@voyantjs/workflows-orchestrator-cloudflare 0.30.3 → 0.30.5

package/dist/cloudflare-edge-driver.d.ts

@@ -5,6 +5,8 @@ import type { DurableObjectNamespaceLike } from "./worker.js";
 export interface CloudflareEdgeDriverOptions {
     /** Durable Object namespace holding one DO per run. */
     orchestratorNamespace: DurableObjectNamespaceLike;
+    /** Optional Durable Object namespace coordinating workflow concurrency across runs. */
+    concurrencyNamespace?: DurableObjectNamespaceLike;
     /** KV namespace storing serialized manifests. */
     manifestKv: KvNamespaceLike;
     /**

package/dist/cloudflare-edge-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare-edge-driver.d.ts","sourceRoot":"","sources":["../src/cloudflare-edge-driver.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,eAAe,EAMhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,aAAa,EAOd,MAAM,4BAA4B,CAAA;AAKnC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAI7D,MAAM,WAAW,2BAA2B;IAC1C,uDAAuD;IACvD,qBAAqB,EAAE,0BAA0B,CAAA;IACjD,iDAAiD;IACjD,UAAU,EAAE,eAAe,CAAA;IAC3B;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,eAAe,CAAA;IACpC,uFAAuF;IACvF,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;KACvB,CAAA;IACD,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,MAAM,CAAA;IAC1B,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAChF;AAUD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,2BAA2B,GAAG,aAAa,CAmU3F"}
+{"version":3,"file":"cloudflare-edge-driver.d.ts","sourceRoot":"","sources":["../src/cloudflare-edge-driver.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,eAAe,EAOhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,aAAa,EAOd,MAAM,4BAA4B,CAAA;AAUnC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAI7D,MAAM,WAAW,2BAA2B;IAC1C,uDAAuD;IACvD,qBAAqB,EAAE,0BAA0B,CAAA;IACjD,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,0BAA0B,CAAA;IACjD,iDAAiD;IACjD,UAAU,EAAE,eAAe,CAAA;IAC3B;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,eAAe,CAAA;IACpC,uFAAuF;IACvF,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;KACvB,CAAA;IACD,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,MAAM,CAAA;IAC1B,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAChF;AAUD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,2BAA2B,GAAG,aAAa,CAqa3F"}

