@alienplatform/sdk 1.14.1 → 2.0.0

package/dist/dist.js

@@ -1,3 +1,168 @@
+//#region src/worker-runtime/registry.ts
+const REGISTRY_KEY = Symbol.for("@alienplatform/sdk#worker-runtime-registry");
+function registry$1() {
+	const holder = globalThis;
+	let state = holder[REGISTRY_KEY];
+	if (!state) {
+		state = {
+			commands: /* @__PURE__ */ new Map(),
+			eventHandlers: /* @__PURE__ */ new Map(),
+			waitUntilTasks: /* @__PURE__ */ new Map(),
+			counters: {
+				handler: 0,
+				task: 0
+			}
+		};
+		holder[REGISTRY_KEY] = state;
+	}
+	return state;
+}
+/**
+* Register a command handler.
+*
+* The handler receives the decoded params and, optionally, a
+* {@link WorkerCommandContext} with `commandId`, `attempt`, and `deadline` —
+* use `attempt` to make redeliveries idempotent (at-least-once semantics).
+*
+* @param name - Command name
+* @param handler - Handler that receives params (and optionally the context)
+*
+* @example
+* ```typescript
+* import { command } from "@alienplatform/sdk"
+*
+* command("echo", async ({ message }: { message: string }, { attempt }) => {
+*   return { message, attempt, timestamp: new Date().toISOString() }
+* })
+* ```
+*/
+function command(name, handler) {
+	registry$1().commands.set(name, {
+		name,
+		handler
+	});
+}
+/** Get all registered commands. @internal */
+function getCommands() {
+	return registry$1().commands;
+}
+/** Execute a registered command by name. @internal */
+async function runCommand(name, params, context) {
+	const commands = registry$1().commands;
+	const cmd = commands.get(name);
+	if (!cmd) throw new Error(`Unknown command: ${name}. Available: ${[...commands.keys()].join(", ")}`);
+	return await cmd.handler(params, context);
+}
+/**
+* Register a storage event handler.
+*
+* @param bucket - Bucket name (or `"*"` for all buckets)
+* @param handler - Handler function for storage events
+* @param options - Handler options
+* @returns Unsubscribe function
+*/
+function onStorageEvent(bucket, handler, options) {
+	const state = registry$1();
+	const id = `storage-${++state.counters.handler}`;
+	state.eventHandlers.set(id, {
+		registration: {
+			id,
+			type: "storage",
+			source: bucket,
+			prefix: options?.prefix
+		},
+		handler
+	});
+	return () => {
+		state.eventHandlers.delete(id);
+	};
+}
+/**
+* Register a cron/scheduled event handler.
+*
+* @param scheduleName - Schedule name (or `"*"` for all schedules)
+* @param handler - Handler function for scheduled events
+* @returns Unsubscribe function
+*/
+function onCronEvent(scheduleName, handler) {
+	const state = registry$1();
+	const id = `cron-${++state.counters.handler}`;
+	state.eventHandlers.set(id, {
+		registration: {
+			id,
+			type: "cron",
+			source: scheduleName
+		},
+		handler
+	});
+	return () => {
+		state.eventHandlers.delete(id);
+	};
+}
+/**
+* Register a queue message handler.
+*
+* @param queueName - Queue name (or `"*"` for all queues)
+* @param handler - Handler function for queue messages
+* @returns Unsubscribe function
+*/
+function onQueueMessage(queueName, handler) {
+	const state = registry$1();
+	const id = `queue-${++state.counters.handler}`;
+	state.eventHandlers.set(id, {
+		registration: {
+			id,
+			type: "queue",
+			source: queueName
+		},
+		handler
+	});
+	return () => {
+		state.eventHandlers.delete(id);
+	};
+}
+/** Get all registered event handlers. @internal */
+function getEventHandlers() {
+	return registry$1().eventHandlers;
+}
+/**
+* Register a background task to continue after the response.
+*
+* The runtime waits for all registered tasks to complete before shutting down.
+* This is the protocol-only registrar: it tracks the promise and (inside a
+* running Worker) notifies the runtime via the installed hook. The gRPC drain
+* coordination lives in {@link runWorker}.
