veryfront 0.1.1237 → 0.1.1239

package/esm/src/runtime/runtime-bridge.js

@@ -2,24 +2,61 @@ import { recordErrorCount } from "../observability/metrics/index.js";
 import { serverLogger } from "../utils/index.js";
 import { getActiveRunEventSinks } from "./run-event-sink-context.js";
 const cloneStructuredValue = globalThis.structuredClone;
+const ObjectDefineProperty = Object.defineProperty;
+const ObjectGetOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
+const ObjectHasOwn = Object.hasOwn;
+const ReflectApply = Reflect.apply;
+const ReflectOwnKeys = Reflect.ownKeys;
 const logger = serverLogger.component("runtime-bridge");
-function normalizeSystemPrompt(system) {
+function readSystemProviderOptions(system) {
+    let descriptor;
+    try {
+        descriptor = Object.getOwnPropertyDescriptor(system, "providerOptions");
+    }
+    catch {
+        throw new TypeError("System message providerOptions must be an own enumerable data property");
+    }
+    if (descriptor === undefined)
+        return undefined;
+    if (!Object.hasOwn(descriptor, "value") || descriptor.enumerable !== true) {
+        throw new TypeError("System message providerOptions must be an own enumerable data property");
+    }
+    const providerOptions = descriptor.value;
+    return providerOptions && typeof providerOptions === "object" &&
+        !Array.isArray(providerOptions)
+        ? providerOptions
+        : undefined;
+}
+function normalizeSystemMessages(system) {
     if (typeof system === "string") {
-        return system;
+        return system.length > 0 ? [{ role: "system", content: system }] : [];
     }
     if (!system || typeof system !== "object") {
-        return undefined;
+        return [];
     }
     if ("content" in system && typeof system.content === "string") {
-        return system.content;
+        const providerOptions = readSystemProviderOptions(system);
+        return [{
+                role: "system",
+                content: system.content,
+                ...(providerOptions ? { providerOptions } : {}),
+            }];
     }
     if (Array.isArray(system)) {
-        const parts = system.flatMap((entry) => entry && typeof entry === "object" && "content" in entry && typeof entry.content === "string"
-            ? [entry.content]
-            : []);
-        return parts.length > 0 ? parts.join("\n") : undefined;
+        return system.flatMap((entry) => {
+            if (!entry || typeof entry !== "object" || !("content" in entry) ||
+                typeof entry.content !== "string") {
+                return [];
+            }
+            const providerOptions = readSystemProviderOptions(entry);
+            return [{
+                    role: "system",
+                    content: entry.content,
+                    ...(providerOptions ? { providerOptions } : {}),
+                }];
+        });
     }
-    return undefined;
+    return [];
 }
 function getProviderRequestMessages(messages) {
     const requestMessages = [...messages];
@@ -29,10 +66,11 @@ function getProviderRequestMessages(messages) {
     return requestMessages;
 }
 function toRuntimePrompt(system, messages) {
-    const prompt = [];
-    if (system && system.length > 0) {
-        prompt.push({ role: "system", content: system });
-    }
+    const prompt = system.map((message) => ({
+        role: "system",
+        content: message.content,
+        ...(message.providerOptions === undefined ? {} : { providerOptions: message.providerOptions }),
+    }));
     for (const message of messages) {
         switch (message.role) {
             case "system":
@@ -72,6 +110,86 @@ function toRuntimePrompt(system, messages) {
     }
     return prompt;
 }
+function readOwnEnumerableDataDescriptor(value, key) {
+    let descriptor;
+    try {
+        descriptor = ReflectApply(ObjectGetOwnPropertyDescriptor, undefined, [
+            value,
+            key,
+        ]);
+    }
+    catch {
+        return undefined;
+    }
+    return descriptor?.enumerable === true && ObjectHasOwn(descriptor, "value")
+        ? descriptor
+        : undefined;
+}
+function sanitizePersistedCacheControl(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return undefined;
+    }
+    const type = readOwnEnumerableDataDescriptor(value, "type");
+    if (type?.value !== "ephemeral") {
+        return undefined;
+    }
+    const ttl = readOwnEnumerableDataDescriptor(value, "ttl");
+    if (ttl && ttl.value !== undefined && ttl.value !== "5m" && ttl.value !== "1h") {
+        return undefined;
+    }
+    return {
+        type: "ephemeral",
+        ...(ttl?.value === "5m" || ttl?.value === "1h" ? { ttl: ttl.value } : {}),
+    };
+}
+function sanitizePersistedProviderOptions(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return undefined;
+    }
+    let keys;
+    try {
+        keys = ReflectApply(ReflectOwnKeys, undefined, [value]);
+    }
+    catch {
+        return undefined;
+    }
+    const sanitized = {};
+    let retained = false;
+    for (const key of keys) {
+        if (typeof key !== "string") {
+            continue;
+        }
+        const providerBucket = readOwnEnumerableDataDescriptor(value, key)?.value;
+        if (!providerBucket || typeof providerBucket !== "object" || Array.isArray(providerBucket)) {
+            continue;
+        }
+        const cacheControl = sanitizePersistedCacheControl(readOwnEnumerableDataDescriptor(providerBucket, "cacheControl")?.value);
+        if (!cacheControl) {
+            continue;
+        }
+        ReflectApply(ObjectDefineProperty, undefined, [sanitized, key, {
+                configurable: true,
+                enumerable: true,
+                value: { cacheControl },
+                writable: true,
+            }]);
+        retained = true;
+    }
+    return retained ? sanitized : undefined;
+}
+function sanitizeModelCallContextMessages(messages) {
+    return messages.map((message) => {
+        if (message.role !== "system") {
+            return message;
+        }
+        const providerOptions = sanitizePersistedProviderOptions(message.providerOptions);
+        return {
+            role: "system",
+            content: message.content,
+            ...(providerOptions ? { providerOptions } : {}),
+        };
+    });
+}
 function normalizeUsage(usage) {
     if (!usage || typeof usage !== "object") {
         return undefined;
@@ -243,7 +361,7 @@ async function resolveDirectTools(tools) {
 }
 function buildDirectModelOptions(options, tools) {
     return {
-        prompt: toRuntimePrompt(normalizeSystemPrompt(options.system), getProviderRequestMessages(options.messages)),
+        prompt: toRuntimePrompt(normalizeSystemMessages(options.system), getProviderRequestMessages(options.messages)),
         maxOutputTokens: options.maxOutputTokens,
         ...(options.temperature === undefined ? {} : { temperature: options.temperature }),
         topP: options.topP,
@@ -271,7 +389,7 @@ async function emitModelCallContextEvent(directOptions) {
         return;
     const event = {
         type: "AGENT_RUN_MODEL_CALL_CONTEXT",
-        messages: directOptions.prompt,
+        messages: sanitizeModelCallContextMessages(directOptions.prompt),
         ...(directOptions.tools ? { tools: directOptions.tools } : {}),
     };
     const cloneEvent = () => {

