void 1.4.0 → 1.6.0

package/dist/{platform-management-BOnGbMSM.mjs → platform-management-BRefdHGD.mjs}

@@ -1,11 +1,12 @@
-import { S as writePendingInstallationSecrets, _ as removePlatformConnectionForInstallation, g as removeInstallationRecoverySecrets, h as readPendingInstallationSecrets, m as readInstallationRecoverySecrets, o as listInstallationManifests, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest, x as writeInstallationManifest } from "./platform-registry-B9mWX9LO.mjs";
-import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
-import { A as confirm, H as outro, K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { f as import_picocolors, l as formatUrl, m as printSuccess, p as note, r as createSpinner } from "./output-BpgYODYx.mjs";
-import { $ as hyperdriveOriginMatches, A as dnsRecordConfigHash, B as turnOffInstalledProjectZeroTrust, C as createPlatformHealthProbeToken, D as platformTrafficAttachmentWorker, F as platformAdoptionIntentHash, H as resolvePlatformCloudflareCredential, I as r2BucketConfigHash, J as PlatformCloudflareApiError, L as resourceMarkerProblem, M as hasProvisionIntentStep, N as legacyResourceConfigHash, P as matchesRecordedR2Fingerprint, Q as hyperdriveOriginFromConnectionString, R as revalidatePlatformInstallAction, S as loadPlatformRuntime, T as resolveBootstrapGitHubId, U as verifyPlatformCloudflareCredential, V as assertPlatformOperatorCredentialCanApplyPlan, W as activatePlatformAccessCredentials, X as PlatformRuntimeTokenEmailPermissionError, Y as PlatformCloudflareClient, Z as hyperdriveOriginConfigHash, _ as readPlatformProjectSlugs, a as findPlatformWorkerOutsideChanges, b as formatZeroTrustApplications, c as uploadPlatformWorkerOutsideChanges, d as replacePendingInstallationAuthentication, et as verifyPlatformRuntimeTokenEmailPermissions, f as REMOTE_INSTALLATION_MANIFEST_KEY, j as formatPlatformInstallPlan, k as createPlatformInstallPlan, l as authenticationSetupRequestHash, m as acquirePlatformDatabaseLifecycleLock, n as resolvePlatformInstallDatabaseUrl, o as formatPlatformWorkerOutsideChanges, p as installPlatform, s as reviewPlatformWorkerOutsideChanges, t as assertNoninteractivePlatformMutationAcknowledged, tt as verifyPlatformRuntimeTokenPermissions, u as readLoginReplacementFile, v as readPlatformProjectZeroTrustState, w as createPlatformInstallationSecrets, x as readPlatformDatabase, y as assertProjectZeroTrustAllowsUninstall, z as platformDatabaseNameFromOwnerUrl } from "./platform-lifecycle-CPYY7E9B.mjs";
+import { S as writePendingInstallationSecrets, _ as removePlatformConnectionForInstallation, g as removeInstallationRecoverySecrets, h as readPendingInstallationSecrets, m as readInstallationRecoverySecrets, o as listInstallationManifests, t as acquirePlatformLifecycleLock, v as resolveInstallationManifest, x as writeInstallationManifest } from "./platform-registry-DZ_2Xuqd.mjs";
+import { t as ensurePlatformAccessToken } from "./cf-access-BmBT2h8_.mjs";
+import { A as confirm, H as outro, K as select, L as log, tt as isCancel } from "./dist-D23AAMxT.mjs";
+import { f as import_picocolors, l as formatUrl, m as printSuccess, p as note, r as createSpinner } from "./output-BCdLioKP.mjs";
+import { i as updateProjectWorkerRuntimeLogs, n as assertPlatformRuntimeLogsSupported, r as shouldUpdateProjectWorkerRuntimeLogs } from "./platform-runtime-logs-CdJGnk3f.mjs";
+import { $ as hyperdriveOriginMatches, A as dnsRecordConfigHash, B as turnOffInstalledProjectZeroTrust, C as createPlatformHealthProbeToken, D as platformTrafficAttachmentWorker, F as platformAdoptionIntentHash, H as resolvePlatformCloudflareCredential, I as r2BucketConfigHash, J as PlatformCloudflareApiError, L as resourceMarkerProblem, M as hasProvisionIntentStep, N as legacyResourceConfigHash, P as matchesRecordedR2Fingerprint, Q as hyperdriveOriginFromConnectionString, R as revalidatePlatformInstallAction, S as loadPlatformRuntime, T as resolveBootstrapGitHubId, U as verifyPlatformCloudflareCredential, V as assertPlatformOperatorCredentialCanApplyPlan, W as activatePlatformAccessCredentials, X as PlatformRuntimeTokenEmailPermissionError, Y as PlatformCloudflareClient, Z as hyperdriveOriginConfigHash, _ as readPlatformProjectSlugs, a as findPlatformWorkerOutsideChanges, b as formatZeroTrustApplications, c as uploadPlatformWorkerOutsideChanges, d as replacePendingInstallationAuthentication, et as verifyPlatformRuntimeTokenEmailPermissions, f as REMOTE_INSTALLATION_MANIFEST_KEY, j as formatPlatformInstallPlan, k as createPlatformInstallPlan, l as authenticationSetupRequestHash, m as acquirePlatformDatabaseLifecycleLock, n as resolvePlatformInstallDatabaseUrl, o as formatPlatformWorkerOutsideChanges, p as installPlatform, s as reviewPlatformWorkerOutsideChanges, t as assertNoninteractivePlatformMutationAcknowledged, tt as verifyPlatformRuntimeTokenPermissions, u as readLoginReplacementFile, v as readPlatformProjectZeroTrustState, w as createPlatformInstallationSecrets, x as readPlatformDatabase, y as assertProjectZeroTrustAllowsUninstall, z as platformDatabaseNameFromOwnerUrl } from "./platform-lifecycle-D9RdGub1.mjs";
 import { PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, parsePlatformInstallationManifest, recordInstallationResource, recordInstallationStep, setInstallationDesiredState, transitionInstallation } from "@void/platform";
 import { setTimeout } from "node:timers/promises";
-//#region src/cli/platform-teardown.ts
+// src/cli/platform-teardown.ts
 /**
 * `void platform uninstall --purge-resources` deletes every Cloudflare resource the
 * installation created, in an order Cloudflare accepts:
@@ -591,8 +592,7 @@ async function runPurgeResourcesTeardown(context, initial) {
 		await markDeleted(bucket.key);
 	}
 }
-//#endregion
-//#region src/cli/platform-management.ts
+// src/cli/platform-management.ts
 async function verifyPlatformInstallationOwnership(client, manifest, options = {}) {
 	const ready = manifest.resources.filter((resource) => resource.state === "ready" && isOwnershipVerifiableKind(resource.kind) && !options.retainedReplacementKeys?.has(resource.key));
 	if (!ready.find((resource) => resource.key === "routing-kv")) {
