@vxil/cli 0.9.0 → 0.11.0

package/README.md

@@ -1,6 +1,6 @@
 # @vxil/cli
 
-The [Vxil](https://vxil.com) CLI — config-as-code for backend building blocks you enable in one line. The package is `@vxil/cli` and it installs the `vxil` command — the bare `vxil` name on npm is blocked, so always install the scoped package.
+The [Vxil](https://vxil.com) CLI — config-as-code for backend building blocks you enable in one line. The package is `@vxil/cli` and it installs the `vxil` command — the bare `vxil` name on npm is blocked, so always install the scoped package. It needs Node.js 24 or newer.
 
 ```bash
 npx @vxil/cli quickstart          # create a tenant + scaffold vxil.config.ts

package/dist/_vxil-feature-configs.d.ts

@@ -656,6 +656,7 @@ export declare const PaymentsConfigSchema: import("@sinclair/typebox").TObject<{
         secretApiKeyRef: import("@sinclair/typebox").TString;
         webhookSecretRef: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         acceptSandbox: import("@sinclair/typebox").TBoolean;
+        sandboxUsers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
     }>>;
     paypal: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         clientIdRef: import("@sinclair/typebox").TString;
@@ -685,6 +686,7 @@ export declare const PaymentsConfigSchema: import("@sinclair/typebox").TObject<{
                 creditType: import("@sinclair/typebox").TString;
                 amount: import("@sinclair/typebox").TInteger;
                 period: import("@sinclair/typebox").TString;
+                mode: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"add">, import("@sinclair/typebox").TLiteral<"reset">]>>;
             }>>>;
         }>>;
         priceMap: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
@@ -718,11 +720,17 @@ export declare const FunctionsConfigSchema: import("@sinclair/typebox").TObject<
             retry: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
                 maxAttempts: import("@sinclair/typebox").TInteger;
             }>>;
+            overlap: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"allow">, import("@sinclair/typebox").TLiteral<"skip">]>>;
         }>>>;
         scriptRef: import("@sinclair/typebox").TString;
         scopes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         secrets: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         egressAllow: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        runtime: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            compatibilityDate: import("@sinclair/typebox").TString;
+            compatibilityFlags: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+            cpuMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        }>>;
         limits: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
             cpuMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
             timeoutMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
@@ -790,6 +798,19 @@ export declare const CONFIG_FLAG_CAP = 15;
  * reconciler maps each to its `auth.<event>` audit-event prefix. */
 export declare const AUTH_HOOK_EVENTS: readonly ["user.created", "session.created", "session.revoked", "signin.failure"];
 export type AuthHookEvent = (typeof AUTH_HOOK_EVENTS)[number];
+/** The events a `cmsHook` function binding may name — the closed union
+ * `packages/config` types on the `cmsHook` trigger, and the keys of the
+ * functions-v1 receiver's CMS_HOOK_EVENTS_FOR (beforeCreate → created,
+ * beforeUpdate → updated, beforeWrite → both). Omitted = beforeWrite. Anything
+ * else is refused at config write (E-CMSHOOK, 2026-10-01): an unknown name used
+ * to fall back to beforeWrite at delivery, so a typo like 'afterCreate' or
+ * 'beforeDelete' silently subscribed the function to creates AND updates.
+ * tests/ci/src/fn-binding-contracts.test.ts pins every copy to this list. */
+export declare const CMS_HOOK_EVENTS: readonly ["beforeCreate", "beforeUpdate", "beforeWrite"];
+export type CmsHookEvent = (typeof CMS_HOOK_EVENTS)[number];
+/** The ONE refusal text for an unknown cmsHook binding event (the config
+ * validator and the deploy route's early 422 both use it). */
+export declare function cmsHookEventError(event: unknown): string | null;
 /** F4-29 test-recipient entry grammar (shared by the validator and auth-v1's
  * matcher): an exact email, a `*@domain` glob, or a +E.164 phone number. */
 export declare const TEST_RECIPIENT_EMAIL_RE: RegExp;

package/dist/config.d.ts

@@ -132,9 +132,15 @@ export interface FunctionTriggerRetry {
 export type FunctionTrigger = {
     kind: 'http';
     path?: string;
-} | {
+}
+/** `overlap: 'skip'` (2026-10-01): a due tick fires nothing while the
+ *  previous tick's run is still open (queued / running / retrying / waiting /
+ *  delayed) — the slot is counted, never caught up. Default `'allow'`. Every
+ *  cron envelope carries `scheduled_for`, the slot it was due for. */
+ | {
     kind: 'cron';
     schedule: string;
+    overlap?: 'allow' | 'skip';
 } | {
     kind: 'queue';
     source: string;