@keystrokehq/hosting 0.1.11 → 0.1.13

package/dist/index.mjs

@@ -5033,6 +5033,14 @@ const AppSlugSchema = ProjectSlugSchema;
 function resolveExplicitPublicPlatformOrigin(env = process.env) {
 	return env.PUBLIC_PLATFORM_URL?.replace(/\/$/, "") || void 0;
 }
+function isValidIanaTimezone(value) {
+	try {
+		Intl.DateTimeFormat(void 0, { timeZone: value });
+		return true;
+	} catch {
+		return false;
+	}
+}
 /** How a credential instance is stored (`credential_instances.auth_kind`). */
 const CredentialAuthKindSchema = _enum([
 	"api_key",
@@ -5290,6 +5298,7 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		name: requiredDisplayTextSchema,
 		description: requiredDisplayTextSchema,
 		model: string(),
+		compactionModel: string().optional(),
 		systemPrompt: string(),
 		toolCount: number$1().int().nonnegative(),
 		credentialCount: number$1().int().nonnegative(),
@@ -5323,7 +5332,9 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		/** Deterministic AST control-flow skeleton (deploy-time producer). */
 		flowGraph: WorkflowCanvasGraphSchema.optional(),
 		/** sha256 of the workflow source the `flowGraph` was produced from (staleness). */
-		flowGraphSourceHash: string().optional()
+		flowGraphSourceHash: string().optional(),
+		/** sha256 of `JSON.stringify(flowGraph)` — baked at build so canvas polls skip re-hashing. */
+		flowGraphHash: string().optional()
 	}),
 	object({
 		kind: literal("trigger-webhook"),
@@ -5359,6 +5370,8 @@ const storedRouteManifestEntryV2Schema = discriminatedUnion("kind", [
 		moduleFile: string(),
 		sourceHash: string().optional(),
 		schedule: string(),
+		/** Static cron payload from `defineCronSource({ payload })` — omitted when the source has none. */
+		payload: unknown().optional(),
 		name: requiredDisplayTextSchema,
 		description: requiredDisplayTextSchema
 	})
@@ -5493,6 +5506,47 @@ object({
 	thresholdMicroCredits: number$1().int().positive().optional(),
 	packId: string().optional()
 });
+const BillingUsageEventSourceSchema = _enum([
+	"ai_gateway",
+	"sandbox",
+	"web_proxy",
+	"storage",
+	"dispatch",
+	"poll"
+]);
+const BillingUsageMeterKeySchema = _enum([
+	"llm",
+	"vm_second",
+	"web_search",
+	"web_fetch",
+	"workflow_run",
+	"agent_run",
+	"poll_trigger",
+	"tigris_storage"
+]);
+const BillingUsageKeySourceSchema = _enum(["platform", "byok"]);
+const BillingUsageRunKindSchema = _enum(["agent", "workflow"]);
+object({ events: array(object({
+	projectId: string().min(1).max(255).nullable().optional(),
+	runId: string().min(1).max(255).nullable().optional(),
+	runKind: BillingUsageRunKindSchema.nullable().optional(),
+	source: BillingUsageEventSourceSchema,
+	sourceEventId: string().min(1).max(512),
+	meterKey: BillingUsageMeterKeySchema,
+	quantity: number$1().finite().nonnegative(),
+	unit: string().min(1).max(64),
+	providerCostUsd: number$1().finite().nonnegative().nullable().optional(),
+	keySource: BillingUsageKeySourceSchema.nullable().optional(),
+	occurredAt: isoDateTime$6,
+	metadata: record(string(), unknown()).nullable().optional()
+}).strict()).min(1).max(100) }).strict();
+object({
+	accepted: number$1().int().nonnegative(),
+	inserted: number$1().int().nonnegative(),
+	duplicate: number$1().int().nonnegative(),
+	settledLedgerId: string().nullable(),
+	chargeMicroCredits: number$1().int().nonnegative()
