@shware/workflow 3.3.0 → 4.1.0

package/dist/cloudflare/index.cjs

@@ -1,59 +1,70 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_email_sender = require("../email-sender.cjs");
+const require_store_erasure = require("../store/erasure.cjs");
 const require_store_postgres_reporting = require("../store/postgres-reporting.cjs");
 const require_store_postgres = require("../store/postgres.cjs");
 const require_store_facts = require("../store/facts.cjs");
-const require_cloudflare_bindings = require("./bindings.cjs");
 const require_store_d1 = require("../store/d1.cjs");
 const require_cloudflare_d1_env = require("./d1-env.cjs");
-const require_reporting_classify = require("../reporting/classify.cjs");
-const require_reporting_tracking = require("../reporting/tracking.cjs");
 const require_store_index = require("../store/index.cjs");
-const require_host_router = require("../host/router.cjs");
+const require_host_platform = require("../host/platform.cjs");
+const require_host_ingest = require("../host/ingest.cjs");
 const require_reporting_observer = require("../reporting/observer.cjs");
 const require_host_senders = require("../host/senders.cjs");
 const require_host_channels = require("../host/channels.cjs");
+const require_reporting_classify = require("../reporting/classify.cjs");
+const require_reporting_tracking = require("../reporting/tracking.cjs");
+const require_host_auth = require("../host/auth.cjs");
+const require_host_http = require("../host/http.cjs");
 const require_host_journey_host = require("../host/journey-host.cjs");
+const require_cloudflare_bindings = require("./bindings.cjs");
 const require_cloudflare_runner = require("./runner.cjs");
 const require_cloudflare_worker = require("./worker.cjs");
 exports.BURST_WINDOW_MS = require_reporting_classify.BURST_WINDOW_MS;
-exports.BundleIntegrityError = require_host_router.BundleIntegrityError;
+exports.BundleIntegrityError = require_host_ingest.BundleIntegrityError;
 exports.D1JourneyStore = require_store_d1.D1JourneyStore;
 exports.DEFAULT_QUICK_MS = require_reporting_classify.DEFAULT_QUICK_MS;
 exports.EmailSender = require_email_sender.EmailSender;
 exports.EnvValidationError = require_host_journey_host.EnvValidationError;
-exports.InstanceNotFoundError = require_cloudflare_bindings.InstanceNotFoundError;
+exports.InstanceNotFoundError = require_host_platform.InstanceNotFoundError;
 exports.JourneyFactSource = require_store_facts.JourneyFactSource;
 exports.JourneyRunner = require_cloudflare_runner.JourneyRunner;
 exports.LogMessageSender = require_host_senders.LogMessageSender;
 exports.PostgresJourneyStore = require_store_postgres.PostgresJourneyStore;
 exports.PostgresReporting = require_store_postgres_reporting.PostgresReporting;
+exports.SWEEP_PAGE_SIZE = require_host_ingest.SWEEP_PAGE_SIZE;
 exports.SchemaMismatchError = require_store_index.SchemaMismatchError;
-exports.UnversionedStoreError = require_host_router.UnversionedStoreError;
-exports.WAKE_EVENT_TYPE = require_cloudflare_bindings.WAKE_EVENT_TYPE;
+exports.UnversionedStoreError = require_host_ingest.UnversionedStoreError;
+exports.UserErasedError = require_store_erasure.UserErasedError;
+exports.WAKE_EVENT_TYPE = require_host_platform.WAKE_EVENT_TYPE;
 exports.WAKE_TIMEOUT_TOLERANCE_MS = require_cloudflare_bindings.WAKE_TIMEOUT_TOLERANCE_MS;
 exports.WebhookMessageSender = require_host_senders.WebhookMessageSender;
+exports.authorized = require_host_auth.authorized;
+exports.bearerMatches = require_host_auth.bearerMatches;
 exports.channelsFromConfig = require_host_channels.channelsFromConfig;
 exports.classifyClick = require_reporting_classify.classifyClick;
 exports.classifyOpen = require_reporting_classify.classifyOpen;
+exports.cloudflareJourneyBinding = require_cloudflare_bindings.cloudflareJourneyBinding;
 exports.d1Store = require_cloudflare_d1_env.d1Store;
-exports.deployBundle = require_host_router.deployBundle;
-exports.forgetUser = require_host_router.forgetUser;
-exports.handleRequest = require_host_router.handleRequest;
+exports.deployBundle = require_host_ingest.deployBundle;
+exports.forgetUser = require_host_ingest.forgetUser;
+exports.handleRequest = require_host_http.handleRequest;
 exports.handleTracking = require_reporting_tracking.handleTracking;
-exports.identifyUser = require_host_router.identifyUser;
-exports.ingestEvent = require_host_router.ingestEvent;
-exports.isInstanceNotFound = require_cloudflare_bindings.isInstanceNotFound;
+exports.identifyUser = require_host_ingest.identifyUser;
+exports.ingestEvent = require_host_ingest.ingestEvent;
 exports.journeyMode = require_host_channels.journeyMode;
 exports.journeyWorker = require_cloudflare_worker.journeyWorker;
 exports.recordPushOpen = require_reporting_tracking.recordPushOpen;
-exports.registerDevice = require_host_router.registerDevice;
-exports.removeDevice = require_host_router.removeDevice;
+exports.registerDevice = require_host_ingest.registerDevice;
+exports.removeDevice = require_host_ingest.removeDevice;
 exports.reportingObserver = require_reporting_observer.reportingObserver;
 exports.routeByChannel = require_host_senders.routeByChannel;
 exports.routeByPlatform = require_host_senders.routeByPlatform;
 exports.runtimeFromConfig = require_host_channels.runtimeFromConfig;
-exports.sweepSegments = require_host_router.sweepSegments;
+exports.sweepMaintenance = require_host_ingest.sweepMaintenance;
+exports.sweepSegments = require_host_ingest.sweepSegments;
+exports.sweepSegmentsPaged = require_host_ingest.sweepSegmentsPaged;
+exports.timingSafeEqual = require_host_auth.timingSafeEqual;
 exports.trackEmail = require_email_sender.trackEmail;
-exports.unbindDevice = require_host_router.unbindDevice;
+exports.unbindDevice = require_host_ingest.unbindDevice;
 exports.wakeExpired = require_cloudflare_bindings.wakeExpired;

