@shware/workflow 3.2.0 → 4.0.0

package/dist/cloudflare/bindings.d.mts

@@ -1,5 +1,5 @@
 import { EmailAddress } from "../email.mjs";
-import { ExecutionStart } from "../store/index.mjs";
+import { WorkflowBindingLike } from "../host/platform.mjs";
 //#region src/cloudflare/bindings.d.ts
 /**
  * A minimal structural interface over the Cloudflare bindings.
@@ -9,10 +9,6 @@ import { ExecutionStart } from "../store/index.mjs";
  * subset plus the ambient cloudflare:workers declaration is enough to compile,
  * and the real bindings satisfy it structurally at runtime.
  */
-export interface KVNamespaceLike {
-  get(key: string): Promise<string | null>;
-  put(key: string, value: string): Promise<void>;
-}
 /** Structural subset of D1Result: `meta.changes` is how INSERT OR IGNORE reports whether it inserted. */
 export interface D1RunResultLike {
   meta?: {
@@ -32,53 +28,6 @@ export interface D1DatabaseLike {
   /** Statements run in order inside one transaction (real D1 semantics) — deploy relies on the atomicity. */
   batch(statements: D1PreparedStatementLike[]): Promise<unknown>;
 }
-export interface WorkflowInstanceLike {
-  id: string;
-  sendEvent(event: {
-    type: string;
-    payload?: unknown;
-  }): Promise<void>;
-  /** Stop the instance for good (Cloudflare Workflows' `terminate`). */
-  terminate?(): Promise<void>;
-  /** Where it stands (`complete`, `errored`, `terminated`, `running`, …). */
-  status?(): Promise<{
-    status: string;
-  }>;
-}
-/**
- * How the router starts, wakes and stops instances: Cloudflare's workflow binding, or the AWS
- * adapter's equivalent over durable executions.
- */
-export interface WorkflowBindingLike {
-  create(options: {
-    id: string;
-    params: unknown;
-  }): Promise<WorkflowInstanceLike>;
-  get(id: string): Promise<WorkflowInstanceLike>;
-  /**
-   * For a runtime whose start is a submit that can be lost in flight (AWS): the start to record
-   * with the entry, in one transaction. A failed `create` then keeps the entry — its recorded
-   * start is retried by the next ingest for the pair (`resume`) or by maintenance, never rolled
-   * back and re-entered as a second execution.
-   */
-  plan?(options: {
-    id: string;
-    params: JourneyParams;
-    ts: number;
-    /** The code version whose routes named `params.contentHash` (absent after a forced deploy). */
-    version?: string | undefined;
-  }): Promise<ExecutionStart>;
-  /** Retry the recorded, unconfirmed start of the (workflow, user) entry still running, if any. */
-  resume?(entry: {
-    workflow: string;
-    userId: string;
-  }): Promise<void>;
-  /**
-   * Maintenance the sweep runs first: old unconfirmed starts retried (or given up on), and
-   * executions the platform ended on its own (timeout, stop, crash) reconciled into the ledger.
-   */
-  maintain?(): Promise<void>;
-}
 /**
  * Cloudflare Email Service's send_email binding (structural subset).
  *
@@ -96,84 +45,20 @@ export interface EmailBindingLike {
     replyTo?: EmailAddress;
     subject: string;
     html: string;
+    /** List-Unsubscribe and List-Unsubscribe-Post, when the email has an unsubscribe link. */
+    headers?: Readonly<Record<string, string>>;
     /** `${instanceId}:${nodeId}`: stable across replays and retries — drop a send whose key was already delivered. */
     idempotencyKey: string;
   }): Promise<unknown>;
 }
-/** Every binding the journey engine needs (names match the wrangler config). */
-export interface JourneyEnv {
-  /**
-   * BundleIR storage for the default D1 store (`wf:${contentHash}` → WorkflowIR JSON). Optional:
-   * a Worker on another JourneyStore (Postgres, say) does not declare it.
-   */
-  WORKFLOW_KV?: KVNamespaceLike;
-  /** Tables of the default D1 store (events / profiles / segments / triggers / entries / subscriptions). Optional, as above. */
-  DB?: D1DatabaseLike;
-  /** JourneyRunner's workflow binding (creating instances and waking them). */
-  JOURNEY: WorkflowBindingLike;
-  /** Optional message-delivery webhook (defaults to the console logging sender). */
-  MESSAGE_WEBHOOK_URL?: string;
-  /**
-   * Bearer token required on every mutating HTTP endpoint (`Authorization:
-   * Bearer <token>`). Unset = open — acceptable only for local dev; /deploy in
-   * particular rewrites the whole routing table, so production must set this.
-   */
-  API_TOKEN?: string;
-  /**
-   * This Worker's public origin. With a store that keeps reporting (Postgres), journey emails'
-   * links and open pixel point at its `/t/...` routes; without it emails go out untracked.
-   */
-  WORKFLOW_ORIGIN?: string;
-  /** Which `workflow.config.ts` entry applies (`development`, `production`, …); production when unset. */
-  ENVIRONMENT?: string;
-  /** Cloudflare Email Sending, when the config has `emails`. */
-  EMAIL?: EmailBindingLike;
-  /** The APNs auth key (`.p8`, base64) named by the config's `apns.keyId`. */
-  APNS_PRIVATE_KEY_BASE64?: string;
-  /** The Firebase service account (base64 JSON) the config's `fcm` sends with. */
-  GOOGLE_APPLICATION_CREDENTIALS_BASE64?: string;
-  /** The VAPID key pair web pushes are signed with (`generateVapidKeys`); the config's `webPush` turns the channel on. */
-  VAPID_PUBLIC_KEY?: string;
-  VAPID_PRIVATE_KEY?: string;
-  /**
-   * Cloudflare's version metadata binding (wrangler `"version_metadata": { "binding":
-   * "CF_VERSION_METADATA" }`). With it, and a store that records the live version (Postgres),
-   * journeyWorker makes the bundle compiled into each new version live by itself: `wrangler
-   * deploy` is the whole deploy.
-   */
-  CF_VERSION_METADATA?: {
-    id: string;
-    tag?: string;
-    timestamp: string;
-  };
-  /** Development only: the HTTP/2 relay `wrangler dev` sends APNs requests through (see `@shware/workflow/apns-relay`). */
-  APNS_RELAY_ORIGIN?: string;
-}
-/** The runtime does not know the instance: the only failure that lets the router drop its wakes. */
-export declare class InstanceNotFoundError extends Error {
-  readonly instanceId: string;
-  readonly name = "InstanceNotFoundError";
-  constructor(instanceId: string);
-}
+/** Cloudflare's Workflow binding, as far as the host uses it. */
+export type CfWorkflowBinding = Pick<WorkflowBindingLike, 'create' | 'get'>;
 /**
- * Does this lookup failure say the instance is gone, rather than that the lookup failed?
- * Cloudflare reports an unknown id as `instance.not_found`.
+ * The Workflow binding as the host's runtime port: `get` answers an unknown id with
+ * `InstanceNotFoundError`, as the port promises, instead of Cloudflare's own error. Everything
+ * else is forwarded as is.
  */
-export declare function isInstanceNotFound(error: unknown): boolean;
-/** The event type the router uses to wake waiting instances (sendEvent's `type`). */
-export declare const WAKE_EVENT_TYPE = "wake";
-/** Journey instance parameters, passed by the ingest router when it creates one. */
-export interface JourneyParams {
-  workflowId: string;
-  /** The IR version pinned at entry. */
-  contentHash: string;
-  userId: string;
-  trigger: {
-    event: string;
-    payload: Record<string, unknown>;
-  };
-  [key: string]: unknown;
-}
+export declare function cloudflareJourneyBinding(binding: CfWorkflowBinding): WorkflowBindingLike;
 /**
  * Slack on the deadline when deciding whether a thrown wait was a timeout: the
  * platform may surface the expiry a moment early, and a wait shorter than this
@@ -184,11 +69,14 @@ export declare const WAKE_TIMEOUT_TOLERANCE_MS = 5000;
  * Did a wait that threw actually reach its deadline?
  *
  * CF signals a wait timeout by throwing, and so does every other failure in
- * there — a broken binding, an evicted instance, a malformed timeout. The
- * adapter used to read them all as timeouts, which made an infrastructure
- * fault indistinguishable from "the user never did it": the journey took its
- * onTimeout branch, early and silently. Only the clock can tell them apart.
+ * there — a broken binding, an evicted instance, a malformed timeout. Reading
+ * them all as timeouts would make an infrastructure fault indistinguishable
+ * from "the user never did it" (the journey would take its onTimeout branch,
+ * early and silently). Only the clock can tell them apart, and only against
+ * the absolute deadline: measured from when the wait was parked, a replay
+ * after an eviction would start the measure over and read a
+ * genuine expiry as a failure.
  */
-export declare function wakeExpired(startedAt: number, timeoutMs: number, now: number): boolean;
+export declare function wakeExpired(deadlineMs: number, now: number): boolean;
 //#endregion
 //# sourceMappingURL=bindings.d.mts.map

