@void/platform 0.26.1 → 0.28.0

package/README.md

@@ -16,7 +16,7 @@ npx void platform install
 Once the platform is installed, developers connect and deploy:
 
 ```sh
-npx void connect https://api.example.com
+npx void connect api.example.com
 npx void deploy
 ```
 

package/dist/index.mjs

@@ -1,3 +1,4 @@
+import { a as isSourceRevision, c as requiredString, i as isSandboxDrainProtocol, n as isPrintableText, o as isUsageProtocolVersion, s as record, t as assertRecord } from "./validate-DbJR7Q0Z.mjs";
 import { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, createDefaultPlanCatalog, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanCatalog, parsePlatformPlanId, validatePlanLimits } from "./plans.mjs";
 //#region src/app-access.ts
 const PLATFORM_APP_ACCESS_SETUP_PROOF_PREFIX = "void-platform-app-access-v1";
@@ -125,12 +126,8 @@ function parsePlatformAuthenticationSetup(value) {
 const DEFAULT_PLATFORM_SESSION_SECONDS = 2592e3;
 const GOOGLE_OIDC_ISSUER = "https://accounts.google.com";
 const PLATFORM_AUTH_SETUP_PROOF_PREFIX = "void.platform.auth.setup.v1";
-function record(value, name) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${name} must be an object.`);
-	return value;
-}
 function string(value, name, maximum = 512) {
-	if (typeof value !== "string" || !value.trim() || value.length > maximum || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw new Error(`${name} must be a nonempty string of at most ${maximum} characters.`);
+	if (!isPrintableText(value, maximum)) throw new Error(`${name} must be a nonempty string of at most ${maximum} characters.`);
 	return value.trim();
 }
 function strings(value, name, maximum = 100) {
@@ -262,13 +259,6 @@ const CONTROL_PLANE_DEFAULTS = {
 	dashboardHostname: null,
 	proxyHostname: null
 };
-function assertRecord$1(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
-}
-function requiredString$1(value, label) {
-	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string.`);
-	return value;
-}
 function normalizeInstallationSlug(value) {
 	const slug = value.trim().toLowerCase().replaceAll(/[^a-z0-9-]+/g, "-").replaceAll(/^-+|-+$/g, "").replaceAll(/-{2,}/g, "-");
 	if (!slug) throw new Error("The installation name must contain a letter or number.");
@@ -384,7 +374,7 @@ function createPlatformDeploymentManifest(input) {
 			dedicatedZone: input.application.dedicatedZone ?? false,
 			zoneName,
 			...workersDev ? { workersDev: { ...workersDev } } : {},
-			...input.application.zoneId ? { zoneId: requiredString$1(input.application.zoneId, "application.zoneId") } : {}
+			...input.application.zoneId ? { zoneId: requiredString(input.application.zoneId, "application.zoneId") } : {}
 		},
 		authentication: {
 			providers: [...providers],
@@ -392,7 +382,7 @@ function createPlatformDeploymentManifest(input) {
 			...input.authentication?.accessProtection ? { accessProtection: true } : {}
 		},
 		capabilities,
-		...input.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString$1(input.emailSharedZoneId, "emailSharedZoneId") } : {},
+		...input.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString(input.emailSharedZoneId, "emailSharedZoneId") } : {},
 		...input.emailSenderDomain !== void 0 ? { emailSenderDomain: normalizeApplicationDomain(input.emailSenderDomain) } : {},
 		controlPlane: {
 			...CONTROL_PLANE_DEFAULTS,
@@ -402,7 +392,7 @@ function createPlatformDeploymentManifest(input) {
 				dashboardHostname: input.controlPlane?.dashboardHostname ?? new URL(dashboardUrl).hostname
 			} : {}
 		},
-		displayName: requiredString$1(input.displayName, "displayName").trim(),
+		displayName: requiredString(input.displayName, "displayName").trim(),
 		installationSlug,
 		resources,
 		schemaVersion: input.appAccess !== void 0 ? 4 : configurable ? 3 : workersDev ? 2 : 1
@@ -416,30 +406,30 @@ function createPlatformDeploymentManifest(input) {
 		const hostname = new URL(manifest.controlPlane.dashboardUrl).hostname;
 		if (manifest.controlPlane.dashboardHostname !== hostname) throw new Error("The dashboard URL and dashboard hostname must agree.");
 	}
-	for (const [key, value] of Object.entries(manifest.resources)) requiredString$1(value, `resources.${key}`);