package/esm/src/schedule/factory.d.ts

@@ -1,4 +1,4 @@
-import type { ScheduleConfig, ScheduleDefinition } from "./types.js";
+import type { AgentScheduleConfig, ScheduleConfig, ScheduleDefinition } from "./types.js";
 /**
  * Validate and normalize a source-defined schedule configuration.
  *
@@ -6,6 +6,12 @@ import type { ScheduleConfig, ScheduleDefinition } from "./types.js";
  * weekday names are accepted, timezones must be recognized IANA names, and
  * the `cron` alias is converted to the canonical `schedule` field. Invalid
  * top-level or nested fields fail with `schedule-config-invalid`.
+ *
+ * Agent targets accept `conversationMode`, `conversationId`, and
+ * `agentMessage.prompt`. Task and workflow targets reject all three fields.
  */
-export declare function schedule(config: ScheduleConfig): ScheduleDefinition;
+export declare function schedule(config: AgentScheduleConfig): ScheduleDefinition;
+export declare function schedule(config: ScheduleConfig & {
+    agentMessage?: never;
+}): ScheduleDefinition;
 //# sourceMappingURL=factory.d.ts.map

package/esm/src/schedule/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrE;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAEnE"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAG1F;;;;;;;;;;GAUG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,kBAAkB,CAAC;AAC1E,wBAAgB,QAAQ,CACtB,MAAM,EAAE,cAAc,GAAG;IAAE,YAAY,CAAC,EAAE,KAAK,CAAA;CAAE,GAChD,kBAAkB,CAAC"}

package/esm/src/schedule/factory.js

@@ -1,12 +1,4 @@
 import { normalizeScheduleConfig } from "./validation.js";
-/**
- * Validate and normalize a source-defined schedule configuration.
- *
- * The schedule uses a bounded five-field POSIX cron expression. Month and
- * weekday names are accepted, timezones must be recognized IANA names, and
- * the `cron` alias is converted to the canonical `schedule` field. Invalid
- * top-level or nested fields fail with `schedule-config-invalid`.
- */
 export function schedule(config) {
     return normalizeScheduleConfig(config);
 }

package/esm/src/schedule/index.d.ts

@@ -19,8 +19,17 @@
  */
 import "../../_dnt.polyfills.js";
 export { schedule } from "./factory.js";
-export type { ScheduleConcurrencyPolicy, ScheduleConfig, ScheduleDefinition, ScheduleHealth, ScheduleIntegrationRequirement, ScheduleIntegrationRequirementConfig, ScheduleIntegrationResource, ScheduleIntegrationResourceIdentity, } from "./types.js";
+export type { AgentScheduleConfig, ScheduleAgentMessage, ScheduleConcurrencyPolicy, ScheduleConfig, ScheduleDefinition, ScheduleHealth, ScheduleIntegrationRequirement, ScheduleIntegrationRequirementConfig, ScheduleIntegrationResource, ScheduleIntegrationResourceIdentity, } from "./types.js";
 export { isScheduleDefinition } from "./types.js";
 export { discoverSchedules } from "./discovery.js";
 export type { ScheduleDiscoveryOptions, ScheduleDiscoveryResult } from "./discovery.js";
+/**
+ * Validate the legacy `input._schedule_target` channel's shape.
+ *
+ * Exported because `veryfront schedule run --input <file>` replaces the
+ * authored input without passing back through {@link schedule}, so the CLI is
+ * the only place that can apply this rule to an operator-supplied file. Sharing
+ * the one implementation keeps both entry points rejecting the same shapes.
+ */
+export { legacyScheduleTargetDiagnostic } from "./validation.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/src/schedule/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EACV,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,8BAA8B,EAC9B,oCAAoC,EACpC,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,8BAA8B,EAC9B,oCAAoC,EACpC,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACxF;;;;;;;GAOG;AACH,OAAO,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC"}

