@void/platform 0.27.0 → 1.0.3

package/dist/browser-page.mjs

@@ -37,7 +37,8 @@ html[data-theme="dark"] { color-scheme: dark; }
 .void-auth-page p { margin: 0; font: inherit; color: var(--auth-secondary); overflow-wrap: anywhere; }
 .void-auth-page strong { font-weight: 600; color: var(--auth-text); }
 .void-auth-page a:not(.void-auth-button) { color: var(--auth-text); text-underline-offset: 3px; }
-.void-auth-page .void-auth-actions { display: grid; gap: 12px; }
+.void-auth-page form { display: grid; gap: 12px; }
+.void-auth-page .void-auth-actions { display: grid; gap: 8px; }
 .void-auth-page .void-auth-button { display: flex; align-items: center; justify-content: center; width: 100%; min-height: 44px; padding: 10px 16px; border: 1px solid var(--auth-border); border-radius: var(--auth-radius-element); background: var(--auth-body); color: var(--auth-text); font: inherit; font-weight: 550; line-height: 1.4; text-align: center; text-decoration: none; overflow-wrap: anywhere; cursor: pointer; }
 .void-auth-page .void-auth-button-primary { background: var(--auth-accent); color: var(--auth-on-accent); border-color: var(--auth-accent); }
 .void-auth-page .void-auth-button:hover { filter: brightness(.92); }

package/dist/index.d.mts

@@ -1,6 +1,23 @@
 import { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, BuildInstanceType, BuiltinPlanId, EditablePlanLimit, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, PlanId, PlanLimits, PlanLimitsPatch, PlatformPlanCatalog, PlatformPlanDefinition, PlatformPlanReconciliation, createDefaultPlanCatalog, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanCatalog, parsePlatformPlanId, validatePlanLimits } from "./plans.mjs";
+//#region src/access-policy.d.ts
+/** An exact email domain, such as `example.com`, without wildcards or an `@`. */
+export declare function isPlatformAccessEmailDomain(value: unknown): value is string;
+/** Whether signing in with this Access identity provider proves a company identity. */
+export declare function isPlatformAccessCompanyIdentityProvider(provider: Readonly<Record<string, unknown>>): boolean;
+/**
+ * Whether one Access include or require rule restricts people to company
+ * identities. The installer checks the policies that protect the platform and
+ * the API checks project Zero Trust policies with this same rule list.
+ *
+ * A `login_method` rule admits everyone who can use the identity provider it
+ * names, so it counts only when `companyLoginMethod` accepts that provider ID.
+ */
+export declare function isPlatformAccessIdentityRule(rule: Readonly<Record<string, unknown>>, companyLoginMethod: (identityProviderId: string) => boolean): boolean;
+//#endregion
 //#region src/app-access.d.ts
 export declare const PLATFORM_APP_ACCESS_SETUP_PROOF_PREFIX = "void-platform-app-access-v1";
+/** Uninstall handoff that turns off installer-managed project Zero Trust before any user exists. */
+export declare const PLATFORM_APP_ACCESS_TURN_OFF_PROOF_PREFIX = "void-platform-app-access-turn-off-v1";
 /** Installer handoff. Token values belong only in encrypted recovery and request bodies. */
 type PlatformAppAccessSetup = Readonly<{
   version: 1;

package/dist/index.mjs

@@ -1,6 +1,62 @@
+import { a as isSourceRevision, c as requiredString, i as isSandboxDrainProtocol, n as isPrintableText, o as isUsageProtocolVersion, s as record, t as assertRecord } from "./validate-DbJR7Q0Z.mjs";
 import { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, createDefaultPlanCatalog, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanCatalog, parsePlatformPlanId, validatePlanLimits } from "./plans.mjs";
+//#region src/access-policy.ts
+const COMPANY_IDENTITY_RULES = [
+	"email_list",
+	"gsuite",
+	"github-organization",
+	"saml",
+	"okta",
+	"azureAD",
+	"auth_context",
+	"group"
+];
+const COMPANY_IDENTITY_PROVIDER_TYPES = /* @__PURE__ */ new Set([
+	"azureAD",
+	"centrify",
+	"google-apps",
+	"okta",
+	"onelogin",
+	"pingone"
+]);
+function plainObject(value) {
+	return !!value && typeof value === "object" && !Array.isArray(value);
+}
+/** An exact email domain, such as `example.com`, without wildcards or an `@`. */
+function isPlatformAccessEmailDomain(value) {
+	return typeof value === "string" && /^(?:[a-z0-9-]+\.)+[a-z]{2,63}$/i.test(value);
+}
+/** Whether signing in with this Access identity provider proves a company identity. */
+function isPlatformAccessCompanyIdentityProvider(provider) {
+	if (provider.type === "cloudflare") return plainObject(provider.config) && provider.config.restrict_to_account_members === true;
+	return COMPANY_IDENTITY_PROVIDER_TYPES.has(provider.type);
+}
+/**
+* Whether one Access include or require rule restricts people to company
+* identities. The installer checks the policies that protect the platform and
+* the API checks project Zero Trust policies with this same rule list.
