From 426fa95e59976b84fd2a08d38d3423d71f1d5a65 Mon Sep 17 00:00:00 2001
From: Nathan Flurry <git@nathanflurry.com>
Date: Thu, 1 Oct 2026 17:17:39 -0700
Subject: [PATCH 1/2] fix(publish): retain Windows and npm authentication
 release fixes

---
 .github/workflows/publish.yaml      | 21 ++++++++--
 docker/build/windows-x64.Dockerfile |  4 ++
 scripts/publish/src/ci/bin.ts       | 59 +++++++++++++++++++++++++++++
 3 files changed, 80 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index eef0029666..cd87ba723d 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -74,6 +74,9 @@ jobs:
   context:
     name: "Context"
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write
     outputs:
       trigger: ${{ steps.ctx.outputs.trigger }}
       version: ${{ steps.ctx.outputs.version }}
@@ -98,6 +101,9 @@ jobs:
       - id: ctx
         name: Resolve publish context
         run: pnpm --filter=publish exec tsx src/ci/bin.ts context-output
+      - name: Check npm trusted publishing
+        if: steps.ctx.outputs.trigger == 'release'
+        run: pnpm --filter=publish exec tsx src/ci/bin.ts check-npm-oidc
 
   # ---------------------------------------------------------------------------
   # build — matrix of native/engine artifacts
@@ -443,7 +449,7 @@ jobs:
       - run: corepack enable
       - uses: actions/setup-node@v4
         with:
-          node-version: "24"
+          node-version: "24.20.0"
           registry-url: "https://registry.npmjs.org"
           cache: pnpm
       - run: pnpm install --frozen-lockfile
@@ -624,11 +630,18 @@ jobs:
 
       - name: Publish npm packages
         env:
-          # setup-node provides a dummy token value; clear it so token-only
-          # post-publish operations stay disabled for trusted publishing.
-          NODE_AUTH_TOKEN: ""
           SKIP_WASM_BUILD: "1"
         run: |
+          # setup-node writes an auth token placeholder into npmrc. Remove it
+          # so npm uses the GitHub OIDC credentials for trusted publishing.
+          if [ -f "${NPM_CONFIG_USERCONFIG:-}" ]; then
+            sed -i '/:_authToken=/d' "$NPM_CONFIG_USERCONFIG"
+          fi
+          unset NODE_AUTH_TOKEN
+          if [ -z "${ACTIONS_ID_TOKEN_REQUEST_URL:-}" ] || [ -z "${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-}" ]; then
+            echo "GitHub OIDC token request is unavailable" >&2
+            exit 1
+          fi
           pnpm --filter=publish exec tsx src/ci/bin.ts publish-npm \
             --tag ${{ needs.context.outputs.npm_tag }} \
             --parallel 16 \
diff --git a/docker/build/windows-x64.Dockerfile b/docker/build/windows-x64.Dockerfile
index 45f7f00eeb..d1e1792f54 100644
--- a/docker/build/windows-x64.Dockerfile
+++ b/docker/build/windows-x64.Dockerfile
@@ -11,6 +11,10 @@
 # Base image: docker/builder-base/windows-mingw.Dockerfile
 FROM ghcr.io/rivet-dev/rivet/builder-base-windows-mingw:0e33ceb98
 
+# aws-lc-sys needs NASM when cross-compiling for Windows.
+RUN apt-get update && apt-get install -y --no-install-recommends nasm && \
+    rm -rf /var/lib/apt/lists/*
+
 ARG BUILD_TARGET=engine
 ARG BUILD_MODE=release
 ARG BUILD_FRONTEND=false
diff --git a/scripts/publish/src/ci/bin.ts b/scripts/publish/src/ci/bin.ts
index 94c6ae9172..7e898e9155 100644
--- a/scripts/publish/src/ci/bin.ts
+++ b/scripts/publish/src/ci/bin.ts
@@ -32,6 +32,7 @@ import {
 } from "../lib/git.js";
 import { scoped } from "../lib/logger.js";
 import { publishAll, repairBranchPreviewLatestTags } from "../lib/npm.js";
+import { discoverPackages } from "../lib/packages.js";
 import {
 	copyPrefix,
 	uploadDir,
@@ -151,6 +152,64 @@ function parseCratesIoRateLimitRetry(output: string): Date | undefined {
 const program = new Command();
 program.name("ci").description("CI subcommands for the publish flow");
 
+// Check every release package against npm before starting the artifact builds.
+program
+	.command("check-npm-oidc")
+	.description("Check trusted publishing for every npm release package")
+	.action(async () => {
+		const requestUrl = process.env.ACTIONS_ID_TOKEN_REQUEST_URL;
+		const requestToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+		if (!requestUrl || !requestToken) {
+			throw new Error("GitHub OIDC token request is unavailable");
+		}
+
+		const url = new URL(requestUrl);
+		url.searchParams.append("audience", "npm:registry.npmjs.org");
+		const tokenResponse = await fetch(url, {
+			headers: { Authorization: `Bearer ${requestToken}` },
+		});
+		if (!tokenResponse.ok) {
+			throw new Error(`GitHub OIDC token request failed: HTTP ${tokenResponse.status}`);
+		}
+		const tokenBody = (await tokenResponse.json()) as { value?: string };
+		if (!tokenBody.value) {
+			throw new Error("GitHub did not return an OIDC token");
+		}
+
+		const packages = discoverPackages(findRepoRoot());
+		const failures: string[] = [];
+		for (const pkg of packages) {
+			try {
+				const escapedName = pkg.name.replace("/", "%2f");
+				const response = await fetch(
+					`https://registry.npmjs.org/-/npm/v1/oidc/token/exchange/package/${escapedName}`,
+					{
+						method: "POST",
+						headers: { Authorization: `Bearer ${tokenBody.value}` },
+					},
+				);
+				if (response.status === 201) {
+					log.info(`npm OIDC OK: ${pkg.name}`);
+					continue;
+				}
+				const body = (await response.json().catch(() => ({}))) as {
+					message?: string;
+				};
+				const failure = `${pkg.name}: HTTP ${response.status} ${body.message ?? response.statusText}`;
+				log.error(`npm OIDC FAILED: ${failure}`);
+				failures.push(failure);
+			} catch (error) {
+				const failure = `${pkg.name}: ${error instanceof Error ? error.message : String(error)}`;
+				log.error(`npm OIDC FAILED: ${failure}`);
+				failures.push(failure);
+			}
+		}
+		log.info(`npm OIDC preflight: ${packages.length - failures.length}/${packages.length} passed`);
+		if (failures.length > 0) {
+			throw new Error(`${failures.length} npm package(s) failed OIDC exchange`);
+		}
+	});
+
 // ---------------------------------------------------------------------------
 // context-output — resolve once, write to $GITHUB_OUTPUT for downstream steps
 // ---------------------------------------------------------------------------

