@ewhauser/world-celld 0.8.1 → 0.9.1

package/dist/worker.d.ts

@@ -52,6 +52,7 @@ interface WorkerEnv {
   WORKFLOW_QUEUE_PAYLOADS?: QueuePayloadStore;
   WORLD_SECRET?: string;
   WORKFLOW_CALLBACK_SECRET?: string;
+  WORKFLOW_DEPLOYMENT_URLS?: string;
   WORKFLOW_RETENTION_MS?: string | number;
   WORKFLOW_RETENTION_BATCH_SIZE?: string | number;
 }
@@ -304,6 +305,10 @@ interface RunLifecycleStub {
     claimId: string;
     token?: string;
   }): Promise<Hook | null>;
+  getCommittedHook(request: {
+    hookId: string;
+    token?: string;
+  }): Promise<Hook | null>;
 }
 interface HookIndexEnv {
   WORKFLOW_DB?: CellNamespaceLike<RunLifecycleStub>;
@@ -491,6 +496,15 @@ declare class WorkflowRunDO extends DurableObject {
     claimId: string;
     token?: string;
   }): Promise<Hook | null>;
+  /**
+   * Read-only twin of resolveExpiredHookClaim for index repair: the committed
+   * hook of a live run, or null. It fences nothing, so a shard may ask while
+   * the hook's creation is still in flight.
+   */
+  getCommittedHook(request: {
+    hookId: string;
+    token?: string;
+  }): Promise<Hook | null>;
   /** Single authoritative lifecycle answer used after derivative compaction. */
   getLifecycleStatus(): Promise<RunLifecycleStatus>;
   getStep(stepId: string): Promise<RunReadOutcome<Step | null>>;

package/dist/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","names":[],"sources":["../src/worker/queue-payload-store.ts","../src/worker/router.ts","../src/worker/do-base.ts","../src/retention.ts","../src/apply-event.ts","../src/stream-protocol.ts","../src/indexes.ts","../src/config.ts","../src/worker/durable-objects/hook-index-shared.ts","../src/worker/durable-objects/HookIdDO.ts","../src/worker/durable-objects/HookTokenDO.ts","../src/worker/durable-objects/RunCatalogDO.ts","../src/worker/durable-objects/StreamDO.ts","../src/worker/durable-objects/WorkflowRunDO.ts","../src/worker/worker.ts"],"mappings":";;;;;;;;;;UAOiB;EACf,MAAM,aAAa,eAAe;IAAY;IAAe;MAAsB;EACnF,KAAK,cAAc;EACnB,OAAO,0BAA0B;;UAGlB;EACf,IACE,aACA,eACA;IAAY,iBAAiB;MAC5B;EACH,IAAI,cAAc;IAAU,QAAQ;;EACpC,OAAO,0BAA0B;;;;;UC6ClB;EACf,WAAW;IAAiB;;EAC5B,IAAI;IAAM;;;UAGF;EACR,KAAK,cAAc;IAAY;IAAsB;MAA0B;;UA8DhE;EACf,aAAa;EACb,kBAAkB;EAClB,sBAAsB;EACtB,sBAAsB;EACtB,mBAAmB;EACnB,gBAAgB;EAChB,0BAA0B;EAC1B;EACA;EACA;EACA;;iBA4Pc,aAAa,KAAK,aAAS,SAClB,YAAU,QAAQ;;;;;;;;;;;;cCpY9B,cAAc;WAEd,KAAK;WACL,KAAK;EAFhB,YACW,KAAK,oBACL,KAAK;;;cAKL,iBAAiB;WAEjB,KAAK;WACL,KAAK;EAFhB,YACW,KAAK,kBACL,KAAK;;;;KCbN;UAEK;EACf;EACA;EACA;EACA,WAAW;;EAEX,SAAS;;EAET,cAAc;;EAEd,iBAAiB;EACjB;EACA,OAAO;EACP,OAAO;;EAEP;EACA;EACA;EACA,gBAAgB;EAChB,eAAe;EACf;EACA;;EAEA;;UAGe;EACf;EACA;;EAEA,SAAS;EACT,cAAc;EACd,iBAAiB;EACjB,WAAW;EACX,cAAc;;EAEd,SAAS;;KAGC;KAEA,eAAe;EACrB;EAAU,OAAO;;EACjB;EAAW;EAAqB;EAAiB,WAAW;;UAgCjD;EACf;;UAGe;EACf;;UAGe;;EAEf;EACA;;UAGe;;EAEf;;EAEA;;EAEA;EACA;;UAGe;EACf;;UAGe,gCAAgC;;EAE/C;;KAGU;EACN;EAA8B;;EAC9B;EAAgC,SAAS;;;;UCgC9B;;EAEf;EACA,MAAM,qBAAqB;;EAE3B,SAAS;;;;;EAKT;IAAgB;IAAe;;;EAE/B;;EAEA,UAAU;;KAiFA;UAWK;EACf;EACA,MAAM;EACN;;EAEA;;EAEA;;UAGe;EACf;;EAEA,QAAQ;EACR,MAAM;EACN,OAAO;EACP,OAAO;EACP,OAAO;;EAEP;;EAEA,eAAe;IAAQ;IAAgB;;;EAEvC;IAAe;IAAsB,WAAW;;;EAEhD,cAAc;;EAEd,SAAS;;EAET;EACA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;EAKA,YAAY;;KAGF,oBAAoB,oBAAoB;;;KCnRxC;UAEK;EACf;EACA;;UAGe;EACf;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,QAAQ;EACR,OAAO;EACP;EACA,QAAQ;;;;UCtCO;EACf;EACA;;EAEA;EACA;EACA;;UAGe;;EAEf,MAAM;IAAQ;IAAc;IAAe;;EAC3C;EACA;;UA+DQ;EACR;;UAGe,kBAAkB;EACjC,WAAW,eAAe;EAC1B,IAAI,IAAI,aAAa;;;;UCxFN;EACf;EACA;;;;UCPQ;EACR,sBAAsB,QAAQ;EAC9B,wBAAwB;IACtB;IACA;IACA;MACE,QAAQ;;UAGG;EACf,cAAc,kBAAkB;;EAEhC;;;;;cCgCW,iBAAiB,cAAc;UAClC;EAIF,IAAI,iBAAiB;EAOrB,QACJ,gBACA,OAAO,gBACP,0BACC;IAAU;IAAe;;IAAsB;IAAgB,QAAQ;;EA0DpE,QACJ,gBACA,wBACA,OAAO,gBACP,mBACC;IAAU;;EAkCP,aAAa,gBAAgB,OAAO,gBAAgB,kBAAkB;EAUtE,aACJ,OAAO;IAAQ;IAAgB,OAAO;OACrC;IAAU;;EA2BP,SAAS;UAQD;UAKA;UAcA;;;;;cCnLH,oBAAoB,cAAc;UACrC;EAIF,IAAI,gBAAgB;EAOpB,QACJ,eACA,OAAO,gBACP,0BACC;IAAU;IAAe;;IAAsB;IAAgB,QAAQ;;EAqDpE,SACJ,eACA,wBACA,OAAO,gBACP,mBACC;IAAU;;EAmCP,aAAa,eAAe,OAAO,gBAAgB,kBAAkB;EAUrE,aACJ,OAAO;IAAQ;IAAe,OAAO;OACpC;IAAU;;EA2BP,SAAS;UAQD;UAKA;UAcA;;;;;cC/JH,qBAAqB;UACxB;EAKF,UACJ,eACA,gBACA,4BACA,+BACC;IAAU;;EAuCP,KAAK,UAAS,mBAAwB,QAAQ;;EA0B9C,qBACJ,eACA,aACA,wBACC;IAAU;;EAUP,UAAU,eAAe,oBAAoB,QAAQ;EAkBrD,SAAS;UAUD;UAKA;;;;;;;;;;;cCsGH,iBAAiB;UACpB;UACA;UACA;UACA;mBACS;;UAGH;UAaA;UAeN;UAOA;UAOA;UASA;UAKA;UA6CM;UA6BA;;;;;;UAqCA;;EAkFR,YAAY,eAAe,QAAQ,eAAe,QAAQ;;;;;EAiE1D,WAAW,SAAS,mBAAmB,SAAS,cAAc,QAAQ;;EAkBtE,YAAY,gBAAgB;;EAmB5B,WAAW,eAAe,OAAO,2BAA2B;;EAyB5D,eAAe,eAAe,eAAe;EAc7C,eAAe;;EASf,eACJ,eACA,mBACA;IAAY;MACX,QAAQ;;EAwBL,iBAAiB,eAAe,oBAAoB,QAAQ;;UAqBpD;;;;;;UAuDA;;;;;EAoDR,aACJ,eACA,mBACA;IAAY;IAAgB;MAC3B,QAAQ;;;;;;;;;;;;;;cCpmBA,sBAAsB;UACzB;UAKA;UAWM;UAeA;UAUA;;EAcR,WAAW,SAAS,oBAAoB,QAAQ;;;;;;EA4FhD,sBAAsB;IAC1B;IACA;IACA;MACE;IAAU;;EAkBR,UAAU,QAAQ,eAAe;;EAKjC,wBAAwB;IAC5B;IACA;IACA;MACE,QAAQ;;EA2BN,sBAAsB,QAAQ;EAgB9B,QAAQ,iBAAiB,QAAQ,eAAe;EAIhD,UAAU;IACd;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAQ;IAAuB;;EAU5D,SAAS,kBAAkB,QAAQ,eAAe;EAIlD,WAAW;IACf;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAS;IAAuB;;EAe7D,UAAU;IACd;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAQ;IAAuB;;EAU5D,oBAAoB,QAAQ;;EAY5B,gBAAgB,SAAS,yBAAyB,QAAQ;;;;;;;;EAqC1D,iBAAiB,SAAS,0BAA0B,QAAQ;EAuE5D,WAAW,SAAS,yBAAyB,QAAQ;EAsBrD,gBAAgB,QAAQ;EAiBxB,SAAS;UAIP;UAQA;UAQM;UA2BA;UAkHA;UA8BA;;;;;;;;UAkBA;UA4DA;UAoCA;UAiCA;UAsCA;UAoCA;UAsCA;UAiCA;UAsCA;UAwBA;;;;;;EA+BR,qBAAqB;IAAU;;IAAe;IAAW;;;;;;;EAezD,uBAAuB;IAC3B;IACA;IACA;IACA;MACE,QAAQ;EAsDN,kCAAkC;IACtC;IACA;IACA;MACE;;EAwBE,qBAAqB;IACzB;IACA;IACA;MACE;IAAU;;IAAoB;IAAgB;IAAkB;;EAuD9D,oBAAoB;IACxB;IACA;IACA;IACA;IACA;MACE;IAAU;;EAqCR,uBAAuB;IAAU;IAAmB;MAAsB;EAc1E,wBAAwB;IAAU;IAAmB;MAAsB;;EAmB3E,kCAAkC;IACtC;IACA;MACE;EAkBE,qBACJ,cAAc,2BACb;IAAU;;IAAe;IAAW;;EAwBjC,qBACJ,oBACC;IAAU;;IAAe;IAAW;;EAwBjC,uBAAuB,oBAAoB;EAO3C,2BAA2B,QAAQ,qBAAqB;EAgCxD,yBAAyB,oBAAoB;EAY7C,oBAAoB;IACxB;IACA;IACA;MACE;IAAU;IAAmB;IAAmB;;EAuC9C,+BAA+B;IACnC;IACA;MACE;EAuBE,qBAAqB,oBAAoB;;EA0BzC,+BAA+B,oBAAoB;EAenD,cAAc;IAClB;IACA;MACE;IAAU;IAAkB;;EAiC1B,aAAa;IACjB;IACA;IACA;IACA;MACE;IAAU;;EA+BR,gBAAgB,qBAAqB;;;;UCnvDnC;EACR;EACA;;KAGG,iBAAiB,KAAK;EACzB,0BAA0B;;iBAGb,UAAU,YAAY,yBAAyB,KAAK,iBAAiB;;EAc7D,MAAA,SAAA,SAAO,KAAO,iBAAiB,QAAQ;;;;cAYjD,yBAAyB,iBAAiB;EACrD,QAAQ,iBAAiB,mBAAmB,mBAAmB,QAAQ"}