package/dist/cloudflare/bindings.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.d.mts","names":[],"sources":["../../src/cloudflare/bindings.ts"],"mappings":";;;;;;;;;;;iBAYiB;EACf,IAAI,cAAc;EAClB,IAAI,aAAa,gBAAgB;;;iBAIlB;EACf;IAAS;;;iBAGM;EACf,QAAQ,oBAAoB;EAC5B,MAAM,IAAI,4BAA4B,QAAQ;EAC9C,IAAI,IAAI,4BAA4B;IAAU,SAAS;;EACvD,OAAO,QAAQ;;iBAGA;EACf,QAAQ,cAAc;;EAEtB,MAAM,YAAY,4BAA4B;;iBAG/B;EACf;EACA,UAAU;IAAS;IAAc;MAAsB;;EAEvD,cAAc;;EAEd,WAAW;IAAU;;;;;;;iBAON;EACf,OAAO;IAAW;IAAY;MAAoB,QAAQ;EAC1D,IAAI,aAAa,QAAQ;;;;;;;EAOzB,MAAM;IACJ;IACA,QAAQ;IACR;;IAEA;MACE,QAAQ;;EAEZ,QAAQ;IAAS;IAAkB;MAAmB;;;;;EAKtD,aAAa;;;;;;;;;;;;iBAaE;EACf,KAAK;IACH,MAAM;IACN,IAAI;IACJ,UAAU;IACV;IACA;;IAEA;MACE;;;iBAIW;;;;;EAKf,cAAc;;EAEd,KAAK;;EAEL,SAAS;;EAET;;;;;;EAMA;;;;;EAKA;;EAEA;;EAEA,QAAQ;;EAER;;EAEA;;EAEA;EACA;;;;;;;EAOA;IAAwB;IAAY;IAAc;;;EAElD;;;qBAIW,8BAA8B;WAEpB;WADH;EAClB,YAAqB;;;;;;wBASP,mBAAmB;;qBAMtB;;iBAGI;EACf;;EAEA;EACA;EACA;IAAW;IAAe,SAAS;;GAClC;;;;;;;qBAQU;;;;;;;;;;wBAWG,YAAY,mBAAmB,mBAAmB"}
+{"version":3,"file":"bindings.d.mts","names":[],"sources":["../../src/cloudflare/bindings.ts"],"mappings":";;;;;;;;;;;;iBAaiB;EACf;IAAS;;;iBAGM;EACf,QAAQ,oBAAoB;EAC5B,MAAM,IAAI,4BAA4B,QAAQ;EAC9C,IAAI,IAAI,4BAA4B;IAAU,SAAS;;EACvD,OAAO,QAAQ;;iBAGA;EACf,QAAQ,cAAc;;EAEtB,MAAM,YAAY,4BAA4B;;;;;;;;;;;;iBAa/B;EACf,KAAK;IACH,MAAM;IACN,IAAI;IACJ,UAAU;IACV;IACA;;IAEA,UAAU,SAAS;;IAEnB;MACE;;;YAIM,oBAAoB,KAAK;;;;;;wBAUrB,yBAAyB,SAAS,oBAAoB;;;;;;qBAqBzD;;;;;;;;;;;;;wBAcG,YAAY,oBAAoB"}

