@volter/twin-cloudflare 0.1.0 → 0.1.2

package/dist/src/cloudflare-common.js

@@ -3,7 +3,7 @@
 // cloudflare-twin.ts) and the provisioning slice (Workers/R2/Hyperdrive/Queues in
 // cloudflare-provisioning.ts). Pure helpers over the @volter/world-core kernel — no routes here.
 import { createHash } from 'node:crypto';
-import { applyTwinWrite, projectResources } from '@volter/world-core';
+import { applyTwinWrite, projectResources, worldNow } from '@volter/world-core';
 export const SERVICE = 'cloudflare';
 export const CLOUDFLARE_RESOURCE_TYPES = [
     'account',
@@ -133,7 +133,7 @@ export function callerEmail(req) {
 }
 /** One entry in an account's audit log, attributed to the calling token's user. */
 export async function audit(req, accountID, entry) {
-    const when = req.occurredAt ?? new Date().toISOString();
+    const when = req.occurredAt ?? worldNow();
     const id = deterministicHex(`audit:${accountID}:${when}:${entry.resource.type}:${entry.resource.id}:${rows('audit_log', req.root).length}`, 32);
     const email = callerEmail(req);
     await write('audit_log', id, 'audit_log.record', { account_id: accountID, when, action: { type: entry.type, result: true, info: '' },