+	for (const [key, value] of Object.entries(manifest.resources)) requiredString(value, `resources.${key}`);
 	return manifest;
 }
 function parsePlatformDeploymentManifest(value) {
-	assertRecord$1(value, "Platform deployment manifest");
+	assertRecord(value, "Platform deployment manifest");
 	if (value.schemaVersion !== 1 && value.schemaVersion !== 2 && value.schemaVersion !== 3 && value.schemaVersion !== 4) throw new Error(`Unsupported platform deployment schema version: ${String(value.schemaVersion)}.`);
 	const application = value.application;
 	const authentication = value.authentication;
 	const rawCapabilities = value.capabilities;
 	const controlPlane = value.controlPlane;
 	const rawResources = value.resources;
-	assertRecord$1(application, "application");
+	assertRecord(application, "application");
 	let workersDev;
 	if (value.schemaVersion === 2 || (value.schemaVersion === 3 || value.schemaVersion === 4) && application.workersDev !== void 0) {
-		assertRecord$1(application.workersDev, "application.workersDev");
+		assertRecord(application.workersDev, "application.workersDev");
 		workersDev = {
-			subdomain: requiredString$1(application.workersDev.subdomain, "workersDev.subdomain"),
-			installationId: requiredString$1(application.workersDev.installationId, "workersDev.installationId")
+			subdomain: requiredString(application.workersDev.subdomain, "workersDev.subdomain"),
+			installationId: requiredString(application.workersDev.installationId, "workersDev.installationId")
 		};
 	} else if (application.workersDev !== void 0) throw new Error("workers.dev requires platform deployment schema version 2.");
-	assertRecord$1(rawCapabilities, "capabilities");
-	assertRecord$1(controlPlane, "controlPlane");
-	assertRecord$1(authentication, "authentication");
-	assertRecord$1(rawResources, "resources");
+	assertRecord(rawCapabilities, "capabilities");
+	assertRecord(controlPlane, "controlPlane");
+	assertRecord(authentication, "authentication");
+	assertRecord(rawResources, "resources");
 	const capabilityKeys = Object.keys(CORE_CAPABILITIES);
 	const capabilities = {};
 	for (const key of capabilityKeys) {
@@ -456,19 +446,19 @@ function parsePlatformDeploymentManifest(value) {
 		"custom"
 	].includes(String(value.appAccess)) : value.appAccess !== void 0) throw new Error("Guided app access requires deployment schema version 4 and a valid appAccess choice.");
 	if (authentication.configurable !== void 0 && authentication.configurable !== true) throw new Error("Invalid configurable authentication flag.");
-	const resourceDefaults = createPlatformResourceNames(requiredString$1(value.installationSlug, "installationSlug"));
+	const resourceDefaults = createPlatformResourceNames(requiredString(value.installationSlug, "installationSlug"));
 	const resources = {};
-	for (const key of Object.keys(resourceDefaults)) resources[key] = requiredString$1(rawResources[key] ?? (key === "emailGatewayWorker" || key === "deploymentQueue" ? resourceDefaults[key] : void 0), `resources.${key}`);
+	for (const key of Object.keys(resourceDefaults)) resources[key] = requiredString(rawResources[key] ?? (key === "emailGatewayWorker" || key === "deploymentQueue" ? resourceDefaults[key] : void 0), `resources.${key}`);
 	const readHostname = (key) => {
 		const hostname = controlPlane[key];
-		return hostname === null ? null : requiredString$1(hostname, `controlPlane.${key}`);
+		return hostname === null ? null : requiredString(hostname, `controlPlane.${key}`);
 	};
 	return createPlatformDeploymentManifest({
 		...value.schemaVersion === 4 ? { appAccess: value.appAccess } : {},
 		application: {
-			baseDomain: requiredString$1(application.baseDomain, "application.baseDomain"),
+			baseDomain: requiredString(application.baseDomain, "application.baseDomain"),
 			dedicatedZone: application.dedicatedZone === true,
-			zoneName: workersDev && application.zoneName === "" ? "" : requiredString$1(application.zoneName, "application.zoneName"),
+			zoneName: workersDev && application.zoneName === "" ? "" : requiredString(application.zoneName, "application.zoneName"),
 			...workersDev ? { workersDev } : {},
 			...typeof application.zoneId === "string" ? { zoneId: application.zoneId } : {}
 		},