+*
+* @param promise - The promise to track
+*/
+function waitUntil(promise) {
+	const state = registry$1();
+	const id = `task-${++state.counters.task}`;
+	const tracker = {
+		id,
+		promise,
+		registeredAt: /* @__PURE__ */ new Date(),
+		completed: false
+	};
+	state.waitUntilTasks.set(id, tracker);
+	promise.then(() => {
+		tracker.completed = true;
+	}).catch((error) => {
+		tracker.completed = true;
+		tracker.error = error instanceof Error ? error : new Error(String(error));
+	}).finally(() => {
+		state.waitUntilTasks.delete(id);
+	});
+	try {
+		state.onTaskRegistered?.(tracker);
+	} catch (error) {
+		console.error("[alien:wait-until] onTaskRegistered hook failed:", error);
+	}
+}
+/** Install the runtime's task-registered hook. @internal */
+function setOnTaskRegistered(hook) {
+	registry$1().onTaskRegistered = hook;
+}
 Object.freeze({ status: "aborted" });
 function $constructor(name, initializer, params) {
 	function init(inst, def) {
@@ -71,7 +236,6 @@ function cached(getter) {
 			Object.defineProperty(this, "value", { value });
 			return value;
 		}
-		throw new Error("cached value already set");
 	} };
 }
 function nullish(input) {
@@ -1690,61 +1854,6 @@ const $ZodUnion = /*@__PURE__*/ $constructor("$ZodUnion", (inst, def) => {
 		});
 	};
 });
-const $ZodDiscriminatedUnion = /*@__PURE__*/ $constructor("$ZodDiscriminatedUnion", (inst, def) => {
-	def.inclusive = false;
-	$ZodUnion.init(inst, def);
-	const _super = inst._zod.parse;
-	defineLazy(inst._zod, "propValues", () => {
-		const propValues = {};
-		for (const option of def.options) {
-			const pv = option._zod.propValues;
-			if (!pv || Object.keys(pv).length === 0) throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
-			for (const [k, v] of Object.entries(pv)) {
-				if (!propValues[k]) propValues[k] = /* @__PURE__ */ new Set();
-				for (const val of v) propValues[k].add(val);
-			}
-		}
-		return propValues;
-	});
-	const disc = cached(() => {
-		const opts = def.options;
-		const map = /* @__PURE__ */ new Map();
-		for (const o of opts) {
-			const values = o._zod.propValues?.[def.discriminator];
-			if (!values || values.size === 0) throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o)}"`);
-			for (const v of values) {
-				if (map.has(v)) throw new Error(`Duplicate discriminator value "${String(v)}"`);
-				map.set(v, o);
-			}
-		}
-		return map;
-	});
-	inst._zod.parse = (payload, ctx) => {
-		const input = payload.value;
-		if (!isObject(input)) {
-			payload.issues.push({
-				code: "invalid_type",
-				expected: "object",
-				input,
-				inst
-			});
-			return payload;
-		}
-		const opt = disc.value.get(input?.[def.discriminator]);
-		if (opt) return opt._zod.run(payload, ctx);
-		if (def.unionFallback) return _super(payload, ctx);
-		payload.issues.push({
-			code: "invalid_union",
-			errors: [],
-			note: "No matching discriminator",
-			discriminator: def.discriminator,
-			input,
-			path: [def.discriminator],
-			inst
-		});
-		return payload;
-	};
-});
 const $ZodIntersection = /*@__PURE__*/ $constructor("$ZodIntersection", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst._zod.parse = (payload, ctx) => {
@@ -1862,24 +1971,6 @@ const $ZodEnum = /*@__PURE__*/ $constructor("$ZodEnum", (inst, def) => {
 		return payload;
 	};
 });
-const $ZodLiteral = /*@__PURE__*/ $constructor("$ZodLiteral", (inst, def) => {
-	$ZodType.init(inst, def);
-	if (def.values.length === 0) throw new Error("Cannot create literal schema with no valid values");
-	const values = new Set(def.values);
-	inst._zod.values = values;
-	inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$`);
-	inst._zod.parse = (payload, _ctx) => {
-		const input = payload.value;
-		if (values.has(input)) return payload;
-		payload.issues.push({
-			code: "invalid_value",
-			values: def.values,
-			input,
-			inst
-		});
-		return payload;
-	};
-});
 const $ZodTransform = /*@__PURE__*/ $constructor("$ZodTransform", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst._zod.parse = (payload, ctx) => {
@@ -3030,27 +3121,6 @@ const enumProcessor = (schema, _ctx, json, _params) => {
 	if (values.every((v) => typeof v === "string")) json.type = "string";
 	json.enum = values;
 };
-const literalProcessor = (schema, ctx, json, _params) => {
-	const def = schema._zod.def;
-	const vals = [];
-	for (const val of def.values) if (val === void 0) {
-		if (ctx.unrepresentable === "throw") throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-	} else if (typeof val === "bigint") if (ctx.unrepresentable === "throw") throw new Error("BigInt literals cannot be represented in JSON Schema");
-	else vals.push(Number(val));
-	else vals.push(val);
-	if (vals.length === 0) {} else if (vals.length === 1) {
-		const val = vals[0];
-		json.type = val === null ? "null" : typeof val;
-		if (ctx.target === "draft-04" || ctx.target === "openapi-3.0") json.enum = [val];
-		else json.const = val;
-	} else {
-		if (vals.every((v) => typeof v === "number")) json.type = "number";
-		if (vals.every((v) => typeof v === "string")) json.type = "string";
-		if (vals.every((v) => typeof v === "boolean")) json.type = "boolean";
-		if (vals.every((v) => v === null)) json.type = "null";
-		json.enum = vals;
-	}
-};
 const customProcessor = (_schema, ctx, _json, _params) => {
 	if (ctx.unrepresentable === "throw") throw new Error("Custom types cannot be represented in JSON Schema");