package/dist/cloudflare-edge-driver.js

@@ -17,7 +17,7 @@
 //
 // See architecture doc §8.
 import { deriveStableEventId } from "@voyantjs/workflows/events";
-import { routeEvent } from "@voyantjs/workflows-orchestrator";
+import { resolveConcurrencyKey, routeEvent, WorkflowConcurrencyRejectedError, } from "@voyantjs/workflows-orchestrator";
 import { createKvManifestStore, } from "./manifest-kv-store.js";
 const DEFAULT_TENANT_META = {
     tenantId: "default",
@@ -63,6 +63,63 @@ export function createCloudflareEdgeDriver(opts) {
             const stub = opts.orchestratorNamespace.get(id);
             return stub.fetch(request);
         }
+        async function forwardToConcurrencyDO(environment, concurrencyKey, request) {
+            if (!opts.concurrencyNamespace) {
+                throw new Error("CloudflareEdgeDriver: concurrency namespace is not configured");
+            }
+            const id = opts.concurrencyNamespace.idFromName(`workflow-concurrency:${environment}:${concurrencyKey}`);
+            const stub = opts.concurrencyNamespace.get(id);
+            return stub.fetch(request);
+        }
+        function findManifestPolicy(manifest, workflowId) {
+            return manifest?.workflows.find((entry) => entry.id === workflowId)?.concurrency;
+        }
+        async function resolveConcurrencyPolicy(workflow, workflowId, environment, manifest) {
+            if (typeof workflow !== "string" && workflow.config?.concurrency) {
+                return workflow.config.concurrency;
+            }
+            return findManifestPolicy(manifest ?? (await getManifest({ environment })), workflowId);
+        }
+        async function forwardTrigger(payload, policy) {
+            if (!policy || !opts.concurrencyNamespace) {
+                return forwardToRunDO(payload.runId, new Request("https://do-internal/trigger", {
+                    method: "POST",
+                    headers: { "content-type": "application/json" },
+                    body: JSON.stringify(payload),
+                }));
+            }
+            const concurrencyKey = resolveConcurrencyKey(payload.workflowId, payload.input, policy);
+            const resp = await forwardToConcurrencyDO(payload.environment, concurrencyKey, new Request("https://do-internal/trigger", {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify({
+                    concurrency: {
+                        key: concurrencyKey,
+                        limit: policy.limit,
+                        strategy: policy.strategy,
+                    },
+                    trigger: payload,
+                }),
+            }));
+            if (resp.status === 409) {
+                const body = await safeJson(resp);
+                throw new WorkflowConcurrencyRejectedError(body?.concurrencyKey ?? concurrencyKey);
+            }
+            return resp;
+        }
+        async function releaseConcurrencySlot(detail) {
+            if (!detail || !opts.concurrencyNamespace)
+                return;
+            const policy = await resolveConcurrencyPolicy(detail.workflowId, detail.workflowId, detail.environment);
+            if (!policy)
+                return;
+            const concurrencyKey = resolveConcurrencyKey(detail.workflowId, detail.input, policy);
+            await forwardToConcurrencyDO(detail.environment, concurrencyKey, new Request("https://do-internal/release", {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify({ runId: detail.id }),
+            })).catch(() => undefined);
+        }
         function genRunId(seed) {
             if (seed !== undefined)
                 return seed;
@@ -111,11 +168,8 @@ export function createCloudflareEdgeDriver(opts) {
                 priority: triggerOpts?.priority,
                 triggeredBy: { kind: "api" },
             };
-            const resp = await forwardToRunDO(runId, new Request("https://do-internal/trigger", {
-                method: "POST",
-                headers: { "content-type": "application/json" },
-                body: JSON.stringify(payload),
-            }));
+            const policy = await resolveConcurrencyPolicy(workflow, workflowId, env);
+            const resp = await forwardTrigger(payload, policy);
             if (!resp.ok) {
                 const body = await safeText(resp);
                 throw new Error(`CloudflareEdgeDriver: trigger DO returned ${resp.status}: ${body.slice(0, 256)}`);
@@ -181,11 +235,8 @@ export function createCloudflareEdgeDriver(opts) {
                     },
                 };
                 try {
-                    const resp = await forwardToRunDO(runId, new Request("https://do-internal/trigger", {
-                        method: "POST",
-                        headers: { "content-type": "application/json" },
-                        body: JSON.stringify(payload),
-                    }));
+                    const policy = await resolveConcurrencyPolicy(entry.targetWorkflowId, entry.targetWorkflowId, args.environment, manifest);
+                    const resp = await forwardTrigger(payload, policy);
                     if (resp.ok) {
                         matches.push({
                             filterId: entry.filterId,
@@ -237,45 +288,51 @@ export function createCloudflareEdgeDriver(opts) {
         //      layer; getRun + cancelRun are direct DO RPC; listRuns +
         //      streamRun are explicitly unsupported per architecture
         //      doc §8.3) ----
+        async function getRunDetail(runId) {
+            try {
+                const resp = await forwardToRunDO(runId, new Request("https://do-internal/get", { method: "GET" }));
+                if (resp.status === 404)
+                    return null;
+                if (!resp.ok)
+                    return null;
+                const rec = (await resp.json());
+                return {
+                    id: rec.id,
+                    workflowId: rec.workflowId,
+                    status: rec.status,
+                    startedAt: rec.startedAt,
+                    completedAt: rec.completedAt,
+                    tags: [...rec.tags],
+                    environment: rec.environment,
+                    version: rec.workflowVersion,
+                    input: rec.input,
+                    output: rec.output,
+                    error: rec.error,
+                    durationMs: rec.completedAt !== undefined
+                        ? Math.max(0, rec.completedAt - rec.startedAt)
+                        : undefined,
+                };
+            }
+            catch {
+                return null;
+            }
+        }
         const admin = {
             async getRun(runId) {
-                try {
-                    const resp = await forwardToRunDO(runId, new Request("https://do-internal/get", { method: "GET" }));
-                    if (resp.status === 404)
-                        return null;
-                    if (!resp.ok)
-                        return null;
-                    const rec = (await resp.json());
-                    return {
-                        id: rec.id,
-                        workflowId: rec.workflowId,
-                        status: rec.status,
-                        startedAt: rec.startedAt,
-                        completedAt: rec.completedAt,
-                        tags: [...rec.tags],
-                        environment: rec.environment,
-                        version: rec.workflowVersion,
-                        input: rec.input,
-                        output: rec.output,
-                        error: rec.error,
-                        durationMs: rec.completedAt !== undefined
-                            ? Math.max(0, rec.completedAt - rec.startedAt)
-                            : undefined,
-                    };
-                }
-                catch {
-                    return null;
-                }
+                return getRunDetail(runId);
             },
             async cancelRun(runId, cancelOpts) {
                 // Per architecture doc §21.21, cancel does NOT run compensations
                 // by default; the `compensate` flag is accepted but no-op in v1.
                 void cancelOpts?.compensate;
-                await forwardToRunDO(runId, new Request("https://do-internal/cancel", {
+                const detail = opts.concurrencyNamespace ? await getRunDetail(runId) : null;
+                const resp = await forwardToRunDO(runId, new Request("https://do-internal/cancel", {
                     method: "POST",
                     headers: { "content-type": "application/json" },
                     body: JSON.stringify({ reason: cancelOpts?.reason }),
                 }));
+                if (resp.ok)
+                    await releaseConcurrencySlot(detail);
             },
             async listRuns(_listOpts) {
                 // Self-host Mode 1 has no native cross-run query layer; voyant-cloud
@@ -319,3 +376,11 @@ async function safeText(resp) {
         return "";
     }
 }
+async function safeJson(resp) {
+    try {
+        return (await resp.json());
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/concurrency-coordinator.d.ts

@@ -0,0 +1,14 @@
+import type { DurableObjectStorageLike } from "./types.js";
+import type { DurableObjectNamespaceLike } from "./worker.js";
+export interface ConcurrencyCoordinatorDeps<Id = unknown> {
+    storage: DurableObjectStorageLike;
+    runDO: DurableObjectNamespaceLike<Id>;
+}
+export interface ConcurrencyCoordinator {
+    fetch(req: Request): Promise<Response>;
+}
+export declare function createConcurrencyCoordinator<Id>(deps: ConcurrencyCoordinatorDeps<Id>): ConcurrencyCoordinator;
+export declare function handleConcurrencyCoordinatorRequest<Id>(req: Request, deps: ConcurrencyCoordinatorDeps<Id> & {
+    coordinator?: ConcurrencyCoordinator;
+}): Promise<Response>;
+//# sourceMappingURL=concurrency-coordinator.d.ts.map

package/dist/concurrency-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency-coordinator.d.ts","sourceRoot":"","sources":["../src/concurrency-coordinator.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAkB,MAAM,YAAY,CAAA;AAC1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAE7D,MAAM,WAAW,0BAA0B,CAAC,EAAE,GAAG,OAAO;IACtD,OAAO,EAAE,wBAAwB,CAAA;IACjC,KAAK,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACvC;AA0BD,wBAAgB,4BAA4B,CAAC,EAAE,EAC7C,IAAI,EAAE,0BAA0B,CAAC,EAAE,CAAC,GACnC,sBAAsB,CAgJxB;AAED,wBAAsB,mCAAmC,CAAC,EAAE,EAC1D,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,0BAA0B,CAAC,EAAE,CAAC,GAAG;IAAE,WAAW,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAC9E,OAAO,CAAC,QAAQ,CAAC,CAGnB"}