package/dist/src/cloudflare-provisioning.js

@@ -17,6 +17,7 @@
 // pack's generic conventions (1004 validation, 1001 not found) everywhere else — see README
 // "Official grounding". No live probe was possible (no Cloudflare account); the OpenAPI + SDK
 // are the honest grounding ceiling for this slice.
+import { worldNow } from '@volter/world-core';
 import { createHash } from 'node:crypto';
 import { deterministicHex, failure, headers as lowerHeaders, isResponse, mint, noRoute, paginate, parseBody, readOnly, row, rows, callerEmail, audit, scopeMissing, success, uuidFrom, write, } from "./cloudflare-common.js";
 import { catchUpR2CustomDomains, connectR2CustomDomain, createR2TempCredential, r2BearerToken, r2Credential, r2ParentCovers, removeR2CustomDomain, r2CustomDomains, TEMP_PERMISSIONS, updateR2CustomDomain } from "./cloudflare-r2.js";
@@ -768,7 +769,7 @@ function buildUpload(req, url, accountID, scriptName, mode) {
  *  UUID (the shape wrangler prints as "Current Version ID"). */
 async function writeVersion(req, accountID, scriptName, scriptTag, number, content, annotations) {
     const id = mint('worker_version', `${accountID}:${scriptName}:${scriptTag}:${number}`, req.root);
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     await pwrite('worker_version', id, 'worker_version.upload', {
         account_id: accountID, script_name: scriptName, script_tag: scriptTag, number, ...content,
         source: deploySource(req), annotations, author_email: callerEmail(req) || null, created_on: at, modified_on: at, deleted: false,
@@ -779,7 +780,7 @@ function deploymentRecord(req, script, versions, annotations) {
     const count = Array.isArray(script.deployments) ? script.deployments.length : 0;
     return {
         id: uuidFrom(`${String(script.tag)}:deployment:${count}`),
-        created_on: req.occurredAt ?? new Date().toISOString(),
+        created_on: req.occurredAt ?? worldNow(),
         source: deploySource(req),
         strategy: 'percentage',
         versions,
@@ -803,7 +804,7 @@ async function uploadScript(req, url, accountID, scriptName) {
     const { existing, content } = built;
     const tag = String(existing?.tag ?? mintScriptTag(accountID, scriptName, req.root));
     const number = Number(existing?.version_count ?? 0) + 1;
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     // All validation passed — now perform the writes (migrations, the version, then the script).
     await applyMigrationPlan(accountID, scriptName, built.migrationOps, req);
     const version = await writeVersion(req, accountID, scriptName, tag, number, content, built.annotations);
@@ -989,7 +990,7 @@ async function createDeployment(req, accountID, script) {
         modules: null,
         version_id: live.id,
         deployments: [...deployments, deployment],
-        modified_on: req.occurredAt ?? new Date().toISOString(),
+        modified_on: req.occurredAt ?? worldNow(),
     }, req);
     return success(deployment);
 }
@@ -1025,7 +1026,7 @@ async function patchScriptSettings(req, accountID, script) {
         ...(body.tags !== undefined ? { tags: body.tags ?? [] } : {}),
         ...(body.tail_consumers !== undefined ? { tail_consumers: body.tail_consumers } : {}),
         ...(body.observability !== undefined ? { observability: body.observability } : {}),
-        modified_on: req.occurredAt ?? new Date().toISOString(),
+        modified_on: req.occurredAt ?? worldNow(),
     }, req);
     return success(settingsView(scriptRow(accountID, String(script.name), req.root)));
 }
@@ -1237,7 +1238,7 @@ async function workersRoute(req, method, url, parts, accountID) {
                 }
                 if (!Array.isArray(body))
                     return failure(400, 1004, 'Cron trigger update requires an array of {cron} objects');
-                const at = req.occurredAt ?? new Date().toISOString();
+                const at = req.occurredAt ?? worldNow();
                 const schedules = [];
                 for (const value of body) {
                     const item = value;
@@ -1546,7 +1547,7 @@ async function r2Route(req, method, url, parts, accountID) {
         if (accountBuckets().some((item) => item.name === body.name)) {
             return failure(409, 10004, 'The bucket you tried to create already exists, and you own it.');
         }
-        const at = req.occurredAt ?? new Date().toISOString();
+        const at = req.occurredAt ?? worldNow();
         await pwrite('r2_bucket', `${accountID}:${body.name}`, 'r2_bucket.create', {
             account_id: accountID,
             name: body.name,
@@ -1582,7 +1583,7 @@ async function r2Route(req, method, url, parts, accountID) {
         await pwrite('r2_bucket', `${accountID}:${bucketName}`, 'r2_bucket.delete', { account_id: accountID, deleted: true }, req);
         // "The specified domain will also remain connected to R2 until you remove it or delete the bucket." (public buckets)
         for (const d of r2CustomDomains(req.root).filter((x) => x.account_id === accountID && x.bucket === bucketName))
-            await removeR2CustomDomain(d.id, req.root, req.occurredAt ?? new Date().toISOString());
+            await removeR2CustomDomain(d.id, req.root, req.occurredAt ?? worldNow());
         return success({});
     }
     return noRoute();
@@ -1617,7 +1618,7 @@ async function r2TempCredentialsRoute(req, accountID) {
     const objects = list(body.objects);
     if (!prefixes || !objects)
         return failure(400, 1004, 'prefixes and objects must be lists of strings');
-    const c = await createR2TempCredential({ accountId: accountID, bucket: body.bucket, parent, permission, ttlSeconds: ttl, prefixes, objects }, req.root, req.occurredAt ?? new Date().toISOString());
+    const c = await createR2TempCredential({ accountId: accountID, bucket: body.bucket, parent, permission, ttlSeconds: ttl, prefixes, objects }, req.root, req.occurredAt ?? worldNow());
     return success({ accessKeyId: c.access_key_id, secretAccessKey: c.secret_access_key, sessionToken: c.session_token });
 }
 // R2 custom domains (https://developers.cloudflare.com/api/resources/r2/subresources/buckets/subresources/domains/subresources/custom/):
@@ -1628,7 +1629,7 @@ async function r2TempCredentialsRoute(req, accountID) {
 // and 1001 not-found conventions.
 const TLS_VERSIONS = new Set(['1.0', '1.1', '1.2', '1.3']);
 async function r2CustomDomainRoute(req, method, parts, accountID, bucketName) {
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     await catchUpR2CustomDomains(req.root, at);
     const mine = () => r2CustomDomains(req.root).filter((d) => d.account_id === accountID && d.bucket === bucketName);
     const full = (d) => ({ domain: d.domain, enabled: d.enabled, status: { ownership: d.ownership, ssl: d.ssl }, minTLS: d.min_tls, ...(d.ciphers ? { ciphers: d.ciphers } : {}), zoneId: d.zone_id, zoneName: d.zone_name });
@@ -1844,7 +1845,7 @@ async function hyperdriveRoute(req, method, url, parts, accountID) {
         const checked = validateWrite(body);
         if (isResponse(checked))
             return checked;
-        const at = req.occurredAt ?? new Date().toISOString();
+        const at = req.occurredAt ?? worldNow();
         const id = mint('hyperdrive_config', `${accountID}:${body.name}`, req.root);
         await pwrite('hyperdrive_config', id, 'hyperdrive_config.create', {
             account_id: accountID,
@@ -1884,7 +1885,7 @@ async function hyperdriveRoute(req, method, url, parts, accountID) {
             caching: body.caching ?? null,
             mtls: body.mtls ?? null,
             origin_connection_limit: typeof body.origin_connection_limit === 'number' ? body.origin_connection_limit : null,
-            modified_on: req.occurredAt ?? new Date().toISOString(),
+            modified_on: req.occurredAt ?? worldNow(),
         }, req);
         return success(hyperdriveView(row('hyperdrive_config', hyperdriveID, req.root)));
     }
@@ -1926,7 +1927,7 @@ async function hyperdriveRoute(req, method, url, parts, accountID) {
             ...(body.caching !== undefined ? { caching: body.caching } : {}),
             ...(body.mtls !== undefined ? { mtls: body.mtls } : {}),
             ...(body.origin_connection_limit !== undefined ? { origin_connection_limit: body.origin_connection_limit } : {}),
-            modified_on: req.occurredAt ?? new Date().toISOString(),
+            modified_on: req.occurredAt ?? worldNow(),
         }, req);
         return success(hyperdriveView(row('hyperdrive_config', hyperdriveID, req.root)));
     }
@@ -1984,7 +1985,7 @@ async function queuesRoute(req, method, parts, accountID) {
         if (accountQueues().some((item) => item.queue_name === body.queue_name)) {
             return failure(400, 1004, `A queue named "${body.queue_name}" already exists on this account`);
         }
-        const at = req.occurredAt ?? new Date().toISOString();
+        const at = req.occurredAt ?? worldNow();
         const id = mint('queue', `${accountID}:${body.queue_name}`, req.root);
         await pwrite('queue', id, 'queue.create', {
             account_id: accountID, queue_name: body.queue_name, created_on: at, modified_on: at, deleted: false,
@@ -2037,7 +2038,7 @@ async function queuesRoute(req, method, parts, accountID) {
         // A Cloudflare queue has at most one consumer (worker and http_pull are mutually exclusive).
         if (queueConsumers().length > 0)
             return failure(400, 1004, 'This queue already has a consumer; delete it before adding another');
-        const at = req.occurredAt ?? new Date().toISOString();
+        const at = req.occurredAt ?? worldNow();
         const id = mint('queue_consumer', `${queueID}:${String(body.script_name ?? 'http_pull')}`, req.root);
         await pwrite('queue_consumer', id, 'queue_consumer.create', {
             account_id: accountID,

