@sinestack/workflow-world-cloudflare 0.0.0-stage → 0.1.1-oidc.0

package/LICENSE.workflow.txt

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        <http://www.apache.org/licenses/>
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2025 Vercel Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,33 @@
-# Temporary Holding Version
+# Cloudflare Workflow World
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Maintained source adaptation of vercel/workflow PR #4682 at `a555966986af83b94cb77d1d427dfdb18a2732cc`, using `workflow` / `@workflow/core` 5.2.3, World 5.0.5, errors 5.0.5, utils 5.0.2 and QuickJS WASI 3.4.0. See `THIRD_PARTY_NOTICES.md`, `SOURCE_ORIGINS.json` and `LICENSE.workflow.txt`.
+
+## Host contract
+
+At module scope call `setupCloudflareWorld({ deploymentId, createFlowRoute, setWorld, quickjs, deliveryTimeoutMs? })`. It returns the actual SDK `World`, installs the static QuickJS compiled-assets singleton and passes that World to `setWorld`. `createFlowRoute` must create a fresh SDK route from the build-generated workflow code, not return a shared previously created handler. `quickjs` contains compiled `WebAssembly.Module` values for `quickjs`, `encoding`, `headers`, `url`, and `structuredClone`. Export `RunObject`, `TokenObject`, `StreamObject`, and the named Worker entrypoint `StepRunner` from the host module.
+
+Bindings are `WORKFLOW_RUNS`, `WORKFLOW_TOKENS`, `WORKFLOW_STREAMS`, all using SQLite-backed Durable Object namespaces. Configure `nodejs_compat`, `enable_ctx_exports`, `WORKFLOW_VM=quickjs`, and a `WORKFLOW_ENCRYPTION_SECRET` containing base64-encoded 32 random bytes. The secret is required and must remain stable for the lifetime of the release's runs. It is read from the current Cloudflare environment; neither namespaces nor request environment are captured at setup. `createCloudflareWorld()` is exported for another caller needing the same configured runtime.
+
+Workers storage/RPC types are explicit type-only imports from `@cloudflare/workers-types`; do not add a global triple-slash reference in this mixed DOM/Node repository. The narrow `cloudflare:workers` declarations forward official runtime export types and complement the host's existing `DurableObject` declaration.
+
+`deploymentId` identifies an immutable executor build. Deploy each release to a distinct Worker service and distinct DO namespaces; retain the old executor and its secrets until its runs drain. The adapter does not select a newer release or migrate old code. The trusted host selects the release-specific service. Wrong-release creation, enqueue and invoke reject with `DEPLOYMENT_MISMATCH`; already persisted mismatched runs receive a `run_failed` event with that error code instead of remaining indefinitely held.
+
+## Durable behavior
+
+Each run has a serialized event-mutation boundary, a dense 1-based event-slot journal and an in-memory projection reconstructed exclusively from its committed log. Multiple events appended by a store operation persist in one synchronous transaction. Stale writers receive the skipped committed slots. Cross-run hook token ownership uses serialized claims plus the run's liveness fence; hook disposal and terminal events remove the projected hook. Required hook lookup/listing, run reads/listing, steps, events, streams and queue methods are implemented. Run cancellation and hook disposal use SDK events rather than separate mutable entity APIs.
+
+`runs.list` and unscoped `hooks.list` use a durable ID directory in the reserved `directory:runs` object inside `WORKFLOW_RUNS`, then read authoritative entities from each run. Registration precedes run creation; an interrupted registration cannot hide a committed run. This is a correct small-deployment operational listing, not an indexed analytics service: scanning all runs incurs proportional RPC and memory costs and can encounter Worker subrequest limits. Keep analytics and high-volume operator querying outside this adapter until a separately designed indexed backend is provided.
+
+Queue signals and idempotency references persist before acknowledgment with an alarm backstop. Duplicate wakes for terminal runs are ignored. Flow delivery is single-runner; queued steps use separate named Worker RPC invocations. Retry attempts use capped exponential backoff and park after 100 failed/interrupted attempts. `RunObject.inspect()` exposes parked reasons for operator inspection. `RunObject.reset()` is a trusted RPC eviction hook; do not expose these methods through public HTTP.
+
+Delivery defaults to 120 seconds and can be configured with `deliveryTimeoutMs`. On timeout the run object stops scheduling new work, persists the retry/backoff, arms an alarm, flushes storage, then aborts the instance. Its successor creates a fresh route and reconstructs the journal; an old never-settling handler cannot keep the new runner permanently busy. A step Worker RPC itself cannot be forcibly cancelled by the owning DO. Host effect execution must therefore have a shorter bounded deadline and a durable phase/lease ledger that reconciles uncertain effects; a timeout is never proof that an external effect did not occur. Each consumer runtime owns that ledger, not the World.
+
+Snapshots store the SDK metadata+bytes envelope transactionally in bounded chunks. Streams preserve ordered chunks, closure, negative indexes and polling readers. Encryption protects SDK payloads and snapshots; metadata, IDs and operational state remain available to trusted namespace access.
+
+Explicit invocation idempotency keys use a per-key singleflight boundary. Hook receipt, accepted outcome and wake signal commit together; the journal's resume identity survives cold reconstruction. A cached accepted reply repairs wake publication rather than re-executing the input handler. This does not advertise the wider optional SDK hook-retention/force-claim contract.
+
+## Capabilities and verification
+
+`invoke` is supported. Optional batch writes, retained/force-claimed/deduplicated hooks, dynamic user-supplied workflow code, analytics, attribute updates and long-poll run status are not advertised. Their absence is intentional, not a throwing required-method stub. Runtime replay continues to use the conservative SDK paths.
+
+This package exports TypeScript source and needs no standalone build. `@sinestack/workflow-sdk/build` owns bundling, static Wasm imports and pinned compatibility transforms; each consumer supplies deployment bindings and effect-code identity inputs. Journal/dense-slot/replay and delivery-deadline regressions run in the root test gate. `packages/sdk/test/cloudflare.test.ts` runs the actual SDK/QuickJS executor and an offline product-ledger fixture in workerd with SQLite persistence and private bindings, restarts both workers, and verifies one effect and one terminal state. SinePowers retains its product-specific Firecrawl/usage integration test. This does not establish live provider or cloud deployment verification. The pinned SDK QuickJS singleton is an internal API: changing SDK versions requires re-review, not a floating dependency update.