package/dist/concurrency-coordinator.js

@@ -0,0 +1,163 @@
+import { WorkflowConcurrencyRejectedError, } from "@voyantjs/workflows-orchestrator";
+const STATE_KEY = "state";
+export function createConcurrencyCoordinator(deps) {
+    const waiters = [];
+    let stateLock = Promise.resolve();
+    async function withStateLock(fn) {
+        const previous = stateLock;
+        let release;
+        stateLock = new Promise((resolve) => {
+            release = resolve;
+        });
+        await previous;
+        try {
+            return await fn();
+        }
+        finally {
+            release();
+        }
+    }
+    async function loadState() {
+        return (await deps.storage.get(STATE_KEY)) ?? { active: [] };
+    }
+    async function saveState(state) {
+        await deps.storage.put(STATE_KEY, { active: [...state.active] });
+    }
+    async function acquire(payload) {
+        const runId = payload.trigger.runId;
+        let holdersToCancel;
+        let waitForSlot;
+        await withStateLock(async () => {
+            const state = await loadState();
+            if (state.active.includes(runId))
+                return;
+            const limit = normalizeLimit(payload.concurrency.limit);
+            if (state.active.length < limit) {
+                state.active.push(runId);
+                await saveState(state);
+                return;
+            }
+            const strategy = payload.concurrency.strategy ?? "queue";
+            if (strategy === "cancel-newest") {
+                throw new WorkflowConcurrencyRejectedError(payload.concurrency.key);
+            }
+            if (strategy === "cancel-in-progress") {
+                holdersToCancel = [...state.active];
+                state.active = [runId];
+                await saveState(state);
+                return;
+            }
+            waitForSlot = new Promise((resolve) => {
+                waiters.push({ runId, resolve });
+            });
+        });
+        if (holdersToCancel) {
+            await Promise.all(holdersToCancel.map((holder) => forwardToRunDO(deps.runDO, holder, "/cancel", {
+                reason: "cancelled by workflow concurrency policy",
+            }).catch(() => undefined)));
+        }
+        await waitForSlot;
+    }
+    async function release(runId) {
+        let next;
+        await withStateLock(async () => {
+            const state = await loadState();
+            const wasActive = state.active.includes(runId);
+            state.active = state.active.filter((holder) => holder !== runId);
+            next = wasActive ? waiters.shift() : undefined;
+            if (wasActive && next) {
+                state.active.push(next.runId);
+            }
+            await saveState(state);
+        });
+        next?.resolve();
+    }
+    return {
+        async fetch(req) {
+            const url = new URL(req.url);
+            if (req.method === "POST" && url.pathname === "/trigger") {
+                const payload = (await req.json());
+                try {
+                    await acquire(payload);
+                }
+                catch (err) {
+                    if (err instanceof WorkflowConcurrencyRejectedError) {
+                        return json(409, {
+                            error: err.code,
+                            message: err.message,
+                            concurrencyKey: err.concurrencyKey,
+                        });
+                    }
+                    throw err;
+                }
+                let resp;
+                try {
+                    resp = await forwardToRunDO(deps.runDO, payload.trigger.runId, "/trigger", {
+                        ...payload.trigger,
+                        concurrencyLease: {
+                            environment: payload.trigger.environment ?? "development",
+                            key: payload.concurrency.key,
+                            runId: payload.trigger.runId,
+                        },
+                    });
+                    if (resp.ok) {
+                        const record = (await resp.clone().json());
+                        if (isTerminal(record.status)) {
+                            await release(record.id);
+                        }
+                    }
+                    else {
+                        await release(payload.trigger.runId);
+                    }
+                    return resp;
+                }
+                catch (err) {
+                    await release(payload.trigger.runId);
+                    throw err;
+                }
+            }
+            if (req.method === "POST" && url.pathname === "/release") {
+                const payload = (await req.json());
+                await release(payload.runId);
+                return json(200, { ok: true });
+            }
+            if (req.method === "GET" && url.pathname === "/state") {
+                return json(200, await loadState());
+            }
+            return json(404, { error: "route_not_found", path: url.pathname });
+        },
+    };
+}
+export async function handleConcurrencyCoordinatorRequest(req, deps) {
+    const coordinator = deps.coordinator ?? createConcurrencyCoordinator(deps);
+    return coordinator.fetch(req);
+}
+async function forwardToRunDO(runDO, runId, path, body) {
+    const id = runDO.idFromName(runId);
+    const stub = runDO.get(id);
+    return stub.fetch(new Request(`https://do-internal${path}`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+    }));
+}
+function normalizeLimit(limit) {
+    if (limit === undefined)
+        return 1;
+    if (!Number.isFinite(limit))
+        return 1;
+    return Math.max(1, Math.floor(limit));
+}
+function isTerminal(status) {
+    return (status === "completed" ||
+        status === "failed" ||
+        status === "cancelled" ||
+        status === "compensated" ||
+        status === "compensation_failed");
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "content-type": "application/json; charset=utf-8" },
+    });
+}

package/dist/durable-object.d.ts

@@ -1,6 +1,7 @@
 import { applyWaitpointInjection, driveUntilPaused, type RunRecord } from "@voyantjs/workflows-orchestrator";
 import type { StepDispatcher } from "./dispatchers.js";
 import type { DurableObjectStorageLike } from "./types.js";
+import type { DurableObjectNamespaceLike } from "./worker.js";
 export interface DurableObjectDeps {
     storage: DurableObjectStorageLike;
     /**
@@ -16,6 +17,7 @@ export interface DurableObjectDeps {
      *  - `createHttpDispatcher`           — arbitrary HTTP endpoint
      */
     dispatcher: StepDispatcher;
+    concurrencyDO?: DurableObjectNamespaceLike;
     now?: () => number;
 }
 export declare function handleDurableObjectRequest(req: Request, deps: DurableObjectDeps): Promise<Response>;

package/dist/durable-object.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-object.d.ts","sourceRoot":"","sources":["../src/durable-object.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAKhB,KAAK,SAAS,EAEf,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,KAAK,EAEV,wBAAwB,EAGzB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,wBAAwB,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,cAAc,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAYD,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CAyEnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCrF;AAyDD,YAAY,EAAE,SAAS,EAAE,CAAA;AAEzB,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"durable-object.d.ts","sourceRoot":"","sources":["../src/durable-object.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAKhB,KAAK,SAAS,EAEf,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,KAAK,EAGV,wBAAwB,EAGzB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAE7D,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,wBAAwB,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,cAAc,CAAA;IAC1B,aAAa,CAAC,EAAE,0BAA0B,CAAA;IAC1C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAcD,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CA+EnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCrF;AAyFD,YAAY,EAAE,SAAS,EAAE,CAAA;AAEzB,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,CAAA"}