@@ -625,6 +625,7 @@ function platformLifecycleResumeCommand(args, installationId) {
 	if (args.subcommand === "rollback" && args.fromRuntime) command.push("--from-runtime", commandArgument(args.fromRuntime));
 	if ("dashboardUrl" in args && args.dashboardUrl) command.push("--dashboard-url", commandArgument(args.dashboardUrl));
 	if ("customDomains" in args && args.customDomains) command.push("--custom-domains");
+	if ("runtimeLogs" in args && args.runtimeLogs) command.push("--runtime-logs", args.runtimeLogs);
 	if (args.yes) command.push("--yes");
 	return command.join(" ");
 }
@@ -716,6 +717,7 @@ async function runInstalledPlatformCommand(args) {
 			controlPlaneDomain: deployment.controlPlane.apiHostname ?? "",
 			...args.subcommand !== "rollback" && args.dashboardUrl !== void 0 ? { dashboardUrl: args.dashboardUrl } : {},
 			...args.subcommand !== "rollback" && args.customDomains ? { customDomains: true } : {},
+			...args.subcommand === "upgrade" && args.runtimeLogs !== void 0 ? { runtimeLogs: args.runtimeLogs } : {},
 			dedicatedZone: deployment.application.dedicatedZone,
 			displayName: deployment.displayName,
 			installationSlug: deployment.installationSlug,
@@ -727,10 +729,12 @@ async function runInstalledPlatformCommand(args) {
 			allowUnverifiedAiGateway: args.plan,
 			includeEmailGateway: runtime.manifest.artifacts.emailGateway !== void 0,
 			enableSandbox: runtime.manifest.safetyProtocols.sandboxDrain >= 3,
-			deploymentExecution: runtime.manifest.deploymentExecution === 1
+			deploymentExecution: runtime.manifest.deploymentExecution === 1,
+			allowRuntimeLogsChange: args.subcommand === "upgrade"
 		});
+		assertPlatformRuntimeLogsSupported(plan.deployment, runtime.manifest);
 		markPhase("plan");
-		note(formatPlatformInstallPlan(plan), args.subcommand === "upgrade" ? "Upgrade plan" : args.subcommand === "rollback" ? "Rollback plan" : args.subcommand === "enable" ? "Enable plan" : "Repair plan");
+		note(formatPlatformInstallPlan(plan, manifest.deployment), args.subcommand === "upgrade" ? "Upgrade plan" : args.subcommand === "rollback" ? "Rollback plan" : args.subcommand === "enable" ? "Enable plan" : "Repair plan");
 		note([
 			`Version: ${manifest.platformVersion} → ${runtime.manifest.platformVersion}`,
 			`Source: ${runtime.source}`,
@@ -873,6 +877,7 @@ async function runInstalledPlatformCommand(args) {
 			runtime,
 			operation: args.subcommand,
 			replanWorkers: async (recoveryManifest) => (await createPlatformInstallPlan(client, planInput, recoveryManifest, {
+				allowRuntimeLogsChange: args.subcommand === "upgrade",
 				authoritativeProvisionIntents: true,
 				repairMissing: true,
 				includeEmailGateway: runtime.manifest.artifacts.emailGateway !== void 0,
@@ -888,6 +893,16 @@ async function runInstalledPlatformCommand(args) {
 		});
 		progress.message("Finalizing platform changes");
 		markPhase("installer complete");
+		const runtimeLogsWarning = !result.waitingForDns && !result.waitingForSandboxDrain && shouldUpdateProjectWorkerRuntimeLogs({
+			previous: manifest.deployment,
+			next: result.manifest.deployment,
+			explicit: args.subcommand === "upgrade" && args.runtimeLogs !== void 0
+		}) ? await updateProjectWorkerRuntimeLogs(client, {
+			accountId: manifest.account.id,
+			namespace: result.manifest.deployment.resources.dispatchNamespace,
+			minimal: !!result.manifest.deployment.runtimeLogs,
+			installationId: manifest.id
+		}) : void 0;
 		reportResult = () => {
 			progress?.stop(result.waitingForDns || result.waitingForSandboxDrain ? "Platform operation paused; progress is saved." : `Platform ${args.subcommand} complete.`);
 			progress = void 0;
@@ -917,6 +932,7 @@ async function runInstalledPlatformCommand(args) {
 					log.info(`If sign-in fails, run \`void platform repair ${commandArgument(manifest.id)}\` to change the login settings.`);
 				}
 			}
+			if (runtimeLogsWarning) log.warn(runtimeLogsWarning);
 			printSuccess(`${deployment.displayName}: runtime ${runtime.manifest.platformVersion} ${args.subcommand === "rollback" ? "restored" : "ready"}.`);
 		};
 	};
@@ -965,6 +981,7 @@ async function runInstalledPlatformCommand(args) {
 }
 function assertPlatformRollbackCompatibility(installation, target, source) {
 	if (target.manifest.emailProtocolVersion !== 1 && (installation.deployment.capabilities.email || installation.resources.some((resource) => resource.key === "email-gateway-worker" && resource.state === "ready"))) throw new Error("platform: The rollback target predates the email gateway and cannot safely replace this installation. Use a runtime with email protocol version 1.");
+	if (installation.deployment.runtimeLogs && target.manifest.runtimeLogs !== 1) throw new Error("platform: The rollback target cannot keep runtime logs minimal. Run `void platform upgrade --runtime-logs full` first, then roll back.");
 	if (!installation.runtime) throw new Error("platform: The installed runtime has no artifact provenance, so post-success rollback cannot identify its compatibility manifest.");
 	if (source.manifest.platformVersion !== installation.platformVersion || source.manifestSha256 !== installation.runtime.manifestSha256) throw new Error("platform: --from-runtime does not exactly match the installed runtime artifact digest. Supply the runtime used by the current successful deployment.");
 	if (target.manifestSha256 === source.manifestSha256) throw new Error("platform: The rollback target is already the installed runtime artifact.");
@@ -1578,5 +1595,4 @@ async function promptForConfirmation(message, initialValue) {
 	if (isCancel(answer) || typeof answer === "symbol") throw new Error("platform: Cancelled.");
 	return answer;
 }
-//#endregion
 export { recoverDurablyMarkedProvisionIntents as a, runInstalledPlatformCommand as c, verifyPlatformInstallationOwnership as d, platformLifecycleResumeCommand as i, selectAuthoritativePlatformManifest as l, disablePlatform as n, resolveInstalledPlatformManifest as o, isPlatformManifestMonotonicExtension as r, resolvePlatformRuntimeTokenToPreflight as s, assertPlatformRollbackCompatibility as t, uninstallPlatform as u };

