@supacloud/cli 0.64.1 → 0.64.3

package/README.md

@@ -962,3 +962,5 @@ supacloud-cli gateway rebuild --ref abc123 --clean
 ```
 
 For server installation, SSH diagnostics, and tenant administration, use `@supacloud/admin`.
+
+<!-- Keep Reactive Integration coverage active for CLI package changes. -->

package/dist/index.js

@@ -213194,6 +213194,61 @@ var Delete = _Object_2({
   path: String3()
 });
 var Edit = Union3([Insert2, Update2, Delete]);
+// node_modules/@supacloud/delivery/src/worker-execution.ts
+var closed = { additionalProperties: false };
+var positive = (maximum) => Integer2({ minimum: 1, maximum });
+var WorkerExecutionGroupSchema = _Object_2({
+  name: String3({ pattern: "^[a-z][a-z0-9-]{0,47}$" }),
+  target: String3({ pattern: "^[a-z][a-z0-9-]{0,53}$" }),
+  workloadClass: Union3([Literal2("interactive"), Literal2("batch")]),
+  executor: Literal2("pgflow-queue"),
+  runtime: Literal2("bun"),
+  queue: String3({ pattern: "^scw_[a-z0-9_]{1,40}$" }),
+  taskKey: String3({ pattern: "^[a-z][a-z0-9_.-]{0,99}$" }),
+  definitionVersion: String3({ pattern: "^[1-9][0-9]{0,8}$" }),
+  replicas: positive(16),
+  maxReplicas: positive(16),
+  concurrencyPerReplica: positive(32),
+  resources: _Object_2({
+    cpuLimit: Number3({ minimum: 0.1, maximum: 64, multipleOf: 0.1 }),
+    memoryLimitMiB: Integer2({ minimum: 64, maximum: 262144 })
+  }, closed),
+  database: _Object_2({
+    engineConnectionsPerReplica: positive(16),
+    handlerConnectionsPerReplica: positive(16)
+  }, closed),
+  lifecycle: _Object_2({
+    executionTimeoutSeconds: positive(3500),
+    visibilityTimeoutSeconds: Integer2({ minimum: 15, maximum: 3600 }),
+    shutdownGraceSeconds: positive(300)
+  }, closed),
+  retry: _Object_2({ maxAttempts: Integer2({ minimum: 1, maximum: 10 }) }, closed),
+  admission: _Object_2({ maxOutstandingOperations: positive(1e6) }, closed)
+}, closed);
+var WorkerExecutionSchema = _Object_2({
+  groups: _Array_(WorkerExecutionGroupSchema, { minItems: 1, maxItems: 32 })
+}, closed);
+function parseWorkerExecutionGroup(value) {
+  if (!Check3(WorkerExecutionGroupSchema, value) || value.replicas > value.maxReplicas || !value.queue.endsWith(`_v${value.definitionVersion}`) || value.lifecycle.visibilityTimeoutSeconds < value.lifecycle.executionTimeoutSeconds + value.lifecycle.shutdownGraceSeconds + 30) {
+    throw new Error("WORKER_EXECUTION_INVALID");
+  }
+  return structuredClone(value);
+}
+function validateWorkerExecution(groups) {
+  const names = new Set, targets = new Set, queues = new Set, routes = new Set;
+  for (const candidate of groups) {
+    const group = parseWorkerExecutionGroup(candidate);
+    const route = `${group.taskKey}:${group.definitionVersion}`;
+    if (names.has(group.name) || targets.has(group.target) || queues.has(group.queue) || routes.has(route)) {
+      throw new Error("WORKER_EXECUTION_CONFLICT");
+    }
+    names.add(group.name);
+    targets.add(group.target);
+    queues.add(group.queue);
+    routes.add(route);
+  }
+}
+
 // node_modules/@supacloud/delivery/src/delivery-schema.ts
 var objectOptions = { additionalProperties: false };
 var reference = String3({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z][A-Za-z0-9_.:/-]*$" });
@@ -213206,6 +213261,7 @@ var DeliveryFilePathSchema = String3({
 });
 var DeliveryOptionsSchema = _Object_2({
   version: Literal2(1),
+  execution: Optional2(WorkerExecutionSchema),
   targets: Optional2(_Array_(_Object_2({
     name: String3({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
     kind,
@@ -213278,6 +213334,7 @@ var DeliveryTargetSchema = _Object_2({
   name: String3(),
   kind,
   isolation,
+  execution: Optional2(WorkerExecutionGroupSchema),
   roots: _Array_(String3()),
   modules: _Array_(_Object_2({
     name: String3(),
@@ -213376,7 +213433,7 @@ async function readBoundedOwned(root, path, maximum) {
 }
 
 // node_modules/@supacloud/delivery/src/delivery-build-schema.ts
-var closed = { additionalProperties: false };
+var closed2 = { additionalProperties: false };
 var digest2 = String3({ pattern: "^[a-f0-9]{64}$" });