package/esm/src/schedule/index.js

@@ -21,3 +21,12 @@ import "../../_dnt.polyfills.js";
 export { schedule } from "./factory.js";
 export { isScheduleDefinition } from "./types.js";
 export { discoverSchedules } from "./discovery.js";
+/**
+ * Validate the legacy `input._schedule_target` channel's shape.
+ *
+ * Exported because `veryfront schedule run --input <file>` replaces the
+ * authored input without passing back through {@link schedule}, so the CLI is
+ * the only place that can apply this rule to an operator-supplied file. Sharing
+ * the one implementation keeps both entry points rejecting the same shapes.
+ */
+export { legacyScheduleTargetDiagnostic } from "./validation.js";

package/esm/src/schedule/types.d.ts

@@ -1,4 +1,4 @@
-import type { TriggerTarget } from "../trigger/target.js";
+import type { AgentTriggerTarget, ResolvedTriggerTarget, TriggerTargetConfig } from "../trigger/target.js";
 /** Behavior when a scheduled occurrence overlaps an active run. */
 export type ScheduleConcurrencyPolicy = "Allow" | "Forbid" | "Replace";
 /** Marks a schedule unhealthy when it has not succeeded within the given budget. */
@@ -36,6 +36,11 @@ export interface ScheduleIntegrationRequirementConfig {
     /** Unique provider resources required by the target. */
     resources?: ScheduleIntegrationResource[];
 }
+/** Contains the prompt that a schedule sends to an agent target. */
+export interface ScheduleAgentMessage {
+    /** The schedule sends this prompt. Veryfront generates a default when you omit it. */
+    prompt?: string;
+}
 /** Validated, canonical source definition for one recurring schedule. */
 export interface ScheduleDefinition {
     /** Canonical slash-separated source trigger identifier. */
@@ -48,8 +53,10 @@ export interface ScheduleDefinition {
     schedule: string;
     /** Supported IANA timezone name; platform default when omitted. */
     timezone?: string;
-    /** Task, workflow, or agent invoked by each occurrence. */
-    target: TriggerTarget;
+    /** The schedule invokes this task, workflow, or agent on each occurrence. */
+    target: ResolvedTriggerTarget;
+    /** The schedule sends this prompt to an agent target. Other target kinds do not support this field. */
+    agentMessage?: ScheduleAgentMessage;
     /** Bounded JSON object copied into each target run. */
     input?: Record<string, unknown>;
     /** Positive execution timeout in seconds. */
@@ -65,19 +72,31 @@ export interface ScheduleDefinition {
     /** Integration scopes and resources required by the target. */
     integrationRequirements?: ScheduleIntegrationRequirement[];
 }
+interface ScheduleConfigFields extends Omit<ScheduleDefinition, "schedule" | "integrationRequirements" | "target" | "agentMessage"> {
+    /** Sets a five-field POSIX expression as an alias for `schedule`. */
+    cron?: string;
+    /** Sets the schedule to a five-field POSIX cron expression. */
+    schedule?: string;
+    /** Declares required integration access. Omitted collections default to empty. */
+    integrationRequirements?: ScheduleIntegrationRequirementConfig[];
+}
 /**
  * Author-facing recurring schedule configuration.
  *
  * `cron` is an alias for `schedule`; the factory emits only `schedule`.
  */
-export type ScheduleConfig = Omit<ScheduleDefinition, "schedule" | "integrationRequirements"> & {
-    /** Alias for a five-field POSIX `schedule` expression. */
-    cron?: string;
-    /** Five-field POSIX cron expression. */
-    schedule?: string;
-    /** Integration requirements; omitted collections default to empty. */
-    integrationRequirements?: ScheduleIntegrationRequirementConfig[];
-};
+export interface ScheduleConfig extends ScheduleConfigFields {
+    /** The schedule invokes this task, workflow, or agent on each occurrence. */
+    target: TriggerTargetConfig;
+}
+/** Configures an agent schedule with an optional prompt. */
+export interface AgentScheduleConfig extends ScheduleConfig {
+    /** The schedule invokes this agent on each occurrence. */
+    target: AgentTriggerTarget;
+    /** The schedule sends this prompt to the agent. */
+    agentMessage?: ScheduleAgentMessage;
+}
 /** Return true only when every schedule field and nested invariant is valid. */
 export declare function isScheduleDefinition(value: unknown): value is ScheduleDefinition;
+export {};
 //# sourceMappingURL=types.d.ts.map