package/dist/{platform-management-lXdgGgAM.mjs → platform-management-BfLW0Zlo.mjs}

@@ -1 +1 @@
-export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-BOnGbMSM.mjs";
+export { c as runInstalledPlatformCommand, l as selectAuthoritativePlatformManifest, d as verifyPlatformInstallationOwnership } from "./platform-management-BRefdHGD.mjs";

package/dist/{platform-plans-config-CeydDSj0.mjs → platform-plans-config-Dx1agneU.mjs}

@@ -1,11 +1,11 @@
-import { A as confirm, K as select, X as text, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { m as printSuccess } from "./output-BpgYODYx.mjs";
-import { n as OperatorClient, r as OperatorClientError } from "./operator-client-C-ROjk1I.mjs";
-import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-Cr2zCc-J.mjs";
+import { A as confirm, K as select, X as text, tt as isCancel } from "./dist-D23AAMxT.mjs";
+import { m as printSuccess } from "./output-BCdLioKP.mjs";
+import { n as OperatorClient, r as OperatorClientError } from "./operator-client-BIY4-N_6.mjs";
+import { a as resolveOperatorOrigin, r as readOperatorToken } from "./operator-auth-CfDcmzpo.mjs";
 import { stripVTControlCharacters } from "node:util";
 import { PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanId } from "@void/platform/plans";
 import { readFile } from "node:fs/promises";
-//#region src/cli/platform-plans-config.ts
+// src/cli/platform-plans-config.ts
 const limitLabels = {
 	requestsPerMonth: "Requests per billing month",
 	cpuMsPerRequest: "Default CPU per request (ms)",
@@ -360,5 +360,4 @@ async function runPlatformPlansConfig(args) {
 	}
 	await apply(client, path, body, args, catalog);
 }
-//#endregion
 export { runPlatformPlansConfig };

package/dist/{platform-recovery-noaALXnE.mjs → platform-recovery-DZuZGJtt.mjs}

@@ -1,9 +1,9 @@
-import { o as listInstallationManifests, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-B9mWX9LO.mjs";
-import { t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
-import { f as REMOTE_INSTALLATION_MANIFEST_KEY, k as createPlatformInstallPlan } from "./platform-lifecycle-CPYY7E9B.mjs";
-import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-BOnGbMSM.mjs";
+import { o as listInstallationManifests, t as acquirePlatformLifecycleLock, x as writeInstallationManifest, y as savePlatformConnection } from "./platform-registry-DZ_2Xuqd.mjs";
+import { t as cfAccessHeaders } from "./cf-access-pejlJmuy.mjs";
+import { f as REMOTE_INSTALLATION_MANIFEST_KEY, k as createPlatformInstallPlan } from "./platform-lifecycle-D9RdGub1.mjs";
+import { a as recoverDurablyMarkedProvisionIntents, d as verifyPlatformInstallationOwnership, r as isPlatformManifestMonotonicExtension } from "./platform-management-BRefdHGD.mjs";
 import { parsePlatformInstallationManifest, setInstallationEndpoints } from "@void/platform";
-//#region src/cli/platform-recovery.ts
+// src/cli/platform-recovery.ts
 async function recoverPlatformInstallations(client, accountId, verifyEndpoint = verifyInstallationEndpoint, selector = "") {
 	const namespaces = await client.listKvNamespaces(accountId);
 	const recovered = [];
@@ -93,5 +93,4 @@ async function verifyInstallationEndpoint(manifest, fetcher = fetch) {
 	if (!response.ok) throw new Error(`platform: Installation ${manifest.id} is not reachable (HTTP ${response.status}).`);
 	if ((await response.json()).installationId !== manifest.id) throw new Error(`platform: Installation ${manifest.id} endpoint identity does not match.`);
 }
-//#endregion
 export { recoverPlatformInstallations };