@@ -478,16 +468,16 @@ function parsePlatformDeploymentManifest(value) {
 			...authentication.accessProtection === true ? { accessProtection: true } : {}
 		},
 		capabilities,
-		...value.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString$1(value.emailSharedZoneId, "emailSharedZoneId") } : {},
-		...value.emailSenderDomain !== void 0 ? { emailSenderDomain: requiredString$1(value.emailSenderDomain, "emailSenderDomain") } : {},
+		...value.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString(value.emailSharedZoneId, "emailSharedZoneId") } : {},
+		...value.emailSenderDomain !== void 0 ? { emailSenderDomain: requiredString(value.emailSenderDomain, "emailSenderDomain") } : {},
 		controlPlane: {
 			apiHostname: readHostname("apiHostname"),
 			dashboardHostname: readHostname("dashboardHostname"),
-			...controlPlane.dashboardUrl !== void 0 ? { dashboardUrl: requiredString$1(controlPlane.dashboardUrl, "controlPlane.dashboardUrl") } : {},
+			...controlPlane.dashboardUrl !== void 0 ? { dashboardUrl: requiredString(controlPlane.dashboardUrl, "controlPlane.dashboardUrl") } : {},
 			proxyHostname: readHostname("proxyHostname")
 		},
-		displayName: requiredString$1(value.displayName, "displayName"),
-		installationSlug: requiredString$1(value.installationSlug, "installationSlug"),
+		displayName: requiredString(value.displayName, "displayName"),
+		installationSlug: requiredString(value.installationSlug, "installationSlug"),
 		resources
 	});
 }
@@ -609,13 +599,6 @@ const STATUS_TRANSITIONS = {
 		"uninstalling"
 	]
 };
-function assertRecord(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
-}
-function requiredString(value, label) {
-	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string.`);
-	return value;
-}
 function isInstallationStatus(value) {
 	return typeof value === "string" && Object.hasOwn(STATUS_TRANSITIONS, value);
 }
@@ -847,15 +830,14 @@ function parseAuthenticationResources(value) {
 	return resources;
 }
 function parseUsageProtocolVersion(value) {
-	if (value === void 0 || value === 0) return 0;
-	if (value === 1) return 1;
-	if (value === 2) return 2;
-	throw new Error("usageProtocolVersion must be 0, 1, or 2.");
+	if (value === void 0) return 0;
+	if (!isUsageProtocolVersion(value)) throw new Error("usageProtocolVersion must be 0, 1, or 2.");
+	return value;
 }
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
 	assertRecord(value, "safetyProtocols");
-	if (value.sandboxDrain !== 0 && value.sandboxDrain !== 1 && value.sandboxDrain !== 2 && value.sandboxDrain !== 3) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, 2, or 3.");
+	if (!isSandboxDrainProtocol(value.sandboxDrain)) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, 2, or 3.");
 	return { sandboxDrain: value.sandboxDrain };
 }
 function parsePlatformRuntimeProvenance(value) {
@@ -865,7 +847,7 @@ function parsePlatformRuntimeProvenance(value) {
 	const manifestSha256 = requiredString(value.manifestSha256, "runtime.manifestSha256");
 	if (!/^[0-9a-f]{64}$/.test(manifestSha256)) throw new Error("runtime.manifestSha256 must be a SHA-256 digest.");
 	const sourceRevision = value.sourceRevision === null || value.sourceRevision === void 0 ? null : requiredString(value.sourceRevision, "runtime.sourceRevision");
-	if (sourceRevision !== null && (sourceRevision.length > 200 || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(sourceRevision))) throw new Error("runtime.sourceRevision is invalid.");
+	if (sourceRevision !== null && !isSourceRevision(sourceRevision)) throw new Error("runtime.sourceRevision is invalid.");
 	return {
 		manifestSha256,
 		source: value.source,
@@ -890,10 +872,14 @@ function readPlatformApplication(env) {
 		zoneName: baseDomain,
 		dedicatedZone: false
 	};
+	return parsePlatformApplication(JSON.parse(env.PLATFORM_APPLICATION));
+}
+/** Applies the deployment manifest's application rules to a parsed value. */
+function parsePlatformApplication(value) {
 	return createPlatformDeploymentManifest({
 		installationSlug: "runtime",
 		displayName: "Runtime",
-		application: JSON.parse(env.PLATFORM_APPLICATION)
+		application: value
 	}).application;
 }
 function platformWorkersDevAliasKey(hostname) {
@@ -956,7 +942,11 @@ function normalizeOrigin(value, name) {