+});
 /** Messaging platforms that support agent gateway bindings. */
 const ChannelPlatformKeySchema = _enum(["slack"]);
 const ChannelReactionSupportSchema = _enum([
@@ -5792,15 +5846,18 @@ object({
 	integrationDescription: string().min(1),
 	logo: string().url().nullable().optional(),
 	authKind: AppAuthKindSchema,
-	oauthScopes: array(OAuthScopeOptionSchema),
 	/** Where app metadata and execution are sourced (e.g. composio, custom). */
 	source: AppSourceSchema,
+	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
+	url: string().url().nullable().optional(),
+	/** True when the app has a non-empty credential field template. */
+	hasCredentialFields: boolean().optional()
+}).extend({
+	oauthScopes: array(OAuthScopeOptionSchema),
 	/** Custom api_key apps — vault field template for connect UI and sync. */
 	credentialFields: AppCredentialFieldsSchema.optional(),
 	/** Composio auth scheme when credentialFields are present. */
 	credentialScheme: AppCredentialSchemeSchema.optional(),
-	/** Endpoint URL for MCP, OpenAPI, or GraphQL custom apps. */
-	url: string().url().nullable().optional(),
 	/** When present, the app supports agent gateway bindings (external channels). */
 	gateway: AppGatewaySchema.optional()
 });
@@ -5922,7 +5979,11 @@ const AppCredentialConnectionKindSchema = _enum(["oauth", "manual"]);
 const OAuthPermissionModeSchema = _enum(["default", "restricted"]);
 const optionalTimestamp$1 = string().optional();
 const nullableOptionalTimestamp = string().nullable().optional();
-object({
+/**
+* Summary row for the apps/credentials table and credential detail page.
+* Plaintext secrets are never returned — only masked `keyPreviews`.
+*/
+const AppCredentialSummarySchema = object({
 	id: string().min(1),
 	appId: string().min(1),
 	/** Stable per-scope identifier; pass to `--credential` to pin a specific instance. */
@@ -6013,6 +6074,14 @@ object({
 	isDefault: boolean().optional(),
 	value: credentialSecretValueSchema.optional()
 }).refine((input) => input.label !== void 0 || input.isDefault !== void 0 || input.value !== void 0, { message: "At least one field is required" });
+object({
+	limit: number().int().min(1).max(200).optional(),
+	cursor: string().min(1).optional()
+});
+object({
+	items: array(AppCredentialSummarySchema),
+	nextCursor: string().nullable()
+});
 const CredentialAssignmentTargetTypeSchema = _enum([
 	"workflow",
 	"agent",
@@ -6296,11 +6365,198 @@ object({
 	attachmentId: string(),
 	attachmentSlug: string()
 });
+const HistoryRunKindSchema = _enum(["workflow", "agent"]);
+const HistoryRunStatusSchema = _enum([
+	"pending",
+	"running",
+	"sleeping",
+	"waiting_hook",
+	"waiting_children",
+	"completed",
+	"failed",
+	"canceled"
+]);
+const HistoryRunActorSchema = object({
+	userId: string(),
+	name: string(),
+	avatarUrl: string().nullable().optional()
+});
+const HistoryRunUsageLineItemSchema = object({
+	id: string(),
+	label: string(),
+	/** Amount debited from the org's Keystroke balance for this line. */
+	billedUsd: number$1(),
+	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
+	providerCostUsd: number$1().nullable().optional(),
+	keySource: _enum(["byok", "platform"]).nullable().optional()
+});
+const HistoryRunUsageSchema = object({
+	runDurationMs: number$1().nullable(),
+	lineItems: array(HistoryRunUsageLineItemSchema),