From ef0a77024c57e21fa10baaef3d790ad6088cef68 Mon Sep 17 00:00:00 2001
From: Nathan Flurry <git@nathanflurry.com>
Date: Thu, 1 Oct 2026 17:18:03 -0700
Subject: [PATCH 2/2] chore(release): update version to 2.3.22

---
 Cargo.lock                                    | 172 +++++++++---------
 Cargo.toml                                    |  36 ++--
 engine/sdks/typescript/api-full/package.json  |   2 +-
 .../typescript/envoy-protocol/package.json    |   2 +-
 .../sdks/typescript/test-runner/package.json  |   2 +-
 examples/actor-actions/package.json           |   4 +-
 examples/ai-agent/package.json                |   4 +-
 .../package.json                              |   2 +-
 .../template/package.json                     |   4 +-
 examples/chat-room-render/package.json        |   4 +-
 examples/collaborative-document/package.json  |   4 +-
 examples/cross-actor-actions/package.json     |   4 +-
 examples/cursors-raw-websocket/package.json   |   4 +-
 examples/cursors/package.json                 |   4 +-
 examples/elysia/package.json                  |   2 +-
 .../package.json                              |   4 +-
 examples/hello-world-render/package.json      |   4 +-
 examples/hello-world/package.json             |   4 +-
 examples/hono-react/package.json              |   4 +-
 examples/hono/package.json                    |   2 +-
 examples/inspector-tabs/package.json          |   2 +-
 examples/native-websockets/package.json       |   4 +-
 examples/per-tenant-database/package.json     |   4 +-
 examples/raw-fetch-handler/package.json       |   4 +-
 .../raw-websocket-handler-proxy/package.json  |   4 +-
 examples/raw-websocket-handler/package.json   |   4 +-
 examples/react-render/package.json            |   4 +-
 examples/react/package.json                   |   4 +-
 examples/state-render/package.json            |   4 +-
 examples/state/package.json                   |   4 +-
 examples/stream-render/package.json           |   4 +-
 examples/stream/package.json                  |   4 +-
 examples/trpc/package.json                    |   2 +-
 integrations/workflow-world/package.json      |   2 +-
 rivetkit-asyncapi/asyncapi.json               |   2 +-
 .../cli/npm/darwin-arm64/package.json         |   2 +-
 .../packages/cli/npm/darwin-x64/package.json  |   2 +-
 .../cli/npm/linux-arm64-musl/package.json     |   2 +-
 .../cli/npm/linux-x64-musl/package.json       |   2 +-
 .../packages/cli/npm/win32-x64/package.json   |   2 +-
 rivetkit-typescript/packages/cli/package.json |   2 +-
 .../packages/cloudflare-workers/package.json  |   2 +-
 .../packages/effect/package.json              |   2 +-
 .../engine-cli/npm/darwin-arm64/package.json  |   2 +-
 .../engine-cli/npm/darwin-x64/package.json    |   2 +-
 .../npm/linux-arm64-musl/package.json         |   2 +-
 .../npm/linux-x64-musl/package.json           |   2 +-
 .../engine-cli/npm/win32-x64/package.json     |   2 +-
 .../packages/engine-cli/package.json          |   2 +-
 .../engine-runner-protocol/package.json       |   2 +-
 .../packages/engine-runner/package.json       |   2 +-
 .../packages/framework-base/package.json      |   2 +-
 .../packages/next-js/package.json             |   2 +-
 .../packages/react/package.json               |   2 +-
 .../npm/darwin-arm64/package.json             |   2 +-
 .../rivetkit-napi/npm/darwin-x64/package.json |   2 +-
 .../npm/linux-arm64-gnu/package.json          |   2 +-
 .../npm/linux-arm64-musl/package.json         |   2 +-
 .../npm/linux-x64-gnu/package.json            |   2 +-
 .../npm/linux-x64-musl/package.json           |   2 +-
 .../npm/win32-x64-msvc/package.json           |   2 +-
 .../packages/rivetkit-napi/package.json       |   2 +-
 .../packages/rivetkit-wasm/package.json       |   2 +-
 .../packages/rivetkit/package.json            |   2 +-
 .../packages/sql-loader/package.json          |   2 +-
 .../packages/supabase/package.json            |   2 +-
 .../packages/traces/package.json              |   2 +-
 .../packages/workflow-engine/package.json     |   2 +-
 scripts/publish/src/ci/bin.ts                 |   6 +
 scripts/publish/src/lib/npm.ts                |  17 ++
 .../typescript/virtual-websocket/package.json |   2 +-
 71 files changed, 217 insertions(+), 194 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1013cfc7b6..03fe5a3029 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1320,7 +1320,7 @@ checksum = "2a2330da5de22e8a3cb63252ce2abb30116bf5265e89c0e01bc17015ce30a476"
 
 [[package]]
 name = "datacenter"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -1379,7 +1379,7 @@ dependencies = [
 
 [[package]]
 name = "depot"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-channel",
@@ -1422,7 +1422,7 @@ dependencies = [
 
 [[package]]
 name = "depot-client-embedded"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -1702,7 +1702,7 @@ checksum = "c34f04666d835ff5d62e058c3995147c06f42fe86ff053337632bca83e42702d"
 
 [[package]]
 name = "epoxy"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -1748,7 +1748,7 @@ dependencies = [
 
 [[package]]
 name = "epoxy-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -2100,7 +2100,7 @@ dependencies = [
 
 [[package]]
 name = "gasoline"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -2151,7 +2151,7 @@ dependencies = [
 