+*
+* A `login_method` rule admits everyone who can use the identity provider it
+* names, so it counts only when `companyLoginMethod` accepts that provider ID.
+*/
+function isPlatformAccessIdentityRule(rule, companyLoginMethod) {
+	if (rule.email_domain) return plainObject(rule.email_domain) && isPlatformAccessEmailDomain(rule.email_domain.domain);
+	if (rule.email) return plainObject(rule.email) && typeof rule.email.email === "string" && /^[^\s*@]+@[^\s*@]+\.[^\s*@]+$/.test(rule.email.email);
+	if (rule.login_method) return plainObject(rule.login_method) && typeof rule.login_method.id === "string" && companyLoginMethod(rule.login_method.id);
+	if (rule.cloudflare_account_member) {
+		const member = rule.cloudflare_account_member;
+		return plainObject(member) && (member.account_id === void 0 || typeof member.account_id === "string" && /^[0-9a-f]{32}$/i.test(member.account_id));
+	}
+	return COMPANY_IDENTITY_RULES.some((key) => {
+		const value = Object.hasOwn(rule, key) ? rule[key] : void 0;
+		return plainObject(value) && Object.keys(value).length > 0;
+	});
+}
+//#endregion
 //#region src/app-access.ts
 const PLATFORM_APP_ACCESS_SETUP_PROOF_PREFIX = "void-platform-app-access-v1";
+/** Uninstall handoff that turns off installer-managed project Zero Trust before any user exists. */
+const PLATFORM_APP_ACCESS_TURN_OFF_PROOF_PREFIX = "void-platform-app-access-turn-off-v1";
 function parsePlatformAppAccessSetup(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Invalid app access setup.");
 	const input = value;
@@ -125,12 +181,8 @@ function parsePlatformAuthenticationSetup(value) {
 const DEFAULT_PLATFORM_SESSION_SECONDS = 2592e3;
 const GOOGLE_OIDC_ISSUER = "https://accounts.google.com";
 const PLATFORM_AUTH_SETUP_PROOF_PREFIX = "void.platform.auth.setup.v1";
-function record(value, name) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${name} must be an object.`);
-	return value;
-}
 function string(value, name, maximum = 512) {
-	if (typeof value !== "string" || !value.trim() || value.length > maximum || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw new Error(`${name} must be a nonempty string of at most ${maximum} characters.`);
+	if (!isPrintableText(value, maximum)) throw new Error(`${name} must be a nonempty string of at most ${maximum} characters.`);
 	return value.trim();
 }
 function strings(value, name, maximum = 100) {
@@ -262,13 +314,6 @@ const CONTROL_PLANE_DEFAULTS = {
 	dashboardHostname: null,
 	proxyHostname: null
 };
-function assertRecord$1(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
-}
-function requiredString$1(value, label) {
-	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string.`);
-	return value;
-}
 function normalizeInstallationSlug(value) {
 	const slug = value.trim().toLowerCase().replaceAll(/[^a-z0-9-]+/g, "-").replaceAll(/^-+|-+$/g, "").replaceAll(/-{2,}/g, "-");
 	if (!slug) throw new Error("The installation name must contain a letter or number.");
@@ -384,7 +429,7 @@ function createPlatformDeploymentManifest(input) {
 			dedicatedZone: input.application.dedicatedZone ?? false,
 			zoneName,
 			...workersDev ? { workersDev: { ...workersDev } } : {},
-			...input.application.zoneId ? { zoneId: requiredString$1(input.application.zoneId, "application.zoneId") } : {}
+			...input.application.zoneId ? { zoneId: requiredString(input.application.zoneId, "application.zoneId") } : {}
 		},
 		authentication: {
 			providers: [...providers],
@@ -392,7 +437,7 @@ function createPlatformDeploymentManifest(input) {
 			...input.authentication?.accessProtection ? { accessProtection: true } : {}
 		},
 		capabilities,
-		...input.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString$1(input.emailSharedZoneId, "emailSharedZoneId") } : {},
+		...input.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString(input.emailSharedZoneId, "emailSharedZoneId") } : {},
 		...input.emailSenderDomain !== void 0 ? { emailSenderDomain: normalizeApplicationDomain(input.emailSenderDomain) } : {},
 		controlPlane: {
 			...CONTROL_PLANE_DEFAULTS,
@@ -402,7 +447,7 @@ function createPlatformDeploymentManifest(input) {
 				dashboardHostname: input.controlPlane?.dashboardHostname ?? new URL(dashboardUrl).hostname
 			} : {}
 		},
