@voyantjs/workflows-orchestrator-cloudflare 0.28.3 → 0.29.0

package/dist/durable-object.js

@@ -18,12 +18,21 @@
 // the public surface is the outer Worker's /api/* routes.
 import { applyWaitpointInjection, driveUntilPaused, cancel as orchestratorCancel, resume as orchestratorResume, trigger as orchestratorTrigger, } from "@voyantjs/workflows-orchestrator";
 import { createDurableObjectRunStore } from "./do-store.js";
+function resolve(deps, record) {
+    return deps.dispatcher({
+        tenantScript: record.tenantMeta.tenantScript,
+        workflowId: record.workflowId,
+    });
+}
 export async function handleDurableObjectRequest(req, deps) {
     const url = new URL(req.url);
     const store = createDurableObjectRunStore(deps.storage);
     if (req.method === "POST" && url.pathname === "/trigger") {
         const payload = (await req.json());
-        const handler = deps.resolveStepHandler(payload.tenantMeta.tenantScript);
+        const handler = resolve(deps, {
+            tenantMeta: payload.tenantMeta,
+            workflowId: payload.workflowId,
+        });
         const record = await orchestratorTrigger({
             workflowId: payload.workflowId,
             workflowVersion: payload.workflowVersion,
@@ -41,7 +50,7 @@ export async function handleDurableObjectRequest(req, deps) {
         const existing = await store.get((await getStoredRunId(store)) ?? "");
         if (!existing)
             return json(404, { error: "not_found", message: "no run stored in this DO" });
-        const handler = deps.resolveStepHandler(existing.tenantMeta.tenantScript ?? "");
+        const handler = resolve(deps, existing);
         const out = await orchestratorResume({ runId: existing.id, injection: payload.injection }, { store, handler, now: deps.now });
         if (!out.ok) {
             const status = out.status === "not_found" ? 404 : out.status === "no_match" ? 400 : 409;
@@ -55,7 +64,7 @@ export async function handleDurableObjectRequest(req, deps) {
         const existing = await store.get((await getStoredRunId(store)) ?? "");
         if (!existing)
             return json(404, { error: "not_found", message: "no run stored in this DO" });
-        const handler = deps.resolveStepHandler(existing.tenantMeta.tenantScript ?? "");
+        const handler = resolve(deps, existing);
         const out = await orchestratorCancel({ runId: existing.id, reason: payload.reason }, { store, handler, now: deps.now });
         if (!out.ok) {
             const status = out.status === "not_found" ? 404 : 409;
@@ -115,7 +124,7 @@ export async function handleDurableObjectAlarm(deps) {
         return;
     }
     record.status = "running";
-    const handler = deps.resolveStepHandler(record.tenantMeta.tenantScript ?? "");
+    const handler = resolve(deps, record);
     await driveUntilPaused(record, { handler, now: deps.now });
     await store.save(record);
     await reconcileAlarm(record, store, deps);

package/dist/event-handler.d.ts

@@ -0,0 +1,23 @@
+import type { CfManifestStore } from "./manifest-kv-store.js";
+import type { DurableObjectNamespaceLike } from "./worker.js";
+export interface EventHandlerDeps<Id = unknown> {
+    /** KV-backed manifest store (read-only path here). */
+    manifestStore: CfManifestStore;
+    /** DO namespace used to forward each match to the run DO. */
+    runDO: DurableObjectNamespaceLike<Id>;
+    /** id generator for new triggers; defaults to `run_<random>`. */
+    idGenerator?: () => string;
+    /** Injectable clock. */
+    now?: () => number;
+    /** Tenant metadata stamped on every triggered run. */
+    tenantMeta?: {
+        tenantId: string;
+        projectId: string;
+        organizationId: string;
+        tenantScript?: string;
+    };
+    /** Optional logger. */
+    logger?: (level: "info" | "warn" | "error", msg: string, data?: object) => void;
+}
+export declare function handleIngestEvent<Id>(req: Request, deps: EventHandlerDeps<Id>): Promise<Response>;
+//# sourceMappingURL=event-handler.d.ts.map

