@trigger.dev/core 4.8.1 → 4.8.3

package/dist/commonjs/v3/runTokenOperations.d.ts

@@ -0,0 +1,125 @@
+/** Audited against the server routes, not inferred from method names or HTTP verbs. */
+export declare const runTokenOperationPolicy: {
+    readonly triggerTask: true;
+    readonly batchTriggerV3: true;
+    readonly createBatch: true;
+    readonly streamBatchItems: true;
+    readonly createUploadPayloadUrl: true;
+    readonly getPayloadUrl: true;
+    readonly getRunPacketUrl: true;
+    readonly retrieveRun: true;
+    readonly cancelRun: true;
+    readonly resetIdempotencyKey: true;
+    readonly addTags: true;
+    readonly updateRunMetadata: true;
+    readonly getRunMetadata: true;
+    readonly createWaitpointToken: true;
+    readonly listWaitpointTokens: true;
+    readonly retrieveWaitpointToken: true;
+    readonly completeWaitpointToken: true;
+    readonly waitForWaitpointToken: true;
+    readonly waitForDuration: true;
+    readonly subscribeToRun: true;
+    readonly subscribeToRunsWithTag: true;
+    readonly subscribeToBatch: true;
+    readonly fetchStream: true;
+    readonly createStream: true;
+    readonly appendToStream: true;
+    readonly sendInputStream: true;
+    readonly createInputStreamWaitpoint: true;
+    readonly legacyStreamIngest: true;
+    readonly legacyStreamResumeProbe: true;
+    readonly createPublicToken: true;
+    readonly retrieveBatch: true;
+    readonly createChatSnapshotUploadUrl: true;
+    readonly getChatSnapshotUrl: true;
+    readonly getSessionTranscript: true;
+    readonly createSession: true;
+    readonly retrieveSession: true;
+    readonly updateSession: true;
+    readonly closeSession: true;
+    readonly endAndContinueSession: true;
+    readonly listSessions: true;
+    readonly initializeSessionStream: true;
+    readonly appendToSessionStream: true;
+    readonly readSessionStreamRecords: true;
+    readonly subscribeToSessionStream: true;
+    readonly createSessionStreamWaitpoint: true;
+    readonly resolvePrompt: true;
+    readonly createWebhookWaiter: true;
+    readonly cancelWebhookWaiter: true;
+    readonly listRuns: true;
+    readonly replayRun: true;
+    readonly createBulkAction: true;
+    readonly listBulkActions: true;
+    readonly retrieveBulkAction: true;
+    readonly abortBulkAction: true;
+    readonly listQueues: true;
+    readonly retrieveQueue: true;
+    readonly pauseQueue: true;
+    readonly overrideQueueConcurrencyLimit: true;
+    readonly resetQueueConcurrencyLimit: true;
+    readonly listConcurrencyLimits: true;
+    readonly retrieveConcurrencyLimit: true;
+    readonly retrieveConcurrencyLimitKey: true;
+    readonly overrideConcurrencyLimit: true;
+    readonly overrideConcurrencyLimitKey: true;
+    readonly pauseConcurrencyLimit: true;
+    readonly resetConcurrencyLimit: true;
+    readonly resetConcurrencyLimitKey: true;
+    readonly listDeployments: true;
+    readonly retrieveCurrentDeployment: true;
+    readonly executeQuery: true;
+    readonly executeQueryProjectOrOrganization: false;
+    readonly listPrompts: true;
+    readonly listPromptVersions: true;
+    readonly promotePromptVersion: true;
+    readonly createPromptOverride: true;
+    readonly updatePromptOverride: true;
+    readonly removePromptOverride: true;
+    readonly reactivatePromptOverride: true;
+    readonly retrieveRunTrace: true;
+    readonly retrieveRunTracePage: true;
+    readonly retrieveSpan: true;
+    readonly listRunEvents: true;
+    readonly getQuerySchema: true;
+    readonly getReport: true;
+    readonly listWebhookEndpoints: true;
+    readonly retrieveWebhookEndpoint: true;
+    readonly generateWebhookEndpointSecret: true;
+    readonly setWebhookEndpointSecret: true;
+    readonly listWebhookDeliveries: true;
+    readonly retrieveWebhookDelivery: true;
+    readonly replayWebhookDelivery: true;
+    readonly getRunResult: false;
+    readonly getBatchResults: false;
+    readonly rescheduleRun: false;
+    readonly createSchedule: false;
+    readonly listSchedules: false;
+    readonly retrieveSchedule: false;
+    readonly updateSchedule: false;
+    readonly deactivateSchedule: false;
+    readonly activateSchedule: false;
+    readonly deleteSchedule: false;
+    readonly listEnvVars: false;
+    readonly importEnvVars: false;
+    readonly retrieveEnvVar: false;
+    readonly createEnvVar: false;
+    readonly updateEnvVar: false;
+    readonly deleteEnvVar: false;
+    readonly generateJWTClaims: false;
+    readonly listProjectRuns: false;
+    readonly listDashboards: false;
+    readonly retrieveDashboard: false;
+    readonly createDashboard: false;
+    readonly updateDashboard: false;
+    readonly replaceDashboard: false;
+    readonly deleteDashboard: false;
+    readonly addDashboardWidget: false;
+    readonly updateDashboardWidget: false;
+    readonly deleteDashboardWidget: false;
+    readonly default: false;
+};
+export type RunTokenOperation = keyof typeof runTokenOperationPolicy;
+export declare function isRunTokenOperation(operation: string): operation is RunTokenOperation;
+export declare function supportsRunToken(operation: string): boolean;

