@vxil/cli 0.4.3 → 0.5.1

package/dist/_vxil-feature-configs.d.ts

@@ -6,6 +6,12 @@ export declare const RESERVED_CREDIT_TYPES: ReadonlySet<string>;
  *  of which is restricted to internal platform machinery). */
 export declare function isReservedCreditType(creditType: string): boolean;
 export declare const NOTIFICATION_TEMPLATE_PLACEHOLDERS: Readonly<Record<string, readonly string[]>>;
+/** Placeholders that are SLOTS in the BODY parts only — the renderer splits
+ * `html`/`text` on them (templates.ts `CTA_SLOT`) but the subject goes through
+ * the plain interpolator, where the same token is just a data key that does not
+ * exist and renders EMPTY. Rejected in `subject` for exactly the reason the
+ * whole allow-list exists: a silent empty render in a live email. */
+export declare const NOTIFICATION_TEMPLATE_SLOT_PLACEHOLDERS: Readonly<Record<string, readonly string[]>>;
 /** Per-override caps (D4). Bodies are emails, not documents. */
 export declare const NOTIF_OVERRIDE_SUBJECT_MAX = 500;
 export declare const NOTIF_OVERRIDE_BODY_MAX = 20000;
@@ -54,7 +60,7 @@ export declare const NotificationsConfigSchema: import("@sinclair/typebox").TObj
     templates: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         allowOverride: import("@sinclair/typebox").TBoolean;
         overrides: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
-            subject: import("@sinclair/typebox").TString;
+            subject: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
             html: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
             text: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         }>>>>;
@@ -203,9 +209,11 @@ export declare const AuthConfigSchema: import("@sinclair/typebox").TObject<{
     emailVerification: import("@sinclair/typebox").TObject<{
         required: import("@sinclair/typebox").TBoolean;
     }>;
-    magicLink: import("@sinclair/typebox").TObject<{
+    magicLink: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         tokenTtlMinutes: import("@sinclair/typebox").TInteger;
-    }>;
+        resendCooldownSec: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>>;
+    registryAdopt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
     otp: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         enabled: import("@sinclair/typebox").TBoolean;
         codeTtlMinutes: import("@sinclair/typebox").TInteger;
@@ -275,6 +283,11 @@ export declare const WebhooksConfigSchema: import("@sinclair/typebox").TObject<{
     enabled: import("@sinclair/typebox").TBoolean;
     maxSubscriptions: import("@sinclair/typebox").TInteger;
     maxSources: import("@sinclair/typebox").TInteger;
+    alerts: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        enabled: import("@sinclair/typebox").TBoolean;
+        minLevel: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"warn">, import("@sinclair/typebox").TLiteral<"error">]>;
+        digestMinutes: import("@sinclair/typebox").TInteger;
+    }>>;
 }>;
 export type WebhooksConfig = Static<typeof WebhooksConfigSchema>;
 export declare const CommentsConfigSchema: import("@sinclair/typebox").TObject<{
@@ -554,6 +567,7 @@ export declare const PaymentsConfigSchema: import("@sinclair/typebox").TObject<{
         enforcePeriodEnd: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
             slackHours: import("@sinclair/typebox").TInteger;
         }>>;
+        unmappedProduct: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"error">, import("@sinclair/typebox").TLiteral<"ignore">]>>;
     }>>;
 }>;
 export type PaymentsConfig = Static<typeof PaymentsConfigSchema>;
@@ -579,9 +593,8 @@ export declare const FunctionsConfigSchema: import("@sinclair/typebox").TObject<
         secrets: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         egressAllow: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         limits: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
-            cpuMs: import("@sinclair/typebox").TInteger;
-            timeoutMs: import("@sinclair/typebox").TInteger;
-            memoryMb: import("@sinclair/typebox").TInteger;
+            cpuMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+            timeoutMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
         }>>;
         enabled: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
         signature: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{

package/dist/config.d.ts

@@ -118,10 +118,27 @@ export type FunctionTrigger = {
 } | {
     kind: 'queue';
     source: string;
-} | {
+}
+/** `webhook`: the function is woken by a webhook_subscription fan-out whose
+ *  target_url is `<edge>/v1/internal/fn/trigger/<name>?tenant=<id>`. That
+ *  subscription is AUTO-WIRED on deploy (2026-09-19): the platform reconciles
+ *  one per function declaring this binding, with `event_prefixes` = the
+ *  function's `source` values — a hand-made one equal in target + prefixes is
+ *  adopted. `source` is an event-name PREFIX (e.g. 'payments.') or a full event
+ *  name — lowercase dotted segments, ≤64 chars, validated at deploy — and is
+ *  also enforced at delivery: a non-matching event is ACK-200 skipped.
+ *  Declaring the binding is what opts the function into event delivery; a
+ *  receiver that declares only `cron` keeps the older cron+{} wake. */
+ | {
     kind: 'webhook';
     source: string;
-} | {
+}
+/** `cmsHook`: fires after a CMS write in `collection`. The platform filters
+ *  deliveries on the binding (2026-09-19): `beforeCreate` → created only,
+ *  `beforeUpdate` → updated only, `beforeWrite` → created|updated; a write to
+ *  another collection never wakes the function. Deleted/bulk events are not
+ *  delivered to a cmsHook binding. */
+ | {
     kind: 'cmsHook';
     collection: string;
     event: 'beforeCreate' | 'beforeUpdate' | 'beforeWrite';
@@ -142,10 +159,34 @@ export interface FunctionDef {
     secrets?: string[];
     /** Outbound host allowlist (deny-by-default egress guard). */
     egressAllow?: string[];
+    /** Per-function resource declarations. Both optional; both clamped server-side.
+     *  `memoryMb` was REMOVED (2026-09-18): memory is fixed by the managed runtime
+     *  and is not per-dispatch selectable. A config that still declares it pushes
+     *  fine — the key is stripped, and `vxil plan --explain` marks it DROPPED. */
     limits?: {
+        /** per-dispatch isolate CPU ceiling, ms (5..300000). Only ever TIGHTENS the
+         *  platform cap.
+         *
+         *  IT ALSO RAISES YOUR BILL on a metered tenant, and that is worth reading
+         *  twice: it raises (never lowers) the per-invoke credit reserve, whose floor
+         *  is the manifest default — and the reserve is the CEILING the pro-rated
+         *  settle clamps into, because the settle can never commit more than the hold
+         *  it releases from. So an invoke whose wall time exceeds `defaultLimits.cpuMs`
+         *  (50) settles at its MEASURED wall-ms instead of being capped at 50:
+         *  declaring `cpuMs: 1000` makes an 800 ms invoke cost 800 instead of 50.
+         *  Declaring only `timeoutMs` leaves metering byte-identical.
+         *
+         *  It does NOT affect anyone else's availability: the account-wide daily
+         *  capacity budget counts the platform's own per-invoke estimate, never this
+         *  value (workers/functions-v1/src/capacity.ts `capacityReserveCpuMs`). */
         cpuMs?: number;
+        /** wall budget for ONE outbound fetch this function makes, ms (1000..120000,
+         *  default 30000). Not a whole-invocation budget: three 25 s fetches still
+         *  take 75 s. The invocation is bounded separately by the platform's own
+         *  deadline (`FN_MAX_INVOKE_MS`, default ≥ 5 minutes), which raising this
+         *  value widens with you. The vxil API callback leg keeps the platform's
+         *  own 30 s bound. */
         timeoutMs?: number;
-        memoryMb?: number;
     };
     enabled?: boolean;
     /** optional typed contract surfaced by `vxil gen` (Level 1, §4.5). */