@void/platform 1.5.0 → 1.6.0

package/dist/index.d.mts

@@ -220,6 +220,11 @@ type PlatformResourceNames = Readonly<{
   usageQueue: string;
 }>;
 type PlatformAppAccess = "public" | "platform" | "custom";
+/**
+ * `minimal` keeps request URLs, console messages and exception messages out of
+ * Workers Logs and the platform's request log rows. Omitted means `full`.
+ */
+type PlatformRuntimeLogs = "minimal";
 type PlatformDeploymentManifest = Readonly<{
   /** Initial app-access choice. Omitted on installations created before guided setup. */
   appAccess?: PlatformAppAccess;
@@ -238,7 +243,9 @@ type PlatformDeploymentManifest = Readonly<{
   displayName: string;
   installationSlug: string;
   resources: PlatformResourceNames;
-  schemaVersion: typeof PLATFORM_DEPLOYMENT_SCHEMA_VERSION | 2 | 3 | 4;
+  /** Requires schema version 5, so an older CLI refuses the manifest instead of dropping it. */
+  runtimeLogs?: PlatformRuntimeLogs;
+  schemaVersion: typeof PLATFORM_DEPLOYMENT_SCHEMA_VERSION | 2 | 3 | 4 | 5;
 }>;
 type PlatformDeploymentManifestInput = Readonly<{
   appAccess?: PlatformAppAccess;
@@ -261,6 +268,7 @@ type PlatformDeploymentManifestInput = Readonly<{
   displayName: string;
   installationSlug: string;
   resources?: Partial<PlatformResourceNames>;
+  runtimeLogs?: PlatformRuntimeLogs;
 }>;
 type PlatformApplicationRoute = Readonly<{
   pattern: string;
@@ -465,4 +473,4 @@ export declare function createPlatformWorkerConfigs(input: {
   runtimeApiAssetsDirectory?: string;
   trafficState?: "enabled" | "sandbox-drain" | "staging";
 }): PlatformWorkerConfigSet;
-export { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, BuildInstanceType, BuiltinPlanId, EditablePlanLimit, type InstallationResource, type InstallationResourceKind, type InstallationStatus, type InstallationStep, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, PlanId, PlanLimits, PlanLimitsPatch, type PlatformAccessProtection, type PlatformAdmissionPolicy, type PlatformAppAccess, type PlatformAppAccessSetup, type PlatformApplication, type PlatformApplicationProject, type PlatformApplicationRoute, type PlatformAuthenticationDiscovery, type PlatformAuthenticationRecovery, type PlatformAuthenticationSetup, type PlatformCapabilities, type PlatformControlPlane, type PlatformDeploymentManifest, type PlatformDeploymentManifestInput, type PlatformDiscoveryDocument, type PlatformInstallationEndpoints, type PlatformInstallationManifest, type PlatformLifecycleOperation, type PlatformLoginConfiguration, type PlatformLoginDescriptor, type PlatformLoginKind, PlatformPlanCatalog, PlatformPlanDefinition, PlatformPlanReconciliation, type PlatformProvisionedResourceIds, type PlatformResourceNames, type PlatformResourceOwnershipMarker, type PlatformRuntimeProvenance, type PlatformSignupAllowlistEntry, type PlatformSignupIdentity, type PlatformWorkerConfigSet, type ResourceOwnership, createDefaultPlanCatalog, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanCatalog, parsePlatformPlanId, validatePlanLimits };
+export { BUILD_INSTANCE_FREE, BUILD_INSTANCE_LARGE, BuildInstanceType, BuiltinPlanId, EditablePlanLimit, type InstallationResource, type InstallationResourceKind, type InstallationStatus, type InstallationStep, PLAN_EDITABLE_LIMIT_KEYS, PLAN_LIMITS, PlanId, PlanLimits, PlanLimitsPatch, type PlatformAccessProtection, type PlatformAdmissionPolicy, type PlatformAppAccess, type PlatformAppAccessSetup, type PlatformApplication, type PlatformApplicationProject, type PlatformApplicationRoute, type PlatformAuthenticationDiscovery, type PlatformAuthenticationRecovery, type PlatformAuthenticationSetup, type PlatformCapabilities, type PlatformControlPlane, type PlatformDeploymentManifest, type PlatformDeploymentManifestInput, type PlatformDiscoveryDocument, type PlatformInstallationEndpoints, type PlatformInstallationManifest, type PlatformLifecycleOperation, type PlatformLoginConfiguration, type PlatformLoginDescriptor, type PlatformLoginKind, PlatformPlanCatalog, PlatformPlanDefinition, PlatformPlanReconciliation, type PlatformProvisionedResourceIds, type PlatformResourceNames, type PlatformResourceOwnershipMarker, type PlatformRuntimeLogs, type PlatformRuntimeProvenance, type PlatformSignupAllowlistEntry, type PlatformSignupIdentity, type PlatformWorkerConfigSet, type ResourceOwnership, createDefaultPlanCatalog, parseBuildInstanceType, parsePlanLimitsPatch, parsePlanName, parsePlatformPlanCatalog, parsePlatformPlanId, validatePlanLimits };