package/dist/commonjs/v3/runTokenOperations.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runTokenOperationPolicy = void 0;
+exports.isRunTokenOperation = isRunTokenOperation;
+exports.supportsRunToken = supportsRunToken;
+/** Audited against the server routes, not inferred from method names or HTTP verbs. */
+exports.runTokenOperationPolicy = {
+    triggerTask: true,
+    batchTriggerV3: true,
+    createBatch: true,
+    streamBatchItems: true,
+    createUploadPayloadUrl: true,
+    getPayloadUrl: true,
+    getRunPacketUrl: true,
+    retrieveRun: true,
+    cancelRun: true,
+    resetIdempotencyKey: true,
+    addTags: true,
+    updateRunMetadata: true,
+    getRunMetadata: true,
+    createWaitpointToken: true,
+    listWaitpointTokens: true,
+    retrieveWaitpointToken: true,
+    completeWaitpointToken: true,
+    waitForWaitpointToken: true,
+    waitForDuration: true,
+    subscribeToRun: true,
+    subscribeToRunsWithTag: true,
+    subscribeToBatch: true,
+    fetchStream: true,
+    createStream: true,
+    appendToStream: true,
+    sendInputStream: true,
+    createInputStreamWaitpoint: true,
+    legacyStreamIngest: true,
+    legacyStreamResumeProbe: true,
+    createPublicToken: true,
+    retrieveBatch: true,
+    createChatSnapshotUploadUrl: true,
+    getChatSnapshotUrl: true,
+    getSessionTranscript: true,
+    createSession: true,
+    retrieveSession: true,
+    updateSession: true,
+    closeSession: true,
+    endAndContinueSession: true,
+    listSessions: true,
+    initializeSessionStream: true,
+    appendToSessionStream: true,
+    readSessionStreamRecords: true,
+    subscribeToSessionStream: true,
+    createSessionStreamWaitpoint: true,
+    resolvePrompt: true,
+    createWebhookWaiter: true,
+    cancelWebhookWaiter: true,
+    listRuns: true,
+    replayRun: true,
+    createBulkAction: true,
+    listBulkActions: true,
+    retrieveBulkAction: true,
+    abortBulkAction: true,
+    listQueues: true,
+    retrieveQueue: true,
+    pauseQueue: true,
+    overrideQueueConcurrencyLimit: true,
+    resetQueueConcurrencyLimit: true,
+    listConcurrencyLimits: true,
+    retrieveConcurrencyLimit: true,
+    retrieveConcurrencyLimitKey: true,
+    overrideConcurrencyLimit: true,
+    overrideConcurrencyLimitKey: true,
+    pauseConcurrencyLimit: true,
+    resetConcurrencyLimit: true,
+    resetConcurrencyLimitKey: true,
+    listDeployments: true,
+    retrieveCurrentDeployment: true,
+    executeQuery: true,
+    executeQueryProjectOrOrganization: false,
+    listPrompts: true,
+    listPromptVersions: true,
+    promotePromptVersion: true,
+    createPromptOverride: true,
+    updatePromptOverride: true,
+    removePromptOverride: true,
+    reactivatePromptOverride: true,
+    retrieveRunTrace: true,
+    retrieveRunTracePage: true,
+    retrieveSpan: true,
+    listRunEvents: true,
+    getQuerySchema: true,
+    getReport: true,
+    listWebhookEndpoints: true,
+    retrieveWebhookEndpoint: true,
+    generateWebhookEndpointSecret: true,
+    setWebhookEndpointSecret: true,
+    listWebhookDeliveries: true,
+    retrieveWebhookDelivery: true,
+    replayWebhookDelivery: true,
+    // These still use legacy authentication or PAT-only authentication.
+    getRunResult: false,
+    getBatchResults: false,
+    rescheduleRun: false,
+    createSchedule: false,
+    listSchedules: false,
+    retrieveSchedule: false,
+    updateSchedule: false,
+    deactivateSchedule: false,
+    activateSchedule: false,
+    deleteSchedule: false,
+    listEnvVars: false,
+    importEnvVars: false,
+    retrieveEnvVar: false,
+    createEnvVar: false,
+    updateEnvVar: false,
+    deleteEnvVar: false,
+    generateJWTClaims: false,
+    listProjectRuns: false,
+    // Run tokens cannot access organization-wide dashboards.
+    listDashboards: false,
+    retrieveDashboard: false,
+    createDashboard: false,
+    updateDashboard: false,
+    replaceDashboard: false,
+    deleteDashboard: false,
+    addDashboardWidget: false,
+    updateDashboardWidget: false,
+    deleteDashboardWidget: false,
+    default: false,
+};
+function isRunTokenOperation(operation) {
+    return Object.hasOwn(exports.runTokenOperationPolicy, operation);
+}
+function supportsRunToken(operation) {
+    return isRunTokenOperation(operation) && exports.runTokenOperationPolicy[operation];
+}
+//# sourceMappingURL=runTokenOperations.js.map