package/dist/event-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-handler.d.ts","sourceRoot":"","sources":["../src/event-handler.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAI7D,MAAM,WAAW,gBAAgB,CAAC,EAAE,GAAG,OAAO;IAC5C,sDAAsD;IACtD,aAAa,EAAE,eAAe,CAAA;IAC9B,6DAA6D;IAC7D,KAAK,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAA;IACrC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,MAAM,CAAA;IAC1B,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,sDAAsD;IACtD,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,uBAAuB;IACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAChF;AAqBD,wBAAsB,iBAAiB,CAAC,EAAE,EACxC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC,GACzB,OAAO,CAAC,QAAQ,CAAC,CAqInB"}

package/dist/event-handler.js

@@ -0,0 +1,241 @@
+// HTTP handler for `POST /api/events` — the synchronous event-ingest
+// endpoint. Loads the registered manifest from KV, runs the pure
+// `routeEvent` from `@voyantjs/workflows-orchestrator`, and forwards
+// each match into the existing `/trigger` DO surface with a derived
+// idempotencyKey.
+//
+// Response shape mirrors `IngestEventResponse` from
+// `@voyantjs/workflows/driver`:
+//
+//   { ok: true,  eventId, matches: [...] }
+//   { ok: false, reason: "manifest_not_registered" | ... }
+//
+// Architecture: docs/architecture/workflows-runtime-architecture.md §15.
+import { deriveStableEventId } from "@voyantjs/workflows/events";
+import { routeEvent } from "@voyantjs/workflows-orchestrator";
+const ALLOWED_ENVS = new Set(["production", "preview", "development"]);
+const DEFAULT_TENANT_META = {
+    tenantId: "default",
+    projectId: "default",
+    organizationId: "default",
+};
+export async function handleIngestEvent(req, deps) {
+    // Body parse + validate.
+    let raw;
+    try {
+        raw = await req.json();
+    }
+    catch (err) {
+        return json(400, {
+            error: "invalid_json",
+            message: err instanceof Error ? err.message : String(err),
+        });
+    }
+    const validation = validateBody(raw);
+    if (!validation.ok)
+        return json(400, validation.error);
+    const body = validation.body;
+    // Manifest lookup.
+    const manifestEnvelope = await deps.manifestStore.getCurrent(body.environment);
+    if (!manifestEnvelope) {
+        return json(200, {
+            ok: false,
+            reason: "manifest_not_registered",
+            message: `No manifest is registered for environment "${body.environment}".`,
+        });
+    }
+    const manifest = manifestEnvelope.manifest;
+    // Event id derivation — use the caller-stamped one when present, fall
+    // back to a content-derived id so external callers without a forwarder
+    // still get sensible idempotency.
+    const eventId = body.envelope.metadata?.eventId ?? (await deriveStableEventId(body.envelope));
+    // Route through the manifest's filters.
+    const routed = routeEvent({
+        manifest,
+        envelope: {
+            name: body.envelope.name,
+            data: body.envelope.data,
+            metadata: body.envelope.metadata,
+            emittedAt: body.envelope.emittedAt,
+        },
+        eventId,
+        idempotencyOverride: body.idempotencyKey,
+    });
+    // Forward each match into the existing /trigger DO route.
+    const matches = [];
+    let anyTriggered = false;
+    let anyFailed = false;
+    const tenantMeta = deps.tenantMeta ?? DEFAULT_TENANT_META;
+    for (const entry of routed) {
+        if (entry.status === "skipped") {
+            matches.push({
+                filterId: entry.filterId,
+                status: "skipped",
+                reason: entry.reason,
+                details: entry.details,
+            });
+            continue;
+        }
+        const runId = `idem-${entry.targetWorkflowId}-${entry.idempotencyKey}`;
+        const triggerPayload = {
+            runId,
+            workflowId: entry.targetWorkflowId,
+            workflowVersion: "v1",
+            input: entry.input,
+            tenantMeta,
+            environment: body.environment,
+            idempotencyKey: entry.idempotencyKey,
+            triggeredBy: {
+                kind: "event",
+                eventId,
+                eventType: body.envelope.name,
+                filterId: entry.filterId,
+            },
+        };
+        try {
+            const forward = new Request("https://do-internal/trigger", {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(triggerPayload),
+            });
+            const id = deps.runDO.idFromName(runId);
+            const stub = deps.runDO.get(id);
+            const resp = await stub.fetch(forward);
+            if (resp.status >= 200 && resp.status < 300) {
+                matches.push({