package/esm/src/schedule/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,mCAAmC;IAClD,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wEAAwE;AACxE,MAAM,WAAW,2BAA4B,SAAQ,mCAAmC;IACtF,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mCAAmC,CAAC;CAC9C;AAED,8EAA8E;AAC9E,MAAM,WAAW,8BAA8B;IAC7C,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wDAAwD;IACxD,SAAS,EAAE,2BAA2B,EAAE,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,oCAAoC;IACnD,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,wDAAwD;IACxD,SAAS,CAAC,EAAE,2BAA2B,EAAE,CAAC;CAC3C;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,MAAM,EAAE,aAAa,CAAC;IACtB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,+DAA+D;IAC/D,uBAAuB,CAAC,EAAE,8BAA8B,EAAE,CAAC;CAC5D;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,EAAE,UAAU,GAAG,yBAAyB,CAAC,GAAG;IAC9F,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,uBAAuB,CAAC,EAAE,oCAAoC,EAAE,CAAC;CAClE,CAAC;AAEF,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAG9B,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvE,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,mCAAmC;IAClD,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wEAAwE;AACxE,MAAM,WAAW,2BAA4B,SAAQ,mCAAmC;IACtF,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mCAAmC,CAAC;CAC9C;AAED,8EAA8E;AAC9E,MAAM,WAAW,8BAA8B;IAC7C,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wDAAwD;IACxD,SAAS,EAAE,2BAA2B,EAAE,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,oCAAoC;IACnD,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,wDAAwD;IACxD,SAAS,CAAC,EAAE,2BAA2B,EAAE,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,EAAE,qBAAqB,CAAC;IAC9B,uGAAuG;IACvG,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,+DAA+D;IAC/D,uBAAuB,CAAC,EAAE,8BAA8B,EAAE,CAAC;CAC5D;AAED,UAAU,oBAAqB,SAC7B,IAAI,CACF,kBAAkB,EAClB,UAAU,GAAG,yBAAyB,GAAG,QAAQ,GAAG,cAAc,CACnE;IACD,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,uBAAuB,CAAC,EAAE,oCAAoC,EAAE,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,6EAA6E;IAC7E,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,4DAA4D;AAC5D,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,0DAA0D;IAC1D,MAAM,EAAE,kBAAkB,CAAC;IAC3B,mDAAmD;IACnD,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF"}

package/esm/src/schedule/validation.d.ts

@@ -1,4 +1,21 @@
 import type { ScheduleDefinition } from "./types.js";
+/**
+ * Describe why the legacy `input._schedule_target` channel is invalid, or
+ * return `null`.
+ *
+ * The legacy channel addresses the same hosted conversation as the canonical
+ * target, so it earns the same guarantees. Validating only the canonical copy
+ * would leave an author who addresses a conversation through the legacy
+ * channel alone with none of them: a misspelled key would disappear and the
+ * schedule would ship addressing nothing.
+ *
+ * The value is already a serializable snapshot, so plain key enumeration and
+ * property reads are safe.
+ */
+export declare function legacyScheduleTargetDiagnostic(input: Record<string, unknown> | undefined, conversation: {
+    conversationMode: unknown;
+    conversationId: unknown;
+}): string | null;
 export declare function normalizeScheduleConfig(value: unknown): ScheduleDefinition;
 /** Validate and copy an already-canonical source schedule definition. */
 export declare function normalizeScheduleDefinition(value: unknown): ScheduleDefinition;

package/esm/src/schedule/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/validation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,kBAAkB,EAKnB,MAAM,YAAY,CAAC;AAglBpB,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAE1E;AAED,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAE9E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAOrF"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/src/schedule/validation.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,kBAAkB,EAKnB,MAAM,YAAY,CAAC;AA+WpB;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,YAAY,EAAE;IAAE,gBAAgB,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,GACnE,MAAM,GAAG,IAAI,CAoBf;AA2TD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAE1E;AAED,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAE9E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAOrF"}

