veryfront 0.1.1063 → 0.1.1064

package/esm/cli/commands/pull/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/pull/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,QAAQ,EAAE,WAuEtB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/pull/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,QAAQ,EAAE,WA4EtB,CAAC"}

package/esm/cli/commands/pull/command-help.js

@@ -66,7 +66,12 @@ export const pullHelp = {
         "With --projects, each project is pulled into a subdirectory named after the slug",
         'Projects list can also be specified in veryfront.json: { "projects": ["slug1", "slug2"] }',
         "Priority order: --env > --release > --branch > main",
-        "--prune requires a clean Git worktree; --prune --dry-run can preview anywhere",
-        "--prune never removes ignored or unsupported files",
+        "--prune applies a full managed-source snapshot; it does not perform a Git merge",
+        "Mutating --prune requires a clean Git worktree; --yes and --force skip confirmation only",
+        "--prune --dry-run can preview anywhere and never writes or deletes local files",
+        "Only supported text files are managed; ignored, unsupported, and binary files remain unchanged",
+        "Pull preserves remote bytes exactly, including line endings and a missing final newline",
+        "Invalid, duplicate, reserved, or symlink-traversing remote paths fail before local writes",
+        "A fetch failure causes no writes or pruning; a local write or delete failure exits with an error",
     ],
 };

package/esm/cli/commands/push/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/push/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,QAAQ,EAAE,WA+CtB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/push/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,QAAQ,EAAE,WAiDtB,CAAC"}

package/esm/cli/commands/push/command-help.js

@@ -44,5 +44,7 @@ export const pushHelp = {
         "Use --branch main to update the existing Veryfront main branch",
         "Uploads supported text source files using their relative paths",
         ".vfignore controls which supported files are excluded",
+        "--dry-run never creates a project or branch, changes remote files, or writes a Push receipt",
+        "If an upload fails, Push does not delete remote files",
     ],
 };

package/esm/cli/commands/push/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/push/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAK3E,OAAO,EACL,KAAK,SAAS,EAId,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAuB,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EAKL,KAAK,SAAS,EAIf,MAAM,uCAAuC,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;GAS7B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;GAAgC,CAAC;AAE5D,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;GAOxB,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AASD,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AA+GD,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAEzB;AAoCD,wBAAsB,YAAY,CAChC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,UAAU,EAAE,GACtB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CAUrF;AAQD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,GAAG,EAAE,QAAQ,EAAE,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB/C;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB9C;AA+BD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,EAC5B,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsPpE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/push/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAK3E,OAAO,EACL,KAAK,SAAS,EAId,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAuB,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EAKL,KAAK,SAAS,EAIf,MAAM,uCAAuC,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;GAS7B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;GAAgC,CAAC;AAE5D,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;GAOxB,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AASD,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AA+GD,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAEzB;AAoCD,wBAAsB,YAAY,CAChC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,UAAU,EAAE,GACtB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CAUrF;AAQD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,GAAG,EAAE,QAAQ,EAAE,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB/C;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB9C;AA+BD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,kBAAkB,EAC5B,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsQpE"}

