 	try {
+		stagePackageContext(directory, projectRoot);
 		const bundle = getWorkerBundleDir(directory);
 		mkdirSync(bundle, { recursive: true });
 		const modules = copyBundle(source, bundle);
@@ -479,7 +494,7 @@ async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
 	}
 }
 /** Copy and complete the native artifact without changing the Vite build's inputs or metadata. */
-async function prepareNativeBuildOutput(source, accountId, mode) {
+async function prepareNativeBuildOutput(source, accountId, mode, projectRoot = source) {
 	const built = await readBuildOutput(source);
 	if (accountId !== void 0 && built.rootConfig.accountId !== void 0 && accountId !== built.rootConfig.accountId || mode !== void 0 && mode !== built.rootConfig.buildContext.mode) return null;
 	const directory = mkdtempSync(join(tmpdir(), "void-cf-native-"));
@@ -490,6 +505,7 @@ async function prepareNativeBuildOutput(source, accountId, mode) {
 		});
 	};
 	try {
+		stagePackageContext(directory, projectRoot);
 		await writeRootConfig(directory, {
 			accountId: accountId ?? built.rootConfig.accountId,
 			complianceRegion: built.rootConfig.complianceRegion
@@ -657,7 +673,7 @@ async function prepareBundledBuildOutput(options) {
 			main: "index.js",
 			assets: options.assets
 		}), { mode: 384 });
-		return await prepareCfBuildOutput(scratch, options.accountId);
+		return await prepareCfBuildOutput(scratch, options.accountId, void 0, options.projectRoot);
 	} finally {
 		rmSync(scratch, {
 			recursive: true,

package/dist/cf-build-output-bd8Uwv1P.mjs

@@ -0,0 +1 @@
+export { t as prepareCfBuildOutput } from "./cf-build-output-XpNR9zoh.mjs";

package/dist/{cf-worker-settings-BECvvTVd.mjs → cf-worker-settings-Dg27RzyT.mjs}

@@ -16,8 +16,14 @@ function getCfCliVersion(attribution) {
 //#endregion
 //#region src/cli/cf-worker-settings.ts
 /** Version uploads leave Worker-wide settings untouched; publish only explicit configuration. */
-async function publishCloudflareObservability(options) {
-	if (!isRecord(options.observability)) throw new Error("The Cloudflare Worker observability settings were not readable.");
+async function publishCloudflareWorkerSettings(options) {
+	if (options.observability !== void 0 && !isRecord(options.observability)) throw new Error("The Cloudflare Worker observability settings were not readable.");
+	if (options.logpush !== void 0 && typeof options.logpush !== "boolean") throw new Error("The Cloudflare Worker Logpush setting was not readable.");
+	const settings = {
+		...options.observability === void 0 ? {} : { observability: options.observability },
+		...options.logpush === void 0 ? {} : { logpush: options.logpush }
+	};
+	if (Object.keys(settings).length === 0) return;
 	const endpoint = `${options.apiBaseUrl.replace(/\/$/, "")}/accounts/${encodeURIComponent(options.accountId)}/workers/scripts/${encodeURIComponent(options.workerName)}/script-settings`;
 	const response = await fetch(endpoint, {
 		method: "PATCH",
@@ -26,12 +32,12 @@ async function publishCloudflareObservability(options) {
 			...options.headers,
 			"Content-Type": "application/json"
 		},
-		body: JSON.stringify({ observability: options.observability }),
+		body: JSON.stringify(settings),
 		redirect: "error",
 		signal: AbortSignal.timeout(3e4)
 	});
 	const body = await response.json();
-	if (!response.ok || !isRecord(body) || body.success !== true) throw new Error(`Cloudflare did not update Worker observability (HTTP ${response.status}).`);
+	if (!response.ok || !isRecord(body) || body.success !== true) throw new Error(`Cloudflare did not update Worker settings (HTTP ${response.status}).`);
 }
 //#endregion
-export { getCfCliVersion as n, getVoidUserAgent as r, publishCloudflareObservability as t };
+export { getCfCliVersion as n, getVoidUserAgent as r, publishCloudflareWorkerSettings as t };