-		displayName: requiredString$1(input.displayName, "displayName").trim(),
+		displayName: requiredString(input.displayName, "displayName").trim(),
 		installationSlug,
 		resources,
 		schemaVersion: input.appAccess !== void 0 ? 4 : configurable ? 3 : workersDev ? 2 : 1
@@ -416,30 +461,30 @@ function createPlatformDeploymentManifest(input) {
 		const hostname = new URL(manifest.controlPlane.dashboardUrl).hostname;
 		if (manifest.controlPlane.dashboardHostname !== hostname) throw new Error("The dashboard URL and dashboard hostname must agree.");
 	}
-	for (const [key, value] of Object.entries(manifest.resources)) requiredString$1(value, `resources.${key}`);
+	for (const [key, value] of Object.entries(manifest.resources)) requiredString(value, `resources.${key}`);
 	return manifest;
 }
 function parsePlatformDeploymentManifest(value) {
-	assertRecord$1(value, "Platform deployment manifest");
+	assertRecord(value, "Platform deployment manifest");
 	if (value.schemaVersion !== 1 && value.schemaVersion !== 2 && value.schemaVersion !== 3 && value.schemaVersion !== 4) throw new Error(`Unsupported platform deployment schema version: ${String(value.schemaVersion)}.`);
 	const application = value.application;
 	const authentication = value.authentication;
 	const rawCapabilities = value.capabilities;
 	const controlPlane = value.controlPlane;
 	const rawResources = value.resources;
-	assertRecord$1(application, "application");
+	assertRecord(application, "application");
 	let workersDev;
 	if (value.schemaVersion === 2 || (value.schemaVersion === 3 || value.schemaVersion === 4) && application.workersDev !== void 0) {
-		assertRecord$1(application.workersDev, "application.workersDev");
+		assertRecord(application.workersDev, "application.workersDev");
 		workersDev = {
-			subdomain: requiredString$1(application.workersDev.subdomain, "workersDev.subdomain"),
-			installationId: requiredString$1(application.workersDev.installationId, "workersDev.installationId")
+			subdomain: requiredString(application.workersDev.subdomain, "workersDev.subdomain"),
+			installationId: requiredString(application.workersDev.installationId, "workersDev.installationId")
 		};
 	} else if (application.workersDev !== void 0) throw new Error("workers.dev requires platform deployment schema version 2.");
-	assertRecord$1(rawCapabilities, "capabilities");
-	assertRecord$1(controlPlane, "controlPlane");
-	assertRecord$1(authentication, "authentication");
-	assertRecord$1(rawResources, "resources");
+	assertRecord(rawCapabilities, "capabilities");
+	assertRecord(controlPlane, "controlPlane");
+	assertRecord(authentication, "authentication");
+	assertRecord(rawResources, "resources");
 	const capabilityKeys = Object.keys(CORE_CAPABILITIES);
 	const capabilities = {};
 	for (const key of capabilityKeys) {
@@ -456,19 +501,19 @@ function parsePlatformDeploymentManifest(value) {
 		"custom"
 	].includes(String(value.appAccess)) : value.appAccess !== void 0) throw new Error("Guided app access requires deployment schema version 4 and a valid appAccess choice.");
 	if (authentication.configurable !== void 0 && authentication.configurable !== true) throw new Error("Invalid configurable authentication flag.");
-	const resourceDefaults = createPlatformResourceNames(requiredString$1(value.installationSlug, "installationSlug"));
+	const resourceDefaults = createPlatformResourceNames(requiredString(value.installationSlug, "installationSlug"));
 	const resources = {};
-	for (const key of Object.keys(resourceDefaults)) resources[key] = requiredString$1(rawResources[key] ?? (key === "emailGatewayWorker" || key === "deploymentQueue" ? resourceDefaults[key] : void 0), `resources.${key}`);
+	for (const key of Object.keys(resourceDefaults)) resources[key] = requiredString(rawResources[key] ?? (key === "emailGatewayWorker" || key === "deploymentQueue" ? resourceDefaults[key] : void 0), `resources.${key}`);
 	const readHostname = (key) => {
 		const hostname = controlPlane[key];
-		return hostname === null ? null : requiredString$1(hostname, `controlPlane.${key}`);
+		return hostname === null ? null : requiredString(hostname, `controlPlane.${key}`);
 	};
 	return createPlatformDeploymentManifest({
 		...value.schemaVersion === 4 ? { appAccess: value.appAccess } : {},