package/dist/cloudflare/index.d.cts

@@ -1,6 +1,8 @@
 import { JourneyObserver, LinkPurpose, MessageTracking, OutboundMessage, PushDevice, SendResult } from "../engine/ports.cjs";
 import { EmailAddress } from "../email.cjs";
-import { D1DatabaseLike, EmailBindingLike, InstanceNotFoundError, JourneyEnv, JourneyParams, KVNamespaceLike, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WorkflowBindingLike, WorkflowInstanceLike, isInstanceNotFound, wakeExpired } from "./bindings.cjs";
+import { UserErasedError } from "../store/erasure.cjs";
+import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.cjs";
+import { D1DatabaseLike, EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.cjs";
 import { D1JourneyStore } from "../store/d1.cjs";
 import { JourneyFactSource } from "../store/facts.cjs";
 import { SqlClientLike } from "../store/sql.cjs";
@@ -8,14 +10,16 @@ import { PostgresJourneyStore, PostgresJourneyStoreOptions } from "../store/post
 import { PostgresReporting } from "../store/postgres-reporting.cjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.cjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.cjs";
-import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SweepResult, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.cjs";
+import { Authorize, authorized, bearerMatches, timingSafeEqual } from "../host/auth.cjs";
+import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.cjs";
 import { EnvValidationError } from "../host/journey-host.cjs";
 import { d1Store } from "./d1-env.cjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
+import { IngestValidation, handleRequest } from "../host/http.cjs";
 import { JourneyRunner } from "./runner.cjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.cjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.cjs";
 import { reportingObserver } from "../reporting/observer.cjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.cjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.cjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type KVNamespaceLike, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/index.d.mts

@@ -1,6 +1,8 @@
 import { JourneyObserver, LinkPurpose, MessageTracking, OutboundMessage, PushDevice, SendResult } from "../engine/ports.mjs";
 import { EmailAddress } from "../email.mjs";
-import { D1DatabaseLike, EmailBindingLike, InstanceNotFoundError, JourneyEnv, JourneyParams, KVNamespaceLike, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WorkflowBindingLike, WorkflowInstanceLike, isInstanceNotFound, wakeExpired } from "./bindings.mjs";
+import { UserErasedError } from "../store/erasure.mjs";
+import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.mjs";
+import { D1DatabaseLike, EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { D1JourneyStore } from "../store/d1.mjs";
 import { JourneyFactSource } from "../store/facts.mjs";
 import { SqlClientLike } from "../store/sql.mjs";
@@ -8,14 +10,16 @@ import { PostgresJourneyStore, PostgresJourneyStoreOptions } from "../store/post
 import { PostgresReporting } from "../store/postgres-reporting.mjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.mjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.mjs";
-import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SweepResult, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.mjs";
+import { Authorize, authorized, bearerMatches, timingSafeEqual } from "../host/auth.mjs";
+import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.mjs";
 import { EnvValidationError } from "../host/journey-host.mjs";
 import { d1Store } from "./d1-env.mjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
+import { IngestValidation, handleRequest } from "../host/http.mjs";
 import { JourneyRunner } from "./runner.mjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.mjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.mjs";
 import { reportingObserver } from "../reporting/observer.mjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.mjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.mjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type KVNamespaceLike, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, type D1DatabaseLike, D1JourneyStore, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UnversionedStoreError, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/index.mjs

@@ -1,18 +1,22 @@
 import { EmailSender, trackEmail } from "../email-sender.mjs";
+import { UserErasedError } from "../store/erasure.mjs";
 import { PostgresReporting } from "../store/postgres-reporting.mjs";
 import { PostgresJourneyStore } from "../store/postgres.mjs";
 import { JourneyFactSource } from "../store/facts.mjs";
-import { InstanceNotFoundError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, isInstanceNotFound, wakeExpired } from "./bindings.mjs";
 import { D1JourneyStore } from "../store/d1.mjs";
 import { d1Store } from "./d1-env.mjs";
-import { BURST_WINDOW_MS, DEFAULT_QUICK_MS, classifyClick, classifyOpen } from "../reporting/classify.mjs";
-import { handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { SchemaMismatchError } from "../store/index.mjs";
-import { BundleIntegrityError, UnversionedStoreError, deployBundle, forgetUser, handleRequest, identifyUser, ingestEvent, registerDevice, removeDevice, sweepSegments, unbindDevice } from "../host/router.mjs";
+import { InstanceNotFoundError, WAKE_EVENT_TYPE } from "../host/platform.mjs";
+import { BundleIntegrityError, SWEEP_PAGE_SIZE, UnversionedStoreError, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.mjs";
 import { reportingObserver } from "../reporting/observer.mjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.mjs";
 import { channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.mjs";
+import { BURST_WINDOW_MS, DEFAULT_QUICK_MS, classifyClick, classifyOpen } from "../reporting/classify.mjs";
+import { handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
+import { authorized, bearerMatches, timingSafeEqual } from "../host/auth.mjs";
+import { handleRequest } from "../host/http.mjs";
 import { EnvValidationError } from "../host/journey-host.mjs";
+import { WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { JourneyRunner } from "./runner.mjs";
 import { journeyWorker } from "./worker.mjs";
-export { BURST_WINDOW_MS, BundleIntegrityError, D1JourneyStore, DEFAULT_QUICK_MS, EmailSender, EnvValidationError, InstanceNotFoundError, JourneyFactSource, JourneyRunner, LogMessageSender, PostgresJourneyStore, PostgresReporting, SchemaMismatchError, UnversionedStoreError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, channelsFromConfig, classifyClick, classifyOpen, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, isInstanceNotFound, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepSegments, trackEmail, unbindDevice, wakeExpired };
+export { BURST_WINDOW_MS, BundleIntegrityError, D1JourneyStore, DEFAULT_QUICK_MS, EmailSender, EnvValidationError, InstanceNotFoundError, JourneyFactSource, JourneyRunner, LogMessageSender, PostgresJourneyStore, PostgresReporting, SWEEP_PAGE_SIZE, SchemaMismatchError, UnversionedStoreError, UserErasedError, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, d1Store, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/runner.cjs

