@withandeo/cli 0.10.0 → 0.12.0

package/dist/workflow-contract.d.ts

@@ -0,0 +1,34 @@
+export declare const MAX_APP_WORKFLOWS = 8;
+export declare const MAX_COORDINATOR_BYTES: number;
+export declare const MAX_COORDINATOR_SOURCE_MAP_BYTES: number;
+export interface AppWorkflowDeclaration {
+    name: string;
+    binding: string;
+    class_name: string;
+}
+export interface WorkflowFile {
+    path: "workflow.mjs" | "workflow.mjs.map";
+    sha256: string;
+    bytes: number;
+}
+export interface AppWorkflowArtifact {
+    schema: "andeo.app-workflows/v1";
+    declarations: AppWorkflowDeclaration[];
+    module: WorkflowFile & {
+        path: "workflow.mjs";
+        contentType: "application/javascript+module";
+    };
+    sourceMap?: WorkflowFile & {
+        path: "workflow.mjs.map";
+    };
+    compatibilityDate: string;
+    compatibilityFlags: ["nodejs_compat"];
+    vars: Record<string, string>;
+    services: string[];
+}
+export declare function workflowRecord(value: unknown): value is Record<string, unknown>;
+export declare function workflowBindingName(value: unknown): value is string;
+export declare function parseWorkflowDeclarations(value: unknown): AppWorkflowDeclaration[];
+export declare function parseWorkflowArtifact(value: unknown): AppWorkflowArtifact | undefined;
+export declare function workflowFiles(value: AppWorkflowArtifact | undefined): WorkflowFile[];
+//# sourceMappingURL=workflow-contract.d.ts.map

package/dist/workflow-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-contract.d.ts","sourceRoot":"","sources":["../src/workflow-contract.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AACtD,eAAO,MAAM,gCAAgC,QAAmB,CAAC;AACjE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,cAAc,GAAG,kBAAkB,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,wBAAwB,CAAC;IACjC,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,MAAM,EAAE,YAAY,GAAG;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,+BAA+B,CAAA;KAAE,CAAC;IAC9F,SAAS,CAAC,EAAE,YAAY,GAAG;QAAE,IAAI,EAAE,kBAAkB,CAAA;KAAE,CAAC;IACxD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE/E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAGnE;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAgBlF;AACD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAoCrF;AAOD,wBAAgB,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,GAAG,YAAY,EAAE,CAEpF"}