+                    filterId: entry.filterId,
+                    targetWorkflowId: entry.targetWorkflowId,
+                    runId,
+                    idempotencyKey: entry.idempotencyKey,
+                    status: "queued",
+                });
+                anyTriggered = true;
+            }
+            else {
+                const errBody = await safeReadText(resp);
+                deps.logger?.("error", "trigger DO failed", {
+                    status: resp.status,
+                    body: errBody.slice(0, 256),
+                });
+                matches.push({
+                    filterId: entry.filterId,
+                    targetWorkflowId: entry.targetWorkflowId,
+                    status: "error",
+                    reason: `do_returned_${resp.status}`,
+                });
+                anyFailed = true;
+            }
+        }
+        catch (err) {
+            deps.logger?.("error", "trigger forward threw", {
+                error: err instanceof Error ? err.message : String(err),
+            });
+            matches.push({
+                filterId: entry.filterId,
+                targetWorkflowId: entry.targetWorkflowId,
+                status: "error",
+                reason: err instanceof Error ? err.message : String(err),
+            });
+            anyFailed = true;
+        }
+    }
+    if (matches.length > 0 && !anyTriggered && anyFailed) {
+        return json(502, {
+            ok: false,
+            reason: "trigger_failed_for_all_matches",
+            message: "every matched filter failed to trigger",
+        });
+    }
+    return json(200, { ok: true, eventId, matches });
+}
+// ---- Validation ----
+function validateBody(raw) {
+    if (typeof raw !== "object" || raw === null) {
+        return { ok: false, error: { error: "invalid_body", message: "expected JSON object" } };
+    }
+    const r = raw;
+    if (typeof r.environment !== "string" || !ALLOWED_ENVS.has(r.environment)) {
+        return {
+            ok: false,
+            error: {
+                error: "invalid_body",
+                message: `"environment" must be one of ${[...ALLOWED_ENVS].join(", ")}`,
+            },
+        };
+    }
+    if (typeof r.envelope !== "object" || r.envelope === null) {
+        return {
+            ok: false,
+            error: { error: "invalid_body", message: '"envelope" must be an object' },
+        };
+    }
+    const envelope = r.envelope;
+    if (typeof envelope.name !== "string" || envelope.name.length === 0) {
+        return {
+            ok: false,
+            error: { error: "invalid_body", message: '"envelope.name" must be a non-empty string' },
+        };
+    }
+    if (typeof envelope.emittedAt !== "string" || envelope.emittedAt.length === 0) {
+        return {
+            ok: false,
+            error: {
+                error: "invalid_body",
+                message: '"envelope.emittedAt" must be an ISO timestamp string',
+            },
+        };
+    }
+    if (envelope.metadata !== undefined &&
+        (typeof envelope.metadata !== "object" || envelope.metadata === null)) {
+        return {
+            ok: false,
+            error: {
+                error: "invalid_body",
+                message: '"envelope.metadata" must be an object when supplied',
+            },
+        };
+    }
+    if (r.idempotencyKey !== undefined && typeof r.idempotencyKey !== "string") {
+        return {
+            ok: false,
+            error: { error: "invalid_body", message: '"idempotencyKey" must be a string when supplied' },
+        };
+    }
+    return {
+        ok: true,
+        body: {
+            environment: r.environment,
+            envelope: {
+                name: envelope.name,
+                data: envelope.data,
+                metadata: envelope.metadata,
+                emittedAt: envelope.emittedAt,
+            },
+            idempotencyKey: r.idempotencyKey,
+        },
+    };
+}
+// ---- Internal helpers ----
+// Fallback id derivation lives in `@voyantjs/workflows/events`'s
+// `deriveStableEventId` and is used inline above — content-derived so
+// external callers (HTTP retries, third-party webhooks) dedupe naturally
+// across re-deliveries (architecture doc §15.2).
+async function safeReadText(resp) {
+    try {
+        return await resp.text();
+    }
+    catch {
+        return "";
+    }
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: {
+            "content-type": "application/json; charset=utf-8",
+            "access-control-allow-origin": "*",
+            "access-control-allow-methods": "GET,POST,OPTIONS",
+            "access-control-allow-headers": "content-type, x-voyant-protocol",
+        },
+    });
+}