 [[package]]
 name = "gasoline-macros"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -2160,7 +2160,7 @@ dependencies = [
 
 [[package]]
 name = "gasoline-runtime"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "epoxy",
@@ -3412,7 +3412,7 @@ dependencies = [
 
 [[package]]
 name = "namespace"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "epoxy",
@@ -3991,7 +3991,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -4049,7 +4049,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-envoy"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -4098,7 +4098,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-gateway"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -4132,7 +4132,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-gateway2"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -4167,7 +4167,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-gateway3"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -4203,7 +4203,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-outbound"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "epoxy",
@@ -4230,7 +4230,7 @@ dependencies = [
 
 [[package]]
 name = "pegboard-runner"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5102,7 +5102,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-actor-runtime-socket-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -5114,7 +5114,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-builder"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -5157,7 +5157,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-peer"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -5193,7 +5193,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-public"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -5233,7 +5233,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-public-openapi-gen"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "rivet-api-public",
  "serde_json",
@@ -5242,7 +5242,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-types"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -5258,7 +5258,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-api-util"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -5316,7 +5316,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-auth"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -5332,7 +5332,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-auth-jwt"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -5365,7 +5365,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-auth-policy"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "rivet-error",
@@ -5376,7 +5376,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-bootstrap"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "datacenter",
  "depot",
@@ -5399,7 +5399,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-build-meta"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "epoxy-protocol",
@@ -5413,7 +5413,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-cache"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -5439,7 +5439,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-cache-purge"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -5456,14 +5456,14 @@ dependencies = [
 
 [[package]]
 name = "rivet-cache-result"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "rivet-util",
 ]
 
 [[package]]
 name = "rivet-cli"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anstyle",
  "anyhow",
@@ -5484,7 +5484,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-config"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "chrono",
@@ -5507,7 +5507,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-config-schema-gen"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "rivet-config",
  "schemars 0.8.22",
@@ -5516,7 +5516,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-container-runner"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5538,7 +5538,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-data"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -5552,7 +5552,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-depot-client"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5581,11 +5581,11 @@ dependencies = [
 
 [[package]]
 name = "rivet-depot-client-types"
-version = "2.3.19"
+version = "2.3.22"
 
 [[package]]
 name = "rivet-depot-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -5596,7 +5596,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-dynamic-config"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -5614,7 +5614,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-engine"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5697,7 +5697,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-env"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "lazy_static",
  "uuid",
@@ -5705,7 +5705,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-envoy-client"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -5737,7 +5737,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-envoy-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "hex",
@@ -5753,7 +5753,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-error"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "indoc",
@@ -5765,7 +5765,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-error-macros"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "indoc",
  "proc-macro2",
@@ -5776,7 +5776,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-guard"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5841,7 +5841,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-guard-core"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5892,7 +5892,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-logs"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "chrono",
@@ -5906,7 +5906,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-metrics"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "lazy_static",
  "prometheus",
@@ -5914,7 +5914,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-metrics-server"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "console-subscriber",
@@ -5932,7 +5932,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-outbound-guard"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "ipnet",
@@ -5946,7 +5946,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-perf"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "prometheus",
  "tokio",
@@ -5956,7 +5956,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-pools"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "clickhouse",
@@ -5989,7 +5989,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-postgres-util"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "rustls",
@@ -6000,7 +6000,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-profiling"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -6015,7 +6015,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-runner-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -6033,7 +6033,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-runtime"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "console-subscriber",
@@ -6062,7 +6062,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-service-manager"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "chrono",
@@ -6079,7 +6079,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-telemetry"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "rivet-config",
@@ -6090,7 +6090,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-term"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "console",
  "derive_builder 0.12.0",
@@ -6103,7 +6103,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-test-deps"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -6121,7 +6121,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-test-deps-docker"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "portpicker",
@@ -6138,7 +6138,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-test-envoy"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -6154,7 +6154,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-tracing-utils"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "futures-util",
  "lazy_static",
@@ -6164,7 +6164,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-types"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "gasoline",
@@ -6181,7 +6181,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-universaldb-commit"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -6193,7 +6193,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-ups-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -6206,7 +6206,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-util"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6234,7 +6234,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-util-id"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "serde",
  "thiserror 1.0.69",
@@ -6245,7 +6245,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-util-serde"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "indexmap 2.14.0",
  "serde",
@@ -6255,7 +6255,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-version-management"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "futures-util",
@@ -6275,7 +6275,7 @@ dependencies = [
 
 [[package]]
 name = "rivet-workflow-worker"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "datacenter",
@@ -6292,7 +6292,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6321,7 +6321,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-actor-persist"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -6333,7 +6333,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-client"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "axum 0.8.4",
@@ -6367,7 +6367,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-client-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -6379,7 +6379,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-core"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6442,7 +6442,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-engine-process"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "libc",
@@ -6459,7 +6459,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-inspector-protocol"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "serde",
@@ -6471,7 +6471,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-napi"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6497,7 +6497,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-shared-types"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "serde",
  "serde_json",
@@ -6505,7 +6505,7 @@ dependencies = [
 
 [[package]]
 name = "rivetkit-wasm"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "console_error_panic_hook",
@@ -7689,7 +7689,7 @@ dependencies = [
 
 [[package]]
 name = "test-snapshot-gen"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -8472,7 +8472,7 @@ checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
 
 [[package]]
 name = "universaldb"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -8510,7 +8510,7 @@ dependencies = [
 
 [[package]]
 name = "universalpubsub"
-version = "2.3.19"
+version = "2.3.22"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/Cargo.toml b/Cargo.toml
index 4045aaeb33..4c09b9822d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -93,7 +93,7 @@ members = [
 ]
 
   [workspace.package]
-  version = "2.3.20"
+  version = "2.3.22"
   edition = "2024"
   authors = [ "Rivet Gaming, LLC <developer@rivet.dev>" ]
   license = "Apache-2.0"
@@ -502,11 +502,11 @@ members = [
 
     [workspace.dependencies.rivet-error]
     path = "engine/packages/error"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivet-error-macros]
     path = "engine/packages/error-macros"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.gasoline]
     path = "engine/packages/gasoline"
@@ -532,7 +532,7 @@ members = [
 