package/esm/cli/commands/push/command.js

@@ -305,38 +305,47 @@ export function pushCommand(options = {}) {
         const client = createApiClient(config);
         const branchName = branch || generateBranchName();
         const isMainBranch = branchName === "main";
-        // First-push: If project doesn't exist on server yet, create it
+        // First-push: If project doesn't exist on server yet, create it unless this is a dry run.
         let mainFiles = [];
+        let projectExists = true;
         try {
             mainFiles = await listAllFiles(client, config.projectSlug, { type: "main" });
         }
         catch (error) {
             // Project doesn't exist yet - create it on first push
             if (getErrorStatus(error) === 404) {
-                spinner.update("Creating project...");
-                let reserveResult;
-                try {
-                    reserveResult = await reserveProjectSlug(config.projectSlug, config.apiToken, undefined, config.apiUrl, { allowAlternativeSlug: canPersistAlternativeSlug(projectReferenceSource) });
-                }
-                catch (reserveError) {
-                    spinner.stop();
-                    if (reserveError instanceof ProjectSlugConflictError) {
-                        throw projectSlugConflictError(reserveError, projectReferenceSource);
+                if (dryRun) {
+                    projectExists = false;
+                    if (!quiet) {
+                        logInfo(`Project "${config.projectSlug}" does not exist. Dry run will not create it.`);
                     }
-                    throw reserveError;
-                }
-                if (reserveResult.slug !== config.projectSlug) {
-                    await writeProjectSlug(projectDir, reserveResult.slug);
-                    logInfo(`Project slug: ${reserveResult.slug}`);
                 }
-                config = { ...config, projectSlug: reserveResult.slug };
-                // Now try to get files again (should be empty for new project)
-                try {
-                    mainFiles = await listAllFiles(client, config.projectSlug, { type: "main" });
-                }
-                catch {
-                    // Project just created, no files yet
-                    mainFiles = [];
+                else {
+                    spinner.update("Creating project...");
+                    let reserveResult;
+                    try {
+                        reserveResult = await reserveProjectSlug(config.projectSlug, config.apiToken, undefined, config.apiUrl, { allowAlternativeSlug: canPersistAlternativeSlug(projectReferenceSource) });
+                    }
+                    catch (reserveError) {
+                        spinner.stop();
+                        if (reserveError instanceof ProjectSlugConflictError) {
+                            throw projectSlugConflictError(reserveError, projectReferenceSource);
+                        }
+                        throw reserveError;
+                    }
+                    if (reserveResult.slug !== config.projectSlug) {
+                        await writeProjectSlug(projectDir, reserveResult.slug);
+                        logInfo(`Project slug: ${reserveResult.slug}`);
+                    }
+                    config = { ...config, projectSlug: reserveResult.slug };
+                    // Now try to get files again (should be empty for new project)
+                    try {
+                        mainFiles = await listAllFiles(client, config.projectSlug, { type: "main" });
+                    }
+                    catch {
+                        // Project just created, no files yet
+                        mainFiles = [];
+                    }
                 }
             }
             else {
@@ -354,7 +363,13 @@ export function pushCommand(options = {}) {
         }
         const ops = sourceSnapshot.files;
         const localPaths = new Set(ops.map((op) => op.path));
-        const target = await resolvePushRemoteFiles(client, config.projectSlug, branchName, mainFiles);
+        const target = projectExists
+            ? await resolvePushRemoteFiles(client, config.projectSlug, branchName, mainFiles)
+            : {
+                branchId: null,
+                remoteFiles: mainFiles,
+                source: { type: "main" },
+            };
         const toDelete = target.remoteFiles.map((f) => f.path).filter((p) => !localPaths.has(p));
         if (ops.length === 0 && toDelete.length === 0) {
             try {

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1063",
+    "version": "0.1.1064",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/schedule/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA6B,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAkBhG,wBAAgB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAsCnE"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,cAAc,EACd,kBAAkB,EAInB,MAAM,YAAY,CAAC;AA8LpB,wBAAgB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAwCnE"}