 		application: {
-			baseDomain: requiredString$1(application.baseDomain, "application.baseDomain"),
+			baseDomain: requiredString(application.baseDomain, "application.baseDomain"),
 			dedicatedZone: application.dedicatedZone === true,
-			zoneName: workersDev && application.zoneName === "" ? "" : requiredString$1(application.zoneName, "application.zoneName"),
+			zoneName: workersDev && application.zoneName === "" ? "" : requiredString(application.zoneName, "application.zoneName"),
 			...workersDev ? { workersDev } : {},
 			...typeof application.zoneId === "string" ? { zoneId: application.zoneId } : {}
 		},
@@ -478,16 +523,16 @@ function parsePlatformDeploymentManifest(value) {
 			...authentication.accessProtection === true ? { accessProtection: true } : {}
 		},
 		capabilities,
-		...value.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString$1(value.emailSharedZoneId, "emailSharedZoneId") } : {},
-		...value.emailSenderDomain !== void 0 ? { emailSenderDomain: requiredString$1(value.emailSenderDomain, "emailSenderDomain") } : {},
+		...value.emailSharedZoneId !== void 0 ? { emailSharedZoneId: requiredString(value.emailSharedZoneId, "emailSharedZoneId") } : {},
+		...value.emailSenderDomain !== void 0 ? { emailSenderDomain: requiredString(value.emailSenderDomain, "emailSenderDomain") } : {},
 		controlPlane: {
 			apiHostname: readHostname("apiHostname"),
 			dashboardHostname: readHostname("dashboardHostname"),
-			...controlPlane.dashboardUrl !== void 0 ? { dashboardUrl: requiredString$1(controlPlane.dashboardUrl, "controlPlane.dashboardUrl") } : {},
+			...controlPlane.dashboardUrl !== void 0 ? { dashboardUrl: requiredString(controlPlane.dashboardUrl, "controlPlane.dashboardUrl") } : {},
 			proxyHostname: readHostname("proxyHostname")
 		},
-		displayName: requiredString$1(value.displayName, "displayName"),
-		installationSlug: requiredString$1(value.installationSlug, "installationSlug"),
+		displayName: requiredString(value.displayName, "displayName"),
+		installationSlug: requiredString(value.installationSlug, "installationSlug"),
 		resources
 	});
 }
@@ -609,13 +654,6 @@ const STATUS_TRANSITIONS = {
 		"uninstalling"
 	]
 };
-function assertRecord(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object.`);
-}
-function requiredString(value, label) {
-	if (typeof value !== "string" || value.trim() === "") throw new Error(`${label} must be a non-empty string.`);
-	return value;
-}
 function isInstallationStatus(value) {
 	return typeof value === "string" && Object.hasOwn(STATUS_TRANSITIONS, value);
 }
@@ -847,15 +885,14 @@ function parseAuthenticationResources(value) {
 	return resources;
 }
 function parseUsageProtocolVersion(value) {
-	if (value === void 0 || value === 0) return 0;
-	if (value === 1) return 1;
-	if (value === 2) return 2;
-	throw new Error("usageProtocolVersion must be 0, 1, or 2.");
+	if (value === void 0) return 0;
+	if (!isUsageProtocolVersion(value)) throw new Error("usageProtocolVersion must be 0, 1, or 2.");
+	return value;
 }
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
 	assertRecord(value, "safetyProtocols");
-	if (value.sandboxDrain !== 0 && value.sandboxDrain !== 1 && value.sandboxDrain !== 2 && value.sandboxDrain !== 3) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, 2, or 3.");
+	if (!isSandboxDrainProtocol(value.sandboxDrain)) throw new Error("safetyProtocols.sandboxDrain must be 0, 1, 2, or 3.");
 	return { sandboxDrain: value.sandboxDrain };
 }
 function parsePlatformRuntimeProvenance(value) {
@@ -865,7 +902,7 @@ function parsePlatformRuntimeProvenance(value) {
 	const manifestSha256 = requiredString(value.manifestSha256, "runtime.manifestSha256");
 	if (!/^[0-9a-f]{64}$/.test(manifestSha256)) throw new Error("runtime.manifestSha256 must be a SHA-256 digest.");
 	const sourceRevision = value.sourceRevision === null || value.sourceRevision === void 0 ? null : requiredString(value.sourceRevision, "runtime.sourceRevision");
-	if (sourceRevision !== null && (sourceRevision.length > 200 || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(sourceRevision))) throw new Error("runtime.sourceRevision is invalid.");
+	if (sourceRevision !== null && !isSourceRevision(sourceRevision)) throw new Error("runtime.sourceRevision is invalid.");