package/dist/durable-object.js

@@ -18,6 +18,7 @@
 // the public surface is the outer Worker's /api/* routes.
 import { applyWaitpointInjection, driveUntilPaused, cancel as orchestratorCancel, resume as orchestratorResume, trigger as orchestratorTrigger, } from "@voyantjs/workflows-orchestrator";
 import { createDurableObjectRunStore } from "./do-store.js";
+const CONCURRENCY_LEASE_KEY = "concurrencyLease";
 function resolve(deps, record) {
     return deps.dispatcher({
         tenantScript: record.tenantMeta.tenantScript,
@@ -29,6 +30,9 @@ export async function handleDurableObjectRequest(req, deps) {
     const store = createDurableObjectRunStore(deps.storage);
     if (req.method === "POST" && url.pathname === "/trigger") {
         const payload = (await req.json());
+        if (payload.concurrencyLease) {
+            await deps.storage.put(CONCURRENCY_LEASE_KEY, payload.concurrencyLease);
+        }
         const handler = resolve(deps, {
             tenantMeta: payload.tenantMeta,
             workflowId: payload.workflowId,
@@ -42,6 +46,7 @@ export async function handleDurableObjectRequest(req, deps) {
             tags: payload.tags,
             runId: payload.runId,
             idempotencyKey: payload.idempotencyKey,
+            triggeredBy: payload.triggeredBy,
             delay: typeof payload.delay === "object" && payload.delay !== null && "wakeAt" in payload.delay
                 ? new Date(payload.delay.wakeAt)
                 : payload.delay,
@@ -62,6 +67,7 @@ export async function handleDurableObjectRequest(req, deps) {
             return json(status, { error: out.status, message: out.message });
         }
         await reconcileAlarm(out.record, store, deps);
+        await releaseConcurrencyLeaseIfTerminal(out.record, deps);
         return json(200, out.record);
     }
     if (req.method === "POST" && url.pathname === "/cancel") {
@@ -76,6 +82,7 @@ export async function handleDurableObjectRequest(req, deps) {
             return json(status, { error: out.status, message: out.message });
         }
         await reconcileAlarm(out.record, store, deps);
+        await releaseConcurrencyLeaseIfTerminal(out.record, deps);
         return json(200, out.record);
     }
     if (req.method === "GET" && url.pathname === "/get") {
@@ -133,6 +140,7 @@ export async function handleDurableObjectAlarm(deps) {
     await driveUntilPaused(record, { handler, now: deps.now });
     await store.save(record);
     await reconcileAlarm(record, store, deps);
+    await releaseConcurrencyLeaseIfTerminal(record, deps);
 }
 /**
  * Look at the record's pending waitpoints; if any are DATETIME,
@@ -177,6 +185,30 @@ async function getStoredRunId(store) {
     const all = await store.list();
     return all[0]?.id;
 }
+async function releaseConcurrencyLeaseIfTerminal(record, deps) {
+    if (!deps.concurrencyDO || !isTerminal(record.status))
+        return;
+    const lease = await deps.storage.get(CONCURRENCY_LEASE_KEY);
+    if (!lease)
+        return;
+    const id = deps.concurrencyDO.idFromName(`workflow-concurrency:${lease.environment}:${lease.key}`);
+    const stub = deps.concurrencyDO.get(id);
+    await stub
+        .fetch(new Request("https://do-internal/release", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ runId: lease.runId }),
+    }))
+        .catch(() => undefined);
+    await deps.storage.delete(CONCURRENCY_LEASE_KEY);
+}
+function isTerminal(status) {
+    return (status === "completed" ||
+        status === "failed" ||
+        status === "cancelled" ||
+        status === "compensated" ||
+        status === "compensation_failed");
+}
 function json(status, body) {
     return new Response(JSON.stringify(body), {
         status,

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { type BundleLocation, type CfContainerRunnerDeps, type ContainerNamespaceLike, createCfContainerStepRunner, } from "./cf-container-runner.js";
 export { type CloudflareEdgeDriverOptions, createCloudflareEdgeDriver, } from "./cloudflare-edge-driver.js";
+export { type ConcurrencyCoordinator, type ConcurrencyCoordinatorDeps, createConcurrencyCoordinator, handleConcurrencyCoordinatorRequest, } from "./concurrency-coordinator.js";
 export { createHttpDispatcher, createInlineDispatcher, createServiceBindingDispatcher, type HttpDispatcherOptions, type ServiceBindingDispatcherOptions, type ServiceBindingLike, type StepDispatcher, type StepDispatcherContext, } from "./dispatchers.js";
 export { createDurableObjectRunStore } from "./do-store.js";
 export { type DurableObjectDeps, handleDurableObjectAlarm, handleDurableObjectRequest, } from "./durable-object.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,KAAK,2BAA2B,EAChC,0BAA0B,GAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,EACjC,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,KAAK,2BAA2B,EAChC,0BAA0B,GAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,mCAAmC,GACpC,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,EACjC,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -33,6 +33,7 @@
 // design this adapter implements.
 export { createCfContainerStepRunner, } from "./cf-container-runner.js";
 export { createCloudflareEdgeDriver, } from "./cloudflare-edge-driver.js";
+export { createConcurrencyCoordinator, handleConcurrencyCoordinatorRequest, } from "./concurrency-coordinator.js";
 export { createHttpDispatcher, createInlineDispatcher, createServiceBindingDispatcher, } from "./dispatchers.js";
 export { createDurableObjectRunStore } from "./do-store.js";
 export { handleDurableObjectAlarm, handleDurableObjectRequest, } from "./durable-object.js";