package/dist/cloudflare/bindings.mjs

@@ -1,23 +1,25 @@
+import { InstanceNotFoundError } from "../host/platform.mjs";
 //#region src/cloudflare/bindings.ts
-/** The runtime does not know the instance: the only failure that lets the router drop its wakes. */
-var InstanceNotFoundError = class extends Error {
-	instanceId;
-	name = "InstanceNotFoundError";
-	constructor(instanceId) {
-		super(`no such instance: ${instanceId}`);
-		this.instanceId = instanceId;
-	}
-};
+/** How Cloudflare's `get` reports an unknown instance id. */
+const CF_NOT_FOUND = "instance.not_found";
 /**
-* Does this lookup failure say the instance is gone, rather than that the lookup failed?
-* Cloudflare reports an unknown id as `instance.not_found`.
+* The Workflow binding as the host's runtime port: `get` answers an unknown id with
+* `InstanceNotFoundError`, as the port promises, instead of Cloudflare's own error. Everything
+* else is forwarded as is.
 */
-function isInstanceNotFound(error) {
-	if (error instanceof InstanceNotFoundError) return true;
-	return /not[_ ]found|no such instance/i.test(String(error));
+function cloudflareJourneyBinding(binding) {
+	return {
+		create: (options) => binding.create(options),
+		async get(id) {
+			try {
+				return await binding.get(id);
+			} catch (error) {
+				if (String(error).includes(CF_NOT_FOUND)) throw new InstanceNotFoundError(id, { cause: error });
+				throw error;
+			}
+		}
+	};
 }
-/** The event type the router uses to wake waiting instances (sendEvent's `type`). */
-const WAKE_EVENT_TYPE = "wake";
 /**
 * Slack on the deadline when deciding whether a thrown wait was a timeout: the
 * platform may surface the expiry a moment early, and a wait shorter than this
@@ -28,15 +30,18 @@ const WAKE_TIMEOUT_TOLERANCE_MS = 5e3;
 * Did a wait that threw actually reach its deadline?
 *
 * CF signals a wait timeout by throwing, and so does every other failure in
-* there — a broken binding, an evicted instance, a malformed timeout. The
-* adapter used to read them all as timeouts, which made an infrastructure
-* fault indistinguishable from "the user never did it": the journey took its
-* onTimeout branch, early and silently. Only the clock can tell them apart.
+* there — a broken binding, an evicted instance, a malformed timeout. Reading
+* them all as timeouts would make an infrastructure fault indistinguishable
+* from "the user never did it" (the journey would take its onTimeout branch,
+* early and silently). Only the clock can tell them apart, and only against
+* the absolute deadline: measured from when the wait was parked, a replay
+* after an eviction would start the measure over and read a
+* genuine expiry as a failure.
 */
-function wakeExpired(startedAt, timeoutMs, now) {
-	return now - startedAt >= Math.max(0, timeoutMs - WAKE_TIMEOUT_TOLERANCE_MS);
+function wakeExpired(deadlineMs, now) {
+	return now >= deadlineMs - WAKE_TIMEOUT_TOLERANCE_MS;
 }
 //#endregion
-export { InstanceNotFoundError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, isInstanceNotFound, wakeExpired };
+export { WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired };
 