 	return {
 		manifestSha256,
 		source: value.source,
@@ -890,10 +927,14 @@ function readPlatformApplication(env) {
 		zoneName: baseDomain,
 		dedicatedZone: false
 	};
+	return parsePlatformApplication(JSON.parse(env.PLATFORM_APPLICATION));
+}
+/** Applies the deployment manifest's application rules to a parsed value. */
+function parsePlatformApplication(value) {
 	return createPlatformDeploymentManifest({
 		installationSlug: "runtime",
 		displayName: "Runtime",
-		application: JSON.parse(env.PLATFORM_APPLICATION)
+		application: value
 	}).application;
 }
 function platformWorkersDevAliasKey(hostname) {
@@ -968,7 +1009,7 @@ function createPlatformDiscoveryDocument(input) {
 	if (!input.displayName.trim()) throw new Error("displayName must not be empty.");
 	if (!input.platformVersion.trim()) throw new Error("platformVersion must not be empty.");
 	if (input.applicationRouting) {
-		const application = readPlatformApplication({ PLATFORM_APPLICATION: JSON.stringify(input.applicationRouting) });
+		const application = parsePlatformApplication(input.applicationRouting);
 		if (!application.workersDev || application.baseDomain !== input.applicationDomain || application.workersDev.installationId !== input.installationId) throw new Error("Application routing must match the discovery domain and installation identity.");
 	}
 	const usageProtocolVersion = parseUsageProtocolVersion(input.usageProtocolVersion);
@@ -994,13 +1035,12 @@ function createPlatformDiscoveryDocument(input) {
 	};
 }
 function parsePlatformDiscoveryDocument(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Platform discovery document must be an object.");
-	const document = value;
+	const document = record(value, "Platform discovery document");
 	if (document.schemaVersion !== 1 && document.schemaVersion !== 2 && document.schemaVersion !== 3) throw new Error(`Unsupported platform discovery schema version: ${String(document.schemaVersion)}.`);
 	const capabilities = document.capabilities;
 	if (document.schemaVersion === 1 && document.applicationRouting !== void 0) throw new Error("Application routing requires discovery schema version 2.");
 	if (document.schemaVersion === 2 && document.applicationRouting === void 0) throw new Error("Discovery schema version 2 requires application routing.");
-	if (!capabilities || typeof capabilities !== "object" || Array.isArray(capabilities)) throw new Error("capabilities must be an object.");
+	assertRecord(capabilities, "capabilities");
 	const capabilityNames = [
 		"ai",
 		"customDomains",
@@ -1032,7 +1072,7 @@ function parsePlatformDiscoveryDocument(value) {
 	return createPlatformDiscoveryDocument({
 		apiUrl,
 		applicationDomain: string("applicationDomain"),
-		...document.applicationRouting !== void 0 ? { applicationRouting: readPlatformApplication({ PLATFORM_APPLICATION: JSON.stringify(document.applicationRouting) }) } : {},
+		...document.applicationRouting !== void 0 ? { applicationRouting: parsePlatformApplication(document.applicationRouting) } : {},
 		authenticationProviders: providers,
 		...authentication ? { authentication } : {},
 		capabilities: parsedCapabilities,
@@ -1045,8 +1085,7 @@ function parsePlatformDiscoveryDocument(value) {
 	});
 }
 function parseAuthentication(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Authentication discovery must be an object.");
-	const authentication = value;
+	const authentication = record(value, "Authentication discovery");
 	if (!Array.isArray(authentication.methods) || authentication.methods.length > 32 || typeof authentication.protectedByAccess !== "boolean" || authentication.setupPending !== void 0 && typeof authentication.setupPending !== "boolean") throw new Error("Authentication discovery requires login methods and a protection flag.");
 	const methods = authentication.methods.map(parsePlatformLoginDescriptor);
 	if (new Set(methods.map((method) => method.id)).size !== methods.length) throw new Error("Authentication connection IDs must be unique.");
@@ -1281,7 +1320,6 @@ function createPlatformWorkerConfigs(input) {
 		proxy,
 		emailGateway: {
 			...common,
-			workers_dev: publicEndpoints,
 			preview_urls: false,
 			name: names.emailGatewayWorker,
 			main: runtimeEntrypoints.emailGateway,