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-import type { Duration } from "@voyantjs/workflows";
+import type { Duration, EnvironmentName, RunTrigger } from "@voyantjs/workflows";
 import type { WaitpointInjection } from "@voyantjs/workflows-orchestrator";
 /**
  * Subset of Cloudflare's `DurableObjectStorage` we actually use.
@@ -58,6 +58,13 @@ export interface TriggerPayload {
         wakeAt: number;
     };
     priority?: number;
+    triggeredBy?: RunTrigger;
+    concurrencyLease?: ConcurrencyLease;
+}
+export interface ConcurrencyLease {
+    environment: EnvironmentName;
+    key: string;
+    runId: string;
 }
 /** Cancel payload. */
 export interface CancelPayload {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;IAC3C,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/E,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,gCAAgC;IAChC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9B;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAA;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,kBAAkB,CAAA;CAC9B;AAED,uBAAuB;AACvB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAA;IACtD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,QAAQ,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,sBAAsB;AACtB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,WAAW,GAAG,OAAO;IAC/C,8FAA8F;IAC9F,eAAe,EAAE,WAAW,CAAA;CAC7B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAE1E;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;IAC3C,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/E,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,gCAAgC;IAChC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9B;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAA;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,kBAAkB,CAAA;CAC9B;AAED,uBAAuB;AACvB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAA;IACtD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,QAAQ,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,eAAe,CAAA;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED,sBAAsB;AACtB,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,WAAW,GAAG,OAAO;IAC/C,8FAA8F;IAC9F,eAAe,EAAE,WAAW,CAAA;CAC7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyantjs/workflows-orchestrator-cloudflare",
-  "version": "0.30.3",
+  "version": "0.30.5",
   "description": "Cloudflare Worker + Durable Object adapter for @voyantjs/workflows-orchestrator. Dispatches workflow-step requests to tenant Workers via a Workers-for-Platforms dispatch namespace.",
   "license": "Apache-2.0",
   "repository": {
@@ -26,8 +26,8 @@
     "NOTICE"
   ],
   "dependencies": {
-    "@voyantjs/workflows-orchestrator": "0.30.3",
-    "@voyantjs/workflows": "0.30.3"
+    "@voyantjs/workflows-orchestrator": "0.30.5",
+    "@voyantjs/workflows": "0.30.5"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.15.1",

package/src/cloudflare-edge-driver.ts

@@ -24,6 +24,7 @@ import type {
   RunDetail,
   RunSummary,
   TriggerOptions,
+  WorkflowDefinition,
 } from "@voyantjs/workflows"
 import type {
   DriverFactory,
@@ -36,13 +37,19 @@ import type {
 } from "@voyantjs/workflows/driver"
 import { deriveStableEventId } from "@voyantjs/workflows/events"
 import type { WorkflowManifest } from "@voyantjs/workflows/protocol"
-import { routeEvent } from "@voyantjs/workflows-orchestrator"
+import {
+  type RuntimeConcurrencyPolicy,
+  resolveConcurrencyKey,
+  routeEvent,
+  WorkflowConcurrencyRejectedError,
+} from "@voyantjs/workflows-orchestrator"
 
 import {
   type CfManifestStore,
   createKvManifestStore,
   type KvNamespaceLike,
 } from "./manifest-kv-store.js"
+import type { TriggerPayload } from "./types.js"
 import type { DurableObjectNamespaceLike } from "./worker.js"
 
 // ---- Public factory options ----
@@ -50,6 +57,8 @@ import type { DurableObjectNamespaceLike } from "./worker.js"
 export interface CloudflareEdgeDriverOptions {
   /** Durable Object namespace holding one DO per run. */
   orchestratorNamespace: DurableObjectNamespaceLike
+  /** Optional Durable Object namespace coordinating workflow concurrency across runs. */
+  concurrencyNamespace?: DurableObjectNamespaceLike
   /** KV namespace storing serialized manifests. */
   manifestKv: KvNamespaceLike
   /**
@@ -129,6 +138,99 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
       return stub.fetch(request)
     }
 
+    async function forwardToConcurrencyDO(
+      environment: EnvironmentName,
+      concurrencyKey: string,
+      request: Request,
+    ): Promise<Response> {
+      if (!opts.concurrencyNamespace) {
+        throw new Error("CloudflareEdgeDriver: concurrency namespace is not configured")
+      }
+      const id = opts.concurrencyNamespace.idFromName(
+        `workflow-concurrency:${environment}:${concurrencyKey}`,
+      )
+      const stub = opts.concurrencyNamespace.get(id)
+      return stub.fetch(request)
+    }
+
+    function findManifestPolicy(
+      manifest: WorkflowManifest | null,
+      workflowId: string,
+    ): RuntimeConcurrencyPolicy | undefined {
+      return manifest?.workflows.find((entry) => entry.id === workflowId)?.concurrency
+    }
+
+    async function resolveConcurrencyPolicy(
+      workflow: { config?: { concurrency?: unknown } } | string,
+      workflowId: string,
+      environment: EnvironmentName,
+      manifest?: WorkflowManifest | null,
+    ): Promise<RuntimeConcurrencyPolicy | undefined> {
+      if (typeof workflow !== "string" && workflow.config?.concurrency) {
+        return workflow.config.concurrency as RuntimeConcurrencyPolicy
+      }
+      return findManifestPolicy(manifest ?? (await getManifest({ environment })), workflowId)
+    }
+
+    async function forwardTrigger(
+      payload: TriggerPayload & { runId: string; environment: EnvironmentName },
+      policy?: RuntimeConcurrencyPolicy,
+    ): Promise<Response> {
+      if (!policy || !opts.concurrencyNamespace) {
+        return forwardToRunDO(
+          payload.runId,
+          new Request("https://do-internal/trigger", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(payload),
+          }),
+        )
+      }
+
+      const concurrencyKey = resolveConcurrencyKey(payload.workflowId, payload.input, policy)
+      const resp = await forwardToConcurrencyDO(
+        payload.environment,
+        concurrencyKey,
+        new Request("https://do-internal/trigger", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({
+            concurrency: {
+              key: concurrencyKey,
+              limit: policy.limit,
+              strategy: policy.strategy,
+            },
+            trigger: payload,
+          }),
+        }),
+      )
+      if (resp.status === 409) {
+        const body = await safeJson<{ concurrencyKey?: string }>(resp)
+        throw new WorkflowConcurrencyRejectedError(body?.concurrencyKey ?? concurrencyKey)
+      }
+      return resp
+    }
+
+    async function releaseConcurrencySlot(detail: RunDetail | null): Promise<void> {
+      if (!detail || !opts.concurrencyNamespace) return
+      const policy = await resolveConcurrencyPolicy(
+        detail.workflowId,
+        detail.workflowId,
+        detail.environment,
+      )
+      if (!policy) return
+      const concurrencyKey = resolveConcurrencyKey(detail.workflowId, detail.input, policy)
+      await forwardToConcurrencyDO(
+        detail.environment,
+        concurrencyKey,
+        new Request("https://do-internal/release", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ runId: detail.id }),
+        }),
+      ).catch(() => undefined)
+    }
+
     function genRunId(seed?: string): string {
       if (seed !== undefined) return seed
       if (opts.idGenerator) return opts.idGenerator()
@@ -162,7 +264,7 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
     }
 