     [workspace.dependencies.rivet-metrics]
     path = "engine/packages/metrics"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivet-metrics-server]
     path = "engine/packages/metrics-server"
@@ -625,7 +625,7 @@ members = [
 
     [workspace.dependencies.rivet-util-serde]
     path = "engine/packages/util-serde"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivet-version-management]
     path = "engine/packages/version-management"
@@ -635,7 +635,7 @@ members = [
 
     [workspace.dependencies.rivet-actor-runtime-socket-protocol]
     path = "engine/sdks/rust/actor-runtime-socket-protocol"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivet-api-full]
     path = "engine/sdks/rust/api-full"
@@ -649,53 +649,53 @@ members = [
     [workspace.dependencies.rivet-envoy-client]
     path = "engine/sdks/rust/envoy-client"
     default-features = false
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivet-envoy-protocol]
     path = "engine/sdks/rust/envoy-protocol"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-client-protocol]
     path = "rivetkit-rust/packages/client-protocol"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-client]
     path = "rivetkit-rust/packages/client"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-actor-persist]
     path = "rivetkit-rust/packages/actor-persist"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-inspector-protocol]
     path = "rivetkit-rust/packages/inspector-protocol"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit]
     path = "rivetkit-rust/packages/rivetkit"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-core]
     path = "rivetkit-rust/packages/rivetkit-core"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-shared-types]
     path = "rivetkit-rust/packages/shared-types"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.depot-client-types]
     package = "rivet-depot-client-types"
     path = "engine/packages/depot-client-types"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.rivetkit-engine-process]
     path = "rivetkit-rust/packages/engine-process"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.depot-client]
     package = "rivet-depot-client"
     path = "engine/packages/depot-client"
-    version = "=2.3.20"
+    version = "=2.3.22"
 