 var DeliveryObjectSchema = _Object_2({
   name: String3({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
@@ -213393,8 +213450,8 @@ var DeliveryObjectSchema = _Object_2({
     path: DeliveryFilePathSchema,
     sha256: digest2,
     bytes: Integer2({ minimum: 0 })
-  }, closed), { minItems: 1 })
-}, closed);
+  }, closed2), { minItems: 1 })
+}, closed2);
 var DeliveryBuildManifestSchema = _Object_2({
   schemaVersion: Literal2(1),
   producer: Literal2("@supacloud/compiler/delivery-build-v1"),
@@ -213405,9 +213462,9 @@ var DeliveryBuildManifestSchema = _Object_2({
     method: String3(),
     path: String3(),
     target: String3()
-  }, closed)),
-  jobs: _Array_(_Object_2({ name: String3(), target: String3() }, closed))
-}, closed);
+  }, closed2)),
+  jobs: _Array_(_Object_2({ name: String3(), target: String3() }, closed2))
+}, closed2);
 var resultFields = {
   diagnostics: _Array_(DeliveryDiagnosticSchema),
   written: _Array_(String3()),
@@ -213421,13 +213478,13 @@ var DeliveryBuildResultSchema = Union3([
     changedTargets: _Array_(String3()),
     unchangedTargets: _Array_(String3()),
     removedTargets: _Array_(String3())
-  }, closed),
+  }, closed2),
   _Object_2({
     ...resultFields,
     written: _Array_(String3(), { maxItems: 0 }),
     ok: Literal2(false),
     manifest: Null2()
-  }, closed)
+  }, closed2)
 ]);
 function deliveryObjectDigest(object) {
   return digest(canonical({
@@ -213439,6 +213496,12 @@ function deliveryObjectDigest(object) {
 function parseDeliveryBuildManifest(value) {
   if (!Check3(DeliveryBuildManifestSchema, value))
     throw new Error("Invalid delivery build manifest.");
+  validateWorkerExecution(value.plan.targets.flatMap((target) => target.execution ? [target.execution] : []));
+  for (const target of value.plan.targets) {
+    if (target.execution && (target.kind !== "jobs" || target.isolation !== "process" || target.execution.target !== target.name || target.jobs.length !== 1 || target.jobs[0]?.name !== target.execution.taskKey || value.objects.find((object) => object.name === target.name)?.entryKind !== "bun-worker-application")) {
+      throw new Error("Invalid delivery execution binding.");
+    }
+  }
   if (new Set(value.objects.map((item) => item.name)).size !== value.objects.length) {
     throw new Error("Duplicate delivery object owner.");
   }
@@ -213516,7 +213579,6 @@ async function readVerifiedDeliveryFiles(root, object, target, selectedPaths) {
   }
   return retained;
 }
-
 // node_modules/@supacloud/delivery/src/application-release.ts
 var ApplicationIdSchema = String3({ pattern: "^[A-Za-z0-9_-]{1,64}$" });
 var ApplicationReleaseIdSchema = String3({ pattern: "^[a-f0-9]{64}$" });
@@ -213531,7 +213593,8 @@ var ApplicationReleaseRecordSchema = _Object_2({
     name: String3({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
     object_id: ApplicationReleaseIdSchema,
     kind: Union3([Literal2("http"), Literal2("worker")]),
-    entrypoint: Literal2("bundle/index.js")
+    entrypoint: Literal2("bundle/index.js"),
+    execution: Optional2(WorkerExecutionGroupSchema)
   }, { additionalProperties: false }), { minItems: 1, maxItems: 32 })
 }, { additionalProperties: false });
 function applicationReleaseId(projectRef, applicationId, manifestSha256) {
@@ -213546,6 +213609,10 @@ function parseApplicationReleaseRecord(candidate) {
   if (!Check3(ApplicationReleaseRecordSchema, candidate) || applicationReleaseId(candidate.project_ref, candidate.application_id, candidate.manifest_sha256) !== candidate.release_id || !Number.isFinite(Date.parse(candidate.created_at)) || new Date(candidate.created_at).toISOString() !== candidate.created_at || new Set(candidate.targets.map((target) => target.name)).size !== candidate.targets.length) {
     throw new Error("Invalid application release record.");
   }
+  validateWorkerExecution(candidate.targets.flatMap((target) => target.execution ? [target.execution] : []));
+  if (candidate.targets.some((target) => target.execution && (target.kind !== "worker" || target.execution.target !== target.name))) {