 //# sourceMappingURL=bindings.mjs.map

package/dist/cloudflare/bindings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.mjs","names":[],"sources":["../../src/cloudflare/bindings.ts"],"sourcesContent":["import type { EmailAddress } from '../email';\nimport type { ExecutionStart } from '../store/index';\n\n/**\n * A minimal structural interface over the Cloudflare bindings.\n *\n * @cloudflare/workers-types is deliberately not used: the global types it\n * injects clash with the DOM lib this package's react side needs. A structural\n * subset plus the ambient cloudflare:workers declaration is enough to compile,\n * and the real bindings satisfy it structurally at runtime.\n */\n\nexport interface KVNamespaceLike {\n  get(key: string): Promise<string | null>;\n  put(key: string, value: string): Promise<void>;\n}\n\n/** Structural subset of D1Result: `meta.changes` is how INSERT OR IGNORE reports whether it inserted. */\nexport interface D1RunResultLike {\n  meta?: { changes?: number };\n}\n\nexport interface D1PreparedStatementLike {\n  bind(...values: unknown[]): D1PreparedStatementLike;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  run(): Promise<D1RunResultLike>;\n}\n\nexport interface D1DatabaseLike {\n  prepare(sql: string): D1PreparedStatementLike;\n  /** Statements run in order inside one transaction (real D1 semantics) — deploy relies on the atomicity. */\n  batch(statements: D1PreparedStatementLike[]): Promise<unknown>;\n}\n\nexport interface WorkflowInstanceLike {\n  id: string;\n  sendEvent(event: { type: string; payload?: unknown }): Promise<void>;\n  /** Stop the instance for good (Cloudflare Workflows' `terminate`). */\n  terminate?(): Promise<void>;\n  /** Where it stands (`complete`, `errored`, `terminated`, `running`, …). */\n  status?(): Promise<{ status: string }>;\n}\n\n/**\n * How the router starts, wakes and stops instances: Cloudflare's workflow binding, or the AWS\n * adapter's equivalent over durable executions.\n */\nexport interface WorkflowBindingLike {\n  create(options: { id: string; params: unknown }): Promise<WorkflowInstanceLike>;\n  get(id: string): Promise<WorkflowInstanceLike>;\n  /**\n   * For a runtime whose start is a submit that can be lost in flight (AWS): the start to record\n   * with the entry, in one transaction. A failed `create` then keeps the entry — its recorded\n   * start is retried by the next ingest for the pair (`resume`) or by maintenance, never rolled\n   * back and re-entered as a second execution.\n   */\n  plan?(options: {\n    id: string;\n    params: JourneyParams;\n    ts: number;\n    /** The code version whose routes named `params.contentHash` (absent after a forced deploy). */\n    version?: string | undefined;\n  }): Promise<ExecutionStart>;\n  /** Retry the recorded, unconfirmed start of the (workflow, user) entry still running, if any. */\n  resume?(entry: { workflow: string; userId: string }): Promise<void>;\n  /**\n   * Maintenance the sweep runs first: old unconfirmed starts retried (or given up on), and\n   * executions the platform ended on its own (timeout, stop, crash) reconciled into the ledger.\n   */\n  maintain?(): Promise<void>;\n}\n\n/**\n * Cloudflare Email Service's send_email binding (structural subset).\n *\n * `idempotencyKey` is part of the call because the send happens inside a\n * `step.do`: a step body re-runs after its fn resolved but before the\n * checkpoint committed, so a binding that drops the key mails the user twice.\n * The binding is app-supplied glue (nothing here can de-duplicate — there is\n * no state between two runs of the same step), which is why the port makes the\n * key impossible to miss rather than merely available.\n */\nexport interface EmailBindingLike {\n  send(message: {\n    from: EmailAddress;\n    to: EmailAddress;\n    replyTo?: EmailAddress;\n    subject: string;\n    html: string;\n    /** `${instanceId}:${nodeId}`: stable across replays and retries — drop a send whose key was already delivered. */\n    idempotencyKey: string;\n  }): Promise<unknown>;\n}\n\n/** Every binding the journey engine needs (names match the wrangler config). */\nexport interface JourneyEnv {\n  /**\n   * BundleIR storage for the default D1 store (`wf:${contentHash}` → WorkflowIR JSON). Optional:\n   * a Worker on another JourneyStore (Postgres, say) does not declare it.\n   */\n  WORKFLOW_KV?: KVNamespaceLike;\n  /** Tables of the default D1 store (events / profiles / segments / triggers / entries / subscriptions). Optional, as above. */\n  DB?: D1DatabaseLike;\n  /** JourneyRunner's workflow binding (creating instances and waking them). */\n  JOURNEY: WorkflowBindingLike;\n  /** Optional message-delivery webhook (defaults to the console logging sender). */\n  MESSAGE_WEBHOOK_URL?: string;\n  /**\n   * Bearer token required on every mutating HTTP endpoint (`Authorization:\n   * Bearer <token>`). Unset = open — acceptable only for local dev; /deploy in\n   * particular rewrites the whole routing table, so production must set this.\n   */\n  API_TOKEN?: string;\n  /**\n   * This Worker's public origin. With a store that keeps reporting (Postgres), journey emails'\n   * links and open pixel point at its `/t/...` routes; without it emails go out untracked.\n   */\n  WORKFLOW_ORIGIN?: string;\n  /** Which `workflow.config.ts` entry applies (`development`, `production`, …); production when unset. */\n  ENVIRONMENT?: string;\n  /** Cloudflare Email Sending, when the config has `emails`. */\n  EMAIL?: EmailBindingLike;\n  /** The APNs auth key (`.p8`, base64) named by the config's `apns.keyId`. */\n  APNS_PRIVATE_KEY_BASE64?: string;\n  /** The Firebase service account (base64 JSON) the config's `fcm` sends with. */\n  GOOGLE_APPLICATION_CREDENTIALS_BASE64?: string;\n  /** The VAPID key pair web pushes are signed with (`generateVapidKeys`); the config's `webPush` turns the channel on. */\n  VAPID_PUBLIC_KEY?: string;\n  VAPID_PRIVATE_KEY?: string;\n  /**\n   * Cloudflare's version metadata binding (wrangler `\"version_metadata\": { \"binding\":\n   * \"CF_VERSION_METADATA\" }`). With it, and a store that records the live version (Postgres),\n   * journeyWorker makes the bundle compiled into each new version live by itself: `wrangler\n   * deploy` is the whole deploy.\n   */\n  CF_VERSION_METADATA?: { id: string; tag?: string; timestamp: string };\n  /** Development only: the HTTP/2 relay `wrangler dev` sends APNs requests through (see `@shware/workflow/apns-relay`). */\n  APNS_RELAY_ORIGIN?: string;\n}\n\n/** The runtime does not know the instance: the only failure that lets the router drop its wakes. */\nexport class InstanceNotFoundError extends Error {\n  override readonly name = 'InstanceNotFoundError';\n  constructor(readonly instanceId: string) {\n    super(`no such instance: ${instanceId}`);\n  }\n}\n\n/**\n * Does this lookup failure say the instance is gone, rather than that the lookup failed?