package/dist/src/cloudflare-twin.js

@@ -9,7 +9,7 @@
 // api-schemas OpenAPI 4.0.0 (commit 2ac8369e9b63dccacee1a2284e95bb819f05b307) and official
 // cloudflare-typescript SDK (commit faaaf89ed8064a9fb54de538ec3e89487f1302b0; npm cloudflare@7.1.0).
 import { isIP } from 'node:net';
-import { resolveSubjectId } from '@volter/world-core';
+import { resolveSubjectId, worldNow } from '@volter/world-core';
 import { CLOUDFLARE_RESOURCE_TYPES, deterministicHex, failure, headers, isResponse, mint, noRoute, paginate, parseBody, readOnly, row, rows, SERVICE, scopeMissing, success, write, callerEmail, audit, } from "./cloudflare-common.js";
 import { CLOUDFLARE_PROVISIONING_SURFACE, handleProvisioningRoute } from "./cloudflare-provisioning.js";
 export { CLOUDFLARE_RESOURCE_TYPES } from "./cloudflare-common.js";
@@ -138,7 +138,7 @@ async function bootstrap(req, body) {
     const blocked = readOnly(req);
     if (blocked)
         return blocked;
-    const observedAt = req.occurredAt ?? new Date().toISOString();
+    const observedAt = req.occurredAt ?? worldNow();
     const accounts = Array.isArray(body.accounts) ? body.accounts : [];
     const zones = Array.isArray(body.zones) ? body.zones : [];
     for (const value of accounts) {
@@ -200,7 +200,7 @@ async function bootstrap(req, body) {
         const item = (value ?? {});
         if (typeof item.email !== 'string' || typeof item.token !== 'string' || !item.token)
             return failure(400, 1004, 'Bootstrap user_tokens require an email and a token');
-        await write('user_token', item.token, 'user_token.observe', { token: item.token, email: item.email, created_on: req.occurredAt ?? new Date().toISOString() }, req);
+        await write('user_token', item.token, 'user_token.observe', { token: item.token, email: item.email, created_on: req.occurredAt ?? worldNow() }, req);
     }
     return success({ accounts: accounts.length, zones: zones.length, members: members.length, user_tokens: userTokens.length });
 }
@@ -350,7 +350,7 @@ async function zoneSettingRoute(req, method, parts) {
         if (typeof body.value !== 'string' || !def.values.includes(body.value))
             return failure(400, 1007, `Invalid value for zone setting ${parts[3]}`);
         const before = view().value;
-        await write('zone_setting', id, 'zone_setting.update', { zone_id: parts[1], setting: parts[3], value: body.value, modified_on: req.occurredAt ?? new Date().toISOString() }, req);
+        await write('zone_setting', id, 'zone_setting.update', { zone_id: parts[1], setting: parts[3], value: body.value, modified_on: req.occurredAt ?? worldNow() }, req);
         await audit(req, String(zone.account_id), { type: 'update', resource: { type: 'zone_setting', id: parts[3] }, oldValue: before, newValue: body.value, metadata: { zone_id: parts[1], zone_name: zone.name, setting: parts[3] } });
         return success(view());
     }
@@ -384,7 +384,7 @@ export async function handleCloudflareTwinRequest(req) {
         if (!/^[^@\s]+@[^@\s]+$/.test(parts[2]))
             return failure(400, 1001, 'A valid email is required');
         const token = `cf-${deterministicHex(`token:${parts[2]}:${rows('user_token', req.root).length}`, 40)}`;
-        await write('user_token', token, 'user_token.create', { token, email: parts[2], created_on: req.occurredAt ?? new Date().toISOString() }, req);
+        await write('user_token', token, 'user_token.create', { token, email: parts[2], created_on: req.occurredAt ?? worldNow() }, req);
         // A user's token is logged in each account the user is a member of.
         for (const m of rows('account_member', req.root).filter((x) => x.email === parts[2]))
             await audit({ ...req, headers: { authorization: `Bearer ${token}` } }, String(m.account_id), { type: 'create', resource: { type: 'token', id: token.slice(0, 12) }, newValue: { owner: parts[2] } });
@@ -490,7 +490,7 @@ export async function handleCloudflareTwinRequest(req) {
                     return failure(400, 1004, 'tunnel_secret must be canonical base64 encoding of at least 32 bytes');
             }
             const id = mint('cloudflare_tunnel', `${accountID}:${body.name}`, req.root);
-            const createdAt = req.occurredAt ?? new Date().toISOString();
+            const createdAt = req.occurredAt ?? worldNow();
             await write('cloudflare_tunnel', id, 'tunnel.create', {
                 account_id: accountID,
                 name: body.name,
@@ -537,7 +537,7 @@ export async function handleCloudflareTwinRequest(req) {
             const blocked = readOnly(req);
             if (blocked)
                 return blocked;
-            const deletedAt = req.occurredAt ?? new Date().toISOString();
+            const deletedAt = req.occurredAt ?? worldNow();
             await write('cloudflare_tunnel', tunnelID, 'tunnel.delete', { account_id: accountID, deleted: true, deleted_at: deletedAt }, req);
             return success(tunnelView(row('cloudflare_tunnel', tunnelID, req.root, true)));
         }
@@ -580,7 +580,7 @@ export async function handleCloudflareTwinRequest(req) {
                     tunnel_id: tunnelID,
                     source: 'cloudflare',
                     version: Number(current?.version ?? 0) + 1,
-                    created_at: current?.created_at ?? (req.occurredAt ?? new Date().toISOString()),
+                    created_at: current?.created_at ?? (req.occurredAt ?? worldNow()),
                     config,
                 }, req);
                 return success(configurationView(row('tunnel_configuration', id, req.root)));
@@ -620,7 +620,7 @@ export async function handleCloudflareTwinRequest(req) {
             if (invalid)
                 return invalid;
             const id = mint('dns_record', `${zoneID}:${body.type}:${body.name}:${JSON.stringify(body.content ?? body.data)}`, req.root);
-            const at = req.occurredAt ?? new Date().toISOString();
+            const at = req.occurredAt ?? worldNow();
             await write('dns_record', id, 'dns_record.create', {
                 zone_id: zoneID,
                 zone_name: zone.name,
@@ -687,7 +687,7 @@ export async function handleCloudflareTwinRequest(req) {
             const invalid = dnsValidation(merged, zoneID, req.root, recordID);
             if (invalid)
                 return invalid;
-            const at = req.occurredAt ?? new Date().toISOString();
+            const at = req.occurredAt ?? worldNow();
             await write('dns_record', recordID, method === 'PUT' ? 'dns_record.replace' : 'dns_record.update', {
                 zone_id: zoneID,
                 name: merged.name,

