@shware/workflow 2.0.1 → 3.1.0

package/dist/cloudflare/runner.d.cts

@@ -4,6 +4,7 @@ import { JourneyEnv, JourneyParams } from "./bindings.cjs";
 import { JourneyStore } from "../store/index.cjs";
 import { Contract } from "../contract.cjs";
 import { JourneyRuntimeOptions } from "../runtime.cjs";
+import { JourneyRunParts } from "../host/execute.cjs";
 import { WorkflowEntrypoint, WorkflowEvent, WorkflowStep } from "cloudflare:workers";
 //#region src/cloudflare/runner.d.ts
 /**
@@ -36,7 +37,7 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected runtime(_params: JourneyParams): JourneyRuntimeOptions;
   /**
    * Message outlet; an app overrides this to plug in real channels (say
-   * CfEmailSender with a react-email renderer). By default it picks the webhook
+   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook
    * or logging sender based on the environment.
    */
   protected createMessageSender(): MessageSender;
@@ -66,8 +67,12 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected createObserver(_store: JourneyStore): JourneyObserver | undefined;
   /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */
   protected createActionInvoker(): ActionInvoker;
+  /**
+   * Everything one run is wired to. By default it is composed from the methods above; a host
+   * that assembles the whole set itself (journeyWorker) overrides this one instead.
+   */
+  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts;
   run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome>;
-  private execute;
 }
 //#endregion
 //# sourceMappingURL=runner.d.cts.map

package/dist/cloudflare/runner.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.cts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;qBAuHa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;EAI3B,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ;UAS9D"}
+{"version":3,"file":"runner.d.cts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAuGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}

package/dist/cloudflare/runner.d.mts

@@ -4,6 +4,7 @@ import { JourneyEnv, JourneyParams } from "./bindings.mjs";
 import { JourneyStore } from "../store/index.mjs";
 import { Contract } from "../contract.mjs";
 import { JourneyRuntimeOptions } from "../runtime.mjs";
+import { JourneyRunParts } from "../host/execute.mjs";
 import { WorkflowEntrypoint, WorkflowEvent, WorkflowStep } from "cloudflare:workers";
 //#region src/cloudflare/runner.d.ts
 /**
@@ -36,7 +37,7 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected runtime(_params: JourneyParams): JourneyRuntimeOptions;
   /**
    * Message outlet; an app overrides this to plug in real channels (say
-   * CfEmailSender with a react-email renderer). By default it picks the webhook
+   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook
    * or logging sender based on the environment.
    */
   protected createMessageSender(): MessageSender;
@@ -66,8 +67,12 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected createObserver(_store: JourneyStore): JourneyObserver | undefined;
   /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */
   protected createActionInvoker(): ActionInvoker;
+  /**
+   * Everything one run is wired to. By default it is composed from the methods above; a host
+   * that assembles the whole set itself (journeyWorker) overrides this one instead.
+   */
+  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts;
   run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome>;
-  private execute;
 }
 //#endregion
 //# sourceMappingURL=runner.d.mts.map

package/dist/cloudflare/runner.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.mts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;qBAuHa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;EAI3B,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ;UAS9D"}
+{"version":3,"file":"runner.d.mts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAuGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}

package/dist/cloudflare/runner.mjs

@@ -1,13 +1,9 @@
-import { ContractValidationError, checkEvent } from "../contract.mjs";
 import { resolveRuntime } from "../runtime.mjs";
 import { WAKE_EVENT_TYPE, wakeExpired } from "./bindings.mjs";
-import { JourneyFactSource } from "../store/facts.mjs";
 import { d1Store } from "./d1-env.mjs";
-import { ingestEvent } from "./router.mjs";
-import { LogMessageSender, WebhookMessageSender } from "./senders.mjs";
+import { executeJourney } from "../host/execute.mjs";
 import { RegistryActionInvoker } from "../engine/actions.mjs";
-import { runJourney } from "../engine/interpreter.mjs";
-import { scaleDurations } from "../engine/time-scale.mjs";
+import { LogMessageSender, WebhookMessageSender } from "../host/senders.mjs";
 import { WorkflowEntrypoint } from "cloudflare:workers";
 import { NonRetryableError } from "cloudflare:workflows";
 //#region src/cloudflare/runner.ts
@@ -72,13 +68,6 @@ var CfEngineStep = class {
 		}
 	}
 };
-/** Development aid: echo each outbound message before handing it to the real sender. */
-function logging(sender) {
-	return { async send(message) {
-		console.log(`[journey] ${message.channel} ${message.template} → ${message.recipient ?? message.userId} ${JSON.stringify(message.props)}`);
-		return sender.send(message);
-	} };
-}
 /**
 * The generic journey executor: one class runs every workflow, because IR is
 * data. It is loaded from the store by the contentHash pinned at entry —
@@ -113,7 +102,7 @@ var JourneyRunner = class extends WorkflowEntrypoint {
 	}
 	/**
 	* Message outlet; an app overrides this to plug in real channels (say
-	* CfEmailSender with a react-email renderer). By default it picks the webhook
+	* an EmailSender over a transport with a react-email renderer). By default it picks the webhook
 	* or logging sender based on the environment.
 	*/
 	createMessageSender() {
@@ -149,73 +138,35 @@ var JourneyRunner = class extends WorkflowEntrypoint {
 	createActionInvoker() {
 		return new RegistryActionInvoker(this.actions());
 	}
+	/**
+	* Everything one run is wired to. By default it is composed from the methods above; a host
+	* that assembles the whole set itself (journeyWorker) overrides this one instead.
+	*/
+	createRunParts(store, params) {
+		return {
+			store,
+			env: this.env,
+			runtime: this.runtime(params),
+			messages: this.createMessageSender(),
+			actions: this.createActionInvoker(),
+			contract: this.contract(),
+			validator: this.createMessageValidator(),
+			observer: this.createObserver(store)
+		};
+	}
 	async run(event, step) {
 		const store = this.createStore();
 		try {
-			return await this.execute(event, step, store);
-		} finally {
-			await this.closeStore(store);
-		}
-	}
-	async execute(event, step, store) {
-		const { workflowId, contentHash, userId } = event.payload;
-		const env = this.env;
-		const stored = await store.getWorkflowIR(contentHash);
-		if (stored === void 0) throw new Error(`WorkflowIR not found: ${workflowId}@${contentHash}`);
-		const runtime = resolveRuntime({ current: this.runtime(event.payload) }, "current");
-		const ir = scaleDurations(stored, runtime.timeScale);
-		const observer = this.createObserver(store);
-		const finished = (status, convertedAt) => observer?.finished?.({
-			workflow: workflowId,
-			instanceId: event.instanceId,
-			userId,
-			status,
-			at: Date.now(),
-			...convertedAt === void 0 ? {} : { convertedAt }
-		});
-		const messages = runtime.logMessages ? logging(this.createMessageSender()) : this.createMessageSender();
-		const contract = this.contract();
-		const events = { emit: async (name, payload, id) => {
-			let accepted = payload;
-			if (contract !== void 0) {
-				const verdict = checkEvent(contract, name, payload);
-				if (!verdict.ok) throw new ContractValidationError(name, verdict.issues);
-				accepted = verdict.data;
-			}
-			await ingestEvent(env, {
-				id,
-				userId,
-				event: name,
-				payload: accepted
-			}, store);
-		} };
-		let outcome;
-		try {
-			outcome = await runJourney(ir, {
-				userId,
+			const { userId } = event.payload;
+			return await executeJourney({
 				instanceId: event.instanceId,
+				params: event.payload,
 				enteredAtMs: event.timestamp.getTime(),