\n * Cloudflare reports an unknown id as `instance.not_found`.\n */\nexport function isInstanceNotFound(error: unknown): boolean {\n  if (error instanceof InstanceNotFoundError) return true;\n  return /not[_ ]found|no such instance/i.test(String(error));\n}\n\n/** The event type the router uses to wake waiting instances (sendEvent's `type`). */\nexport const WAKE_EVENT_TYPE = 'wake';\n\n/** Journey instance parameters, passed by the ingest router when it creates one. */\nexport interface JourneyParams {\n  workflowId: string;\n  /** The IR version pinned at entry. */\n  contentHash: string;\n  userId: string;\n  trigger: { event: string; payload: Record<string, unknown> };\n  [key: string]: unknown;\n}\n\n/**\n * Slack on the deadline when deciding whether a thrown wait was a timeout: the\n * platform may surface the expiry a moment early, and a wait shorter than this\n * has no room to tell the two apart anyway.\n */\nexport const WAKE_TIMEOUT_TOLERANCE_MS = 5_000;\n\n/**\n * Did a wait that threw actually reach its deadline?\n *\n * CF signals a wait timeout by throwing, and so does every other failure in\n * there — a broken binding, an evicted instance, a malformed timeout. The\n * adapter used to read them all as timeouts, which made an infrastructure\n * fault indistinguishable from \"the user never did it\": the journey took its\n * onTimeout branch, early and silently. Only the clock can tell them apart.\n */\nexport function wakeExpired(startedAt: number, timeoutMs: number, now: number): boolean {\n  return now - startedAt >= Math.max(0, timeoutMs - WAKE_TIMEOUT_TOLERANCE_MS);\n}\n"],"mappings":";;AA8IA,IAAa,wBAAb,cAA2C,MAAM;CAE1B;CADrB,OAAyB;CACzB,YAAY,YAA6B;EACvC,MAAM,qBAAqB,YAAY;EADpB,KAAA,aAAA;CAErB;AACF;;;;;AAMA,SAAgB,mBAAmB,OAAyB;CAC1D,IAAI,iBAAiB,uBAAuB,OAAO;CACnD,OAAO,iCAAiC,KAAK,OAAO,KAAK,CAAC;AAC5D;;AAGA,MAAa,kBAAkB;;;;;;AAiB/B,MAAa,4BAA4B;;;;;;;;;;AAWzC,SAAgB,YAAY,WAAmB,WAAmB,KAAsB;CACtF,OAAO,MAAM,aAAa,KAAK,IAAI,GAAG,YAAY,yBAAyB;AAC7E"}
+{"version":3,"file":"bindings.mjs","names":[],"sources":["../../src/cloudflare/bindings.ts"],"sourcesContent":["import type { EmailAddress } from '../email';\nimport { InstanceNotFoundError, type WorkflowBindingLike } from '../host/platform';\n\n/**\n * A minimal structural interface over the Cloudflare bindings.\n *\n * @cloudflare/workers-types is deliberately not used: the global types it\n * injects clash with the DOM lib this package's react side needs. A structural\n * subset plus the ambient cloudflare:workers declaration is enough to compile,\n * and the real bindings satisfy it structurally at runtime.\n */\n\n/** Structural subset of D1Result: `meta.changes` is how INSERT OR IGNORE reports whether it inserted. */\nexport interface D1RunResultLike {\n  meta?: { changes?: number };\n}\n\nexport interface D1PreparedStatementLike {\n  bind(...values: unknown[]): D1PreparedStatementLike;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  run(): Promise<D1RunResultLike>;\n}\n\nexport interface D1DatabaseLike {\n  prepare(sql: string): D1PreparedStatementLike;\n  /** Statements run in order inside one transaction (real D1 semantics) — deploy relies on the atomicity. */\n  batch(statements: D1PreparedStatementLike[]): Promise<unknown>;\n}\n\n/**\n * Cloudflare Email Service's send_email binding (structural subset).\n *\n * `idempotencyKey` is part of the call because the send happens inside a\n * `step.do`: a step body re-runs after its fn resolved but before the\n * checkpoint committed, so a binding that drops the key mails the user twice.\n * The binding is app-supplied glue (nothing here can de-duplicate — there is\n * no state between two runs of the same step), which is why the port makes the\n * key impossible to miss rather than merely available.\n */\nexport interface EmailBindingLike {\n  send(message: {\n    from: EmailAddress;\n    to: EmailAddress;\n    replyTo?: EmailAddress;\n    subject: string;\n    html: string;\n    /** List-Unsubscribe and List-Unsubscribe-Post, when the email has an unsubscribe link. */\n    headers?: Readonly<Record<string, string>>;\n    /** `${instanceId}:${nodeId}`: stable across replays and retries — drop a send whose key was already delivered. */\n    idempotencyKey: string;\n  }): Promise<unknown>;\n}\n\n/** Cloudflare's Workflow binding, as far as the host uses it. */\nexport type CfWorkflowBinding = Pick<WorkflowBindingLike, 'create' | 'get'>;\n\n/** How Cloudflare's `get` reports an unknown instance id. */\nconst CF_NOT_FOUND = 'instance.not_found';\n\n/**\n * The Workflow binding as the host's runtime port: `get` answers an unknown id with\n * `InstanceNotFoundError`, as the port promises, instead of Cloudflare's own error. Everything\n * else is forwarded as is.\n */\nexport function cloudflareJourneyBinding(binding: CfWorkflowBinding): WorkflowBindingLike {\n  return {\n    create: (options) => binding.create(options),\n    async get(id) {\n      try {\n        return await binding.get(id);\n      } catch (error) {\n        if (String(error).includes(CF_NOT_FOUND)) {\n          throw new InstanceNotFoundError(id, { cause: error });\n        }\n        throw error;\n      }\n    },\n  };\n}\n\n/**\n * Slack on the deadline when deciding whether a thrown wait was a timeout: the\n * platform may surface the expiry a moment early, and a wait shorter than this\n * has no room to tell the two apart anyway.\n */\nexport const WAKE_TIMEOUT_TOLERANCE_MS = 5_000;\n\n/**\n * Did a wait that threw actually reach its deadline?\n *\n * CF signals a wait timeout by throwing, and so does every other failure in\n * there — a broken binding, an evicted instance, a malformed timeout. Reading\n * them all as timeouts would make an infrastructure fault indistinguishable\n * from \"the user never did it\" (the journey would take its onTimeout branch,\n * early and silently). Only the clock can tell them apart, and only against\n * the absolute deadline: measured from when the wait was parked, a replay\n * after an eviction would start the measure over and read a\n * genuine expiry as a failure.\n */\nexport function wakeExpired(deadlineMs: number, now: number): boolean {\n  return now >= deadlineMs - WAKE_TIMEOUT_TOLERANCE_MS;\n}\n"],"mappings":";;;AA0DA,MAAM,eAAe;;;;;;AAOrB,SAAgB,yBAAyB,SAAiD;CACxF,OAAO;EACL,SAAS,YAAY,QAAQ,OAAO,OAAO;EAC3C,MAAM,IAAI,IAAI;GACZ,IAAI;IACF,OAAO,MAAM,QAAQ,IAAI,EAAE;GAC7B,SAAS,OAAO;IACd,IAAI,OAAO,KAAK,CAAC,CAAC,SAAS,YAAY,GACrC,MAAM,IAAI,sBAAsB,IAAI,EAAE,OAAO,MAAM,CAAC;IAEtD,MAAM;GACR;EACF;CACF;AACF;;;;;;AAOA,MAAa,4BAA4B;;;;;;;;;;;;;AAczC,SAAgB,YAAY,YAAoB,KAAsB;CACpE,OAAO,OAAO,aAAa;AAC7B"}