+	/** Sum of `billedUsd` — what Keystroke charged for this run. */
+	totalBilledUsd: number$1().nullable(),
+	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
+	externalProviderCostUsd: number$1().nullable().optional()
+});
+const HistoryRunSchema = object({
+	id: string(),
+	kind: HistoryRunKindSchema,
+	traceId: string().nullable(),
+	projectId: string(),
+	projectName: string(),
+	resourceKey: string(),
+	resourceId: string(),
+	resourceName: string(),
+	status: HistoryRunStatusSchema,
+	triggeredAt: string(),
+	timeInQueueMs: number$1().nullable(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	durationMs: number$1().nullable(),
+	triggerLabel: string(),
+	triggerRaw: string(),
+	ranAs: HistoryRunActorSchema.nullable(),
+	modelsUsed: array(string()),
+	otherServicesUsed: array(string()),
+	totalCostUsd: number$1().nullable(),
+	messageCount: number$1().optional(),
+	stepCount: number$1().optional()
+});
+const HistoryTraceSpanSchema = object({
+	id: string(),
+	traceId: string(),
+	parentSpanId: string().nullable(),
+	kind: string(),
+	refId: string(),
+	name: string(),
+	status: string(),
+	startedAt: string(),
+	finishedAt: string().nullable(),
+	metadata: unknown().nullable(),
+	error: unknown().nullable()
+});
+const HistoryTraceLogSchema = object({
+	id: string(),
+	traceId: string(),
+	spanId: string(),
+	seq: number$1(),
+	level: string(),
+	message: string(),
+	data: unknown().nullable(),
+	source: string(),
+	createdAt: string()
+});
+const HistoryTraceTriggerSchema = object({
+	triggerType: string(),
+	triggerRunId: string(),
+	workflowKey: string().optional(),
+	agentKey: string().optional(),
+	attachmentId: string().nullable().optional(),
+	attachmentSlug: string().nullable().optional(),
+	route: string().optional(),
+	sourcePath: string().nullable().optional()
+}).nullable();
+const HistoryTraceGatewaySchema = object({
+	gatewayAttachmentId: string(),
+	gatewayAttachmentKey: string(),
+	threadId: string().optional(),
+	channelId: string().optional(),
+	mode: string().optional()
+}).nullable();
+const HistoryTraceSchema = object({
+	traceId: string(),
+	trigger: HistoryTraceTriggerSchema,
+	gateway: HistoryTraceGatewaySchema,
+	spans: array(HistoryTraceSpanSchema),
+	logs: array(HistoryTraceLogSchema)
+});
+const HistoryWorkflowStepSchema = object({
+	id: string(),
+	actionKey: string(),
+	output: unknown(),
+	completedAt: string()
+});
+const HistoryWorkflowRunDetailSchema = object({
+	kind: literal("workflow"),
+	run: object({
+		id: string(),
+		workflowKey: string(),
+		status: HistoryRunStatusSchema,
+		trigger: string(),
+		triggeredAt: string(),
+		startedAt: string().nullable(),
+		finishedAt: string().nullable(),
+		input: unknown().nullable(),
+		output: unknown().nullable(),
+		error: unknown().nullable()
+	}),
+	trigger: object({
+		id: string(),
+		attachmentSlug: string().nullable(),
+		triggerType: string(),
+		sourcePath: string().nullable(),
+		payload: unknown().nullable(),
+		triggeredAt: string()
+	}).nullable(),
+	steps: array(HistoryWorkflowStepSchema),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+});
+const HistoryAgentCompactionEventSchema = object({
+	seq: number$1(),
+	createdAt: string(),
+	compactionModel: string(),
+	sourceModel: string(),
+	estimatedBeforeTokens: number$1().optional(),