 	} catch {
 		throw new Error(`${name} must be an absolute URL.`);
 	}
-	if (!(url.protocol === "http:" && (url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1")) && url.protocol !== "https:" || url.username || url.password) throw new Error(`${name} must be a credential-free HTTPS URL.`);
+	if (!(url.protocol === "http:" && [
+		"localhost",
+		"127.0.0.1",
+		"[::1]"
+	].includes(url.hostname)) && url.protocol !== "https:" || url.username || url.password) throw new Error(`${name} must be a credential-free HTTPS URL.`);
 	if (url.pathname !== "" && url.pathname !== "/" || url.search || url.hash) throw new Error(`${name} must be an origin without a path, query, or fragment.`);
 	return url.origin;
 }
@@ -964,7 +954,7 @@ function createPlatformDiscoveryDocument(input) {
 	if (!input.displayName.trim()) throw new Error("displayName must not be empty.");
 	if (!input.platformVersion.trim()) throw new Error("platformVersion must not be empty.");
 	if (input.applicationRouting) {
-		const application = readPlatformApplication({ PLATFORM_APPLICATION: JSON.stringify(input.applicationRouting) });
+		const application = parsePlatformApplication(input.applicationRouting);
 		if (!application.workersDev || application.baseDomain !== input.applicationDomain || application.workersDev.installationId !== input.installationId) throw new Error("Application routing must match the discovery domain and installation identity.");
 	}
 	const usageProtocolVersion = parseUsageProtocolVersion(input.usageProtocolVersion);
@@ -990,13 +980,12 @@ function createPlatformDiscoveryDocument(input) {
 	};
 }
 function parsePlatformDiscoveryDocument(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Platform discovery document must be an object.");
-	const document = value;
+	const document = record(value, "Platform discovery document");
 	if (document.schemaVersion !== 1 && document.schemaVersion !== 2 && document.schemaVersion !== 3) throw new Error(`Unsupported platform discovery schema version: ${String(document.schemaVersion)}.`);
 	const capabilities = document.capabilities;
 	if (document.schemaVersion === 1 && document.applicationRouting !== void 0) throw new Error("Application routing requires discovery schema version 2.");
 	if (document.schemaVersion === 2 && document.applicationRouting === void 0) throw new Error("Discovery schema version 2 requires application routing.");
-	if (!capabilities || typeof capabilities !== "object" || Array.isArray(capabilities)) throw new Error("capabilities must be an object.");
+	assertRecord(capabilities, "capabilities");
 	const capabilityNames = [
 		"ai",
 		"customDomains",
@@ -1028,7 +1017,7 @@ function parsePlatformDiscoveryDocument(value) {
 	return createPlatformDiscoveryDocument({
 		apiUrl,
 		applicationDomain: string("applicationDomain"),
-		...document.applicationRouting !== void 0 ? { applicationRouting: readPlatformApplication({ PLATFORM_APPLICATION: JSON.stringify(document.applicationRouting) }) } : {},
+		...document.applicationRouting !== void 0 ? { applicationRouting: parsePlatformApplication(document.applicationRouting) } : {},
 		authenticationProviders: providers,
 		...authentication ? { authentication } : {},
 		capabilities: parsedCapabilities,
@@ -1041,8 +1030,7 @@ function parsePlatformDiscoveryDocument(value) {
 	});
 }
 function parseAuthentication(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Authentication discovery must be an object.");
-	const authentication = value;
+	const authentication = record(value, "Authentication discovery");
 	if (!Array.isArray(authentication.methods) || authentication.methods.length > 32 || typeof authentication.protectedByAccess !== "boolean" || authentication.setupPending !== void 0 && typeof authentication.setupPending !== "boolean") throw new Error("Authentication discovery requires login methods and a protection flag.");
 	const methods = authentication.methods.map(parsePlatformLoginDescriptor);
 	if (new Set(methods.map((method) => method.id)).size !== methods.length) throw new Error("Authentication connection IDs must be unique.");
@@ -1277,7 +1265,6 @@ function createPlatformWorkerConfigs(input) {
 		proxy,
 		emailGateway: {
 			...common,