     [workspace.dependencies.epoxy-protocol]
     path = "engine/sdks/rust/epoxy-protocol"
diff --git a/engine/sdks/typescript/api-full/package.json b/engine/sdks/typescript/api-full/package.json
index 732b3bdcaf..78585cd23d 100644
--- a/engine/sdks/typescript/api-full/package.json
+++ b/engine/sdks/typescript/api-full/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-api-full",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"repository": "https://github.com/rivet-dev/rivet/tree/main/engine/sdks/typescript",
 	"files": [
 		"dist",
diff --git a/engine/sdks/typescript/envoy-protocol/package.json b/engine/sdks/typescript/envoy-protocol/package.json
index 5dd43e1fcb..a117af4835 100644
--- a/engine/sdks/typescript/envoy-protocol/package.json
+++ b/engine/sdks/typescript/envoy-protocol/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-envoy-protocol",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"license": "Apache-2.0",
 	"type": "module",
 	"exports": {
diff --git a/engine/sdks/typescript/test-runner/package.json b/engine/sdks/typescript/test-runner/package.json
index 0bf19209f2..25a3176fdb 100644
--- a/engine/sdks/typescript/test-runner/package.json
+++ b/engine/sdks/typescript/test-runner/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-test-runner",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"type": "module",
 	"scripts": {
 		"start": "tsx src/index.ts",
diff --git a/examples/actor-actions/package.json b/examples/actor-actions/package.json
index 8f9cc7a260..a53c787bc5 100644
--- a/examples/actor-actions/package.json
+++ b/examples/actor-actions/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/ai-agent/package.json b/examples/ai-agent/package.json
index 3bb5a0bc85..939ece5c7c 100644
--- a/examples/ai-agent/package.json
+++ b/examples/ai-agent/package.json
@@ -24,11 +24,11 @@
 	},
 	"dependencies": {
 		"@ai-sdk/openai": "^0.0.66",
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"ai": "^4.0.38",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/ai-and-user-generated-actors-freestyle/package.json b/examples/ai-and-user-generated-actors-freestyle/package.json
index a29ad900a7..e548f3233a 100644
--- a/examples/ai-and-user-generated-actors-freestyle/package.json
+++ b/examples/ai-and-user-generated-actors-freestyle/package.json
@@ -14,7 +14,7 @@
 	"dependencies": {
 		"@monaco-editor/react": "^4.7.0",
 		"@rivet-gg/cloud": "https://pkg.pr.new/rivet-dev/cloud/@rivet-gg/cloud@715f221",
-		"@rivetkit/engine-api-full": "^2.3.20",
+		"@rivetkit/engine-api-full": "^2.3.22",
 		"dotenv": "^17.2.2",
 		"execa": "^9.5.2",
 		"freestyle-sandboxes": "^0.0.95",
diff --git a/examples/ai-and-user-generated-actors-freestyle/template/package.json b/examples/ai-and-user-generated-actors-freestyle/template/package.json
index 7618eab331..c43841f814 100644
--- a/examples/ai-and-user-generated-actors-freestyle/template/package.json
+++ b/examples/ai-and-user-generated-actors-freestyle/template/package.json
@@ -10,12 +10,12 @@
 		"build:frontend": "vite build"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"hono": "4.9.8",
 		"on-change": "^5.0.1",
 		"react": "^19.0.0",
 		"react-dom": "^19.0.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"devDependencies": {
 		"@types/react": "^19.0.9",
diff --git a/examples/chat-room-render/package.json b/examples/chat-room-render/package.json
index 4225b71cd9..23077585ee 100644
--- a/examples/chat-room-render/package.json
+++ b/examples/chat-room-render/package.json
@@ -13,7 +13,7 @@
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@tailwindcss/typography": "^0.5.19",
 		"hono": "^4.7.7",
@@ -21,7 +21,7 @@
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
 		"render-dds": "github:R4ph-t/DDS#v0.8.6",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"tailwindcss": "^4.2.2",
 		"tsx": "^4.19.0"
 	},
diff --git a/examples/collaborative-document/package.json b/examples/collaborative-document/package.json
index fb533395f9..6eb381a9d8 100644
--- a/examples/collaborative-document/package.json
+++ b/examples/collaborative-document/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"y-protocols": "^1.0.6",
 		"yjs": "^13.6.24"
 	},
diff --git a/examples/cross-actor-actions/package.json b/examples/cross-actor-actions/package.json
index 67a4965ede..e9c81def7c 100644
--- a/examples/cross-actor-actions/package.json
+++ b/examples/cross-actor-actions/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/cursors-raw-websocket/package.json b/examples/cursors-raw-websocket/package.json
index 51e2c9daa3..6437443da4 100644
--- a/examples/cursors-raw-websocket/package.json
+++ b/examples/cursors-raw-websocket/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/cursors/package.json b/examples/cursors/package.json
index ccc90cdb8e..8d0ba2860a 100644
--- a/examples/cursors/package.json
+++ b/examples/cursors/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/elysia/package.json b/examples/elysia/package.json
index 2cace960b2..e240156ce3 100644
--- a/examples/elysia/package.json
+++ b/examples/elysia/package.json
@@ -15,7 +15,7 @@
 	},
 	"dependencies": {
 		"elysia": "^1.4.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/experimental-durable-streams-ai-agent/package.json b/examples/experimental-durable-streams-ai-agent/package.json
index c1682efeef..30e32ea6f2 100644
--- a/examples/experimental-durable-streams-ai-agent/package.json
+++ b/examples/experimental-durable-streams-ai-agent/package.json
@@ -27,11 +27,11 @@
 		"@durable-streams/client": "https://pkg.pr.new/rivet-dev/durable-streams/@durable-streams/client@0323b8b",
 		"@durable-streams/server": "https://pkg.pr.new/rivet-dev/durable-streams/@durable-streams/server@0323b8b",
 		"@durable-streams/writer": "https://pkg.pr.new/rivet-dev/durable-streams/@durable-streams/writer@0323b8b",
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"ai": "^4.0.38",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"zod": "^4.1.0"
 	},
 	"license": "MIT"
diff --git a/examples/hello-world-render/package.json b/examples/hello-world-render/package.json
index 4429b4f8f9..0820794733 100644
--- a/examples/hello-world-render/package.json
+++ b/examples/hello-world-render/package.json
@@ -13,13 +13,13 @@
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@tailwindcss/typography": "^0.5.19",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
 		"render-dds": "github:R4ph-t/DDS#v0.8.6",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"tailwindcss": "^4.2.2",
 		"tsx": "^4.19.0"
 	},
diff --git a/examples/hello-world/package.json b/examples/hello-world/package.json
index b1fc76efff..fba209181f 100644
--- a/examples/hello-world/package.json
+++ b/examples/hello-world/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/hono-react/package.json b/examples/hono-react/package.json
index e3c17fb72e..d401bf02a5 100644
--- a/examples/hono-react/package.json
+++ b/examples/hono-react/package.json
@@ -23,11 +23,11 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"hono": "^4.7.0",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/hono/package.json b/examples/hono/package.json
index fd6cf2a8f8..44136be625 100644
--- a/examples/hono/package.json
+++ b/examples/hono/package.json
@@ -15,7 +15,7 @@
 	},
 	"dependencies": {
 		"hono": "^4.7.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/inspector-tabs/package.json b/examples/inspector-tabs/package.json
index 3cea3d830b..24abc7e97e 100644
--- a/examples/inspector-tabs/package.json
+++ b/examples/inspector-tabs/package.json
@@ -20,7 +20,7 @@
 		"typescript": "^5.5.2"
 	},
 	"dependencies": {
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/native-websockets/package.json b/examples/native-websockets/package.json
index dae4ef323c..293523b542 100644
--- a/examples/native-websockets/package.json