package/dist/commonjs/v3/runTokenOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runTokenOperations.js","sourceRoot":"","sources":["../../../src/v3/runTokenOperations.ts"],"names":[],"mappings":";;;;;AAAA,uFAAuF;AAC1E,QAAA,uBAAuB,GAAG;IACrC,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE,IAAI;IACpB,WAAW,EAAE,IAAI;IACjB,gBAAgB,EAAE,IAAI;IACtB,sBAAsB,EAAE,IAAI;IAC5B,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,mBAAmB,EAAE,IAAI;IACzB,OAAO,EAAE,IAAI;IACb,iBAAiB,EAAE,IAAI;IACvB,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,mBAAmB,EAAE,IAAI;IACzB,sBAAsB,EAAE,IAAI;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,qBAAqB,EAAE,IAAI;IAC3B,eAAe,EAAE,IAAI;IACrB,cAAc,EAAE,IAAI;IACpB,sBAAsB,EAAE,IAAI;IAC5B,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,IAAI;IAClB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI;IACrB,0BAA0B,EAAE,IAAI;IAChC,kBAAkB,EAAE,IAAI;IACxB,uBAAuB,EAAE,IAAI;IAC7B,iBAAiB,EAAE,IAAI;IACvB,aAAa,EAAE,IAAI;IACnB,2BAA2B,EAAE,IAAI;IACjC,kBAAkB,EAAE,IAAI;IACxB,oBAAoB,EAAE,IAAI;IAC1B,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,IAAI;IAClB,qBAAqB,EAAE,IAAI;IAC3B,YAAY,EAAE,IAAI;IAClB,uBAAuB,EAAE,IAAI;IAC7B,qBAAqB,EAAE,IAAI;IAC3B,wBAAwB,EAAE,IAAI;IAC9B,wBAAwB,EAAE,IAAI;IAC9B,4BAA4B,EAAE,IAAI;IAClC,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,IAAI;IAEzB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,IAAI;IACnB,UAAU,EAAE,IAAI;IAChB,6BAA6B,EAAE,IAAI;IACnC,0BAA0B,EAAE,IAAI;IAChC,qBAAqB,EAAE,IAAI;IAC3B,wBAAwB,EAAE,IAAI;IAC9B,2BAA2B,EAAE,IAAI;IACjC,wBAAwB,EAAE,IAAI;IAC9B,2BAA2B,EAAE,IAAI;IACjC,qBAAqB,EAAE,IAAI;IAC3B,qBAAqB,EAAE,IAAI;IAC3B,wBAAwB,EAAE,IAAI;IAC9B,eAAe,EAAE,IAAI;IACrB,yBAAyB,EAAE,IAAI;IAC/B,YAAY,EAAE,IAAI;IAClB,iCAAiC,EAAE,KAAK;IACxC,WAAW,EAAE,IAAI;IACjB,kBAAkB,EAAE,IAAI;IACxB,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,IAAI;IAC1B,wBAAwB,EAAE,IAAI;IAC9B,gBAAgB,EAAE,IAAI;IACtB,oBAAoB,EAAE,IAAI;IAC1B,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,IAAI;IACf,oBAAoB,EAAE,IAAI;IAC1B,uBAAuB,EAAE,IAAI;IAC7B,6BAA6B,EAAE,IAAI;IACnC,wBAAwB,EAAE,IAAI;IAC9B,qBAAqB,EAAE,IAAI;IAC3B,uBAAuB,EAAE,IAAI;IAC7B,qBAAqB,EAAE,IAAI;IAE3B,oEAAoE;IACpE,YAAY,EAAE,KAAK;IACnB,eAAe,EAAE,KAAK;IACtB,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,KAAK;IACrB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,iBAAiB,EAAE,KAAK;IACxB,eAAe,EAAE,KAAK;IAEtB,yDAAyD;IACzD,cAAc,EAAE,KAAK;IACrB,iBAAiB,EAAE,KAAK;IACxB,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,gBAAgB,EAAE,KAAK;IACvB,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE,KAAK;IAC5B,qBAAqB,EAAE,KAAK;IAC5B,OAAO,EAAE,KAAK;CACN,CAAC;AAIX,6BAAoC,SAAiB;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAA,uBAAuB,EAAE,SAAS,CAAC,CAAC;AAC3D,CAAC;AAED,0BAAiC,SAAiB;IAChD,OAAO,mBAAmB,CAAC,SAAS,CAAC,IAAI,QAAA,uBAAuB,CAAC,SAAS,CAAC,CAAC;AAC9E,CAAC"}