@@ -1,11 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_runtime = require("../runtime.cjs");
 const require_engine_retry = require("../engine/retry.cjs");
-const require_cloudflare_bindings = require("./bindings.cjs");
+const require_runtime = require("../runtime.cjs");
 const require_cloudflare_d1_env = require("./d1-env.cjs");
+const require_host_platform = require("../host/platform.cjs");
 const require_host_execute = require("../host/execute.cjs");
 const require_engine_actions = require("../engine/actions.cjs");
 const require_host_senders = require("../host/senders.cjs");
+const require_cloudflare_bindings = require("./bindings.cjs");
 let cloudflare_workers = require("cloudflare:workers");
 let cloudflare_workflows = require("cloudflare:workflows");
 //#region src/cloudflare/runner.ts
@@ -14,7 +15,8 @@ let cloudflare_workflows = require("cloudflare:workflows");
 * subscribe/unsubscribe write the subscription table inside durable steps (the
 * router wakes instances from that table); waitForWake parks on CF's
 * waitForEvent, which signals a timeout by throwing — and so does every other
-* failure in there, so only the clock can tell them apart (see wakeExpired).
+* failure in there, so only the clock, against the checkpointed deadline, can
+* tell them apart (see wakeExpired).
 */
 var CfEngineStep = class {
 	step;
@@ -30,14 +32,19 @@ var CfEngineStep = class {
 	/**
 	* A failure a retry would only repeat (`isRetryable`: a template refusing its props, the
 	* contract refusing an emitted event, a provider rejecting the request) ends the step at
-	* once instead of burning the retry budget.
+	* once instead of burning the retry budget. The engine recognizes a NonRetryableError by its
+	* `name`, so the original's name is not written over it — the original travels as `cause`.
 	*/
 	do(name, fn) {
 		return this.step.do(name, async () => {
 			try {
 				return await fn();
 			} catch (error) {
-				if (error instanceof Error && !require_engine_retry.isRetryable(error)) throw new cloudflare_workflows.NonRetryableError(error.message, error.name);
+				if (error instanceof Error && !require_engine_retry.isRetryable(error)) {
+					const permanent = new cloudflare_workflows.NonRetryableError(error.message);
+					permanent.cause = error;
+					throw permanent;
+				}
 				throw error;
 			}
 		});
@@ -45,25 +52,21 @@ var CfEngineStep = class {
 	sleep(name, ms) {
 		return this.step.sleep(name, ms);
 	}
-	sleepUntil(name, timestampMs) {
-		return this.step.sleepUntil(name, timestampMs);
-	}
 	subscribe(name, events) {
 		return this.step.do(name, () => this.store.subscribe(this.instanceId, this.userId, events, Date.now()));
 	}
 	unsubscribe(name) {
 		return this.step.do(name, () => this.store.unsubscribe(this.instanceId));
 	}
-	async waitForWake(name, timeoutMs) {
-		const startedAt = Date.now();
+	async waitForWake(name, { timeoutMs, deadlineMs }) {
 		try {
 			await this.step.waitForEvent(name, {
-				type: require_cloudflare_bindings.WAKE_EVENT_TYPE,
+				type: require_host_platform.WAKE_EVENT_TYPE,
 				timeout: timeoutMs
 			});
 			return "event";
 		} catch (error) {
-			if (await this.step.do(`${name}:timed-out`, async () => require_cloudflare_bindings.wakeExpired(startedAt, timeoutMs, Date.now()))) return "timeout";
+			if (await this.step.do(`${name}:timed-out`, async () => require_cloudflare_bindings.wakeExpired(deadlineMs, Date.now()))) return "timeout";
 			throw error;
 		}
 	}
@@ -76,7 +79,7 @@ var CfEngineStep = class {
 */
 var JourneyRunner = class extends cloudflare_workers.WorkflowEntrypoint {
 	/**
-	* The data plane. D1 + KV from the env by default; an app on Postgres
+	* The data plane. D1 from the env by default; an app on Postgres
 	* overrides this (and `closeStore` if its client needs closing):
 	*
 	*   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }
@@ -86,6 +89,18 @@ var JourneyRunner = class extends cloudflare_workers.WorkflowEntrypoint {
 	}
 	/** Called once `run` is over, success or not — release whatever `createStore` opened. */
 	async closeStore(_store) {}
+	adapted;
+	/**
+	* The env a run ingests its emitted events with: the Workflow binding behind the host's port,
+	* so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the
+	* host drop its wakes). Built once per instance.
+	*/
+	hostEnv() {
+		return this.adapted ??= {
+			...this.env,
+			JOURNEY: require_cloudflare_bindings.cloudflareJourneyBinding(this.env.JOURNEY)
+		};
+	}
 	/**
 	* Runtime options for this instance — typed configuration, resolved by the app (typically
 	* `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from
@@ -145,7 +160,7 @@ var JourneyRunner = class extends cloudflare_workers.WorkflowEntrypoint {
 	createRunParts(store, params) {
 		return {
 			store,
-			env: this.env,
+			env: this.hostEnv(),
 			runtime: this.runtime(params),
 			messages: this.createMessageSender(),
 			actions: this.createActionInvoker(),