package/esm/src/schedule/validation.js

@@ -1,5 +1,5 @@
 import { SCHEDULE_CONFIG_INVALID, VeryfrontError } from "../errors/index.js";
-import { snapshotTriggerTarget } from "../trigger/target.js";
+import { agentConversationDiagnostic, conversationConflictDiagnostic, declarationConflictDiagnostic, resolveTriggerTarget, triggerTargetKeys, } from "../trigger/target.js";
 import { snapshotSerializable, validateTriggerId } from "../trigger/validation.js";
 import { isSupportedIanaTimezone, normalizeCronExpression } from "./calendar.js";
 const CONCURRENCY_POLICIES = new Set([
@@ -20,8 +20,10 @@ const MAX_NAME_LENGTH = 256;
 const MAX_DESCRIPTION_LENGTH = 4_096;
 const MAX_SCHEDULE_EXPRESSION_LENGTH = 256;
 const MAX_TIMEZONE_LENGTH = 255;
+const MAX_AGENT_PROMPT_LENGTH = 20_000;
 const MAX_DIAGNOSTIC_KEY_LENGTH = 80;
 const SIMPLE_DIAGNOSTIC_KEY_PATTERN = /^[A-Za-z_$][A-Za-z0-9_$-]*$/;
+const LEGACY_TARGET_KEYS = new Set(["conversationMode", "conversationId"]);
 const CONFIG_KEYS = [
     "id",
     "name",
@@ -30,6 +32,7 @@ const CONFIG_KEYS = [
     "cron",
     "timezone",
     "target",
+    "agentMessage",
     "input",
     "timeoutSeconds",
     "backoffLimit",
@@ -232,12 +235,81 @@ function normalizeTimezone(value, mode) {
     return timezone;
 }
 function normalizeTarget(value) {
-    const target = snapshotDataRecord(value, "Schedule target", ["kind", "id"]);
-    const candidate = snapshotTriggerTarget(target);
-    if (candidate === null) {
+    const target = snapshotDataRecord(value, "Schedule target", triggerTargetKeys(value));
+    const conversationDetail = agentConversationDiagnostic("Schedule target", target.conversationMode, target.conversationId);
+    if (conversationDetail !== null)
+        invalid(conversationDetail);
+    const resolution = resolveTriggerTarget("Schedule target", target);
+    if (resolution.target === undefined) {
         invalid("Schedule target must specify a valid task, workflow, or agent id.");
     }
-    return candidate;
+    return resolution.target;
+}
+function normalizeAgentMessage(value, target) {
+    if (value === undefined)
+        return undefined;
+    if (target.kind !== "agent") {
+        invalid("Schedule agentMessage is supported only for agent targets.");
+    }
+    const message = snapshotDataRecord(value, "Schedule agentMessage", ["prompt"]);
+    // An agentMessage carrying no prompt says nothing. Emitting `{}` into the
+    // shipped definition would ship that nothing as a field.
+    if (message.prompt === undefined)
+        return undefined;
+    const prompt = message.prompt;
+    if (typeof prompt !== "string" || prompt.trim().length === 0) {
+        invalid("Schedule agentMessage.prompt must be a non-empty string.");
+    }
+    if (prompt.length > MAX_AGENT_PROMPT_LENGTH) {
+        invalid(`Schedule agentMessage.prompt must be at most ${MAX_AGENT_PROMPT_LENGTH} characters.`);
+    }
+    return { prompt };
+}
+/**
+ * Read the conversation pair from the legacy `input._schedule_target` channel.
+ *
+ * Older SDKs addressed a scheduled agent conversation through run input. The
+ * value is already a serializable snapshot, so plain property reads are safe.
+ */
+function legacyScheduleConversation(input) {
+    const legacyTarget = input?._schedule_target;
+    if (!legacyTarget || typeof legacyTarget !== "object" || Array.isArray(legacyTarget)) {
+        return { conversationMode: undefined, conversationId: undefined };
+    }
+    const record = legacyTarget;
+    return {
+        conversationMode: record.conversationMode,
+        conversationId: record.conversationId,
+    };
+}
+/**
+ * Describe why the legacy `input._schedule_target` channel is invalid, or
+ * return `null`.
+ *
+ * The legacy channel addresses the same hosted conversation as the canonical
+ * target, so it earns the same guarantees. Validating only the canonical copy
+ * would leave an author who addresses a conversation through the legacy
+ * channel alone with none of them: a misspelled key would disappear and the
+ * schedule would ship addressing nothing.
+ *
+ * The value is already a serializable snapshot, so plain key enumeration and
+ * property reads are safe.
+ */
+export function legacyScheduleTargetDiagnostic(input, conversation) {
+    const legacyTarget = input?._schedule_target;
+    const label = "Schedule input._schedule_target";
+    if (legacyTarget === undefined)
+        return null;
+    if (legacyTarget === null || typeof legacyTarget !== "object" ||
+        Array.isArray(legacyTarget)) {
+        return `${label} must be an object.`;
+    }
+    for (const key of Object.keys(legacyTarget)) {
+        if (!LEGACY_TARGET_KEYS.has(key)) {
+            return `${formatDiagnosticProperty(label, key)} is not supported.`;
+        }
+    }
+    return agentConversationDiagnostic(label, conversation.conversationMode, conversation.conversationId);
 }
 function normalizeInput(value) {
     if (value === undefined)
@@ -377,7 +449,22 @@ function normalizeScheduleUnsafe(value, mode) {
     const description = optionalContractString(config.description, "Schedule description", MAX_DESCRIPTION_LENGTH, mode);
     const timezone = normalizeTimezone(config.timezone, mode);
     const target = normalizeTarget(config.target);
+    const agentMessage = normalizeAgentMessage(config.agentMessage, target);
     const input = normalizeInput(config.input);
+    // Declaring the same value in both places is how one definition stays
+    // correct across a platform upgrade, so only a disagreement is rejected:
+    // silently preferring one copy would detach the deployed schedule from what
+    // the other copy names. Prompt content follows the identical rule.
+    const legacyConversation = legacyScheduleConversation(input);
+    const conflictDetail = conversationConflictDiagnostic("Schedule", "input._schedule_target", target, legacyConversation.conversationMode, legacyConversation.conversationId) ??
+        declarationConflictDiagnostic("Schedule", "agentMessage.prompt", "input.prompt", agentMessage?.prompt, input?.prompt);
+    if (conflictDetail !== null)
+        invalid(conflictDetail);
+    const legacyTargetDetail = target.kind === "agent"
+        ? legacyScheduleTargetDiagnostic(input, legacyConversation)
+        : null;
+    if (legacyTargetDetail !== null)
+        invalid(legacyTargetDetail);
     const timeoutSeconds = optionalPositiveInteger(config.timeoutSeconds, "Schedule timeoutSeconds");
     const backoffLimit = optionalNonNegativeInteger(config.backoffLimit, "Schedule backoffLimit");
     const maxRuns = optionalPositiveInteger(config.maxRuns, "Schedule maxRuns");
@@ -395,6 +482,7 @@ function normalizeScheduleUnsafe(value, mode) {
         schedule,
         ...(timezone === undefined ? {} : { timezone }),
         target,
+        ...(agentMessage === undefined ? {} : { agentMessage }),
         ...(input === undefined ? {} : { input }),
         ...(timeoutSeconds === undefined ? {} : { timeoutSeconds }),
         ...(backoffLimit === undefined ? {} : { backoffLimit }),

