@void/platform 0.20.2 → 0.21.0

package/dist/index.d.mts

@@ -297,7 +297,7 @@ type PlatformInstallationManifest = Readonly<{
   resources: ReadonlyArray<InstallationResource>;
   runtime: PlatformRuntimeProvenance | null;
   safetyProtocols: Readonly<{
-    sandboxDrain: 0 | 1 | 2;
+    sandboxDrain: 0 | 1 | 2 | 3;
   }>;
   schemaVersion: typeof PLATFORM_INSTALLATION_SCHEMA_VERSION;
   status: InstallationStatus;
@@ -337,7 +337,7 @@ export declare function createPlatformInstallationManifest(input: {
   ownershipNonce: string;
   platformVersion: string;
   safetyProtocols?: Readonly<{
-    sandboxDrain: 0 | 1 | 2;
+    sandboxDrain: 0 | 1 | 2 | 3;
   }>;
   usageProtocolVersion?: 0 | 1 | 2;
 }): PlatformInstallationManifest;
@@ -397,6 +397,7 @@ export declare function createPlatformWorkerConfigs(input: {
   emailGatewayUrl: string;
   resources: PlatformProvisionedResourceIds;
   runtimeEntrypoints: Readonly<Record<"api" | "dispatch" | "proxy" | "tail" | "emailGateway", string>>;
+  runtimeApiAssetsDirectory?: string;
   trafficState?: "enabled" | "sandbox-drain" | "staging";
 }): PlatformWorkerConfigSet;
 //#endregion

package/dist/index.mjs

@@ -758,7 +758,7 @@ function parseUsageProtocolVersion$1(value) {
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
 	assertRecord(value, "safetyProtocols");
-	if (value.sandboxDrain !== 0 && value.sandboxDrain !== 1 && value.sandboxDrain !== 2) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, or 2.");
+	if (value.sandboxDrain !== 0 && value.sandboxDrain !== 1 && value.sandboxDrain !== 2 && value.sandboxDrain !== 3) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, 2, or 3.");
 	return { sandboxDrain: value.sandboxDrain };
 }
 function parsePlatformRuntimeProvenance(value) {
@@ -1007,6 +1007,7 @@ function createPlatformWorkerConfigs(input) {
 		name: names.apiWorker,
 		main: runtimeEntrypoints.api,
 		no_bundle: true,
+		...input.runtimeApiAssetsDirectory ? { assets: { directory: input.runtimeApiAssetsDirectory } } : {},
 		compatibility_flags: ["nodejs_compat", ...fetchWorkersDev ? ["global_fetch_strictly_public"] : []],
 		placement: { mode: "smart" },
 		hyperdrive: [{
@@ -1098,7 +1099,8 @@ function createPlatformWorkerConfigs(input) {
 			SITE_DOMAIN: deployment.application.baseDomain,
 			...deployment.application.workersDev ? { PLATFORM_APPLICATION: JSON.stringify(deployment.application) } : {},
 			TAIL_SERVICE_NAME: names.tailWorker,
-			VOID_PROXY_SERVICE: names.proxyWorker
+			VOID_PROXY_SERVICE: names.proxyWorker,
+			SANDBOX_CONTROL_SERVICE: names.apiWorker
 		}
 	};
 	if (publicEndpoints && deployment.controlPlane.apiHostname) api.routes = [{

package/dist/installer.d.mts

@@ -4,6 +4,9 @@ export type PlatformRuntimeArtifact = Readonly<{
   sha256: string;
   size: number;
 }>;
+export declare const PLATFORM_ADMIN_ASSETS_DIRECTORY = "api/assets";
+export declare const PLATFORM_ADMIN_CLIENT_ASSET_PATH: string;
+export declare const PLATFORM_ADMIN_STYLE_ASSET_PATH: string;
 export type PlatformRuntimeMigration = Readonly<{
   index: number;
   sha256: string;
@@ -26,11 +29,15 @@ export type PlatformRuntimeManifest = Readonly<{
   authenticationProtocolVersion?: 1;
   applicationRoutingVersion?: 1;
   artifacts: Readonly<Record<"api" | "dispatch" | "proxy" | "tail", PlatformRuntimeArtifact> & Partial<Record<"emailGateway", PlatformRuntimeArtifact>>>;
+  assets?: Readonly<{
+    adminClient: PlatformRuntimeArtifact;
+    adminStyle?: PlatformRuntimeArtifact;
+  }>;
   emailProtocolVersion?: 1;
   database: PlatformRuntimeDatabaseManifest;
   platformVersion: string;
   safetyProtocols: Readonly<{
-    sandboxDrain: 0 | 1 | 2;
+    sandboxDrain: 0 | 1 | 2 | 3;
   }>;
   schemaVersion: 2;
   sourceRevision: string | null;