package/SOURCE_ORIGINS.json

@@ -0,0 +1,92 @@
+{
+  "repository": "https://github.com/vercel/workflow",
+  "pullRequest": 4682,
+  "commit": "a555966986af83b94cb77d1d427dfdb18a2732cc",
+  "license": "Apache-2.0",
+  "licenseFile": "LICENSE.workflow.txt",
+  "files": [
+    {
+      "path": "packages/world-cloudflare/src/cloudflare.d.ts",
+      "upstreamPath": "packages/world-cloudflare/src/cloudflare.d.ts",
+      "upstreamSha256": "6c5d246048bd24759e9c95c03e4e974010b562be0148a80909d5e26187bb1f12",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/cloudflare.d.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/encryption.ts",
+      "upstreamPath": "packages/world-cloudflare/src/encryption.ts",
+      "upstreamSha256": "f6c7639322ab7a4ad9f107fc7206d561ce2d21a131dbc48094331d61b96bcf80",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/encryption.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/index.ts",
+      "upstreamPath": "packages/world-cloudflare/src/index.ts",
+      "upstreamSha256": "664942902f71e9ddd49aadd1f27497f4bfbe690d041e7967807f75a968aaf087",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/index.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/quickjs.ts",
+      "upstreamPath": "packages/world-cloudflare/src/quickjs.ts",
+      "upstreamSha256": "dee6ec4a9572ac0597fe02fd63d0f0773c785a1ef60301ab2cb8ae1373759a54",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/quickjs.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/rpc.ts",
+      "upstreamPath": "packages/world-cloudflare/src/rpc.ts",
+      "upstreamSha256": "82fd48fd50b611218edfd255d242dc8bb863af17177e97b5fdfb06f137a7b33f",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/rpc.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/run-object.ts",
+      "upstreamPath": "packages/world-cloudflare/src/run-object.ts",
+      "upstreamSha256": "148a55eb1c89cccf181810258e646b815c47755f20cd56da8a0dd27a16af1ab2",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/run-object.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/runtime.ts",
+      "upstreamPath": "packages/world-cloudflare/src/runtime.ts",
+      "upstreamSha256": "c77696eced96f0a2a87417596242b9be491c9b993211d3efb8830dfc340f6e47",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/runtime.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/step-runner.ts",
+      "upstreamPath": "packages/world-cloudflare/src/step-runner.ts",
+      "upstreamSha256": "ef16b5f3a2209975dea0ddf6b64ae06215dbc3b5d41b76e9f6ec3372935599a2",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/step-runner.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/stream-object.ts",
+      "upstreamPath": "packages/world-cloudflare/src/stream-object.ts",
+      "upstreamSha256": "58ae1ad44fbde0631be5ae45de09d9286a91598b694f7fd7c0d7c0780fb00dec",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/stream-object.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/token-object.ts",
+      "upstreamPath": "packages/world-cloudflare/src/token-object.ts",
+      "upstreamSha256": "76f244be433546dbb94f284ad79842b8140e07622baff6c6d2be04faa09ad6d6",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/token-object.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/world.ts",
+      "upstreamPath": "packages/world-cloudflare/src/world.ts",
+      "upstreamSha256": "cee256e538fa1f44e10aa2d3649cbd1b2ca1244d4c5408b27d3046d60cef95f5",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-cloudflare/src/world.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/store/ids.ts",
+      "upstreamPath": "packages/world-sim/src/ids.ts",
+      "upstreamSha256": "0b993eea898d7bba23758f2a03e9aa014e21913b78aa740d24d8a59fa626b4c2",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-sim/src/ids.ts"
+    },
+    {
+      "path": "packages/world-cloudflare/src/store/store.ts",
+      "upstreamPath": "packages/world-sim/src/store.ts",
+      "upstreamSha256": "3f214bc677c4f5d19ab00e62a689018552415d602b6f4631f397ecec8bad9faf",
+      "url": "https://github.com/vercel/workflow/blob/a555966986af83b94cb77d1d427dfdb18a2732cc/packages/world-sim/src/store.ts"
+    }
+  ],
+  "extractedFrom": {
+    "repository": "https://github.com/fei-bai-inc/sine-powers",
+    "commit": "09f80f7463c07f17bc53ad7a80717214433b9211",
+    "path": "packages/workflow-cloudflare"
+  }
+}

