@void/platform 0.20.1 → 0.20.2

package/dist/runtime/dispatch/README.md

@@ -1 +1 @@
-This folder contains the built output assets for the worker "void-runtime-build-dispatch" generated at 2026-09-18T06:30:38.952Z.
+This folder contains the built output assets for the worker "void-runtime-build-dispatch" generated at 2026-09-22T17:31:16.764Z.

package/dist/runtime/dispatch/index.js

@@ -2,6 +2,12 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // ../../home/runner/work/void/void/packages/platform/dist/index.mjs
+var PLATFORM_LOGIN_KINDS = [
+  "github",
+  "google",
+  "oidc",
+  "cloudflare-access"
+];
 var CORE_CAPABILITIES = {
   ai: true,
   customDomains: false,
@@ -47,6 +53,7 @@ function createPlatformResourceNames(installationSlug) {
     dashboardWorker: `${prefix}-dashboard`,
     dispatchNamespace: `${prefix}-users`,
     dispatchWorker: `${prefix}-dispatch`,
+    emailGatewayWorker: `${prefix}-email-gateway`,
     hyperdrive: `${prefix}-database`,
     isrCacheKv: `${prefix}-isr-cache`,
     legacyAssetsKv: `${prefix}-legacy-assets`,
@@ -88,6 +95,7 @@ function createApplicationRoutes(application) {
 }
 __name(createApplicationRoutes, "createApplicationRoutes");
 function createPlatformDeploymentManifest(input) {
+  if (input.emailSharedZoneId === void 0 !== (input.emailSenderDomain === void 0)) throw new Error("Shared email configuration requires both emailSenderDomain and emailSharedZoneId.");
   const installationSlug = normalizeInstallationSlug(input.installationSlug);
   const baseDomain = normalizeApplicationDomain(input.application.baseDomain);
   const workersDev = input.application.workersDev;
@@ -104,6 +112,8 @@ function createPlatformDeploymentManifest(input) {
   };
   if (capabilities.managedBuilds && !capabilities.githubActions) throw new Error("Managed builds require the GitHub Actions capability.");
   const providers = input.authentication?.providers ?? ["github"];
+  if (providers.some((provider) => !PLATFORM_LOGIN_KINDS.includes(provider)) || new Set(providers).size !== providers.length) throw new Error("Authentication providers must be unique supported login kinds.");
+  const configurable = input.authentication?.configurable === true || input.authentication?.accessProtection === true || providers.some((provider) => provider === "oidc" || provider === "cloudflare-access");
   if (providers.length === 0) throw new Error("At least one authentication provider is required.");
   if (providers.includes("github") !== capabilities.githubOAuth) throw new Error("The GitHub provider and githubOAuth capability must agree.");
   if (providers.includes("google") !== capabilities.googleOAuth) throw new Error("The Google provider and googleOAuth capability must agree.");
@@ -115,8 +125,14 @@ function createPlatformDeploymentManifest(input) {
       ...workersDev ? { workersDev: { ...workersDev } } : {},
       ...input.application.zoneId ? { zoneId: requiredString$1(input.application.zoneId, "application.zoneId") } : {}
     },
-    authentication: { providers: [...providers] },
+    authentication: {
+      providers: [...providers],
+      ...configurable ? { configurable: true } : {},
+      ...input.authentication?.accessProtection ? { accessProtection: true } : {}
+    },
     capabilities,
+    ...input.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString$1(input.emailSharedZoneId, "emailSharedZoneId") } : {},
+    ...input.emailSenderDomain !== void 0 ? { emailSenderDomain: normalizeApplicationDomain(input.emailSenderDomain) } : {},
     controlPlane: {
       ...CONTROL_PLANE_DEFAULTS,
       ...input.controlPlane
@@ -124,7 +140,7 @@ function createPlatformDeploymentManifest(input) {
     displayName: requiredString$1(input.displayName, "displayName").trim(),
     installationSlug,
     resources,
-    schemaVersion: workersDev ? 2 : 1
+    schemaVersion: configurable ? 3 : workersDev ? 2 : 1
   };
   createApplicationRoutes(manifest.application);
   for (const [key, value] of Object.entries(manifest.controlPlane)) {
@@ -135,7 +151,7 @@ function createPlatformDeploymentManifest(input) {
   return manifest;
 }
 __name(createPlatformDeploymentManifest, "createPlatformDeploymentManifest");
-var PLATFORM_USAGE_PROTOCOL_VERSION = 1;
+var PLATFORM_USAGE_PROTOCOL_VERSION = 2;
 function readPlatformApplication(env) {
   const baseDomain = env.SITE_DOMAIN ?? env.BASE_HOSTNAME ?? "void.app";
   if (!env.PLATFORM_APPLICATION) return {
@@ -1219,8 +1235,8 @@ async function readUsageSigningKey(routing) {
   return routing.get(USAGE_SIGNING_KEY_KV_KEY, { cacheTtl: 60 });
 }
 __name(readUsageSigningKey, "readUsageSigningKey");
-function signedPayload(source, eventId, event) {
-  return JSON.stringify([USAGE_PROTOCOL_VERSION, source, eventId, event]);
+function signedPayload(version, source, eventId, event) {
+  return JSON.stringify([version, source, eventId, event]);
 }
 __name(signedPayload, "signedPayload");
 async function signUsageEvent(key, source, eventId, event) {
@@ -1229,7 +1245,9 @@ async function signUsageEvent(key, source, eventId, event) {
     source,
     eventId,
     event,
-    signature: base64url(await hmac(signedPayload(source, eventId, event), key))
+    signature: base64url(
+      await hmac(signedPayload(USAGE_PROTOCOL_VERSION, source, eventId, event), key)
+    )
   };
 }
 __name(signUsageEvent, "signUsageEvent");
@@ -1295,7 +1313,7 @@ function recordPlatformLog(env, data) {
     pathname = new URL(data.url).pathname;
   } catch {
   }
-  const message = `Void platform: your worker did not respond within ${data.timeoutMs} ms. ${data.method} ${truncateUtf8(pathname, MAX_LOG_PATH_BYTES)} was cut short and returned ${data.status}. Your code keeps running to completion; the platform does not cancel it.`;
+  const message = `Void platform: your worker did not respond within ${data.timeoutMs} ms. ${data.method} ${truncateUtf8(pathname, MAX_LOG_PATH_BYTES)} was cut short and returned ${data.status}. The operation may still have side effects; check its outcome before retrying.`;
   try {
     env.LOGS.writeDataPoint({
       // `projectKey` is NOT truncated. It is the read key, so a shortened one
@@ -2020,6 +2038,7 @@ var index_default = {
       }
       const res = new Response(response.body, response);
       res.headers.delete("X-Void-No-Match");
+      res.headers.delete(SHARED_CACHE_POLICY_HEADER);
       res.headers.set("X-Hosted-By", "void.cloud");
       return res;
     }, "meter");
@@ -2085,7 +2104,6 @@ var index_default = {
               }
             }
           }
-          ruled.headers.delete(SHARED_CACHE_POLICY_HEADER);
           return meter(ruled, failureKind ? { failureKind } : void 0);
         }, "finalizeAsset");
         const cache = applicationEdgeCache;