package/dist/index.mjs

@@ -411,6 +411,7 @@ function createPlatformDeploymentManifest(input) {
 		"platform",
 		"custom"
 	].includes(input.appAccess)) throw new Error("appAccess must be public, platform, or custom.");
+	if (input.runtimeLogs !== void 0 && input.runtimeLogs !== "minimal") throw new Error("runtimeLogs must be minimal when set.");
 	const providers = input.authentication?.providers ?? ["github"];
 	if (providers.some((provider) => !PLATFORM_LOGIN_KINDS.includes(provider)) || new Set(providers).size !== providers.length) throw new Error("Authentication providers must be unique supported login kinds.");
 	const configurable = input.authentication?.configurable === true || input.authentication?.accessProtection === true || providers.some((provider) => provider === "oidc" || provider === "cloudflare-access");
@@ -446,7 +447,8 @@ function createPlatformDeploymentManifest(input) {
 		displayName: requiredString(input.displayName, "displayName").trim(),
 		installationSlug,
 		resources,
-		schemaVersion: input.appAccess !== void 0 ? 4 : configurable ? 3 : workersDev ? 2 : 1
+		...input.runtimeLogs ? { runtimeLogs: input.runtimeLogs } : {},
+		schemaVersion: input.runtimeLogs ? 5 : input.appAccess !== void 0 ? 4 : configurable ? 3 : workersDev ? 2 : 1
 	};
 	createApplicationRoutes(manifest.application);
 	for (const [key, value] of Object.entries(manifest.controlPlane)) {
@@ -462,7 +464,7 @@ function createPlatformDeploymentManifest(input) {
 }
 function parsePlatformDeploymentManifest(value) {
 	assertRecord(value, "Platform deployment manifest");
-	if (value.schemaVersion !== 1 && value.schemaVersion !== 2 && value.schemaVersion !== 3 && value.schemaVersion !== 4) throw new Error(`Unsupported platform deployment schema version: ${String(value.schemaVersion)}.`);
+	if (value.schemaVersion !== 1 && value.schemaVersion !== 2 && value.schemaVersion !== 3 && value.schemaVersion !== 4 && value.schemaVersion !== 5) throw new Error(`Unsupported platform deployment schema version: ${String(value.schemaVersion)}.`);
 	const application = value.application;
 	const authentication = value.authentication;
 	const rawCapabilities = value.capabilities;
@@ -470,7 +472,7 @@ function parsePlatformDeploymentManifest(value) {
 	const rawResources = value.resources;
 	assertRecord(application, "application");
 	let workersDev;
-	if (value.schemaVersion === 2 || (value.schemaVersion === 3 || value.schemaVersion === 4) && application.workersDev !== void 0) {
+	if (value.schemaVersion === 2 || Number(value.schemaVersion) >= 3 && application.workersDev !== void 0) {
 		assertRecord(application.workersDev, "application.workersDev");
 		workersDev = {
 			subdomain: requiredString(application.workersDev.subdomain, "workersDev.subdomain"),
@@ -489,14 +491,19 @@ function parsePlatformDeploymentManifest(value) {
 		capabilities[key] = entry;
 	}
 	const providers = authentication.providers;
-	if (!Array.isArray(providers) || providers.some((provider) => !PLATFORM_LOGIN_KINDS.includes(provider) || value.schemaVersion !== 3 && value.schemaVersion !== 4 && provider !== "github" && provider !== "google")) throw new Error("authentication.providers must contain only github or google.");
-	if (value.schemaVersion === 3 && authentication.configurable !== true || value.schemaVersion !== 3 && value.schemaVersion !== 4 && (authentication.configurable !== void 0 || authentication.accessProtection !== void 0) || authentication.accessProtection !== void 0 && authentication.accessProtection !== true) throw new Error("Configurable authentication requires deployment schema version 3.");
+	if (!Array.isArray(providers) || providers.some((provider) => !PLATFORM_LOGIN_KINDS.includes(provider) || Number(value.schemaVersion) < 3 && provider !== "github" && provider !== "google")) throw new Error("authentication.providers must contain only github or google.");