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,15 @@
+# Third-party notices
+
+This package adapts selected source from [vercel/workflow PR #4682](https://github.com/vercel/workflow/pull/4682), exact commit [`a555966986af83b94cb77d1d427dfdb18a2732cc`](https://github.com/vercel/workflow/tree/a555966986af83b94cb77d1d427dfdb18a2732cc).
+
+Upstream project: Workflow Development Kit, Vercel, Inc. Licensed under Apache License 2.0. The complete upstream license is preserved in `LICENSE.workflow.txt`. `SOURCE_ORIGINS.json` identifies every imported source file, its exact source URL, and the SHA-256 of the unmodified fetched source.
+
+Imported scope is `packages/world-cloudflare/src` and only `packages/world-sim/src/store.ts` plus its `ids.ts` dependency. The monorepo and simulator runtime were not imported. The former simulator store is maintained here as the production journal projection, `createJournalStore`; Durable Objects own its serialized write boundary, transactional journal, cold reconstruction, token registry, and durable alarms.
+
+Local modifications include strict SDK/Workers typing; real required World listing methods; required environment-bound encryption; bounded delivery with durable restart; explicit deployment mismatch errors; terminal queue deduplication; transactional streams and snapshots; removal of simulator fault injection and fake Workers ambient declarations; and behavior-test sources. `src/directory.ts` and the tests are local additions.
+
+QuickJS is supplied by pinned `quickjs-wasi@3.4.0` through its own package license. This package does not copy its Wasm binaries: the host statically imports them through the SDK build. Pinned SDK packages retain their distributed licenses and notices.
+
+The shared `@sinestack/workflow-sdk` source `packages/sdk/src/compatibility.ts` maintains the pinned SDK build adaptation for lazy compute-instance identity, based on upstream's lazy initialization fix. It is part of host bundling rather than a second World or a mutable runtime-code loader.
+
+The maintained adaptation was extracted from SinePowers commit `09f80f7463c07f17bc53ad7a80717214433b9211` into `fei-bai-inc/workflow`. Consumers install its generated package artifacts; no consumer-maintained source fork is required.