+    throw new Error("Invalid application execution binding.");
+  }
   return candidate;
 }
 
@@ -213603,7 +213670,9 @@ var APPLICATION_RESERVED_ENVIRONMENT_NAMES = new Set([
   "SUPACLOUD_ACTIVATION_ID",
   "SUPACLOUD_ENVIRONMENT_ID",
   "SUPACLOUD_TARGET",
-  "SUPACLOUD_OBJECT_ID"
+  "SUPACLOUD_OBJECT_ID",
+  "SUPACLOUD_WORKER_EXECUTION",
+  "SUPACLOUD_WORKER_REPLICA"
 ]);
 function assertTargets(targets) {
   const names = new Set, usedHosts = new Set;
@@ -239852,12 +239921,77 @@ var init_value2 = __esm2(() => {
   init_repair2();
   init_shared();
 });
+function parseWorkerExecutionGroup2(value) {
+  if (!Check22(WorkerExecutionGroupSchema2, value) || value.replicas > value.maxReplicas || !value.queue.endsWith(`_v${value.definitionVersion}`) || value.lifecycle.visibilityTimeoutSeconds < value.lifecycle.executionTimeoutSeconds + value.lifecycle.shutdownGraceSeconds + 30) {
+    throw new Error("WORKER_EXECUTION_INVALID");
+  }
+  return structuredClone(value);
+}
+function validateWorkerExecution2(groups) {
+  const names = new Set, targets = new Set, queues = new Set, routes = new Set;
+  for (const candidate of groups) {
+    const group = parseWorkerExecutionGroup2(candidate);
+    const route = `${group.taskKey}:${group.definitionVersion}`;
+    if (names.has(group.name) || targets.has(group.target) || queues.has(group.queue) || routes.has(route)) {
+      throw new Error("WORKER_EXECUTION_CONFLICT");
+    }
+    names.add(group.name);
+    targets.add(group.target);
+    queues.add(group.queue);
+    routes.add(route);
+  }
+}
+var closed3;
+var positive2 = (maximum) => Integer4({ minimum: 1, maximum });
+var WorkerExecutionGroupSchema2;
+var WorkerExecutionSchema2;
+var init_worker_execution = __esm2(() => {
+  init_build();
+  init_value2();
+  closed3 = { additionalProperties: false };
+  WorkerExecutionGroupSchema2 = _Object_3({
+    name: String22({ pattern: "^[a-z][a-z0-9-]{0,47}$" }),
+    target: String22({ pattern: "^[a-z][a-z0-9-]{0,53}$" }),
+    workloadClass: Union4([Literal3("interactive"), Literal3("batch")]),
+    executor: Literal3("pgflow-queue"),
+    runtime: Literal3("bun"),
+    queue: String22({ pattern: "^scw_[a-z0-9_]{1,40}$" }),
+    taskKey: String22({ pattern: "^[a-z][a-z0-9_.-]{0,99}$" }),
+    definitionVersion: String22({ pattern: "^[1-9][0-9]{0,8}$" }),
+    replicas: positive2(16),
+    maxReplicas: positive2(16),
+    concurrencyPerReplica: positive2(32),
+    resources: _Object_3({
+      cpuLimit: Number22({ minimum: 0.1, maximum: 64, multipleOf: 0.1 }),
+      memoryLimitMiB: Integer4({ minimum: 64, maximum: 262144 })
+    }, closed3),
+    database: _Object_3({
+      engineConnectionsPerReplica: positive2(16),
+      handlerConnectionsPerReplica: positive2(16)
+    }, closed3),
+    lifecycle: _Object_3({
+      executionTimeoutSeconds: positive2(3500),
+      visibilityTimeoutSeconds: Integer4({ minimum: 15, maximum: 3600 }),
+      shutdownGraceSeconds: positive2(300)
+    }, closed3),
+    retry: _Object_3({ maxAttempts: Integer4({ minimum: 1, maximum: 10 }) }, closed3),
+    admission: _Object_3({ maxOutstandingOperations: positive2(1e6) }, closed3)
+  }, closed3);
+  WorkerExecutionSchema2 = _Object_3({
+    groups: _Array_2(WorkerExecutionGroupSchema2, { minItems: 1, maxItems: 32 })
+  }, closed3);
+});
 function parseDeliveryOptions(value) {
   if (value === undefined)
     return { version: 1 };
   if (!Check22(DeliveryOptionsSchema2, value))
     throw new DeliveryConfigurationError;
   const migrations = value.build?.migrations ?? [];
+  try {
+    validateWorkerExecution2(value.execution?.groups ?? []);
+  } catch {
+    throw new DeliveryConfigurationError;
+  }
   if (new Set(migrations.map((item) => item.version)).size !== migrations.length || new Set(migrations.map((item) => item.source)).size !== migrations.length || migrations.some((item) => BigInt(item.version) > 9223372036854775807n || !/\.sql$/i.test(item.source) || item.source.split("/").includes("node_modules"))) {
     throw new DeliveryConfigurationError;
   }
@@ -239885,6 +240019,7 @@ var DeliveryConfigurationError;