package/dist/cloudflare/runner.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runner.cjs","names":["isRetryable","NonRetryableError","WAKE_EVENT_TYPE","wakeExpired","WorkflowEntrypoint","d1Store","resolveRuntime","WebhookMessageSender","LogMessageSender","RegistryActionInvoker","executeJourney"],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport type { Contract } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { isRetryable } from '../engine/retry';\nimport { type JourneyRunParts, executeJourney } from '../host/execute';\nimport { LogMessageSender, WebhookMessageSender } from '../host/senders';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport type { JourneyStore } from '../store/index';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock can tell them apart (see wakeExpired).\n */\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A failure a retry would only repeat (`isRetryable`: a template refusing its props, the\n   * contract refusing an emitted event, a provider rejecting the request) ends the step at\n   * once instead of burning the retry budget.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && !isRetryable(error)) {\n          throw new NonRetryableError(error.message, error.name);\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  sleepUntil(name: string, timestampMs: number): Promise<void> {\n    return this.step.sleepUntil(name, timestampMs);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(name: string, timeoutMs: number): Promise<'event' | 'timeout'> {\n    const startedAt = Date.now();\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see\n       * wakeExpired). `startedAt` is not replay-stable, but it is read only\n       * inside the step body below, and a step body runs on the live attempt\n       * alone — a replay returns the persisted verdict without touching the\n       * clock.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(startedAt, timeoutMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 + KV from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  /**\n   * Everything one run is wired to. By default it is composed from the methods above; a host\n   * that assembles the whole set itself (journeyWorker) overrides this one instead.\n   */\n  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n    return {\n      store,\n      env: this.env,\n      runtime: this.runtime(params),\n      messages: this.createMessageSender(),\n      actions: this.createActionInvoker(),\n      contract: this.contract(),\n      validator: this.createMessageValidator(),\n      observer: this.createObserver(store),\n    };\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      const { userId } = event.payload;\n      return await executeJourney(\n        {\n          instanceId: event.instanceId,\n          params: event.payload,\n          // Trigger-event creation time: replay-stable, unlike Date.now() here\n          enteredAtMs: event.timestamp.getTime(),\n          step: new CfEngineStep(step, store, userId, event.instanceId),\n        },\n        this.createRunParts(store, event.payload)\n      );\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2BA,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;CAOH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,CAACA,qBAAAA,YAAY,KAAK,GAC9C,MAAM,IAAIC,qBAAAA,kBAAkB,MAAM,SAAS,MAAM,IAAI;IAEvD,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,WAAW,MAAc,aAAoC;EAC3D,OAAO,KAAK,KAAK,WAAW,MAAM,WAAW;CAC/C;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YAAY,MAAc,WAAiD;EAC/E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAMC,4BAAAA;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvDC,4BAAAA,YAAY,WAAW,WAAW,KAAK,IAAI,CAAC,CAC9C,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmCC,mBAAAA,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAOC,0BAAAA,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;;;;;;;;;;;;CAajE,QAAkB,SAA+C;EAC/D,OAAOC,gBAAAA,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAIC,qBAAAA,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAIC,qBAAAA,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAIC,uBAAAA,sBAAsB,KAAK,QAAQ,CAAC;CACjD;;;;;CAMA,eAAyB,OAAqB,QAAwC;EACpF,OAAO;GACL;GACA,KAAK,KAAK;GACV,SAAS,KAAK,QAAQ,MAAM;GAC5B,UAAU,KAAK,oBAAoB;GACnC,SAAS,KAAK,oBAAoB;GAClC,UAAU,KAAK,SAAS;GACxB,WAAW,KAAK,uBAAuB;GACvC,UAAU,KAAK,eAAe,KAAK;EACrC;CACF;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,MAAM,EAAE,WAAW,MAAM;GACzB,OAAO,MAAMC,qBAAAA,eACX;IACE,YAAY,MAAM;IAClB,QAAQ,MAAM;IAEd,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;GAC9D,GACA,KAAK,eAAe,OAAO,MAAM,OAAO,CAC1C;EACF,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;AACF"}
+{"version":3,"file":"runner.cjs","names":["isRetryable","NonRetryableError","WAKE_EVENT_TYPE","wakeExpired","WorkflowEntrypoint","d1Store","cloudflareJourneyBinding","resolveRuntime","WebhookMessageSender","LogMessageSender","RegistryActionInvoker","executeJourney"],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport type { Contract } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { isRetryable } from '../engine/retry';\nimport { type JourneyRunParts, executeJourney } from '../host/execute';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE } from '../host/platform';\nimport { LogMessageSender, WebhookMessageSender } from '../host/senders';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport type { JourneyStore } from '../store/index';\nimport { cloudflareJourneyBinding, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock, against the checkpointed deadline, can\n * tell them apart (see wakeExpired).\n */\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A failure a retry would only repeat (`isRetryable`: a template refusing its props, the\n   * contract refusing an emitted event, a provider rejecting the request) ends the step at\n   * once instead of burning the retry budget. The engine recognizes a NonRetryableError by its\n   * `name`, so the original's name is not written over it — the original travels as `cause`.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && !isRetryable(error)) {\n          const permanent = new NonRetryableError(error.message);\n          permanent.cause = error;\n          throw permanent;\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(\n    name: string,\n    { timeoutMs, deadlineMs }: { timeoutMs: number; deadlineMs: number }\n  ): Promise<'event' | 'timeout'> {\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see wakeExpired). The\n       * deadline is the interpreter's checkpoint, so the verdict is the same on the attempt\n       * that parked and on a replay after an eviction — which is where the wait usually\n       * resurfaces: the instance is rebuilt, the wait is already over, and the first thing to\n       * run is this step. The verdict is checkpointed too, so later replays reuse it.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(deadlineMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  private adapted: JourneyEnv | undefined;\n\n  /**\n   * The env a run ingests its emitted events with: the Workflow binding behind the host's port,\n   * so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the\n   * host drop its wakes). Built once per instance.\n   */\n  protected hostEnv(): JourneyEnv {\n    return (this.adapted ??= { ...this.env, JOURNEY: cloudflareJourneyBinding(this.env.JOURNEY) });\n  }\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  /**\n   * Everything one run is wired to. By default it is composed from the methods above; a host\n   * that assembles the whole set itself (journeyWorker) overrides this one instead.\n   */\n  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n    return {\n      store,\n      env: this.hostEnv(),\n      runtime: this.runtime(params),\n      messages: this.createMessageSender(),\n      actions: this.createActionInvoker(),\n      contract: this.contract(),\n      validator: this.createMessageValidator(),\n      observer: this.createObserver(store),\n    };\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      const { userId } = event.payload;\n      return await executeJourney(\n        {\n          instanceId: event.instanceId,\n          params: event.payload,\n          // Trigger-event creation time: replay-stable, unlike Date.now() here\n          enteredAtMs: event.timestamp.getTime(),\n          step: new CfEngineStep(step, store, userId, event.instanceId),\n        },\n        this.createRunParts(store, event.payload)\n      );\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6BA,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;;CAQH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,CAACA,qBAAAA,YAAY,KAAK,GAAG;KACjD,MAAM,YAAY,IAAIC,qBAAAA,kBAAkB,MAAM,OAAO;KACrD,UAAU,QAAQ;KAClB,MAAM;IACR;IACA,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YACJ,MACA,EAAE,WAAW,cACiB;EAC9B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAMC,sBAAAA;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvDC,4BAAAA,YAAY,YAAY,KAAK,IAAI,CAAC,CACpC,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmCC,mBAAAA,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAOC,0BAAAA,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;CAEjE;;;;;;CAOA,UAAgC;EAC9B,OAAQ,KAAK,YAAY;GAAE,GAAG,KAAK;GAAK,SAASC,4BAAAA,yBAAyB,KAAK,IAAI,OAAO;EAAE;CAC9F;;;;;;;;;;;;CAaA,QAAkB,SAA+C;EAC/D,OAAOC,gBAAAA,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAIC,qBAAAA,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAIC,qBAAAA,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAIC,uBAAAA,sBAAsB,KAAK,QAAQ,CAAC;CACjD;;;;;CAMA,eAAyB,OAAqB,QAAwC;EACpF,OAAO;GACL;GACA,KAAK,KAAK,QAAQ;GAClB,SAAS,KAAK,QAAQ,MAAM;GAC5B,UAAU,KAAK,oBAAoB;GACnC,SAAS,KAAK,oBAAoB;GAClC,UAAU,KAAK,SAAS;GACxB,WAAW,KAAK,uBAAuB;GACvC,UAAU,KAAK,eAAe,KAAK;EACrC;CACF;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,MAAM,EAAE,WAAW,MAAM;GACzB,OAAO,MAAMC,qBAAAA,eACX;IACE,YAAY,MAAM;IAClB,QAAQ,MAAM;IAEd,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;GAC9D,GACA,KAAK,eAAe,OAAO,MAAM,OAAO,CAC1C;EACF,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;AACF"}