+++ b/examples/native-websockets/package.json
@@ -25,10 +25,10 @@
 		"ws": "^8.16.0"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/per-tenant-database/package.json b/examples/per-tenant-database/package.json
index 6ef8a5cca3..949df03830 100644
--- a/examples/per-tenant-database/package.json
+++ b/examples/per-tenant-database/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/raw-fetch-handler/package.json b/examples/raw-fetch-handler/package.json
index 9cfed1f6bc..96969bfa06 100644
--- a/examples/raw-fetch-handler/package.json
+++ b/examples/raw-fetch-handler/package.json
@@ -23,11 +23,11 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"hono": "^4.6.18",
 		"react": "^18.3.1",
 		"react-dom": "^18.3.1",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/raw-websocket-handler-proxy/package.json b/examples/raw-websocket-handler-proxy/package.json
index 2086082461..db8a276a26 100644
--- a/examples/raw-websocket-handler-proxy/package.json
+++ b/examples/raw-websocket-handler-proxy/package.json
@@ -34,11 +34,11 @@
 	"dependencies": {
 		"@hono/node-server": "^1.19.1",
 		"@hono/node-ws": "^1.2.0",
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"hono": "^4.7.0",
 		"react": "^18.3.1",
 		"react-dom": "^18.3.1",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"ws": "^8.18.0"
 	},
 	"license": "MIT"
diff --git a/examples/raw-websocket-handler/package.json b/examples/raw-websocket-handler/package.json
index fa8548e362..bf20473ed1 100644
--- a/examples/raw-websocket-handler/package.json
+++ b/examples/raw-websocket-handler/package.json
@@ -31,10 +31,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.3.1",
 		"react-dom": "^18.3.1",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/react-render/package.json b/examples/react-render/package.json
index cd711ab189..a3c398ca3a 100644
--- a/examples/react-render/package.json
+++ b/examples/react-render/package.json
@@ -13,7 +13,7 @@
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@tailwindcss/typography": "^0.5.19",
 		"hono": "^4.7.7",
@@ -21,7 +21,7 @@
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
 		"render-dds": "github:R4ph-t/DDS#v0.8.6",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"tailwindcss": "^4.2.2",
 		"tsx": "^4.19.0"
 	},
diff --git a/examples/react/package.json b/examples/react/package.json
index 6779869a13..1e4838a2aa 100644
--- a/examples/react/package.json
+++ b/examples/react/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"stableVersion": "0.8.0",
 	"license": "MIT"
diff --git a/examples/state-render/package.json b/examples/state-render/package.json
index b557d04d8e..55acd551c5 100644
--- a/examples/state-render/package.json
+++ b/examples/state-render/package.json
@@ -13,7 +13,7 @@
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@tailwindcss/typography": "^0.5.19",
 		"hono": "^4.7.7",
@@ -21,7 +21,7 @@
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
 		"render-dds": "github:R4ph-t/DDS#v0.8.6",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"tailwindcss": "^4.2.2",
 		"tsx": "^4.19.0"
 	},
diff --git a/examples/state/package.json b/examples/state/package.json
index a8d1556990..ca22c6ab2b 100644
--- a/examples/state/package.json
+++ b/examples/state/package.json
@@ -23,10 +23,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/stream-render/package.json b/examples/stream-render/package.json
index 05cb50eff5..58332ca2a7 100644
--- a/examples/stream-render/package.json
+++ b/examples/stream-render/package.json
@@ -13,7 +13,7 @@
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@tailwindcss/typography": "^0.5.19",
 		"hono": "^4.7.7",
@@ -21,7 +21,7 @@
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
 		"render-dds": "github:R4ph-t/DDS#v0.8.6",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"tailwindcss": "^4.2.2",
 		"tsx": "^4.19.0"
 	},
diff --git a/examples/stream/package.json b/examples/stream/package.json
index 0d84c35669..451e5de2c2 100644
--- a/examples/stream/package.json
+++ b/examples/stream/package.json
@@ -22,10 +22,10 @@
 		"vitest": "^3.1.1"
 	},
 	"dependencies": {
-		"@rivetkit/react": "^2.3.20",
+		"@rivetkit/react": "^2.3.22",
 		"react": "^18.2.0",
 		"react-dom": "^18.2.0",
-		"rivetkit": "^2.3.20"
+		"rivetkit": "^2.3.22"
 	},
 	"license": "MIT"
 }
diff --git a/examples/trpc/package.json b/examples/trpc/package.json
index e1089400c2..1d1794cdc7 100644
--- a/examples/trpc/package.json
+++ b/examples/trpc/package.json
@@ -18,7 +18,7 @@
 		"@trpc/client": "^11.3.1",
 		"@trpc/server": "^11.4.2",
 		"hono": "^4.7.11",
-		"rivetkit": "^2.3.20",
+		"rivetkit": "^2.3.22",
 		"zod": "^3.25.76"
 	},
 	"stableVersion": "0.8.0",
diff --git a/integrations/workflow-world/package.json b/integrations/workflow-world/package.json
index ff86d53b19..c17b0a3cdb 100644
--- a/integrations/workflow-world/package.json
+++ b/integrations/workflow-world/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/workflow-world",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Vercel's Workflow SDK backed by Rivet Actors",
 	"license": "Apache-2.0",
 	"publishConfig": {
diff --git a/rivetkit-asyncapi/asyncapi.json b/rivetkit-asyncapi/asyncapi.json
index 32b33213c3..3116509565 100644
--- a/rivetkit-asyncapi/asyncapi.json
+++ b/rivetkit-asyncapi/asyncapi.json
@@ -2,7 +2,7 @@
   "asyncapi": "3.0.0",
   "info": {
     "title": "RivetKit WebSocket Protocol",
-    "version": "2.4.0",
+    "version": "2.3.22",
     "description": "WebSocket protocol for bidirectional communication between RivetKit clients and actors"
   },
   "channels": {
diff --git a/rivetkit-typescript/packages/cli/npm/darwin-arm64/package.json b/rivetkit-typescript/packages/cli/npm/darwin-arm64/package.json
index d34e2df4da..3016e492d6 100644
--- a/rivetkit-typescript/packages/cli/npm/darwin-arm64/package.json
+++ b/rivetkit-typescript/packages/cli/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli-darwin-arm64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet CLI for macOS arm64 (Apple Silicon)",
 	"license": "LicenseRef-RivetEnterprise",
 	"os": [
diff --git a/rivetkit-typescript/packages/cli/npm/darwin-x64/package.json b/rivetkit-typescript/packages/cli/npm/darwin-x64/package.json
index a97516af53..67615ed853 100644
--- a/rivetkit-typescript/packages/cli/npm/darwin-x64/package.json
+++ b/rivetkit-typescript/packages/cli/npm/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli-darwin-x64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet CLI for macOS x64",
 	"license": "LicenseRef-RivetEnterprise",
 	"os": [
diff --git a/rivetkit-typescript/packages/cli/npm/linux-arm64-musl/package.json b/rivetkit-typescript/packages/cli/npm/linux-arm64-musl/package.json
index 576e14e8bd..786ac8b043 100644
--- a/rivetkit-typescript/packages/cli/npm/linux-arm64-musl/package.json
+++ b/rivetkit-typescript/packages/cli/npm/linux-arm64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli-linux-arm64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet CLI for Linux arm64 musl (static)",
 	"license": "LicenseRef-RivetEnterprise",
 	"os": [
diff --git a/rivetkit-typescript/packages/cli/npm/linux-x64-musl/package.json b/rivetkit-typescript/packages/cli/npm/linux-x64-musl/package.json
index 1737a8ebe7..65e289e607 100644
--- a/rivetkit-typescript/packages/cli/npm/linux-x64-musl/package.json
+++ b/rivetkit-typescript/packages/cli/npm/linux-x64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli-linux-x64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet CLI for Linux x64 musl (static)",
 	"license": "LicenseRef-RivetEnterprise",
 	"os": [
diff --git a/rivetkit-typescript/packages/cli/npm/win32-x64/package.json b/rivetkit-typescript/packages/cli/npm/win32-x64/package.json
index 2c1fb05858..c29eefef0d 100644
--- a/rivetkit-typescript/packages/cli/npm/win32-x64/package.json