package/dist/workflow-contract.js

@@ -0,0 +1,96 @@
+// Portable contract: imported by both the CLI and the trusted platform.
+// App-defined workflows are not registered native resource bindings.
+export const MAX_APP_WORKFLOWS = 8;
+export const MAX_COORDINATOR_BYTES = 10 * 1024 * 1024;
+export const MAX_COORDINATOR_SOURCE_MAP_BYTES = 10 * 1024 * 1024;
+export function workflowRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function fail(message) { throw new Error("app_workflow_invalid: " + message); }
+export function workflowBindingName(value) {
+    return typeof value === "string" && /^[A-Z][A-Z0-9_]{2,63}$/.test(value)
+        && !value.startsWith("TENDER_") && !value.startsWith("ANDEO_") && value !== "ASSETS";
+}
+export function parseWorkflowDeclarations(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > MAX_APP_WORKFLOWS)
+        fail("expected at most eight workflows");
+    const names = new Set(), bindings = new Set();
+    return value.map((item) => {
+        if (!workflowRecord(item) || Object.keys(item).some(key => !["name", "binding", "class_name"].includes(key))) {
+            fail("only same-app name, binding and class_name are supported; script_name is not supported");
+        }
+        if (typeof item.name !== "string" || !/^[a-z][a-z0-9-]{0,63}$/.test(item.name))
+            fail("invalid logical name");
+        if (!workflowBindingName(item.binding))
+            fail("invalid or reserved binding");
+        if (typeof item.class_name !== "string" || !/^[A-Za-z_$][A-Za-z0-9_$]{0,127}$/.test(item.class_name)
+            || ["default", "AndeoCoordinator"].includes(item.class_name))
+            fail("invalid named workflow export");
+        if (names.has(item.name) || bindings.has(item.binding))
+            fail("duplicate workflow name or binding");
+        names.add(item.name);
+        bindings.add(item.binding);
+        return { name: item.name, binding: item.binding, class_name: item.class_name };
+    }).sort((a, b) => a.name.localeCompare(b.name));
+}
+export function parseWorkflowArtifact(value) {
+    if (value === undefined)
+        return undefined;
+    if (!workflowRecord(value) || value.schema !== "andeo.app-workflows/v1"
+        || Object.keys(value).some(key => !["schema", "declarations", "module", "sourceMap",
+            "compatibilityDate", "compatibilityFlags", "vars", "services"].includes(key)))
+        fail("invalid artifact shape");
+    const declarations = parseWorkflowDeclarations(value.declarations);
+    if (!declarations.length)
+        fail("empty coordinator artifact");
+    if (typeof value.compatibilityDate !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(value.compatibilityDate)
+        || !Number.isFinite(Date.parse(value.compatibilityDate))
+        || new Date(value.compatibilityDate).toISOString().slice(0, 10) !== value.compatibilityDate)
+        fail("invalid compatibility date");
+    if (!Array.isArray(value.compatibilityFlags) || value.compatibilityFlags.length !== 1
+        || value.compatibilityFlags[0] !== "nodejs_compat")
+        fail("only nodejs_compat is supported");
+    if (!workflowRecord(value.vars) || Object.keys(value.vars).length > 64)
+        fail("invalid public vars");
+    const vars = {};
+    let total = 0;
+    for (const [key, item] of Object.entries(value.vars).sort(([a], [b]) => a.localeCompare(b))) {
+        if (!workflowBindingName(key) || typeof item !== "string")
+            fail("vars must be named non-secret strings");
+        const bytes = new TextEncoder().encode(item).byteLength;
+        total += bytes;
+        if (bytes > 4096 || total > 65536)
+            fail("vars exceed byte limit");
+        vars[key] = item;
+    }
+    if (!Array.isArray(value.services) || value.services.length > 32
+        || value.services.some(name => !workflowBindingName(name))
+        || new Set(value.services).size !== value.services.length)
+        fail("invalid service capabilities");
+    const services = [...value.services];
+    if (services.some(name => name in vars || declarations.some(d => d.binding === name))
+        || declarations.some(d => d.binding in vars))
+        fail("binding collision");
+    const module = workflowFile(value.module, "workflow.mjs", MAX_COORDINATOR_BYTES);
+    if (!workflowRecord(value.module) || value.module.contentType !== "application/javascript+module")
+        fail("invalid module type");
+    const sourceMap = value.sourceMap === undefined ? undefined
+        : workflowFile(value.sourceMap, "workflow.mjs.map", MAX_COORDINATOR_SOURCE_MAP_BYTES);
+    return { schema: "andeo.app-workflows/v1", declarations,
+        module: { ...module, contentType: "application/javascript+module" },
+        ...(sourceMap ? { sourceMap } : {}), compatibilityDate: value.compatibilityDate,
+        compatibilityFlags: ["nodejs_compat"], vars, services: services.sort() };
+}
+function workflowFile(value, path, max) {
+    if (!workflowRecord(value) || value.path !== path || typeof value.sha256 !== "string"
+        || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.bytes !== "number"
+        || !Number.isSafeInteger(value.bytes) || value.bytes < 1 || value.bytes > max)
+        fail("invalid private " + path);
+    return { path, sha256: value.sha256, bytes: value.bytes };
+}
+export function workflowFiles(value) {
+    return value ? [value.module, ...(value.sourceMap ? [value.sourceMap] : [])] : [];
+}
+//# sourceMappingURL=workflow-contract.js.map

package/dist/workflow-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-contract.js","sourceRoot":"","sources":["../src/workflow-contract.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAqBjE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;WACnE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,QAAQ,CAAC;AACzF,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7G,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7G,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC5E,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;eAC7F,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB;WAChE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW;YACjF,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACpH,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,YAAY,CAAC,MAAM;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;WAChG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;WACrD,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,iBAAiB;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACpI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;WAC9E,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,eAAe;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACpG,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QACxD,KAAK,IAAI,KAAK,CAAC;QACf,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,KAAK;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;WACzD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;WACvD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAa,CAAC;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;WAC9E,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACjF,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,+BAA+B;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/H,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;QACzD,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;IACxF,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,YAAY;QACrD,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,+BAA+B,EAAE;QACnE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC/E,kBAAkB,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;AAC7E,CAAC;AACD,SAAS,YAAY,CAAiC,KAAc,EAAE,IAAO,EAAE,GAAW;IACxF,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;WAC9E,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;WACvE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG;QAAE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACnH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAsC;IAClE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/workflow-coordinator.d.ts