package/esm/src/security/sandbox/worker-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-pool.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAY/E,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACf,MAAM,mBAAmB,CAAC;AA+C3B,qEAAqE;AACrE,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,aAAa,CAAC;IAChE,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,2EAA2E;IAC3E,kCAAkC,CAAC,EAAE,MAAM,OAAO,CAAC;CACpD;AA0PD,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAAgC;IAC5C,OAAO,CAAC,eAAe,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmD;IAChF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAe;IAClD,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAgB;IACnE,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,eAAe,CAA8B;IAErD,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,mBAAmB,CAA6C;gBAGtE,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACtC,YAAY,GAAE,sBAA2B;IAmE3C;;;;;;OAMG;IACH,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,GAClB,aAAa;IAIhB,OAAO,CAAC,6BAA6B;IA2FrC;;;OAGG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC;IAkF1B;;;;;;;OAOG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,gBAAgB,GACxB,cAAc,CAAC,UAAU,CAAC;IAsG7B;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAOpC;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAevC,0CAA0C;IAC1C,QAAQ,IAAI;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,OAAO,CAAC;YACpB,cAAc,EAAE,MAAM,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC,CAAC;KACJ;IA+BD;;OAEG;IACH,UAAU,IAAI;QACZ,uCAAuC;QACvC,cAAc,EAAE,MAAM,CAAC;QACvB,sCAAsC;QACtC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,kDAAkD;QAClD,sBAAsB,EAAE,MAAM,CAAC;QAC/B,qDAAqD;QACrD,WAAW,EAAE,MAAM,CAAC;QACpB,kEAAkE;QAClE,cAAc,EAAE,MAAM,CAAC;KACxB;IAoBD;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgCzB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,0BAA0B;IA6BlC,OAAO,CAAC,0BAA0B;IAuClC,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,iCAAiC;IAYzC,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,cAAc;YAoBR,oBAAoB;IAMlC,OAAO,CAAC,mBAAmB;YAIb,WAAW;IA+CzB;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;CA+BjC;AAaD,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,uBAAuB,CAAC;IAC7B,IAAI,EAAE,uBAAuB,CAAC;IAC9B,GAAG,EAAE,uBAAuB,CAAC;IAC7B;;;;OAIG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC,8CAA8C;IAC9C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CAClB;AAwGD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,CAYtD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAGlD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,6BAA6B,EAAE,OAAO,GAAG,OAAO,CAEvF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAG/C;AAKD,wBAAgB,aAAa,IAAI,UAAU,CAiC1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD"}
+{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-pool.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAY/E,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACf,MAAM,mBAAmB,CAAC;AA+C3B,qEAAqE;AACrE,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,aAAa,CAAC;IAChE,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,2EAA2E;IAC3E,kCAAkC,CAAC,EAAE,MAAM,OAAO,CAAC;CACpD;AA0PD,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAAgC;IAC5C,OAAO,CAAC,eAAe,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmD;IAChF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAe;IAClD,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAgB;IACnE,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,eAAe,CAA8B;IAErD,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,mBAAmB,CAA6C;gBAGtE,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACtC,YAAY,GAAE,sBAA2B;IAmE3C;;;;;;OAMG;IACH,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,GAClB,aAAa;IAIhB,OAAO,CAAC,6BAA6B;IA2FrC;;;OAGG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC;IAkF1B;;;;;;;OAOG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,gBAAgB,GACxB,cAAc,CAAC,UAAU,CAAC;IAsG7B;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAOpC;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAevC,0CAA0C;IAC1C,QAAQ,IAAI;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,YAAY,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,OAAO,CAAC;YACpB,cAAc,EAAE,MAAM,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC,CAAC;KACJ;IA+BD;;OAEG;IACH,UAAU,IAAI;QACZ,uCAAuC;QACvC,cAAc,EAAE,MAAM,CAAC;QACvB,sCAAsC;QACtC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,kDAAkD;QAClD,sBAAsB,EAAE,MAAM,CAAC;QAC/B,qDAAqD;QACrD,WAAW,EAAE,MAAM,CAAC;QACpB,kEAAkE;QAClE,cAAc,EAAE,MAAM,CAAC;KACxB;IAoBD;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgCzB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,0BAA0B;IA6BlC,OAAO,CAAC,0BAA0B;IAuClC,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,iCAAiC;IAYzC,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,cAAc;YAoBR,oBAAoB;IAMlC,OAAO,CAAC,mBAAmB;YAIb,WAAW;IA+CzB;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;CA+BjC;AAaD,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,uBAAuB,CAAC;IAC7B,IAAI,EAAE,uBAAuB,CAAC;IAC9B,GAAG,EAAE,uBAAuB,CAAC;IAC7B;;;;OAIG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC,8CAA8C;IAC9C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CAClB;AA6GD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,CAYtD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAGlD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,6BAA6B,EAAE,OAAO,GAAG,OAAO,CAEvF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAG/C;AAKD,wBAAgB,aAAa,IAAI,UAAU,CAiC1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD"}