package/dist/cloudflare/runner.d.cts

@@ -1,6 +1,6 @@
 import { ActionInvoker, JourneyObserver, JourneyOutcome, MessageSender, MessageValidator } from "../engine/ports.cjs";
 import { RegisteredAction } from "../engine/actions.cjs";
-import { JourneyEnv, JourneyParams } from "./bindings.cjs";
+import { JourneyEnv, JourneyParams } from "../host/platform.cjs";
 import { JourneyStore } from "../store/index.cjs";
 import { Contract } from "../contract.cjs";
 import { JourneyRuntimeOptions } from "../runtime.cjs";
@@ -15,7 +15,7 @@ import { WorkflowEntrypoint, WorkflowEvent, WorkflowStep } from "cloudflare:work
  */
 export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {
   /**
-   * The data plane. D1 + KV from the env by default; an app on Postgres
+   * The data plane. D1 from the env by default; an app on Postgres
    * overrides this (and `closeStore` if its client needs closing):
    *
    *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }
@@ -23,6 +23,13 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected createStore(): JourneyStore;
   /** Called once `run` is over, success or not — release whatever `createStore` opened. */
   protected closeStore(_store: JourneyStore): Promise<void>;
+  private adapted;
+  /**
+   * The env a run ingests its emitted events with: the Workflow binding behind the host's port,
+   * so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the
+   * host drop its wakes). Built once per instance.
+   */
+  protected hostEnv(): JourneyEnv;
   /**
    * Runtime options for this instance — typed configuration, resolved by the app (typically
    * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from

package/dist/cloudflare/runner.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.cts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAqGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}
+{"version":3,"file":"runner.d.cts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAwGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;UAE1C;;;;;;YAOE,WAAW;;;;;;;;;;;;YAeX,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}

package/dist/cloudflare/runner.d.mts

@@ -1,6 +1,6 @@
 import { ActionInvoker, JourneyObserver, JourneyOutcome, MessageSender, MessageValidator } from "../engine/ports.mjs";
 import { RegisteredAction } from "../engine/actions.mjs";
-import { JourneyEnv, JourneyParams } from "./bindings.mjs";
+import { JourneyEnv, JourneyParams } from "../host/platform.mjs";
 import { JourneyStore } from "../store/index.mjs";
 import { Contract } from "../contract.mjs";
 import { JourneyRuntimeOptions } from "../runtime.mjs";
@@ -15,7 +15,7 @@ import { WorkflowEntrypoint, WorkflowEvent, WorkflowStep } from "cloudflare:work
  */
 export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {
   /**
-   * The data plane. D1 + KV from the env by default; an app on Postgres
+   * The data plane. D1 from the env by default; an app on Postgres
    * overrides this (and `closeStore` if its client needs closing):
    *
    *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }
@@ -23,6 +23,13 @@ export declare class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, Journe
   protected createStore(): JourneyStore;
   /** Called once `run` is over, success or not — release whatever `createStore` opened. */
   protected closeStore(_store: JourneyStore): Promise<void>;
+  private adapted;
+  /**
+   * The env a run ingests its emitted events with: the Workflow binding behind the host's port,
+   * so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the
+   * host drop its wakes). Built once per instance.
+   */
+  protected hostEnv(): JourneyEnv;
   /**
    * Runtime options for this instance — typed configuration, resolved by the app (typically
    * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from

package/dist/cloudflare/runner.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.mts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAqGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;;;;;;;;;;;;YAaxC,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}
+{"version":3,"file":"runner.d.mts","names":[],"sources":["../../src/cloudflare/runner.ts"],"mappings":";;;;;;;;;;;;;;;qBAwGa,sBAAsB,mBAAmB,YAAY;;;;;;;YAOtD,eAAe;;YAKT,WAAW,QAAQ,eAAe;UAE1C;;;;;;YAOE,WAAW;;;;;;;;;;;;YAeX,QAAQ,SAAS,gBAAgB;;;;;;YASjC,uBAAuB;;;;;;;;YAavB,oBAAoB;;;;;YAQpB,YAAY;;;;;;YASZ,0BAA0B;;;;;YAQ1B,eAAe,QAAQ,eAAe;;YAKtC,uBAAuB;;;;;YAQvB,eAAe,OAAO,cAAc,QAAQ,gBAAgB;EAahE,IAAI,OAAO,cAAc,gBAAgB,MAAM,eAAe,QAAQ"}