@@ -0,0 +1,4 @@
+/** Trusted wrapper in the Dynamic Worker. Run capabilities are arguments, not
+ * cached Loader env; every invocation gets its own async context. */
+export declare function renderWorkflowCoordinator(className: string, services: string[]): string;
+//# sourceMappingURL=workflow-coordinator.d.ts.map

package/dist/workflow-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-coordinator.d.ts","sourceRoot":"","sources":["../src/workflow-coordinator.ts"],"names":[],"mappings":"AAAA;qEACqE;AACrE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CA6CvF"}

package/dist/workflow-coordinator.js

@@ -0,0 +1,49 @@
+/** Trusted wrapper in the Dynamic Worker. Run capabilities are arguments, not
+ * cached Loader env; every invocation gets its own async context. */
+export function renderWorkflowCoordinator(className, services) {
+    return `import { WorkerEntrypoint } from "cloudflare:workers";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { ${className} as MerchantWorkflow } from "./workflow.mjs";
+export class AndeoCoordinator extends WorkerEntrypoint {
+  async run(event, step, runtime) {
+    const context = new AsyncLocalStorage();
+    const wrappedStep = {
+      do(name, options, callback, extra) {
+        if (typeof options === "function") { extra = callback; callback = options; options = undefined; }
+        if (extra !== undefined || (options && Object.values(options).some(v => typeof v === "function"))
+          || (options?.retries && typeof options.retries.delay === "function")) throw new Error("app_workflow_step_options_unsupported");
+        const execute = async nativeContext => context.run({ native: nativeContext, call: 0 }, async () => {
+          await runtime.observeStep?.(nativeContext, "started").catch(() => undefined);
+          try {
+            const result = await callback(nativeContext);
+            await runtime.observeStep?.(nativeContext, "completed").catch(() => undefined);
+            return result;
+          } catch (error) {
+            await runtime.observeStep?.(nativeContext, "errored").catch(() => undefined);
+            throw error;
+          }
+        });
+        return options === undefined ? step.do(name, execute) : step.do(name, options, execute);
+      },
+      sleep: (...args) => step.sleep(...args),
+      sleepUntil: (...args) => step.sleepUntil(...args),
+      waitForEvent: (...args) => step.waitForEvent(...args),
+    };
+    const scopedEnv = { ...this.env };
+    for (const name of ${JSON.stringify(services)}) scopedEnv[name] = {
+      fetch(input, init) {
+        const current = context.getStore();
+        if (!current?.native?.step || !Number.isSafeInteger(current.native.attempt)) throw new Error("app_workflow_step_context_required");
+        return runtime.invoke(name, new Request(input, init), {
+          name: current.native.step.name, count: current.native.step.count,
+          attempt: current.native.attempt, call: ++current.call,
+        });
+      },
+    };
+    const workflow = new MerchantWorkflow(this.ctx, scopedEnv);
+    return workflow.run(event, wrappedStep);
+  }
+}
+`;
+}
+//# sourceMappingURL=workflow-coordinator.js.map

package/dist/workflow-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-coordinator.js","sourceRoot":"","sources":["../src/workflow-coordinator.ts"],"names":[],"mappings":"AAAA;qEACqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,QAAkB;IAC7E,OAAO;;WAEE,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA2BK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;CAchD,CAAC;AACF,CAAC"}