package/dist/cli/cli.mjs

@@ -1641,19 +1641,19 @@ const args = process.argv.slice(2);
 const command = args[0];
 const helpPath = getHelpPath(args);
 const subcommandGroups = {
-	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-DqLx8E0F.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
-	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-B4i71m7k.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
-	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-BYKLMPCn.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
-	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-BaqIigwI.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
-	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-CjLNNxwe.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
-	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-BL6g7mF5.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
-	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-CH5iBD9Y.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
-	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-CbTO1l78.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
-	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-rvo64snS.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
-	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-BBdw236G.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
-	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-TgXy93Rr.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
-	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BzkRLkbg.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
-	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-Dy4psnt1.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
+	auth: () => runSubcommandGroup("auth", authSubcommands, parseAuthArgs, (root, parsed) => import("../auth-router-vafo7x8w.mjs").then(({ runAuthRouter }) => runAuthRouter(root, parsed))),
+	account: () => runSubcommandGroup("account", accountSubcommands, parseAccountArgs, (root, parsed) => import("../account-cmd-HP8bixYo.mjs").then(({ runAccountCommand }) => runAccountCommand(root, parsed))),
+	platform: () => runSubcommandGroup("platform", platformSubcommands, parsePlatformArgs, (root, parsed) => import("../platform-cmd-CV8NxIIn.mjs").then(({ runPlatformCommand }) => runPlatformCommand(root, parsed))),
+	cloudflare: () => runSubcommandGroup("cloudflare", cloudflareSubcommands, parseCloudflareArgs, (root, parsed) => import("../cloudflare-cmd-D-b_u3T4.mjs").then(({ runCloudflareCommand }) => runCloudflareCommand(root, parsed))),
+	project: () => runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-DBYqAIbe.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed))),
+	secret: () => runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-3X0PxmuX.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed))),
+	domain: () => runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-DyhNtdYf.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed))),
+	email: () => runSubcommandGroup("email", emailSubcommands, parseEmailArgs, (root, parsed) => import("../email-DM2wDcBN.mjs").then(({ runEmailCommand }) => runEmailCommand(root, parsed))),
+	db: () => runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-Cdvr3zwG.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed))),
+	env: () => runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-78hbN-oI.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed))),
+	gen: () => runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-BhWBT4iu.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed))),
+	github: () => runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-De-_IWbM.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed))),
+	build: () => runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-9vUAQ1_V.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)))
 };
 if (helpPath) {
 	if (helpPath.length === 0) printGlobalHelp();
@@ -1672,7 +1672,7 @@ if (helpPath) {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../deploy-CtHE2A3R.mjs").then(({ runDeploy }) => {
+	import("../deploy-CX94CmKa.mjs").then(({ runDeploy }) => {
 		runDeploy(root, deployArgs).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1680,14 +1680,14 @@ if (helpPath) {
 	});
 } else if (command === "connect") (async () => {
 	const parsed = parseConnectArgs(args.slice(1));
-	const { runConnectCommand } = await import("../connect-DwVsBvVh.mjs");
+	const { runConnectCommand } = await import("../connect-BOM6zvFX.mjs");
 	await runConnectCommand(process.cwd(), parsed);
 })().catch((err) => {
 	log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 	process.exit(1);
 });
 else if (command && Object.hasOwn(subcommandGroups, command)) subcommandGroups[command]();
-else if (command === "info") import("../info-oBm8yK8J.mjs").then(async ({ runInfoCommand }) => {
+else if (command === "info") import("../info-Yg0-V5Rs.mjs").then(async ({ runInfoCommand }) => {
 	try {
 		await runInfoCommand(process.cwd(), parseInfoArgs(args.slice(1)));
 	} catch (err) {
@@ -1708,7 +1708,7 @@ else if (command === "prepare") {
 		log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 		process.exit(1);
 	}
-	import("../prepare-5BR7Splm.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-BuOS18AM.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root).catch((err) => {
 			log.error(formatCloudflareUserMessage(err.message ?? String(err)));
 			process.exit(1);
@@ -1716,7 +1716,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-CBp_uMve.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-CDiJQycf.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -1734,7 +1734,7 @@ else if (command === "prepare") {
 		log.error("migrate: This command takes no arguments.");
 		process.exit(1);
 	}
-	import("../migrate-COPncCGx.mjs").then(({ runMigrateCommand }) => {
+	import("../migrate-BIYTPQE6.mjs").then(({ runMigrateCommand }) => {
 		runMigrateCommand(process.cwd()).catch((err) => {
 			log.error(formatCloudflareUserMessage(err instanceof Error ? err.message : String(err)));
 			process.exit(1);
@@ -1856,32 +1856,32 @@ else if (command) {
 		if (Object.hasOwn(subcommandGroups, cmd)) return subcommandGroups[cmd]();
 		switch (cmd) {
 			case "connect": {
-				const { runConnectCommand } = await import("../connect-DwVsBvVh.mjs");
+				const { runConnectCommand } = await import("../connect-BOM6zvFX.mjs");
 				await runConnectCommand(root, parseConnectArgs([]));
 				return;
 			}
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-CBp_uMve.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-CDiJQycf.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "migrate": {
-				const { runMigrateCommand } = await import("../migrate-COPncCGx.mjs");
+				const { runMigrateCommand } = await import("../migrate-BIYTPQE6.mjs");
 				await runMigrateCommand(root);
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-CtHE2A3R.mjs");
+				const { runDeploy } = await import("../deploy-CX94CmKa.mjs");
 				await runDeploy(root);
 				return;
 			}
 			case "info": {
-				const { runInfoCommand } = await import("../info-oBm8yK8J.mjs");
+				const { runInfoCommand } = await import("../info-Yg0-V5Rs.mjs");
 				await runInfoCommand(root, parseInfoArgs([]));
 				return;
 			}
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-5BR7Splm.mjs");
+				const { runPrepareCommand } = await import("../prepare-BuOS18AM.mjs");
 				await runPrepareCommand(root);
 				return;
 			}