package/dist/cloudflare/d1-env.cjs

@@ -2,14 +2,14 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_store_d1 = require("../store/d1.cjs");
 //#region src/cloudflare/d1-env.ts
 /**
-* The default store: D1 + KV from the env's bindings. Every router function
-* and the runner fall back to it when no store is passed, so a Worker that
-* declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say
-* PostgresJourneyStore) passes its own and may omit those bindings entirely.
+* The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see
+* ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store
+* is passed, so a Worker that declares `DB` needs no wiring; one on another store (say
+* PostgresJourneyStore) passes its own and may omit the binding entirely.
 */
 function d1Store(env) {
-	if (env.DB === void 0 || env.WORKFLOW_KV === void 0) throw new Error("JourneyStore not configured: declare the DB and WORKFLOW_KV bindings for the default D1 store, or pass a store explicitly");
-	return new require_store_d1.D1JourneyStore(env.DB, env.WORKFLOW_KV);
+	if (env.DB === void 0) throw new Error("JourneyStore not configured: declare the DB binding for the default D1 store, or pass a store explicitly");
+	return new require_store_d1.D1JourneyStore(env.DB);
 }
 //#endregion
 exports.d1Store = d1Store;

package/dist/cloudflare/d1-env.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"d1-env.cjs","names":["D1JourneyStore"],"sources":["../../src/cloudflare/d1-env.ts"],"sourcesContent":["import { D1JourneyStore } from '../store/d1';\nimport type { JourneyStore } from '../store/index';\nimport type { JourneyEnv } from './bindings';\n\n/**\n * The default store: D1 + KV from the env's bindings. Every router function\n * and the runner fall back to it when no store is passed, so a Worker that\n * declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say\n * PostgresJourneyStore) passes its own and may omit those bindings entirely.\n */\nexport function d1Store(env: JourneyEnv): JourneyStore {\n  if (env.DB === undefined || env.WORKFLOW_KV === undefined) {\n    throw new Error(\n      'JourneyStore not configured: declare the DB and WORKFLOW_KV bindings for the default D1 store, or pass a store explicitly'\n    );\n  }\n  return new D1JourneyStore(env.DB, env.WORKFLOW_KV);\n}\n"],"mappings":";;;;;;;;;AAUA,SAAgB,QAAQ,KAA+B;CACrD,IAAI,IAAI,OAAO,KAAA,KAAa,IAAI,gBAAgB,KAAA,GAC9C,MAAM,IAAI,MACR,2HACF;CAEF,OAAO,IAAIA,iBAAAA,eAAe,IAAI,IAAI,IAAI,WAAW;AACnD"}
+{"version":3,"file":"d1-env.cjs","names":["D1JourneyStore"],"sources":["../../src/cloudflare/d1-env.ts"],"sourcesContent":["import type { JourneyEnv } from '../host/platform';\nimport { D1JourneyStore } from '../store/d1';\nimport type { JourneyStore } from '../store/index';\n\n/**\n * The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see\n * ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store\n * is passed, so a Worker that declares `DB` needs no wiring; one on another store (say\n * PostgresJourneyStore) passes its own and may omit the binding entirely.\n */\nexport function d1Store(env: JourneyEnv): JourneyStore {\n  if (env.DB === undefined) {\n    throw new Error(\n      'JourneyStore not configured: declare the DB binding for the default D1 store, or pass a store explicitly'\n    );\n  }\n  return new D1JourneyStore(env.DB);\n}\n"],"mappings":";;;;;;;;;AAUA,SAAgB,QAAQ,KAA+B;CACrD,IAAI,IAAI,OAAO,KAAA,GACb,MAAM,IAAI,MACR,0GACF;CAEF,OAAO,IAAIA,iBAAAA,eAAe,IAAI,EAAE;AAClC"}

package/dist/cloudflare/d1-env.d.cts

@@ -1,11 +1,11 @@
-import { JourneyEnv } from "./bindings.cjs";
+import { JourneyEnv } from "../host/platform.cjs";
 import { JourneyStore } from "../store/index.cjs";
 //#region src/cloudflare/d1-env.d.ts
 /**
- * The default store: D1 + KV from the env's bindings. Every router function
- * and the runner fall back to it when no store is passed, so a Worker that
- * declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say
- * PostgresJourneyStore) passes its own and may omit those bindings entirely.
+ * The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see
+ * ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store
+ * is passed, so a Worker that declares `DB` needs no wiring; one on another store (say
+ * PostgresJourneyStore) passes its own and may omit the binding entirely.
  */
 export declare function d1Store(env: JourneyEnv): JourneyStore;
 //#endregion

package/dist/cloudflare/d1-env.d.mts

@@ -1,11 +1,11 @@
-import { JourneyEnv } from "./bindings.mjs";
+import { JourneyEnv } from "../host/platform.mjs";
 import { JourneyStore } from "../store/index.mjs";
 //#region src/cloudflare/d1-env.d.ts
 /**
- * The default store: D1 + KV from the env's bindings. Every router function
- * and the runner fall back to it when no store is passed, so a Worker that
- * declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say
- * PostgresJourneyStore) passes its own and may omit those bindings entirely.
+ * The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see
+ * ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store
+ * is passed, so a Worker that declares `DB` needs no wiring; one on another store (say
+ * PostgresJourneyStore) passes its own and may omit the binding entirely.
  */
 export declare function d1Store(env: JourneyEnv): JourneyStore;
 //#endregion

package/dist/cloudflare/d1-env.mjs

@@ -1,14 +1,14 @@
 import { D1JourneyStore } from "../store/d1.mjs";
 //#region src/cloudflare/d1-env.ts
 /**
-* The default store: D1 + KV from the env's bindings. Every router function
-* and the runner fall back to it when no store is passed, so a Worker that
-* declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say
-* PostgresJourneyStore) passes its own and may omit those bindings entirely.
+* The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see
+* ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store
+* is passed, so a Worker that declares `DB` needs no wiring; one on another store (say
+* PostgresJourneyStore) passes its own and may omit the binding entirely.
 */
 function d1Store(env) {
-	if (env.DB === void 0 || env.WORKFLOW_KV === void 0) throw new Error("JourneyStore not configured: declare the DB and WORKFLOW_KV bindings for the default D1 store, or pass a store explicitly");
-	return new D1JourneyStore(env.DB, env.WORKFLOW_KV);
+	if (env.DB === void 0) throw new Error("JourneyStore not configured: declare the DB binding for the default D1 store, or pass a store explicitly");
+	return new D1JourneyStore(env.DB);
 }
 //#endregion
 export { d1Store };

package/dist/cloudflare/d1-env.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"d1-env.mjs","names":[],"sources":["../../src/cloudflare/d1-env.ts"],"sourcesContent":["import { D1JourneyStore } from '../store/d1';\nimport type { JourneyStore } from '../store/index';\nimport type { JourneyEnv } from './bindings';\n\n/**\n * The default store: D1 + KV from the env's bindings. Every router function\n * and the runner fall back to it when no store is passed, so a Worker that\n * declares `DB` and `WORKFLOW_KV` needs no wiring; one on another store (say\n * PostgresJourneyStore) passes its own and may omit those bindings entirely.\n */\nexport function d1Store(env: JourneyEnv): JourneyStore {\n  if (env.DB === undefined || env.WORKFLOW_KV === undefined) {\n    throw new Error(\n      'JourneyStore not configured: declare the DB and WORKFLOW_KV bindings for the default D1 store, or pass a store explicitly'\n    );\n  }\n  return new D1JourneyStore(env.DB, env.WORKFLOW_KV);\n}\n"],"mappings":";;;;;;;;AAUA,SAAgB,QAAQ,KAA+B;CACrD,IAAI,IAAI,OAAO,KAAA,KAAa,IAAI,gBAAgB,KAAA,GAC9C,MAAM,IAAI,MACR,2HACF;CAEF,OAAO,IAAI,eAAe,IAAI,IAAI,IAAI,WAAW;AACnD"}
+{"version":3,"file":"d1-env.mjs","names":[],"sources":["../../src/cloudflare/d1-env.ts"],"sourcesContent":["import type { JourneyEnv } from '../host/platform';\nimport { D1JourneyStore } from '../store/d1';\nimport type { JourneyStore } from '../store/index';\n\n/**\n * The default store: D1 from the env's `DB` binding — tables and workflow bodies alike (see\n * ../cloudflare/schema.sql). Every router function and the runner fall back to it when no store\n * is passed, so a Worker that declares `DB` needs no wiring; one on another store (say\n * PostgresJourneyStore) passes its own and may omit the binding entirely.\n */\nexport function d1Store(env: JourneyEnv): JourneyStore {\n  if (env.DB === undefined) {\n    throw new Error(\n      'JourneyStore not configured: declare the DB binding for the default D1 store, or pass a store explicitly'\n    );\n  }\n  return new D1JourneyStore(env.DB);\n}\n"],"mappings":";;;;;;;;AAUA,SAAgB,QAAQ,KAA+B;CACrD,IAAI,IAAI,OAAO,KAAA,GACb,MAAM,IAAI,MACR,0GACF;CAEF,OAAO,IAAI,eAAe,IAAI,EAAE;AAClC"}

