OptionalattemptToken?: stringOptionaldeadlineMs?: numberRelative run deadline, measured from this start.
OptionaleconomicOperations?: readonly RunEconomicOperation[]Trusted settlement projection; never accepted by the public run router.
OptionalinitialState?: unknownInitial workflow state from an infrastructure-verified schedule target.
OptionalinputData?: unknownRequired: the runtime never generates a runId. Hosts mint it server-side (createRunRouter) so a client can never choose the identity a run is keyed by everywhere it lands (D1 snapshot row, DO name, R2 segment, grant-list predicate). A generation fallback here would let any caller that forgets to mint create a run under an id the host never issued.
OptionalscheduleDispatch?: RunScheduleDispatchTrusted schedule source; never accepted directly from a public request.
OptionalstoredRequestContext?: Record<string, unknown>Non-reserved application context from an infrastructure-verified schedule target. Runtime-owned keys are stripped again before execution.
Trusted requester id persisted with the authoritative run snapshot.
Trusted requester kind persisted alongside requestedBy.
Host recovery token persisted with the first executed snapshot.