     async function trigger<TIn, TOut>(
-      workflow: { id: string } | string,
+      workflow: WorkflowDefinition<TIn, TOut> | string,
       input: TIn,
       triggerOpts?: TriggerOptions,
     ): Promise<Run<TOut>> {
@@ -190,13 +292,10 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
         priority: triggerOpts?.priority,
         triggeredBy: { kind: "api" as const },
       }
-      const resp = await forwardToRunDO(
-        runId,
-        new Request("https://do-internal/trigger", {
-          method: "POST",
-          headers: { "content-type": "application/json" },
-          body: JSON.stringify(payload),
-        }),
+      const policy = await resolveConcurrencyPolicy(workflow, workflowId, env)
+      const resp = await forwardTrigger(
+        payload as TriggerPayload & { runId: string; environment: EnvironmentName },
+        policy,
       )
       if (!resp.ok) {
         const body = await safeText(resp)
@@ -273,13 +372,15 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
           },
         }
         try {
-          const resp = await forwardToRunDO(
-            runId,
-            new Request("https://do-internal/trigger", {
-              method: "POST",
-              headers: { "content-type": "application/json" },
-              body: JSON.stringify(payload),
-            }),
+          const policy = await resolveConcurrencyPolicy(
+            entry.targetWorkflowId,
+            entry.targetWorkflowId,
+            args.environment,
+            manifest,
+          )
+          const resp = await forwardTrigger(
+            payload as TriggerPayload & { runId: string; environment: EnvironmentName },
+            policy,
           )
           if (resp.ok) {
             matches.push({
@@ -334,55 +435,60 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
     //      streamRun are explicitly unsupported per architecture
     //      doc §8.3) ----
 
+    async function getRunDetail(runId: string): Promise<RunDetail | null> {
+      try {
+        const resp = await forwardToRunDO(
+          runId,
+          new Request("https://do-internal/get", { method: "GET" }),
+        )
+        if (resp.status === 404) return null
+        if (!resp.ok) return null
+        const rec = (await resp.json()) as {
+          id: string
+          workflowId: string
+          workflowVersion: string
+          status: RunSummary["status"]
+          startedAt: number
+          completedAt?: number
+          tags: string[]
+          environment: EnvironmentName
+          input: unknown
+          output?: unknown
+          error?: unknown
+        }
+        return {
+          id: rec.id,
+          workflowId: rec.workflowId,
+          status: rec.status,
+          startedAt: rec.startedAt,
+          completedAt: rec.completedAt,
+          tags: [...rec.tags],
+          environment: rec.environment,
+          version: rec.workflowVersion,
+          input: rec.input,
+          output: rec.output,
+          error: rec.error,
+          durationMs:
+            rec.completedAt !== undefined
+              ? Math.max(0, rec.completedAt - rec.startedAt)
+              : undefined,
+        }
+      } catch {
+        return null
+      }
+    }
+
     const admin: Partial<WorkflowAdmin> = {
       async getRun(runId: string): Promise<RunDetail | null> {
-        try {
-          const resp = await forwardToRunDO(
-            runId,
-            new Request("https://do-internal/get", { method: "GET" }),
-          )
-          if (resp.status === 404) return null
-          if (!resp.ok) return null
-          const rec = (await resp.json()) as {
-            id: string
-            workflowId: string
-            workflowVersion: string
-            status: RunSummary["status"]
-            startedAt: number
-            completedAt?: number
-            tags: string[]
-            environment: EnvironmentName
-            input: unknown
-            output?: unknown
-            error?: unknown
-          }
-          return {
-            id: rec.id,
-            workflowId: rec.workflowId,
-            status: rec.status,
-            startedAt: rec.startedAt,
-            completedAt: rec.completedAt,
-            tags: [...rec.tags],
-            environment: rec.environment,
-            version: rec.workflowVersion,
-            input: rec.input,
-            output: rec.output,
-            error: rec.error,
-            durationMs:
-              rec.completedAt !== undefined
-                ? Math.max(0, rec.completedAt - rec.startedAt)
-                : undefined,
-          }
-        } catch {
-          return null
-        }
+        return getRunDetail(runId)
       },
 
       async cancelRun(runId: string, cancelOpts?: { reason?: string; compensate?: boolean }) {
         // Per architecture doc §21.21, cancel does NOT run compensations
         // by default; the `compensate` flag is accepted but no-op in v1.
         void cancelOpts?.compensate
-        await forwardToRunDO(
+        const detail = opts.concurrencyNamespace ? await getRunDetail(runId) : null
+        const resp = await forwardToRunDO(
           runId,
           new Request("https://do-internal/cancel", {
             method: "POST",
@@ -390,6 +496,7 @@ export function createCloudflareEdgeDriver(opts: CloudflareEdgeDriverOptions): D
             body: JSON.stringify({ reason: cancelOpts?.reason }),
           }),
         )
+        if (resp.ok) await releaseConcurrencySlot(detail)
       },
 
       async listRuns(_listOpts?: ListRunsOptions) {
@@ -438,3 +545,11 @@ async function safeText(resp: Response): Promise<string> {
     return ""
   }
 }
+
+async function safeJson<T>(resp: Response): Promise<T | undefined> {
+  try {
+    return (await resp.json()) as T
+  } catch {
+    return undefined
+  }
+}