 var init_delivery_schema = __esm2(() => {
   init_build();
   init_value2();
+  init_worker_execution();
   objectOptions2 = { additionalProperties: false };
   reference2 = String22({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z][A-Za-z0-9_.:/-]*$" });
   references2 = _Array_2(reference2, { uniqueItems: true });
@@ -239896,6 +240031,7 @@ var init_delivery_schema = __esm2(() => {
   });
   DeliveryOptionsSchema2 = _Object_3({
     version: Literal3(1),
+    execution: Optional4(WorkerExecutionSchema2),
     targets: Optional4(_Array_2(_Object_3({
       name: String22({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
       kind: kind3,
@@ -239968,6 +240104,7 @@ var init_delivery_schema = __esm2(() => {
     name: String22(),
     kind: kind3,
     isolation: isolation2,
+    execution: Optional4(WorkerExecutionGroupSchema2),
     roots: _Array_2(String22()),
     modules: _Array_2(_Object_3({
       name: String22(),
@@ -240175,6 +240312,12 @@ function deliveryObjectDigest2(object) {
 function parseDeliveryBuildManifest2(value) {
   if (!Check22(DeliveryBuildManifestSchema2, value))
     throw new Error("Invalid delivery build manifest.");
+  validateWorkerExecution2(value.plan.targets.flatMap((target) => target.execution ? [target.execution] : []));
+  for (const target of value.plan.targets) {
+    if (target.execution && (target.kind !== "jobs" || target.isolation !== "process" || target.execution.target !== target.name || target.jobs.length !== 1 || target.jobs[0]?.name !== target.execution.taskKey || value.objects.find((object) => object.name === target.name)?.entryKind !== "bun-worker-application")) {
+      throw new Error("Invalid delivery execution binding.");
+    }
+  }
   if (new Set(value.objects.map((item) => item.name)).size !== value.objects.length) {
     throw new Error("Duplicate delivery object owner.");
   }
@@ -240204,7 +240347,7 @@ function parseDeliveryBuildResult(value) {
     parseDeliveryBuildManifest2(value.manifest);
   return value;
 }
-var closed2;
+var closed22;
 var digest22;
 var DeliveryObjectSchema2;
 var DeliveryBuildManifestSchema2;
@@ -240215,7 +240358,8 @@ var init_delivery_build_schema = __esm2(() => {
   init_value2();
   init_delivery_schema();
   init_delivery_files();
-  closed2 = { additionalProperties: false };
+  init_worker_execution();
+  closed22 = { additionalProperties: false };
   digest22 = String22({ pattern: "^[a-f0-9]{64}$" });
   DeliveryObjectSchema2 = _Object_3({
     name: String22({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
@@ -240232,8 +240376,8 @@ var init_delivery_build_schema = __esm2(() => {
       path: DeliveryFilePathSchema2,
       sha256: digest22,
       bytes: Integer4({ minimum: 0 })
-    }, closed2), { minItems: 1 })
-  }, closed2);
+    }, closed22), { minItems: 1 })
+  }, closed22);
   DeliveryBuildManifestSchema2 = _Object_3({
     schemaVersion: Literal3(1),
     producer: Literal3("@supacloud/compiler/delivery-build-v1"),
@@ -240244,9 +240388,9 @@ var init_delivery_build_schema = __esm2(() => {
       method: String22(),
       path: String22(),
       target: String22()
-    }, closed2)),
-    jobs: _Array_2(_Object_3({ name: String22(), target: String22() }, closed2))
-  }, closed2);
+    }, closed22)),
+    jobs: _Array_2(_Object_3({ name: String22(), target: String22() }, closed22))
+  }, closed22);
   resultFields2 = {
     diagnostics: _Array_2(DeliveryDiagnosticSchema2),
     written: _Array_2(String22()),
@@ -240260,13 +240404,13 @@ var init_delivery_build_schema = __esm2(() => {
       changedTargets: _Array_2(String22()),
       unchangedTargets: _Array_2(String22()),
       removedTargets: _Array_2(String22())
-    }, closed2),
+    }, closed22),
     _Object_3({
       ...resultFields2,
       written: _Array_2(String22(), { maxItems: 0 }),
       ok: Literal3(false),
       manifest: Null3()
-    }, closed2)
+    }, closed22)
   ]);
 });
 function createContextPack(graph, subject) {
@@ -240621,7 +240765,7 @@ function serializedExecutionSnapshot(graph) {
   parseExecutionSnapshot(wire);
   return json;
 }