package/dist/index.d.ts

@@ -1,7 +1,9 @@
 export { type BundleLocation, type CfContainerRunnerDeps, type ContainerNamespaceLike, createCfContainerStepRunner, } from "./cf-container-runner.js";
-export { createDispatchStepHandler, type DispatchHandlerDeps, } from "./dispatch-handler.js";
+export { type CloudflareEdgeDriverOptions, createCloudflareEdgeDriver, } from "./cloudflare-edge-driver.js";
+export { createHttpDispatcher, createInlineDispatcher, createServiceBindingDispatcher, type HttpDispatcherOptions, type ServiceBindingDispatcherOptions, type ServiceBindingLike, type StepDispatcher, type StepDispatcherContext, } from "./dispatchers.js";
 export { createDurableObjectRunStore } from "./do-store.js";
 export { type DurableObjectDeps, handleDurableObjectAlarm, handleDurableObjectRequest, } from "./durable-object.js";
+export { type CfManifestEnvelope, type CfManifestStore, type CreateKvManifestStoreOptions, createInMemoryKv, createKvManifestStore, type KvNamespaceLike, } from "./manifest-kv-store.js";
 export { createR2Presigner, type PresignArgs, type R2PresignerOptions, } from "./r2-sign.js";
 export * from "./types.js";
 export { type DurableObjectNamespaceLike, handleWorkerRequest, type WorkerFetchDeps, } from "./worker.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA4BA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,KAAK,2BAA2B,EAChC,0BAA0B,GAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,EACjC,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -1,8 +1,8 @@
 // @voyantjs/workflows-orchestrator-cloudflare
 //
 // Cloudflare Worker + Durable Object adapter for @voyantjs/workflows-orchestrator.
-// Composes the protocol-agnostic state machine in @voyantjs/workflows-orchestrator
-// with a DO-backed run store and a dispatch-namespace step handler.
+// Composes the protocol-agnostic state machine with a DO-backed run
+// store and a pluggable step dispatcher (`StepDispatcher`).
 //
 // Typical wrangler.jsonc layout:
 //
@@ -15,20 +15,28 @@
 //         { "name": "WORKFLOW_RUN_DO", "class_name": "WorkflowRunDO" }
 //       ]
 //     },
-//     "dispatch_namespaces": [
-//       { "binding": "DISPATCHER", "namespace": "voyant-tenants" }
-//     ],
 //     "migrations": [
 //       { "tag": "v1", "new_sqlite_classes": ["WorkflowRunDO"] }
 //     ]
 //   }
 //
+// Pick a dispatcher in your DO's `deps()` based on where workflow
+// code lives:
+//   * createInlineDispatcher          — same Worker as the orchestrator
+//   * createServiceBindingDispatcher  — sibling Worker via service binding
+//   * createHttpDispatcher            — arbitrary HTTP endpoint
+//
+// Hosted multi-tenant providers implement custom dispatchers in their
+// own deployment code.
+//
 // See docs/runtime-protocol.md §2 and docs/design.md §6 for the
 // design this adapter implements.
 export { createCfContainerStepRunner, } from "./cf-container-runner.js";
-export { createDispatchStepHandler, } from "./dispatch-handler.js";
+export { createCloudflareEdgeDriver, } from "./cloudflare-edge-driver.js";
+export { createHttpDispatcher, createInlineDispatcher, createServiceBindingDispatcher, } from "./dispatchers.js";
 export { createDurableObjectRunStore } from "./do-store.js";
 export { handleDurableObjectAlarm, handleDurableObjectRequest, } from "./durable-object.js";
+export { createInMemoryKv, createKvManifestStore, } from "./manifest-kv-store.js";
 export { createR2Presigner, } from "./r2-sign.js";
 export * from "./types.js";
 export { handleWorkerRequest, } from "./worker.js";