-				step: new CfEngineStep(step, store, userId, event.instanceId),
-				facts: new JourneyFactSource(store, userId),
-				messages,
-				events,
-				actions: this.createActionInvoker(),
-				validator: this.createMessageValidator(),
-				observer
-			});
-		} catch (error) {
-			await step.do("finalize:failed", async () => {
-				await store.setEntryStatus(event.instanceId, "failed");
-				await finished("failed");
-			});
-			throw error;
+				step: new CfEngineStep(step, store, userId, event.instanceId)
+			}, this.createRunParts(store, event.payload));
+		} finally {
+			await this.closeStore(store);
 		}
-		await step.do("finalize", async () => {
-			await store.setEntryStatus(event.instanceId, outcome.status);
-			await store.unsubscribe(event.instanceId);
-			await finished(outcome.status, outcome.convertedAt);
-		});
-		return outcome;
 	}
 };
 //#endregion

package/dist/cloudflare/runner.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runner.mjs","names":[],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport { type Contract, ContractValidationError, checkEvent } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport { runJourney } from '../engine/interpreter';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  EventSink,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { scaleDurations } from '../engine/time-scale';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport { JourneyFactSource } from '../store/facts';\nimport type { JourneyStore } from '../store/index';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\nimport { ingestEvent } from './router';\nimport { LogMessageSender, WebhookMessageSender } from './senders';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock can tell them apart (see wakeExpired).\n */\n/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */\nconst NON_RETRYABLE = new Set(['TemplateValidationError', 'ContractValidationError']);\n\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A template refusing its props, or the contract refusing an emitted event,\n   * is deterministic — a retry hits the same refusal — so it ends the step at\n   * once instead of burning the retry budget.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && NON_RETRYABLE.has(error.name)) {\n          throw new NonRetryableError(error.message, error.name);\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  sleepUntil(name: string, timestampMs: number): Promise<void> {\n    return this.step.sleepUntil(name, timestampMs);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(name: string, timeoutMs: number): Promise<'event' | 'timeout'> {\n    const startedAt = Date.now();\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see\n       * wakeExpired). `startedAt` is not replay-stable, but it is read only\n       * inside the step body below, and a step body runs on the live attempt\n       * alone — a replay returns the persisted verdict without touching the\n       * clock.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(startedAt, timeoutMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/** Development aid: echo each outbound message before handing it to the real sender. */\nfunction logging(sender: MessageSender): MessageSender {\n  return {\n    async send(message) {\n      console.log(\n        `[journey] ${message.channel} ${message.template} → ${message.recipient ?? message.userId} ${JSON.stringify(message.props)}`\n      );\n      return sender.send(message);\n    },\n  };\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 + KV from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * CfEmailSender with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      return await this.execute(event, step, store);\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n\n  private async execute(\n    event: WorkflowEvent<JourneyParams>,\n    step: WorkflowStep,\n    store: JourneyStore\n  ): Promise<JourneyOutcome> {\n    const { workflowId, contentHash, userId } = event.payload;\n    const env = this.env;\n\n    const stored = await store.getWorkflowIR(contentHash);\n    if (stored === undefined) {\n      throw new Error(`WorkflowIR not found: ${workflowId}@${contentHash}`);\n    }\n    const runtime = resolveRuntime({ current: this.runtime(event.payload) }, 'current');\n    // Development runs the journey in fast-forward; the pinned hash still names the version.\n    const ir = scaleDurations(stored, runtime.timeScale);\n\n    const observer = this.createObserver(store);\n    const finished = (status: JourneyOutcome['status'] | 'failed', convertedAt?: number) =>\n      observer?.finished?.({\n        workflow: workflowId,\n        instanceId: event.instanceId,\n        userId,\n        status,\n        at: Date.now(),\n        ...(convertedAt === undefined ? {} : { convertedAt }),\n      });\n\n    const messages = runtime.logMessages\n      ? logging(this.createMessageSender())\n      : this.createMessageSender();\n\n    // send_event feeds straight back into the router logic — an in-Worker call\n    // forming the event edge between workflows. The step's identity travels as\n    // the event id, so a retried emit records the occurrence once.\n    // An emitted event passes the same contract check as one arriving over HTTP.\n    const contract = this.contract();\n    const events: EventSink = {\n      emit: async (name, payload, id) => {\n        let accepted: Record<string, unknown> = payload;\n        if (contract !== undefined) {\n          const verdict = checkEvent(contract, name, payload);\n          if (!verdict.ok) throw new ContractValidationError(name, verdict.issues);\n          accepted = verdict.data;\n        }\n        await ingestEvent(env, { id, userId, event: name, payload: accepted }, store);\n      },\n    };\n\n    let outcome: JourneyOutcome;\n    try {\n      outcome = await runJourney(ir, {\n        userId,\n        instanceId: event.instanceId,\n        // Trigger-event creation time: replay-stable, unlike Date.now() here\n        enteredAtMs: event.timestamp.getTime(),\n        step: new CfEngineStep(step, store, userId, event.instanceId),\n        facts: new JourneyFactSource(store, userId),\n        messages,\n        events,\n        actions: this.createActionInvoker(),\n        validator: this.createMessageValidator(),\n        observer,\n      });\n    } catch (error) {\n      /*\n       * An error escaping run() ends the instance, and the ledger is the only\n       * place anyone looks afterwards: leaving it at 'running' meant a dead\n       * journey stayed indistinguishable from a waiting one, in the dashboard\n       * and in the once-policy, forever.\n       *\n       * Subscriptions are deliberately left in place. They are cleaned up on\n       * every ordinary ending, but here the wake rows are the only evidence of\n       * what the instance was waiting for, and dropping them would also break\n       * the instance if the platform does re-run it.\n       */\n      await step.do('finalize:failed', async () => {\n        await store.setEntryStatus(event.instanceId, 'failed');\n        await finished('failed');\n      });\n      throw error;\n    }\n\n    await step.do('finalize', async () => {\n      await store.setEntryStatus(event.instanceId, outcome.status);\n      await store.unsubscribe(event.instanceId);\n      await finished(outcome.status, outcome.convertedAt);\n    });\n\n    return