package/dist/commonjs/v3/runTokenTelemetry.d.ts

@@ -0,0 +1,3 @@
+import type { SdkCredentialTelemetryReason } from "./sdkCredentialTelemetry.js";
+export type RunTokenSelectionReason = SdkCredentialTelemetryReason | "outside_task";
+export declare function recordRunTokenSelection(operation: string, credential: string | undefined, reason: RunTokenSelectionReason): void;

package/dist/commonjs/v3/runTokenTelemetry.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordRunTokenSelection = recordRunTokenSelection;
+const api_1 = require("@opentelemetry/api");
+const version_js_1 = require("../version.js");
+const runTokenOperations_js_1 = require("./runTokenOperations.js");
+const task_context_api_js_1 = require("./task-context-api.js");
+const reportedFallbacks = new Set();
+function recordRunTokenSelection(operation, credential, reason) {
+    if (!task_context_api_js_1.taskContext.isInsideTask || reason === "selected" || reason === "outside_task")
+        return;
+    const boundedOperation = (0, runTokenOperations_js_1.isRunTokenOperation)(operation) ? operation : "unknown";
+    const key = `${boundedOperation}:${reason}`;
+    if (reportedFallbacks.has(key))
+        return;
+    reportedFallbacks.add(key);
+    // The global MeterProvider exports customer metrics, not internal rollout telemetry.
+    try {
+        api_1.diag.debug("Trigger.dev SDK run-token compatibility fallback", {
+            operation: boundedOperation,
+            credential_kind: credential ? "fallback" : "none",
+            reason,
+            sdk_version: version_js_1.VERSION,
+        });
+    }
+    catch {
+        // Diagnostics must not prevent an API request.
+    }
+}
+//# sourceMappingURL=runTokenTelemetry.js.map

package/dist/commonjs/v3/runTokenTelemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runTokenTelemetry.js","sourceRoot":"","sources":["../../../src/v3/runTokenTelemetry.ts"],"names":[],"mappings":";;;AAAA,4CAA0C;AAC1C,8CAAwC;AACxC,mEAA8D;AAE9D,+DAAoD;AAIpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5C,iCACE,SAAiB,EACjB,UAA8B,EAC9B,MAA+B;IAE/B,IAAI,CAAC,iCAAW,CAAC,YAAY,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO;IAC5F,MAAM,gBAAgB,GAAG,IAAA,2CAAmB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,GAAG,GAAG,GAAG,gBAAgB,IAAI,MAAM,EAAE,CAAC;IAC5C,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IACvC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE3B,qFAAqF;IACrF,IAAI,CAAC;QACH,UAAI,CAAC,KAAK,CAAC,kDAAkD,EAAE;YAC7D,SAAS,EAAE,gBAAgB;YAC3B,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YACjD,MAAM;YACN,WAAW,EAAE,oBAAO;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC"}