package/dist/cloudflare/runner.mjs

@@ -1,10 +1,11 @@
-import { resolveRuntime } from "../runtime.mjs";
 import { isRetryable } from "../engine/retry.mjs";
-import { WAKE_EVENT_TYPE, wakeExpired } from "./bindings.mjs";
+import { resolveRuntime } from "../runtime.mjs";
 import { d1Store } from "./d1-env.mjs";
+import { WAKE_EVENT_TYPE } from "../host/platform.mjs";
 import { executeJourney } from "../host/execute.mjs";
 import { RegistryActionInvoker } from "../engine/actions.mjs";
 import { LogMessageSender, WebhookMessageSender } from "../host/senders.mjs";
+import { cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { WorkflowEntrypoint } from "cloudflare:workers";
 import { NonRetryableError } from "cloudflare:workflows";
 //#region src/cloudflare/runner.ts
@@ -13,7 +14,8 @@ import { NonRetryableError } from "cloudflare:workflows";
 * subscribe/unsubscribe write the subscription table inside durable steps (the
 * router wakes instances from that table); waitForWake parks on CF's
 * waitForEvent, which signals a timeout by throwing — and so does every other
-* failure in there, so only the clock can tell them apart (see wakeExpired).
+* failure in there, so only the clock, against the checkpointed deadline, can
+* tell them apart (see wakeExpired).
 */
 var CfEngineStep = class {
 	step;
@@ -29,14 +31,19 @@ var CfEngineStep = class {
 	/**
 	* A failure a retry would only repeat (`isRetryable`: a template refusing its props, the
 	* contract refusing an emitted event, a provider rejecting the request) ends the step at
-	* once instead of burning the retry budget.
+	* once instead of burning the retry budget. The engine recognizes a NonRetryableError by its
+	* `name`, so the original's name is not written over it — the original travels as `cause`.
 	*/
 	do(name, fn) {
 		return this.step.do(name, async () => {
 			try {
 				return await fn();
 			} catch (error) {
-				if (error instanceof Error && !isRetryable(error)) throw new NonRetryableError(error.message, error.name);
+				if (error instanceof Error && !isRetryable(error)) {
+					const permanent = new NonRetryableError(error.message);
+					permanent.cause = error;
+					throw permanent;
+				}
 				throw error;
 			}
 		});
@@ -44,17 +51,13 @@ var CfEngineStep = class {
 	sleep(name, ms) {
 		return this.step.sleep(name, ms);
 	}
-	sleepUntil(name, timestampMs) {
-		return this.step.sleepUntil(name, timestampMs);
-	}
 	subscribe(name, events) {
 		return this.step.do(name, () => this.store.subscribe(this.instanceId, this.userId, events, Date.now()));
 	}
 	unsubscribe(name) {
 		return this.step.do(name, () => this.store.unsubscribe(this.instanceId));
 	}
-	async waitForWake(name, timeoutMs) {
-		const startedAt = Date.now();
+	async waitForWake(name, { timeoutMs, deadlineMs }) {
 		try {
 			await this.step.waitForEvent(name, {
 				type: WAKE_EVENT_TYPE,
@@ -62,7 +65,7 @@ var CfEngineStep = class {
 			});
 			return "event";
 		} catch (error) {
-			if (await this.step.do(`${name}:timed-out`, async () => wakeExpired(startedAt, timeoutMs, Date.now()))) return "timeout";
+			if (await this.step.do(`${name}:timed-out`, async () => wakeExpired(deadlineMs, Date.now()))) return "timeout";
 			throw error;
 		}
 	}
@@ -75,7 +78,7 @@ var CfEngineStep = class {
 */
 var JourneyRunner = class extends WorkflowEntrypoint {
 	/**
-	* The data plane. D1 + KV from the env by default; an app on Postgres
+	* The data plane. D1 from the env by default; an app on Postgres
 	* overrides this (and `closeStore` if its client needs closing):
 	*
 	*   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }
@@ -85,6 +88,18 @@ var JourneyRunner = class extends WorkflowEntrypoint {
 	}
 	/** Called once `run` is over, success or not — release whatever `createStore` opened. */
 	async closeStore(_store) {}
+	adapted;
+	/**
+	* The env a run ingests its emitted events with: the Workflow binding behind the host's port,
+	* so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the
+	* host drop its wakes). Built once per instance.
+	*/
+	hostEnv() {
+		return this.adapted ??= {
+			...this.env,
+			JOURNEY: cloudflareJourneyBinding(this.env.JOURNEY)
+		};
+	}
 	/**
 	* Runtime options for this instance — typed configuration, resolved by the app (typically
 	* `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from
@@ -144,7 +159,7 @@ var JourneyRunner = class extends WorkflowEntrypoint {
 	createRunParts(store, params) {
 		return {
 			store,
-			env: this.env,
+			env: this.hostEnv(),
 			runtime: this.runtime(params),
 			messages: this.createMessageSender(),
 			actions: this.createActionInvoker(),