package/dist/manifest-handler.d.ts

@@ -0,0 +1,16 @@
+import type { CfManifestStore } from "./manifest-kv-store.js";
+export interface ManifestHandlerDeps {
+    manifestStore: CfManifestStore;
+    logger?: (level: "info" | "warn" | "error", msg: string, data?: object) => void;
+}
+/**
+ * Handle `POST /api/manifests`. Body: `{ environment, manifest }`.
+ * `manifest.versionId` is the registered key. Returns `{ ok: true, versionId }`.
+ */
+export declare function handleRegisterManifest(req: Request, deps: ManifestHandlerDeps): Promise<Response>;
+/**
+ * Handle `GET /api/manifests/:env`. Returns the current manifest envelope
+ * or 404 if no manifest is registered.
+ */
+export declare function handleGetManifest(environment: string, deps: ManifestHandlerDeps): Promise<Response>;
+//# sourceMappingURL=manifest-handler.d.ts.map

package/dist/manifest-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-handler.d.ts","sourceRoot":"","sources":["../src/manifest-handler.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAI7D,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,eAAe,CAAA;IAC9B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAChF;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,QAAQ,CAAC,CAqDnB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,QAAQ,CAAC,CAYnB"}

package/dist/manifest-handler.js

@@ -0,0 +1,92 @@
+// HTTP handlers for `/api/manifests*`. Mounted by the worker before the
+// existing `/api/runs/*` routes; both share the same auth.
+//
+//   POST /api/manifests              { environment, manifest } → { ok, versionId }
+//   GET  /api/manifests/:env                                   → manifest | 404
+//
+// Architecture: docs/architecture/workflows-runtime-architecture.md §8.2.
+const ALLOWED_ENVS = new Set(["production", "preview", "development"]);
+/**
+ * Handle `POST /api/manifests`. Body: `{ environment, manifest }`.
+ * `manifest.versionId` is the registered key. Returns `{ ok: true, versionId }`.
+ */
+export async function handleRegisterManifest(req, deps) {
+    let body;
+    try {
+        body = await req.json();
+    }
+    catch (err) {
+        return json(400, {
+            error: "invalid_json",
+            message: err instanceof Error ? err.message : String(err),
+        });
+    }
+    if (typeof body !== "object" || body === null) {
+        return json(400, { error: "invalid_body", message: "expected JSON object" });
+    }
+    const { environment, manifest } = body;
+    if (typeof environment !== "string" || !ALLOWED_ENVS.has(environment)) {
+        return json(400, {
+            error: "invalid_body",
+            message: `"environment" must be one of ${[...ALLOWED_ENVS].join(", ")}`,
+        });
+    }
+    if (typeof manifest !== "object" || manifest === null) {
+        return json(400, { error: "invalid_body", message: '"manifest" must be an object' });
+    }
+    const versionId = manifest.versionId;
+    if (typeof versionId !== "string" || versionId.length === 0) {
+        return json(400, {
+            error: "invalid_body",
+            message: '"manifest.versionId" must be a non-empty string',
+        });
+    }
+    try {
+        const result = await deps.manifestStore.registerManifest({
+            environment,
+            versionId,
+            manifest: manifest,
+        });
+        return json(200, { ok: true, versionId: result.versionId });
+    }
+    catch (err) {
+        deps.logger?.("error", "manifest registration failed", {
+            environment,
+            versionId,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return json(500, {
+            error: "register_failed",
+            message: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+/**
+ * Handle `GET /api/manifests/:env`. Returns the current manifest envelope
+ * or 404 if no manifest is registered.
+ */
+export async function handleGetManifest(environment, deps) {
+    if (!ALLOWED_ENVS.has(environment)) {
+        return json(400, {
+            error: "invalid_environment",
+            message: `environment must be one of ${[...ALLOWED_ENVS].join(", ")}`,
+        });
+    }
+    const envelope = await deps.manifestStore.getCurrent(environment);
+    if (!envelope) {
+        return json(404, { error: "not_found", environment });
+    }
+    return json(200, envelope);
+}
+// ---- Internal ----
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: {
+            "content-type": "application/json; charset=utf-8",
+            "access-control-allow-origin": "*",
+            "access-control-allow-methods": "GET,POST,OPTIONS",
+            "access-control-allow-headers": "content-type, x-voyant-protocol",
+        },
+    });
+}