package/dist/src/cloudflare-worker-assets.js

@@ -24,6 +24,7 @@
 // (wrangler reads `wrangler_single_asset_uploads` from it; the twin never sets it, so the bulk
 // multipart path is the one driven) and the twin verifies the signature, purpose, account,
 // and expiry on redemption.
+import { worldNow } from '@volter/world-core';
 import { createHmac, timingSafeEqual } from 'node:crypto';
 import { failure, headers as lowerHeaders, isResponse, mint, row, rows, success, write, } from "./cloudflare-common.js";
 const TOKEN_KEY = 'volter-cloudflare-twin:workers-assets';
@@ -60,7 +61,7 @@ function readToken(token) {
     }
 }
 function epochSeconds(req) {
-    return Math.floor(Date.parse(req.occurredAt ?? new Date().toISOString()) / 1000);
+    return Math.floor(Date.parse(req.occurredAt ?? worldNow()) / 1000);
 }
 function assetID(accountID, hash) {
     return `${accountID}:${hash}`;
@@ -108,7 +109,7 @@ export async function createAssetsUploadSession(req, accountID, scriptName, body
     const buckets = [];
     for (let index = 0; index < pending.length; index += ASSET_BUCKET_SIZE)
         buckets.push(pending.slice(index, index + ASSET_BUCKET_SIZE));
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     const id = mint('worker_asset_upload_session', `${accountID}:${scriptName}:${JSON.stringify(entries)}`, req.root);
     await write('worker_asset_upload_session', id, 'worker_asset_upload_session.create', {
         account_id: accountID, script_name: scriptName, manifest: entries, pending, created_on: at, deleted: false,
@@ -162,7 +163,7 @@ export async function uploadAssets(req, accountID, url, parseParts) {
         const contentType = part.contentType && part.contentType !== 'application/null' ? part.contentType : null;
         accepted.push({ hash: part.name, size, contentType });
     }
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     for (const asset of accepted) {
         if (row('worker_asset', assetID(accountID, asset.hash), req.root))
             continue; // content-addressed: already held

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-cloudflare",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local Cloudflare API twin for accounts, zones, Cloudflare Tunnels, tunnel configurations and zone DNS records, built on @volter/world-core.",
   "author": "Volter (https://github.com/volter-ai)",
   "license": "Apache-2.0",
@@ -35,17 +35,17 @@
     "postpack": "node ../../../scripts/publish/prepare-publish.mjs postpack"
   },
   "dependencies": {
-    "@volter/world-ui": "0.1.0",
+    "@volter/world-ui": "0.1.2",
     "react": "^19.2.7",
     "react-dom": "^19.2.7"
   },
   "peerDependencies": {
-    "@volter/world-core": "2.0.0"
+    "@volter/world-core": "2.0.2"
   },
   "devDependencies": {
     "@types/bun": "^1.2.20",
     "@types/node": "^24.0.0",
-    "@volter/world-core": "2.0.0",
+    "@volter/world-core": "2.0.2",
     "@volter/world-tooling": "0.1.0",
     "cloudflare": "7.1.0",
     "typescript": "^5.9.0"

package/src/cloudflare-common.ts

@@ -3,7 +3,7 @@
 // cloudflare-twin.ts) and the provisioning slice (Workers/R2/Hyperdrive/Queues in
 // cloudflare-provisioning.ts). Pure helpers over the @volter/world-core kernel — no routes here.
 import { createHash } from 'node:crypto';
-import { applyTwinWrite, projectResources } from '@volter/world-core';
+import { applyTwinWrite, projectResources, worldNow } from '@volter/world-core';
 
 export const SERVICE = 'cloudflare';
 