outcome;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+BA,MAAM,gCAAgB,IAAI,IAAI,CAAC,2BAA2B,yBAAyB,CAAC;AAEpF,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;CAOH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,cAAc,IAAI,MAAM,IAAI,GACxD,MAAM,IAAI,kBAAkB,MAAM,SAAS,MAAM,IAAI;IAEvD,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,WAAW,MAAc,aAAoC;EAC3D,OAAO,KAAK,KAAK,WAAW,MAAM,WAAW;CAC/C;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YAAY,MAAc,WAAiD;EAC/E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAM;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvD,YAAY,WAAW,WAAW,KAAK,IAAI,CAAC,CAC9C,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;AAGA,SAAS,QAAQ,QAAsC;CACrD,OAAO,EACL,MAAM,KAAK,SAAS;EAClB,QAAQ,IACN,aAAa,QAAQ,QAAQ,GAAG,QAAQ,SAAS,KAAK,QAAQ,aAAa,QAAQ,OAAO,GAAG,KAAK,UAAU,QAAQ,KAAK,GAC3H;EACA,OAAO,OAAO,KAAK,OAAO;CAC5B,EACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmC,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAO,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;;;;;;;;;;;;CAajE,QAAkB,SAA+C;EAC/D,OAAO,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAI,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAI,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAI,sBAAsB,KAAK,QAAQ,CAAC;CACjD;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,OAAO,MAAM,KAAK,QAAQ,OAAO,MAAM,KAAK;EAC9C,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;CAEA,MAAc,QACZ,OACA,MACA,OACyB;EACzB,MAAM,EAAE,YAAY,aAAa,WAAW,MAAM;EAClD,MAAM,MAAM,KAAK;EAEjB,MAAM,SAAS,MAAM,MAAM,cAAc,WAAW;EACpD,IAAI,WAAW,KAAA,GACb,MAAM,IAAI,MAAM,yBAAyB,WAAW,GAAG,aAAa;EAEtE,MAAM,UAAU,eAAe,EAAE,SAAS,KAAK,QAAQ,MAAM,OAAO,EAAE,GAAG,SAAS;EAElF,MAAM,KAAK,eAAe,QAAQ,QAAQ,SAAS;EAEnD,MAAM,WAAW,KAAK,eAAe,KAAK;EAC1C,MAAM,YAAY,QAA6C,gBAC7D,UAAU,WAAW;GACnB,UAAU;GACV,YAAY,MAAM;GAClB;GACA;GACA,IAAI,KAAK,IAAI;GACb,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;EACrD,CAAC;EAEH,MAAM,WAAW,QAAQ,cACrB,QAAQ,KAAK,oBAAoB,CAAC,IAClC,KAAK,oBAAoB;EAM7B,MAAM,WAAW,KAAK,SAAS;EAC/B,MAAM,SAAoB,EACxB,MAAM,OAAO,MAAM,SAAS,OAAO;GACjC,IAAI,WAAoC;GACxC,IAAI,aAAa,KAAA,GAAW;IAC1B,MAAM,UAAU,WAAW,UAAU,MAAM,OAAO;IAClD,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,wBAAwB,MAAM,QAAQ,MAAM;IACvE,WAAW,QAAQ;GACrB;GACA,MAAM,YAAY,KAAK;IAAE;IAAI;IAAQ,OAAO;IAAM,SAAS;GAAS,GAAG,KAAK;EAC9E,EACF;EAEA,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,WAAW,IAAI;IAC7B;IACA,YAAY,MAAM;IAElB,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;IAC5D,OAAO,IAAI,kBAAkB,OAAO,MAAM;IAC1C;IACA;IACA,SAAS,KAAK,oBAAoB;IAClC,WAAW,KAAK,uBAAuB;IACvC;GACF,CAAC;EACH,SAAS,OAAO;GAYd,MAAM,KAAK,GAAG,mBAAmB,YAAY;IAC3C,MAAM,MAAM,eAAe,MAAM,YAAY,QAAQ;IACrD,MAAM,SAAS,QAAQ;GACzB,CAAC;GACD,MAAM;EACR;EAEA,MAAM,KAAK,GAAG,YAAY,YAAY;GACpC,MAAM,MAAM,eAAe,MAAM,YAAY,QAAQ,MAAM;GAC3D,MAAM,MAAM,YAAY,MAAM,UAAU;GACxC,MAAM,SAAS,QAAQ,QAAQ,QAAQ,WAAW;EACpD,CAAC;EAED,OAAO;CACT;AACF"}
+{"version":3,"file":"runner.mjs","names":[],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport type { Contract } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { type JourneyRunParts, executeJourney } from '../host/execute';\nimport { LogMessageSender, WebhookMessageSender } from '../host/senders';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport type { JourneyStore } from '../store/index';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock can tell them apart (see wakeExpired).\n */\n/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */\nconst NON_RETRYABLE = new Set(['TemplateValidationError', 'ContractValidationError']);\n\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A template refusing its props, or the contract refusing an emitted event,\n   * is deterministic — a retry hits the same refusal — so it ends the step at\n   * once instead of burning the retry budget.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && NON_RETRYABLE.has(error.name)) {\n          throw new NonRetryableError(error.message, error.name);\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  sleepUntil(name: string, timestampMs: number): Promise<void> {\n    return this.step.sleepUntil(name, timestampMs);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(name: string, timeoutMs: number): Promise<'event' | 'timeout'> {\n    const startedAt = Date.now();\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see\n       * wakeExpired). `startedAt` is not replay-stable, but it is read only\n       * inside the step body below, and a step body runs on the live attempt\n       * alone — a replay returns the persisted verdict without touching the\n       * clock.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(startedAt, timeoutMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 + KV from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  /**\n   * Everything one run is wired to. By default it is composed from the methods above; a host\n   * that assembles the whole set itself (journeyWorker) overrides this one instead.\n   */\n  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n    return {\n      store,\n      env: this.env,\n      runtime: this.runtime(params),\n      messages: this.createMessageSender(),\n      actions: this.createActionInvoker(),\n      contract: this.contract(),\n      validator: this.createMessageValidator(),\n      observer: this.createObserver(store),\n    };\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      const { userId } = event.payload;\n      return await executeJourney(\n        {\n          instanceId: event.instanceId,\n          params: event.payload,\n          // Trigger-event creation time: replay-stable, unlike Date.now() here\n          enteredAtMs: event.timestamp.getTime(),\n          step: new CfEngineStep(step, store, userId, event.instanceId),\n        },\n        this.createRunParts(store, event.payload)\n      );\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,MAAM,gCAAgB,IAAI,IAAI,CAAC,2BAA2B,yBAAyB,CAAC;AAEpF,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;CAOH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,cAAc,IAAI,MAAM,IAAI,GACxD,MAAM,IAAI,kBAAkB,MAAM,SAAS,MAAM,IAAI;IAEvD,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,WAAW,MAAc,aAAoC;EAC3D,OAAO,KAAK,KAAK,WAAW,MAAM,WAAW;CAC/C;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YAAY,MAAc,WAAiD;EAC/E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAM;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvD,YAAY,WAAW,WAAW,KAAK,IAAI,CAAC,CAC9C,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmC,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAO,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;;;;;;;;;;;;CAajE,QAAkB,SAA+C;EAC/D,OAAO,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAI,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAI,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAI,sBAAsB,KAAK,QAAQ,CAAC;CACjD;;;;;CAMA,eAAyB,OAAqB,QAAwC;EACpF,OAAO;GACL;GACA,KAAK,KAAK;GACV,SAAS,KAAK,QAAQ,MAAM;GAC5B,UAAU,KAAK,oBAAoB;GACnC,SAAS,KAAK,oBAAoB;GAClC,UAAU,KAAK,SAAS;GACxB,WAAW,KAAK,uBAAuB;GACvC,UAAU,KAAK,eAAe,KAAK;EACrC;CACF;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,MAAM,EAAE,WAAW,MAAM;GACzB,OAAO,MAAM,eACX;IACE,YAAY,MAAM;IAClB,QAAQ,MAAM;IAEd,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;GAC9D,GACA,KAAK,eAAe,OAAO,MAAM,OAAO,CAC1C;EACF,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;AACF"}

package/dist/cloudflare/worker.cjs

@@ -1,21 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
-const require_email = require("../email.cjs");
-const require_templates = require("../templates.cjs");
-const require_config = require("../config.cjs");
-const require_contract = require("../contract.cjs");
-require("../store/tables.cjs");
-const require_react_email = require("../react-email.cjs");
-const require_reporting_tracking = require("../reporting/tracking.cjs");
-const require_store_index = require("../store/index.cjs");
-const require_cloudflare_d1_env = require("./d1-env.cjs");
-const require_cloudflare_router = require("./router.cjs");
-const require_cloudflare_channels = require("./channels.cjs");
-const require_engine_time_scale = require("../engine/time-scale.cjs");
+const require_host_journey_host = require("../host/journey-host.cjs");
 const require_cloudflare_runner = require("./runner.cjs");
-const require_reporting_observer = require("../reporting/observer.cjs");
-let zod_mini = require("zod/mini");
-zod_mini = require_runtime.__toESM(zod_mini, 1);
 //#region src/cloudflare/worker.ts
 /**
 * A complete journey host in one call: the runner class with the app's store,
@@ -29,227 +14,61 @@ zod_mini = require_runtime.__toESM(zod_mini, 1);
 *   export const MyRunner = journeys.Runner;
 *   export default { fetch: journeys.fetch };
 */
-/** The Worker's environment failed its schema (`journeyWorker({ env })`). */
-var EnvValidationError = class extends Error {
-	issues;
-	name = "EnvValidationError";
-	constructor(issues) {
-		super(`the Worker's environment is invalid:\n  ${issues.join("\n  ")}`);
-		this.issues = issues;
-	}
-};
 function journeyWorker(options) {
-	const { config } = options;