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "@sinestack/workflow-world-cloudflare",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1-oidc.0",
+  "type": "module",
+  "license": "Apache-2.0",
+  "description": "Durable Object workflow journal, recovery and private execution for Cloudflare Workers.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fei-bai-inc/workflow.git",
+    "directory": "packages/world-cloudflare"
+  },
+  "homepage": "https://github.com/fei-bai-inc/workflow/tree/main/packages/world-cloudflare#readme",
+  "bugs": {
+    "url": "https://github.com/fei-bai-inc/workflow/issues"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org"
+  },
+  "exports": {
+    ".": "./src/index.ts",
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@cloudflare/workers-types": "5.20261006.1",
+    "@workflow/core": "5.2.3",
+    "@workflow/errors": "5.0.5",
+    "@workflow/utils": "5.0.2",
+    "@workflow/world": "5.0.5",
+    "quickjs-wasi": "3.4.0",
+    "ulid": "3.0.1",
+    "workflow": "5.2.3"
+  },
+  "files": [
+    "src",
+    "README.md",
+    "THIRD_PARTY_NOTICES.md",
+    "LICENSE.workflow.txt",
+    "SOURCE_ORIGINS.json"
+  ]
 }

package/src/cloudflare.d.ts

@@ -0,0 +1,6 @@
+/** Bind only runtime module exports to their official types; retain DOM/Node globals. */
+declare module 'cloudflare:workers' {
+  export const DurableObject: typeof import('@cloudflare/workers-types').CloudflareWorkersModule.DurableObject;
+  export const WorkerEntrypoint: typeof import('@cloudflare/workers-types').CloudflareWorkersModule.WorkerEntrypoint;
+  export const env: typeof import('@cloudflare/workers-types').CloudflareWorkersModule.env;
+}

package/src/directory.ts

@@ -0,0 +1,71 @@
+import { WorkflowRunNotFoundError, WorkflowWorldError } from '@workflow/errors';
+import type { Hook, ListHooksParams, ListWorkflowRunsParams, PaginatedResponse, PaginationOptions, WorkflowRun, WorkflowRunWithoutData } from '@workflow/world';
+import { call, RUNS_BINDING } from './rpc.ts';
+
+/** Reserved object in the release's WORKFLOW_RUNS namespace. Only IDs live here. */
+export const DIRECTORY_NAME = 'directory:runs';
+
+export async function registerRun(runId: string): Promise<void> {
+  await call(RUNS_BINDING, DIRECTORY_NAME, 'registerRun', runId);
+}
+
+async function* runIds(): AsyncGenerator<string> {
+  let cursor: string | undefined;
+  do {
+    const page = await call<{ ids: string[]; cursor: string | null }>(
+      RUNS_BINDING, DIRECTORY_NAME, 'listRunIds', cursor,
+    );
+    yield* page.ids;
+    cursor = page.cursor ?? undefined;
+  } while (cursor !== undefined);
+}
+
+function paginate<T extends { createdAt: Date }>(rows: T[], id: (row: T) => string, options?: PaginationOptions): PaginatedResponse<T> {
+  const limit = options?.limit ?? 20;
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 1000) {
+    throw new WorkflowWorldError('Pagination limit must be between 1 and 1000', { status: 400 });
+  }
+  const key = (row: T) => `${new Date(row.createdAt).toISOString()}|${id(row)}`;
+  const asc = options?.sortOrder === 'asc';
+  rows.sort((a, b) => (key(a) < key(b) ? -1 : key(a) > key(b) ? 1 : 0) * (asc ? 1 : -1));
+  const cursor = options?.cursor;
+  const eligible = cursor ? rows.filter(row => asc ? key(row) > cursor : key(row) < cursor) : rows;
+  const data = eligible.slice(0, limit);
+  const last = data.at(-1);
+  return { data, hasMore: eligible.length > limit, cursor: last ? key(last) : null };
+}
+
+export function listRuns(params: ListWorkflowRunsParams & { resolveData: 'none' }): Promise<PaginatedResponse<WorkflowRunWithoutData>>;
+export function listRuns(params?: ListWorkflowRunsParams & { resolveData?: 'all' }): Promise<PaginatedResponse<WorkflowRun>>;
+export function listRuns(params?: ListWorkflowRunsParams): Promise<PaginatedResponse<WorkflowRun | WorkflowRunWithoutData>>;
+export async function listRuns(params?: ListWorkflowRunsParams): Promise<PaginatedResponse<WorkflowRun | WorkflowRunWithoutData>> {
+  const rows: (WorkflowRun | WorkflowRunWithoutData)[] = [];
+  for await (const id of runIds()) {
+    try {
+      const run = await call<WorkflowRun | WorkflowRunWithoutData>(RUNS_BINDING, id, 'call', 'runsGet', [id, { resolveData: params?.resolveData ?? 'all' }]);
+      if (params?.workflowName !== undefined && run.workflowName !== params.workflowName) continue;
+      if (params?.status !== undefined && !(Array.isArray(params.status) ? params.status.includes(run.status) : run.status === params.status)) continue;
+      rows.push(run);
+    } catch (error) {
+      // IDs register before run creation: an interrupted creation is not a run.
+      if (!WorkflowRunNotFoundError.is(error)) throw error;
+    }
+  }
+  return paginate(rows, run => run.runId, params?.pagination);
+}
+
+export async function listAllHooks(params: ListHooksParams): Promise<PaginatedResponse<Hook>> {
+  const rows: Hook[] = [];
+  for await (const id of runIds()) {
+    let cursor: string | undefined;
+    do {
+      const page = await call<PaginatedResponse<Hook>>(RUNS_BINDING, id, 'call', 'hooksList', [{
+        runId: id, resolveData: params.resolveData ?? 'all',
+        pagination: { limit: 1000, sortOrder: 'asc', ...(cursor ? { cursor } : {}) },
+      }]);
+      rows.push(...page.data);
+      cursor = page.hasMore ? page.cursor ?? undefined : undefined;
+    } while (cursor !== undefined);
+  }
+  return paginate(rows, hook => hook.hookId, params.pagination);
+}