@@ -174,7 +174,7 @@ export function callerEmail(req: CloudflareRequest): string {
 
 /** One entry in an account's audit log, attributed to the calling token's user. */
 export async function audit(req: CloudflareRequest, accountID: string, entry: { type: string; resource: { type: string; id: string }; oldValue?: unknown; newValue?: unknown; metadata?: Record<string, unknown> }): Promise<void> {
-  const when = req.occurredAt ?? new Date().toISOString();
+  const when = req.occurredAt ?? worldNow();
   const id = deterministicHex(`audit:${accountID}:${when}:${entry.resource.type}:${entry.resource.id}:${rows('audit_log', req.root).length}`, 32);
   const email = callerEmail(req);
   await write('audit_log', id, 'audit_log.record', { account_id: accountID, when, action: { type: entry.type, result: true, info: '' },

package/src/cloudflare-provisioning.ts

@@ -17,6 +17,7 @@
 // pack's generic conventions (1004 validation, 1001 not found) everywhere else — see README
 // "Official grounding". No live probe was possible (no Cloudflare account); the OpenAPI + SDK
 // are the honest grounding ceiling for this slice.
+import { worldNow } from '@volter/world-core';
 import { createHash } from 'node:crypto';
 import {
   deterministicHex,
@@ -807,7 +808,7 @@ function buildUpload(req: CloudflareRequest, url: URL, accountID: string, script
  *  UUID (the shape wrangler prints as "Current Version ID"). */
 async function writeVersion(req: CloudflareRequest, accountID: string, scriptName: string, scriptTag: string, number: number, content: VersionContent, annotations: Body): Promise<Row> {
   const id = mint('worker_version', `${accountID}:${scriptName}:${scriptTag}:${number}`, req.root);
-  const at = req.occurredAt ?? new Date().toISOString();
+  const at = req.occurredAt ?? worldNow();
   await pwrite('worker_version', id, 'worker_version.upload', {
     account_id: accountID, script_name: scriptName, script_tag: scriptTag, number, ...content,
     source: deploySource(req), annotations, author_email: callerEmail(req) || null, created_on: at, modified_on: at, deleted: false,
@@ -819,7 +820,7 @@ function deploymentRecord(req: CloudflareRequest, script: { tag: unknown; deploy
   const count = Array.isArray(script.deployments) ? script.deployments.length : 0;
   return {
     id: uuidFrom(`${String(script.tag)}:deployment:${count}`),
-    created_on: req.occurredAt ?? new Date().toISOString(),
+    created_on: req.occurredAt ?? worldNow(),
     source: deploySource(req),
     strategy: 'percentage',
     versions,
@@ -841,7 +842,7 @@ async function uploadScript(req: CloudflareRequest, url: URL, accountID: string,
   const { existing, content } = built;
   const tag = String(existing?.tag ?? mintScriptTag(accountID, scriptName, req.root));
   const number = Number(existing?.version_count ?? 0) + 1;
-  const at = req.occurredAt ?? new Date().toISOString();
+  const at = req.occurredAt ?? worldNow();
   // All validation passed — now perform the writes (migrations, the version, then the script).
   await applyMigrationPlan(accountID, scriptName, built.migrationOps, req);
   const version = await writeVersion(req, accountID, scriptName, tag, number, content, built.annotations);
@@ -1023,7 +1024,7 @@ async function createDeployment(req: CloudflareRequest, accountID: string, scrip
     modules: null,
     version_id: live.id,
     deployments: [...deployments, deployment],
-    modified_on: req.occurredAt ?? new Date().toISOString(),
+    modified_on: req.occurredAt ?? worldNow(),
   }, req);
   return success(deployment);
 }
@@ -1057,7 +1058,7 @@ async function patchScriptSettings(req: CloudflareRequest, accountID: string, sc
     ...(body.tags !== undefined ? { tags: body.tags ?? [] } : {}),
     ...(body.tail_consumers !== undefined ? { tail_consumers: body.tail_consumers } : {}),
     ...(body.observability !== undefined ? { observability: body.observability } : {}),
-    modified_on: req.occurredAt ?? new Date().toISOString(),
+    modified_on: req.occurredAt ?? worldNow(),
   }, req);
   return success(settingsView(scriptRow(accountID, String(script.name), req.root)!));
 }
@@ -1249,7 +1250,7 @@ async function workersRoute(req: CloudflareRequest, method: string, url: URL, pa
         let body: unknown;
         try { body = req.body ? JSON.parse(req.body) : undefined; } catch { return failure(400, 1004, 'Invalid request body'); }
         if (!Array.isArray(body)) return failure(400, 1004, 'Cron trigger update requires an array of {cron} objects');
-        const at = req.occurredAt ?? new Date().toISOString();
+        const at = req.occurredAt ?? worldNow();
         const schedules: Body[] = [];
         for (const value of body) {
           const item = value as Body | null;
@@ -1517,7 +1518,7 @@ async function r2Route(req: CloudflareRequest, method: string, url: URL, parts:
     if (accountBuckets().some((item) => item.name === body.name)) {
       return failure(409, 10004, 'The bucket you tried to create already exists, and you own it.');
     }
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     await pwrite('r2_bucket', `${accountID}:${body.name}`, 'r2_bucket.create', {
       account_id: accountID,
       name: body.name,
@@ -1545,7 +1546,7 @@ async function r2Route(req: CloudflareRequest, method: string, url: URL, parts:
     if (rows('r2_object', req.root).some((o) => o.bucket_id === `${accountID}:${bucketName}`)) return failure(409, 10008, 'Cannot delete bucket that contains objects.');
     await pwrite('r2_bucket', `${accountID}:${bucketName}`, 'r2_bucket.delete', { account_id: accountID, deleted: true }, req);
     // "The specified domain will also remain connected to R2 until you remove it or delete the bucket." (public buckets)
-    for (const d of r2CustomDomains(req.root).filter((x) => x.account_id === accountID && x.bucket === bucketName)) await removeR2CustomDomain(d.id, req.root, req.occurredAt ?? new Date().toISOString());
+    for (const d of r2CustomDomains(req.root).filter((x) => x.account_id === accountID && x.bucket === bucketName)) await removeR2CustomDomain(d.id, req.root, req.occurredAt ?? worldNow());
     return success({});
   }
   return noRoute();
@@ -1573,7 +1574,7 @@ async function r2TempCredentialsRoute(req: CloudflareRequest, accountID: string)
   const prefixes = list(body.prefixes);
   const objects = list(body.objects);
   if (!prefixes || !objects) return failure(400, 1004, 'prefixes and objects must be lists of strings');
-  const c = await createR2TempCredential({ accountId: accountID, bucket: body.bucket, parent, permission, ttlSeconds: ttl, prefixes, objects }, req.root, req.occurredAt ?? new Date().toISOString());
+  const c = await createR2TempCredential({ accountId: accountID, bucket: body.bucket, parent, permission, ttlSeconds: ttl, prefixes, objects }, req.root, req.occurredAt ?? worldNow());
   return success({ accessKeyId: c.access_key_id, secretAccessKey: c.secret_access_key, sessionToken: c.session_token });
 }
 