-	const emailIds = require_templates.indexTemplates("email", config.templates?.email);
-	require_email.assertEmailConfig(config, emailIds.values());
-	const checked = /* @__PURE__ */ new WeakMap();
-	const checkEnv = (env) => {
-		if (options.env === void 0) return env;
-		const cached = checked.get(env);
-		if (cached !== void 0) return cached;
-		const result = zod_mini.safeParse(options.env, env);
-		if (!result.success) throw new EnvValidationError(result.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`));
-		const merged = {
-			...env,
-			...result.data
-		};
-		checked.set(env, merged);
-		return merged;
-	};
-	const bundle = () => require_config.compileConfig(config);
-	const emails = config.templates?.email;
-	const database = { schema: config.database?.schema ?? "workflow" };
-	const lease = (env) => {
-		const opened = options.store === void 0 ? require_cloudflare_d1_env.d1Store(env) : options.store(env, database);
-		const noop = async () => {};
-		const factor = require_cloudflare_channels.runtimeFromConfig(config, env).timeScale;
-		return "store" in opened ? {
-			store: require_engine_time_scale.scaleSegmentWindows(opened.store, factor),
-			close: opened.close ?? noop
-		} : {
-			store: require_engine_time_scale.scaleSegmentWindows(opened, factor),
-			close: noop
-		};
-	};
+	const host = require_host_journey_host.createJourneyHost(options);
 	class Runner extends require_cloudflare_runner.JourneyRunner {
 		leases = /* @__PURE__ */ new WeakMap();
-		current;
 		createStore() {
-			const { store, close } = lease(checkEnv(this.env));
+			const { store, close } = host.lease(host.checkEnv(this.env));
 			this.leases.set(store, close);
-			this.current = store;
 			return store;
 		}
 		async closeStore(store) {
 			await this.leases.get(store)?.();
 		}
-		contract() {
-			return config.contract;
-		}
-		createMessageValidator() {
-			return require_templates.registryValidator(config.templates ?? {});
-		}
-		createMessageSender() {
-			if (this.current === void 0) return super.createMessageSender();
-			if (options.messages !== void 0) return options.messages(checkEnv(this.env), this.current);
-			return require_cloudflare_channels.channelsFromConfig(config, checkEnv(this.env), { store: this.current });
-		}
-		createObserver(store) {
-			if (options.observer !== void 0) return options.observer(checkEnv(this.env), store);
-			return store.reporting === void 0 ? void 0 : require_reporting_observer.reportingObserver(store.reporting, checkEnv(this.env).WORKFLOW_ORIGIN);
-		}
-		runtime(params) {
-			const env = checkEnv(this.env);
-			if (options.runtime !== void 0) return options.runtime(env, params);
-			return require_cloudflare_channels.runtimeFromConfig(config, env);
-		}
-		actions() {
-			return config.actions ?? [];
+		createRunParts(store, params) {
+			return host.runParts(host.checkEnv(this.env), store, params);
 		}
 	}
-	const json = (body, status = 200) => new Response(JSON.stringify(body), {
-		status,
-		headers: { "content-type": "application/json" }
-	});
-	const authorized = (request, env) => env.API_TOKEN === void 0 || request.headers.get("authorization") === `Bearer ${env.API_TOKEN}`;
-	const preview = emails === void 0 ? void 0 : require_react_email.registryRenderer(emails, config.email);
-	let applying;
-	let retryAt = 0;
-	const applyOwnBundle = (env) => {
+	/** CF's version metadata: the bundle compiled into each new version goes live by itself. */
+	const ownVersion = (env) => {
 		const metadata = env.CF_VERSION_METADATA;
-		if (metadata === void 0 || metadata.id === "") return void 0;
-		const version = {
+		if (metadata === void 0) return void 0;
+		return {
 			id: metadata.id,
 			createdAt: Date.parse(metadata.timestamp)
 		};
-		if (Number.isNaN(version.createdAt)) return void 0;
-		if (applying !== void 0 || Date.now() < retryAt) return void 0;
-		applying = (async () => {
-			const { store, close } = lease(env);
-			try {
-				if (store.liveBundleVersion === void 0) return;
-				const live = await store.liveBundleVersion();
-				if (live !== void 0 && (live.id === version.id || live.createdAt >= version.createdAt)) return;
-				if ((await require_cloudflare_router.deployBundle(env, bundle(), store, version)).applied) console.log(`[workflow] version ${version.id} is live`);
-			} finally {
-				await close();
-			}
-		})().catch((error) => {
-			applying = void 0;
-			retryAt = Date.now() + 6e4;
-			console.error(`[workflow] could not make version ${version.id} live`, error);
-		});
-		return applying;
 	};
 	const fetch = async (request, rawEnv, ctx) => {
 		let env;
 		try {
-			env = checkEnv(rawEnv);
+			env = host.checkEnv(rawEnv);
 		} catch (error) {
-			if (!(error instanceof EnvValidationError)) throw error;
+			if (!(error instanceof require_host_journey_host.EnvValidationError)) throw error;
 			console.error(`[workflow] ${error.message}`);
-			return json({ error: error.message }, 500);
+			return new Response(JSON.stringify({ error: error.message }), {
+				status: 500,
+				headers: { "content-type": "application/json" }
+			});
 		}
-		const pending = applyOwnBundle(env);
+		const pending = host.applyOwnBundle(env, ownVersion(env));
 		if (pending !== void 0) {
 			if (ctx === void 0) await pending;
 			else ctx.waitUntil(pending);
 		}
-		const url = new URL(request.url);
-		const { store, close } = lease(env);
+		const { store, close } = host.lease(env);
 		try {
-			if (url.pathname.startsWith("/t/") && store.reporting !== void 0) {
-				const openedEvent = config.webPush?.openedEvent;
-				const tracked = await require_reporting_tracking.handleTracking(request, store.reporting, {
-					legacyUnsubscribeUrl: config.email?.unsubscribeUrl,
-					product: config.title,
-					quickMs: config.email?.tracking?.quickClickMs,
-					pushOpened: openedEvent === void 0 ? void 0 : async ({ messageId, userId, at }) => {
-						const payload = { message_id: messageId };
-						const contract = config.contract;
-						const verdict = contract === void 0 ? void 0 : require_contract.checkEvent(contract, openedEvent, payload);
-						if (verdict !== void 0 && !verdict.ok) throw new require_contract.ContractValidationError(openedEvent, verdict.issues);
-						await require_cloudflare_router.ingestEvent(env, {
-							id: `${openedEvent}:${messageId}`,
-							userId,
-							event: openedEvent,
-							payload: verdict?.data ?? payload,
-							ts: at
-						}, store);
-					}
-				});
-				if (tracked !== void 0) return tracked;
-			}
-			if (url.pathname === "/segments/sweep") {
-				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
-				if (request.method !== "POST") return json({ error: "method not allowed" }, 405);
-				return json(await require_cloudflare_router.sweepSegments(env, store));
-			}
-			if (url.pathname === "/bundle") {
-				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
-				if (request.method !== "GET") return json({ error: "method not allowed" }, 405);
-				return json(bundle());
-			}
-			if (url.pathname === "/bundle/deploy") {
-				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
-				if (request.method !== "POST") return json({ error: "method not allowed" }, 405);
-				try {
-					return json(await require_cloudflare_router.deployBundle(env, bundle(), store));
-				} catch (error) {
-					if (!(error instanceof require_store_index.SchemaMismatchError)) throw error;
-					return json({
-						error: error.message,
-						problems: error.problems
-					}, 503);
-				}
-			}
-			if (emails !== void 0 && preview !== void 0 && url.pathname.startsWith("/preview/")) {
-				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
-				if (request.method !== "GET") return json({ error: "method not allowed" }, 405);
-				const key = url.pathname.slice(9);
-				if (!emailIds.has(key)) return json({ error: `unknown email template: ${key}` }, 404);
-				let props = {};
-				try {
-					props = JSON.parse(url.searchParams.get("props") ?? "{}");
-				} catch {
-					return json({ error: "props must be a JSON object" }, 400);
-				}
-				if (typeof props !== "object" || props === null || Array.isArray(props)) return json({ error: "props must be a JSON object" }, 400);
-				try {
-					const { subject, html } = await preview(key, props);