-var closed22;
+var closed32;
 var text2;
 var kind22;
 var SnapshotSchema;
@@ -240632,7 +240776,7 @@ var init_execution_snapshot = __esm2(() => {
   init_build();
   init_value2();
   init_inspect();
-  closed22 = { additionalProperties: false };
+  closed32 = { additionalProperties: false };
   text2 = String22({ minLength: 1, maxLength: 512, pattern: "^[^\\u0000-\\u001f\\u007f]+$" });
   kind22 = Union4([Literal3("route"), Literal3("command"), Literal3("job")]);
   SnapshotSchema = _Object_3({
@@ -240643,12 +240787,12 @@ var init_execution_snapshot = __esm2(() => {
       name: text2,
       command: Optional4(text2),
       stages: _Array_2(text2)
-    }, closed22)),
-    commandAliases: _Array_2(_Object_3({ module: text2, name: text2, alias: text2 }, closed22)),
+    }, closed32)),
+    commandAliases: _Array_2(_Object_3({ module: text2, name: text2, alias: text2 }, closed32)),
     contexts: _Array_2(_Object_3({
       subject: text2,
       aliases: _Array_2(text2),
-      modules: _Array_2(_Object_3({ name: text2, file: Optional4(text2) }, closed22)),
+      modules: _Array_2(_Object_3({ name: text2, file: Optional4(text2) }, closed32)),
       files: _Array_2(text2),
       diagnostics: _Array_2(_Object_3({
         code: text2,
@@ -240658,10 +240802,10 @@ var init_execution_snapshot = __esm2(() => {
         repair: Optional4(_Object_3({
           type: text2,
           readiness: Union4([Literal3("preview"), Literal3("input-required"), Literal3("manual")])
-        }, closed22))
-      }, closed22))
-    }, closed22))
-  }, closed22);
+        }, closed32))
+      }, closed32))
+    }, closed32))
+  }, closed32);
   indices = _Array_2(Integer4({ minimum: 0 }));
   WireSnapshotSchema = _Object_3({
     version: Literal3(1),
@@ -240676,8 +240820,8 @@ var init_execution_snapshot = __esm2(() => {
       modules: indices,
       files: indices,
       diagnostics: indices
-    }, closed22))
-  }, closed22);
+    }, closed32))
+  }, closed32);
 });
 function safeSourceFile(file) {
   return !file.startsWith("/") && !file.startsWith("\\") && !/^[A-Za-z][A-Za-z0-9+.-]*:/.test(file) && !file.split(/[\\/]/).includes("..");
@@ -240713,7 +240857,7 @@ var APPLICATION_DEVELOPMENT_SCHEMA = "supacloud.application-development.v1";
 var APPLICATION_DEVELOPMENT_ARCHIVE_MAX_BYTES = 524288;
 var APPLICATION_DEVELOPMENT_LIMITS;
 var DevelopmentContractError;
-var closed3;
+var closed4;
 var text22;
 var texts;
 var count;
@@ -240746,13 +240890,13 @@ var init_application_development = __esm2(() => {
       this.name = "DevelopmentContractError";
     }
   };
-  closed3 = { additionalProperties: false };
+  closed4 = { additionalProperties: false };
   text22 = String22({ minLength: 1, maxLength: 512, pattern: "^[^\\u0000-\\u001f\\u007f]+$" });
   texts = _Array_2(text22);
   count = Integer4({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });
   mode = Union4([Literal3("required"), Literal3("none")]);
   operations2 = _Array_2(Union4([Literal3("read"), Literal3("write"), Literal3("publish"), Literal3("consume")]));
-  resourceUse = _Object_3({ resource: text22, operations: operations2 }, closed3);
+  resourceUse = _Object_3({ resource: text22, operations: operations2 }, closed4);
   schemaKind = Optional4(Union4([Literal3("opaque"), Literal3("declared")]));
   stage = Union4([
     Union4([Literal3("commandExecutor"), Literal3("jobExecutor"), Literal3("authorize"), Literal3("idempotency"), Literal3("transaction"), Literal3("handler"), Literal3("audit")]),
@@ -240777,7 +240921,7 @@ var init_application_development = __esm2(() => {
       jobs: texts,
       queries: texts,
       resources: texts
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.modules }),
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.modules }),
     routes: _Array_2(_Object_3({
       module: text22,
       method: Union4([Literal3("GET"), Literal3("POST"), Literal3("PUT"), Literal3("PATCH"), Literal3("DELETE"), Literal3("HEAD"), Literal3("OPTIONS")]),
@@ -240793,8 +240937,8 @@ var init_application_development = __esm2(() => {
         headers: schemaKind,