 };
@@ -3636,18 +3706,6 @@ function union(options, params) {
 		...normalizeParams(params)
 	});
 }
-const ZodDiscriminatedUnion = /*@__PURE__*/ $constructor("ZodDiscriminatedUnion", (inst, def) => {
-	ZodUnion.init(inst, def);
-	$ZodDiscriminatedUnion.init(inst, def);
-});
-function discriminatedUnion(discriminator, options, params) {
-	return new ZodDiscriminatedUnion({
-		type: "union",
-		options,
-		discriminator,
-		...normalizeParams(params)
-	});
-}
 const ZodIntersection = /*@__PURE__*/ $constructor("ZodIntersection", (inst, def) => {
 	$ZodIntersection.init(inst, def);
 	ZodType.init(inst, def);
@@ -3698,23 +3756,6 @@ function _enum(values, params) {
 		...normalizeParams(params)
 	});
 }
-const ZodLiteral = /*@__PURE__*/ $constructor("ZodLiteral", (inst, def) => {
-	$ZodLiteral.init(inst, def);
-	ZodType.init(inst, def);
-	inst._zod.processJSONSchema = (ctx, json, params) => literalProcessor(inst, ctx, json, params);
-	inst.values = new Set(def.values);
-	Object.defineProperty(inst, "value", { get() {
-		if (def.values.length > 1) throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");
-		return def.values[0];
-	} });
-});
-function literal(value, params) {
-	return new ZodLiteral({
-		type: "literal",
-		values: Array.isArray(value) ? value : [value],
-		...normalizeParams(params)
-	});
-}
 const ZodTransform = /*@__PURE__*/ $constructor("ZodTransform", (inst, def) => {
 	$ZodTransform.init(inst, def);
 	ZodType.init(inst, def);
@@ -3891,7 +3932,128 @@ function superRefine(fn) {
 	return /* @__PURE__ */ _superRefine(fn);
 }
 //#endregion
-//#region ../core/dist/stack.js
+//#region ../../node_modules/.pnpm/serialize-error@12.0.0/node_modules/serialize-error/error-constructors.js
+const list = [
+	Error,
+	EvalError,
+	RangeError,
+	ReferenceError,
+	SyntaxError,
+	TypeError,
+	URIError,
+	AggregateError,
+	globalThis.DOMException,
+	globalThis.AssertionError,
+	globalThis.SystemError
+].filter(Boolean).map((constructor) => [constructor.name, constructor]);
+const errorConstructors = new Map(list);
+//#endregion
+//#region ../../node_modules/.pnpm/serialize-error@12.0.0/node_modules/serialize-error/index.js
+const errorProperties = [
+	{
+		property: "name",
+		enumerable: false
+	},
+	{
+		property: "message",
+		enumerable: false
+	},
+	{
+		property: "stack",
+		enumerable: false
+	},
+	{
+		property: "code",
+		enumerable: true
+	},
+	{
+		property: "cause",
+		enumerable: false
+	},
+	{
+		property: "errors",
+		enumerable: false
+	}
+];
+const toJsonWasCalled = /* @__PURE__ */ new WeakSet();
+const toJSON = (from) => {
+	toJsonWasCalled.add(from);
+	const json = from.toJSON();
+	toJsonWasCalled.delete(from);
+	return json;
+};
+const newError = (name) => {
+	const ErrorConstructor = errorConstructors.get(name) ?? Error;
+	return ErrorConstructor === AggregateError ? new ErrorConstructor([]) : new ErrorConstructor();
+};
+const destroyCircular = ({ from, seen, to, forceEnumerable, maxDepth, depth, useToJSON, serialize }) => {
+	if (!to) if (Array.isArray(from)) to = [];
+	else if (!serialize && isErrorLike(from)) to = newError(from.name);
+	else to = {};
+	seen.push(from);
+	if (depth >= maxDepth) return to;
+	if (useToJSON && typeof from.toJSON === "function" && !toJsonWasCalled.has(from)) return toJSON(from);
+	const continueDestroyCircular = (value) => destroyCircular({
+		from: value,
+		seen: [...seen],
+		forceEnumerable,
+		maxDepth,
+		depth,
+		useToJSON,
+		serialize
+	});
+	for (const [key, value] of Object.entries(from)) {
+		if (value && value instanceof Uint8Array && value.constructor.name === "Buffer") {
+			to[key] = "[object Buffer]";
+			continue;
+		}
+		if (value !== null && typeof value === "object" && typeof value.pipe === "function") {
+			to[key] = "[object Stream]";
+			continue;
+		}
+		if (typeof value === "function") continue;
+		if (!value || typeof value !== "object") {
+			try {
+				to[key] = value;
+			} catch {}
+			continue;
+		}
+		if (!seen.includes(from[key])) {
+			depth++;
+			to[key] = continueDestroyCircular(from[key]);
+			continue;
+		}
+		to[key] = "[Circular]";
+	}
+	if (serialize || to instanceof Error) {
+		for (const { property, enumerable } of errorProperties) if (from[property] !== void 0 && from[property] !== null) Object.defineProperty(to, property, {
+			value: isErrorLike(from[property]) || Array.isArray(from[property]) ? continueDestroyCircular(from[property]) : from[property],
+			enumerable: forceEnumerable ? true : enumerable,
+			configurable: true,
+			writable: true
+		});
+	}
+	return to;
+};
+function serializeError(value, options = {}) {
+	const { maxDepth = Number.POSITIVE_INFINITY, useToJSON = true } = options;
+	if (typeof value === "object" && value !== null) return destroyCircular({
+		from: value,
+		seen: [],
+		forceEnumerable: true,
+		maxDepth,
+		depth: 0,
+		useToJSON,
+		serialize: true
+	});
+	if (typeof value === "function") return `[Function: ${value.name || "anonymous"}]`;
+	return value;
+}
+function isErrorLike(value) {
+	return Boolean(value) && typeof value === "object" && typeof value.name === "string" && typeof value.message === "string" && typeof value.stack === "string";
+}
+//#endregion
+//#region ../core/dist/index.js
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -4042,14 +4204,14 @@ const ResourceLifecycleSchema = _enum(["frozen", "live"]).describe("Describes th
 * Do not edit manually.