-					return new Response(html, { headers: {
-						"content-type": "text/html; charset=utf-8",
-						"x-subject": subject
-					} });
-				} catch (error) {
-					if (error instanceof require_templates.TemplateValidationError) return json({
-						error: error.message,
-						issues: error.issues
-					}, 400);
-					throw error;
-				}
-			}
-			return await require_cloudflare_router.handleRequest(request, env, store, {
-				contract: config.contract,
-				mode: options.contractMode
-			});
+			return await host.handle(request, env, store);
 		} finally {
 			if (ctx === void 0) await close();
 			else ctx.waitUntil(close());
 		}
 	};
-	const sweep = async (rawEnv) => {
-		const env = checkEnv(rawEnv);
-		const { store, close } = lease(env);
-		try {
-			return await require_cloudflare_router.sweepSegments(env, store);
-		} finally {
-			await close();
-		}
-	};
+	const sweep = (rawEnv) => host.sweep(host.checkEnv(rawEnv));
 	const scheduled = async (_controller, env, ctx) => {
 		ctx.waitUntil((async () => {
-			await applyOwnBundle(checkEnv(env));
+			const checked = host.checkEnv(env);
+			await host.applyOwnBundle(checked, ownVersion(checked));
 			await sweep(env);
 		})());
 	};
@@ -261,7 +80,7 @@ function journeyWorker(options) {
 	};
 }
 //#endregion
-exports.EnvValidationError = EnvValidationError;
+exports.EnvValidationError = require_host_journey_host.EnvValidationError;
 exports.journeyWorker = journeyWorker;
 
 //# sourceMappingURL=worker.cjs.map

package/dist/cloudflare/worker.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"worker.cjs","names":["indexTemplates","z","compileConfig","d1Store","runtimeFromConfig","scaleSegmentWindows","JourneyRunner","registryValidator","channelsFromConfig","reportingObserver","registryRenderer","deployBundle","handleTracking","checkEvent","ContractValidationError","ingestEvent","sweepSegments","SchemaMismatchError","TemplateValidationError","handleRequest"],"sources":["../../src/cloudflare/worker.ts"],"sourcesContent":["import * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport { type JourneyConfig, compileConfig } from '../config';\nimport { type Contract, ContractValidationError, checkEvent } from '../contract';\nimport { assertEmailConfig } from '../email';\nimport type { RegisteredAction } from '../engine/actions';\nimport type { JourneyObserver, MessageSender, MessageValidator } from '../engine/ports';\nimport { scaleSegmentWindows } from '../engine/time-scale';\nimport type { ScalarIR } from '../ir';\nimport { registryRenderer } from '../react-email';\nimport { reportingObserver } from '../reporting/observer';\nimport { handleTracking } from '../reporting/tracking';\nimport type { JourneyRuntimeOptions } from '../runtime';\nimport {\n  type BundleVersion,\n  type JourneyStore,\n  SchemaMismatchError,\n  type StoreLease,\n} from '../store/index';\nimport { DEFAULT_SCHEMA } from '../store/tables';\nimport { TemplateValidationError, indexTemplates, registryValidator } from '../templates';\nimport type { JourneyEnv, JourneyParams } from './bindings';\nimport { channelsFromConfig, runtimeFromConfig } from './channels';\nimport { d1Store } from './d1-env';\nimport {\n  type SweepResult,\n  deployBundle,\n  handleRequest,\n  ingestEvent,\n  sweepSegments,\n} from './router';\nimport { JourneyRunner } from './runner';\n\n/** The fetch handler's execution context (the subset used). */\nexport interface ExecutionContextLike {\n  waitUntil(promise: Promise<unknown>): void;\n}\n\nexport interface JourneyWorkerOptions<Env extends JourneyEnv> {\n  /**\n   * The project's `workflow.config.ts` (`defineConfig`): what the Worker\n   * deploys (`GET /bundle`, `POST /bundle/deploy` serve `compileConfig`), the\n   * template registries the senders, the validator and `/preview` render from,\n   * the contract every `/events` and `/identify` is checked against, the email\n   * envelope, actions, and the runtime / APNs / FCM settings. Secrets come\n   * from the env under the names `JourneyEnv` documents.\n   */\n  config: JourneyConfig;\n  /**\n   * The data plane, opened per request and per workflow run. Return a\n   * `StoreLease` when the client must be released afterwards (a Postgres\n   * connection); defaults to D1 + KV from the env's bindings. `database` is\n   * the config's (`schema` defaulting to `workflow`), for a Postgres store:\n   *\n   *   store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database)\n   */\n  store?: (env: Env, database: { schema: string }) => JourneyStore | StoreLease;\n  /**\n   * Reporting hooks: node arrivals, every copy sent (with the tracking it should carry — click\n   * links and an open pixel for email, payload data for a push), and how each instance ended.\n   * By default a store that keeps reporting (Postgres) records them itself, and the Worker\n   * serves the email tracking routes (`/t/...`, on `WORKFLOW_ORIGIN`); override to report\n   * elsewhere.\n   */\n  observer?: (env: Env, store: JourneyStore) => JourneyObserver;\n  /** Message outlet override (tests, a custom gateway); by default the channels the config describes. */\n  messages?: (env: Env, store: JourneyStore) => MessageSender;\n  /** Per-instance runtime options override (a tester in fast-forward); by default `config.runtime` for `ENVIRONMENT`. */\n  runtime?: (env: Env, params: JourneyParams) => JourneyRuntimeOptions;\n  /**\n   * The host's environment, as a zod schema over its vars and secrets (bindings pass through\n   * untouched): checked the first time the Worker runs, so a missing or malformed variable fails\n   * there — every problem listed — not at the send that needs it. Webhook templates read their\n   * URL from the parsed values: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`.\n   */\n  env?: core.$ZodType<object>;\n  /** 'enforce' (default) answers an event or patch the contract refuses with a 400; 'report' only logs it. */\n  contractMode?: 'enforce' | 'report';\n}\n\nexport interface JourneyWorker<Env extends JourneyEnv> {\n  /** Export this under the `class_name` of the wrangler `workflows` binding. */\n  Runner: new (...args: never[]) => JourneyRunner;\n  /** The Worker's fetch handler: `/health`, `/events`, `/identify`, `/devices`, `/messages/opened`, `/segments/sweep`, `/t/*` (email tracking), `/deploy`, `/bundle`, `/bundle/deploy` and `/preview/*`. */\n  fetch: (request: Request, env: Env, ctx?: ExecutionContextLike) => Promise<Response>;\n  /**\n   * The segment sweep (`sweepSegments`): membership of every deployed segment for every known\n   * user, the journeys of segments entered by the clock alone (`not(performed(e.login, { within:\n   * '7 days' }))` has no event to ride on), and each segment's size. Also served as\n   * `POST /segments/sweep`.\n   */\n  sweep: (env: Env) => Promise<SweepResult>;\n  /** The cron trigger's handler: runs the sweep. Export it beside `fetch` with a `triggers.crons` entry. */\n  scheduled: (controller: unknown, env: Env, ctx: ExecutionContextLike) => Promise<void>;\n}\n\n/**\n * A complete journey host in one call: the runner class with the app's store,\n * outlets and runtime plugged in, and the fetch handler that serves the ingest\n * API around them.\n *\n *   const journeys = journeyWorker<Env>({\n *     config,   // workflow.config.ts (defineConfig)\n *     store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database),\n *   });\n *   export const MyRunner = journeys.Runner;\n *   export default { fetch: journeys.fetch };\n */\n/** The Worker's environment failed its schema (`journeyWorker({ env })`). */\nexport class EnvValidationError extends Error {\n  override readonly name = 'EnvValidationError';\n  constructor(readonly issues: readonly string[]) {\n    super(`the Worker's environment is invalid:\\n  ${issues.join('\\n  ')}`);\n  }\n}\n\nexport function journeyWorker<Env extends JourneyEnv>(\n  options: JourneyWorkerOptions<Env>\n): JourneyWorker<Env> {\n  const { config } = options;\n  const emailIds = indexTemplates('email', config.templates?.email);\n  // A config still on `emails` (its sender would be silently dropped) fails here, not at a send\n  assertEmailConfig(config, emailIds.values());\n  // Parsed once per env object: the runtime hands the same one to every request of an isolate\n  const checked = new WeakMap<object, Env>();\n  const checkEnv = (env: Env): Env => {\n    if (options.env === undefined) return env;\n    const cached = checked.get(env);\n    if (cached !