feat(ql3): add secure console cron scheduling

packages/ql3-local-application/src/application-runtime/activation.ts

@@ -522,6 +522,9 @@ export async function bootstrapLocalApplication(
           taskDefinitions: storage.taskDefinitions,
           taskDefinitionAdministrationForCredential:
             storage.taskDefinitionAdministrationForCredential,
+          triggers: storage.triggers,
+          triggerAdministrationForCredential:
+            storage.triggerAdministrationForCredential,
           apiCredentials: storage.apiCredentials,
           ownerPepper: storage.ownerPepper,
           projectPolicy: storage.projectPolicy,

packages/ql3-local-application/src/application-runtime/contract.ts

@@ -69,6 +69,8 @@ export interface LocalApplicationProductSurfaceAuthority {
     | 'listTaskDefinitions'
   >;
   readonly taskDefinitionAdministrationForCredential: ReadyFreshStorage['taskDefinitionAdministrationForCredential'];
+  readonly triggers: ReadyFreshStorage['triggers'];
+  readonly triggerAdministrationForCredential: ReadyFreshStorage['triggerAdministrationForCredential'];
   readonly runAttemptLogRead: Readonly<{
     read(
       request: Readonly<RunAttemptLogReadRequest>,

packages/ql3-local-application/test/activation.test.cjs

@@ -1759,6 +1759,11 @@ test('starts an optional product surface after recovery and drains it before own
             typeof authority.taskDefinitions.listTaskDefinitions,
             'function',
           );
+          assert.equal(typeof authority.triggers.listTriggers, 'function');
+          assert.equal(
+            typeof authority.triggerAdministrationForCredential,
+            'function',
+          );
           assert.equal(typeof authority.runAttemptLogRead.read, 'function');
           assert.equal(typeof authority.apiCredentials.resolve, 'function');
           assert.equal(typeof authority.ownerPepper.resolveKey, 'function');