 */
 /**
-* @description New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.
+* @description Reference to a resource by its stable id and resource type.
 */
 const ResourceRefSchema = object({
 	"id": string(),
 	get "type"() {
 		return ResourceTypeSchema.describe("Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.");
 	}
-}).describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.");
+}).describe("Reference to a resource by its stable id and resource type.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -4086,7 +4248,7 @@ const StackResourceStateSchema = object({
 		return union([PlatformSchema, _null()]).optional();
 	},
 	get "dependencies"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("Complete list of dependencies for this resource, including infrastructure dependencies.\nThis preserves the full dependency information from the stack definition.").optional();
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.")).describe("Complete list of dependencies for this resource, including infrastructure dependencies.\nThis preserves the full dependency information from the stack definition.").optional();
 	},
 	get "error"() {
 		return union([AlienErrorSchema, _null()]).optional();
@@ -4890,6 +5052,7 @@ const AwsDaemonHeartbeatDataSchema = object({
 	"horizonStatusMessage": string().nullish(),
 	"horizonStatusReason": string().nullish(),
 	"latestUpdateTimestamp": string(),
+	"observedImage": string().nullish(),
 	get "status"() {
 		return WorkloadHeartbeatStatusSchema;
 	},
@@ -5564,6 +5727,7 @@ const AzureDaemonHeartbeatDataSchema = object({
 	"horizonStatusMessage": string().nullish(),
 	"horizonStatusReason": string().nullish(),
 	"latestUpdateTimestamp": string(),
+	"observedImage": string().nullish(),
 	get "status"() {
 		return WorkloadHeartbeatStatusSchema;
 	},
@@ -6254,7 +6418,7 @@ object({
 	"environment": optional(object({}).catchall(string()).describe("Key-value pairs to set as environment variables for the build.")),
 	"id": string().describe("Identifier for the build resource. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]).\nMaximum 64 characters."),
 	get "links"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("List of resource references this build depends on.");
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.")).describe("List of resource references this build depends on.");
 	},
 	"permissions": string().describe("Permission profile name that defines the permissions granted to this build.\nThis references a profile defined in the stack's permission definitions.")
 }).describe("Represents a build resource that executes bash scripts to build code.\nBuilds are designed to be stateless and can be triggered on-demand to compile,\ntest, or package application code.");
@@ -6348,6 +6512,7 @@ const CapacityGroupSchema = object({
 		return union([CapacityGroupScalePolicySchema, _null()]).optional();
 	}
 }).describe("Capacity group definition.\n\nA capacity group represents machines with identical hardware profiles.\nEach group becomes a separate Auto Scaling Group (AWS), Managed Instance Group (GCP),\nor VM Scale Set (Azure).");
+_enum(["push", "pull"]).describe("How a command is delivered to its target resource.\n\nThis is a Commands-protocol-specific concept and is intentionally distinct\nfrom `DeploymentModel` (see `stack_settings.rs`), which governs the\ninfrastructure-level push/pull wiring for a deployment. Serialized\nlowercase for consistency with `CommandTargetType`.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -6381,6 +6546,31 @@ const CommandStateSchema = _enum([
 	"FAILED",
 	"EXPIRED"
 ]).describe("Command states in the Commands protocol lifecycle");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description The kind of command-capable resource a command targets.
+*/
+const CommandTargetTypeSchema = _enum([
+	"worker",
+	"container",
+	"daemon"
+]).describe("The kind of command-capable resource a command targets.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Identifies the specific resource a command is addressed to.