+{"version":3,"file":"worker.d.ts","names":[],"sources":["../src/worker/queue-payload-store.ts","../src/worker/router.ts","../src/worker/do-base.ts","../src/retention.ts","../src/apply-event.ts","../src/stream-protocol.ts","../src/indexes.ts","../src/config.ts","../src/worker/durable-objects/hook-index-shared.ts","../src/worker/durable-objects/HookIdDO.ts","../src/worker/durable-objects/HookTokenDO.ts","../src/worker/durable-objects/RunCatalogDO.ts","../src/worker/durable-objects/StreamDO.ts","../src/worker/durable-objects/WorkflowRunDO.ts","../src/worker/worker.ts"],"mappings":";;;;;;;;;;UAOiB;EACf,MAAM,aAAa,eAAe;IAAY;IAAe;MAAsB;EACnF,KAAK,cAAc;EACnB,OAAO,0BAA0B;;UAGlB;EACf,IACE,aACA,eACA;IAAY,iBAAiB;MAC5B;EACH,IAAI,cAAc;IAAU,QAAQ;;EACpC,OAAO,0BAA0B;;;;;UC6ClB;EACf,WAAW;IAAiB;;EAC5B,IAAI;IAAM;;;UAGF;EACR,KAAK,cAAc;IAAY;IAAsB;MAA0B;;UAkEhE;EACf,aAAa;EACb,kBAAkB;EAClB,sBAAsB;EACtB,sBAAsB;EACtB,mBAAmB;EACnB,gBAAgB;EAChB,0BAA0B;EAC1B;EACA;EACA;EACA;EACA;;iBA4Pc,aAAa,KAAK,aAAS,SAClB,YAAU,QAAQ;;;;;;;;;;;;cCzY9B,cAAc;WAEd,KAAK;WACL,KAAK;EAFhB,YACW,KAAK,oBACL,KAAK;;;cAKL,iBAAiB;WAEjB,KAAK;WACL,KAAK;EAFhB,YACW,KAAK,kBACL,KAAK;;;;KCbN;UAEK;EACf;EACA;EACA;EACA,WAAW;;EAEX,SAAS;;EAET,cAAc;;EAEd,iBAAiB;EACjB;EACA,OAAO;EACP,OAAO;;EAEP;EACA;EACA;EACA,gBAAgB;EAChB,eAAe;EACf;EACA;;EAEA;;UAGe;EACf;EACA;;EAEA,SAAS;EACT,cAAc;EACd,iBAAiB;EACjB,WAAW;EACX,cAAc;;EAEd,SAAS;;KAGC;KAEA,eAAe;EACrB;EAAU,OAAO;;EACjB;EAAW;EAAqB;EAAiB,WAAW;;UAgCjD;EACf;;UAGe;EACf;;UAGe;;EAEf;EACA;;UAGe;;EAEf;;EAEA;;EAEA;EACA;;UAGe;EACf;;UAGe,gCAAgC;;EAE/C;;KAGU;EACN;EAA8B;;EAC9B;EAAgC,SAAS;;;;UCgC9B;;EAEf;EACA,MAAM,qBAAqB;;EAE3B,SAAS;;;;;EAKT;IAAgB;IAAe;;;EAE/B;;EAEA,UAAU;;KAiFA;UAWK;EACf;EACA,MAAM;EACN;;EAEA;;EAEA;;UAGe;EACf;;EAEA,QAAQ;EACR,MAAM;EACN,OAAO;EACP,OAAO;EACP,OAAO;;EAEP;;EAEA,eAAe;IAAQ;IAAgB;;;EAEvC;IAAe;IAAsB,WAAW;;;EAEhD,cAAc;;EAEd,SAAS;;EAET;EACA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;EAKA,YAAY;;KAGF,oBAAoB,oBAAoB;;;KCnRxC;UAEK;EACf;EACA;;UAGe;EACf;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,QAAQ;EACR,OAAO;EACP;EACA,QAAQ;;;;UCtCO;EACf;EACA;;EAEA;EACA;EACA;;UAGe;;EAEf,MAAM;IAAQ;IAAc;IAAe;;EAC3C;EACA;;UA+DQ;EACR;;UAGe,kBAAkB;EACjC,WAAW,eAAe;EAC1B,IAAI,IAAI,aAAa;;;;UCnFN;EACf;EACA;;;;UCZQ;EACR,sBAAsB,QAAQ;EAC9B,wBAAwB;IACtB;IACA;IACA;MACE,QAAQ;EACZ,iBAAiB;IAAW;IAAgB;MAAmB,QAAQ;;UAGxD;EACf,cAAc,kBAAkB;;EAEhC;;;;;cCoCW,iBAAiB,cAAc;UAClC;EAIF,IAAI,iBAAiB;EAcrB,QACJ,gBACA,OAAO,gBACP,0BACC;IAAU;IAAe;;IAAsB;IAAgB,QAAQ;;EA0DpE,QACJ,gBACA,wBACA,OAAO,gBACP,mBACC;IAAU;;EAkCP,aAAa,gBAAgB,OAAO,gBAAgB,kBAAkB;EAUtE,aACJ,OAAO;IAAQ;IAAgB,OAAO;OACrC;IAAU;;EA2BP,SAAS;UAQD;UAKA;UAcA;;;;;cC1LH,oBAAoB,cAAc;UACrC;EAIF,IAAI,gBAAgB;EAgBpB,QACJ,eACA,OAAO,gBACP,0BACC;IAAU;IAAe;;IAAsB;IAAgB,QAAQ;;EAqDpE,SACJ,eACA,wBACA,OAAO,gBACP,mBACC;IAAU;;EAmCP,aAAa,eAAe,OAAO,gBAAgB,kBAAkB;EAUrE,aACJ,OAAO;IAAQ;IAAe,OAAO;OACpC;IAAU;;EA2BP,SAAS;UAQD;UAKA;UAcA;;;;;