package/dist/{platform-registry-B9mWX9LO.mjs → platform-registry-DZ_2Xuqd.mjs}

@@ -1,11 +1,11 @@
-import { a as join, c as resolve } from "./dist-ipQi0Q8y.mjs";
-import { t as writeFileAtomic } from "./atomic-write-Dq6R0BPN.mjs";
+import { a as join, c as resolve } from "./dist-DMYe8CZJ.mjs";
+import { t as writeFileAtomic } from "./atomic-write-DA6eD1Kp.mjs";
 import { closeSync, mkdirSync, openSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { parsePlatformInstallationManifest } from "@void/platform";
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { homedir, hostname } from "node:os";
 import { Entry } from "@napi-rs/keyring";
-//#region src/cli/keyring.ts
+// src/cli/keyring.ts
 function readKeyringPassword(service, account) {
 	try {
 		return new Entry(service, account).getPassword();
@@ -29,8 +29,7 @@ function deleteKeyringPassword(service, account) {
 		return false;
 	}
 }
-//#endregion
-//#region src/cli/platform-registry.ts
+// src/cli/platform-registry.ts
 const PLATFORM_REGISTRY_SCHEMA_VERSION = 1;
 const DEFAULT_REGISTRY = {
 	activeConnectionId: null,
@@ -433,5 +432,4 @@ function removePlatformConnectionForInstallation(installationId, directory = pla
 		});
 	});
 }
-//#endregion
 export { deleteKeyringPassword as C, writePendingInstallationSecrets as S, writeKeyringPassword as T, removePlatformConnectionForInstallation as _, latestPlatformWorkerCutoverGeneration as a, selectPlatformConnection as b, normalizePlatformApiUrl as c, platformRegistryDirectory as d, platformWorkerSecretUpdateIntentState as f, removeInstallationRecoverySecrets as g, readPendingInstallationSecrets as h, getActivePlatformConnection as i, platformConnectionSlug as l, readInstallationRecoverySecrets as m, assertPlatformInstallationSlugAvailable as n, listInstallationManifests as o, promoteInstallationSecrets as p, findPlatformConnections as r, listPlatformConnections as s, acquirePlatformLifecycleLock as t, platformCredentialAccount as u, resolveInstallationManifest as v, readKeyringPassword as w, writeInstallationManifest as x, savePlatformConnection as y };

package/dist/platform-runtime-logs-CdJGnk3f.mjs

@@ -0,0 +1,68 @@
+// src/cli/platform-runtime-logs.ts
+/**
+* Namespace scripts that run project code: one `user-<slug>-<deployment>` per
+* deployment, and `void-do-<project>-<hash>` hosts for custom Durable Objects.
+*/
+const PROJECT_WORKER_PREFIXES = ["user-", "void-do-"];
+const CONCURRENCY = 4;
+/** Printed by log readers when the platform answers `runtimeLogs: 'minimal'`. */
+const MINIMAL_RUNTIME_LOGS_NOTE = "Log messages, exception messages and URLs are not recorded on this platform.";
+/** Same `observability` the API sends when it uploads a project Worker. */
+function projectWorkerObservability(minimal) {
+	return minimal ? { enabled: false } : {
+		enabled: true,
+		logs: {
+			invocation_logs: true,
+			head_sampling_rate: 1
+		}
+	};
+}
+function assertPlatformRuntimeLogsSupported(deployment, runtime) {
+	if (deployment.runtimeLogs && runtime.runtimeLogs !== 1) throw new Error("platform: This platform runtime cannot keep runtime logs minimal. Upgrade Void or use a current platform runtime.");
+}
+/**
+* Project Workers keep the settings they were uploaded with, so a changed
+* mode is pushed to them. While minimal, every operation pushes it again, so
+* a run that stopped before this step is finished by the next one.
+*/
+function shouldUpdateProjectWorkerRuntimeLogs(input) {
+	const minimal = !!input.next.runtimeLogs;
+	return minimal || input.explicit || minimal !== !!input.previous?.runtimeLogs;
+}
+/**
+* Update every project Worker's `observability` setting. Never throws: returns
+* a warning to print when some Workers could not be updated.
+*/
+async function updateProjectWorkerRuntimeLogs(client, input) {
+	const finish = input.minimal ? ` Run \`void platform repair ${input.installationId}\` to finish.` : ` Run \`void platform upgrade ${input.installationId} --runtime-logs full\` again to finish.`;
+	let scripts;
+	try {
+		scripts = (await client.listDispatchNamespaceScripts(input.accountId, input.namespace)).filter((name) => PROJECT_WORKER_PREFIXES.some((prefix) => name.startsWith(prefix)));
+	} catch (error) {
+		return `Could not list project Workers to update their Workers Logs setting: ${errorMessage(error)}.${finish}`;
+	}
+	const settings = { observability: projectWorkerObservability(input.minimal) };
+	const failed = [];
+	let next = 0;
+	const work = async () => {
+		while (next < scripts.length) {
+			const script = scripts[next++];
+			try {
+				await client.patchDispatchNamespaceScriptSettings(input.accountId, input.namespace, script, settings);
+			} catch {
+				failed.push(script);
+			}
+		}
+	};
+	await Promise.all(Array.from({ length: Math.min(CONCURRENCY, scripts.length) }, work));
+	if (failed.length === 0) return;
+	failed.sort();
+	const shown = failed.slice(0, 5).join(", ");
+	const more = failed.length > 5 ? ` and ${failed.length - 5} more` : "";
+	return `Could not update the Workers Logs setting of ${failed.length} project Worker${failed.length === 1 ? "" : "s"} (${shown}${more}).${finish}`;
+}
+function errorMessage(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	return message.endsWith(".") ? message.slice(0, -1) : message;
+}
+export { updateProjectWorkerRuntimeLogs as i, assertPlatformRuntimeLogsSupported as n, shouldUpdateProjectWorkerRuntimeLogs as r, MINIMAL_RUNTIME_LOGS_NOTE as t };