+++ b/rivetkit-typescript/packages/cli/npm/win32-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli-win32-x64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet CLI for Windows x64",
 	"license": "LicenseRef-RivetEnterprise",
 	"os": [
diff --git a/rivetkit-typescript/packages/cli/package.json b/rivetkit-typescript/packages/cli/package.json
index 062951bd7d..395ddd1639 100644
--- a/rivetkit-typescript/packages/cli/package.json
+++ b/rivetkit-typescript/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cli",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Cloud CLI",
 	"license": "LicenseRef-RivetEnterprise",
 	"main": "index.js",
diff --git a/rivetkit-typescript/packages/cloudflare-workers/package.json b/rivetkit-typescript/packages/cloudflare-workers/package.json
index e538147a24..3384b8731a 100644
--- a/rivetkit-typescript/packages/cloudflare-workers/package.json
+++ b/rivetkit-typescript/packages/cloudflare-workers/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/cloudflare-workers",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Cloudflare Workers integration for RivetKit actors",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/effect/package.json b/rivetkit-typescript/packages/effect/package.json
index fe088945cd..8e27094179 100644
--- a/rivetkit-typescript/packages/effect/package.json
+++ b/rivetkit-typescript/packages/effect/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/effect",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Effect SDK for Rivet Actors",
 	"license": "Apache-2.0",
 	"type": "module",
diff --git a/rivetkit-typescript/packages/engine-cli/npm/darwin-arm64/package.json b/rivetkit-typescript/packages/engine-cli/npm/darwin-arm64/package.json
index 11b3b9835c..8186c33fd9 100644
--- a/rivetkit-typescript/packages/engine-cli/npm/darwin-arm64/package.json
+++ b/rivetkit-typescript/packages/engine-cli/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli-darwin-arm64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary for macOS arm64 (Apple Silicon)",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/engine-cli/npm/darwin-x64/package.json b/rivetkit-typescript/packages/engine-cli/npm/darwin-x64/package.json
index 42032113b3..61851e1acf 100644
--- a/rivetkit-typescript/packages/engine-cli/npm/darwin-x64/package.json
+++ b/rivetkit-typescript/packages/engine-cli/npm/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli-darwin-x64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary for macOS x64",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/engine-cli/npm/linux-arm64-musl/package.json b/rivetkit-typescript/packages/engine-cli/npm/linux-arm64-musl/package.json
index 1c456b3b2b..86755b3009 100644
--- a/rivetkit-typescript/packages/engine-cli/npm/linux-arm64-musl/package.json
+++ b/rivetkit-typescript/packages/engine-cli/npm/linux-arm64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli-linux-arm64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary for Linux arm64 musl (static)",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/engine-cli/npm/linux-x64-musl/package.json b/rivetkit-typescript/packages/engine-cli/npm/linux-x64-musl/package.json
index 0a5ad79aef..3109bc6d2d 100644
--- a/rivetkit-typescript/packages/engine-cli/npm/linux-x64-musl/package.json
+++ b/rivetkit-typescript/packages/engine-cli/npm/linux-x64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli-linux-x64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary for Linux x64 musl (static)",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/engine-cli/npm/win32-x64/package.json b/rivetkit-typescript/packages/engine-cli/npm/win32-x64/package.json
index 90ed21a967..5d1c375da6 100644
--- a/rivetkit-typescript/packages/engine-cli/npm/win32-x64/package.json
+++ b/rivetkit-typescript/packages/engine-cli/npm/win32-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli-win32-x64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary for Windows x64",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/engine-cli/package.json b/rivetkit-typescript/packages/engine-cli/package.json
index bef18d693d..79133063b6 100644
--- a/rivetkit-typescript/packages/engine-cli/package.json
+++ b/rivetkit-typescript/packages/engine-cli/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-cli",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Rivet Engine binary distributed as platform-specific npm packages",
 	"license": "Apache-2.0",
 	"main": "index.js",
diff --git a/rivetkit-typescript/packages/engine-runner-protocol/package.json b/rivetkit-typescript/packages/engine-runner-protocol/package.json
index 0510f84ec5..0ba00c307c 100644
--- a/rivetkit-typescript/packages/engine-runner-protocol/package.json
+++ b/rivetkit-typescript/packages/engine-runner-protocol/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-runner-protocol",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"license": "Apache-2.0",
 	"type": "module",
 	"exports": {
diff --git a/rivetkit-typescript/packages/engine-runner/package.json b/rivetkit-typescript/packages/engine-runner/package.json
index 4ceaeb0e3d..4f7a547c08 100644
--- a/rivetkit-typescript/packages/engine-runner/package.json
+++ b/rivetkit-typescript/packages/engine-runner/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/engine-runner",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"type": "module",
 	"files": [
 		"dist",
diff --git a/rivetkit-typescript/packages/framework-base/package.json b/rivetkit-typescript/packages/framework-base/package.json
index 13c8ea0f45..f8ba5b02c0 100644
--- a/rivetkit-typescript/packages/framework-base/package.json
+++ b/rivetkit-typescript/packages/framework-base/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/framework-base",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Base framework utilities for RivetKit client integrations",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/next-js/package.json b/rivetkit-typescript/packages/next-js/package.json
index 2c0f6ae3ae..5e53ec2f54 100644
--- a/rivetkit-typescript/packages/next-js/package.json
+++ b/rivetkit-typescript/packages/next-js/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/next-js",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Next.js integration for RivetKit actors and client",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/react/package.json b/rivetkit-typescript/packages/react/package.json
index c9d46318fc..ac19d0c7c4 100644
--- a/rivetkit-typescript/packages/react/package.json
+++ b/rivetkit-typescript/packages/react/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/react",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "React hooks and components for RivetKit client applications",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-arm64/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-arm64/package.json
index 280c892907..fed54b5951 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-arm64/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-darwin-arm64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"darwin"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-x64/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-x64/package.json
index d5457d8d6a..54e3832037 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-x64/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-darwin-x64",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"darwin"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-gnu/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-gnu/package.json
index fbb57cff89..2e140a1fe6 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-gnu/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-linux-arm64-gnu",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"linux"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-musl/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-musl/package.json