package/dist/cloudflare/index.cjs

@@ -1,59 +1,69 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_email_sender = require("../email-sender.cjs");
+const require_store_erasure = require("../store/erasure.cjs");
 const require_store_postgres_reporting = require("../store/postgres-reporting.cjs");
 const require_store_postgres = require("../store/postgres.cjs");
 const require_store_facts = require("../store/facts.cjs");
-const require_cloudflare_bindings = require("./bindings.cjs");
 const require_store_d1 = require("../store/d1.cjs");
 const require_cloudflare_d1_env = require("./d1-env.cjs");
-const require_reporting_classify = require("../reporting/classify.cjs");
-const require_reporting_tracking = require("../reporting/tracking.cjs");
 const require_store_index = require("../store/index.cjs");
-const require_host_router = require("../host/router.cjs");
+const require_host_platform = require("../host/platform.cjs");
+const require_host_ingest = require("../host/ingest.cjs");
 const require_reporting_observer = require("../reporting/observer.cjs");
 const require_host_senders = require("../host/senders.cjs");
 const require_host_channels = require("../host/channels.cjs");
+const require_reporting_classify = require("../reporting/classify.cjs");
+const require_reporting_tracking = require("../reporting/tracking.cjs");
+const require_host_auth = require("../host/auth.cjs");
+const require_host_http = require("../host/http.cjs");
 const require_host_journey_host = require("../host/journey-host.cjs");
+const require_cloudflare_bindings = require("./bindings.cjs");
 const require_cloudflare_runner = require("./runner.cjs");
 const require_cloudflare_worker = require("./worker.cjs");
 exports.BURST_WINDOW_MS = require_reporting_classify.BURST_WINDOW_MS;
-exports.BundleIntegrityError = require_host_router.BundleIntegrityError;
+exports.BundleIntegrityError = require_host_ingest.BundleIntegrityError;
 exports.D1JourneyStore = require_store_d1.D1JourneyStore;
 exports.DEFAULT_QUICK_MS = require_reporting_classify.DEFAULT_QUICK_MS;
 exports.EmailSender = require_email_sender.EmailSender;
 exports.EnvValidationError = require_host_journey_host.EnvValidationError;
-exports.InstanceNotFoundError = require_cloudflare_bindings.InstanceNotFoundError;
+exports.InstanceNotFoundError = require_host_platform.InstanceNotFoundError;
 exports.JourneyFactSource = require_store_facts.JourneyFactSource;
 exports.JourneyRunner = require_cloudflare_runner.JourneyRunner;
 exports.LogMessageSender = require_host_senders.LogMessageSender;
 exports.PostgresJourneyStore = require_store_postgres.PostgresJourneyStore;
 exports.PostgresReporting = require_store_postgres_reporting.PostgresReporting;
+exports.SWEEP_PAGE_SIZE = require_host_ingest.SWEEP_PAGE_SIZE;
 exports.SchemaMismatchError = require_store_index.SchemaMismatchError;
-exports.UnversionedStoreError = require_host_router.UnversionedStoreError;
-exports.WAKE_EVENT_TYPE = require_cloudflare_bindings.WAKE_EVENT_TYPE;
+exports.UnversionedStoreError = require_host_ingest.UnversionedStoreError;
+exports.UserErasedError = require_store_erasure.UserErasedError;
+exports.WAKE_EVENT_TYPE = require_host_platform.WAKE_EVENT_TYPE;
 exports.WAKE_TIMEOUT_TOLERANCE_MS = require_cloudflare_bindings.WAKE_TIMEOUT_TOLERANCE_MS;
 exports.WebhookMessageSender = require_host_senders.WebhookMessageSender;
+exports.authorized = require_host_auth.authorized;
+exports.bearerMatches = require_host_auth.bearerMatches;
 exports.channelsFromConfig = require_host_channels.channelsFromConfig;
 exports.classifyClick = require_reporting_classify.classifyClick;
 exports.classifyOpen = require_reporting_classify.classifyOpen;
+exports.cloudflareJourneyBinding = require_cloudflare_bindings.cloudflareJourneyBinding;
 exports.d1Store = require_cloudflare_d1_env.d1Store;
-exports.deployBundle = require_host_router.deployBundle;
-exports.forgetUser = require_host_router.forgetUser;
-exports.handleRequest = require_host_router.handleRequest;
+exports.deployBundle = require_host_ingest.deployBundle;
+exports.forgetUser = require_host_ingest.forgetUser;
+exports.handleRequest = require_host_http.handleRequest;
 exports.handleTracking = require_reporting_tracking.handleTracking;
-exports.identifyUser = require_host_router.identifyUser;
-exports.ingestEvent = require_host_router.ingestEvent;
-exports.isInstanceNotFound = require_cloudflare_bindings.isInstanceNotFound;
+exports.identifyUser = require_host_ingest.identifyUser;
+exports.ingestEvent = require_host_ingest.ingestEvent;
 exports.journeyMode = require_host_channels.journeyMode;
 exports.journeyWorker = require_cloudflare_worker.journeyWorker;
 exports.recordPushOpen = require_reporting_tracking.recordPushOpen;
-exports.registerDevice = require_host_router.registerDevice;
-exports.removeDevice = require_host_router.removeDevice;
+exports.registerDevice = require_host_ingest.registerDevice;
+exports.removeDevice = require_host_ingest.removeDevice;
 exports.reportingObserver = require_reporting_observer.reportingObserver;
 exports.routeByChannel = require_host_senders.routeByChannel;
 exports.routeByPlatform = require_host_senders.routeByPlatform;
 exports.runtimeFromConfig = require_host_channels.runtimeFromConfig;
-exports.sweepSegments = require_host_router.sweepSegments;
+exports.sweepMaintenance = require_host_ingest.sweepMaintenance;
+exports.sweepSegments = require_host_ingest.sweepSegments;
+exports.sweepSegmentsPaged = require_host_ingest.sweepSegmentsPaged;
 exports.trackEmail = require_email_sender.trackEmail;
-exports.unbindDevice = require_host_router.unbindDevice;
+exports.unbindDevice = require_host_ingest.unbindDevice;
 exports.wakeExpired = require_cloudflare_bindings.wakeExpired;