package/dist/commonjs/v3/schemas/api.d.ts

@@ -20,6 +20,8 @@ export declare const GetProjectResponseBody: z.ZodObject<{
     defaultRegion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     defaultRuntime: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         bun: "bun";
+        "bun-1.4": "bun-1.4";
+        "bun-legacy": "bun-legacy";
         node: "node";
         "node-22": "node-22";
         "node-24": "node-24";
@@ -42,6 +44,8 @@ export declare const GetProjectsResponseBody: z.ZodArray<z.ZodObject<{
     defaultRegion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     defaultRuntime: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         bun: "bun";
+        "bun-1.4": "bun-1.4";
+        "bun-legacy": "bun-legacy";
         node: "node";
         "node-22": "node-22";
         "node-24": "node-24";
@@ -130,6 +134,8 @@ export declare const GetProjectEnvResponse: z.ZodObject<{
     projectId: z.ZodString;
     defaultRuntime: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         bun: "bun";
+        "bun-1.4": "bun-1.4";
+        "bun-legacy": "bun-legacy";
         node: "node";
         "node-22": "node-22";
         "node-24": "node-24";
@@ -419,6 +425,7 @@ export declare const CreateBackgroundWorkerRequestBody: z.ZodObject<{
                     scheme: z.ZodLiteral<"asymmetric">;
                     algorithm: z.ZodEnum<{
                         "ecdsa-p256": "ecdsa-p256";
+                        "ecdsa-p384": "ecdsa-p384";
                         ed25519: "ed25519";
                         "rsa-sha256": "rsa-sha256";
                     }>;
@@ -480,6 +487,9 @@ export declare const CreateBackgroundWorkerRequestBody: z.ZodObject<{
                             value: z.ZodString;
                         }, z.core.$strip>]>>>;
                     }, z.core.$strip>]>;
+                    prehash: z.ZodOptional<z.ZodEnum<{
+                        sha256: "sha256";
+                    }>>;
                     publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                         pem: "pem";
                         "raw-base64": "raw-base64";
@@ -633,6 +643,7 @@ export declare const CreateBackgroundWorkerRequestBody: z.ZodObject<{
                     scheme: z.ZodLiteral<"asymmetric">;
                     algorithm: z.ZodEnum<{
                         "ecdsa-p256": "ecdsa-p256";
+                        "ecdsa-p384": "ecdsa-p384";
                         ed25519: "ed25519";
                         "rsa-sha256": "rsa-sha256";
                     }>;
@@ -694,6 +705,9 @@ export declare const CreateBackgroundWorkerRequestBody: z.ZodObject<{
                             value: z.ZodString;
                         }, z.core.$strip>]>>>;
                     }, z.core.$strip>]>;
+                    prehash: z.ZodOptional<z.ZodEnum<{
+                        sha256: "sha256";
+                    }>>;
                     publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                         pem: "pem";
                         "raw-base64": "raw-base64";
@@ -1990,6 +2004,7 @@ export declare const DevDequeueResponseBody: z.ZodObject<{
         dequeuedAt: z.ZodCoercedDate<unknown>;
         workerQueueLength: z.ZodOptional<z.ZodNumber>;
         image: z.ZodOptional<z.ZodString>;
+        templateKey: z.ZodOptional<z.ZodString>;
         checkpoint: z.ZodOptional<z.ZodObject<{
             id: z.ZodString;
             type: z.ZodEnum<{