package/esm/src/security/sandbox/worker-pool.js

@@ -1011,7 +1011,12 @@ function resolveFlags() {
         });
     }
     else {
-        logger.info("Worker isolation posture resolved", {
+        // Resolution is operator-relevant only once something is actually
+        // configured. A project that asked for no isolation has nothing to act on,
+        // and this line would otherwise be the only output a successful dev request
+        // produces, so keep the default posture at DEBUG.
+        const report = effectiveSurfaces > 0 ? logger.info : logger.debug;
+        report.call(logger, "Worker isolation posture resolved", {
             master,
             effectiveSurfaces,
             workerIsolationApi: _apiIsolation,

package/esm/src/server/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/src/server/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAM1D,OAAO,EAAE,KAAK,eAAe,EAAqC,MAAM,wBAAwB,CAAC;AAgBjG,OAAO,EACL,KAAK,2BAA2B,EAGjC,MAAM,kCAAkC,CAAC;AA0B1C,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,2BAA2B,CAAC;AAanC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,cAAc,CAAC;IAExB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IAExB,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,eAAe,EAAE,eAAe,CAAC;IAEjC,qFAAqF;IACrF,2BAA2B,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAEpE;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AA8BD,wBAAgB,eAAe,IAAI,IAAI,CA+BtC;AASD,mGAAmG;AACnG,wBAAgB,8CAA8C,IAC1D,QAAQ,CAAC,2BAA2B,CAAC,GACrC,SAAS,CAGZ;AAQD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAyBD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAYjF;AAwBD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,EAC3C,SAAS,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAO1B;AAkDD,wBAAsB,SAAS,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CA0L1B;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAyB1B;AA2ED,wBAAgB,qCAAqC,IAAI,IAAI,CAE5D"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/src/server/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAM1D,OAAO,EAAE,KAAK,eAAe,EAAqC,MAAM,wBAAwB,CAAC;AAgBjG,OAAO,EACL,KAAK,2BAA2B,EAGjC,MAAM,kCAAkC,CAAC;AA0B1C,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,2BAA2B,CAAC;AAcnC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,cAAc,CAAC;IAExB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IAExB,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,eAAe,EAAE,eAAe,CAAC;IAEjC,qFAAqF;IACrF,2BAA2B,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAEpE;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AA8BD,wBAAgB,eAAe,IAAI,IAAI,CA+BtC;AASD,mGAAmG;AACnG,wBAAgB,8CAA8C,IAC1D,QAAQ,CAAC,2BAA2B,CAAC,GACrC,SAAS,CAGZ;AAQD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAyBD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAYjF;AAwBD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,EAC3C,SAAS,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAO1B;AAkDD,wBAAsB,SAAS,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CA0L1B;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAmFD,wBAAgB,qCAAqC,IAAI,IAAI,CAE5D"}

package/esm/src/server/bootstrap.js

@@ -21,6 +21,7 @@ import { createFileLogSubscriber, getLogBuffer, } from "../observability/index.j
 import { ReloadNotifier } from "./reload-notifier.js";
 import { createServerStyleCallbacks, createServerStyleInvalidationCallbacks, } from "./style-callbacks.js";
 import { clearDomainCache } from "./utils/domain-lookup.js";
+import { getMissingProjectEnvInternalCredentialDetail } from "./project-env/internal-authorization.js";
 const bootstrapLog = logger.component("bootstrap");
 const bootstrapDevLog = logger.component("bootstrap-dev");
 const bootstrapProdLog = logger.component("bootstrap-prod");
@@ -447,6 +448,11 @@ function validateProductionEnvironment() {
                 detail: "CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY must be set when running in proxy mode (PROXY_MODE=1)",
             });
         }
+        const missingInternalCredentials = getMissingProjectEnvInternalCredentialDetail();
+        if (missingInternalCredentials) {
+            logger.error(`[Bootstrap:Prod] CRITICAL: ${missingInternalCredentials}.`);
+            throw INVALID_ARGUMENT.create({ detail: missingInternalCredentials });
+        }
         if (!isProxyTopologyTrusted()) {
             logger.error("[Bootstrap:Prod] CRITICAL: proxy mode does not trust its upstream topology. " +
                 "Set VERYFRONT_TRUST_FORWARDED_HEADERS=1 only when this process is private behind a sanitising edge. " +