+	if (value.schemaVersion === 3 && authentication.configurable !== true || Number(value.schemaVersion) < 3 && (authentication.configurable !== void 0 || authentication.accessProtection !== void 0) || authentication.accessProtection !== void 0 && authentication.accessProtection !== true) throw new Error("Configurable authentication requires deployment schema version 3.");
 	if (value.schemaVersion === 4 ? ![
 		"public",
 		"platform",
 		"custom"
+	].includes(String(value.appAccess)) : value.schemaVersion === 5 ? value.appAccess !== void 0 && ![
+		"public",
+		"platform",
+		"custom"
 	].includes(String(value.appAccess)) : value.appAccess !== void 0) throw new Error("Guided app access requires deployment schema version 4 and a valid appAccess choice.");
 	if (authentication.configurable !== void 0 && authentication.configurable !== true) throw new Error("Invalid configurable authentication flag.");
+	if (value.schemaVersion === 5 ? value.runtimeLogs !== "minimal" : value.runtimeLogs !== void 0) throw new Error("Minimal runtime logs require deployment schema version 5.");
 	const resourceDefaults = createPlatformResourceNames(requiredString(value.installationSlug, "installationSlug"));
 	const resources = {};
 	for (const key of Object.keys(resourceDefaults)) resources[key] = requiredString(rawResources[key] ?? (key === "emailGatewayWorker" || key === "deploymentQueue" ? resourceDefaults[key] : void 0), `resources.${key}`);
@@ -505,7 +512,7 @@ function parsePlatformDeploymentManifest(value) {
 		return hostname === null ? null : requiredString(hostname, `controlPlane.${key}`);
 	};
 	return createPlatformDeploymentManifest({
-		...value.schemaVersion === 4 ? { appAccess: value.appAccess } : {},
+		...Number(value.schemaVersion) >= 4 && value.appAccess !== void 0 ? { appAccess: value.appAccess } : {},
 		application: {
 			baseDomain: requiredString(application.baseDomain, "application.baseDomain"),
 			dedicatedZone: application.dedicatedZone === true,
@@ -529,7 +536,8 @@ function parsePlatformDeploymentManifest(value) {
 		},
 		displayName: requiredString(value.displayName, "displayName"),
 		installationSlug: requiredString(value.installationSlug, "installationSlug"),
-		resources
+		resources,
+		...value.schemaVersion === 5 ? { runtimeLogs: "minimal" } : {}
 	});
 }
 // src/installation.ts
@@ -1126,10 +1134,11 @@ function createPlatformWorkerConfigs(input) {
 		resourceKind: "worker",
 		resourceName
 	})) });
+	const runtimeLogs = deployment.runtimeLogs ? { PLATFORM_RUNTIME_LOGS: deployment.runtimeLogs } : {};
 	const common = {
 		account_id: accountId,
 		compatibility_date: "2026-02-24",
-		observability: { enabled: true },
+		observability: { enabled: !deployment.runtimeLogs },
 		preview_urls: publicEndpoints && !deployment.authentication.accessProtection,
 		workers_dev: publicEndpoints
 	};
@@ -1275,6 +1284,7 @@ function createPlatformWorkerConfigs(input) {
 			PLATFORM_HEALTH_PROBE_TOKEN: healthProbeToken,
 			...deployment.appAccess ? { PLATFORM_APP_ACCESS: deployment.appAccess } : {},
 			PLATFORM_INSTALLATION_ID: installationId,
+			...runtimeLogs,
 			PLATFORM_TRAFFIC_STATE: trafficState,
 			...ownershipVars("api-worker", names.apiWorker),
 			PLATFORM_VERSION: platformVersion,
@@ -1370,6 +1380,7 @@ function createPlatformWorkerConfigs(input) {
 			}],
 			vars: {
 				PLATFORM_DISPATCH_WORKER_NAME: names.dispatchWorker,
+				...runtimeLogs,
 				...ownershipVars("tail-worker", names.tailWorker)
 			}
 		},
@@ -1407,6 +1418,7 @@ function createPlatformWorkerConfigs(input) {
 				PLATFORM_HEALTH_PROBE_TOKEN: healthProbeToken,
 				PLATFORM_INSTALLATION_ID: installationId,
 				PLATFORM_TRAFFIC_STATE: trafficState,
+				...runtimeLogs,
 				...ownershipVars("dispatch-worker", names.dispatchWorker)
 			}
 		}