         cookie: schemaKind,
         response: schemaKind
-      }, closed3))
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.routes }),
+      }, closed4))
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.routes }),
     commands: _Array_2(_Object_3({
       module: text22,
       name: text22,
@@ -240803,28 +240947,28 @@ var init_application_development = __esm2(() => {
       idempotency: mode,
       audit: Optional4(text22),
       resources: _Array_2(resourceUse)
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.commands }),
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.commands }),
     jobs: _Array_2(_Object_3({
       module: text22,
       name: text22,
       mode: Optional4(Union4([Literal3("task"), Literal3("workflow")])),
       resources: _Array_2(resourceUse)
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.jobs }),
-    resources: _Array_2(_Object_3({ name: text22, kind: Union4([Literal3("database"), Literal3("bucket"), Literal3("queue"), Literal3("config"), Literal3("secret")]) }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.resources }),
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.jobs }),
+    resources: _Array_2(_Object_3({ name: text22, kind: Union4([Literal3("database"), Literal3("bucket"), Literal3("queue"), Literal3("config"), Literal3("secret")]) }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.resources }),
     resourceUses: _Array_2(_Object_3({
       module: text22,
       owner: text22,
       ownerKind: Union4([Literal3("command"), Literal3("job")]),
       resource: text22,
       operations: operations2
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.resourceUses }),
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.resourceUses }),
     executionPlans: _Array_2(_Object_3({
       module: text22,
       kind: Union4([Literal3("route"), Literal3("command"), Literal3("job")]),
       name: text22,
       command: Optional4(text22),
       stages: _Array_2(stage)
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.plans }),
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.plans }),
     diagnostics: _Array_2(_Object_3({
       code: text22,
       severity: Union4([Literal3("error"), Literal3("warn")]),
@@ -240833,8 +240977,8 @@ var init_application_development = __esm2(() => {
       repair: Optional4(_Object_3({
         type: Union4([Literal3("set_command_mode"), Literal3("add_module_import"), Literal3("add_provider"), Literal3("mark_optional_dependency"), Literal3("change_provider_scope"), Literal3("add_command_permission"), Literal3("add_route_parameter_binding"), Literal3("remove_route_body_binding")]),
         readiness: Union4([Literal3("preview"), Literal3("input-required"), Literal3("manual")])
-      }, closed3))
-    }, closed3), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.diagnostics }),
+      }, closed4))
+    }, closed4), { maxItems: APPLICATION_DEVELOPMENT_LIMITS.diagnostics }),
     omitted: _Object_3({
       modules: count,
       providers: count,
@@ -240845,7 +240989,7 @@ var init_application_development = __esm2(() => {
       resourceUses: count,
       plans: count,
       diagnostics: count
-    }, closed3),
+    }, closed4),
     limits: _Object_3({
       outputBytes: Literal3(APPLICATION_DEVELOPMENT_LIMITS.outputBytes),
       modules: Literal3(APPLICATION_DEVELOPMENT_LIMITS.modules),
@@ -240857,8 +241001,8 @@ var init_application_development = __esm2(() => {
       resourceUses: Literal3(APPLICATION_DEVELOPMENT_LIMITS.resourceUses),
       plans: Literal3(APPLICATION_DEVELOPMENT_LIMITS.plans),
       diagnostics: Literal3(APPLICATION_DEVELOPMENT_LIMITS.diagnostics)
-    }, closed3)
-  }, closed3);
+    }, closed4)
+  }, closed4);
 });
 function parseApplicationDevelopmentContext(input) {
   try {
@@ -241038,6 +241182,7 @@ var init_application_release = __esm2(() => {
   init_build();
   init_value2();
   init_delivery_files();
+  init_worker_execution();
   ApplicationIdSchema3 = String22({ pattern: "^[A-Za-z0-9_-]{1,64}$" });
   ApplicationReleaseIdSchema3 = String22({ pattern: "^[a-f0-9]{64}$" });