package/dist/workflow-dev-host.d.ts

@@ -0,0 +1,2 @@
+export declare const LOCAL_WORKFLOW_HOST = "import {WorkerEntrypoint,RpcTarget} from \"cloudflare:workers\";\nimport {createDynamicWorkflowEntrypoint,wrapWorkflowBinding} from \"@cloudflare/dynamic-workflows\";\nexport {DynamicWorkflowBinding} from \"@cloudflare/dynamic-workflows\";\nasync function physical(name,id){return \"local_\"+Array.from(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(name+\":\"+id))),b=>b.toString(16).padStart(2,\"0\")).join(\"\");}\nclass Instance extends RpcTarget {\n  #native; #id;\n  constructor(native,id){super();this.#native=native;this.#id=id;}\n  get id(){return this.#id;}\n  async status(){const result=await this.#native.status();return {id:this.#id,status:result.status,...(result.error?{error:{code:\"app_workflow_execution_failed\"}}:{})};}\n  sendEvent(event){return this.#native.sendEvent(event);}\n  pause(){return this.#native.pause();} resume(){return this.#native.resume();} terminate(){return this.#native.terminate();} restart(){return this.#native.restart();}\n}\nexport class AppWorkflowBinding extends WorkerEntrypoint {\n  async create(options={}) {const id=options.id??crypto.randomUUID();const native=await wrapWorkflowBinding({name:this.ctx.props.name,localId:id}).create({id:await physical(this.ctx.props.name,id),params:options.params??{}});return new Instance(native,id);}\n  async get(id){return new Instance(await this.env.WORKFLOWS.get(await physical(this.ctx.props.name,id)),id);}\n  async createBatch(items){const results=[];for(const item of items){try{const run=await this.create(item);results.push({id:await run.id,accepted:true});}catch{results.push({id:item.id,accepted:false,error:\"app_workflow_operation_failed\"});}}return results;}\n}\nclass Services extends RpcTarget {\n  #env; #names;\n  constructor(env,names){super();this.#env=env;this.#names=names;}\n  async observeStep() {}\n  invoke(name,request){if(!this.#names.includes(name))throw new Error(\"app_workflow_service_not_authorized\");return this.#env[name].fetch(request);}\n}\nexport const DynamicWorkflow=createDynamicWorkflowEntrypoint(async({env,metadata})=>{\n const config=JSON.parse(env.CONFIG),declaration=config.artifact.declarations.find(d=>d.name===metadata.name);\n if(!declaration)throw new Error(\"app_workflow_scope_invalid\");\n // Match hosted public Internet access; never inherit the host's env/bindings.\n const worker=env.LOADER.get(\"public-internet-v1:\"+config.artifact.module.sha256+\":\"+declaration.name,()=>({compatibilityDate:config.artifact.compatibilityDate,compatibilityFlags:config.artifact.compatibilityFlags,\n mainModule:\"coordinator.mjs\",modules:{\"coordinator.mjs\":{js:config.wrappers[declaration.name]},\"workflow.mjs\":{js:config.code}},env:config.artifact.vars,limits:{cpuMs:50,subRequests:50}}));\n return {run(event,step){return worker.getEntrypoint(\"AndeoCoordinator\").run({...event,instanceId:metadata.localId},step,new Services(env,config.artifact.services));}};\n});\nexport default {fetch(){return new Response(\"Not found\",{status:404});}};";
+//# sourceMappingURL=workflow-dev-host.d.ts.map

package/dist/workflow-dev-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-dev-host.d.ts","sourceRoot":"","sources":["../src/workflow-dev-host.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,mBAAmB,i9FA+B0C,CAAC"}

package/dist/workflow-dev-host.js

@@ -0,0 +1,34 @@
+// Local-only host: real Cloudflare execution primitives, not hosted policy.
+export const LOCAL_WORKFLOW_HOST = `import {WorkerEntrypoint,RpcTarget} from "cloudflare:workers";
+import {createDynamicWorkflowEntrypoint,wrapWorkflowBinding} from "@cloudflare/dynamic-workflows";
+export {DynamicWorkflowBinding} from "@cloudflare/dynamic-workflows";
+async function physical(name,id){return "local_"+Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256",new TextEncoder().encode(name+":"+id))),b=>b.toString(16).padStart(2,"0")).join("");}
+class Instance extends RpcTarget {
+  #native; #id;
+  constructor(native,id){super();this.#native=native;this.#id=id;}
+  get id(){return this.#id;}
+  async status(){const result=await this.#native.status();return {id:this.#id,status:result.status,...(result.error?{error:{code:"app_workflow_execution_failed"}}:{})};}
+  sendEvent(event){return this.#native.sendEvent(event);}
+  pause(){return this.#native.pause();} resume(){return this.#native.resume();} terminate(){return this.#native.terminate();} restart(){return this.#native.restart();}
+}
+export class AppWorkflowBinding extends WorkerEntrypoint {
+  async create(options={}) {const id=options.id??crypto.randomUUID();const native=await wrapWorkflowBinding({name:this.ctx.props.name,localId:id}).create({id:await physical(this.ctx.props.name,id),params:options.params??{}});return new Instance(native,id);}
+  async get(id){return new Instance(await this.env.WORKFLOWS.get(await physical(this.ctx.props.name,id)),id);}
+  async createBatch(items){const results=[];for(const item of items){try{const run=await this.create(item);results.push({id:await run.id,accepted:true});}catch{results.push({id:item.id,accepted:false,error:"app_workflow_operation_failed"});}}return results;}
+}
+class Services extends RpcTarget {
+  #env; #names;
+  constructor(env,names){super();this.#env=env;this.#names=names;}
+  async observeStep() {}
+  invoke(name,request){if(!this.#names.includes(name))throw new Error("app_workflow_service_not_authorized");return this.#env[name].fetch(request);}
+}
+export const DynamicWorkflow=createDynamicWorkflowEntrypoint(async({env,metadata})=>{
+ const config=JSON.parse(env.CONFIG),declaration=config.artifact.declarations.find(d=>d.name===metadata.name);
+ if(!declaration)throw new Error("app_workflow_scope_invalid");
+ // Match hosted public Internet access; never inherit the host's env/bindings.
+ const worker=env.LOADER.get("public-internet-v1:"+config.artifact.module.sha256+":"+declaration.name,()=>({compatibilityDate:config.artifact.compatibilityDate,compatibilityFlags:config.artifact.compatibilityFlags,
+ mainModule:"coordinator.mjs",modules:{"coordinator.mjs":{js:config.wrappers[declaration.name]},"workflow.mjs":{js:config.code}},env:config.artifact.vars,limits:{cpuMs:50,subRequests:50}}));
+ return {run(event,step){return worker.getEntrypoint("AndeoCoordinator").run({...event,instanceId:metadata.localId},step,new Services(env,config.artifact.services));}};
+});
+export default {fetch(){return new Response("Not found",{status:404});}};`;
+//# sourceMappingURL=workflow-dev-host.js.map

