@mettlecast/domain-runtime 0.2.52 → 0.2.53

package/dist/primitives/action.d.ts

@@ -1,5 +1,6 @@
 import { type ZodSchema } from 'zod';
 import type { DomainContext } from '../ctx/context.js';
+import type { OutboundAccess } from '../types/index.js';
 /** Who can call this action. */
 export type ActionVisibility = 'private' | 'domain' | 'workspace';
 /** Configuration for an action primitive. */
@@ -17,6 +18,8 @@ export interface ActionConfig {
      * If true, the runtime checks ctx.idempotency before executing.
      */
     idempotent?: boolean;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Handler implementation. */
     handler: (input: any, ctx: DomainContext) => Promise<any>;
 }

package/dist/primitives/action.js

@@ -5,6 +5,7 @@ const ActionConfigSchema = z.object({
     input: z.unknown(),
     output: z.unknown(),
     idempotent: z.boolean().optional(),
+    outboundAccess: z.enum(['internal', 'internet']).default('internal'),
     handler: z.function(),
 });
 /**
@@ -14,5 +15,5 @@ const ActionConfigSchema = z.object({
  */
 export function defineAction(config) {
     ActionConfigSchema.parse(config);
-    return { ...config, _kind: 'action' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'action' };
 }

package/dist/primitives/api.d.ts

@@ -1,4 +1,4 @@
-import type { AuthConfig, RateLimitConfig, TenancyMode, DeploymentConfig, ObservabilityConfig, ApiVersion } from '../types/index.js';
+import type { AuthConfig, RateLimitConfig, TenancyMode, DeploymentConfig, ObservabilityConfig, ApiVersion, OutboundAccess } from '../types/index.js';
 /** Configuration for an API primitive. */
 export interface ApiConfig {
     /** Machine-readable API identifier (kebab-case). */
@@ -20,6 +20,8 @@ export interface ApiConfig {
     rateLimit?: RateLimitConfig;
     /** Deployment overrides. */
     deployment?: DeploymentConfig;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Observability thresholds. */
     observability?: ObservabilityConfig;
     /** Example request/response payloads for documentation (no runtime impact). */

package/dist/primitives/api.js

@@ -6,6 +6,7 @@ const TenancyModeLiteral = { required: 'required', none: 'none', system: 'system
 const VersionStatusLiteral = { preview: 'preview', stable: 'stable', deprecated: 'deprecated', sunset: 'sunset' };
 const AuthTypeLiteral = { jwt: 'jwt', 'api-key': 'api-key', none: 'none' };
 const DeploymentTargetLiteral = { single: 'single', split: 'split' };
+const OutboundAccessLiteral = { internal: 'internal', internet: 'internet' };
 /**
  * Returns true when a Zod schema has been wrapped with `.default(...)` (Zod v4
  * pattern). The wrapped schema exposes a `_def.typeName` of `ZodDefault`.
@@ -51,6 +52,7 @@ const ApiConfigSchema = z.object({
         perIp: z.string().optional(),
     }).optional(),
     deployment: z.object({ target: z.nativeEnum(DeploymentTargetLiteral) }).passthrough().optional(),
+    outboundAccess: z.nativeEnum(OutboundAccessLiteral).default(OutboundAccessLiteral.internal),
     observability: z.object({
         sloP99Ms: z.number().positive().optional(),
         alertOnErrorRate: z.number().min(0).max(1).optional(),
@@ -64,5 +66,5 @@ const ApiConfigSchema = z.object({
  */
 export function defineApi(config) {
     ApiConfigSchema.parse(config);
-    return { ...config, _kind: 'api' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'api' };
 }

package/dist/primitives/events.d.ts

@@ -1,4 +1,4 @@
-import type { EventVersion, SemverRange } from '../types/index.js';
+import type { EventVersion, SemverRange, OutboundAccess } from '../types/index.js';
 import type { DomainContext } from '../ctx/context.js';
 /** Configuration for an event definition. */
 export interface EventConfig {
@@ -22,6 +22,8 @@ export interface SubscriberConfig {
     semverRange: SemverRange;
     /** Concurrency limit for this subscriber's event processing. */
     concurrency?: number;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Handler receives typed event payload and full ctx. */
     handler: (payload: unknown, ctx: DomainContext) => Promise<void>;
 }

package/dist/primitives/events.js

@@ -15,6 +15,7 @@ const SubscriberConfigSchema = z.object({
     event: z.string().min(1),
     semverRange: z.string().min(1),
     concurrency: z.number().int().positive().optional(),
+    outboundAccess: z.enum(['internal', 'internet']).default('internal'),
     handler: z.function(),
 });
 /**
@@ -31,5 +32,5 @@ export function defineEvent(config) {
  */
 export function defineSubscriber(config) {
     SubscriberConfigSchema.parse(config);
-    return { ...config, _kind: 'subscriber' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'subscriber' };
 }