+*/
+const CommandTargetSchema = object({
+	"resourceId": string().describe("The resource ID within the deployment's stack (e.g. a Worker/Container/Daemon id)."),
+	get "resourceType"() {
+		return CommandTargetTypeSchema.describe("The kind of command-capable resource a command targets.");
+	}
+}).describe("Identifies the specific resource a command is addressed to.");
 object({
 	"attempt": int().min(0).describe("Current attempt number"),
 	"commandId": string().describe("Command identifier"),
@@ -6389,6 +6579,9 @@ object({
 	},
 	get "state"() {
 		return CommandStateSchema.describe("Command states in the Commands protocol lifecycle");
+	},
+	get "target"() {
+		return CommandTargetSchema.describe("Identifies the specific resource a command is addressed to.");
 	}
 }).describe("Response to status queries");
 /**
@@ -6636,9 +6829,11 @@ const HorizonContainerHeartbeatDataSchema = object({
 		return array(ManagedRuntimeEventSnapshotSchema);
 	},
 	"image": string().nullish(),
+	"latestUpdateTimestamp": string().nullish(),
 	get "memory"() {
 		return union([MetricSampleSchema, _null()]).optional();
 	},
+	"observedImage": string().nullish(),
 	get "replicaUnits"() {
 		return array(ManagedRuntimeUnitStatusSchema);
 	},
@@ -6996,6 +7191,7 @@ object({
 		return ContainerCodeSchema.describe("Specifies the source of the container's executable code.");
 	},
 	"command": array(string()).describe("Command to override image default").nullish(),
+	"commandsEnabled": optional(boolean().default(false).describe("Whether the container can receive remote commands via the Commands protocol.\nWhen enabled, an app-owned command receiver can lease pending commands\nfor this Container and execute registered handlers.")),
 	get "cpu"() {
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.");
 	},
@@ -7009,7 +7205,7 @@ object({
 	},
 	"id": string().describe("Unique identifier for the container.\nMust be DNS-compatible: lowercase alphanumeric with hyphens."),
 	get "links"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("Resource links (dependencies)");
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.")).describe("Resource links (dependencies)");
 	},
 	get "memory"() {
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.");
@@ -7036,7 +7232,8 @@ object({
 	"idempotencyKey": string().describe("Optional idempotency key").nullish(),
 	get "params"() {
 		return BodySpecSchema.describe("Body specification supporting inline and storage modes");
-	}
+	},
+	"targetResourceId": string().describe("Optional explicit target resource ID within the deployment's stack.\nWhen omitted, the target is resolved server-side (single-target shorthand):\nexactly one command-capable resource must exist, or resolution fails.").nullish()
 }).describe("Request to create a new command");
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -7155,6 +7352,7 @@ const GcpDaemonHeartbeatDataSchema = object({
 	"horizonStatusMessage": string().nullish(),
 	"horizonStatusReason": string().nullish(),
 	"latestUpdateTimestamp": string(),
+	"observedImage": string().nullish(),
 	get "status"() {
 		return WorkloadHeartbeatStatusSchema;
 	},
@@ -7235,6 +7433,7 @@ const MachinesDaemonHeartbeatDataSchema = object({
 	"horizonStatusMessage": string().nullish(),
 	"horizonStatusReason": string().nullish(),
 	"latestUpdateTimestamp": string(),
+	"observedImage": string().nullish(),
 	get "status"() {
 		return WorkloadHeartbeatStatusSchema;
 	},
@@ -7285,7 +7484,7 @@ object({
 		return DaemonCodeSchema;
 	},
 	"command": array(string()).describe("Command to override the image default.").nullish(),
-	"commandsEnabled": optional(boolean().default(false)),
+	"commandsEnabled": optional(boolean().default(false).describe("Whether an app-owned command receiver can lease pending commands for\nthis Daemon and execute registered handlers.")),
 	get "cpu"() {
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.").optional();
 	},
@@ -7295,7 +7494,7 @@ object({
 	},
 	"id": string(),
 	get "links"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility."));
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type."));
 	},
 	get "memory"() {
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.").optional();
@@ -7390,6 +7589,17 @@ const ResponseHandlingSchema = object({
 * Do not edit manually.
 */
 /**
+* @description W3C Trace Context propagated with a command lease.\n\nThe values are kept in their standard wire form so receivers can attach\nthem to handler telemetry without inventing separate trace/span fields.
+*/
+const TraceContextSchema = object({
+	"traceparent": string().describe("W3C `traceparent` header value."),
+	"tracestate": string().describe("Optional W3C `tracestate` header value.").nullish()
+}).describe("W3C Trace Context propagated with a command lease.\n\nThe values are kept in their standard wire form so receivers can attach\nthem to handler telemetry without inventing separate trace/span fields.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Commands envelope sent to deployments
 */
 const EnvelopeSchema = object({
@@ -7404,6 +7614,12 @@ const EnvelopeSchema = object({
 	"protocol": string().describe("Protocol version identifier"),
 	get "responseHandling"() {
 		return ResponseHandlingSchema.describe("Response handling configuration for deployments");
+	},
+	get "target"() {
+		return CommandTargetSchema.describe("Identifies the specific resource a command is addressed to.");
+	},
+	get "traceContext"() {
+		return union([TraceContextSchema, _null()]).optional();
 	}
 }).describe("Commands envelope sent to deployments");
 /**
@@ -7855,7 +8071,7 @@ const ImportedResourceSchema = object({
 * @description Certificate publication or reference mode for Kubernetes public endpoints.