package/esm/src/schedule/factory.js

@@ -1,6 +1,8 @@
 import { isTriggerTarget } from "../trigger/target.js";
 import { assertSerializable, validateTriggerId } from "../trigger/validation.js";
 const CONCURRENCY_POLICIES = new Set(["Allow", "Forbid", "Replace"]);
+const INTEGRATION_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
+const REQUIREMENT_KIND_PATTERN = /^[a-z][a-z0-9_-]*$/;
 function requireString(value, label) {
     if (typeof value !== "string" || value.trim().length === 0) {
         throw new Error(`${label} is required.`);
@@ -14,6 +16,107 @@ function validatePositiveInteger(value, label) {
         throw new Error(`${label} must be a positive integer.`);
     }
 }
+function requireContractString(value, label, maxLength) {
+    const normalized = requireString(value, label).trim();
+    if (normalized.length > maxLength) {
+        throw new Error(`${label} must be at most ${maxLength} characters.`);
+    }
+    return normalized;
+}
+function requireIntegrationName(value, label) {
+    const normalized = requireContractString(value, label, 255);
+    if (!INTEGRATION_NAME_PATTERN.test(normalized)) {
+        throw new Error(`${label} must use a lowercase integration identifier.`);
+    }
+    return normalized;
+}
+function requireRequirementKind(value, label) {
+    const normalized = requireContractString(value, label, 64);
+    if (!REQUIREMENT_KIND_PATTERN.test(normalized)) {
+        throw new Error(`${label} must use a lowercase resource kind.`);
+    }
+    return normalized;
+}
+function assertOnlyKeys(record, allowedKeys, label) {
+    const allowed = new Set(allowedKeys);
+    const unknownKey = Object.keys(record).find((key) => !allowed.has(key));
+    if (unknownKey) {
+        throw new Error(`${label}.${unknownKey} is not supported.`);
+    }
+}
+function normalizeIntegrationRequirements(value) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value)) {
+        throw new Error("Schedule integrationRequirements must be an array.");
+    }
+    if (value.length > 20) {
+        throw new Error("Schedule integrationRequirements must contain at most 20 entries.");
+    }
+    const integrations = new Set();
+    return value.map((requirement, index) => {
+        if (!requirement || typeof requirement !== "object" || Array.isArray(requirement)) {
+            throw new Error(`Schedule integrationRequirements[${index}] must be an object.`);
+        }
+        const record = requirement;
+        const label = `Schedule integrationRequirements[${index}]`;
+        assertOnlyKeys(record, ["integration", "requiredScopes", "resources"], label);
+        const integration = requireIntegrationName(record.integration, `${label}.integration`);
+        const integrationKey = integration.toLowerCase();
+        if (integrations.has(integrationKey)) {
+            throw new Error(`Schedule integrationRequirements contains duplicate integration ${integration}.`);
+        }
+        integrations.add(integrationKey);
+        const rawRequiredScopes = record.requiredScopes ?? [];
+        if (!Array.isArray(rawRequiredScopes)) {
+            throw new Error(`${label}.requiredScopes must be an array.`);
+        }
+        if (rawRequiredScopes.length > 50) {
+            throw new Error(`${label}.requiredScopes must contain at most 50 entries.`);
+        }
+        const requiredScopes = rawRequiredScopes.map((scope, scopeIndex) => requireContractString(scope, `${label}.requiredScopes[${scopeIndex}]`, 255));
+        const rawResources = record.resources ?? [];
+        if (!Array.isArray(rawResources)) {
+            throw new Error(`${label}.resources must be an array.`);
+        }
+        if (rawResources.length > 50) {
+            throw new Error(`${label}.resources must contain at most 50 entries.`);
+        }
+        const resources = rawResources.map((resource, resourceIndex) => normalizeIntegrationResource(resource, index, resourceIndex));
+        return { integration, requiredScopes, resources };
+    });
+}
+function normalizeIntegrationResource(resource, requirementIndex, resourceIndex) {
+    if (!resource || typeof resource !== "object" || Array.isArray(resource)) {
+        throw new Error(`Schedule integrationRequirements[${requirementIndex}].resources[${resourceIndex}] must be an object.`);
+    }
+    const record = resource;
+    const label = `Schedule integrationRequirements[${requirementIndex}].resources[${resourceIndex}]`;
+    assertOnlyKeys(record, ["kind", "id", "parent"], label);
+    const kind = requireRequirementKind(record.kind, `${label}.kind`);
+    const id = requireContractString(record.id, `${label}.id`, 512);
+    const parent = record.parent;
+    const normalizedParent = normalizeIntegrationResourceParent(parent, requirementIndex, resourceIndex);
+    return {
+        kind,
+        id,
+        ...(normalizedParent === undefined ? {} : { parent: normalizedParent }),
+    };
+}
+function normalizeIntegrationResourceParent(value, requirementIndex, resourceIndex) {
+    if (value === undefined)
+        return undefined;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`Schedule integrationRequirements[${requirementIndex}].resources[${resourceIndex}].parent must be an object.`);
+    }
+    const record = value;
+    const label = `Schedule integrationRequirements[${requirementIndex}].resources[${resourceIndex}].parent`;
+    assertOnlyKeys(record, ["kind", "id"], label);
+    return {
+        kind: requireRequirementKind(record.kind, `${label}.kind`),
+        id: requireContractString(record.id, `${label}.id`, 512),
+    };
+}
 export function schedule(config) {
     const id = requireString(config.id, "Schedule id");
     validateTriggerId(id, "Schedule");
@@ -30,6 +133,7 @@ export function schedule(config) {
     validatePositiveInteger(config.backoffLimit, "Schedule backoffLimit");
     validatePositiveInteger(config.maxRuns, "Schedule maxRuns");
     assertSerializable(config.input, "Schedule input");
+    const integrationRequirements = normalizeIntegrationRequirements(config.integrationRequirements);
     return {
         id,
         ...(config.name === undefined ? {} : { name: config.name }),
@@ -44,5 +148,6 @@ export function schedule(config) {
             ? {}
             : { concurrencyPolicy: config.concurrencyPolicy }),
         ...(config.maxRuns === undefined ? {} : { maxRuns: config.maxRuns }),
+        ...(integrationRequirements === undefined ? {} : { integrationRequirements }),
     };
 }