package/dist/installer.d.mts

@@ -26,6 +26,8 @@ export type PlatformRuntimeDatabaseManifest = Readonly<{
 }>;
 export type PlatformRuntimeManifest = Readonly<{
   appAccessSetup?: 1;
+  /** The runtime honours `runtimeLogs: minimal` (PLATFORM_RUNTIME_LOGS). */
+  runtimeLogs?: 1;
   /** Durable deployment Queue payload and PostgreSQL operation journal contract. */
   deploymentExecution?: 1;
   authenticationProtocolVersion?: 1;

package/dist/installer.mjs

@@ -25,6 +25,7 @@ function parsePlatformRuntimeManifest(value) {
 	if (root.privatePreviews !== void 0 && root.privatePreviews !== 1) throw new Error("Unsupported private preview protocol.");
 	if (root.schemaVersion !== 2) throw new Error("runtime manifest schemaVersion must be 2");
 	if (root.appAccessSetup !== void 0 && root.appAccessSetup !== 1) throw new Error("Unsupported app access setup protocol.");
+	if (root.runtimeLogs !== void 0 && root.runtimeLogs !== 1) throw new Error("Unsupported runtime logs protocol.");
 	if (root.deploymentExecution !== void 0 && root.deploymentExecution !== 1) throw new Error("Unsupported deployment execution protocol.");
 	if (root.authenticationProtocolVersion !== void 0 && root.authenticationProtocolVersion !== 1) throw new Error("Unsupported authentication protocol version.");
 	if (root.emailProtocolVersion !== void 0 && root.emailProtocolVersion !== 1) throw new Error("Unsupported email protocol version.");
@@ -85,6 +86,7 @@ function parsePlatformRuntimeManifest(value) {
 	return {
 		artifacts,
 		...root.appAccessSetup === 1 ? { appAccessSetup: 1 } : {},
+		...root.runtimeLogs === 1 ? { runtimeLogs: 1 } : {},
 		...root.deploymentExecution === 1 ? { deploymentExecution: 1 } : {},
 		...assets ? { assets } : {},
 		...root.authenticationProtocolVersion === 1 ? { authenticationProtocolVersion: 1 } : {},