package/dist/cloudflare/runner.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runner.mjs","names":[],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport type { Contract } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { isRetryable } from '../engine/retry';\nimport { type JourneyRunParts, executeJourney } from '../host/execute';\nimport { LogMessageSender, WebhookMessageSender } from '../host/senders';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport type { JourneyStore } from '../store/index';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock can tell them apart (see wakeExpired).\n */\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A failure a retry would only repeat (`isRetryable`: a template refusing its props, the\n   * contract refusing an emitted event, a provider rejecting the request) ends the step at\n   * once instead of burning the retry budget.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && !isRetryable(error)) {\n          throw new NonRetryableError(error.message, error.name);\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  sleepUntil(name: string, timestampMs: number): Promise<void> {\n    return this.step.sleepUntil(name, timestampMs);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(name: string, timeoutMs: number): Promise<'event' | 'timeout'> {\n    const startedAt = Date.now();\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see\n       * wakeExpired). `startedAt` is not replay-stable, but it is read only\n       * inside the step body below, and a step body runs on the live attempt\n       * alone — a replay returns the persisted verdict without touching the\n       * clock.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(startedAt, timeoutMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 + KV from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  /**\n   * Everything one run is wired to. By default it is composed from the methods above; a host\n   * that assembles the whole set itself (journeyWorker) overrides this one instead.\n   */\n  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n    return {\n      store,\n      env: this.env,\n      runtime: this.runtime(params),\n      messages: this.createMessageSender(),\n      actions: this.createActionInvoker(),\n      contract: this.contract(),\n      validator: this.createMessageValidator(),\n      observer: this.createObserver(store),\n    };\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      const { userId } = event.payload;\n      return await executeJourney(\n        {\n          instanceId: event.instanceId,\n          params: event.payload,\n          // Trigger-event creation time: replay-stable, unlike Date.now() here\n          enteredAtMs: event.timestamp.getTime(),\n          step: new CfEngineStep(step, store, userId, event.instanceId),\n        },\n        this.createRunParts(store, event.payload)\n      );\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;CAOH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,CAAC,YAAY,KAAK,GAC9C,MAAM,IAAI,kBAAkB,MAAM,SAAS,MAAM,IAAI;IAEvD,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,WAAW,MAAc,aAAoC;EAC3D,OAAO,KAAK,KAAK,WAAW,MAAM,WAAW;CAC/C;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YAAY,MAAc,WAAiD;EAC/E,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAM;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvD,YAAY,WAAW,WAAW,KAAK,IAAI,CAAC,CAC9C,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmC,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAO,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;;;;;;;;;;;;CAajE,QAAkB,SAA+C;EAC/D,OAAO,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAI,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAI,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAI,sBAAsB,KAAK,QAAQ,CAAC;CACjD;;;;;CAMA,eAAyB,OAAqB,QAAwC;EACpF,OAAO;GACL;GACA,KAAK,KAAK;GACV,SAAS,KAAK,QAAQ,MAAM;GAC5B,UAAU,KAAK,oBAAoB;GACnC,SAAS,KAAK,oBAAoB;GAClC,UAAU,KAAK,SAAS;GACxB,WAAW,KAAK,uBAAuB;GACvC,UAAU,KAAK,eAAe,KAAK;EACrC;CACF;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,MAAM,EAAE,WAAW,MAAM;GACzB,OAAO,MAAM,eACX;IACE,YAAY,MAAM;IAClB,QAAQ,MAAM;IAEd,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;GAC9D,GACA,KAAK,eAAe,OAAO,MAAM,OAAO,CAC1C;EACF,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;AACF"}
+{"version":3,"file":"runner.mjs","names":[],"sources":["../../src/cloudflare/runner.ts"],"sourcesContent":["import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';\nimport { NonRetryableError } from 'cloudflare:workflows';\nimport type { Contract } from '../contract';\nimport { type RegisteredAction, RegistryActionInvoker } from '../engine/actions';\nimport type {\n  ActionInvoker,\n  EngineStep,\n  JourneyObserver,\n  JourneyOutcome,\n  MessageSender,\n  MessageValidator,\n} from '../engine/ports';\nimport { isRetryable } from '../engine/retry';\nimport { type JourneyRunParts, executeJourney } from '../host/execute';\nimport { type JourneyEnv, type JourneyParams, WAKE_EVENT_TYPE } from '../host/platform';\nimport { LogMessageSender, WebhookMessageSender } from '../host/senders';\nimport { type JourneyRuntimeOptions, resolveRuntime } from '../runtime';\nimport type { JourneyStore } from '../store/index';\nimport { cloudflareJourneyBinding, wakeExpired } from './bindings';\nimport { d1Store } from './d1-env';\n\n/**\n * Adapts CF's WorkflowStep to EngineStep.\n * subscribe/unsubscribe write the subscription table inside durable steps (the\n * router wakes instances from that table); waitForWake parks on CF's\n * waitForEvent, which signals a timeout by throwing — and so does every other\n * failure in there, so only the clock, against the checkpointed deadline, can\n * tell them apart (see wakeExpired).\n */\nclass CfEngineStep implements EngineStep {\n  constructor(\n    private readonly step: WorkflowStep,\n    private readonly store: JourneyStore,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  /**\n   * A failure a retry would only repeat (`isRetryable`: a template refusing its props, the\n   * contract refusing an emitted event, a provider rejecting the request) ends the step at\n   * once instead of burning the retry budget. The engine recognizes a NonRetryableError by its\n   * `name`, so the original's name is not written over it — the original travels as `cause`.\n   */\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.step.do(name, async () => {\n      try {\n        return await fn();\n      } catch (error) {\n        if (error instanceof Error && !isRetryable(error)) {\n          const permanent = new NonRetryableError(error.message);\n          permanent.cause = error;\n          throw permanent;\n        }\n        throw error;\n      }\n    });\n  }\n\n  sleep(name: string, ms: number): Promise<void> {\n    return this.step.sleep(name, ms);\n  }\n\n  subscribe(name: string, events: readonly string[]): Promise<void> {\n    // Idempotent in the store: the interpreter re-subscribes on every wait\n    // attempt (one-shot-callback contract) and registrations persist here.\n    return this.step.do(name, () =>\n      this.store.subscribe(this.instanceId, this.userId, events, Date.now())\n    );\n  }\n\n  unsubscribe(name: string): Promise<void> {\n    return this.step.do(name, () => this.store.unsubscribe(this.instanceId));\n  }\n\n  async waitForWake(\n    name: string,\n    { timeoutMs, deadlineMs }: { timeoutMs: number; deadlineMs: number }\n  ): Promise<'event' | 'timeout'> {\n    try {\n      await this.step.waitForEvent(name, { type: WAKE_EVENT_TYPE, timeout: timeoutMs });\n      return 'event';\n    } catch (error) {\n      /*\n       * Only the deadline can tell a real timeout from a failure (see wakeExpired). The\n       * deadline is the interpreter's checkpoint, so the verdict is the same on the attempt\n       * that parked and on a replay after an eviction — which is where the wait usually\n       * resurfaces: the instance is rebuilt, the wait is already over, and the first thing to\n       * run is this step. The verdict is checkpointed too, so later replays reuse it.