package/dist/cli/cloudflare-operation-process.mjs

@@ -4,7 +4,7 @@ import { a as join, c as resolve, n as dirname } from "../dist-ipQi0Q8y.mjs";
 import { t as require_picocolors } from "../picocolors-BsDfhxIw.mjs";
 import { l as formatUrl } from "../output-BpgYODYx.mjs";
 import { i as safePositional, n as isD1Bookmark, r as readCfUploadOutput, t as CF_VERSION_SOURCE_MAX_OUTPUT_BYTES } from "../cf-command-values-ByHk0xg4.mjs";
-import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareObservability } from "../cf-worker-settings-BECvvTVd.mjs";
+import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareWorkerSettings } from "../cf-worker-settings-Dg27RzyT.mjs";
 import { t as sanitizeTerminalLogText } from "../terminal-log-text-D9ACPOuG.mjs";
 import { copyFileSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -254,7 +254,7 @@ async function withBuildOutput(raw, sourceMain, action) {
 		}), { mode: 384 });
 		const accountId = process.env.CLOUDFLARE_ACCOUNT_ID ?? raw.account_id;
 		if (typeof accountId !== "string" || !accountId) throw new Error("Cloudflare account is not pinned for Worker deployment.");
-		const { prepareCfBuildOutput } = await import("../cf-build-output-DlBkWdNU.mjs");
+		const { prepareCfBuildOutput } = await import("../cf-build-output-bd8Uwv1P.mjs");
 		const output = await prepareCfBuildOutput(scratch, accountId);
 		if (!output) throw new Error("Could not prepare the Cloudflare Worker build output.");
 		try {
@@ -569,6 +569,11 @@ async function readAllQueues() {
 }
 async function resources() {
 	switch (operation.type) {
+		case "workers.subdomain.get": {
+			const { subdomain } = object((await cloudflareApiGet(`/accounts/${encodeURIComponent(accountId())}/workers/subdomain`, "Cloudflare did not return the account workers.dev subdomain.")).result);
+			if (typeof subdomain !== "string" || !subdomain.trim()) throw new Error("Cloudflare returned an invalid account workers.dev subdomain.");
+			return result(0, "", "", { subdomain });
+		}
 		case "d1.execute": return runCf([
 			"d1",
 			"query",
@@ -1023,11 +1028,12 @@ async function workerChanges() {
 			"deploy",
 			"--prebuilt"
 		], directory));
-		if (deployed.status === 0 && raw.observability !== void 0) await publishCloudflareObservability({
+		if (deployed.status === 0 && (raw.observability !== void 0 || raw.logpush !== void 0)) await publishCloudflareWorkerSettings({
 			apiBaseUrl: apiBaseUrl(),
 			accountId: accountId(),
 			workerName: name,
 			observability: raw.observability,
+			logpush: raw.logpush,
 			headers: await apiHeaders()
 		});
 		return deployed;