== undefined) return cached;\n    const result = z.safeParse(options.env, env);\n    if (!result.success) {\n      // Names and reasons only: the values are secrets\n      throw new EnvValidationError(\n        result.error.issues.map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)\n      );\n    }\n    const merged: Env = { ...env, ...result.data };\n    checked.set(env, merged);\n    return merged;\n  };\n  const bundle = () => compileConfig(config);\n  const emails = config.templates?.email;\n  const database = { schema: config.database?.schema ?? DEFAULT_SCHEMA };\n  // In fast-forward, segment windows scale with the journeys reading them (time-scale.ts)\n  const lease = (env: Env): Required<StoreLease> => {\n    const opened = options.store === undefined ? d1Store(env) : options.store(env, database);\n    const noop = async () => {};\n    const factor = runtimeFromConfig(config, env).timeScale;\n    return 'store' in opened\n      ? { store: scaleSegmentWindows(opened.store, factor), close: opened.close ?? noop }\n      : { store: scaleSegmentWindows(opened, factor), close: noop };\n  };\n\n  class Runner extends JourneyRunner {\n    private readonly leases = new WeakMap<JourneyStore, () => Promise<void>>();\n    private current: JourneyStore | undefined;\n\n    protected override createStore(): JourneyStore {\n      // A run fails at its start on an invalid environment, not at the send that needs it\n      const { store, close } = lease(checkEnv(this.env as Env));\n      this.leases.set(store, close);\n      this.current = store;\n      return store;\n    }\n\n    protected override async closeStore(store: JourneyStore): Promise<void> {\n      await this.leases.get(store)?.();\n    }\n\n    protected override contract(): Contract | undefined {\n      return config.contract;\n    }\n\n    protected override createMessageValidator(): MessageValidator {\n      return registryValidator(config.templates ?? {});\n    }\n\n    protected override createMessageSender(): MessageSender {\n      if (this.current === undefined) return super.createMessageSender();\n      if (options.messages !== undefined) {\n        return options.messages(checkEnv(this.env as Env), this.current);\n      }\n      return channelsFromConfig(config, checkEnv(this.env as Env), { store: this.current });\n    }\n\n    protected override createObserver(store: JourneyStore): JourneyObserver | undefined {\n      if (options.observer !== undefined) return options.observer(checkEnv(this.env as Env), store);\n      return store.reporting === undefined\n        ? undefined\n        : reportingObserver(store.reporting, checkEnv(this.env as Env).WORKFLOW_ORIGIN);\n    }\n\n    protected override runtime(params: JourneyParams): JourneyRuntimeOptions {\n      const env = checkEnv(this.env as Env);\n      if (options.runtime !== undefined) return options.runtime(env, params);\n      return runtimeFromConfig(config, env);\n    }\n\n    protected override actions(): readonly RegisteredAction[] {\n      // An action ref is a registered action structurally: the same object carries name, code and hash\n      return config.actions ?? [];\n    }\n  }\n\n  const json = (body: unknown, status = 200): Response =>\n    new Response(JSON.stringify(body), {\n      status,\n      headers: { 'content-type': 'application/json' },\n    });\n\n  const authorized = (request: Request, env: Env): boolean =>\n    env.API_TOKEN === undefined ||\n    request.headers.get('authorization') === `Bearer ${env.API_TOKEN}`;\n\n  const preview = emails === undefined ? undefined : registryRenderer(emails, config.email);\n\n  // The bundle compiled into this version goes live on its own, once per isolate: the first\n  // request or cron run reads which version's bundle is live (one row) and applies this one only\n  // over an older version, so one still serving during a rollout can never put its routes back.\n  // A failure (say the migrations have not run) is logged and retried a minute later. Only the\n  // request that starts the check gets its promise back: a request context cannot wait on\n  // another's I/O.\n  let applying: Promise<void> | undefined;\n  let retryAt = 0;\n  const applyOwnBundle = (env: Env): Promise<void> | undefined => {\n    const metadata = env.CF_VERSION_METADATA;\n    if (metadata === undefined || metadata.id === '') return undefined;\n    const version: BundleVersion = { id: metadata.id, createdAt: Date.parse(metadata.timestamp) };\n    if (Number.isNaN(version.createdAt)) return undefined;\n    if (applying !== undefined || Date.now() < retryAt) return undefined;\n    applying = (async () => {\n      const { store, close } = lease(env);\n      try {\n        if (store.liveBundleVersion === undefined) return; // D1: POST /bundle/deploy\n        const live = await store.liveBundleVersion();\n        if (live !== undefined && (live.id === version.id || live.createdAt >= version.createdAt))\n          return;\n        const result = await deployBundle(env, bundle(), store, version);\n        if (result.applied) console.log(`[workflow] version ${version.id} is live`);\n      } finally {\n        await close();\n      }\n    })().catch((error: unknown) => {\n      applying = undefined;\n      retryAt = Date.now() + 60_000;\n      console.error(`[workflow] could not make version ${version.id} live`, error);\n    });\n    return applying;\n  };\n\n  const fetch = async (request: Request, rawEnv: Env, ctx?: ExecutionContextLike) => {\n    // Everything below reads the validated environment (the schema's defaults applied)\n    let env: Env;\n    try {\n      env = checkEnv(rawEnv);\n    } catch (error) {\n      if (!(error instanceof EnvValidationError)) throw error;\n      console.error(`[workflow] ${error.message}`);\n      return json({ error: error.message }, 500);\n    }\n    const pending = applyOwnBundle(env);\n    // In the background where the runtime has waitUntil; inline otherwise (tests)\n    if (pending !== undefined) {\n      if (ctx === undefined) await pending;\n      else ctx.waitUntil(pending);\n    }\n    const url = new URL(request.url);\n    const { store, close } = lease(env);\n    try {\n      // Opened by recipients, so no bearer: the routes only record, and redirect to recorded URLs\n      if (url.pathname.startsWith('/t/') && store.reporting !== undefined) {\n        const openedEvent = config.webPush?.openedEvent;\n        const tracked = await handleTracking(request, store.reporting, {\n          legacyUnsubscribeUrl: config.email?.unsubscribeUrl,\n          product: config.title,\n          quickMs: config.email?.tracking?.quickClickMs,\n          pushOpened:\n            openedEvent === undefined\n              ? undefined\n              : async ({ messageId, userId, at }) => {\n                  const payload: Record<string, unknown> = { message_id: messageId };\n                  const contract = config.contract;\n                  const verdict =\n                    contract === undefined ? undefined : checkEvent(contract, openedEvent, payload);\n                  if (verdict !== undefined && !verdict.ok) {\n                    throw new ContractValidationError(openedEvent, verdict.issues);\n                  }\n                  // Keyed by the copy: a second tap of the same notification is the same event\n                  await ingestEvent(\n                    env,\n                    {\n                      id: `${openedEvent}:${messageId}`,\n                      userId,\n                      event: openedEvent,\n                      payload: verdict?.data ?? payload,\n                      ts: at,\n                    },\n                    store\n                  );\n                },\n        });\n        if (tracked !