package/src/encryption.ts

@@ -0,0 +1,50 @@
+/**
+ * Per-run encryption keys: HKDF-SHA256 over a Worker secret, with the run id
+ * as context, the same construction `@workflow/world-vercel` uses with its
+ * deployment key. Core encrypts run payloads with the key and, because a run
+ * has one, also encrypts VM snapshots (it refuses to store them unencrypted).
+ *
+ * The required secret is `WORKFLOW_ENCRYPTION_SECRET` (base64, 32 bytes).
+ * Read the current Workers binding on every call so binding overrides and
+ * environment selection cannot reuse another environment's cached secret.
+ */
+import type { WorkflowRun } from '@workflow/world';
+import { env } from 'cloudflare:workers';
+
+function secretBytes(): Uint8Array<ArrayBuffer> {
+  const raw: unknown = Reflect.get(env, 'WORKFLOW_ENCRYPTION_SECRET');
+  if (typeof raw !== 'string' || raw.length === 0) {
+    throw new Error('WORKFLOW_ENCRYPTION_SECRET is required');
+  }
+  let decoded: string;
+  try {
+    decoded = atob(raw);
+  } catch {
+    throw new Error('WORKFLOW_ENCRYPTION_SECRET must be 32 bytes of base64');
+  }
+  if (decoded.length !== 32) {
+    throw new Error('WORKFLOW_ENCRYPTION_SECRET must be 32 bytes of base64');
+  }
+  return Uint8Array.from(decoded, (character) => character.charCodeAt(0));
+}
+
+export async function getEncryptionKeyForRun(
+  run: WorkflowRun | string
+): Promise<Uint8Array<ArrayBuffer>> {
+  const secret = secretBytes();
+  const runId = typeof run === 'string' ? run : run.runId;
+  const base = await crypto.subtle.importKey('raw', secret, 'HKDF', false, [
+    'deriveBits',
+  ]);
+  const bits = await crypto.subtle.deriveBits(
+    {
+      name: 'HKDF',
+      hash: 'SHA-256',
+      salt: new Uint8Array(32),
+      info: new TextEncoder().encode(`workflow-cloudflare|${runId}`),
+    },
+    base,
+    256
+  );
+  return new Uint8Array(bits);
+}