+	retainedTailEstimate: number$1().optional(),
+	durable: boolean()
+});
+const HistoryRunDetailSchema = discriminatedUnion("kind", [HistoryWorkflowRunDetailSchema, object({
+	kind: literal("agent"),
+	runId: string(),
+	session: object({
+		id: string(),
+		agentKey: string(),
+		status: HistoryRunStatusSchema,
+		source: _enum([
+			"api",
+			"gateway",
+			"trigger",
+			"workflow",
+			"agent"
+		]),
+		sourceId: string().nullable(),
+		createdAt: string(),
+		updatedAt: string(),
+		messageCount: number$1(),
+		error: unknown().nullable()
+	}),
+	gateway: object({
+		threadId: string(),
+		attachmentSlug: string().nullable()
+	}).nullable(),
+	messages: array(record(string(), unknown())),
+	/** Sanitized context-compaction markers for the conversation timeline. */
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
+	trace: HistoryTraceSchema.nullable(),
+	ranAs: HistoryRunActorSchema.nullable().optional(),
+	usage: HistoryRunUsageSchema.nullable().optional()
+})]);
+object({
+	project: string().min(1).optional(),
+	status: HistoryRunStatusSchema.optional(),
+	kind: HistoryRunKindSchema.optional(),
+	limit: number().int().min(1).max(200).optional()
+});
+HistoryRunDetailSchema.nullable();
+HistoryRunSchema.nullable();
 const WorkflowRunStatusSchema = _enum([
 	"pending",
 	"running",
 	"sleeping",
 	"waiting_hook",
+	"waiting_children",
 	"completed",
 	"failed",
 	"canceled"
@@ -6321,6 +6577,7 @@ _enum([
 	"sleep_completed",
 	"hook_created",
 	"hook_resumed",
+	"child_dispatched",
 	"run_completed",
 	"run_failed",
 	"run_canceled"
@@ -6477,6 +6734,7 @@ const AgentSessionRecordSchema = object({
 	status: AgentSessionStatusSchema,
 	source: RunSourceKindSchema,
 	sourceId: string().nullable(),
+	title: string().nullable(),
 	createdAt: string(),
 	updatedAt: string(),
 	parentSpanId: string().nullable(),
@@ -6515,17 +6773,18 @@ const AgentEventSchema = object({
 });
 object({
 	session: AgentSessionRecordSchema,
+	activeRunId: string().nullable().default(null),
 	gateway: GatewaySessionDetailSchema.nullable(),
 	messages: array(record(string(), unknown())),
 	events: array(AgentEventSchema),
+	/**
+	* Sanitized context-compaction markers, populated alongside `messages`.
+	* A cheap indexed lookup (session_id + event_type) — never the full event
+	* log. Defaulted so older servers remain compatible.
+	*/
+	compactionEvents: array(HistoryAgentCompactionEventSchema).default([]),
 	trace: TraceResponseSchema.nullable()
 });
-object({ sinceSeq: number().int().min(0).optional() });
-object({
-	status: AgentSessionStatusSchema,
-	messages: array(record(string(), unknown())),
-	live: record(string(), unknown()).nullable()
-});
 const SlackGatewayModeSchema = _enum([
 	"mention",
 	"channel",
@@ -6560,179 +6819,6 @@ object({ agents: array(object({
 	name: string().optional(),
 	route: string()
 })) });
-const HistoryRunKindSchema = _enum(["workflow", "agent"]);
-const HistoryRunStatusSchema = _enum([
-	"pending",
-	"running",
-	"sleeping",
-	"waiting_hook",
-	"completed",
-	"failed",
-	"canceled"
-]);
-const HistoryRunActorSchema = object({
-	userId: string(),
-	name: string(),
-	avatarUrl: string().nullable().optional()
-});
-const HistoryRunUsageLineItemSchema = object({
-	id: string(),
-	label: string(),
-	/** Amount debited from the org's Keystroke balance for this line. */