cC7KH,qBAAqB;UACxB;EAKF,UACJ,eACA,gBACA,4BACA,+BACC;IAAU;;EAuCP,KAAK,UAAS,mBAAwB,QAAQ;;EA0B9C,qBACJ,eACA,aACA,wBACC;IAAU;;EAUP,UAAU,eAAe,oBAAoB,QAAQ;EAkBrD,SAAS;UAUD;UAKA;;;;;;;;;;;cCsGH,iBAAiB;UACpB;UACA;UACA;UACA;mBACS;;UAGH;UAaA;UAeN;UAOA;UAOA;UASA;UAKA;UA6CM;UA6BA;;;;;;UAqCA;;EAkFR,YAAY,eAAe,QAAQ,eAAe,QAAQ;;;;;EAiE1D,WAAW,SAAS,mBAAmB,SAAS,cAAc,QAAQ;;EAkBtE,YAAY,gBAAgB;;EAmB5B,WAAW,eAAe,OAAO,2BAA2B;;EAyB5D,eAAe,eAAe,eAAe;EAc7C,eAAe;;EASf,eACJ,eACA,mBACA;IAAY;MACX,QAAQ;;EAwBL,iBAAiB,eAAe,oBAAoB,QAAQ;;UAqBpD;;;;;;UAuDA;;;;;EAoDR,aACJ,eACA,mBACA;IAAY;IAAgB;MAC3B,QAAQ;;;;;;;;;;;;;;cCpmBA,sBAAsB;UACzB;UAKA;UAWM;UAeA;UAUA;;EAcR,WAAW,SAAS,oBAAoB,QAAQ;;;;;;EA4FhD,sBAAsB;IAC1B;IACA;IACA;MACE;IAAU;;EAkBR,UAAU,QAAQ,eAAe;;EAKjC,wBAAwB;IAC5B;IACA;IACA;MACE,QAAQ;;;;;;EA+BN,iBAAiB;IAAW;IAAgB;MAAmB,QAAQ;;EAoBvE,sBAAsB,QAAQ;EAgB9B,QAAQ,iBAAiB,QAAQ,eAAe;EAIhD,UAAU;IACd;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAQ;IAAuB;;EAU5D,SAAS,kBAAkB,QAAQ,eAAe;EAIlD,WAAW;IACf;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAS;IAAuB;;EAe7D,UAAU;IACd;IACA;IACA;MACE,QAAQ;IAAiB,MAAM;IAAQ;IAAuB;;EAU5D,oBAAoB,QAAQ;;EAY5B,gBAAgB,SAAS,yBAAyB,QAAQ;;;;;;;;EAqC1D,iBAAiB,SAAS,0BAA0B,QAAQ;EAuE5D,WAAW,SAAS,yBAAyB,QAAQ;EAsBrD,gBAAgB,QAAQ;EAiBxB,SAAS;UAIP;UAQA;UAQM;UA2BA;UAkHA;UA8BA;;;;;;;;UAkBA;UA4DA;UAoCA;UAiCA;UAsCA;UAoCA;UAsCA;UAiCA;UAsCA;UAwBA;;;;;;EA+BR,qBAAqB;IAAU;;IAAe;IAAW;;;;;;;EAezD,uBAAuB;IAC3B;IACA;IACA;IACA;MACE,QAAQ;EAsDN,kCAAkC;IACtC;IACA;IACA;MACE;;EAwBE,qBAAqB;IACzB;IACA;IACA;MACE;IAAU;;IAAoB;IAAgB;IAAkB;;EAuD9D,oBAAoB;IACxB;IACA;IACA;IACA;IACA;MACE;IAAU;;EAqCR,uBAAuB;IAAU;IAAmB;MAAsB;EAc1E,wBAAwB;IAAU;IAAmB;MAAsB;;EAmB3E,kCAAkC;IACtC;IACA;MACE;EAkBE,qBACJ,cAAc,2BACb;IAAU;;IAAe;IAAW;;EAwBjC,qBACJ,oBACC;IAAU;;IAAe;IAAW;;EAwBjC,uBAAuB,oBAAoB;EAO3C,2BAA2B,QAAQ,qBAAqB;EAgCxD,yBAAyB,oBAAoB;EAY7C,oBAAoB;IACxB;IACA;IACA;MACE;IAAU;IAAmB;IAAmB;;EAuC9C,+BAA+B;IACnC;IACA;MACE;EAuBE,qBAAqB,oBAAoB;;EA0BzC,+BAA+B,oBAAoB;EAenD,cAAc;IAClB;IACA;MACE;IAAU;IAAkB;;EAiC1B,aAAa;IACjB;IACA;IACA;IACA;MACE;IAAU;;EA+BR,gBAAgB,qBAAqB;;;;UC3wDnC;EACR;EACA;;KAGG,iBAAiB,KAAK;EACzB,0BAA0B;;iBAGb,UAAU,YAAY,yBAAyB,KAAK,iBAAiB;;EAc7D,MAAA,SAAA,SAAO,KAAO,iBAAiB,QAAQ;;;;cAYjD,yBAAyB,iBAAiB;EACrD,QAAQ,iBAAiB,mBAAmB,mBAAmB,QAAQ"}

package/dist/worker.js

@@ -107,6 +107,142 @@ function deliveryQueueClaim(envelope, runStub) {
 	return envelope.claimScope === "run" && envelope.runId ? runQueueClaim(runStub(envelope.runId), claimName) : cellQueueClaim(runStub(claimName));
 }
 //#endregion
+//#region src/deployment-routing.ts
+function validateUrl(value, deploymentId) {
+	if (typeof value !== "string" || value.length === 0) throw new Error(`world-celld: deployment URL for ${deploymentId} must be a non-empty string`);
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new Error(`world-celld: deployment URL for ${deploymentId} must be absolute`);
+	}
+	if (url.protocol !== "http:" && url.protocol !== "https:" || url.username || url.password || url.search || url.hash) throw new Error(`world-celld: deployment URL for ${deploymentId} is invalid`);
+	return url.href.replace(/\/$/, "");