package/dist/commonjs/v3/schemas/build.d.ts

@@ -12,6 +12,8 @@ export declare const BuildTarget: z.ZodEnum<{
 export type BuildTarget = z.infer<typeof BuildTarget>;
 export declare const ConfigRuntime: z.ZodEnum<{
     bun: "bun";
+    "bun-1.4": "bun-1.4";
+    "bun-legacy": "bun-legacy";
     "experimental-node-24": "experimental-node-24";
     "experimental-node-26": "experimental-node-26";
     node: "node";
@@ -22,6 +24,8 @@ export declare const ConfigRuntime: z.ZodEnum<{
 export type ConfigRuntime = z.infer<typeof ConfigRuntime>;
 export declare const BuildRuntime: z.ZodEnum<{
     bun: "bun";
+    "bun-1.4": "bun-1.4";
+    "bun-legacy": "bun-legacy";
     node: "node";
     "node-22": "node-22";
     "node-24": "node-24";
@@ -39,6 +43,8 @@ export declare const BuildManifest: z.ZodObject<{
     contentHash: z.ZodString;
     runtime: z.ZodEnum<{
         bun: "bun";
+        "bun-1.4": "bun-1.4";
+        "bun-legacy": "bun-legacy";
         node: "node";
         "node-22": "node-22";
         "node-24": "node-24";
@@ -118,6 +124,8 @@ export declare const IndexMessage: z.ZodObject<{
             contentHash: z.ZodString;
             runtime: z.ZodEnum<{
                 bun: "bun";
+                "bun-1.4": "bun-1.4";
+                "bun-legacy": "bun-legacy";
                 node: "node";
                 "node-22": "node-22";
                 "node-24": "node-24";
@@ -402,6 +410,7 @@ export declare const WorkerManifest: z.ZodObject<{
                 scheme: z.ZodLiteral<"asymmetric">;
                 algorithm: z.ZodEnum<{
                     "ecdsa-p256": "ecdsa-p256";
+                    "ecdsa-p384": "ecdsa-p384";
                     ed25519: "ed25519";
                     "rsa-sha256": "rsa-sha256";
                 }>;
@@ -463,6 +472,9 @@ export declare const WorkerManifest: z.ZodObject<{
                         value: z.ZodString;
                     }, z.core.$strip>]>>>;
                 }, z.core.$strip>]>;
+                prehash: z.ZodOptional<z.ZodEnum<{
+                    sha256: "sha256";
+                }>>;
                 publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                     pem: "pem";
                     "raw-base64": "raw-base64";
@@ -616,6 +628,7 @@ export declare const WorkerManifest: z.ZodObject<{
                 scheme: z.ZodLiteral<"asymmetric">;
                 algorithm: z.ZodEnum<{
                     "ecdsa-p256": "ecdsa-p256";
+                    "ecdsa-p384": "ecdsa-p384";
                     ed25519: "ed25519";
                     "rsa-sha256": "rsa-sha256";
                 }>;
@@ -677,6 +690,9 @@ export declare const WorkerManifest: z.ZodObject<{
                         value: z.ZodString;
                     }, z.core.$strip>]>>>;
                 }, z.core.$strip>]>;
+                prehash: z.ZodOptional<z.ZodEnum<{
+                    sha256: "sha256";
+                }>>;
                 publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                     pem: "pem";
                     "raw-base64": "raw-base64";
@@ -764,6 +780,8 @@ export declare const WorkerManifest: z.ZodObject<{
     initEntryPoint: z.ZodOptional<z.ZodString>;
     runtime: z.ZodEnum<{
         bun: "bun";
+        "bun-1.4": "bun-1.4";
+        "bun-legacy": "bun-legacy";
         node: "node";
         "node-22": "node-22";
         "node-24": "node-24";
@@ -1002,6 +1020,7 @@ export declare const WorkerManifestMessage: z.ZodObject<{
                         scheme: z.ZodLiteral<"asymmetric">;
                         algorithm: z.ZodEnum<{
                             "ecdsa-p256": "ecdsa-p256";
+                            "ecdsa-p384": "ecdsa-p384";
                             ed25519: "ed25519";
                             "rsa-sha256": "rsa-sha256";
                         }>;
@@ -1063,6 +1082,9 @@ export declare const WorkerManifestMessage: z.ZodObject<{
                                 value: z.ZodString;
                             }, z.core.$strip>]>>>;
                         }, z.core.$strip>]>;
+                        prehash: z.ZodOptional<z.ZodEnum<{
+                            sha256: "sha256";
+                        }>>;
                         publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                             pem: "pem";
                             "raw-base64": "raw-base64";
@@ -1216,6 +1238,7 @@ export declare const WorkerManifestMessage: z.ZodObject<{
                         scheme: z.ZodLiteral<"asymmetric">;
                         algorithm: z.ZodEnum<{
                             "ecdsa-p256": "ecdsa-p256";
+                            "ecdsa-p384": "ecdsa-p384";
                             ed25519: "ed25519";
                             "rsa-sha256": "rsa-sha256";
                         }>;
@@ -1277,6 +1300,9 @@ export declare const WorkerManifestMessage: z.ZodObject<{
                                 value: z.ZodString;
                             }, z.core.$strip>]>>>;
                         }, z.core.$strip>]>;
+                        prehash: z.ZodOptional<z.ZodEnum<{
+                            sha256: "sha256";
+                        }>>;
                         publicKeyEncoding: z.ZodOptional<z.ZodEnum<{
                             pem: "pem";
                             "raw-base64": "raw-base64";
@@ -1364,6 +1390,8 @@ export declare const WorkerManifestMessage: z.ZodObject<{
             initEntryPoint: z.ZodOptional<z.ZodString>;
             runtime: z.ZodEnum<{
                 bun: "bun";
+                "bun-1.4": "bun-1.4";
+                "bun-legacy": "bun-legacy";
                 node: "node";
                 "node-22": "node-22";
                 "node-24": "node-24";

package/dist/commonjs/v3/schemas/build.js

@@ -17,9 +17,22 @@ exports.ConfigRuntime = v4_1.z.enum([
     // Deprecated aliases, kept for backwards compatibility. Use "node-24"/"node-26" instead.
     "experimental-node-24",
     "experimental-node-26",
+    // "bun" and "bun-legacy" are the same runtime: bun 1.3 alongside a node binary. "bun" stays the
+    // default spelling so existing configs, bundles and build extensions keep working unchanged.
     "bun",
+    "bun-legacy",
+    // Node-less bun runtime: the image contains no node binary.
+    "bun-1.4",
+]);
+exports.BuildRuntime = v4_1.z.enum([
+    "node",
+    "node-22",
+    "node-24",
+    "node-26",
+    "bun",
+    "bun-legacy",
+    "bun-1.4",
 ]);
-exports.BuildRuntime = v4_1.z.enum(["node", "node-22", "node-24", "node-26", "bun"]);
 exports.BuildManifest = v4_1.z.object({
     target: exports.BuildTarget,
     packageVersion: v4_1.z.string(),