-	billedUsd: number$1(),
-	/** Provider cost for LLM usage on the org's API key (informational; not billed by Keystroke). */
-	providerCostUsd: number$1().nullable().optional(),
-	keySource: _enum(["byok", "platform"]).nullable().optional()
-});
-const HistoryRunUsageSchema = object({
-	runDurationMs: number$1().nullable(),
-	lineItems: array(HistoryRunUsageLineItemSchema),
-	/** Sum of `billedUsd` — what Keystroke charged for this run. */
-	totalBilledUsd: number$1().nullable(),
-	/** Sum of BYOK LLM provider costs (billed externally by the org's provider). */
-	externalProviderCostUsd: number$1().nullable().optional()
-});
-const HistoryRunSchema = object({
-	id: string(),
-	kind: HistoryRunKindSchema,
-	traceId: string().nullable(),
-	projectId: string(),
-	projectName: string(),
-	resourceKey: string(),
-	resourceId: string(),
-	resourceName: string(),
-	status: HistoryRunStatusSchema,
-	triggeredAt: string(),
-	timeInQueueMs: number$1().nullable(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	durationMs: number$1().nullable(),
-	triggerLabel: string(),
-	triggerRaw: string(),
-	ranAs: HistoryRunActorSchema.nullable(),
-	modelsUsed: array(string()),
-	otherServicesUsed: array(string()),
-	totalCostUsd: number$1().nullable(),
-	messageCount: number$1().optional(),
-	stepCount: number$1().optional()
-});
-const HistoryTraceSpanSchema = object({
-	id: string(),
-	traceId: string(),
-	parentSpanId: string().nullable(),
-	kind: string(),
-	refId: string(),
-	name: string(),
-	status: string(),
-	startedAt: string(),
-	finishedAt: string().nullable(),
-	metadata: unknown().nullable(),
-	error: unknown().nullable()
-});
-const HistoryTraceLogSchema = object({
-	id: string(),
-	traceId: string(),
-	spanId: string(),
-	seq: number$1(),
-	level: string(),
-	message: string(),
-	data: unknown().nullable(),
-	source: string(),
-	createdAt: string()
-});
-const HistoryTraceTriggerSchema = object({
-	triggerType: string(),
-	triggerRunId: string(),
-	workflowKey: string().optional(),
-	agentKey: string().optional(),
-	attachmentId: string().nullable().optional(),
-	attachmentSlug: string().nullable().optional(),
-	route: string().optional(),
-	sourcePath: string().nullable().optional()
-}).nullable();
-const HistoryTraceGatewaySchema = object({
-	gatewayAttachmentId: string(),
-	gatewayAttachmentKey: string(),
-	threadId: string().optional(),
-	channelId: string().optional(),
-	mode: string().optional()
-}).nullable();
-const HistoryTraceSchema = object({
-	traceId: string(),
-	trigger: HistoryTraceTriggerSchema,
-	gateway: HistoryTraceGatewaySchema,
-	spans: array(HistoryTraceSpanSchema),
-	logs: array(HistoryTraceLogSchema)
-});
-const HistoryWorkflowStepSchema = object({
-	id: string(),
-	actionKey: string(),
-	output: unknown(),
-	completedAt: string()
-});
-const HistoryRunDetailSchema = discriminatedUnion("kind", [object({
-	kind: literal("workflow"),
-	run: object({
-		id: string(),
-		workflowKey: string(),
-		status: HistoryRunStatusSchema,
-		trigger: string(),
-		triggeredAt: string(),
-		startedAt: string().nullable(),
-		finishedAt: string().nullable(),
-		input: unknown().nullable(),
-		output: unknown().nullable(),
-		error: unknown().nullable()
-	}),
-	trigger: object({
-		id: string(),
-		attachmentSlug: string().nullable(),
-		triggerType: string(),