@@ -1585,7 +1586,7 @@ async function r2TempCredentialsRoute(req: CloudflareRequest, accountID: string)
 // and 1001 not-found conventions.
 const TLS_VERSIONS = new Set(['1.0', '1.1', '1.2', '1.3']);
 async function r2CustomDomainRoute(req: CloudflareRequest, method: string, parts: string[], accountID: string, bucketName: string): Promise<CloudflareResponse> {
-  const at = req.occurredAt ?? new Date().toISOString();
+  const at = req.occurredAt ?? worldNow();
   await catchUpR2CustomDomains(req.root, at);
   const mine = () => r2CustomDomains(req.root).filter((d) => d.account_id === accountID && d.bucket === bucketName);
   const full = (d: R2CustomDomain): Body => ({ domain: d.domain, enabled: d.enabled, status: { ownership: d.ownership, ssl: d.ssl }, minTLS: d.min_tls, ...(d.ciphers ? { ciphers: d.ciphers } : {}), zoneId: d.zone_id, zoneName: d.zone_name });
@@ -1755,7 +1756,7 @@ async function hyperdriveRoute(req: CloudflareRequest, method: string, url: URL,
     if (isResponse(body)) return body;
     const checked = validateWrite(body);
     if (isResponse(checked)) return checked;
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     const id = mint('hyperdrive_config', `${accountID}:${body.name}`, req.root);
     await pwrite('hyperdrive_config', id, 'hyperdrive_config.create', {
       account_id: accountID,
@@ -1789,7 +1790,7 @@ async function hyperdriveRoute(req: CloudflareRequest, method: string, url: URL,
       caching: body.caching ?? null,
       mtls: body.mtls ?? null,
       origin_connection_limit: typeof body.origin_connection_limit === 'number' ? body.origin_connection_limit : null,
-      modified_on: req.occurredAt ?? new Date().toISOString(),
+      modified_on: req.occurredAt ?? worldNow(),
     }, req);
     return success(hyperdriveView(row('hyperdrive_config', hyperdriveID, req.root)!));
   }
@@ -1824,7 +1825,7 @@ async function hyperdriveRoute(req: CloudflareRequest, method: string, url: URL,
       ...(body.caching !== undefined ? { caching: body.caching } : {}),
       ...(body.mtls !== undefined ? { mtls: body.mtls } : {}),
       ...(body.origin_connection_limit !== undefined ? { origin_connection_limit: body.origin_connection_limit } : {}),
-      modified_on: req.occurredAt ?? new Date().toISOString(),
+      modified_on: req.occurredAt ?? worldNow(),
     }, req);
     return success(hyperdriveView(row('hyperdrive_config', hyperdriveID, req.root)!));
   }
@@ -1873,7 +1874,7 @@ async function queuesRoute(req: CloudflareRequest, method: string, parts: string
     if (accountQueues().some((item) => item.queue_name === body.queue_name)) {
       return failure(400, 1004, `A queue named "${body.queue_name}" already exists on this account`);
     }
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     const id = mint('queue', `${accountID}:${body.queue_name}`, req.root);
     await pwrite('queue', id, 'queue.create', {
       account_id: accountID, queue_name: body.queue_name, created_on: at, modified_on: at, deleted: false,
@@ -1916,7 +1917,7 @@ async function queuesRoute(req: CloudflareRequest, method: string, parts: string
     }
     // A Cloudflare queue has at most one consumer (worker and http_pull are mutually exclusive).
     if (queueConsumers().length > 0) return failure(400, 1004, 'This queue already has a consumer; delete it before adding another');
-    const at = req.occurredAt ?? new Date().toISOString();
+    const at = req.occurredAt ?? worldNow();
     const id = mint('queue_consumer', `${queueID}:${String(body.script_name ?? 'http_pull')}`, req.root);
     await pwrite('queue_consumer', id, 'queue_consumer.create', {
       account_id: accountID,