package/esm/src/schedule/index.d.ts

@@ -18,7 +18,7 @@
  */
 import "../../_dnt.polyfills.js";
 export { schedule } from "./factory.js";
-export type { ScheduleConcurrencyPolicy, ScheduleConfig, ScheduleDefinition } from "./types.js";
+export type { ScheduleConcurrencyPolicy, ScheduleConfig, ScheduleDefinition, ScheduleIntegrationRequirement, ScheduleIntegrationRequirementConfig, ScheduleIntegrationResource, ScheduleIntegrationResourceIdentity, } from "./types.js";
 export { isScheduleDefinition } from "./types.js";
 export { discoverSchedules } from "./discovery.js";
 export type { ScheduleDiscoveryOptions, ScheduleDiscoveryResult } from "./discovery.js";

package/esm/src/schedule/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EAAE,yBAAyB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EACV,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,8BAA8B,EAC9B,oCAAoC,EACpC,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/esm/src/schedule/types.d.ts

@@ -1,5 +1,22 @@
 import type { TriggerTarget } from "../trigger/target.js";
 export type ScheduleConcurrencyPolicy = "Allow" | "Forbid" | "Replace";
+export interface ScheduleIntegrationResourceIdentity {
+    kind: string;
+    id: string;
+}
+export interface ScheduleIntegrationResource extends ScheduleIntegrationResourceIdentity {
+    parent?: ScheduleIntegrationResourceIdentity;
+}
+export interface ScheduleIntegrationRequirement {
+    integration: string;
+    requiredScopes: string[];
+    resources: ScheduleIntegrationResource[];
+}
+export interface ScheduleIntegrationRequirementConfig {
+    integration: string;
+    requiredScopes?: string[];
+    resources?: ScheduleIntegrationResource[];
+}
 export interface ScheduleDefinition {
     id: string;
     name?: string;
@@ -12,10 +29,12 @@ export interface ScheduleDefinition {
     backoffLimit?: number;
     concurrencyPolicy?: ScheduleConcurrencyPolicy;
     maxRuns?: number;
+    integrationRequirements?: ScheduleIntegrationRequirement[];
 }
-export type ScheduleConfig = Omit<ScheduleDefinition, "schedule"> & {
+export type ScheduleConfig = Omit<ScheduleDefinition, "schedule" | "integrationRequirements"> & {
     cron?: string;
     schedule?: string;
+    integrationRequirements?: ScheduleIntegrationRequirementConfig[];
 };
 export declare function isScheduleDefinition(value: unknown): value is ScheduleDefinition;
 //# sourceMappingURL=types.d.ts.map