\n       */\n      const timedOut = await this.step.do(`${name}:timed-out`, async () =>\n        wakeExpired(deadlineMs, Date.now())\n      );\n      if (timedOut) return 'timeout';\n      throw error;\n    }\n  }\n}\n\n/**\n * The generic journey executor: one class runs every workflow, because IR is\n * data. It is loaded from the store by the contentHash pinned at entry —\n * content addressing makes it immutable, so reading it outside a step is\n * replay-safe.\n */\nexport class JourneyRunner extends WorkflowEntrypoint<JourneyEnv, JourneyParams> {\n  /**\n   * The data plane. D1 from the env by default; an app on Postgres\n   * overrides this (and `closeStore` if its client needs closing):\n   *\n   *   protected override createStore() { return new PostgresJourneyStore(client(this.env)); }\n   */\n  protected createStore(): JourneyStore {\n    return d1Store(this.env);\n  }\n\n  /** Called once `run` is over, success or not — release whatever `createStore` opened. */\n  protected async closeStore(_store: JourneyStore): Promise<void> {}\n\n  private adapted: JourneyEnv | undefined;\n\n  /**\n   * The env a run ingests its emitted events with: the Workflow binding behind the host's port,\n   * so an instance the platform no longer knows answers `InstanceNotFoundError` (what lets the\n   * host drop its wakes). Built once per instance.\n   */\n  protected hostEnv(): JourneyEnv {\n    return (this.adapted ??= { ...this.env, JOURNEY: cloudflareJourneyBinding(this.env.JOURNEY) });\n  }\n\n  /**\n   * Runtime options for this instance — typed configuration, resolved by the app (typically\n   * `resolveRuntime(config.runtime, mode)` over its workflow.config.ts, with the mode coming from\n   * an ENVIRONMENT var). The instance params are passed so the decision can also be per user:\n   * a tester account in production can run in fast-forward while everyone else runs in real\n   * time. Defaults: real time, quiet.\n   *\n   *   protected override runtime({ userId }) {\n   *     return resolveRuntime(workflowConfig.runtime, isTester(userId) ? 'test' : this.env.ENVIRONMENT);\n   *   }\n   */\n  protected runtime(_params: JourneyParams): JourneyRuntimeOptions {\n    return resolveRuntime(undefined, 'production');\n  }\n\n  /**\n   * Message outlet; an app overrides this to plug in real channels (say\n   * an EmailSender over a transport with a react-email renderer). By default it picks the webhook\n   * or logging sender based on the environment.\n   */\n  protected createMessageSender(): MessageSender {\n    return this.env.MESSAGE_WEBHOOK_URL\n      ? new WebhookMessageSender(this.env.MESSAGE_WEBHOOK_URL)\n      : new LogMessageSender();\n  }\n\n  /**\n   * Custom-action registry; an app overrides this returning the same\n   * `action(...)` objects its workflows reference (an ActionRef is a\n   * RegisteredAction structurally) — the code plane of the dual-plane model:\n   *\n   *   protected override actions() { return [syncCrm, issueCoupon]; }\n   */\n  protected actions(): readonly RegisteredAction[] {\n    return [];\n  }\n\n  /**\n   * The contract events this journey emits (`.sendEvent()`) are checked\n   * against, exactly like ingest; journeyWorker passes its config's.\n   */\n  protected contract(): Contract | undefined {\n    return undefined;\n  }\n\n  /**\n   * Template props check before every send; an app overrides this with\n   * `registryValidator({ emails, pushes })` (journeyWorker does it from its\n   * registries). By default props go out as resolved.\n   */\n  protected createMessageValidator(): MessageValidator | undefined {\n    return undefined;\n  }\n\n  /**\n   * Reporting hooks: node arrivals, every copy sent, how each instance ended. The host stores\n   * what it needs for its dashboards; by default nothing is reported.\n   */\n  protected createObserver(_store: JourneyStore): JourneyObserver | undefined {\n    return undefined;\n  }\n\n  /** Override for a different version policy ('warn' by default) or a fully custom invoker (e.g. webhook degradation for hosted tenants). */\n  protected createActionInvoker(): ActionInvoker {\n    return new RegistryActionInvoker(this.actions());\n  }\n\n  /**\n   * Everything one run is wired to. By default it is composed from the methods above; a host\n   * that assembles the whole set itself (journeyWorker) overrides this one instead.\n   */\n  protected createRunParts(store: JourneyStore, params: JourneyParams): JourneyRunParts {\n    return {\n      store,\n      env: this.hostEnv(),\n      runtime: this.runtime(params),\n      messages: this.createMessageSender(),\n      actions: this.createActionInvoker(),\n      contract: this.contract(),\n      validator: this.createMessageValidator(),\n      observer: this.createObserver(store),\n    };\n  }\n\n  async run(event: WorkflowEvent<JourneyParams>, step: WorkflowStep): Promise<JourneyOutcome> {\n    const store = this.createStore();\n    try {\n      const { userId } = event.payload;\n      return await executeJourney(\n        {\n          instanceId: event.instanceId,\n          params: event.payload,\n          // Trigger-event creation time: replay-stable, unlike Date.now() here\n          enteredAtMs: event.timestamp.getTime(),\n          step: new CfEngineStep(step, store, userId, event.instanceId),\n        },\n        this.createRunParts(store, event.payload)\n      );\n    } finally {\n      await this.closeStore(store);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,IAAM,eAAN,MAAyC;CAEpB;CACA;CACA;CACA;CAJnB,YACE,MACA,OACA,QACA,YACA;EAJiB,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;;;;;;;CAQH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,KAAK,GAAG,MAAM,YAAY;GACpC,IAAI;IACF,OAAO,MAAM,GAAG;GAClB,SAAS,OAAO;IACd,IAAI,iBAAiB,SAAS,CAAC,YAAY,KAAK,GAAG;KACjD,MAAM,YAAY,IAAI,kBAAkB,MAAM,OAAO;KACrD,UAAU,QAAQ;KAClB,MAAM;IACR;IACA,MAAM;GACR;EACF,CAAC;CACH;CAEA,MAAM,MAAc,IAA2B;EAC7C,OAAO,KAAK,KAAK,MAAM,MAAM,EAAE;CACjC;CAEA,UAAU,MAAc,QAA0C;EAGhE,OAAO,KAAK,KAAK,GAAG,YAClB,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC,CACvE;CACF;CAEA,YAAY,MAA6B;EACvC,OAAO,KAAK,KAAK,GAAG,YAAY,KAAK,MAAM,YAAY,KAAK,UAAU,CAAC;CACzE;CAEA,MAAM,YACJ,MACA,EAAE,WAAW,cACiB;EAC9B,IAAI;GACF,MAAM,KAAK,KAAK,aAAa,MAAM;IAAE,MAAM;IAAiB,SAAS;GAAU,CAAC;GAChF,OAAO;EACT,SAAS,OAAO;GAWd,IAAI,MAHmB,KAAK,KAAK,GAAG,GAAG,KAAK,aAAa,YACvD,YAAY,YAAY,KAAK,IAAI,CAAC,CACpC,GACc,OAAO;GACrB,MAAM;EACR;CACF;AACF;;;;;;;AAQA,IAAa,gBAAb,cAAmC,mBAA8C;;;;;;;CAO/E,cAAsC;EACpC,OAAO,QAAQ,KAAK,GAAG;CACzB;;CAGA,MAAgB,WAAW,QAAqC,CAAC;CAEjE;;;;;;CAOA,UAAgC;EAC9B,OAAQ,KAAK,YAAY;GAAE,GAAG,KAAK;GAAK,SAAS,yBAAyB,KAAK,IAAI,OAAO;EAAE;CAC9F;;;;;;;;;;;;CAaA,QAAkB,SAA+C;EAC/D,OAAO,eAAe,KAAA,GAAW,YAAY;CAC/C;;;;;;CAOA,sBAA+C;EAC7C,OAAO,KAAK,IAAI,sBACZ,IAAI,qBAAqB,KAAK,IAAI,mBAAmB,IACrD,IAAI,iBAAiB;CAC3B;;;;;;;;CASA,UAAiD;EAC/C,OAAO,CAAC;CACV;;;;;CAMA,WAA2C,CAE3C;;;;;;CAOA,yBAAiE,CAEjE;;;;;CAMA,eAAyB,QAAmD,CAE5E;;CAGA,sBAA+C;EAC7C,OAAO,IAAI,sBAAsB,KAAK,QAAQ,CAAC;CACjD;;;;;CAMA,eAAyB,OAAqB,QAAwC;EACpF,OAAO;GACL;GACA,KAAK,KAAK,QAAQ;GAClB,SAAS,KAAK,QAAQ,MAAM;GAC5B,UAAU,KAAK,oBAAoB;GACnC,SAAS,KAAK,oBAAoB;GAClC,UAAU,KAAK,SAAS;GACxB,WAAW,KAAK,uBAAuB;GACvC,UAAU,KAAK,eAAe,KAAK;EACrC;CACF;CAEA,MAAM,IAAI,OAAqC,MAA6C;EAC1F,MAAM,QAAQ,KAAK,YAAY;EAC/B,IAAI;GACF,MAAM,EAAE,WAAW,MAAM;GACzB,OAAO,MAAM,eACX;IACE,YAAY,MAAM;IAClB,QAAQ,MAAM;IAEd,aAAa,MAAM,UAAU,QAAQ;IACrC,MAAM,IAAI,aAAa,MAAM,OAAO,QAAQ,MAAM,UAAU;GAC9D,GACA,KAAK,eAAe,OAAO,MAAM,OAAO,CAC1C;EACF,UAAU;GACR,MAAM,KAAK,WAAW,KAAK;EAC7B;CACF;AACF"}