package/esm/src/server/dev-server/index.d.ts

@@ -5,7 +5,7 @@
  */
 export { DevServer } from "./server.js";
 export { OptimizedFileWatcher } from "./file-watcher.js";
-export type { DevServerOptions, FileWatcherMetrics, RouteDirectory } from "./types.js";
+export type { DevServerHandler, DevServerOptions, FileWatcherMetrics, RouteDirectory, } from "./types.js";
 import type { DevServerOptions } from "./types.js";
 import type { DevServer } from "./server.js";
 /** Starts dev server. */

package/esm/src/server/dev-server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/dev-server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,yBAAyB;AACzB,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAKlF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/dev-server/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,yBAAyB;AACzB,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAKlF"}

package/esm/src/server/dev-server/server.d.ts

@@ -1,5 +1,5 @@
 import type { NodeWebSocketServerProvider } from "../../extensions/websocket/index.js";
-import type { DevServerOptions } from "./types.js";
+import type { DevServerHandler, DevServerOptions } from "./types.js";
 import { FileWatchSetup } from "./file-watch-setup.js";
 /** Implement dev server. */
 export declare class DevServer {
@@ -25,8 +25,12 @@ export declare class DevServer {
     private logRSCStatus;
     start(): Promise<void>;
     private startAndBind;
-    /** Return the request handler for use with external HTTP servers. */
-    get handler(): (req: Request) => Promise<Response>;
+    /**
+     * Return the request handler for use with external HTTP servers.
+     * Pass the native Deno, Node, or Bun request context as the second argument
+     * so local-control routes can verify the transport peer.
+     */
+    get handler(): DevServerHandler;
     /** Extension-provided Node WebSocket implementation captured with this bootstrap generation. */
     get nodeWebSocketServerProvider(): Readonly<NodeWebSocketServerProvider> | undefined;
     private buildDiscoveryConfig;

package/esm/src/server/dev-server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../src/src/server/dev-server/server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAMvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAiDvD,4BAA4B;AAC5B,qBAAa,SAAS;IAkBR,OAAO,CAAC,OAAO;IAjB3B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,4BAA4B,CAAC,CAAwC;IAC7E,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAsC;IACvD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAC,CAAa;IACvC,OAAO,CAAC,qBAAqB,CAAC,CAAa;IAC3C,OAAO,CAAC,8BAA8B,CAAC,CAAa;gBAEhC,OAAO,EAAE,gBAAgB;IAQ7C,OAAO,CAAC,OAAO;YAID,YAAY;IAWpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAqBd,YAAY;IAuL1B,qEAAqE;IACrE,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAKjD;IAED,gGAAgG;IAChG,IAAI,2BAA2B,IAAI,QAAQ,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAEnF;IAED,OAAO,CAAC,oBAAoB;YAmBd,qBAAqB;YAmBrB,yBAAyB;YAoBzB,uBAAuB;YA4BvB,wBAAwB;IAmBtC,OAAO,CAAC,kBAAkB;IAuBpB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;YAe7B,iBAAiB;IAsC/B,qBAAqB,IAAI,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI;IAIlE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CA0C5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../src/src/server/dev-server/server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAMvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAIrE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAqDvD,4BAA4B;AAC5B,qBAAa,SAAS;IAkBR,OAAO,CAAC,OAAO;IAjB3B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,4BAA4B,CAAC,CAAwC;IAC7E,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAmB;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAC,CAAa;IACvC,OAAO,CAAC,qBAAqB,CAAC,CAAa;IAC3C,OAAO,CAAC,8BAA8B,CAAC,CAAa;gBAEhC,OAAO,EAAE,gBAAgB;IAQ7C,OAAO,CAAC,OAAO;YAID,YAAY;IAWpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAqBd,YAAY;IA2L1B;;;;OAIG;IACH,IAAI,OAAO,IAAI,gBAAgB,CAK9B;IAED,gGAAgG;IAChG,IAAI,2BAA2B,IAAI,QAAQ,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAEnF;IAED,OAAO,CAAC,oBAAoB;YAmBd,qBAAqB;YAmBrB,yBAAyB;YAoBzB,uBAAuB;YA4BvB,wBAAwB;IAmBtC,OAAO,CAAC,kBAAkB;IAuBpB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;YAe7B,iBAAiB;IAsC/B,qBAAqB,IAAI,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI;IAIlE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CA0C5B"}