+}
+function validateDeploymentUrls(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("world-celld: deployment URLs must be an object");
+	const urls = Object.create(null);
+	for (const [id, url] of Object.entries(value)) {
+		if (!id || id.trim() !== id) throw new Error("world-celld: deployment URL IDs must be non-empty and unpadded");
+		urls[id] = validateUrl(url, id);
+	}
+	return urls;
+}
+function configuredDeploymentUrl(urls, deploymentId) {
+	if (!Object.hasOwn(urls, deploymentId)) throw new Error(`world-celld: no callback URL configured for deployment ${deploymentId}`);
+	return urls[deploymentId];
+}
+function parseDeploymentUrls(value) {
+	if (value === void 0 || value === "") return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(value);
+	} catch {
+		throw new Error("world-celld: WORKFLOW_DEPLOYMENT_URLS must be a JSON object");
+	}
+	return validateDeploymentUrls(parsed);
+}
+//#endregion
+//#region src/vendor/shared/serialization.ts
+/** Standard Date fields used across all worlds */
+const DATE_FIELDS = /* @__PURE__ */ new Set([
+	"createdAt",
+	"updatedAt",
+	"startedAt",
+	"completedAt",
+	"retryAfter"
+]);
+/**
+* JSON reviver that converts ISO date strings to Date objects.
+* Use with JSON.parse(json, dateReviver).
+*/
+function dateReviver(key, value) {
+	if (DATE_FIELDS.has(key) && typeof value === "string") {
+		const date = new Date(value);
+		return Number.isNaN(date.getTime()) ? value : date;
+	}
+	return value;
+}
+/**
+* Base64 helpers. Modified vs upstream: implemented without Buffer so this
+* module is safe inside the celld worker bundle (workerd has no Buffer
+* global). Uses the native Uint8Array base64 methods where the runtime has
+* them (Node >= 25, current V8) and falls back to atob/btoa elsewhere.
+*/
+const nativeToBase64 = Uint8Array.prototype.toBase64;
+const nativeFromBase64 = Uint8Array.fromBase64;
+/** Small enough to stay far below engine argument-count limits and fast to spread. */
+const FALLBACK_ENCODE_CHUNK = 4096;
+/** @internal Exported for tests; use b64encode. */
+function b64encodeFallback(bytes) {
+	let bin = "";
+	for (let i = 0; i < bytes.length; i += FALLBACK_ENCODE_CHUNK) bin += String.fromCharCode.apply(null, bytes.subarray(i, i + FALLBACK_ENCODE_CHUNK));
+	return btoa(bin);
+}
+/** @internal Exported for tests; use b64decode. */
+function b64decodeFallback(text) {
+	const bin = atob(text);
+	const out = new Uint8Array(bin.length);
+	for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+	return out;
+}
+function b64encode(bytes) {
+	return nativeToBase64 ? nativeToBase64.call(bytes) : b64encodeFallback(bytes);
+}
+function b64decode(text) {
+	return nativeFromBase64 ? nativeFromBase64(text) : b64decodeFallback(text);
+}
+/**
+* JSON replacer that encodes Uint8Array as a tagged object with base64 data.
+*/
+function uint8ArrayReplacer(_key, value) {
+	if (value instanceof Uint8Array) return {
+		__type: "Uint8Array",
+		data: b64encode(value)
+	};
+	return value;
+}
+/**
+* JSON reviver that decodes tagged Uint8Array objects and ISO date strings.