 */
 const KubernetesCertificateModeSchema = union([
-	lazy(() => KubernetesTlsSecretRefSchema).and(object({ "mode": _enum(["tlsSecretRef"]) })).describe("Namespace-scoped Kubernetes TLS Secret reference."),
+	lazy(() => KubernetesTlsSecretRefSchema).and(object({ "mode": _enum(["tlsSecretRef"]) })),
 	object({
 		"mode": _enum(["managedAcmImport"]),
 		"region": string().describe("ACM region. Defaults to the deployment region when omitted.").nullish(),
@@ -8072,7 +8288,7 @@ const KubernetesIngressRouteProfileSchema = object({
 /**
 * @description Kubernetes route API selected for public endpoints.
 */
-const KubernetesRouteProfileSchema = union([lazy(() => KubernetesIngressRouteProfileSchema).and(object({ "routeApi": _enum(["ingress"]) })).describe("Shared Ingress route profile values."), lazy(() => KubernetesGatewayRouteProfileSchema).and(object({ "routeApi": _enum(["gateway"]) })).describe("Shared Gateway API route profile values.")]).describe("Kubernetes route API selected for public endpoints.");
+const KubernetesRouteProfileSchema = union([lazy(() => KubernetesIngressRouteProfileSchema).and(object({ "routeApi": _enum(["ingress"]) })), lazy(() => KubernetesGatewayRouteProfileSchema).and(object({ "routeApi": _enum(["gateway"]) }))]).describe("Kubernetes route API selected for public endpoints.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -8212,7 +8428,10 @@ const LeaseInfoSchema = object({
 object({
 	"deploymentId": string().describe("Deployment identifier"),
 	"leaseSeconds": optional(int().min(0).describe("Lease duration in seconds")),
-	"maxLeases": optional(int().min(0).describe("Maximum number of leases to acquire"))
+	"maxLeases": optional(int().min(0).describe("Maximum number of leases to acquire")),
+	get "target"() {
+		return CommandTargetSchema.describe("Identifies the specific resource a command is addressed to.");
+	}
 }).describe("Request for acquiring leases");
 object({ get "leases"() {
 	return array(LeaseInfoSchema.describe("Lease information")).describe("Acquired leases (empty array if none available)");
@@ -8327,9 +8546,9 @@ const LocalWorkerHeartbeatDataSchema = object({
 * @description Management configuration for different cloud platforms.\n\nPlatform-derived configuration for cross-account/cross-tenant access.\nThis is NOT user-specified - it\'s derived from the Manager\'s ServiceAccount.
 */
 const ManagementConfigSchema = union([
-	lazy(() => AwsManagementConfigSchema).and(object({ "platform": _enum(["aws"]) })).describe("AWS management configuration extracted from stack settings"),
-	lazy(() => GcpManagementConfigSchema).and(object({ "platform": _enum(["gcp"]) })).describe("GCP management configuration extracted from stack settings"),
-	lazy(() => AzureManagementConfigSchema).and(object({ "platform": _enum(["azure"]) })).describe("Azure management configuration extracted from stack settings"),
+	lazy(() => AwsManagementConfigSchema).and(object({ "platform": _enum(["aws"]) })),
+	lazy(() => GcpManagementConfigSchema).and(object({ "platform": _enum(["gcp"]) })),
+	lazy(() => AzureManagementConfigSchema).and(object({ "platform": _enum(["azure"]) })),
 	object({ "platform": _enum(["kubernetes"]) })
 ]).describe("Management configuration for different cloud platforms.\n\nPlatform-derived configuration for cross-account/cross-tenant access.\nThis is NOT user-specified - it's derived from the Manager's ServiceAccount.");
 /**
@@ -8550,10 +8769,10 @@ const PostgresBackendSchema = object({ "type": _enum(["auroraServerlessV2"]) }).
 * Do not edit manually.
 */
 const PostgresHeartbeatDataSchema = union([
-	lazy(() => AuroraPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["aurora"]) })).describe("AWS Aurora Serverless v2 backend."),
-	lazy(() => GcpCloudSqlPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["cloudSql"]) })).describe("GCP Cloud SQL backend."),
-	lazy(() => AzureFlexibleServerPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["flexibleServer"]) })).describe("Azure Flexible Server backend."),
-	lazy(() => LocalPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["local"]) })).describe("Local embedded Postgres backend.")
+	lazy(() => AuroraPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["aurora"]) })),
+	lazy(() => GcpCloudSqlPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["cloudSql"]) })),
+	lazy(() => AzureFlexibleServerPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["flexibleServer"]) })),
+	lazy(() => LocalPostgresHeartbeatDataSchema).and(object({ "backend": _enum(["local"]) }))
 ]);
 object({
 	"database": string().describe("The default database created for this resource. On cloud backends this is the fixed\nlabel `POSTGRES_DATABASE_NAME` (`alien`); on Local it is the resource id."),
@@ -8591,7 +8810,7 @@ object({
 	"receiptHandle": string().describe("Platform-specific receipt handle for acknowledgment"),
 	"source": string().describe("Source queue/topic name (derived from ARN/source/topic)"),
 	"timestamp": datetime().describe("Message timestamp (from SentTimestamp/ce-time/enqueuedTimeUtc)")
-}).describe("Standardized queue message structure used by alien-runtime\n\nThis structure contains commonly available metadata across all platforms\nand a JSON-first payload that handles both structured data and plain text.");
+}).describe("Standardized queue message structure delivered to applications\n\nThis structure contains commonly available metadata across all platforms\nand a JSON-first payload that handles both structured data and plain text.");
 object({
 	"identifier": string().describe("Platform-specific identifier or URL (e.g., SQS URL, Pub/Sub topic/subscription).").nullish(),
 	"queueName": string().describe("The name of the queue (platform-specific physical name).")