@@ -1359,4 +1397,4 @@ function createPlatformWorkerConfigs(input) {
 	};
 }
 //#endregion
-export { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, DEFAULT_PLATFORM_SESSION_SECONDS, GOOGLE_OIDC_ISSUER, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, PLATFORM_APPLICATION_KEY, PLATFORM_APP_ACCESS_SETUP_PROOF_PREFIX, PLATFORM_AUTH_SETUP_PROOF_PREFIX, PLATFORM_DEPLOYMENT_SCHEMA_VERSION, PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_DISCOVERY_SCHEMA_VERSION, PLATFORM_HEALTH_HOSTNAME_LABEL, PLATFORM_INSTALLATION_SCHEMA_VERSION, PLATFORM_LOGIN_KINDS, PLATFORM_PROJECT_INGRESS_SOURCE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, PLATFORM_RESOURCE_OWNERSHIP_SCHEMA_VERSION, PLATFORM_SANDBOX_DRAIN_KEY, PLATFORM_USAGE_PROTOCOL_VERSION, createApplicationRoutes, createDefaultPlanCatalog, createPlatformDeploymentManifest, createPlatformDiscoveryDocument, createPlatformInstallationManifest, createPlatformResourceNames, createPlatformResourceOwnershipMarker, createPlatformWorkerConfigs, isPlatformSignupAllowed, normalizeApplicationDomain, normalizeInstallationSlug, normalizePlatformDashboardUrl, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformAppAccessSetup, parsePlatformAuthenticationSetup, parsePlatformDeploymentManifest, parsePlatformDiscoveryDocument, parsePlatformIdentityUrl, parsePlatformInstallationManifest, parsePlatformLifecycleOperation, parsePlatformLoginConfiguration, parsePlatformLoginDescriptor, parsePlatformLoginId, parsePlatformPlanCatalog, parsePlatformPlanId, parsePlatformResourceOwnershipMarker, parsePlatformSignupAllowlistEntry, platformAuthenticationRecoveryMessage, platformDashboardUrl, platformHealthHostname, platformProjectHostname, platformProjectHostnames, platformProjectIngressName, platformProjectIngressPrefix, platformProjectWorkersDevHostname, platformProtectionProofMessage, platformWorkersDevAliasKey, readPlatformApplication, recordInstallationResource, recordInstallationStep, resolvePlatformApplicationEnvironment, setInstallationDesiredState, setInstallationEndpoints, transitionInstallation, validatePlanLimits, validatePlatformAdmissionPolicy };
+export { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, DEFAULT_PLATFORM_SESSION_SECONDS, GOOGLE_OIDC_ISSUER, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, PLATFORM_APPLICATION_KEY, PLATFORM_APP_ACCESS_SETUP_PROOF_PREFIX, PLATFORM_APP_ACCESS_TURN_OFF_PROOF_PREFIX, PLATFORM_AUTH_SETUP_PROOF_PREFIX, PLATFORM_DEPLOYMENT_SCHEMA_VERSION, PLATFORM_DISABLED_KEY, PLATFORM_DISABLED_VALUE, PLATFORM_DISCOVERY_SCHEMA_VERSION, PLATFORM_HEALTH_HOSTNAME_LABEL, PLATFORM_INSTALLATION_SCHEMA_VERSION, PLATFORM_LOGIN_KINDS, PLATFORM_PROJECT_INGRESS_SOURCE, PLATFORM_R2_OWNERSHIP_MARKER_KEY, PLATFORM_REMOTE_INSTALLATION_MANIFEST_KEY, PLATFORM_RESOURCE_OWNERSHIP_SCHEMA_VERSION, PLATFORM_SANDBOX_DRAIN_KEY, PLATFORM_USAGE_PROTOCOL_VERSION, createApplicationRoutes, createDefaultPlanCatalog, createPlatformDeploymentManifest, createPlatformDiscoveryDocument, createPlatformInstallationManifest, createPlatformResourceNames, createPlatformResourceOwnershipMarker, createPlatformWorkerConfigs, isPlatformAccessCompanyIdentityProvider, isPlatformAccessEmailDomain, isPlatformAccessIdentityRule, isPlatformSignupAllowed, normalizeApplicationDomain, normalizeInstallationSlug, normalizePlatformDashboardUrl, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformAccessProtection, parsePlatformAdmissionPolicy, parsePlatformAppAccessSetup, parsePlatformAuthenticationSetup, parsePlatformDeploymentManifest, parsePlatformDiscoveryDocument, parsePlatformIdentityUrl, parsePlatformInstallationManifest, parsePlatformLifecycleOperation, parsePlatformLoginConfiguration, parsePlatformLoginDescriptor, parsePlatformLoginId, parsePlatformPlanCatalog, parsePlatformPlanId, parsePlatformResourceOwnershipMarker, parsePlatformSignupAllowlistEntry, platformAuthenticationRecoveryMessage, platformDashboardUrl, platformHealthHostname, platformProjectHostname, platformProjectHostnames, platformProjectIngressName, platformProjectIngressPrefix, platformProjectWorkersDevHostname, platformProtectionProofMessage, platformWorkersDevAliasKey, readPlatformApplication, recordInstallationResource, recordInstallationStep, resolvePlatformApplicationEnvironment, setInstallationDesiredState, setInstallationEndpoints, transitionInstallation, validatePlanLimits, validatePlatformAdmissionPolicy };