package/dist/{platform-setup-Ca53gtt0.mjs → platform-setup-Vw1AaUN8.mjs}

@@ -1,7 +1,19 @@
-import { u as openBrowser } from "./auth-B6iOCjKI.mjs";
-import { L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { f as import_picocolors, s as formatLink } from "./output-BpgYODYx.mjs";
-//#region src/cli/platform-setup.ts
+import { u as openBrowser } from "./auth-Dy8svcqQ.mjs";
+import { L as log, tt as isCancel } from "./dist-D23AAMxT.mjs";
+import { f as import_picocolors, s as formatLink } from "./output-BCdLioKP.mjs";
+// src/cli/platform-plan-writes.ts
+function planCreatesZone(plan) {
+	return plan.actions.some((action) => action.kind === "zone" && action.action === "create");
+}
+/**
+* Whether applying the plan writes a DNS record, which needs Zone → DNS → Edit.
+* 'reuse' changes nothing and 'adopt' only records an existing record in the
+* manifest; only 'create' calls the DNS API.
+*/
+function planWritesDns(plan) {
+	return plan.actions.some((action) => action.kind === "dns-record" && action.action !== "reuse" && action.action !== "adopt");
+}
+// src/cli/platform-setup.ts
 /** Return a prompt answer, or stop the platform command when the prompt was cancelled. */
 function platformPromptAnswer(value) {
 	if (isCancel(value) || typeof value === "symbol") throw new Error("platform: Cancelled.");
@@ -215,7 +227,7 @@ function platformSetupPages(plan) {
 	};
 }
 function formatPlatformSetupPlan(plan, options = {}) {
-	const writesDns = plan.actions.some((action) => action.kind === "zone" && action.action === "create" || action.kind === "dns-record" && action.action !== "reuse");
+	const writesDns = planCreatesZone(plan) || planWritesDns(plan);
 	return [
 		"The installation will guide you through setting up the following credentials:",
 		"",
@@ -268,6 +280,7 @@ function platformInstallCommandArguments(options) {
 	}
 	flag("--dashboard-url", options.dashboardUrl ?? "");
 	flag("--runtime", options.runtime);
+	flag("--runtime-logs", options.runtimeLogs ?? "");
 	if (options.yes) parts.push("--yes");
 	return parts;
 }
@@ -289,5 +302,4 @@ function openPlatformSetupPage(page, dependencies = {}) {
 		log.info("Could not open the browser. Use the link above.");
 	}
 }
-//#endregion
-export { platformManagementSetupPage as a, platformSetupLink as c, platformInstallCommandArguments as i, platformSetupPages as l, formatPlatformSetupPlan as n, platformPromptAnswer as o, openPlatformSetupPage as r, platformSetupFieldHelp as s, formatPlatformInstallCommand as t };
+export { platformManagementSetupPage as a, platformSetupLink as c, planWritesDns as d, platformInstallCommandArguments as i, platformSetupPages as l, formatPlatformSetupPlan as n, platformPromptAnswer as o, openPlatformSetupPage as r, platformSetupFieldHelp as s, formatPlatformInstallCommand as t, planCreatesZone as u };