   ApplicationReleaseRecordSchema3 = _Object_3({
@@ -241051,7 +241196,8 @@ var init_application_release = __esm2(() => {
       name: String22({ pattern: "^[a-z][a-z0-9-]{0,62}$" }),
       object_id: ApplicationReleaseIdSchema3,
       kind: Union4([Literal3("http"), Literal3("worker")]),
-      entrypoint: Literal3("bundle/index.js")
+      entrypoint: Literal3("bundle/index.js"),
+      execution: Optional4(WorkerExecutionGroupSchema2)
     }, { additionalProperties: false }), { minItems: 1, maxItems: 32 })
   }, { additionalProperties: false });
 });
@@ -241122,7 +241268,9 @@ var init_application_configuration = __esm2(() => {
     "SUPACLOUD_ACTIVATION_ID",
     "SUPACLOUD_ENVIRONMENT_ID",
     "SUPACLOUD_TARGET",
-    "SUPACLOUD_OBJECT_ID"
+    "SUPACLOUD_OBJECT_ID",
+    "SUPACLOUD_WORKER_EXECUTION",
+    "SUPACLOUD_WORKER_REPLICA"
   ]);
 });
 var ApplicationActivationIdSchema3;
@@ -241229,6 +241377,7 @@ var init_delivery_migration_archive = __esm2(() => {
 var init_delivery_migration_plan = () => {};
 var init_src = __esm2(() => {
   init_delivery_artifact();
+  init_worker_execution();
   init_application_activation();
   init_application_release();
   init_application_configuration();
@@ -245166,6 +245315,17 @@ function createDeliveryPlan(graph, input) {
       }
     }
   }
+  for (const group of options.execution?.groups ?? []) {
+    const target = targets.get(group.target);
+    if (!target || target.kind !== "jobs" || target.isolation !== "process" || target.jobs.length !== 1 || target.jobs[0]?.name !== group.taskKey || !options.build?.workerApplications?.some((item) => item.target === group.target)) {
+      fail("delivery-execution-binding-invalid", `Execution group "${group.name}" requires one matching compiled Job and a Worker host.`, "Bind one versioned queue/task to one process-isolated jobs target with build.workerApplications.");
+    } else {
+      target.execution = group;
+    }
+  }
+  if ([...targets.values()].reduce((count, target) => count + (target.execution?.replicas ?? 1), 0) > 32) {
+    fail("delivery-execution-replica-limit", "A release supports at most 32 runtime targets including replicas.", "Reduce the replica count or split independent applications.");
+  }
   const canonicalDiagnostics = [...new Map(diagnostics.map((item) => [JSON.stringify(item), item])).values()].sort((a, b) => compare2(JSON.stringify(a), JSON.stringify(b)));
   if (canonicalDiagnostics.some((item) => item.severity === "error")) {
     return parseDeliveryPlanResult({ ok: false, plan: null, diagnostics: canonicalDiagnostics, written: [] });
@@ -245244,7 +245404,7 @@ function renderDeliveryTarget(graph, target, options) {
 init_delivery_files2();
 init_build();
 init_value2();
-var closed4 = { additionalProperties: false };
+var closed5 = { additionalProperties: false };
 var requestSchema = _Object_3({
   parentPid: Integer4({ minimum: 1 }),
   name: String22(),
@@ -245252,15 +245412,15 @@ var requestSchema = _Object_3({
   project: String22(),
   generatedDirectory: String22(),
   options: DeliveryOptionsSchema2
-}, closed4);
+}, closed5);
 var responseSchema2 = Union4([
   _Object_3({
     ok: Literal3(true),
     files: _Array_2(Tuple3([DeliveryFilePathSchema2, String22({ pattern: "^[A-Za-z0-9+/]*={0,2}$" })])),
     inputs: _Array_2(Tuple3([String22(), String22({ pattern: "^[a-f0-9]{64}$" })])),
     runtimeImports: _Array_2(String22())
-  }, closed4),
-  _Object_3({ ok: Literal3(false) }, closed4)
+  }, closed5),
+  _Object_3({ ok: Literal3(false) }, closed5)
 ]);
 function parseDeliveryBundleResponse(input) {
   if (!Check22(responseSchema2, input))
@@ -245489,6 +245649,7 @@ function renderDeliveryWorkerEntry(generatedDirectory, hostPath) {
   const specifier = relativeImportPath(generatedDirectory, hostPath);
   return `
 import deliveryProcess from "node:process";
+import { isDeepStrictEqual as deliveryPolicyEqual } from "node:util";
 import { createDeliveryWorker } from ${JSON.stringify(specifier)};
 ${renderDeliveryRuntimeIdentity()}
 
@@ -245496,6 +245657,8 @@ interface DeliveryWorkerHost {