package/dist/manifest-kv-store.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Structural view of a `WorkflowManifest` envelope. Mirrors the shape
+ * `@voyantjs/workflows-orchestrator-node`'s manifest store uses, declared
+ * locally so this package stays free of the Mode 2 dep.
+ */
+export interface CfManifestEnvelope {
+    environment: string;
+    versionId: string;
+    manifest: Record<string, unknown>;
+}
+export interface CfManifestStore {
+    registerManifest(envelope: CfManifestEnvelope): Promise<{
+        versionId: string;
+    }>;
+    getCurrent(environment: string): Promise<CfManifestEnvelope | null>;
+    pruneToVersions(environment: string, keep: number): Promise<{
+        deleted: number;
+    }>;
+}
+/**
+ * Subset of the CF KV namespace API we need. Declared structurally so
+ * tests can pass an in-memory fake without depending on
+ * `@cloudflare/workers-types`.
+ */
+export interface KvNamespaceLike {
+    get(key: string): Promise<string | null>;
+    put(key: string, value: string, opts?: {
+        metadata?: unknown;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+    list(opts?: {
+        prefix?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        keys: Array<{
+            name: string;
+            metadata?: unknown;
+        }>;
+        list_complete?: boolean;
+        cursor?: string;
+    }>;
+}
+export interface CreateKvManifestStoreOptions {
+    /** KV namespace binding from the worker's env. */
+    kv: KvNamespaceLike;
+}
+/**
+ * Build a KV-backed `CfManifestStore`. Stateless — every call hits KV.
+ */
+export declare function createKvManifestStore(opts: CreateKvManifestStoreOptions): CfManifestStore;
+/**
+ * Tiny in-memory implementation of `KvNamespaceLike` for tests + the CF
+ * compliance suite run that doesn't go through wrangler. Mirrors the
+ * subset of CF KV semantics we use (list returns matching prefix in
+ * lexicographic order; get returns null for missing keys).
+ */
+export declare function createInMemoryKv(): KvNamespaceLike;
+//# sourceMappingURL=manifest-kv-store.d.ts.map

package/dist/manifest-kv-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-kv-store.d.ts","sourceRoot":"","sources":["../src/manifest-kv-store.ts"],"names":[],"mappings":"AAqBA;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACnE,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjF;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7E,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACzE,IAAI,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;QACjD,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,kDAAkD;IAClD,EAAE,EAAE,eAAe,CAAA;CACpB;AAID;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,eAAe,CA4EzF;AAcD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,eAAe,CAyBlD"}