package/dist/installer.mjs

@@ -3,6 +3,9 @@ import { readFileSync, realpathSync, statSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, isAbsolute, join, resolve } from "pathslash";
 //#region src/installer.ts
+const PLATFORM_ADMIN_ASSETS_DIRECTORY = "api/assets";
+const PLATFORM_ADMIN_CLIENT_ASSET_PATH = `${PLATFORM_ADMIN_ASSETS_DIRECTORY}/admin/client.js`;
+const PLATFORM_ADMIN_STYLE_ASSET_PATH = `${PLATFORM_ADMIN_ASSETS_DIRECTORY}/admin/style.css`;
 const SHA256_PATTERN = /^[0-9a-f]{64}$/;
 const TAG_PATTERN = /^[0-9]{4}_[a-z0-9_]+$/;
 function platformDatabaseSchemaDigest(lineage, migrations) {
@@ -32,6 +35,18 @@ function parsePlatformRuntimeManifest(value) {
 		...artifactsValue.emailGateway === void 0 ? [] : ["emailGateway"]
 	];
 	const artifacts = Object.fromEntries(artifactNames.map((name) => [name, parseArtifact(artifactsValue[name], name)]));
+	let assets;
+	if (root.assets !== void 0) {
+		const assetsValue = record(root.assets, "runtime manifest assets");
+		const adminClient = parseArtifact(assetsValue.adminClient, "admin client asset");
+		if (adminClient.path !== PLATFORM_ADMIN_CLIENT_ASSET_PATH) throw new Error(`runtime manifest admin client asset path must be ${PLATFORM_ADMIN_CLIENT_ASSET_PATH}`);
+		const adminStyle = assetsValue.adminStyle === void 0 ? void 0 : parseArtifact(assetsValue.adminStyle, "admin style asset");
+		if (adminStyle && adminStyle.path !== PLATFORM_ADMIN_STYLE_ASSET_PATH) throw new Error(`runtime manifest admin style asset path must be ${PLATFORM_ADMIN_STYLE_ASSET_PATH}`);
+		assets = {
+			adminClient,
+			...adminStyle ? { adminStyle } : {}
+		};
+	}
 	const databaseValue = record(root.database, "runtime manifest database");
 	if (databaseValue.protocolVersion !== 1) throw new Error("runtime manifest database protocolVersion must be 1");
 	const lineage = nonemptyString(databaseValue.lineage, "database lineage");
@@ -65,6 +80,7 @@ function parsePlatformRuntimeManifest(value) {
 	if (rollbackSafeFrom.some((entry) => !prefixDigests.has(entry.schemaDigest))) throw new Error("runtime manifest database rollback compatibility must reference this migration lineage");
 	return {
 		artifacts,
+		...assets ? { assets } : {},
 		...root.authenticationProtocolVersion === 1 ? { authenticationProtocolVersion: 1 } : {},
 		...root.emailProtocolVersion === 1 ? { emailProtocolVersion: 1 } : {},
 		...root.applicationRoutingVersion === 1 ? { applicationRoutingVersion: 1 } : {},
@@ -86,7 +102,7 @@ function parsePlatformRuntimeManifest(value) {
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
 	const protocols = record(value, "runtime manifest safetyProtocols");
-	if (protocols.sandboxDrain !== 0 && protocols.sandboxDrain !== 1 && protocols.sandboxDrain !== 2) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, or 2");
+	if (protocols.sandboxDrain !== 0 && protocols.sandboxDrain !== 1 && protocols.sandboxDrain !== 2 && protocols.sandboxDrain !== 3) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, 2, or 3");
 	return { sandboxDrain: protocols.sandboxDrain };
 }
 function usageProtocolVersion(value) {
@@ -182,4 +198,4 @@ function sha256(value, name) {
 	return value;
 }
 //#endregion
-export { getPlatformRuntimeDirectory, parsePlatformRuntimeManifest, platformDatabaseSchemaDigest, readPlatformRuntimeManifest, resolvePlatformRuntime };
+export { PLATFORM_ADMIN_ASSETS_DIRECTORY, PLATFORM_ADMIN_CLIENT_ASSET_PATH, PLATFORM_ADMIN_STYLE_ASSET_PATH, getPlatformRuntimeDirectory, parsePlatformRuntimeManifest, platformDatabaseSchemaDigest, readPlatformRuntimeManifest, resolvePlatformRuntime };

package/dist/runtime/api/README.md

@@ -1 +1 @@
-This folder contains the built output assets for the worker "void-runtime-build-api" generated at 2026-09-22T17:31:12.516Z.
+This folder contains the built output assets for the worker "void-runtime-build-api" generated at 2026-09-29T09:50:57.828Z.