+* Supports both:
+* - New format: { __type: 'Uint8Array', data: '<base64>' }
+* - Legacy format: { __uint8array: true, data: [1, 2, 3] }
+*/
+function uint8ArrayReviver(key, value) {
+	if (value && typeof value === "object") {
+		const obj = value;
+		if (obj.__type === "Uint8Array") {
+			if (typeof obj.data !== "string") throw new SyntaxError("Malformed Uint8Array tag");
+			try {
+				return b64decode(obj.data);
+			} catch {
+				throw new SyntaxError("Malformed Uint8Array tag");
+			}
+		}
+		if (obj.__uint8array === true) {
+			if (!Array.isArray(obj.data) || !obj.data.every((byte) => Number.isInteger(byte) && byte >= 0 && byte <= 255)) throw new SyntaxError("Malformed legacy Uint8Array tag");
+			return new Uint8Array(obj.data);
+		}
+	}
+	return dateReviver(key, value);
+}
+/** Stringify with Uint8Array support. */
+function stringify(value) {
+	return JSON.stringify(value, uint8ArrayReplacer);
+}
+/** Parse with Uint8Array and Date support. */
+function parse(text) {
+	return JSON.parse(text, uint8ArrayReviver);
+}
+//#endregion
+//#region src/vendor/shared/util.ts
+function compact(obj) {
+	const value = {};
+	for (const key in obj) if (obj[key] !== null) value[key] = obj[key];
+	else value[key] = void 0;
+	return value;
+}
+//#endregion
 //#region src/worker/queue-delivery.ts
 /** Internal delivery contract. No Request/Response objects cross the RPC boundary. */
 const MAX_QUEUE_DELIVERY_RESPONSE_BYTES = 65536;
@@ -193,6 +329,17 @@ async function deliverQueueMessage(env, secret, input, attempt) {
 				return { kind: "complete" };
 			}
 		}
+		const deploymentUrls = parseDeploymentUrls(env.WORKFLOW_DEPLOYMENT_URLS);
+		let targetBaseUrl = envelope.targetBaseUrl;
+		if (deploymentUrls && envelope.runId) {
+			const stored = await runStub(envelope.runId).getRun();
+			if (!stored.ok) throw new Error("world-celld: cannot route an expired run");
+			const initialId = parse(body).runInput?.deploymentId;
+			const pinnedId = stored.value?.deploymentId ?? initialId;
+			if (typeof pinnedId !== "string" || pinnedId.length === 0) throw new Error(`world-celld: no pinned deployment for run ${envelope.runId}`);
+			if (stored.value && initialId !== void 0 && initialId !== pinnedId) throw new Error(`world-celld: queue run deployment hints disagree for ${envelope.runId}`);
+			targetBaseUrl = configuredDeploymentUrl(deploymentUrls, pinnedId);
+		}
 		const headers = {
 			"content-type": "application/json",
 			"x-vqs-queue-name": envelope.queueName,
@@ -200,13 +347,13 @@ async function deliverQueueMessage(env, secret, input, attempt) {
 			"x-vqs-message-attempt": String(attempt)
 		};
 		if (env.WORKFLOW_CALLBACK_SECRET) headers["x-workflow-callback-secret"] = env.WORKFLOW_CALLBACK_SECRET;
-		const callback = await fetch(`${envelope.targetBaseUrl.replace(/\/$/, "")}/.well-known/workflow/v1/flow`, {
+		const callback = await fetch(`${targetBaseUrl.replace(/\/$/, "")}/.well-known/workflow/v1/flow`, {
 			method: "POST",
 			headers,
 			body,
 			signal: AbortSignal.timeout(3e5)
 		});
-		if (callback.ok || PERMANENT_QUEUE_STATUSES.has(callback.status)) {
+		if (callback.ok || !deploymentUrls && PERMANENT_QUEUE_STATUSES.has(callback.status) || !envelope.runId && PERMANENT_QUEUE_STATUSES.has(callback.status)) {
 			await callback.body?.cancel().catch(() => void 0);
 			if (envelope.payloadKey) {
 				await payloadStore.delete(envelope.payloadKey);
@@ -247,92 +394,6 @@ async function deliverQueueMessage(env, secret, input, attempt) {
 	}
 }
 //#endregion
-//#region src/vendor/shared/serialization.ts
-/** Standard Date fields used across all worlds */
-const DATE_FIELDS = /* @__PURE__ */ new Set([
-	"createdAt",
-	"updatedAt",
-	"startedAt",
-	"completedAt",
-	"retryAfter"
-]);
-/**
-* JSON reviver that converts ISO date strings to Date objects.
-* Use with JSON.parse(json, dateReviver).
-*/
-function dateReviver(key, value) {
-	if (DATE_FIELDS.has(key) && typeof value === "string") {
-		const date = new Date(value);
-		return Number.isNaN(date.getTime()) ? value : date;
-	}
-	return value;
-}
-/**
-* Base64 helpers. Modified vs upstream: implemented without Buffer so this
-* module is safe inside the celld worker bundle (workerd has no Buffer
-* global). Uses the native Uint8Array base64 methods where the runtime has
-* them (Node >= 25, current V8) and falls back to atob/btoa elsewhere.
-*/
-const nativeToBase64 = Uint8Array.prototype.toBase64;
-const nativeFromBase64 = Uint8Array.fromBase64;
-/** Small enough to stay far below engine argument-count limits and fast to spread. */
-const FALLBACK_ENCODE_CHUNK = 4096;
-/** @internal Exported for tests; use b64encode. */
-function b64encodeFallback(bytes) {
-	let bin = "";
-	for (let i = 0; i < bytes.length; i += FALLBACK_ENCODE_CHUNK) bin += String.fromCharCode.apply(null, bytes.subarray(i, i + FALLBACK_ENCODE_CHUNK));
-	return btoa(bin);
-}
-/** @internal Exported for tests; use b64decode. */
-function b64decodeFallback(text) {
-	const bin = atob(text);
-	const out = new Uint8Array(bin.length);
-	for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-	return out;
-}
-function b64encode(bytes) {
-	return nativeToBase64 ? nativeToBase64.call(bytes) : b64encodeFallback(bytes);
-}
-function b64decode(text) {
-	return nativeFromBase64 ? nativeFromBase64(text) : b64decodeFallback(text);
-}
-/**
-* JSON reviver that decodes tagged Uint8Array objects and ISO date strings.