package/dist/{plugin-inference-CeiB6BG5.mjs → plugin-inference-CdLbxZL_.mjs}

@@ -1,14 +1,14 @@
-import { a as join, l as toSlash, s as relative } from "./dist-ipQi0Q8y.mjs";
-import { n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { n as globSync } from "./dist-D15hFhP0.mjs";
-import { d as deriveFromSource, g as ROUTE_EXTENSIONS, h as parseWebSocketFilename, m as parseRouteFilename, p as isRouteEnabledForEnvironment, t as pageFileEnvironment } from "./scan-N9WzdcAl.mjs";
-import { a as isObjectExpression, i as isMemberExpression, n as isIdentifier, r as isLiteral, t as isCallExpression } from "./ast-CsZ_q_gc.mjs";
-import { a as staticLiteral, n as bindingResolver, o as unwrapStaticExpression, r as walk } from "./ast-bindings-C3yaPs1y.mjs";
-import { n as resourceNameWords, t as isResourceName } from "./resource-name-C7LVpcRm.mjs";
-import { r as getSsrServerEntryPath } from "./entry-BEM8ZuGP.mjs";
+import { a as join, l as toSlash, s as relative } from "./dist-DMYe8CZJ.mjs";
+import { n as readProjectPaths } from "./project-paths-CdGv9Tmi.mjs";
+import { n as globSync } from "./dist-BWNkVq50.mjs";
+import { d as deriveFromSource, g as ROUTE_EXTENSIONS, h as parseWebSocketFilename, m as parseRouteFilename, p as isRouteEnabledForEnvironment, t as pageFileEnvironment } from "./scan-X2rDDRNa.mjs";
+import { a as isObjectExpression, i as isMemberExpression, n as isIdentifier, r as isLiteral, t as isCallExpression } from "./ast-Cv0JwXqb.mjs";
+import { a as staticLiteral, n as bindingResolver, o as unwrapStaticExpression, r as walk } from "./ast-bindings-BkivMJIo.mjs";
+import { n as resourceNameWords, t as isResourceName } from "./resource-name-DlJ9QXzg.mjs";
+import { r as getSsrServerEntryPath } from "./entry-CBZsCy3O.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { parseSync } from "vite";
-//#region src/application-features.ts
+// src/application-features.ts
 /** Apply explicitly named overrides while preserving unrelated source features. */
 function applyBindingOverrides(inferred, overrides) {
 	const bindings = { ...inferred };
@@ -28,8 +28,7 @@ function applyBindingOverrides(inferred, overrides) {
 function needsApplicationDatabase(bindings, migrationCount) {
 	return bindings.needsD1 || bindings.needsAuth || migrationCount > 0;
 }
-//#endregion
-//#region src/shared/convention-files.ts
+// src/shared/convention-files.ts
 const WELL_KNOWN_DIR = ".well-known";
 /** Include the convention directory's .well-known files when it is inside the scan directory. */
 function conventionFileGlobs(scanDir, pattern, conventionDir = scanDir) {
@@ -63,8 +62,7 @@ function listConventionFiles(dir) {
 function listRouteFiles(dir) {
 	return listFilesWithExtensions(dir, ROUTE_EXTENSIONS);
 }
-//#endregion
-//#region src/shared/resource-definition.ts
+// src/shared/resource-definition.ts
 /** Inspect default helper definitions without running application code. */
 function readResourceDefinition(filename, source, helpers) {
 	let program;
@@ -178,8 +176,7 @@ function readResourceDefinition(filename, source, helpers) {
 		...name === void 0 ? {} : { name }
 	};
 }
-//#endregion
-//#region src/shared/module-references.ts
+// src/shared/module-references.ts
 /** Runtime imports and re-exports, in source order, including empty export lists. */
 function staticModuleReferences(parsed, code) {
 	const { staticImports, staticExports } = parsed.module;
@@ -205,8 +202,7 @@ function staticModuleReferences(parsed, code) {
 		}];
 	});
 }
-//#endregion
-//#region src/inference/client-auth.ts
+// src/inference/client-auth.ts
 const CLIENT_MODULES = /* @__PURE__ */ new Set([
 	"void/client",
 	"void/client/react",
@@ -301,8 +297,7 @@ function inferNamespaceAuth(program) {
 	}
 	return reads.some(isClientNamespace);
 }
-//#endregion
-//#region src/inference/walk.ts
+// src/inference/walk.ts
 const ENV_BINDING_RE = /\benv\b|\\(?:u|x|[0-7\r\n\u2028\u2029])/;
 const RESOURCE_BINDING_RE = /\b(?:DB\b|KV\b|STORAGE\b|AI\b|SANDBOX\b|QUEUE_)|\\(?:u|x|[0-7A-Z_\r\n\u2028\u2029])/;
 /**
@@ -436,8 +431,7 @@ function mergeBindings(bindings) {
 		needsEmail: bindings.some((b) => b.needsEmail)
 	};
 }
-//#endregion
-//#region src/router/websocket.ts
+// src/router/websocket.ts
 const WEBSOCKET_ROUTE_RE = new RegExp(`(?:\\.(?:dev|prod))?\\.ws\\.(?:${ROUTE_EXTENSIONS.join("|")})$`);
 function isWebSocketRouteFile(filePath) {
 	return WEBSOCKET_ROUTE_RE.test(filePath.replace(/\\/g, "/"));
@@ -508,8 +502,7 @@ function scanWebSocketRoutesSync(root, paths = readProjectPaths(root), environme
 function isWebSocketPatternFile(filePath) {
 	return isWebSocketRouteFile(filePath);
 }
-//#endregion
-//#region src/plugin-inference.ts
+// src/plugin-inference.ts
 const SOURCE_GLOB = "**/*.{ts,tsx,mts,js,jsx,mjs,astro}";
 /** Directories to scan for binding inference in framework mode. */
 const FRAMEWORK_SCAN_DIRS = [
@@ -668,5 +661,4 @@ function inferProjectBindings(root, options, scanDirs) {
 	}
 	return applyBindingOverrides(mergeBindings(allBindings), options?.bindings);
 }
-//#endregion
 export { deriveWebSocketClassNameFromName as a, scanWebSocketRoutesSync as c, readResourceDefinition as d, listConventionFiles as f, needsApplicationDatabase as h, inferProjectBindings as i, inferBindingsFromSource as l, applyBindingOverrides as m, FRAMEWORK_SCAN_DIRS as n, inferWebSocketResourceName as o, listRouteFiles as p, detectFramework as r, isWebSocketPatternFile as s, DEFAULT_SCAN_DIRS as t, staticModuleReferences as u };

package/dist/{prefetch-Bsc_Pb6c.mjs → prefetch-Dx2jIbtg.mjs}

@@ -1,4 +1,22 @@
-//#region src/pages/prefetch.ts
+// src/pages/prefetch.ts
+const LINK_PREFETCH_STRATEGIES = [
+	"hover",
+	"click",
+	"mount",
+	"visible"
+];
+function isLinkPrefetchStrategy(value) {
+	return LINK_PREFETCH_STRATEGIES.includes(value);
+}
+/** Rejects an invalid `prefetch.defaultStrategy` when the plugin is configured. */
+function assertLinkPrefetchValue(value, name) {
+	if (typeof value === "boolean") return;
+	const strategies = Array.isArray(value) ? value : [value];
+	for (const strategy of strategies) if (!isLinkPrefetchStrategy(strategy)) {
+		const allowed = LINK_PREFETCH_STRATEGIES.map((s) => `'${s}'`).join(", ");
+		throw new Error(`${name}: Invalid prefetch strategy ${JSON.stringify(strategy)}. Use true, false, ${allowed}, or an array of strategies.`);
+	}
+}
 const UNITS = {
 	ms: 1,
 	s: 1e3,
@@ -86,5 +104,4 @@ var PrefetchCache = class {
 		this.entries.clear();
 	}
 };
-//#endregion
-export { parseCacheFor as n, PrefetchCache as t };
+export { assertLinkPrefetchValue as n, parseCacheFor as r, PrefetchCache as t };