== undefined) return tracked;\n      }\n      if (url.pathname === '/segments/sweep') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'POST') return json({ error: 'method not allowed' }, 405);\n        return json(await sweepSegments(env, store));\n      }\n      if (url.pathname === '/bundle') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'GET') return json({ error: 'method not allowed' }, 405);\n        return json(bundle());\n      }\n      if (url.pathname === '/bundle/deploy') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'POST') return json({ error: 'method not allowed' }, 405);\n        try {\n          return json(await deployBundle(env, bundle(), store));\n        } catch (error) {\n          if (!(error instanceof SchemaMismatchError)) throw error;\n          return json({ error: error.message, problems: error.problems }, 503);\n        }\n      }\n      if (emails !== undefined && preview !== undefined && url.pathname.startsWith('/preview/')) {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'GET') return json({ error: 'method not allowed' }, 405);\n        const key = url.pathname.slice('/preview/'.length);\n        if (!emailIds.has(key)) return json({ error: `unknown email template: ${key}` }, 404);\n        // `?props=<JSON object>`: JSON keeps numbers and booleans typed, which query strings cannot\n        let props: unknown = {};\n        try {\n          props = JSON.parse(url.searchParams.get('props') ?? '{}');\n        } catch {\n          return json({ error: 'props must be a JSON object' }, 400);\n        }\n        if (typeof props !== 'object' || props === null || Array.isArray(props)) {\n          return json({ error: 'props must be a JSON object' }, 400);\n        }\n        try {\n          const { subject, html } = await preview(key, props as Record<string, ScalarIR>);\n          return new Response(html, {\n            headers: { 'content-type': 'text/html; charset=utf-8', 'x-subject': subject },\n          });\n        } catch (error) {\n          // The query string is the props: a refusal is the caller's to fix, with the field paths\n          if (error instanceof TemplateValidationError) {\n            return json({ error: error.message, issues: error.issues }, 400);\n          }\n          throw error;\n        }\n      }\n      return await handleRequest(request, env, store, {\n        contract: config.contract,\n        mode: options.contractMode,\n      });\n    } finally {\n      // After the response when the runtime offers waitUntil, inline otherwise (tests).\n      if (ctx === undefined) await close();\n      else ctx.waitUntil(close());\n    }\n  };\n\n  const sweep = async (rawEnv: Env) => {\n    const env = checkEnv(rawEnv);\n    const { store, close } = lease(env);\n    try {\n      return await sweepSegments(env, store);\n    } finally {\n      await close();\n    }\n  };\n\n  const scheduled = async (_controller: unknown, env: Env, ctx: ExecutionContextLike) => {\n    // A version with no traffic yet goes live here; the sweep then reads its segments\n    ctx.waitUntil(\n      (async () => {\n        await applyOwnBundle(checkEnv(env));\n        await sweep(env);\n      })()\n    );\n  };\n\n  return { Runner, fetch, sweep, scheduled };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GA,IAAa,qBAAb,cAAwC,MAAM;CAEvB;CADrB,OAAyB;CACzB,YAAY,QAAoC;EAC9C,MAAM,2CAA2C,OAAO,KAAK,MAAM,GAAG;EADnD,KAAA,SAAA;CAErB;AACF;AAEA,SAAgB,cACd,SACoB;CACpB,MAAM,EAAE,WAAW;CACnB,MAAM,WAAWA,kBAAAA,eAAe,SAAS,OAAO,WAAW,KAAK;CAEhE,cAAA,kBAAkB,QAAQ,SAAS,OAAO,CAAC;CAE3C,MAAM,0BAAU,IAAI,QAAqB;CACzC,MAAM,YAAY,QAAkB;EAClC,IAAI,QAAQ,QAAQ,KAAA,GAAW,OAAO;EACtC,MAAM,SAAS,QAAQ,IAAI,GAAG;EAC9B,IAAI,WAAW,KAAA,GAAW,OAAO;EACjC,MAAM,SAASC,SAAE,UAAU,QAAQ,KAAK,GAAG;EAC3C,IAAI,CAAC,OAAO,SAEV,MAAM,IAAI,mBACR,OAAO,MAAM,OAAO,KAAK,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,SAAS,IAAI,MAAM,SAAS,CAC5F;EAEF,MAAM,SAAc;GAAE,GAAG;GAAK,GAAG,OAAO;EAAK;EAC7C,QAAQ,IAAI,KAAK,MAAM;EACvB,OAAO;CACT;CACA,MAAM,eAAeC,eAAAA,cAAc,MAAM;CACzC,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,WAAW,EAAE,QAAQ,OAAO,UAAU,UAAA,WAAyB;CAErE,MAAM,SAAS,QAAmC;EAChD,MAAM,SAAS,QAAQ,UAAU,KAAA,IAAYC,0BAAAA,QAAQ,GAAG,IAAI,QAAQ,MAAM,KAAK,QAAQ;EACvF,MAAM,OAAO,YAAY,CAAC;EAC1B,MAAM,SAASC,4BAAAA,kBAAkB,QAAQ,GAAG,CAAC,CAAC;EAC9C,OAAO,WAAW,SACd;GAAE,OAAOC,0BAAAA,oBAAoB,OAAO,OAAO,MAAM;GAAG,OAAO,OAAO,SAAS;EAAK,IAChF;GAAE,OAAOA,0BAAAA,oBAAoB,QAAQ,MAAM;GAAG,OAAO;EAAK;CAChE;CAEA,MAAM,eAAeC,0BAAAA,cAAc;EACjC,yBAA0B,IAAI,QAA2C;EACzE;EAEA,cAA+C;GAE7C,MAAM,EAAE,OAAO,UAAU,MAAM,SAAS,KAAK,GAAU,CAAC;GACxD,KAAK,OAAO,IAAI,OAAO,KAAK;GAC5B,KAAK,UAAU;GACf,OAAO;EACT;EAEA,MAAyB,WAAW,OAAoC;GACtE,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG;EACjC;EAEA,WAAoD;GAClD,OAAO,OAAO;EAChB;EAEA,yBAA8D;GAC5D,OAAOC,kBAAAA,kBAAkB,OAAO,aAAa,CAAC,CAAC;EACjD;EAEA,sBAAwD;GACtD,IAAI,KAAK,YAAY,KAAA,GAAW,OAAO,MAAM,oBAAoB;GACjE,IAAI,QAAQ,aAAa,KAAA,GACvB,OAAO,QAAQ,SAAS,SAAS,KAAK,GAAU,GAAG,KAAK,OAAO;GAEjE,OAAOC,4BAAAA,mBAAmB,QAAQ,SAAS,KAAK,GAAU,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC;EACtF;EAEA,eAAkC,OAAkD;GAClF,IAAI,QAAQ,aAAa,KAAA,GAAW,OAAO,QAAQ,SAAS,SAAS,KAAK,GAAU,GAAG,KAAK;GAC5F,OAAO,MAAM,cAAc,KAAA,IACvB,KAAA,IACAC,2BAAAA,kBAAkB,MAAM,WAAW,SAAS,KAAK,GAAU,CAAC,CAAC,eAAe;EAClF;EAEA,QAA2B,QAA8C;GACvE,MAAM,MAAM,SAAS,KAAK,GAAU;GACpC,IAAI,QAAQ,YAAY,KAAA,GAAW,OAAO,QAAQ,QAAQ,KAAK,MAAM;GACrE,OAAOL,4BAAAA,kBAAkB,QAAQ,GAAG;EACtC;EAEA,UAA0D;GAExD,OAAO,OAAO,WAAW,CAAC;EAC5B;CACF;CAEA,MAAM,QAAQ,MAAe,SAAS,QACpC,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACjC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;CAEH,MAAM,cAAc,SAAkB,QACpC,IAAI,cAAc,KAAA,KAClB,QAAQ,QAAQ,IAAI,eAAe,MAAM,UAAU,IAAI;CAEzD,MAAM,UAAU,WAAW,KAAA,IAAY,KAAA,IAAYM,oBAAAA,iBAAiB,QAAQ,OAAO,KAAK;CAQxF,IAAI;CACJ,IAAI,UAAU;CACd,MAAM,kBAAkB,QAAwC;EAC9D,MAAM,WAAW,IAAI;EACrB,IAAI,aAAa,KAAA,KAAa,SAAS,OAAO,IAAI,OAAO,KAAA;EACzD,MAAM,UAAyB;GAAE,IAAI,SAAS;GAAI,WAAW,KAAK,MAAM,SAAS,SAAS;EAAE;EAC5F,IAAI,OAAO,MAAM,QAAQ,SAAS,GAAG,OAAO,KAAA;EAC5C,IAAI,aAAa,KAAA,KAAa,KAAK,IAAI,IAAI,SAAS,OAAO,KAAA;EAC3D,YAAY,YAAY;GACtB,MAAM,EAAE,OAAO,UAAU,MAAM,GAAG;GAClC,IAAI;IACF,IAAI,MAAM,sBAAsB,KAAA,GAAW;IAC3C,MAAM,OAAO,MAAM,MAAM,kBAAkB;IAC3C,IAAI,SAAS,KAAA,MAAc,KAAK,OAAO,QAAQ,MAAM,KAAK,aAAa,QAAQ,YAC7E;IAEF,KAAI,MADiBC,0BAAAA,aAAa,KAAK,OAAO,GAAG,OAAO,OAAO,EAAA,CACpD,SAAS,QAAQ,IAAI,sBAAsB,QAAQ,GAAG,SAAS;GAC5E,UAAU;IACR,MAAM,MAAM;GACd;EACF,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;GAC7B,WAAW,KAAA;GACX,UAAU,KAAK,IAAI,IAAI;GACvB,QAAQ,MAAM,qCAAqC,QAAQ,GAAG,QAAQ,KAAK;EAC7E,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,OAAO,SAAkB,QAAa,QAA+B;EAEjF,IAAI;EACJ,IAAI;GACF,MAAM,SAAS,MAAM;EACvB,SAAS,OAAO;GACd,IAAI,EAAE,iBAAiB,qBAAqB,MAAM;GAClD,QAAQ,MAAM,cAAc,MAAM,SAAS;GAC3C,OAAO,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,GAAG;EAC3C;EACA,MAAM,UAAU,eAAe,GAAG;EAElC,IAAI,YAAY,KAAA,GAAW;GACzB,IAAI,QAAQ,KAAA,GAAW,MAAM;QACxB,IAAI,UAAU,OAAO;EAC5B;EACA,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;EAC/B,MAAM,EAAE,OAAO,UAAU,MAAM,GAAG;EAClC,IAAI;GAEF,IAAI,IAAI,SAAS,WAAW,KAAK,KAAK,MAAM,cAAc,KAAA,GAAW;IACnE,MAAM,cAAc,OAAO,SAAS;IACpC,MAAM,UAAU,MAAMC,2BAAAA,eAAe,SAAS,MAAM,WAAW;KAC7D,sBAAsB,OAAO,OAAO;KACpC,SAAS,OAAO;KAChB,SAAS,OAAO,OAAO,UAAU;KACjC,YACE,gBAAgB,KAAA,IACZ,KAAA,IACA,OAAO,EAAE,WAAW,QAAQ,SAAS;MACnC,MAAM,UAAmC,EAAE,YAAY,UAAU;MACjE,MAAM,WAAW,OAAO;MACxB,MAAM,UACJ,aAAa,KAAA,IAAY,KAAA,IAAYC,iBAAAA,WAAW,UAAU,aAAa,OAAO;MAChF,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,IACpC,MAAM,IAAIC,iBAAAA,wBAAwB,aAAa,QAAQ,MAAM;MAG/D,MAAMC,0BAAAA,YACJ,KACA;OACE,IAAI,GAAG,YAAY,GAAG;OACtB;OACA,OAAO;OACP,SAAS,SAAS,QAAQ;OAC1B,IAAI;MACN,GACA,KACF;KACF;IACR,CAAC;IACD,IAAI,YAAY,KAAA,GAAW,OAAO;GACpC;GACA,IAAI,IAAI,aAAa,mBAAmB;IACtC,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC/E,OAAO,KAAK,MAAMC,0BAAAA,cAAc,KAAK,KAAK,CAAC;GAC7C;GACA,IAAI,IAAI,aAAa,WAAW;IAC9B,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,OAAO,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC9E,OAAO,KAAK,OAAO,CAAC;GACtB;GACA,IAAI,IAAI,aAAa,kBAAkB;IACrC,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC/E,IAAI;KACF,OAAO,KAAK,MAAML,0BAAAA,aAAa,KAAK,OAAO,GAAG,KAAK,CAAC;IACtD,SAAS,OAAO;KACd,IAAI,EAAE,iBAAiBM,oBAAAA,sBAAsB,MAAM;KACnD,OAAO,KAAK;MAAE,OAAO,MAAM;MAAS,UAAU,MAAM;KAAS,GAAG,GAAG;IACrE;GACF;GACA,IAAI,WAAW,KAAA,KAAa,YAAY,KAAA,KAAa,IAAI,SAAS,WAAW,WAAW,GAAG;IACzF,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,OAAO,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC9E,MAAM,MAAM,IAAI,SAAS,MAAM,CAAkB;IACjD,IAAI,CAAC,SAAS,IAAI,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,2BAA2B,MAAM,GAAG,GAAG;IAEpF,IAAI,QAAiB,CAAC;IACtB,IAAI;KACF,QAAQ,KAAK,MAAM,IAAI,aAAa,IAAI,OAAO,KAAK,IAAI;IAC1D,QAAQ;KACN,OAAO,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;IAC3D;IACA,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,OAAO,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;IAE3D,IAAI;KACF,MAAM,EAAE,SAAS,SAAS,MAAM,QAAQ,KAAK,KAAiC;KAC9E,OAAO,IAAI,SAAS,MAAM,EACxB,SAAS;MAAE,gBAAgB;MAA4B,aAAa;KAAQ,EAC9E,CAAC;IACH,SAAS,OAAO;KAEd,IAAI,iBAAiBC,kBAAAA,yBACnB,OAAO,KAAK;MAAE,OAAO,MAAM;MAAS,QAAQ,MAAM;KAAO,GAAG,GAAG;KAEjE,MAAM;IACR;GACF;GACA,OAAO,MAAMC,0BAAAA,cAAc,SAAS,KAAK,OAAO;IAC9C,UAAU,OAAO;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,UAAU;GAER,IAAI,QAAQ,KAAA,GAAW,MAAM,MAAM;QAC9B,IAAI,UAAU,MAAM,CAAC;EAC5B;CACF;CAEA,MAAM,QAAQ,OAAO,WAAgB;EACnC,MAAM,MAAM,SAAS,MAAM;EAC3B,MAAM,EAAE,OAAO,UAAU,MAAM,GAAG;EAClC,IAAI;GACF,OAAO,MAAMH,0BAAAA,cAAc,KAAK,KAAK;EACvC,UAAU;GACR,MAAM,MAAM;EACd;CACF;CAEA,MAAM,YAAY,OAAO,aAAsB,KAAU,QAA8B;EAErF,IAAI,WACD,YAAY;GACX,MAAM,eAAe,SAAS,GAAG,CAAC;GAClC,MAAM,MAAM,GAAG;EACjB,EAAA,CAAG,CACL;CACF;CAEA,OAAO;EAAE;EAAQ;EAAO;EAAO;CAAU;AAC3C"}