package/dist/primitives/schedule-job.d.ts

@@ -1,4 +1,5 @@
 import type { DomainContext } from '../ctx/context.js';
+import type { OutboundAccess } from '../types/index.js';
 /** Configuration for a schedule primitive (cron-triggered). */
 export interface ScheduleConfig {
     /** Machine-readable identifier. */
@@ -11,6 +12,8 @@ export interface ScheduleConfig {
     description?: string;
     /** Whether this schedule is enabled. Defaults to true. */
     enabled?: boolean;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Handler receives no input payload; uses ctx for all data access. */
     handler: (ctx: DomainContext) => Promise<void>;
 }
@@ -27,6 +30,8 @@ export interface JobConfig {
     maxRetries?: number;
     /** Visibility timeout in seconds for the SQS message. */
     visibilityTimeoutSeconds?: number;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Handler receives typed job payload and ctx. */
     handler: (payload: unknown, ctx: DomainContext) => Promise<void>;
 }

package/dist/primitives/schedule-job.js

@@ -4,12 +4,14 @@ const ScheduleConfigSchema = z.object({
     cron: z.string().min(1),
     description: z.string().optional(),
     enabled: z.boolean().optional(),
+    outboundAccess: z.enum(['internal', 'internet']).default('internal'),
     handler: z.function(),
 });
 const JobConfigSchema = z.object({
     id: z.string().min(1),
     maxRetries: z.number().int().nonnegative().optional(),
     visibilityTimeoutSeconds: z.number().int().positive().optional(),
+    outboundAccess: z.enum(['internal', 'internet']).default('internal'),
     handler: z.function(),
 });
 /**
@@ -18,7 +20,7 @@ const JobConfigSchema = z.object({
  */
 export function defineSchedule(config) {
     ScheduleConfigSchema.parse(config);
-    return { ...config, _kind: 'schedule' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'schedule' };
 }
 /**
  * Register a queue-triggered background job.
@@ -26,5 +28,5 @@ export function defineSchedule(config) {
  */
 export function defineJob(config) {
     JobConfigSchema.parse(config);
-    return { ...config, _kind: 'job' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'job' };
 }

package/dist/primitives/webhook.d.ts

@@ -1,4 +1,5 @@
 import type { DomainContext } from '../ctx/context.js';
+import type { OutboundAccess } from '../types/index.js';
 /** Supported webhook provider origins. */
 export type WebhookProvider = 'github' | 'stripe' | 'twilio' | 'custom';
 /** HMAC algorithm for signature verification. */
@@ -20,6 +21,8 @@ export interface WebhookConfig {
     path: string;
     /** HMAC signature verification. Required for all providers except 'custom'. */
     verification?: WebhookVerification;
+    /** Whether this handler may use NAT-backed public internet egress. Defaults to internal. */
+    outboundAccess?: OutboundAccess;
     /** Handler receives raw parsed body and full ctx. */
     handler: (body: unknown, ctx: DomainContext) => Promise<void>;
 }

package/dist/primitives/webhook.js

@@ -7,6 +7,7 @@ const WebhookConfigSchema = z.object({
         type: z.enum(['hmac-sha256', 'hmac-sha1']),
         secretRef: z.string().min(1),
     }).optional(),
+    outboundAccess: z.enum(['internal', 'internet']).default('internal'),
     handler: z.function(),
 });
 /**
@@ -15,5 +16,5 @@ const WebhookConfigSchema = z.object({
  */
 export function defineWebhook(config) {
     WebhookConfigSchema.parse(config);
-    return { ...config, _kind: 'webhook' };
+    return { ...config, outboundAccess: config.outboundAccess ?? 'internal', _kind: 'webhook' };
 }

package/dist/types/deployment.d.ts

@@ -11,6 +11,8 @@ export interface DeploymentConfig {
     /** CPU architecture. Defaults to arm64. */
     architecture?: 'arm64' | 'x86_64';
 }
+/** Controls whether a VPC-attached primitive can reach the public internet. */
+export type OutboundAccess = 'internal' | 'internet';
 /** Observability and alerting thresholds. */
 export interface ObservabilityConfig {
     /** P99 latency SLO in milliseconds. */

package/dist/types/index.d.ts

@@ -1,7 +1,7 @@
 export type { Actor, Tenant } from './tenant.js';
 export type { VersionStatus, SemverRange, ApiHandler, ApiVersion, EventVersion } from './versioning.js';
 export type { AuthConfig, RateLimitConfig, TenancyMode } from './auth.js';
-export type { DeploymentConfig, ObservabilityConfig, EnforcementMode } from './deployment.js';
+export type { DeploymentConfig, ObservabilityConfig, EnforcementMode, OutboundAccess } from './deployment.js';
 export type { DomainModuleConfig } from './enforcement.js';
 export { DomainModuleConfigSchema } from './enforcement.js';
 export type { AppError, Result, NotFoundError, ValidationError, ConflictError, UnauthorizedError, ForbiddenError, RateLimitedError, ExternalServiceError, InternalError } from './result.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mettlecast/domain-runtime",
-  "version": "0.2.52",
+  "version": "0.2.53",
   "type": "module",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",