index 3cbbd0d036..068151e988 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-musl/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-arm64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-linux-arm64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"linux"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-gnu/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-gnu/package.json
index efba599dea..778a18703f 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-gnu/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-linux-x64-gnu",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"linux"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-musl/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-musl/package.json
index e3313a8233..2659e32751 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-musl/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/linux-x64-musl/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-linux-x64-musl",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"os": [
 		"linux"
 	],
diff --git a/rivetkit-typescript/packages/rivetkit-napi/npm/win32-x64-msvc/package.json b/rivetkit-typescript/packages/rivetkit-napi/npm/win32-x64-msvc/package.json
index b153915a12..7f1285d8ac 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/npm/win32-x64-msvc/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/npm/win32-x64-msvc/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi-win32-x64-msvc",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Native N-API addon for RivetKit - Windows x64 (MinGW-built, loadable by MSVC Node)",
 	"license": "Apache-2.0",
 	"os": [
diff --git a/rivetkit-typescript/packages/rivetkit-napi/package.json b/rivetkit-typescript/packages/rivetkit-napi/package.json
index e56beb573b..ec6e6a1c85 100644
--- a/rivetkit-typescript/packages/rivetkit-napi/package.json
+++ b/rivetkit-typescript/packages/rivetkit-napi/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-napi",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Native N-API addon for RivetKit providing envoy client and SQLite access",
 	"license": "Apache-2.0",
 	"main": "index.js",
diff --git a/rivetkit-typescript/packages/rivetkit-wasm/package.json b/rivetkit-typescript/packages/rivetkit-wasm/package.json
index 2629727489..fcc4f71206 100644
--- a/rivetkit-typescript/packages/rivetkit-wasm/package.json
+++ b/rivetkit-typescript/packages/rivetkit-wasm/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/rivetkit-wasm",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "WebAssembly bindings for RivetKit core on edge JavaScript runtimes",
 	"license": "Apache-2.0",
 	"type": "module",
diff --git a/rivetkit-typescript/packages/rivetkit/package.json b/rivetkit-typescript/packages/rivetkit/package.json
index 30f7420412..1b61a74e83 100644
--- a/rivetkit-typescript/packages/rivetkit/package.json
+++ b/rivetkit-typescript/packages/rivetkit/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "rivetkit",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Lightweight libraries for building stateful actors on edge platforms",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/sql-loader/package.json b/rivetkit-typescript/packages/sql-loader/package.json
index 8923d2004f..25e4e3faa5 100644
--- a/rivetkit-typescript/packages/sql-loader/package.json
+++ b/rivetkit-typescript/packages/sql-loader/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/sql-loader",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "SQL file loader and migration utilities for RivetKit",
 	"license": "Apache-2.0",
 	"sideEffects": [
diff --git a/rivetkit-typescript/packages/supabase/package.json b/rivetkit-typescript/packages/supabase/package.json
index 24dfe0c08e..135bd33a71 100644
--- a/rivetkit-typescript/packages/supabase/package.json
+++ b/rivetkit-typescript/packages/supabase/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/supabase",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Supabase Edge Functions integration for RivetKit actors",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/rivetkit-typescript/packages/traces/package.json b/rivetkit-typescript/packages/traces/package.json
index 3af9d3134a..5e31261729 100644
--- a/rivetkit-typescript/packages/traces/package.json
+++ b/rivetkit-typescript/packages/traces/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/traces",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Generic tracing storage and OTLP export for RivetKit",
 	"license": "Apache-2.0",
 	"type": "module",
diff --git a/rivetkit-typescript/packages/workflow-engine/package.json b/rivetkit-typescript/packages/workflow-engine/package.json
index aac8a0dc0b..953375f9a0 100644
--- a/rivetkit-typescript/packages/workflow-engine/package.json
+++ b/rivetkit-typescript/packages/workflow-engine/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/workflow-engine",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Durable workflow engine with reentrant execution",
 	"license": "Apache-2.0",
 	"keywords": [
diff --git a/scripts/publish/src/ci/bin.ts b/scripts/publish/src/ci/bin.ts
index 7e898e9155..e59a217ab0 100644
--- a/scripts/publish/src/ci/bin.ts
+++ b/scripts/publish/src/ci/bin.ts
@@ -179,6 +179,12 @@ program
 		const packages = discoverPackages(findRepoRoot());
 		const failures: string[] = [];
 		for (const pkg of packages) {
+			// These first-time packages are bootstrapped manually; npm cannot
+			// exchange a trusted-publishing token until their names exist.
+			if (pkg.name === "@rivet-dev/pi" || pkg.name === "@rivet-dev/sandbox-adapter") {
+				log.warn(`npm OIDC bootstrap pending: ${pkg.name}`);
+				continue;
+			}
 			try {
 				const escapedName = pkg.name.replace("/", "%2f");
 				const response = await fetch(
diff --git a/scripts/publish/src/lib/npm.ts b/scripts/publish/src/lib/npm.ts
index 421e857cd8..a048d93019 100644
--- a/scripts/publish/src/lib/npm.ts
+++ b/scripts/publish/src/lib/npm.ts
@@ -11,6 +11,7 @@ import {
 	assertDiscoverySanity,
 	discoverPackages,
 	META_PACKAGES,
+	readPackageJson,
 	type Package,
 } from "./packages.js";
 import { scopedFamilies, type TargetGroup } from "./scope.js";
@@ -194,6 +195,22 @@ async function publishOne(
 		Pick<PublishAllOptions, "tag" | "retries" | "initialBackoffMs">
 	>,
 ): Promise<PublishResult> {
+	// npm can reject an existing version with ENEEDAUTH before reporting that it
+	// already exists (notably for packages bootstrapped outside CI).
+	const version = readPackageJson(pkg.dir)?.version;
+	if (!version) {
+		return { pkg, status: "failed", attempts: 0, lastError: "missing package version" };
+	}
+	try {
+		const name = encodeURIComponent(pkg.name);
+		const response = await fetch(`https://registry.npmjs.org/${name}/${encodeURIComponent(version)}`);
+		if (response.ok) return { pkg, status: "already-exists", attempts: 0 };
+		if (response.status !== 404) {
+			return { pkg, status: "failed", attempts: 0, lastError: `npm registry returned HTTP ${response.status}` };
+		}
+	} catch (error) {
+		return { pkg, status: "failed", attempts: 0, lastError: String(error) };
+	}
 	for (let attempt = 1; attempt <= opts.retries + 1; attempt++) {
 		const { code, output } = await runNpmPublish(pkg, opts.tag);
 		if (code === 0) {
diff --git a/shared/typescript/virtual-websocket/package.json b/shared/typescript/virtual-websocket/package.json
index 566bc93faa..957c4d5101 100644
--- a/shared/typescript/virtual-websocket/package.json
+++ b/shared/typescript/virtual-websocket/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@rivetkit/virtual-websocket",
-	"version": "2.3.20",
+	"version": "2.3.22",
 	"description": "Virtual WebSocket implementation for creating linked WebSocket pairs",
 	"license": "Apache-2.0",
 	"type": "module",