   start(): void | Promise<void>;
   close(): void | Promise<void>;
   failure?: Promise<never>;
+  execution?: unknown;
+  health?(): Promise<{ ready: boolean; active: number; completed: number; failed: number; timedOut: number }>;
 }
 
 {
@@ -245507,6 +245670,7 @@ interface DeliveryWorkerHost {
   let closing: Promise<void> | undefined;
   let deadline: ReturnType<typeof setTimeout> | undefined;
   let keepAlive: ReturnType<typeof setInterval> | undefined;
+  let healthPending = false;
   const finish = (failed: boolean) => {
     clearTimeout(deadline);
     clearInterval(keepAlive);
@@ -245567,6 +245731,13 @@ interface DeliveryWorkerHost {
     const candidate = await createHost(createCompiledModules(), { signal: lifecycle.signal });
     if (!candidate || typeof candidate.close !== "function") throw new Error("Invalid delivery worker host.");
     host = candidate;
+    const execution = deliveryProcess.env.SUPACLOUD_WORKER_EXECUTION;
+    if (execution) {
+      const expected: unknown = JSON.parse(Buffer.from(execution, "base64").toString("utf8"));
+      if (!deliveryPolicyEqual(host.execution, expected) || typeof host.health !== "function" || !host.failure) {
+        throw new Error("Delivery worker execution policy was not adopted.");
+      }
+    }
     if (typeof host.start !== "function") throw new Error("Invalid delivery worker host.");
     if (host.failure !== undefined) {
       if (!host.failure || typeof host.failure.then !== "function") throw new Error("Invalid worker failure signal.");
@@ -245578,7 +245749,18 @@ interface DeliveryWorkerHost {
       await finishShutdown();
     } else {
       running = true;
-      keepAlive = setInterval(() => {}, 1000);
+      const health = async () => {
+        if (!execution || !host?.health || healthPending || lifecycle.signal.aborted) return;
+        healthPending = true;
+        try {
+          const status = await host.health();
+          console.log(JSON.stringify({ event: "delivery-worker-health", identity, observedAt: new Date().toISOString(), ...status }));
+        } catch {
+          console.log(JSON.stringify({ event: "delivery-worker-health", identity, observedAt: new Date().toISOString(), ready: false }));
+        } finally { healthPending = false; }
+      };
+      keepAlive = setInterval(() => { void health(); }, execution ? 5000 : 1000);
+      await health();
       console.log(JSON.stringify({ event: "delivery-worker-started", ...(identity ? { identity } : {}) }));
     }
   } catch {
@@ -246666,7 +246848,7 @@ var starter_metadata_default = {
   generatedBy: "supacloud/starter-metadata-v1",
   packages: {
     compiler: {
-      version: "0.31.2"
+      version: "0.32.0"
     },
     app: {
       version: "0.22.0",
@@ -254397,7 +254579,7 @@ function registerRemoteDevTools(server2, options = {}) {
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.64.1",
+  version: "0.64.3",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -254432,14 +254614,14 @@ var package_default = {
   },
   dependencies: {
     "@sinclair/typebox": "^0.34.52",
-    "@supacloud/compiler": "^0.31.2",
-    "@supacloud/delivery": "0.4.0",
+    "@supacloud/compiler": "^0.32.0",
+    "@supacloud/delivery": "0.5.0",
     "@supacloud/db": "^0.2.0",
     fflate: "^0.8.3",
     typebox: "1.3.34"
   },
   overrides: {
-    "@supacloud/delivery": "0.4.0"
+    "@supacloud/delivery": "0.5.0"
   },
   devDependencies: {
     "@supacloud/elysia": "^0.23.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.64.1",
+  "version": "0.64.3",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -35,14 +35,14 @@
   },
   "dependencies": {
     "@sinclair/typebox": "^0.34.52",
-    "@supacloud/compiler": "^0.31.2",
-    "@supacloud/delivery": "0.4.0",
+    "@supacloud/compiler": "^0.32.0",
+    "@supacloud/delivery": "0.5.0",
     "@supacloud/db": "^0.2.0",
     "fflate": "^0.8.3",
     "typebox": "1.3.34"
   },
   "overrides": {
-    "@supacloud/delivery": "0.4.0"
+    "@supacloud/delivery": "0.5.0"
   },
   "devDependencies": {
     "@supacloud/elysia": "^0.23.1",