package/src/concurrency-coordinator.ts

@@ -0,0 +1,237 @@
+import {
+  type RunRecord,
+  type RuntimeConcurrencyPolicy,
+  WorkflowConcurrencyRejectedError,
+} from "@voyantjs/workflows-orchestrator"
+
+import type { DurableObjectStorageLike, TriggerPayload } from "./types.js"
+import type { DurableObjectNamespaceLike } from "./worker.js"
+
+export interface ConcurrencyCoordinatorDeps<Id = unknown> {
+  storage: DurableObjectStorageLike
+  runDO: DurableObjectNamespaceLike<Id>
+}
+
+export interface ConcurrencyCoordinator {
+  fetch(req: Request): Promise<Response>
+}
+
+interface CoordinatorState {
+  active: string[]
+}
+
+interface ConcurrencyTriggerPayload {
+  concurrency: {
+    key: string
+    limit?: number
+    strategy?: RuntimeConcurrencyPolicy["strategy"]
+  }
+  trigger: TriggerPayload & { runId: string }
+}
+
+interface ReleasePayload {
+  runId: string
+}
+
+interface Waiter {
+  runId: string
+  resolve(): void
+}
+
+const STATE_KEY = "state"
+
+export function createConcurrencyCoordinator<Id>(
+  deps: ConcurrencyCoordinatorDeps<Id>,
+): ConcurrencyCoordinator {
+  const waiters: Waiter[] = []
+  let stateLock: Promise<void> = Promise.resolve()
+
+  async function withStateLock<T>(fn: () => Promise<T>): Promise<T> {
+    const previous = stateLock
+    let release!: () => void
+    stateLock = new Promise<void>((resolve) => {
+      release = resolve
+    })
+    await previous
+    try {
+      return await fn()
+    } finally {
+      release()
+    }
+  }
+
+  async function loadState(): Promise<CoordinatorState> {
+    return (await deps.storage.get<CoordinatorState>(STATE_KEY)) ?? { active: [] }
+  }
+
+  async function saveState(state: CoordinatorState): Promise<void> {
+    await deps.storage.put(STATE_KEY, { active: [...state.active] })
+  }
+
+  async function acquire(payload: ConcurrencyTriggerPayload): Promise<void> {
+    const runId = payload.trigger.runId
+    let holdersToCancel: string[] | undefined
+    let waitForSlot: Promise<void> | undefined
+
+    await withStateLock(async () => {
+      const state = await loadState()
+      if (state.active.includes(runId)) return
+
+      const limit = normalizeLimit(payload.concurrency.limit)
+      if (state.active.length < limit) {
+        state.active.push(runId)
+        await saveState(state)
+        return
+      }
+
+      const strategy = payload.concurrency.strategy ?? "queue"
+      if (strategy === "cancel-newest") {
+        throw new WorkflowConcurrencyRejectedError(payload.concurrency.key)
+      }
+
+      if (strategy === "cancel-in-progress") {
+        holdersToCancel = [...state.active]
+        state.active = [runId]
+        await saveState(state)
+        return
+      }
+
+      waitForSlot = new Promise<void>((resolve) => {
+        waiters.push({ runId, resolve })
+      })
+    })
+
+    if (holdersToCancel) {
+      await Promise.all(
+        holdersToCancel.map((holder) =>
+          forwardToRunDO(deps.runDO, holder, "/cancel", {
+            reason: "cancelled by workflow concurrency policy",
+          }).catch(() => undefined),
+        ),
+      )
+    }
+
+    await waitForSlot
+  }
+
+  async function release(runId: string): Promise<void> {
+    let next: Waiter | undefined
+    await withStateLock(async () => {
+      const state = await loadState()
+      const wasActive = state.active.includes(runId)
+      state.active = state.active.filter((holder) => holder !== runId)
+      next = wasActive ? waiters.shift() : undefined
+      if (wasActive && next) {
+        state.active.push(next.runId)
+      }
+      await saveState(state)
+    })
+    next?.resolve()
+  }
+
+  return {
+    async fetch(req) {
+      const url = new URL(req.url)
+
+      if (req.method === "POST" && url.pathname === "/trigger") {
+        const payload = (await req.json()) as ConcurrencyTriggerPayload
+        try {
+          await acquire(payload)
+        } catch (err) {
+          if (err instanceof WorkflowConcurrencyRejectedError) {
+            return json(409, {
+              error: err.code,
+              message: err.message,
+              concurrencyKey: err.concurrencyKey,
+            })
+          }
+          throw err
+        }
+
+        let resp: Response | undefined
+        try {
+          resp = await forwardToRunDO(deps.runDO, payload.trigger.runId, "/trigger", {
+            ...payload.trigger,
+            concurrencyLease: {
+              environment: payload.trigger.environment ?? "development",
+              key: payload.concurrency.key,
+              runId: payload.trigger.runId,
+            },
+          })
+          if (resp.ok) {
+            const record = (await resp.clone().json()) as RunRecord
+            if (isTerminal(record.status)) {
+              await release(record.id)
+            }
+          } else {
+            await release(payload.trigger.runId)
+          }
+          return resp
+        } catch (err) {
+          await release(payload.trigger.runId)
+          throw err
+        }
+      }
+
+      if (req.method === "POST" && url.pathname === "/release") {
+        const payload = (await req.json()) as ReleasePayload
+        await release(payload.runId)
+        return json(200, { ok: true })
+      }
+
+      if (req.method === "GET" && url.pathname === "/state") {
+        return json(200, await loadState())
+      }
+
+      return json(404, { error: "route_not_found", path: url.pathname })
+    },
+  }
+}
+
+export async function handleConcurrencyCoordinatorRequest<Id>(
+  req: Request,
+  deps: ConcurrencyCoordinatorDeps<Id> & { coordinator?: ConcurrencyCoordinator },
+): Promise<Response> {
+  const coordinator = deps.coordinator ?? createConcurrencyCoordinator(deps)
+  return coordinator.fetch(req)
+}
+
+async function forwardToRunDO<Id>(
+  runDO: DurableObjectNamespaceLike<Id>,
+  runId: string,
+  path: "/trigger" | "/cancel",
+  body: unknown,
+): Promise<Response> {
+  const id = runDO.idFromName(runId)
+  const stub = runDO.get(id)
+  return stub.fetch(
+    new Request(`https://do-internal${path}`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(body),
+    }),
+  )
+}
+
+function normalizeLimit(limit: number | undefined): number {
+  if (limit === undefined) return 1
+  if (!Number.isFinite(limit)) return 1
+  return Math.max(1, Math.floor(limit))
+}
+
+function isTerminal(status: RunRecord["status"]): boolean {
+  return (
+    status === "completed" ||
+    status === "failed" ||
+    status === "cancelled" ||
+    status === "compensated" ||
+    status === "compensation_failed"
+  )
+}
+
+function json(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json; charset=utf-8" },
+  })
+}

