Interface ScheduleRouterOptions

Every mutation (and denied read) is audited through this. Absent ⇒ no audit.

Route prefix. Default '/api/schedules'.

The early state gate. A configured fence requires the store's same-binding mutation capability before epoch activation can race a waiting request. 'none' supports method-only custom facades; an advertised capability still applies its storage-level mutation guards.

Max raw request-body size in bytes. Must be a nonnegative safe integer; zero denies every non-empty body. Default 16384 (16 KiB).

Deployment count cap. A create at or over it is REJECTED. Must be a nonnegative safe integer; zero denies every create. Default 100.

Per-schedule fire-rate cap: the minimum interval between two consecutive fires of a schedule's cron, in ms. A cron whose interval is shorter is REJECTED at create/update — bounding the aggregate fire rate a deployment can schedule (with the count cap). Must be a positive safe integer. Default 60000 (1 minute).

Authenticate and validate the actor; undefined means 401.

Roles allowed to mutate schedules. Defaults to RUN_START_ROLES.

The schedules domain the facade reads/writes.

Catalog-backed target authorization shared with the fire-time tick.

Prove fixed-thread agent targets are durable bound memory.