package/dist/cloudflare/index.d.cts

@@ -1,6 +1,8 @@
 import { JourneyObserver, LinkPurpose, MessageTracking, OutboundMessage, PushDevice, SendResult } from "../engine/ports.cjs";
 import { EmailAddress } from "../email.cjs";
-import { D1DatabaseLike, EmailBindingLike, InstanceNotFoundError, JourneyEnv, JourneyParams, KVNamespaceLike, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WorkflowBindingLike, WorkflowInstanceLike, isInstanceNotFound, wakeExpired } from "./bindings.cjs";
+import { UserErasedError } from "../store/erasure.cjs";
+import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.cjs";
+import { D1DatabaseLike, EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.cjs";
 import { D1JourneyStore } from "../store/d1.cjs";
 import { JourneyFactSource } from "../store/facts.cjs";
 import { SqlClientLike } from "../store/sql.cjs";
@@ -8,14 +10,16 @@ import { PostgresJourneyStore, PostgresJourneyStoreOptions } from "../store/post
 import { PostgresReporting } from "../store/postgres-reporting.cjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.cjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.cjs";
-import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SweepResult, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.cjs";
+import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.cjs";
 import { EnvValidationError } from "../host/journey-host.cjs";
 import { d1Store } from "./d1-env.cjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
+import { IngestValidation, handleRequest } from "../host/http.cjs";
+import { authorized, bearerMatches } from "../host/auth.cjs";
 import { JourneyRunner } from "./runner.cjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.cjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.cjs";
 import { reportingObserver } from "../reporting/observer.cjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.cjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.cjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type KVNamespaceLike, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/index.d.mts

@@ -1,6 +1,8 @@
 import { JourneyObserver, LinkPurpose, MessageTracking, OutboundMessage, PushDevice, SendResult } from "../engine/ports.mjs";
 import { EmailAddress } from "../email.mjs";
-import { D1DatabaseLike, EmailBindingLike, InstanceNotFoundError, JourneyEnv, JourneyParams, KVNamespaceLike, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WorkflowBindingLike, WorkflowInstanceLike, isInstanceNotFound, wakeExpired } from "./bindings.mjs";
+import { UserErasedError } from "../store/erasure.mjs";
+import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.mjs";
+import { D1DatabaseLike, EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { D1JourneyStore } from "../store/d1.mjs";
 import { JourneyFactSource } from "../store/facts.mjs";
 import { SqlClientLike } from "../store/sql.mjs";
@@ -8,14 +10,16 @@ import { PostgresJourneyStore, PostgresJourneyStoreOptions } from "../store/post
 import { PostgresReporting } from "../store/postgres-reporting.mjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.mjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.mjs";
-import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SweepResult, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.mjs";
+import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.mjs";
 import { EnvValidationError } from "../host/journey-host.mjs";
 import { d1Store } from "./d1-env.mjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
+import { IngestValidation, handleRequest } from "../host/http.mjs";
+import { authorized, bearerMatches } from "../host/auth.mjs";
 import { JourneyRunner } from "./runner.mjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.mjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.mjs";
 import { reportingObserver } from "../reporting/observer.mjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.mjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.mjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type KVNamespaceLike, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/index.mjs

@@ -1,18 +1,22 @@
 import { EmailSender, trackEmail } from "../email-sender.mjs";
+import { UserErasedError } from "../store/erasure.mjs";
 import { PostgresReporting } from "../store/postgres-reporting.mjs";
 import { PostgresJourneyStore } from "../store/postgres.mjs";
 import { JourneyFactSource } from "../store/facts.mjs";
-import { InstanceNotFoundError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, isInstanceNotFound, wakeExpired } from "./bindings.mjs";
 import { D1JourneyStore } from "../store/d1.mjs";
 import { d1Store } from "./d1-env.mjs";
-import { BURST_WINDOW_MS, DEFAULT_QUICK_MS, classifyClick, classifyOpen } from "../reporting/classify.mjs";
-import { handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { SchemaMismatchError } from "../store/index.mjs";
-import { BundleIntegrityError, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.mjs";
+import { InstanceNotFoundError, WAKE_EVENT_TYPE } from "../host/platform.mjs";
+import { BundleIntegrityError, SWEEP_PAGE_SIZE, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.mjs";
 import { reportingObserver } from "../reporting/observer.mjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.mjs";
 import { channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.mjs";
+import { BURST_WINDOW_MS, DEFAULT_QUICK_MS, classifyClick, classifyOpen } from "../reporting/classify.mjs";
+import { handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
+import { authorized, bearerMatches } from "../host/auth.mjs";
+import { handleRequest } from "../host/http.mjs";
 import { EnvValidationError } from "../host/journey-host.mjs";
+import { WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { JourneyRunner } from "./runner.mjs";
 import { journeyWorker } from "./worker.mjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, D1JourneyStore, DEFAULT_QUICK_MS, EmailSender, EnvValidationError, InstanceNotFoundError, JourneyFactSource, JourneyRunner, LogMessageSender, PostgresJourneyStore, PostgresReporting, SchemaMismatchError, UnversionedStoreError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { BURST_WINDOW_MS, BundleIntegrityError, D1JourneyStore, DEFAULT_QUICK_MS, EmailSender, EnvValidationError, InstanceNotFoundError, JourneyFactSource, JourneyRunner, LogMessageSender, PostgresJourneyStore, PostgresReporting, SWEEP_PAGE_SIZE, SchemaMismatchError, UnversionedStoreError, UserErasedError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, trackEmail, unbindDevice, wakeExpired };