package/dist/workflow-dev-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-dev-host.js","sourceRoot":"","sources":["../src/workflow-dev-host.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0EA+BuC,CAAC"}

package/dist/workflow-dev.d.ts

@@ -0,0 +1,5 @@
+import { Miniflare } from "miniflare";
+/** Real Workflow, Loader and RPC execution with explicitly mapped local
+ * services. Hosted authorization/WfP routing still require hosted verification. */
+export declare function startWorkflowDev(root: string, directory: string, port?: number): Promise<Miniflare>;
+//# sourceMappingURL=workflow-dev.d.ts.map

package/dist/workflow-dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-dev.d.ts","sourceRoot":"","sources":["../src/workflow-dev.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAqC,MAAM,WAAW,CAAC;AASzE;mFACmF;AACnF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,SAAO,sBAsElF"}

package/dist/workflow-dev.js

@@ -0,0 +1,112 @@
+import { build } from "esbuild";
+import { readFile, mkdir } from "node:fs/promises";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseEnv } from "node:util";
+import { Miniflare, Log, LogLevel } from "miniflare";
+import { verifyArtifact } from "./artifact.js";
+import { renderWorkflowCoordinator } from "./workflow-coordinator.js";
+import { workflowRecord } from "./workflow-contract.js";
+import { readBoundedFile } from "./files.js";
+import { LOCAL_WORKFLOW_HOST } from "./workflow-dev-host.js";
+/** Real Workflow, Loader and RPC execution with explicitly mapped local
+ * services. Hosted authorization/WfP routing still require hosted verification. */
+export async function startWorkflowDev(root, directory, port = 8787) {
+    const artifact = await verifyArtifact(directory), workflows = artifact.envelope.manifest.workflows;
+    if (!workflows)
+        throw new Error("app_workflow_declaration_required");
+    let selected = {};
+    if (workflows.services.length) {
+        let value;
+        try {
+            value = JSON.parse(new TextDecoder().decode(await readBoundedFile(resolve(root, "andeo.workflow-dev.json"), 16384)));
+        }
+        catch {
+            throw new Error("Define local service artifact directories in andeo.workflow-dev.json before starting workflow development.");
+        }
+        if (!workflowRecord(value) || Object.values(value).some(path => typeof path !== "string"))
+            throw new Error("app_workflow_dev_services_invalid");
+        selected = value;
+        if (workflows.services.some(name => !selected[name]))
+            throw new Error("app_workflow_dev_service_missing");
+    }
+    const worker = (name, env, source, compatibilityDate, assets) => ({ config: {
+            type: "worker", name, compatibilityDate, compatibilityFlags: ["nodejs_compat"], env,
+            manifest: { mainModule: "index.mjs", modulesRoot: root, modules: { "index.mjs": { type: "esm", contents: source } } },
+            ...(assets ? { assets: { directory: assets, runWorkerFirst: true, hasUserWorker: true } } : {}),
+        } });
+    const text = (value) => ({ type: "text", value });
+    async function appEnv(appDirectory, scope) {
+        const { envelope: { manifest } } = await verifyArtifact(appDirectory);
+        const bindings = Object.fromEntries(Object.entries(manifest.vars ?? {}).map(([name, value]) => [name, text(String(value))]));
+        if (manifest.secrets?.length) {
+            let secrets;
+            try {
+                secrets = parseEnv(await readFile(resolve(appDirectory, ".dev.vars"), "utf8"));
+            }
+            catch {
+                throw new Error("Put local-only declared secrets in .dev.vars beside its artifact. Secret values are never printed.");
+            }
+            for (const name of manifest.secrets) {
+                if (!(name in secrets))
+                    throw new Error("app_workflow_dev_secret_missing");