+{"version":3,"file":"worker.cjs","names":["createJourneyHost","JourneyRunner","EnvValidationError"],"sources":["../../src/cloudflare/worker.ts"],"sourcesContent":["import type { JourneyRunParts } from '../host/execute';\nimport {\n  EnvValidationError,\n  type JourneyHostOptions,\n  createJourneyHost,\n} from '../host/journey-host';\nimport type { SweepResult } from '../host/router';\nimport type { BundleVersion, JourneyStore } from '../store/index';\nimport type { JourneyEnv, JourneyParams } from './bindings';\nimport { JourneyRunner } from './runner';\n\nexport { EnvValidationError } from '../host/journey-host';\n\n/** The fetch handler's execution context (the subset used). */\nexport interface ExecutionContextLike {\n  waitUntil(promise: Promise<unknown>): void;\n}\n\n/**\n * `journeyWorker`'s options: the host's (config, store, email transport, observer, ...). The\n * email transport is the host's choice — `cloudflareEmailTransport({ binding: env.EMAIL })` for\n * Cloudflare Email, `sesEmailTransport(...)` for SES.\n */\nexport type JourneyWorkerOptions<Env extends JourneyEnv> = JourneyHostOptions<Env>;\n\nexport interface JourneyWorker<Env extends JourneyEnv> {\n  /** Export this under the `class_name` of the wrangler `workflows` binding. */\n  Runner: new (...args: never[]) => JourneyRunner;\n  /** The Worker's fetch handler: `/health`, `/events`, `/identify`, `/devices`, `/messages/opened`, `/segments/sweep`, `/t/*` (email tracking), `/deploy`, `/bundle`, `/bundle/deploy` and `/preview/*`. */\n  fetch: (request: Request, env: Env, ctx?: ExecutionContextLike) => Promise<Response>;\n  /**\n   * The segment sweep (`sweepSegments`): membership of every deployed segment for every known\n   * user, the journeys of segments entered by the clock alone (`not(performed(e.login, { within:\n   * '7 days' }))` has no event to ride on), and each segment's size. Also served as\n   * `POST /segments/sweep`.\n   */\n  sweep: (env: Env) => Promise<SweepResult>;\n  /** The cron trigger's handler: runs the sweep. Export it beside `fetch` with a `triggers.crons` entry. */\n  scheduled: (controller: unknown, env: Env, ctx: ExecutionContextLike) => Promise<void>;\n}\n\n/**\n * A complete journey host in one call: the runner class with the app's store,\n * outlets and runtime plugged in, and the fetch handler that serves the ingest\n * API around them.\n *\n *   const journeys = journeyWorker<Env>({\n *     config,   // workflow.config.ts (defineConfig)\n *     store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database),\n *   });\n *   export const MyRunner = journeys.Runner;\n *   export default { fetch: journeys.fetch };\n */\nexport function journeyWorker<Env extends JourneyEnv>(\n  options: JourneyWorkerOptions<Env>\n): JourneyWorker<Env> {\n  const host = createJourneyHost(options);\n\n  class Runner extends JourneyRunner {\n    private readonly leases = new WeakMap<JourneyStore, () => Promise<void>>();\n\n    protected override createStore(): JourneyStore {\n      // A run fails at its start on an invalid environment, not at the send that needs it\n      const { store, close } = host.lease(host.checkEnv(this.env as Env));\n      this.leases.set(store, close);\n      return store;\n    }\n\n    protected override async closeStore(store: JourneyStore): Promise<void> {\n      await this.leases.get(store)?.();\n    }\n\n    protected override createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n      return host.runParts(host.checkEnv(this.env as Env), store, params);\n    }\n  }\n\n  /** CF's version metadata: the bundle compiled into each new version goes live by itself. */\n  const ownVersion = (env: Env): BundleVersion | undefined => {\n    const metadata = env.CF_VERSION_METADATA;\n    if (metadata === undefined) return undefined;\n    return { id: metadata.id, createdAt: Date.parse(metadata.timestamp) };\n  };\n\n  const fetch = async (request: Request, rawEnv: Env, ctx?: ExecutionContextLike) => {\n    // Everything below reads the validated environment (the schema's defaults applied)\n    let env: Env;\n    try {\n      env = host.checkEnv(rawEnv);\n    } catch (error) {\n      if (!(error instanceof EnvValidationError)) throw error;\n      console.error(`[workflow] ${error.message}`);\n      return new Response(JSON.stringify({ error: error.message }), {\n        status: 500,\n        headers: { 'content-type': 'application/json' },\n      });\n    }\n    const pending = host.applyOwnBundle(env, ownVersion(env));\n    // In the background where the runtime has waitUntil; inline otherwise (tests)\n    if (pending !== undefined) {\n      if (ctx === undefined) await pending;\n      else ctx.waitUntil(pending);\n    }\n    const { store, close } = host.lease(env);\n    try {\n      return await host.handle(request, env, store);\n    } finally {\n      // After the response when the runtime offers waitUntil, inline otherwise (tests).\n      if (ctx === undefined) await close();\n      else ctx.waitUntil(close());\n    }\n  };\n\n  const sweep = (rawEnv: Env) => host.sweep(host.checkEnv(rawEnv));\n\n  const scheduled = async (_controller: unknown, env: Env, ctx: ExecutionContextLike) => {\n    // A version with no traffic yet goes live here; the sweep then reads its segments\n    ctx.waitUntil(\n      (async () => {\n        const checked = host.checkEnv(env);\n        await host.applyOwnBundle(checked, ownVersion(checked));\n        await sweep(env);\n      })()\n    );\n  };\n\n  return { Runner, fetch, sweep, scheduled };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqDA,SAAgB,cACd,SACoB;CACpB,MAAM,OAAOA,0BAAAA,kBAAkB,OAAO;CAEtC,MAAM,eAAeC,0BAAAA,cAAc;EACjC,yBAA0B,IAAI,QAA2C;EAEzE,cAA+C;GAE7C,MAAM,EAAE,OAAO,UAAU,KAAK,MAAM,KAAK,SAAS,KAAK,GAAU,CAAC;GAClE,KAAK,OAAO,IAAI,OAAO,KAAK;GAC5B,OAAO;EACT;EAEA,MAAyB,WAAW,OAAoC;GACtE,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG;EACjC;EAEA,eAAkC,OAAqB,QAAwC;GAC7F,OAAO,KAAK,SAAS,KAAK,SAAS,KAAK,GAAU,GAAG,OAAO,MAAM;EACpE;CACF;;CAGA,MAAM,cAAc,QAAwC;EAC1D,MAAM,WAAW,IAAI;EACrB,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;EACnC,OAAO;GAAE,IAAI,SAAS;GAAI,WAAW,KAAK,MAAM,SAAS,SAAS;EAAE;CACtE;CAEA,MAAM,QAAQ,OAAO,SAAkB,QAAa,QAA+B;EAEjF,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,SAAS,MAAM;EAC5B,SAAS,OAAO;GACd,IAAI,EAAE,iBAAiBC,0BAAAA,qBAAqB,MAAM;GAClD,QAAQ,MAAM,cAAc,MAAM,SAAS;GAC3C,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,MAAM,QAAQ,CAAC,GAAG;IAC5D,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;GAChD,CAAC;EACH;EACA,MAAM,UAAU,KAAK,eAAe,KAAK,WAAW,GAAG,CAAC;EAExD,IAAI,YAAY,KAAA,GAAW;GACzB,IAAI,QAAQ,KAAA,GAAW,MAAM;QACxB,IAAI,UAAU,OAAO;EAC5B;EACA,MAAM,EAAE,OAAO,UAAU,KAAK,MAAM,GAAG;EACvC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO,SAAS,KAAK,KAAK;EAC9C,UAAU;GAER,IAAI,QAAQ,KAAA,GAAW,MAAM,MAAM;QAC9B,IAAI,UAAU,MAAM,CAAC;EAC5B;CACF;CAEA,MAAM,SAAS,WAAgB,KAAK,MAAM,KAAK,SAAS,MAAM,CAAC;CAE/D,MAAM,YAAY,OAAO,aAAsB,KAAU,QAA8B;EAErF,IAAI,WACD,YAAY;GACX,MAAM,UAAU,KAAK,SAAS,GAAG;GACjC,MAAM,KAAK,eAAe,SAAS,WAAW,OAAO,CAAC;GACtD,MAAM,MAAM,GAAG;EACjB,EAAA,CAAG,CACL;CACF;CAEA,OAAO;EAAE;EAAQ;EAAO;EAAO;CAAU;AAC3C"}