@@ -8634,7 +8853,7 @@ const ResourceEntrySchema = object({
 		return BaseResourceSchema.describe("Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.");
 	},
 	get "dependencies"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("Additional dependencies for this resource beyond those defined in the resource itself.\nThe total dependencies are: resource.get_dependencies() + this list");
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.")).describe("Additional dependencies for this resource beyond those defined in the resource itself.\nThe total dependencies are: resource.get_dependencies() + this list");
 	},
 	get "lifecycle"() {
 		return ResourceLifecycleSchema.describe("Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.");
@@ -9132,7 +9351,7 @@ object({
 	"publicRead": optional(boolean().describe("Allows public read access to objects without authentication.\nDefault: `false`")),
 	"versioning": optional(boolean().describe("Enables object versioning.\nDefault: `false`"))
 }).describe("Represents an object storage bucket.");
-lazy(() => CommandResponseSchema).describe("Command response from deployment").describe("Request to submit a command response (from deployment)");
+lazy(() => CommandResponseSchema).describe("Request to submit a command response (from deployment)");
 object({ "size": int().min(0).describe("Size of uploaded data") }).describe("Request to mark upload as complete");
 object({
 	"commandId": string().describe("Command identifier"),
@@ -9187,14 +9406,14 @@ const WorkerPublicEndpointSchema = object({
 const WorkerTriggerSchema = union([
 	object({
 		get "queue"() {
-			return ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.");
+			return ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.");
 		},
 		"type": _enum(["queue"])
 	}),
 	object({
 		"events": array(string()).describe("Events to trigger on (e.g., [\"created\", \"deleted\"])"),
 		get "storage"() {
-			return ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.");
+			return ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.");
 		},
 		"type": _enum(["storage"])
 	}),
@@ -9207,12 +9426,12 @@ object({
 	get "code"() {
 		return WorkerCodeSchema.describe("Specifies the source of the worker's executable code.\nThis can be a pre-built container image or source code that the system will build.");
 	},
-	"commandsEnabled": optional(boolean().default(false).describe("Whether the worker can receive remote commands via the Commands protocol.\nWhen enabled, the runtime polls the manager for pending commands and executes registered handlers.")),
+	"commandsEnabled": optional(boolean().default(false).describe("Whether the worker can receive remote commands via the Commands protocol.\nWhen enabled, the platform pushes commands into the Worker runtime,\nwhich executes registered handlers.")),
 	"concurrencyLimit": int().min(0).describe("Maximum number of concurrent executions allowed for the worker.\nNone means platform default applies.").nullish(),
 	"environment": optional(object({}).catchall(string()).describe("Key-value pairs to set as environment variables for the worker.")),
 	"id": string().describe("Identifier for the worker. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]).\nMaximum 64 characters."),
 	get "links"() {
-		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("List of resource references this worker depends on.");
+		return array(ResourceRefSchema.describe("Reference to a resource by its stable id and resource type.")).describe("List of resource references this worker depends on.");
 	},
 	"memoryMb": optional(int().min(0).default(256).describe("Memory allocated to the worker in megabytes (MB).\nDefault: 256\n\nPlatform-specific constraints:\n- **AWS Lambda**: 128–10240 MB in 1 MB increments\n- **GCP Cloud Run**: 128–32768 MB\n- **Azure Container Apps**: fixed CPU/memory pairs — 512, 1024, 1536, 2048, 2560,\n  3072, 3584, 4096 MB. Values below 512 are automatically rounded up at deploy time.")),
 	"permissions": string().describe("Permission profile name that defines the permissions granted to this worker.\nThis references a profile defined in the stack's permission definitions."),
@@ -9222,134 +9441,11 @@ object({
 	get "readinessProbe"() {
 		return union([ReadinessProbeSchema, _null()]).optional();
 	},
-	"timeoutSeconds": optional(int().min(0).default(180).describe("Maximum execution time for the worker in seconds.\nConstraints: 1‑3600 seconds (platform-specific limits may apply)\nDefault: 30")),
+	"timeoutSeconds": optional(int().min(1).max(3600).default(180).describe("Maximum execution time for the worker in seconds.\nConstraints: 1‑3600 seconds (platform-specific limits may apply)\nDefault: 180")),
 	get "triggers"() {