+                bindings[name] = text(secrets[name]);
+            }
+        }
+        for (const resource of manifest.resources) {
+            if (!workflowRecord(resource) || typeof resource.name !== "string")
+                throw new Error("app_workflow_dev_resource_invalid");
+            if (resource.type === "d1")
+                bindings[resource.name] = { type: "d1", id: `${scope}-${resource.name}` };
+            else if (resource.type === "kv")
+                bindings[resource.name] = { type: "kv", id: `${scope}-${resource.name}` };
+            else if (resource.type === "r2")
+                bindings[resource.name] = { type: "r2", name: `${scope}-${resource.name}` };
+            else
+                throw new Error("app_workflow_dev_resource_unsupported");
+        }
+        for (const service of manifest.services) {
+            if (!workflowRecord(service) || typeof service.name !== "string" || !selected[service.name])
+                throw new Error("app_workflow_dev_service_missing");
+            bindings[service.name] = { type: "worker", worker: `service-${service.name}` };
+        }
+        if (manifest.files.length)
+            bindings.ASSETS = { type: "assets" };
+        return bindings;
+    }
+    const appBindings = await appEnv(directory, "app");
+    for (const declaration of workflows.declarations)
+        appBindings[declaration.binding] = {
+            type: "worker", worker: "workflow-host", exportName: "AppWorkflowBinding", props: { name: declaration.name },
+        };
+    const hostEnv = { LOADER: { type: "worker-loader" }, WORKFLOWS: { type: "workflow", name: "andeo-local-workflows", worker: "workflow-host", exportName: "DynamicWorkflow" },
+        CONFIG: text(JSON.stringify({ artifact: workflows, code: await readFile(resolve(directory, "workflow.mjs"), "utf8"),
+            wrappers: Object.fromEntries(workflows.declarations.map(d => [d.name, renderWorkflowCoordinator(d.class_name, workflows.services)])) })),
+    };
+    const workers = [worker("app", appBindings, await readFile(resolve(directory, "worker.mjs"), "utf8"), String(artifact.envelope.manifest.runtime.compatibilityDate), artifact.envelope.manifest.files.length ? resolve(directory, "assets") : undefined)];
+    for (const [name, path] of Object.entries(selected)) {
+        if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(name))
+            throw new Error("app_workflow_dev_service_invalid");
+        const target = resolve(root, path), service = await verifyArtifact(target);
+        if (service.envelope.manifest.workflows)
+            throw new Error("Start one workflow application at a time in local development.");
+        workers.push(worker(`service-${name}`, await appEnv(target, `service-${name}`), await readFile(resolve(target, "worker.mjs"), "utf8"), String(service.envelope.manifest.runtime.compatibilityDate), service.envelope.manifest.files.length ? resolve(target, "assets") : undefined));
+        hostEnv[name] = { type: "worker", worker: `service-${name}` };
+    }
+    const host = (await build({ stdin: { contents: LOCAL_WORKFLOW_HOST, resolveDir: dirname(fileURLToPath(import.meta.url)) },
+        bundle: true, format: "esm", platform: "neutral", write: false, external: ["cloudflare:*", "node:*"] })).outputFiles[0].text;
+    workers.push(worker("workflow-host", hostEnv, host, workflows.compatibilityDate));
+    const state = resolve(root, ".tender/workflows-local");
+    await mkdir(state, { recursive: true });
+    const runtime = new Miniflare({ host: "127.0.0.1", port, cf: false, telemetry: { enabled: false }, log: new Log(LogLevel.WARN), logRequests: false,
+        resourcePersistencePath: state, resourceTmpPath: resolve(state, "tmp"), workers });
+    try {
+        await runtime.ready;
+        return runtime;
+    }
+    catch (error) {
+        await runtime.dispose();
+        throw error;
+    }
+}
+//# sourceMappingURL=workflow-dev.js.map

