@zveltio/cli 3.0.0-beta.82 → 3.0.0-beta.83

package/dist/index.js

@@ -2045,7 +2045,7 @@ function resolvePackIsolation(opts) {
 
 // src/lib/publisher-tier.ts
 function tierAllowsInline(tier) {
-  return tier === "first-party" || tier === "verified";
+  return tier === "first-party";
 }
 async function resolvePublisherTier(opts = {}) {
   if (opts.firstParty) {
@@ -2259,9 +2259,9 @@ async function extensionPackCommand(opts) {
     });
     if (!resolved.allowsInline) {
       communityInject = true;
-      console.log(`  ${c5.yellow("\u26A0")} ${resolved.tier} publisher \u2014 auto-set ${c5.bold('engine.isolation: "worker"')} ` + `(community extensions can't run inline).`);
+      console.log(`  ${c5.yellow("\u26A0")} ${resolved.tier} publisher \u2014 auto-set ${c5.bold('engine.isolation: "worker"')} ` + `(only first-party extensions run inline).`);
       if (resolved.source === "default") {
-        console.log(c5.dim("    Tier defaulted to community (no --first-party flag, no registry token). " + "If you are verified/first-party, pass --first-party or set ZVELTIO_REGISTRY_TOKEN."));
+        console.log(c5.dim("    Tier defaulted to community (no --first-party flag, no registry token). " + "If you are first-party, pass --first-party or set ZVELTIO_REGISTRY_TOKEN."));
       }
     }
   } else if (opts.firstParty && manifest.engine.isolation === "worker" && !opts.keepIsolation) {
@@ -4475,6 +4475,57 @@ function validateManifest(input) {
       }
     }
   }
+  const NAME = /^[a-z][a-zA-Z0-9]*$/;
+  const strings = (v) => v === undefined || Array.isArray(v) && v.every((s) => typeof s === "string");
+  const isObject = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+  const entries = (field, code) => {
+    const v = obj[field];
+    if (v === undefined)
+      return [];
+    if (!Array.isArray(v)) {
+      out.push(err(code, `"${field}" must be an array`));
+      return [];
+    }
+    const seen = new Set;
+    return v.filter((e, i) => {
+      if (!isObject(e) || typeof e.name !== "string" || !NAME.test(e.name)) {
+        out.push(err(code, `${field}[${i}] needs a camelCase "name"`));
+        return false;
+      }
+      if (seen.has(e.name))
+        out.push(err(code, `"${e.name}" is declared twice in ${field}`));
+      seen.add(e.name);
+      if (!isObject(e.input))
+        out.push(err(code, `"${e.name}": "input" must be a JSON Schema object`));
+      for (const k of ["reads", "writes", "enqueues"]) {
+        if (!strings(e[k]))
+          out.push(err(code, `"${e.name}": "${k}" must be an array of names`));
+      }
+      return true;
+    });
+  };
+  const jobs = entries("jobs", "MANIFEST_BAD_JOB");
+  const resources = Array.isArray(obj.resources) ? obj.resources : [];
+  for (const a of entries("actions", "MANIFEST_BAD_ACTION")) {
+    const p = a.permission;
+    if (!isObject(p) || typeof p.resource !== "string" || !resources.includes(p.resource)) {
+      out.push(err("MANIFEST_BAD_ACTION", `action "${a.name}": "permission.resource" must be in resources`));
+    } else if (p.action !== undefined && (typeof p.action !== "string" || !p.action)) {
+      out.push(err("MANIFEST_BAD_ACTION", `action "${a.name}": "permission.action" must be a name`));
+    }
+    for (const job of Array.isArray(a.enqueues) ? a.enqueues : []) {
+      if (!jobs.some((j) => j.name === job)) {
+        out.push(err("MANIFEST_BAD_ACTION", `action "${a.name}" enqueues "${job}", which is not in jobs`));
+      }
+    }
+  }
+  for (const j of jobs) {
+    const r = j.retry;
+    const limit = isObject(r) ? r.limit : undefined;
+    if (r !== undefined && (!isObject(r) || limit !== undefined && !(Number.isInteger(limit) && limit >= 0 && limit <= 10) || r.backoff !== undefined && typeof r.backoff !== "boolean")) {
+      out.push(err("MANIFEST_BAD_JOB", `job "${j.name}": "retry" is { limit: 0-10, backoff: boolean }`));
+    }
+  }
   if (obj.forwardCredentials !== undefined) {
     const fwd = obj.forwardCredentials;
     const publicRoutes = Array.isArray(obj.publicRoutes) ? obj.publicRoutes : [];
@@ -5286,7 +5337,7 @@ ${c7.bold("Extension validate")}
     console.log("");
     if (isolation !== "worker" && !inlineOk) {
       console.error(c7.red(`Validation failed: ${resolved.tier} publishers must declare ` + `engine.isolation: "worker" (marketplace-policy.md \xA72).`));
-      console.error(c7.dim('  Add `"isolation": "worker"` to the engine block in manifest.json, ' + "then re-pack. If you are a verified/first-party publisher, pass " + "--first-party or set ZVELTIO_REGISTRY_TOKEN so the tier can be confirmed. " + "See docs/extensions/marketplace-policy.md \xA72."));
+      console.error(c7.dim('  Add `"isolation": "worker"` to the engine block in manifest.json, ' + "then re-pack. If you are a first-party publisher, pass " + "--first-party or set ZVELTIO_REGISTRY_TOKEN so the tier can be confirmed. " + "See docs/extensions/marketplace-policy.md \xA72."));
       if (opts.silentExit)
         throw new Error("Validation failed: community inline isolation");
       process.exit(1);
@@ -7139,7 +7190,7 @@ async function getLocalVersion() {
 // package.json
 var package_default = {
   name: "@zveltio/cli",
-  version: "3.0.0-beta.82",
+  version: "3.0.0-beta.83",
   type: "module",
   bin: {
     zveltio: "./dist/index.js"
@@ -7154,7 +7205,7 @@ var package_default = {
     dev: "bun run --watch src/index.ts"
   },
   dependencies: {
-    "@zveltio/sdk": "3.0.0-beta.82",
+    "@zveltio/sdk": "3.0.0-beta.83",
     commander: "^12.1.0"
   },
   devDependencies: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zveltio/cli",
-  "version": "3.0.0-beta.82",
+  "version": "3.0.0-beta.83",
   "type": "module",
   "bin": {
     "zveltio": "./dist/index.js"
@@ -15,7 +15,7 @@
     "dev": "bun run --watch src/index.ts"
   },
   "dependencies": {
-    "@zveltio/sdk": "3.0.0-beta.82",
+    "@zveltio/sdk": "3.0.0-beta.83",
     "commander": "^12.1.0"
   },
   "devDependencies": {