-		sourcePath: string().nullable(),
-		payload: unknown().nullable(),
-		triggeredAt: string()
-	}).nullable(),
-	steps: array(HistoryWorkflowStepSchema),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-}), object({
-	kind: literal("agent"),
-	runId: string(),
-	session: object({
-		id: string(),
-		agentKey: string(),
-		status: HistoryRunStatusSchema,
-		source: _enum([
-			"api",
-			"gateway",
-			"trigger",
-			"workflow",
-			"agent"
-		]),
-		sourceId: string().nullable(),
-		createdAt: string(),
-		updatedAt: string(),
-		messageCount: number$1(),
-		error: unknown().nullable()
-	}),
-	gateway: object({
-		threadId: string(),
-		attachmentSlug: string().nullable()
-	}).nullable(),
-	messages: array(record(string(), unknown())),
-	live: record(string(), unknown()).nullable().default(null),
-	trace: HistoryTraceSchema.nullable(),
-	ranAs: HistoryRunActorSchema.nullable().optional(),
-	usage: HistoryRunUsageSchema.nullable().optional()
-})]);
-object({
-	project: string().min(1).optional(),
-	status: HistoryRunStatusSchema.optional(),
-	kind: HistoryRunKindSchema.optional()
-});
-HistoryRunDetailSchema.nullable();
-HistoryRunSchema.nullable();
 object({ subscriptions: array(object({
 	id: string(),
 	workflowKey: string(),
@@ -6827,7 +6913,8 @@ const TriggerRunRecordSchema = object({
 object({
 	limit: number().int().min(1).max(100).optional().default(20),
 	cursor: string().min(1).optional(),
-	triggerType: TriggerRunTypeSchema.optional()
+	triggerType: TriggerRunTypeSchema.optional(),
+	outcome: TriggerRunOutcomeSchema.optional()
 });
 object({
 	items: array(TriggerRunSummarySchema),
@@ -6895,7 +6982,8 @@ const WorkspaceTriggerRunStatusSchema = _enum([
 const WorkspaceTriggerSkipReasonSchema = _enum([
 	"filtered",
 	"no_new_data",
-	"transform_undefined"
+	"transform_undefined",
+	"payload_mismatch"
 ]);
 /**
 * A single downstream run/session a dispatched fire produced. A fan-out fire can
@@ -6926,7 +7014,9 @@ const WorkspaceTriggerRunOutcomeSchema = discriminatedUnion("kind", [
 	}),
 	object({
 		kind: literal("skipped"),
-		reason: WorkspaceTriggerSkipReasonSchema
+		reason: WorkspaceTriggerSkipReasonSchema,
+		/** One-line Zod issue summary when reason is payload_mismatch. */
+		detail: string().nullable().optional()
 	}),
 	object({
 		kind: literal("failed"),
@@ -6999,6 +7089,30 @@ object({
 	input: TriggerOverviewInputSchema
 });
 object({ enabled: boolean() });
+object({
+	input: unknown().optional(),
+	workflow: string().min(1).optional(),
+	agent: string().min(1).optional()
+});
+object({ runId: string().min(1) });
+object({
+	type: TriggerTypeSchema,
+	attachments: array(object({
+		attachmentSlug: string().min(1),
+		kind: TriggerTargetKindSchema,
+		targetSlug: string().min(1),
+		targetName: string().min(1),
+		enabled: boolean(),
+		/** Webhook attachment JSON Schema used to drive the invoke form. */
+		requestSchema: record(string(), unknown()).optional()
+	})),
+	/** Cron source static payload — display only; never overridden on invoke. */
+	staticPayload: unknown().optional()
+});
+object({
+	manual: literal(true),
+	attachments: array(string().min(1)).optional()
+});
 const OrganizationMemberRoleSchema = _enum([
 	"owner",
 	"admin",
@@ -7012,7 +7126,7 @@ const OrganizationMemberStatusSchema = _enum([
 ]);
 const InvitableOrganizationMemberRoleSchema = _enum(["admin", "builder"]);