package/dist/installer.mjs

@@ -1,3 +1,4 @@
+import { a as isSourceRevision, i as isSandboxDrainProtocol, o as isUsageProtocolVersion, r as isRecord } from "./validate-DbJR7Q0Z.mjs";
 import { createHash } from "node:crypto";
 import { readFileSync, realpathSync, statSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -105,26 +106,20 @@ function parsePlatformRuntimeManifest(value) {
 }
 function parseSafetyProtocols(value) {
 	if (value === void 0) return { sandboxDrain: 0 };
-	const protocols = record(value, "runtime manifest safetyProtocols");
-	if (protocols.sandboxDrain !== 0 && protocols.sandboxDrain !== 1 && protocols.sandboxDrain !== 2 && protocols.sandboxDrain !== 3) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, 2, or 3");
-	return { sandboxDrain: protocols.sandboxDrain };
+	const { sandboxDrain } = record(value, "runtime manifest safetyProtocols");
+	if (!isSandboxDrainProtocol(sandboxDrain)) throw new Error("runtime manifest safetyProtocols.sandboxDrain must be 0, 1, 2, or 3");
+	return { sandboxDrain };
 }
 function usageProtocolVersion(value) {
-	if (value === void 0 || value === 0) return 0;
-	if (value === 1) return 1;
-	if (value === 2) return 2;
-	throw new Error("runtime manifest usageProtocolVersion must be 0, 1, or 2");
+	if (value === void 0) return 0;
+	if (!isUsageProtocolVersion(value)) throw new Error("runtime manifest usageProtocolVersion must be 0, 1, or 2");
+	return value;
 }
 function getPlatformRuntimeDirectory() {
 	return join(dirname(fileURLToPath(import.meta.url)), "runtime");
 }
 function readPlatformRuntimeManifest(runtimeDirectory = getPlatformRuntimeDirectory()) {
-	const path = join(runtimeDirectory, "manifest.json");
-	try {
-		return parsePlatformRuntimeManifest(JSON.parse(readFileSync(path, "utf8")));
-	} catch (error) {
-		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${path}: ${error instanceof Error ? error.message : String(error)}`);
-	}
+	return readRuntimeManifestFile(join(runtimeDirectory, "manifest.json")).manifest;
 }
 function resolvePlatformRuntime(customRuntimeDirectory, baseDirectory = process.cwd()) {
 	const source = customRuntimeDirectory ? "custom" : "package";
@@ -136,22 +131,25 @@ function resolvePlatformRuntime(customRuntimeDirectory, baseDirectory = process.
 	} catch (error) {
 		throw new Error(`Void Platform runtime directory is unavailable at ${requestedDirectory}: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const manifestPath = join(directory, "manifest.json");
-	let manifestContents;
-	let manifest;
-	try {
-		manifestContents = readFileSync(manifestPath);
-		manifest = parsePlatformRuntimeManifest(JSON.parse(manifestContents.toString("utf8")));
-	} catch (error) {
-		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${manifestPath}: ${error instanceof Error ? error.message : String(error)}`);
-	}
+	const { contents, manifest } = readRuntimeManifestFile(join(directory, "manifest.json"));
 	return {
 		directory,
 		manifest,
-		manifestSha256: createHash("sha256").update(manifestContents).digest("hex"),
+		manifestSha256: createHash("sha256").update(contents).digest("hex"),
 		source
 	};
 }
+function readRuntimeManifestFile(path) {
+	try {
+		const contents = readFileSync(path);
+		return {
+			contents,
+			manifest: parsePlatformRuntimeManifest(JSON.parse(contents.toString("utf8")))
+		};
+	} catch (error) {
+		throw new Error(`Void Platform deployment artifacts are missing or invalid at ${path}: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
 function parseArtifact(value, name) {
 	const artifact = record(value, `runtime manifest artifact ${name}`);
 	const path = nonemptyString(artifact.path, `runtime manifest artifact ${name} path`);
@@ -179,7 +177,7 @@ function parseMigration(value, position) {
 	};
 }
 function record(value, name) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${name} must be an object`);
+	if (!isRecord(value)) throw new Error(`${name} must be an object`);
 	return value;
 }
 function array(value, name) {
@@ -192,7 +190,7 @@ function nonemptyString(value, name) {
 }
 function sourceRevision(value) {