package/src/cloudflare-twin.ts

@@ -9,7 +9,7 @@
 // api-schemas OpenAPI 4.0.0 (commit 2ac8369e9b63dccacee1a2284e95bb819f05b307) and official
 // cloudflare-typescript SDK (commit faaaf89ed8064a9fb54de538ec3e89487f1302b0; npm cloudflare@7.1.0).
 import { isIP } from 'node:net';
-import { resolveSubjectId } from '@volter/world-core';
+import { resolveSubjectId, worldNow } from '@volter/world-core';
 import {
   CLOUDFLARE_RESOURCE_TYPES,
   deterministicHex,
@@ -169,7 +169,7 @@ function auditLogRoute(req: CloudflareRequest, method: string, url: URL, parts:
 async function bootstrap(req: CloudflareRequest, body: Record<string, unknown>): Promise<CloudflareResponse> {
   const blocked = readOnly(req);
   if (blocked) return blocked;
-  const observedAt = req.occurredAt ?? new Date().toISOString();
+  const observedAt = req.occurredAt ?? worldNow();
   const accounts = Array.isArray(body.accounts) ? body.accounts : [];
   const zones = Array.isArray(body.zones) ? body.zones : [];
   for (const value of accounts) {
@@ -224,7 +224,7 @@ async function bootstrap(req: CloudflareRequest, body: Record<string, unknown>):
   for (const value of userTokens) {
     const item = (value ?? {}) as Record<string, unknown>;
     if (typeof item.email !== 'string' || typeof item.token !== 'string' || !item.token) return failure(400, 1004, 'Bootstrap user_tokens require an email and a token');
-    await write('user_token', item.token, 'user_token.observe', { token: item.token, email: item.email, created_on: req.occurredAt ?? new Date().toISOString() }, req);
+    await write('user_token', item.token, 'user_token.observe', { token: item.token, email: item.email, created_on: req.occurredAt ?? worldNow() }, req);
   }
   return success({ accounts: accounts.length, zones: zones.length, members: members.length, user_tokens: userTokens.length });
 }
@@ -343,7 +343,7 @@ async function zoneSettingRoute(req: CloudflareRequest, method: string, parts: s
     const body = parseBody(req); if (isResponse(body)) return body;
     if (typeof body.value !== 'string' || !def.values.includes(body.value)) return failure(400, 1007, `Invalid value for zone setting ${parts[3]}`);
     const before = view().value;
-    await write('zone_setting', id, 'zone_setting.update', { zone_id: parts[1], setting: parts[3], value: body.value, modified_on: req.occurredAt ?? new Date().toISOString() }, req);
+    await write('zone_setting', id, 'zone_setting.update', { zone_id: parts[1], setting: parts[3], value: body.value, modified_on: req.occurredAt ?? worldNow() }, req);
     await audit(req, String(zone.account_id), { type: 'update', resource: { type: 'zone_setting', id: parts[3]! }, oldValue: before, newValue: body.value, metadata: { zone_id: parts[1], zone_name: zone.name, setting: parts[3] } });
     return success(view());
   }
@@ -372,7 +372,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
     const blocked = readOnly(req); if (blocked) return blocked;
     if (!/^[^@\s]+@[^@\s]+$/.test(parts[2])) return failure(400, 1001, 'A valid email is required');
     const token = `cf-${deterministicHex(`token:${parts[2]}:${rows('user_token', req.root).length}`, 40)}`;
-    await write('user_token', token, 'user_token.create', { token, email: parts[2], created_on: req.occurredAt ?? new Date().toISOString() }, req);
+    await write('user_token', token, 'user_token.create', { token, email: parts[2], created_on: req.occurredAt ?? worldNow() }, req);
     // A user's token is logged in each account the user is a member of.
     for (const m of rows('account_member', req.root).filter((x) => x.email === parts[2])) await audit({ ...req, headers: { authorization: `Bearer ${token}` } }, String(m.account_id), { type: 'create', resource: { type: 'token', id: token.slice(0, 12) }, newValue: { owner: parts[2] } });
     return success({ token, email: parts[2] });
@@ -464,7 +464,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
         if (!validTunnelSecret(body.tunnel_secret)) return failure(400, 1004, 'tunnel_secret must be canonical base64 encoding of at least 32 bytes');
       }
       const id = mint('cloudflare_tunnel', `${accountID}:${body.name}`, req.root);
-      const createdAt = req.occurredAt ?? new Date().toISOString();
+      const createdAt = req.occurredAt ?? worldNow();
       await write('cloudflare_tunnel', id, 'tunnel.create', {
         account_id: accountID,
         name: body.name,
@@ -507,7 +507,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
     if (parts.length === 4 && method === 'DELETE') {
       const blocked = readOnly(req);
       if (blocked) return blocked;
-      const deletedAt = req.occurredAt ?? new Date().toISOString();
+      const deletedAt = req.occurredAt ?? worldNow();
       await write('cloudflare_tunnel', tunnelID, 'tunnel.delete', { account_id: accountID, deleted: true, deleted_at: deletedAt }, req);
       return success(tunnelView(row('cloudflare_tunnel', tunnelID, req.root, true)!));
     }
@@ -544,7 +544,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
           tunnel_id: tunnelID,
           source: 'cloudflare',
           version: Number(current?.version ?? 0) + 1,
-          created_at: current?.created_at ?? (req.occurredAt ?? new Date().toISOString()),
+          created_at: current?.created_at ?? (req.occurredAt ?? worldNow()),
           config,
         }, req);
         return success(configurationView(row('tunnel_configuration', id, req.root)!));
@@ -577,7 +577,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
       const invalid = dnsValidation(body, zoneID, req.root);
       if (invalid) return invalid;
       const id = mint('dns_record', `${zoneID}:${body.type}:${body.name}:${JSON.stringify(body.content ?? body.data)}`, req.root);
-      const at = req.occurredAt ?? new Date().toISOString();
+      const at = req.occurredAt ?? worldNow();
       await write('dns_record', id, 'dns_record.create', {
         zone_id: zoneID,
         zone_name: zone.name,
@@ -636,7 +636,7 @@ export async function handleCloudflareTwinRequest(req: CloudflareRequest): Promi
       if (typeof merged.name === 'string') merged.name = merged.name.toLowerCase();
       const invalid = dnsValidation(merged, zoneID, req.root, recordID);
       if (invalid) return invalid;
-      const at = req.occurredAt ?? new Date().toISOString();
+      const at = req.occurredAt ?? worldNow();
       await write('dns_record', recordID, method === 'PUT' ? 'dns_record.replace' : 'dns_record.update', {
         zone_id: zoneID,
         name: merged.name,