-* Supports both:
-* - New format: { __type: 'Uint8Array', data: '<base64>' }
-* - Legacy format: { __uint8array: true, data: [1, 2, 3] }
-*/
-function uint8ArrayReviver(key, value) {
-	if (value && typeof value === "object") {
-		const obj = value;
-		if (obj.__type === "Uint8Array") {
-			if (typeof obj.data !== "string") throw new SyntaxError("Malformed Uint8Array tag");
-			try {
-				return b64decode(obj.data);
-			} catch {
-				throw new SyntaxError("Malformed Uint8Array tag");
-			}
-		}
-		if (obj.__uint8array === true) {
-			if (!Array.isArray(obj.data) || !obj.data.every((byte) => Number.isInteger(byte) && byte >= 0 && byte <= 255)) throw new SyntaxError("Malformed legacy Uint8Array tag");
-			return new Uint8Array(obj.data);
-		}
-	}
-	return dateReviver(key, value);
-}
-/** Parse with Uint8Array and Date support. */
-function parse(text) {
-	return JSON.parse(text, uint8ArrayReviver);
-}
-//#endregion
-//#region src/vendor/shared/util.ts
-function compact(obj) {
-	const value = {};
-	for (const key in obj) if (obj[key] !== null) value[key] = obj[key];
-	else value[key] = void 0;
-	return value;
-}
-//#endregion
 //#region src/apply-event.ts
 /** Storage key for the run entity. */
 const RUN_KEY = "run";
@@ -2683,6 +2744,70 @@ async function resolveExpiredHookClaim(env, owner, claimId, token) {
 		token
 	});
 }
+/** Read-only owner check used by index repair; unlike the resolver it never fences. */
+async function getCommittedHook(env, owner, token) {
+	const namespace = env.WORKFLOW_DB;
+	if (!namespace) throw new Error("world-celld hook index missing WORKFLOW_DB binding");
+	return await namespace.get(namespace.idFromName(owner.runId)).getCommittedHook({
+		hookId: owner.hookId,
+		token
+	});
+}
+function warnRepair(action, owner) {
+	console.warn(`world-celld ${action} hook index record for run ${owner.runId} hook ${owner.hookId}`);
+}
+function warnRepublished(owner) {
+	warnRepair("republished", owner);
+}
+/**
+* Publish the record for a claim whose hook committed in its run but whose
+* creating client stopped before finalizing. The write applies only while the
+* observed claim is unchanged, so a concurrent release or finalize wins.
+* Returns the record now stored for the key, if any.
+*/
+async function publishCommittedClaim(storage, env, keys, token) {
+	const observed = await storage.get(keys.claim);
+	if (!observed) return null;
+	const hook = await getCommittedHook(env, observed.owner, token);
+	if (!hook) return null;
+	const serialized = stringify(hook);
+	const published = await storage.transaction(async (txn) => {
+		const values = await txn.get([keys.record, keys.claim]);
+		const indexed = values.get(keys.record);
+		if (indexed !== void 0) return {
+			raw: indexed,
+			written: false
+		};
+		const claim = values.get(keys.claim);
+		if (claim?.claimId !== observed.claimId) return {
+			raw: null,
+			written: false
+		};
+		await txn.put(keys.record, serialized);
+		await txn.delete([keys.claim, claim.deadlineKey]);
+		return {
+			raw: serialized,
+			written: true
+		};
+	});
+	if (!published.written) return published.raw;
+	warnRepublished(observed.owner);
+	return await confirmRepublished(storage, env, keys.record, observed.owner, token) ? serialized : null;
+}
+/**
+* Re-ask the owner after a repair write. A hook disposed between the owner's
+* answer and the write would otherwise keep a record whose index release was
+* already spent, so withdraw it.