package/dist/commonjs/v3/schemas/build.js.map

@@ -1 +1 @@
-{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../../src/v3/schemas/build.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAC3B,2CAA6C;AAC7C,6CASsB;AAET,QAAA,aAAa,GAAG,MAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIU,QAAA,WAAW,GAAG,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAIrD,QAAA,aAAa,GAAG,MAAC,CAAC,IAAI,CAAC;IAClC,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,yFAAyF;IACzF,sBAAsB;IACtB,sBAAsB;IACtB,KAAK;CACN,CAAC,CAAC;AAIU,QAAA,YAAY,GAAG,MAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAIxE,QAAA,aAAa,GAAG,MAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,QAAA,WAAW;IACnB,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,MAAC,CAAC,MAAM,EAAE;IAC7B,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,QAAA,YAAY;IACrB,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,0BAAc;IACtB,KAAK,EAAE,MAAC,CAAC,KAAK,CAAC,qBAAQ,CAAC;IACxB,OAAO,EAAE,MAAC,CAAC,MAAM,CACf,MAAC,CAAC,MAAM,EAAE,EACV,MAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE;QACpB,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;KACxB,CAAC,CACH;IACD,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,mBAAmB,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,yCAAyC;IAC1E,uBAAuB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,4CAA4C;IAC5F,qBAAqB,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,2CAA2C;IAC9E,yBAAyB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,8CAA8C;IAChG,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,+BAA+B;IACtE,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,QAAA,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,MAAC,CAAC,MAAM,CAAC;QACd,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChD,QAAQ,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;IACF,gBAAgB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,MAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,MAAC;aACJ,MAAM,CAAC;YACN,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAChD,SAAS,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACtD,SAAS,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACtD,eAAe,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7D,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;IACF,KAAK,EAAE,MAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,YAAY,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,MAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,QAAQ,EAAE;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,qFAAqF;IACrF,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIU,QAAA,YAAY,GAAG,MAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,IAAI,EAAE,MAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,QAAA,aAAa;KACrB,CAAC;CACH,CAAC,CAAC;AAIU,QAAA,cAAc,GAAG,MAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,yBAAY,CAAC,KAAK,EAAE;IAC3B,OAAO,EAAE,2BAAc,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACxC,gBAAgB,EAAE,oCAAuB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC5D,kBAAkB,EAAE,sCAAyB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAChE,wBAAwB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,8CAA8C;IACxG,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACxC,iBAAiB,EAAE,qCAAwB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC9D,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE;IAC5B,oBAAoB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,+BAA+B;IACtE,OAAO,EAAE,QAAA,YAAY;IACrB,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,MAAC;SAChB,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,OAAO,EAAE;QACpB,uBAAuB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChE,CAAC;SACD,QAAQ,EAAE;IAEb,cAAc,EAAE,MAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAIU,QAAA,qBAAqB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,IAAI,EAAE,MAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,QAAA,cAAc;KACzB,CAAC;CACH,CAAC,CAAC;AAIU,QAAA,WAAW,GAAG,MAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIU,QAAA,oBAAoB,GAAG,MAAC,CAAC,KAAK,CAAC,QAAA,WAAW,CAAC,CAAC"}
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../../src/v3/schemas/build.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAC3B,2CAA6C;AAC7C,6CASsB;AAET,QAAA,aAAa,GAAG,MAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIU,QAAA,WAAW,GAAG,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAIrD,QAAA,aAAa,GAAG,MAAC,CAAC,IAAI,CAAC;IAClC,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,yFAAyF;IACzF,sBAAsB;IACtB,sBAAsB;IACtB,gGAAgG;IAChG,6FAA6F;IAC7F,KAAK;IACL,YAAY;IACZ,4DAA4D;IAC5D,SAAS;CACV,CAAC,CAAC;AAIU,QAAA,YAAY,GAAG,MAAC,CAAC,IAAI,CAAC;IACjC,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,KAAK;IACL,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAIU,QAAA,aAAa,GAAG,MAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,QAAA,WAAW;IACnB,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,MAAC,CAAC,MAAM,EAAE;IAC7B,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,QAAA,YAAY;IACrB,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,0BAAc;IACtB,KAAK,EAAE,MAAC,CAAC,KAAK,CAAC,qBAAQ,CAAC;IACxB,OAAO,EAAE,MAAC,CAAC,MAAM,CACf,MAAC,CAAC,MAAM,EAAE,EACV,MAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE;QACpB,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;KACxB,CAAC,CACH;IACD,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,mBAAmB,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,yCAAyC;IAC1E,uBAAuB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,4CAA4C;IAC5F,qBAAqB,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,2CAA2C;IAC9E,yBAAyB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,8CAA8C;IAChG,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,+BAA+B;IACtE,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,QAAA,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,MAAC,CAAC,MAAM,CAAC;QACd,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChD,QAAQ,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;IACF,gBAAgB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,MAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,MAAC;aACJ,MAAM,CAAC;YACN,GAAG,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAChD,SAAS,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACtD,SAAS,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACtD,eAAe,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7D,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;IACF,KAAK,EAAE,MAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpC,YAAY,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,MAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,QAAQ,EAAE;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,qFAAqF;IACrF,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIU,QAAA,YAAY,GAAG,MAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,IAAI,EAAE,MAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,QAAA,aAAa;KACrB,CAAC;CACH,CAAC,CAAC;AAIU,QAAA,cAAc,GAAG,MAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,yBAAY,CAAC,KAAK,EAAE;IAC3B,OAAO,EAAE,2BAAc,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACxC,gBAAgB,EAAE,oCAAuB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC5D,kBAAkB,EAAE,sCAAyB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAChE,wBAAwB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,8CAA8C;IACxG,MAAM,EAAE,0BAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACxC,iBAAiB,EAAE,qCAAwB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC9D,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE;IAC5B,oBAAoB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,+BAA+B;IACtE,OAAO,EAAE,QAAA,YAAY;IACrB,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,MAAC;SAChB,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,OAAO,EAAE;QACpB,uBAAuB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChE,CAAC;SACD,QAAQ,EAAE;IAEb,cAAc,EAAE,MAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAIU,QAAA,qBAAqB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,IAAI,EAAE,MAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,QAAA,cAAc;KACzB,CAAC;CACH,CAAC,CAAC;AAIU,QAAA,WAAW,GAAG,MAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIU,QAAA,oBAAoB,GAAG,MAAC,CAAC,KAAK,CAAC,QAAA,WAAW,CAAC,CAAC"}