package/dist/cli/env-schema-probe.mjs

@@ -109,7 +109,7 @@ function emitResult(result) {
 	writeSync(RESULT_FD, JSON.stringify(result));
 }
 async function runFactsChild(root) {
-	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BfBVvBNe.mjs");
+	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BUfFZ6bt.mjs");
 	try {
 		emitResult({
 			kind: "ok",
@@ -128,7 +128,7 @@ async function runFactsChild(root) {
 }
 /** The parent already found the emitted config, so a read failure here fails closed. */
 async function runValidateEmittedChild(root) {
-	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BfBVvBNe.mjs");
+	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BUfFZ6bt.mjs");
 	const emitted = readEmittedWorkerVars(root);
 	if (!emitted.ok) {
 		emitResult({

package/dist/{client-BEMtySaV.mjs → client-B3LnB_bE.mjs}

@@ -95,7 +95,7 @@ function readCliVersion() {
 }
 const VOID_CLI_VERSION = readCliVersion();
 /** The oldest Void platform release this CLI supports. */
-const MIN_PLATFORM_VERSION = "1.3.0";
+const MIN_PLATFORM_VERSION = "1.4.0";
 const RELEASE_VERSION = /^(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$/;
 /**
 * Discovery probes keyed by platform base URL. Every outcome (pass,

package/dist/client-BZb9j66F.mjs

@@ -0,0 +1 @@
+export { r as PlatformClient } from "./client-B3LnB_bE.mjs";

package/dist/{cloudflare-auth-Byo_0_N9.mjs → cloudflare-auth-DyD_kVFr.mjs}

@@ -145,7 +145,7 @@ function cloudflareAuthEnvironment(source = process.env) {
 		"WRANGLER_LOG_SANITIZE",
 		"CLOUDFLARE_AUTH_USE_KEYRING"
 	]);
-	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedKeys.has(key.toUpperCase())) delete env[key];
+	for (const key of Object.keys(env)) if (/^VOID_PLATFORM_/i.test(key) || /^(?:DATABASE_URL|CF_ACCESS_CLIENT_ID|CF_ACCESS_CLIENT_SECRET|CF_ACCESS_TOKEN|CF_ACCESS_READINESS_ORIGIN|VOID_ACCESS_CREDENTIALS|VOID_ACCESS_ORIGIN)$/i.test(key) || scrubbedKeys.has(key.toUpperCase())) delete env[key];
 	env.CLOUDFLARE_AUTH_USE_KEYRING = "true";
 	return env;
 }

package/dist/{cloudflare-cmd-BaqIigwI.mjs → cloudflare-cmd-D-b_u3T4.mjs}

@@ -1,9 +1,9 @@
 import { t as basename } from "./dist-ipQi0Q8y.mjs";
-import { b as readRootWranglerConfig } from "./wrangler-CDiEBCdS.mjs";
+import { b as readRootWranglerConfig } from "./wrangler-I-scB_1t.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
 import { i as isCleanCloudflareExit } from "./cloudflare-process-8jEYIeim.mjs";
-import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-Byo_0_N9.mjs";
+import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-DyD_kVFr.mjs";
 //#region src/cli/cloudflare-cmd.ts
 async function runCloudflareCommand(root, args) {
 	const runWrangler = createBundledCloudflareAuthRunner(root);