package/dist/workflow-dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-dev.js","sourceRoot":"","sources":["../src/workflow-dev.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAsB,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAI7D;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB,EAAE,IAAI,GAAG,IAAI;IACjF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;IACnG,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrE,IAAI,QAAQ,GAA0B,EAAE,CAAC;IACzC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,EAAC,yBAAyB,CAAC,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3H,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAAC,CAAC;QACxI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAChJ,QAAQ,GAAG,KAA8B,CAAC;QAC1C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,GAAa,EAAE,MAAc,EAAE,iBAAyB,EAAE,MAAe,EAAiB,EAAE,CAAC,CAAC,EAAC,MAAM,EAAC;YAClI,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,CAAC,eAAe,CAAC,EAAC,GAAG;YAC7E,QAAQ,EAAC,EAAC,UAAU,EAAC,WAAW,EAAC,WAAW,EAAC,IAAI,EAAC,OAAO,EAAC,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,QAAQ,EAAC,MAAM,EAAC,EAAC,EAAC;YACrG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,MAAM,EAAC,EAAC,SAAS,EAAC,MAAM,EAAC,cAAc,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,EAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAC,IAAI,EAAC,MAAe,EAAC,KAAK,EAAC,CAAC,CAAC;IAC/D,KAAK,UAAU,MAAM,CAAC,YAAoB,EAAE,KAAa;QACvD,MAAM,EAAC,QAAQ,EAAC,EAAC,QAAQ,EAAC,EAAC,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAa,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrI,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7B,IAAI,OAA0C,CAAC;YAC/C,IAAI,CAAC;gBAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAC,WAAW,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YACrF,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;YAAC,CAAC;YAChI,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACzH,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;gBAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAC,CAAC;iBAC5F,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;gBAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAC,CAAC;iBACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;gBAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAC,CAAC;;gBACnG,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjJ,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,OAAO,CAAC,IAAI,EAAE,EAAC,CAAC;QAC5E,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM;YAAE,QAAQ,CAAC,MAAM,GAAG,EAAC,IAAI,EAAC,QAAQ,EAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;IAClD,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,YAAY;QAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG;YACnF,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,eAAe,EAAC,UAAU,EAAC,oBAAoB,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,WAAW,CAAC,IAAI,EAAC;SACnG,CAAC;IACF,MAAM,OAAO,GAAa,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,eAAe,EAAC,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,uBAAuB,EAAC,MAAM,EAAC,eAAe,EAAC,UAAU,EAAC,iBAAiB,EAAC;QACnK,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAC,SAAS,EAAC,IAAI,EAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAC,cAAc,CAAC,EAAC,MAAM,CAAC;YAC1G,QAAQ,EAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,EAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;KACvI,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAC,WAAW,EAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAC,YAAY,CAAC,EAAC,MAAM,CAAC,EAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC3J,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAC3H,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,EAAC,MAAM,MAAM,CAAC,MAAM,EAAC,WAAW,IAAI,EAAE,CAAC,EAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAC,YAAY,CAAC,EAAC,MAAM,CAAC,EAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAC1L,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,IAAI,EAAE,EAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAC,KAAK,EAAC,EAAC,QAAQ,EAAC,mBAAmB,EAAC,UAAU,EAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC;QAChH,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,CAAC,cAAc,EAAC,QAAQ,CAAC,EAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;IACrH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAC,OAAO,EAAC,IAAI,EAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAC,yBAAyB,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,KAAK,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,IAAI,EAAC,EAAE,EAAC,KAAK,EAAC,SAAS,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,EAAC,GAAG,EAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAC,WAAW,EAAC,KAAK;QAClI,uBAAuB,EAAC,KAAK,EAAC,eAAe,EAAC,OAAO,CAAC,KAAK,EAAC,KAAK,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC"}

package/dist/workflow-package.d.ts

@@ -0,0 +1,5 @@
+/** Runs only in the app's build process/sandbox, never in the control plane.
+ * The producer still owns compilation; split its compiled, portable module.
+ * esbuild inspects exports without executing merchant imports. */
+export declare function packageAppWorkflows(root: string, artifactDirectory: string, environment?: string): Promise<void>;
+//# sourceMappingURL=workflow-package.d.ts.map