package/dist/commonjs/v3/schemas/checkpoints.d.ts

@@ -41,6 +41,7 @@ export declare const CheckpointServiceRestoreRequestBody: z.ZodObject<{
     dequeuedAt: z.ZodCoercedDate<unknown>;
     workerQueueLength: z.ZodOptional<z.ZodNumber>;
     image: z.ZodOptional<z.ZodString>;
+    templateKey: z.ZodOptional<z.ZodString>;
     checkpoint: z.ZodNonOptional<z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         type: z.ZodEnum<{

package/dist/commonjs/v3/schemas/common.d.ts

@@ -3,9 +3,10 @@ export type Enum<T extends string> = {
     [K in T]: K;
 };
 /**
- * Prototype-pollution guard for run metadata operation keys. JSON paths are applied via
- * JSONHeroPath, so dangerous path segments must be rejected. Literal keys are assigned directly,
- * where only __proto__ can change the target object's prototype.
+ * Whether a run metadata operation key can be applied at all. JSON paths are applied via
+ * JSONHeroPath, so dangerous path segments must be rejected. JSONHeroPath unescapes `\.` when it
+ * parses a path and re-splits on it when it writes, so backslashes are segment boundaries too.
+ * Literal keys are assigned directly, where only __proto__ can change the target object's prototype.
  */
 export declare function isSafeMetadataKey(key: string): boolean;
 export declare const RunMetadataUpdateOperation: z.ZodObject<{

package/dist/commonjs/v3/schemas/common.js

@@ -7,17 +7,30 @@ const zod_js_1 = require("../utils/zod.js");
 const json_js_1 = require("../../schemas/json.js");
 const DANGEROUS_METADATA_KEY_SEGMENTS = new Set(["__proto__", "constructor", "prototype"]);
 /**
- * Prototype-pollution guard for run metadata operation keys. JSON paths are applied via
- * JSONHeroPath, so dangerous path segments must be rejected. Literal keys are assigned directly,
- * where only __proto__ can change the target object's prototype.
+ * Whether a run metadata operation key can be applied at all. JSON paths are applied via
+ * JSONHeroPath, so dangerous path segments must be rejected. JSONHeroPath unescapes `\.` when it
+ * parses a path and re-splits on it when it writes, so backslashes are segment boundaries too.
+ * Literal keys are assigned directly, where only __proto__ can change the target object's prototype.
  */
 function isSafeMetadataKey(key) {
+    return namesBelowRoot(key) && hasNoDangerousSegment(key);
+}
+// JSONHeroPath's own component pattern; parsing with JSONHeroPath here would shift its shared regex state.
+const JSON_PATH_COMPONENTS = /(?:[^.\\]|\\.)+/g;
+/** JSONHeroPath reads a key with no component after `$` (`$.`, `$..`) as the root, which it cannot set. */
+function namesBelowRoot(key) {
+    return !key.startsWith("$.") || (key.match(JSON_PATH_COMPONENTS)?.length ?? 0) > 1;
+}
+function hasNoDangerousSegment(key) {
     if (!key.startsWith("$.")) {
         return key !== "__proto__";
     }
-    return !key.split(/[.[\]'"]+/).some((segment) => DANGEROUS_METADATA_KEY_SEGMENTS.has(segment));
+    return !key.split(/[.[\]'"\\]+/).some((segment) => DANGEROUS_METADATA_KEY_SEGMENTS.has(segment));
 }
-const MetadataOperationKey = v4_1.z.string().refine(isSafeMetadataKey, {
+const MetadataOperationKey = v4_1.z
+    .string()
+    .refine(namesBelowRoot, { message: "A JSON path key must name a segment below $" })
+    .refine(hasNoDangerousSegment, {
     message: "Metadata key may not reference __proto__, constructor, or prototype",
 });
 exports.RunMetadataUpdateOperation = v4_1.z.object({