package/dist/{cloudflare-config-DchHxPTo.mjs → cloudflare-config-CH1AylZT.mjs}

@@ -1,15 +1,26 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
 import "./project-paths-DGu_QZ_Q.mjs";
-import { p as readConfig } from "./config-DHgSEWT7.mjs";
+import { p as readConfig } from "./config-OFOAimzt.mjs";
 import { t as writeFileAtomic } from "./atomic-write-Dq6R0BPN.mjs";
 import { t as parseJsoncObject } from "./generated-wrangler-config-DeWj5F9Y.mjs";
-import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { isRecord } from "@void/deploy-core";
 import { isDeepStrictEqual } from "node:util";
 //#region src/cloudflare-config.ts
 const MATERIALIZED_CLOUDFLARE_FILE = ".void-wrangler.jsonc";
 const VOID_LOCK_FILE = "void.lock.json";
 const PREVIEW_POINTER_FILE = "preview-deploy-config.json";
+/** Add the generated Cloudflare config to `.gitignore` unless a line already ignores it. */
+function ignoreMaterializedCloudflareConfig(root) {
+	const path = join(root, ".gitignore");
+	const source = existsSync(path) ? readFileSync(path, "utf8") : "";
+	if (source.split("\n").some((line) => {
+		const entry = line.trim();
+		return entry === ".void-wrangler.jsonc" || entry === `/.void-wrangler.jsonc`;
+	})) return;
+	const separator = source && !source.endsWith("\n") ? "\n" : "";
+	writeFileSync(path, `${source}${separator}${MATERIALIZED_CLOUDFLARE_FILE}\n`);
+}
 function arrayIdentity(value) {
 	if (isRecord(value)) {
 		for (const key of [
@@ -167,4 +178,4 @@ function seedCloudflareConfig(root, source, text) {
 	});
 }
 //#endregion
-export { restoreCloudflarePreviewPointer as a, persistCloudflareConfig as i, VOID_LOCK_FILE as n, seedCloudflareConfig as o, materializeCloudflareConfig as r, stashCloudflareDeployPointer as s, MATERIALIZED_CLOUDFLARE_FILE as t };
+export { persistCloudflareConfig as a, stashCloudflareDeployPointer as c, materializeCloudflareConfig as i, VOID_LOCK_FILE as n, restoreCloudflarePreviewPointer as o, ignoreMaterializedCloudflareConfig as r, seedCloudflareConfig as s, MATERIALIZED_CLOUDFLARE_FILE as t };

package/dist/{cloudflare-connect-pNLQmr_e.mjs → cloudflare-connect-zTJh8UnN.mjs}

@@ -1,7 +1,7 @@
 import { a as join, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { M as writeProvisionedWranglerConfig, b as readRootWranglerConfig, i as LATEST_KNOWN_COMPAT_DATE } from "./wrangler-CDiEBCdS.mjs";
+import { M as writeProvisionedWranglerConfig, b as readRootWranglerConfig, i as LATEST_KNOWN_COMPAT_DATE } from "./wrangler-I-scB_1t.mjs";
 import { K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { i as ensureCloudflareAuthentication, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-Byo_0_N9.mjs";
+import { i as ensureCloudflareAuthentication, r as createBundledCloudflareAuthRunner } from "./cloudflare-auth-DyD_kVFr.mjs";
 import { existsSync } from "node:fs";
 //#region src/cli/cloudflare-connect.ts
 async function connectCloudflare(root, interactive = Boolean(process.stdin.isTTY)) {

package/dist/{cloudflare-operations-vP3b5CQf.mjs → cloudflare-operations-Bc-7fN44.mjs}

@@ -1,10 +1,10 @@
 import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig } from "./cloudflare-config-DchHxPTo.mjs";
-import { N as writeWranglerPublishedTrafficSnapshot, S as readWranglerCustomDomains, j as updateWranglerCustomDomain, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-CDiEBCdS.mjs";
+import { a as persistCloudflareConfig, i as materializeCloudflareConfig } from "./cloudflare-config-CH1AylZT.mjs";
+import { N as writeWranglerPublishedTrafficSnapshot, S as readWranglerCustomDomains, j as updateWranglerCustomDomain, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-I-scB_1t.mjs";
 import { u as getErrorMessage } from "./output-BpgYODYx.mjs";
 import { t as createCloudflareProcessRunner } from "./cloudflare-process-8jEYIeim.mjs";
-import { _ as provisionEnv, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, v as resolvePinnedApiBaseUrl } from "./provision-B7UFrBH7.mjs";
-import { a as findWranglerCiOverrideDotenvFile, i as findAmbientConfigOverride } from "./deploy-transport-JCxw7QDi.mjs";
+import { _ as provisionEnv, r as assertNoTransportRedirectInProjectDotenv, s as deleteEnvVarCaseAware, v as resolvePinnedApiBaseUrl } from "./provision-DztLJ97X.mjs";
+import { a as findWranglerCiOverrideDotenvFile, i as findAmbientConfigOverride } from "./deploy-transport-DIq_gFTP.mjs";
 import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { deployCloudflareVersionTraffic, encodeCloudflareVersionMessage, parseCloudflareVersionMessage, parseRootWranglerConfig, readBindingFieldPresence, readCloudflareTriggerConfig, readWranglerTopLevelString, resolveD1MigrateTarget, stabilizeCloudflareVersionTriggers } from "@void/deploy-cloudflare";