parent_hashesstring[]
The first element is the direct parent of the script, the second is the parent of the first, etc
descriptionstring required
created_bystring required
created_atstring date-time required
is_templateboolean required
extra_permsobject required
language'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb' | 'bunnative' | 'dbt' required
kind'script' | 'failure' | 'trigger' | 'command' | 'approval' | 'preprocessor' required
concurrency_time_window_sinteger
debounce_args_to_accumulatestring[]
max_total_debouncing_timeinteger
max_total_debounces_amountinteger
cache_ignore_s3_pathboolean
ws_error_handler_mutedboolean
restart_unless_cancelledboolean
delete_after_secsinteger
If set, delete the job's args, result and logs after this many seconds following job completion
visible_to_runner_onlyboolean
has_preprocessorboolean required
on_behalf_ofstring
Authorization identity the runnable runs as: u/{username}, g/{group}, or a bare email when the username is itself email-shaped. The only stored half of the identity; on_behalf_of_email is derived from it.
modulesobject nullable
Additional script modules keyed by relative file path
job_token_scopesstring[] nullable
Scopes the token of every job of this runnable is restricted to (domain:action[:resource], e.g. oidc:write). Jobs it starts, flow steps and AI agent tools inherit the restriction. Unset, the job token carries the full permissions of the identity the job runs as; an empty list leaves it no API access beyond its own job.
inherited_labelsstring[]
Labels inherited from the parent folder, computed at read time. Read-only — edit them on the folder.