-			workers_dev: publicEndpoints,
 			preview_urls: false,
 			name: names.emailGatewayWorker,
 			main: runtimeEntrypoints.emailGateway,

package/dist/installer.mjs

@@ -1,3 +1,4 @@
+import { a as isSourceRevision, i as isSandboxDrainProtocol, o as isUsageProtocolVersion, r as isRecord } from "./validate-DbJR7Q0Z.mjs";
 import { createHash } from "node:crypto";
 import { readFileSync, realpathSync, statSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -105,26 +106,20 @@ function parsePlatformRuntimeManifest(value) {
 }
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
-	const protocols = record(value, "runtime manifest safetyProtocols");
-	if (protocols.sandboxDrain !== 0 && protocols.sandboxDrain !== 1 && protocols.sandboxDrain !== 2 && protocols.sandboxDrain !== 3) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, 2, or 3");
-	return { sandboxDrain: protocols.sandboxDrain };
+	const { sandboxDrain } = record(value, "runtime manifest safetyProtocols");
+	if (!isSandboxDrainProtocol(sandboxDrain)) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, 2, or 3");
+	return { sandboxDrain };
 }
 function usageProtocolVersion(value) {
-	if (value === void 0 || value === 0) return 0;
-	if (value === 1) return 1;
-	if (value === 2) return 2;
-	throw new Error("runtime manifest usageProtocolVersion must be 0, 1, or 2");
+	if (value === void 0) return 0;
+	if (!isUsageProtocolVersion(value)) throw new Error("runtime manifest usageProtocolVersion must be 0, 1, or 2");
+	return value;
 }
 function getPlatformRuntimeDirectory() {
 	return join(dirname(fileURLToPath(import.meta.url)), "runtime");
 }
 function readPlatformRuntimeManifest(runtimeDirectory = getPlatformRuntimeDirectory()) {
-	const path = join(runtimeDirectory, "manifest.json");
-	try {
-		return parsePlatformRuntimeManifest(JSON.parse(readFileSync(path, "utf8")));
-	} catch (error) {
-		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${path}: ${error instanceof Error ? error.message : String(error)}`);
-	}
+	return readRuntimeManifestFile(join(runtimeDirectory, "manifest.json")).manifest;
 }
 function resolvePlatformRuntime(customRuntimeDirectory, baseDirectory = process.cwd()) {
 	const source = customRuntimeDirectory ? "custom" : "package";
@@ -136,22 +131,25 @@ function resolvePlatformRuntime(customRuntimeDirectory, baseDirectory = process.
 	} catch (error) {
 		throw new Error(`Void Platform runtime directory is unavailable at ${requestedDirectory}: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const manifestPath = join(directory, "manifest.json");
-	let manifestContents;
-	let manifest;
-	try {
-		manifestContents = readFileSync(manifestPath);
-		manifest = parsePlatformRuntimeManifest(JSON.parse(manifestContents.toString("utf8")));
-	} catch (error) {
-		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${manifestPath}: ${error instanceof Error ? error.message : String(error)}`);
-	}
+	const { contents, manifest } = readRuntimeManifestFile(join(directory, "manifest.json"));
 	return {
 		directory,
 		manifest,
-		manifestSha256: createHash("sha256").update(manifestContents).digest("hex"),
+		manifestSha256: createHash("sha256").update(contents).digest("hex"),
 		source
 	};
 }
+function readRuntimeManifestFile(path) {
+	try {
+		const contents = readFileSync(path);
+		return {
+			contents,
+			manifest: parsePlatformRuntimeManifest(JSON.parse(contents.toString("utf8")))
+		};
+	} catch (error) {
+		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${path}: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
 function parseArtifact(value, name) {
 	const artifact = record(value, `runtime manifest artifact ${name}`);
 	const path = nonemptyString(artifact.path, `runtime manifest artifact ${name} path`);
@@ -179,7 +177,7 @@ function parseMigration(value, position) {
 	};
 }
 function record(value, name) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${name} must be an object`);
+	if (!isRecord(value)) throw new Error(`${name} must be an object`);
 	return value;
 }
 function array(value, name) {
@@ -192,7 +190,7 @@ function nonemptyString(value, name) {
 }
 function sourceRevision(value) {
 	const revision = nonemptyString(value, "runtime manifest sourceRevision");