package/src/index.ts

@@ -0,0 +1,53 @@
+/// <reference path="./cloudflare.d.ts" />
+/**
+ * Maintained Cloudflare Workflow World: each workflow run is a Durable Object
+ * that owns its journal and executes its pinned workflow build.
+ *
+ * A Worker using it must:
+ *  - call `setupCloudflareWorld()` at module scope with its build's
+ *    deployment id, the generated workflow route, and the QuickJS modules;
+ *  - re-export `RunObject`, `TokenObject`, `StreamObject` and `StepRunner`
+ *    from its entrypoint, bound as `WORKFLOW_RUNS`, `WORKFLOW_TOKENS` and
+ *    `WORKFLOW_STREAMS`;
+ *  - run with `WORKFLOW_VM=quickjs` and the `nodejs_compat` and
+ *    `enable_ctx_exports` compatibility flags.
+ */
+import { installQuickJSModules, type QuickJSModules } from './quickjs.ts';
+import { configureRuntime, type FlowRoute } from './runtime.ts';
+import { createCloudflareWorld } from './world.ts';
+
+export { RunObject } from './run-object.ts';
+export { StepRunner } from './step-runner.ts';
+export { StreamObject } from './stream-object.ts';
+export { TokenObject } from './token-object.ts';
+export { createCloudflareWorld };
+export type { QuickJSModules };
+
+export interface SetupOptions {
+  deploymentId: string;
+  /** `createFlowRoute` from the statically generated workflow bundle. */
+  createFlowRoute: () => FlowRoute;
+  quickjs: QuickJSModules;
+  /** Default 120 seconds. Must exceed the host's bounded step-effect budget. */
+  deliveryTimeoutMs?: number;
+  /** `setWorld` from `workflow/runtime`, so the World becomes the active one. */
+  setWorld: (world: ReturnType<typeof createCloudflareWorld>) => void;
+}
+
+/** Wire the World into this isolate. Safe at module scope (no I/O). */
+export function setupCloudflareWorld(options: SetupOptions) {
+  if (!options.deploymentId.trim()) throw new Error('A nonempty immutable deploymentId is required');
+  const deliveryTimeoutMs = options.deliveryTimeoutMs ?? 120_000;
+  if (!Number.isSafeInteger(deliveryTimeoutMs) || deliveryTimeoutMs < 1000) {
+    throw new Error('deliveryTimeoutMs must be an integer of at least 1000');
+  }
+  installQuickJSModules(options.quickjs);
+  configureRuntime({
+    deploymentId: options.deploymentId,
+    createFlowRoute: options.createFlowRoute,
+    deliveryTimeoutMs,
+  });
+  const world = createCloudflareWorld();
+  options.setWorld(world);
+  return world;
+}

package/src/quickjs.ts

@@ -0,0 +1,56 @@
+/**
+ * Supply precompiled QuickJS WebAssembly modules to `@workflow/core`.
+ *
+ * Workers forbid compiling WebAssembly from bytes at runtime, which is what
+ * core does by default (`WebAssembly.compile(quickjsWasm)`). Wrangler instead
+ * compiles `.wasm`/`.so` imports at deploy time and hands the Worker
+ * `WebAssembly.Module`s. Core caches its compiled assets in a process-wide
+ * singleton; seeding that singleton with these modules makes core skip its own
+ * compile step.
+ *
+ * The singleton identity and shape mirror SDK 5.2.3's `getCompiledAssets()`.
+ * Mutate its shared state rather than replacing it: core may already hold
+ * a reference to the singleton when the Worker installs its static modules.
+ */
+import { globalSingleton } from '@workflow/utils';
+
+export interface QuickJSModules {
+  quickjs: WebAssembly.Module;
+  encoding: WebAssembly.Module;
+  headers: WebAssembly.Module;
+  url: WebAssembly.Module;
+  structuredClone: WebAssembly.Module;
+}
+
+interface CompiledAssets {
+  wasm: WebAssembly.Module;
+  extensions: {
+    name: string;
+    wasm: WebAssembly.Module;
+    initFn?: string;
+  }[];
+}
+
+const quickjsAssets = globalSingleton(
+  '@workflow/core//quickjsCompiledAssets',
+  1,
+  (): { promise: Promise<CompiledAssets> | undefined } => ({
+    promise: undefined,
+  })
+);
+
+export function installQuickJSModules(modules: QuickJSModules): void {
+  quickjsAssets.promise = Promise.resolve({
+    wasm: modules.quickjs,
+    extensions: [
+      { name: 'encoding', wasm: modules.encoding },
+      { name: 'headers', wasm: modules.headers },
+      { name: 'url', wasm: modules.url },
+      {
+        name: 'structured-clone',
+        wasm: modules.structuredClone,
+        initFn: 'qjs_ext_structured_clone_init',
+      },
+    ],
+  });
+}