package/dist/{prefetch-Ce6la4EI.d.mts → prefetch-NdNeubbH.d.mts}

@@ -1,9 +1,14 @@
-//#region src/pages/prefetch.d.ts
+declare const LINK_PREFETCH_STRATEGIES: readonly ["hover", "click", "mount", "visible"];
+type LinkPrefetchStrategy = (typeof LINK_PREFETCH_STRATEGIES)[number];
+/** A Link's `prefetch` prop, and the `prefetch.defaultStrategy` of an adapter plugin. */
+type LinkPrefetchValue = boolean | LinkPrefetchStrategy | ReadonlyArray<LinkPrefetchStrategy>;
 type CacheForResult = {
   stale: number;
   expires: number;
 };
 type CacheForInput = number | string | [string, string];
+/** Rejects an invalid `prefetch.defaultStrategy` when the plugin is configured. */
+declare function assertLinkPrefetchValue(value: unknown, name: string): asserts value is LinkPrefetchValue;
 declare function parseCacheFor(value: CacheForInput): CacheForResult;
 type CacheEntry = {
   url: string;
@@ -27,5 +32,4 @@ declare class PrefetchCache {
   flush(url: string, method?: string): void;
   flushAll(): void;
 }
-//#endregion
-export { parseCacheFor as a, PrefetchCache as i, CacheForInput as n, CacheForResult as r, CacheEntry as t };
+export { LinkPrefetchValue as a, parseCacheFor as c, LinkPrefetchStrategy as i, CacheForInput as n, PrefetchCache as o, CacheForResult as r, assertLinkPrefetchValue as s, CacheEntry as t };

package/dist/{prepare-D604Yiyr.mjs → prepare-BJW-f1f1.mjs}

@@ -1,17 +1,17 @@
-import { a as join } from "./dist-ipQi0Q8y.mjs";
-import { t as discoverSchema } from "./discover-LaV0tbIu.mjs";
-import { a as projectAuthConfigImporter, i as loadVoidAuthConfig } from "./config-D-6q7EBH.mjs";
-import { c as getDatabaseCasing, p as readConfig } from "./config-OFOAimzt.mjs";
-import { i as writeFileIfChanged, n as ensureProjectTsconfig } from "./project-tsconfig-CVvk6Z_e.mjs";
-import { n as generateDbDts } from "./db-types-0eCiqYb1.mjs";
-import { s as loadLocalEnv } from "./env-BaMz0j7H.mjs";
-import { n as findEnvFileForPaths, r as generateEnvTypes } from "./env-types-BicfKBhV.mjs";
-import { t as analyzeApplication } from "./application-routing-4719u_kf.mjs";
-import { n as generateQueueTypes, r as generateAuthTypes, t as generateRouteTypes } from "./route-types-DvEGmPif.mjs";
-import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-BQfyvQKX.mjs";
+import { a as join } from "./dist-DMYe8CZJ.mjs";
+import { t as discoverSchema } from "./discover-Dhkzxgdt.mjs";
+import { a as projectAuthConfigImporter, i as loadVoidAuthConfig } from "./config-WlvEcL82.mjs";
+import { c as getDatabaseCasing, p as readConfig } from "./config-BITKQ3O6.mjs";
+import { s as loadLocalEnv } from "./env-CuzZZyjB.mjs";
+import { i as writeFileIfChanged, n as ensureProjectTsconfig } from "./project-tsconfig-Cf2NFjlM.mjs";
+import { n as generateDbDts } from "./db-types-C_8amnB0.mjs";
+import { n as findEnvFileForPaths, r as generateEnvTypes } from "./env-types-DqzVBKnS.mjs";
+import { t as analyzeApplication } from "./application-routing-P4TggvWp.mjs";
+import { n as generateQueueTypes, r as generateAuthTypes, t as generateRouteTypes } from "./route-types-CZc1YXjF.mjs";
+import { n as generateVoidAuthDrizzleSchema, t as generateVoidAuthDatabaseModule } from "./drizzle-lFdzSEa9.mjs";
 import { existsSync, rmSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-//#region src/codegen/prepare.ts
+// src/codegen/prepare.ts
 function writeGeneratedFile(outDir, fileName, content, written) {
 	if (writeFileIfChanged(join(outDir, fileName), content)) written.push(join(".void", fileName));
 }
@@ -38,7 +38,7 @@ async function prepareProject(root) {
 	} else removeGeneratedFile(outDir, "auth.d.ts", removed);
 	const hasRouteTypes = scan.routes.length > 0 || (scan.websockets?.length ?? 0) > 0 || scan.pages.pages.length > 0;
 	if (hasRouteTypes) {
-		const { dts } = generateRouteTypes(scan, paths.routesDir, outDir, paths.pagesDir);
+		const { dts } = generateRouteTypes(scan, paths.routesDir, outDir, paths.pagesDir, { typedRoutes: config.routing?.typedRoutes });
 		writeGeneratedFile(outDir, "routes.d.ts", dts, written);
 	} else removeGeneratedFile(outDir, "routes.d.ts", removed);
 	if (existsSync(paths.queuesDir)) writeGeneratedFile(outDir, "queues.d.ts", generateQueueTypes(scan.queues, paths.queuesDir, outDir), written);
@@ -77,5 +77,4 @@ async function prepareProject(root) {
 		removed
 	};
 }
-//#endregion
 export { prepareProject as t };