+*/
+async function confirmRepublished(storage, env, record, owner, token) {
+	if (await getCommittedHook(env, owner, token)) return true;
+	await storage.transaction(async (txn) => {
+		const indexed = await txn.get(record);
+		if (indexed !== void 0 && sameOwner(ownerFromSerializedHook(indexed), owner)) await txn.delete(record);
+	});
+	warnRepair("withdrew", owner);
+	return false;
+}
 //#endregion
 //#region src/worker/durable-objects/HookIdDO.ts
 const MAX_RELEASE_BATCH$1 = 64;
@@ -2705,7 +2830,10 @@ var HookIdDO = class extends DurableObject {
 		return typeof this.env.clock === "function" ? this.env.clock() : Date.now();
 	}
 	async get(hookId) {
-		const raw = await this.ctx.storage.get(recordKey$1(hookId));
+		const raw = await this.ctx.storage.get(recordKey$1(hookId)) ?? await publishCommittedClaim(this.ctx.storage, this.env, {
+			record: recordKey$1(hookId),
+			claim: claimKey$1(hookId)
+		});
 		if (!raw) return null;
 		const owner = ownerFromSerializedHook(raw);
 		return await runIsActive(this.env, owner.runId) ? raw : null;
@@ -2870,8 +2998,9 @@ var HookIdDO = class extends DurableObject {
 			const claim = observed.get(claimKey$1(item.hookId));
 			if (!claim || claim.claimId !== item.claimId || claim.expiresAt > now) return;
 			const hook = await resolveExpiredHookClaim(this.env, claim.owner, claim.claimId);
-			committed.set(claimKey$1(item.hookId), hook !== null);
+			committed.set(claimKey$1(item.hookId), hook);
 		}));
+		const published = [];
 		await this.ctx.storage.transaction(async (txn) => {
 			const claims = await txn.get(page.map(([, item]) => claimKey$1(item.hookId)));
 			const deletes = [];
@@ -2881,8 +3010,15 @@ var HookIdDO = class extends DurableObject {
 				const snapshot = observed.get(key);
 				if (claim?.claimId !== item.claimId || claim.expiresAt > now) deletes.push(deadline);
 				else if (claim.claimId === snapshot?.claimId && claim.expiresAt === snapshot.expiresAt) {
-					if (committed.get(key)) await this.renewClaim(txn, item.hookId, claim, now);
-					else deletes.push(deadline, key);
+					const hook = committed.get(key);
+					if (hook) {
+						await txn.put(recordKey$1(item.hookId), stringify(hook));
+						published.push({
+							hookId: item.hookId,
+							owner: claim.owner
+						});
+					}
+					deletes.push(deadline, key);
 				}
 			}
 			for (let offset = 0; offset < deletes.length; offset += 128) await txn.delete(deletes.slice(offset, offset + 128));
@@ -2897,6 +3033,10 @@ var HookIdDO = class extends DurableObject {
 			if (nextAt === void 0) await txn.deleteAlarm();
 			else await txn.setAlarm(Math.max(now + 1, nextAt));
 		});
+		for (const { hookId, owner } of published) {
+			warnRepublished(owner);
+			await confirmRepublished(this.ctx.storage, this.env, recordKey$1(hookId), owner);
+		}
 	}
 };
 //#endregion
@@ -2921,7 +3061,10 @@ var HookTokenDO = class extends DurableObject {
 		return typeof this.env.clock === "function" ? this.env.clock() : Date.now();
 	}
 	async get(token) {
-		const raw = await this.ctx.storage.get(recordKey(token));
+		const raw = await this.ctx.storage.get(recordKey(token)) ?? await publishCommittedClaim(this.ctx.storage, this.env, {
+			record: recordKey(token),
+			claim: claimKey(token)
+		}, token);
 		if (!raw) return null;
 		const owner = ownerFromSerializedHook(raw);
 		return await runIsActive(this.env, owner.runId) ? raw : null;
@@ -3085,8 +3228,9 @@ var HookTokenDO = class extends DurableObject {
 			const claim = observed.get(claimKey(item.token));
 			if (!claim || claim.claimId !== item.claimId || claim.expiresAt > now) return;
 			const hook = await resolveExpiredHookClaim(this.env, claim.owner, claim.claimId, item.token);
-			committed.set(claimKey(item.token), hook !== null);
+			committed.set(claimKey(item.token), hook);
 		}));
+		const published = [];
 		await this.ctx.storage.transaction(async (txn) => {
 			const claims = await txn.get(page.map(([, item]) => claimKey(item.token)));
 			const deletes = [];
@@ -3096,8 +3240,15 @@ var HookTokenDO = class extends DurableObject {
 				const snapshot = observed.get(key);
 				if (claim?.claimId !== item.claimId || claim.expiresAt > now) deletes.push(deadline);
 				else if (claim.claimId === snapshot?.claimId && claim.expiresAt === snapshot.expiresAt) {
-					if (committed.get(key)) await this.renewClaim(txn, item.token, claim, now);
-					else deletes.push(deadline, key);
+					const hook = committed.get(key);
+					if (hook) {
+						await txn.put(recordKey(item.token), stringify(hook));
+						published.push({
+							token: item.token,
+							owner: claim.owner
+						});
+					}
+					deletes.push(deadline, key);
 				}
 			}
 			for (let offset = 0; offset < deletes.length; offset += 128) await txn.delete(deletes.slice(offset, offset + 128));
@@ -3112,6 +3263,10 @@ var HookTokenDO = class extends DurableObject {
 			if (nextAt === void 0) await txn.deleteAlarm();
 			else await txn.setAlarm(Math.max(now + 1, nextAt));
 		});
+		for (const { token, owner } of published) {
+			warnRepublished(owner);
+			await confirmRepublished(this.ctx.storage, this.env, recordKey(token), owner, token);
+		}
 	}
 };
 //#endregion
@@ -4162,6 +4317,23 @@ var WorkflowRunDO = class extends DurableObject {
 			return null;
 		});
 	}
+	/**
+	* Read-only twin of resolveExpiredHookClaim for index repair: the committed
+	* hook of a live run, or null. It fences nothing, so a shard may ask while
+	* the hook's creation is still in flight.
+	*/
+	async getCommittedHook(request) {
+		if (typeof request?.hookId !== "string" || request.hookId.length === 0 || request.token !== void 0 && typeof request.token !== "string") throw new TypeError("world-celld committed hook lookup is invalid");
+		return await this.ctx.storage.transaction(async (txn) => {
+			const { tombstone } = await this.retentionState(txn);
+			if (tombstone) return null;
+			const run = await txn.get("run");
+			if (!run || isTerminalWorkflowRunStatus(run.status)) return null;
+			const hook = await txn.get(`${HOOK_KEY_PREFIX}${request.hookId}`);
+			if (!hook || request.token !== void 0 && hook.token !== request.token) return null;
+			return hook;
+		});
+	}
 	/** Single authoritative lifecycle answer used after derivative compaction. */
 	async getLifecycleStatus() {
 		return await this.ctx.storage.transaction(async (txn) => {