 	const revision = nonemptyString(value, "runtime manifest sourceRevision");
-	if (revision.length > 200 || !/^[A-Za-z0-9][A-Za-z0-9._/-]*$/.test(revision)) throw new Error("runtime manifest sourceRevision is invalid");
+	if (!isSourceRevision(revision)) throw new Error("runtime manifest sourceRevision is invalid");
 	return revision;
 }
 function safeInteger(value, name) {

package/dist/plans.mjs

@@ -1,3 +1,4 @@
+import { n as isPrintableText, s as record } from "./validate-DbJR7Q0Z.mjs";
 //#region src/plans.ts
 const GB = 1073741824;
 const PLAN_LIMITS = {
@@ -119,15 +120,11 @@ function parsePlatformPlanId(value) {
 	return value;
 }
 function parsePlanName(value) {
-	if (typeof value !== "string" || !value.trim() || value.length > 80 || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw new Error("Plan names must contain 1 to 80 printable characters.");
+	if (!isPrintableText(value, 80)) throw new Error("Plan names must contain 1 to 80 printable characters.");
 	return value.trim();
 }
-function object(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(label + " must be an object.");
-	return value;
-}
 function parsePlanLimitsPatch(value) {
-	const input = object(value, "Plan limits");
+	const input = record(value, "Plan limits");
 	for (const [key, limit] of Object.entries(input)) {
 		if (!PLAN_EDITABLE_LIMIT_KEYS.includes(key)) throw new Error("Unknown or unenforced plan limit: " + key + ".");
 		if (!Number.isSafeInteger(limit) || limit < 0) throw new Error(key + " must be a nonnegative safe integer; 0 means unlimited.");
@@ -146,18 +143,18 @@ function parseBuildInstanceType(value) {
 }
 /** Strict saved-state validation: invalid configuration must not silently lift quotas. */
 function parsePlatformPlanCatalog(value) {
-	const input = object(value, "Plan catalog");
+	const input = record(value, "Plan catalog");
 	if (!Number.isSafeInteger(input.revision) || input.revision < 0) throw new Error("Invalid plan catalog revision.");
 	if (!Array.isArray(input.plans) || input.plans.length === 0 || input.plans.length > 100) throw new Error("A plan catalog must contain between 1 and 100 plans.");
 	const ids = /* @__PURE__ */ new Set();
 	const plans = input.plans.map((value) => {
-		const plan = object(value, "Plan");
+		const plan = record(value, "Plan");
 		const id = parsePlatformPlanId(plan.id);
 		if (ids.has(id)) throw new Error("Duplicate plan ID: " + id + ".");
 		ids.add(id);
 		if (typeof plan.archived !== "boolean") throw new Error("archived must be a boolean.");
 		if (typeof plan.allowShortSlugs !== "boolean") throw new Error("allowShortSlugs must be a boolean.");
-		const limits = object(plan.limits, "Plan limits");
+		const limits = record(plan.limits, "Plan limits");
 		const keys = Object.keys(PLAN_LIMITS.free);
 		if (Object.keys(limits).length !== keys.length || keys.some((key) => !Object.hasOwn(limits, key))) throw new Error("Plan limits must contain all supported fields.");
 		validatePlanLimits(limits);
@@ -174,13 +171,13 @@ function parsePlatformPlanCatalog(value) {
 	if (!plans.some((plan) => plan.id === defaultPlanId && !plan.archived)) throw new Error("The default plan must exist and be active.");
 	let reconciliation = null;
 	if (input.reconciliation !== null) {
-		const operation = object(input.reconciliation, "Plan reconciliation");
+		const operation = record(input.reconciliation, "Plan reconciliation");
 		if (operation.revision !== input.revision || typeof operation.complete !== "boolean" || !(operation.cursor === null || typeof operation.cursor === "string") || !Array.isArray(operation.planIds) || operation.planIds.length > 100) throw new Error("Invalid plan reconciliation state.");
 		const planIds = operation.planIds.map(parsePlatformPlanId);
 		if (planIds.some((id) => !ids.has(id))) throw new Error("A reconciliation plan is missing.");
 		let error;
 		if (operation.error !== void 0) {
-			const failure = object(operation.error, "Plan reconciliation failure");
+			const failure = record(operation.error, "Plan reconciliation failure");
 			if (typeof failure.accountId !== "string" || typeof failure.message !== "string" || failure.message.length > 1e3) throw new Error("Invalid plan reconciliation failure.");
 			error = {
 				accountId: failure.accountId,