package/dist/{prepare-BuOS18AM.mjs → prepare-BMGeKL16.mjs}

@@ -1,7 +1,7 @@
-import { L as log } from "./dist-Cor9XGoz.mjs";
-import { m as printSuccess, p as note } from "./output-BpgYODYx.mjs";
-import { t as prepareProject } from "./prepare-D604Yiyr.mjs";
-//#region src/cli/prepare.ts
+import { L as log } from "./dist-D23AAMxT.mjs";
+import { m as printSuccess, p as note } from "./output-BCdLioKP.mjs";
+import { t as prepareProject } from "./prepare-BJW-f1f1.mjs";
+// src/cli/prepare.ts
 async function runPrepareCommand(root) {
 	console.log();
 	const result = await prepareProject(root);
@@ -10,5 +10,4 @@ async function runPrepareCommand(root) {
 	if (result.written.length === 0 && result.removed.length === 0) log.info("No generated files changed.");
 	printSuccess("Project codegen is ready.");
 }
-//#endregion
 export { runPrepareCommand };

package/dist/prepare-BdxJJCMv.mjs

@@ -0,0 +1 @@
+export { t as prepareProject } from "./prepare-BJW-f1f1.mjs";

package/dist/{prerender-render-CaShbHJ3.mjs → prerender-render-RlAj6hh8.mjs}

@@ -1,7 +1,7 @@
-import { a as join, i as isAbsolute, n as dirname, s as relative } from "./dist-ipQi0Q8y.mjs";
+import { a as join, i as isAbsolute, n as dirname, s as relative } from "./dist-DMYe8CZJ.mjs";
 import { mkdirSync, writeFileSync } from "node:fs";
 import { extractPageDataFromHtml } from "@void/isr/core";
-//#region src/prerender-render.ts
+// src/prerender-render.ts
 const PAGE_DATA_SCRIPT_ID = "__VOID_PAGE_DATA__";
 function assertNoPrerenderFailures(failed) {
 	if (failed.length === 0) return;
@@ -144,5 +144,4 @@ async function renderPrerenderPaths(paths, clientDir, fetchPath, fetchPageData,
 		failed: results.flatMap((result) => result.failed)
 	};
 }
-//#endregion
 export { renderPrerenderPaths as i, outputFileForPath as n, readPrerenderPathsResponse as r, assertNoPrerenderFailures as t };

package/dist/prerender-render.d.mts

@@ -1,4 +1,3 @@
-//#region src/prerender-render.d.ts
 export type PrerenderResult = {
   rendered: Array<string>;
   failed: Array<{
@@ -10,5 +9,4 @@ export declare function assertNoPrerenderFailures(failed: PrerenderResult["faile
 export declare function outputFileForPath(path: string): string;
 export declare function readPrerenderPathsResponse(response: Response): Promise<Array<string>>;
 /** Shared renderer for local Workers and the isolated Node prerender child. */
-export declare function renderPrerenderPaths(paths: Array<string>, clientDir: string, fetchPath: (path: string) => Promise<Response>, fetchPageData?: (path: string) => Promise<Response>, onResult?: (path: string, outputFile: string, error?: string) => void): Promise<PrerenderResult>;
-//#endregion
+export declare function renderPrerenderPaths(paths: Array<string>, clientDir: string, fetchPath: (path: string) => Promise<Response>, fetchPageData?: (path: string) => Promise<Response>, onResult?: (path: string, outputFile: string, error?: string) => void): Promise<PrerenderResult>;

package/dist/prerender-render.mjs

@@ -1 +1 @@
-export { t as assertNoPrerenderFailures, n as outputFileForPath, r as readPrerenderPathsResponse, i as renderPrerenderPaths } from "./prerender-render-CaShbHJ3.mjs";
+export { t as assertNoPrerenderFailures, n as outputFileForPath, r as readPrerenderPathsResponse, i as renderPrerenderPaths } from "./prerender-render-RlAj6hh8.mjs";

package/dist/{project-rqDnVsJN.mjs → project-CLwxcEdq.mjs}

@@ -1,8 +1,8 @@
-import { a as join, n as dirname } from "./dist-ipQi0Q8y.mjs";
-import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
+import { a as join, n as dirname } from "./dist-DMYe8CZJ.mjs";
+import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-DZ_2Xuqd.mjs";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { normalizeApplicationDomain } from "@void/platform";
-//#region src/cli/project.ts
+// src/cli/project.ts
 const PROJECT_FILE = ".void/project.json";
 function readProjectConfigFile(root) {
 	const filePath = join(root, PROJECT_FILE);
@@ -142,5 +142,4 @@ function removeProjectConfig(root) {
 		return false;
 	}
 }
-//#endregion
 export { readProjectPlatformUrl as a, writeDeploymentPlatform as c, readProjectIdField as i, writePlatformSelection as l, readDeploymentPlatform as n, removeProjectConfig as o, readProjectConfig as r, shouldLinkDeployProject as s, attachSelectedPlatform as t, writeProjectConfig as u };

package/dist/{project-zdB3fs9G.mjs → project-DVsTAWFh.mjs}

@@ -1 +1 @@
-export { t as attachSelectedPlatform, u as writeProjectConfig } from "./project-rqDnVsJN.mjs";
+export { t as attachSelectedPlatform, u as writeProjectConfig } from "./project-CLwxcEdq.mjs";