package/src/cloudflare-worker-assets.ts

@@ -24,6 +24,7 @@
 // (wrangler reads `wrangler_single_asset_uploads` from it; the twin never sets it, so the bulk
 // multipart path is the one driven) and the twin verifies the signature, purpose, account,
 // and expiry on redemption.
+import { worldNow } from '@volter/world-core';
 import { createHmac, timingSafeEqual } from 'node:crypto';
 import {
   failure,
@@ -79,7 +80,7 @@ function readToken(token: string): TokenClaims | null {
 }
 
 function epochSeconds(req: CloudflareRequest): number {
-  return Math.floor(Date.parse(req.occurredAt ?? new Date().toISOString()) / 1000);
+  return Math.floor(Date.parse(req.occurredAt ?? worldNow()) / 1000);
 }
 
 function assetID(accountID: string, hash: string): string {
@@ -128,7 +129,7 @@ export async function createAssetsUploadSession(req: CloudflareRequest, accountI
   const pending = [...new Set(Object.values(entries).map((entry) => entry.hash))].filter((hash) => !held.has(hash)).sort();
   const buckets: string[][] = [];
   for (let index = 0; index < pending.length; index += ASSET_BUCKET_SIZE) buckets.push(pending.slice(index, index + ASSET_BUCKET_SIZE));
-  const at = req.occurredAt ?? new Date().toISOString();
+  const at = req.occurredAt ?? worldNow();
   const id = mint('worker_asset_upload_session', `${accountID}:${scriptName}:${JSON.stringify(entries)}`, req.root);
   await write('worker_asset_upload_session', id, 'worker_asset_upload_session.create', {
     account_id: accountID, script_name: scriptName, manifest: entries, pending, created_on: at, deleted: false,
@@ -179,7 +180,7 @@ export async function uploadAssets(req: CloudflareRequest, accountID: string, ur
     const contentType = part.contentType && part.contentType !== 'application/null' ? part.contentType : null;
     accepted.push({ hash: part.name, size, contentType });
   }
-  const at = req.occurredAt ?? new Date().toISOString();
+  const at = req.occurredAt ?? worldNow();
   for (const asset of accepted) {
     if (row('worker_asset', assetID(accountID, asset.hash), req.root)) continue; // content-addressed: already held
     await write('worker_asset', assetID(accountID, asset.hash), 'worker_asset.upload', {