-	if (revision.length > 200 || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(revision)) throw new Error("runtime manifest sourceRevision is invalid");
+	if (!isSourceRevision(revision)) throw new Error("runtime manifest sourceRevision is invalid");
 	return revision;
 }
 function safeInteger(value, name) {

package/dist/plans.mjs

@@ -1,3 +1,4 @@
+import { n as isPrintableText, s as record } from "./validate-DbJR7Q0Z.mjs";
 //#region src/plans.ts
 const GB = 1073741824;
 const PLAN_LIMITS = {
@@ -119,15 +120,11 @@ function parsePlatformPlanId(value) {
 	return value;
 }
 function parsePlanName(value) {
-	if (typeof value !== "string" || !value.trim() || value.length > 80 || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw new Error("Plan names must contain 1 to 80 printable characters.");
+	if (!isPrintableText(value, 80)) throw new Error("Plan names must contain 1 to 80 printable characters.");
 	return value.trim();
 }
-function object(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(label + " must be an object.");
-	return value;
-}
 function parsePlanLimitsPatch(value) {
-	const input = object(value, "Plan limits");
+	const input = record(value, "Plan limits");
 	for (const [key, limit] of Object.entries(input)) {
 		if (!PLAN_EDITABLE_LIMIT_KEYS.includes(key)) throw new Error("Unknown or unenforced plan limit: " + key + ".");
 		if (!Number.isSafeInteger(limit) || limit < 0) throw new Error(key + " must be a nonnegative safe integer; 0 means unlimited.");
@@ -146,18 +143,18 @@ function parseBuildInstanceType(value) {
 }
 /** Strict saved-state validation: invalid configuration must not silently lift quotas. */
 function parsePlatformPlanCatalog(value) {
-	const input = object(value, "Plan catalog");
+	const input = record(value, "Plan catalog");
 	if (!Number.isSafeInteger(input.revision) || input.revision < 0) throw new Error("Invalid plan catalog revision.");
 	if (!Array.isArray(input.plans) || input.plans.length === 0 || input.plans.length > 100) throw new Error("A plan catalog must contain between 1 and 100 plans.");
 	const ids = /* @__PURE__ */ new Set();
 	const plans = input.plans.map((value) => {
-		const plan = object(value, "Plan");
+		const plan = record(value, "Plan");
 		const id = parsePlatformPlanId(plan.id);
 		if (ids.has(id)) throw new Error("Duplicate plan ID: " + id + ".");
 		ids.add(id);
 		if (typeof plan.archived !== "boolean") throw new Error("archived must be a boolean.");
 		if (typeof plan.allowShortSlugs !== "boolean") throw new Error("allowShortSlugs must be a boolean.");
-		const limits = object(plan.limits, "Plan limits");
+		const limits = record(plan.limits, "Plan limits");
 		const keys = Object.keys(PLAN_LIMITS.free);
 		if (Object.keys(limits).length !== keys.length || keys.some((key) => !Object.hasOwn(limits, key))) throw new Error("Plan limits must contain all supported fields.");
 		validatePlanLimits(limits);
@@ -174,13 +171,13 @@ function parsePlatformPlanCatalog(value) {
 	if (!plans.some((plan) => plan.id === defaultPlanId && !plan.archived)) throw new Error("The default plan must exist and be active.");
 	let reconciliation = null;
 	if (input.reconciliation !== null) {
-		const operation = object(input.reconciliation, "Plan reconciliation");
+		const operation = record(input.reconciliation, "Plan reconciliation");
 		if (operation.revision !== input.revision || typeof operation.complete !== "boolean" || !(operation.cursor === null || typeof operation.cursor === "string") || !Array.isArray(operation.planIds) || operation.planIds.length > 100) throw new Error("Invalid plan reconciliation state.");
 		const planIds = operation.planIds.map(parsePlatformPlanId);
 		if (planIds.some((id) => !ids.has(id))) throw new Error("A reconciliation plan is missing.");
 		let error;
 		if (operation.error !== void 0) {
-			const failure = object(operation.error, "Plan reconciliation failure");
+			const failure = record(operation.error, "Plan reconciliation failure");
 			if (typeof failure.accountId !== "string" || typeof failure.message !== "string" || failure.message.length > 1e3) throw new Error("Invalid plan reconciliation failure.");
 			error = {
 				accountId: failure.accountId,