 const isoDateTime$5 = string().datetime();
-object({
+const OrganizationMemberSchema = object({
 	id: string(),
 	name: string(),
 	email: string().email(),
@@ -7022,6 +7136,14 @@ object({
 	joinedAt: isoDateTime$5.optional(),
 	lastActiveAt: isoDateTime$5.nullable().optional()
 });
+object({
+	limit: number().int().min(1).max(200).optional(),
+	cursor: string().min(1).optional()
+});
+object({
+	items: array(OrganizationMemberSchema),
+	nextCursor: string().nullable()
+});
 object({
 	emails: array(string().trim().email()).min(1),
 	role: InvitableOrganizationMemberRoleSchema
@@ -7140,14 +7262,6 @@ object({
 	uploadUrl: url(),
 	storageKey: string().min(1)
 });
-function isValidIanaTimezone(value) {
-	try {
-		Intl.DateTimeFormat(void 0, { timeZone: value });
-		return true;
-	} catch {
-		return false;
-	}
-}
 const UserInterfaceThemeSchema = _enum([
 	"system",
 	"light",
@@ -7692,8 +7806,8 @@ function verifyOrgWorkerToken(secret, token) {
 }
 //#endregion
 //#region src/runtime-env.ts
+/** Non-secret runtime config forwarded into org workers. Never include platform secrets. */
 const RUNTIME_ENV_KEYS = [
-	"BETTER_AUTH_SECRET",
 	"PUBLIC_PLATFORM_URL",
 	"PUBLIC_PLATFORM_PROXY_URL",
 	"PUBLIC_WEB_URL",
@@ -7701,6 +7815,15 @@ const RUNTIME_ENV_KEYS = [
 	"REDIS_URL",
 	"KEYSTROKE_QUEUE_PREFIX"
 ];
+/** Env keys that must never be forwarded into untrusted org workers. */
+const FORBIDDEN_WORKER_ENV_KEYS = [
+	"BETTER_AUTH_SECRET",
+	"DATABASE_URL",
+	"POSTGRES_PASSWORD",
+	"PLATFORM_WORKER_TOKEN",
+	"STRIPE_SECRET_KEY",
+	"CREDENTIAL_ENCRYPTION_KEY"
+];
 /** Provider and gateway env forwarded from the platform into project servers. */
 const PROVIDER_ENV_KEYS = [
 	"ANTHROPIC_API_KEY",
@@ -7747,6 +7870,7 @@ function buildRuntimeEnv(source, artifacts, database, extraEnv) {
 	entries.set("PLATFORM_URL", worker.platformUrl);
 	entries.set("WORKER_INTERNAL_TOKEN", mintOrgWorkerToken(worker.workerToken, database.organizationId));
 	if (extraEnv) for (const [key, value] of Object.entries(extraEnv)) entries.set(key, value);
+	for (const key of FORBIDDEN_WORKER_ENV_KEYS) entries.delete(key);
 	return Object.fromEntries(entries);
 }
 function resolvePlatformWorkerToken(source = process.env) {
@@ -7997,6 +8121,6 @@ async function fetchDeployStatus(baseUrl, options = {}) {
 	}
 }
 //#endregion
-export { DEV_PLATFORM_WORKER_TOKEN, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, defaultHostingPlugin, dockerPlugin, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, verifyOrgWorkerToken, waitForHealth };
+export { DEV_PLATFORM_WORKER_TOKEN, FORBIDDEN_WORKER_ENV_KEYS, PROJECT_SERVER_DEPLOY_STATUS, PROJECT_SERVER_FRAMEWORK_NODE_MODULES, PROJECT_SERVER_FRAMEWORK_ROOT, PROJECT_SERVER_HEALTH, PROJECT_SERVER_IMAGE, PROJECT_SERVER_PORT, PROJECT_SERVER_ROOT, RUNTIME_PING_TIMEOUT_MS, WorkerRuntimeConfigError, buildRuntimeEnv, canPingProjectTarget, defaultHostingPlugin, dockerPlugin, encodeOrgArtifacts, fetchDeployStatus, formatDockerEnv, mintOrgWorkerToken, parseOrgArtifactsFromEnv, pingProject, pingProjectTarget, resolvePlatformWorkerToken, resolveProjectServerImage, resolveRuntimeLaunch, resolveWorkerPlatformUrl, resolveWorkerRuntimeConfig, rewriteLoopbackHost, rewriteLoopbackUrl, verifyOrgWorkerToken, waitForHealth };
 
 //# sourceMappingURL=index.mjs.map