package/src/durable-object.ts

@@ -32,10 +32,12 @@ import type { StepDispatcher } from "./dispatchers.js"
 import { createDurableObjectRunStore } from "./do-store.js"
 import type {
   CancelPayload,
+  ConcurrencyLease,
   DurableObjectStorageLike,
   ResumePayload,
   TriggerPayload,
 } from "./types.js"
+import type { DurableObjectNamespaceLike } from "./worker.js"
 
 export interface DurableObjectDeps {
   storage: DurableObjectStorageLike
@@ -52,9 +54,12 @@ export interface DurableObjectDeps {
    *  - `createHttpDispatcher`           — arbitrary HTTP endpoint
    */
   dispatcher: StepDispatcher
+  concurrencyDO?: DurableObjectNamespaceLike
   now?: () => number
 }
 
+const CONCURRENCY_LEASE_KEY = "concurrencyLease"
+
 function resolve(
   deps: DurableObjectDeps,
   record: { tenantMeta: { tenantScript?: string }; workflowId: string },
@@ -74,6 +79,9 @@ export async function handleDurableObjectRequest(
 
   if (req.method === "POST" && url.pathname === "/trigger") {
     const payload = (await req.json()) as TriggerPayload
+    if (payload.concurrencyLease) {
+      await deps.storage.put(CONCURRENCY_LEASE_KEY, payload.concurrencyLease)
+    }
     const handler = resolve(deps, {
       tenantMeta: payload.tenantMeta,
       workflowId: payload.workflowId,
@@ -88,6 +96,7 @@ export async function handleDurableObjectRequest(
         tags: payload.tags,
         runId: payload.runId,
         idempotencyKey: payload.idempotencyKey,
+        triggeredBy: payload.triggeredBy,
         delay:
           typeof payload.delay === "object" && payload.delay !== null && "wakeAt" in payload.delay
             ? new Date(payload.delay.wakeAt)
@@ -114,6 +123,7 @@ export async function handleDurableObjectRequest(
       return json(status, { error: out.status, message: out.message })
     }
     await reconcileAlarm(out.record, store, deps)
+    await releaseConcurrencyLeaseIfTerminal(out.record, deps)
     return json(200, out.record)
   }
 
@@ -131,6 +141,7 @@ export async function handleDurableObjectRequest(
       return json(status, { error: out.status, message: out.message })
     }
     await reconcileAlarm(out.record, store, deps)
+    await releaseConcurrencyLeaseIfTerminal(out.record, deps)
     return json(200, out.record)
   }
 
@@ -189,6 +200,7 @@ export async function handleDurableObjectAlarm(deps: DurableObjectDeps): Promise
   await driveUntilPaused(record, { handler, now: deps.now })
   await store.save(record)
   await reconcileAlarm(record, store, deps)
+  await releaseConcurrencyLeaseIfTerminal(record, deps)
 }
 
 /**
@@ -239,6 +251,38 @@ async function getStoredRunId(
   return all[0]?.id
 }
 
+async function releaseConcurrencyLeaseIfTerminal(
+  record: RunRecord,
+  deps: DurableObjectDeps,
+): Promise<void> {
+  if (!deps.concurrencyDO || !isTerminal(record.status)) return
+  const lease = await deps.storage.get<ConcurrencyLease>(CONCURRENCY_LEASE_KEY)
+  if (!lease) return
+
+  const id = deps.concurrencyDO.idFromName(`workflow-concurrency:${lease.environment}:${lease.key}`)
+  const stub = deps.concurrencyDO.get(id)
+  await stub
+    .fetch(
+      new Request("https://do-internal/release", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ runId: lease.runId }),
+      }),
+    )
+    .catch(() => undefined)
+  await deps.storage.delete(CONCURRENCY_LEASE_KEY)
+}
+
+function isTerminal(status: RunRecord["status"]): boolean {
+  return (
+    status === "completed" ||
+    status === "failed" ||
+    status === "cancelled" ||
+    status === "compensated" ||
+    status === "compensation_failed"
+  )
+}
+
 function json(status: number, body: unknown): Response {
   return new Response(JSON.stringify(body), {
     status,

package/src/index.ts

@@ -42,6 +42,12 @@ export {
   type CloudflareEdgeDriverOptions,
   createCloudflareEdgeDriver,
 } from "./cloudflare-edge-driver.js"
+export {
+  type ConcurrencyCoordinator,
+  type ConcurrencyCoordinatorDeps,
+  createConcurrencyCoordinator,
+  handleConcurrencyCoordinatorRequest,
+} from "./concurrency-coordinator.js"
 export {
   createHttpDispatcher,
   createInlineDispatcher,

package/src/types.ts

@@ -2,7 +2,7 @@
 // a hard dependency on `@cloudflare/workers-types` — matching the
 // shape is enough, and tests can pass plain objects.
 
-import type { Duration } from "@voyantjs/workflows"
+import type { Duration, EnvironmentName, RunTrigger } from "@voyantjs/workflows"
 import type { WaitpointInjection } from "@voyantjs/workflows-orchestrator"
 
 /**
@@ -61,6 +61,14 @@ export interface TriggerPayload {
   idempotencyKey?: string
   delay?: Duration | { wakeAt: number }
   priority?: number
+  triggeredBy?: RunTrigger
+  concurrencyLease?: ConcurrencyLease
+}
+
+export interface ConcurrencyLease {
+  environment: EnvironmentName
+  key: string
+  runId: string
 }
 
 /** Cancel payload. */