package/esm/src/schedule/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,GAAG;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAShF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,2BAA4B,SAAQ,mCAAmC;IACtF,MAAM,CAAC,EAAE,mCAAmC,CAAC;CAC9C;AAED,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,2BAA2B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,oCAAoC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,2BAA2B,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB,CAAC,EAAE,8BAA8B,EAAE,CAAC;CAC5D;AAED,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,yBAAyB,CAAC,GAAG;IAC9F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB,CAAC,EAAE,oCAAoC,EAAE,CAAC;CAClE,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAUhF"}

package/esm/src/schedule/types.js

@@ -5,5 +5,69 @@ export function isScheduleDefinition(value) {
     return (typeof definition.id === "string" &&
         typeof definition.schedule === "string" &&
         definition.target !== null &&
-        typeof definition.target === "object");
+        typeof definition.target === "object" &&
+        isScheduleIntegrationRequirements(definition.integrationRequirements));
+}
+function isScheduleIntegrationRequirements(value) {
+    if (value === undefined)
+        return true;
+    if (!Array.isArray(value) || value.length > 20)
+        return false;
+    const integrations = new Set();
+    for (const requirement of value) {
+        if (!requirement || typeof requirement !== "object" || Array.isArray(requirement)) {
+            return false;
+        }
+        const record = requirement;
+        const integration = isIntegrationName(record.integration) ? record.integration : undefined;
+        if (integration === undefined ||
+            !hasOnlyKeys(record, ["integration", "requiredScopes", "resources"]) ||
+            integrations.has(integration.toLowerCase()) ||
+            !isStringArray(record.requiredScopes) ||
+            !isScheduleIntegrationResources(record.resources)) {
+            return false;
+        }
+        integrations.add(integration.toLowerCase());
+    }
+    return true;
+}
+function isScheduleIntegrationResources(value) {
+    if (!Array.isArray(value) || value.length > 50)
+        return false;
+    return value.every((resource) => {
+        if (!resource || typeof resource !== "object" || Array.isArray(resource))
+            return false;
+        const record = resource;
+        return (hasOnlyKeys(record, ["kind", "id", "parent"]) &&
+            isRequirementKind(record.kind) &&
+            isBoundedString(record.id, 512) &&
+            (record.parent === undefined || isScheduleIntegrationResourceIdentity(record.parent)));
+    });
+}
+function isScheduleIntegrationResourceIdentity(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const record = value;
+    return hasOnlyKeys(record, ["kind", "id"]) &&
+        isRequirementKind(record.kind) && isBoundedString(record.id, 512);
+}
+function hasOnlyKeys(record, allowedKeys) {
+    const allowed = new Set(allowedKeys);
+    return Object.keys(record).every((key) => allowed.has(key));
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.length <= 50 &&
+        value.every((item) => isBoundedString(item, 255));
+}
+function isNonEmptyString(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+function isBoundedString(value, maxLength) {
+    return isNonEmptyString(value) && value.trim().length <= maxLength;
+}
+function isIntegrationName(value) {
+    return isBoundedString(value, 255) && /^[a-z0-9][a-z0-9_-]*$/.test(value.trim());
+}
+function isRequirementKind(value) {
+    return isBoundedString(value, 64) && /^[a-z][a-z0-9_-]*$/.test(value.trim());
 }

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1063";
+export declare const VERSION = "0.1.1064";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1063";
+export const VERSION = "0.1.1064";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1063",
+  "version": "0.1.1064",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -328,10 +328,10 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "ws": "8.21.0",
-    "@veryfront/ext-bundler-esbuild": "0.1.1063",
-    "@veryfront/ext-content-mdx": "0.1.1063",
-    "@veryfront/ext-css-tailwind": "0.1.1063",
-    "@veryfront/ext-parser-babel": "0.1.1063"
+    "@veryfront/ext-bundler-esbuild": "0.1.1064",
+    "@veryfront/ext-content-mdx": "0.1.1064",
+    "@veryfront/ext-css-tailwind": "0.1.1064",
+    "@veryfront/ext-parser-babel": "0.1.1064"
   },
   "devDependencies": {
     "@types/node": "20.9.0"