 		return array(WorkerTriggerSchema.describe("Defines what triggers a worker execution.")).describe("List of triggers that define what events automatically invoke this worker.\nIf empty, the worker is only invokable directly via HTTP calls or platform-specific invocation APIs.\nWhen configured, the worker will be automatically invoked when any of the specified trigger conditions are met.");
 	}
 }).describe("Represents a serverless worker that executes code in response to triggers or direct invocations.\nWorkers are the primary compute resource in serverless applications, designed to be stateless and ephemeral.");
-//#endregion
-//#region ../../node_modules/.pnpm/serialize-error@12.0.0/node_modules/serialize-error/error-constructors.js
-const list = [
-	Error,
-	EvalError,
-	RangeError,
-	ReferenceError,
-	SyntaxError,
-	TypeError,
-	URIError,
-	AggregateError,
-	globalThis.DOMException,
-	globalThis.AssertionError,
-	globalThis.SystemError
-].filter(Boolean).map((constructor) => [constructor.name, constructor]);
-const errorConstructors = new Map(list);
-//#endregion
-//#region ../../node_modules/.pnpm/serialize-error@12.0.0/node_modules/serialize-error/index.js
-const errorProperties = [
-	{
-		property: "name",
-		enumerable: false
-	},
-	{
-		property: "message",
-		enumerable: false
-	},
-	{
-		property: "stack",
-		enumerable: false
-	},
-	{
-		property: "code",
-		enumerable: true
-	},
-	{
-		property: "cause",
-		enumerable: false
-	},
-	{
-		property: "errors",
-		enumerable: false
-	}
-];
-const toJsonWasCalled = /* @__PURE__ */ new WeakSet();
-const toJSON = (from) => {
-	toJsonWasCalled.add(from);
-	const json = from.toJSON();
-	toJsonWasCalled.delete(from);
-	return json;
-};
-const newError = (name) => {
-	const ErrorConstructor = errorConstructors.get(name) ?? Error;
-	return ErrorConstructor === AggregateError ? new ErrorConstructor([]) : new ErrorConstructor();
-};
-const destroyCircular = ({ from, seen, to, forceEnumerable, maxDepth, depth, useToJSON, serialize }) => {
-	if (!to) if (Array.isArray(from)) to = [];
-	else if (!serialize && isErrorLike(from)) to = newError(from.name);
-	else to = {};
-	seen.push(from);
-	if (depth >= maxDepth) return to;
-	if (useToJSON && typeof from.toJSON === "function" && !toJsonWasCalled.has(from)) return toJSON(from);
-	const continueDestroyCircular = (value) => destroyCircular({
-		from: value,
-		seen: [...seen],
-		forceEnumerable,
-		maxDepth,
-		depth,
-		useToJSON,
-		serialize
-	});
-	for (const [key, value] of Object.entries(from)) {
-		if (value && value instanceof Uint8Array && value.constructor.name === "Buffer") {
-			to[key] = "[object Buffer]";
-			continue;
-		}
-		if (value !== null && typeof value === "object" && typeof value.pipe === "function") {
-			to[key] = "[object Stream]";
-			continue;
-		}
-		if (typeof value === "function") continue;
-		if (!value || typeof value !== "object") {
-			try {
-				to[key] = value;
-			} catch {}
-			continue;
-		}
-		if (!seen.includes(from[key])) {
-			depth++;
-			to[key] = continueDestroyCircular(from[key]);
-			continue;
-		}
-		to[key] = "[Circular]";
-	}
-	if (serialize || to instanceof Error) {
-		for (const { property, enumerable } of errorProperties) if (from[property] !== void 0 && from[property] !== null) Object.defineProperty(to, property, {
-			value: isErrorLike(from[property]) || Array.isArray(from[property]) ? continueDestroyCircular(from[property]) : from[property],
-			enumerable: forceEnumerable ? true : enumerable,
-			configurable: true,
-			writable: true
-		});
-	}
-	return to;
-};
-function serializeError(value, options = {}) {
-	const { maxDepth = Number.POSITIVE_INFINITY, useToJSON = true } = options;
-	if (typeof value === "object" && value !== null) return destroyCircular({
-		from: value,
-		seen: [],
-		forceEnumerable: true,
-		maxDepth,
-		depth: 0,
-		useToJSON,
-		serialize: true
-	});
-	if (typeof value === "function") return `[Function: ${value.name || "anonymous"}]`;
-	return value;
-}
-function isErrorLike(value) {
-	return Boolean(value) && typeof value === "object" && typeof value.name === "string" && typeof value.message === "string" && typeof value.stack === "string";
-}
-//#endregion
-//#region ../core/dist/index.js
 /**
 * This module provides a structured error handling system similar to Rust's error types,
 * with TypeScript type safety, error chaining, and context preservation.
@@ -9908,4 +10004,4 @@ defineError({
 	httpStatusCode: 400
 });
 //#endregion
-export { literal as a, string as c, discriminatedUnion as i, defineError as n, number as o, _enum as r, object as s, AlienError as t };
+export { command as a, onCronEvent as c, runCommand as d, setOnTaskRegistered as f, string as i, onQueueMessage as l, defineError as n, getCommands as o, waitUntil as p, object as r, getEventHandlers as s, AlienError as t, onStorageEvent as u };