package/dist/workflow-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-package.d.ts","sourceRoot":"","sources":["../src/workflow-package.ts"],"names":[],"mappings":"AAUA;;kEAEkE;AAClE,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiGtH"}

package/dist/workflow-package.js

@@ -0,0 +1,116 @@
+import { build } from "esbuild";
+import { createHash } from "node:crypto";
+import { writeFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { verifyArtifact } from "./artifact.js";
+import { readWorkflowConfig } from "./workflow-config.js";
+import { parseWorkflowArtifact } from "./workflow-contract.js";
+import { readBoundedFile } from "./files.js";
+import { MAX_WORKER_BUNDLE_BYTES } from "./artifact-limits.js";
+/** Runs only in the app's build process/sandbox, never in the control plane.
+ * The producer still owns compilation; split its compiled, portable module.
+ * esbuild inspects exports without executing merchant imports. */
+export async function packageAppWorkflows(root, artifactDirectory, environment) {
+    const config = await readWorkflowConfig(root, environment);
+    if (!config?.declarations.length)
+        return;
+    const verified = await verifyArtifact(artifactDirectory);
+    const vars = Object.fromEntries(Object.keys(config.vars).map(name => {
+        const values = verified.envelope.manifest.vars;
+        const value = values && typeof values === "object" ? values[name] : undefined;
+        if (typeof value !== "string")
+            throw new Error("app_workflow_vars_must_match_artifact");
+        return [name, value];
+    }));
+    if (verified.envelope.manifest.workflows) {
+        const retained = verified.envelope.manifest.workflows;
+        if (JSON.stringify(retained.declarations) !== JSON.stringify(config.declarations)
+            || retained.compatibilityDate !== config.compatibilityDate
+            || JSON.stringify(Object.entries(retained.vars).sort()) !== JSON.stringify(Object.entries(vars).sort())) {
+            throw new Error("app_workflow_declaration_mismatch");
+        }
+        return;
+    }
+    const { envelope } = verified;
+    const source = new TextDecoder("utf8", { fatal: true }).decode(await readBoundedFile(resolve(artifactDirectory, "worker.mjs"), MAX_WORKER_BUNDLE_BYTES));
+    const services = envelope.manifest.services.map(value => {
+        if (!value || typeof value !== "object" || !("name" in value) || typeof value.name !== "string")
+            throw new Error("app_workflow_services_invalid");
+        return value.name;
+    }).sort();
+    const occupied = new Set([
+        ...services, ...(envelope.manifest.secrets ?? []), ...Object.keys(config.vars),
+        ...envelope.manifest.resources.map(value => value && typeof value === "object" && "name" in value ? value.name : ""),
+    ]);
+    if (config.declarations.some(d => occupied.has(d.binding)))
+        throw new Error("app_workflow_binding_collision");
+    const classes = [...new Set(config.declarations.map(d => d.class_name))];
+    const compile = (contents, outfile) => build({
+        stdin: { contents, sourcefile: "andeo-entry.mjs", resolveDir: root },
+        bundle: true, format: "esm", platform: "neutral", target: "es2022", write: false, metafile: true,
+        treeShaking: true, sourcemap: "external", outfile, external: ["cloudflare:*", "node:*"],
+        plugins: [{ name: "retained-app", setup(builder) {
+                    builder.onResolve({ filter: /^andeo-retained-app$/ }, () => ({ path: "merchant.mjs", namespace: "andeo" }));
+                    builder.onLoad({ filter: /.*/, namespace: "andeo" }, () => ({ contents: source, loader: "js", resolveDir: root }));
+                } }],
+    });
+    const inspected = await compile(source, "inspect.mjs");
+    const exports = Object.values(inspected.metafile.outputs).flatMap(output => output.exports);
+    if (!exports.includes("default") || classes.some(name => !exports.includes(name)))
+        throw new Error("app_workflow_export_missing");
+    const httpExports = exports.filter(name => !classes.includes(name));
+    // Quote export names safely, including non-identifier module export names.
+    const http = await compile("export { " + httpExports.map(name => JSON.stringify(name)).join(",") + ' } from "andeo-retained-app";', "worker.mjs");
+    const coordinator = await compile("export { " + classes.join(",") + ' } from "andeo-retained-app";', "workflow.mjs");
+    const httpBytes = http.outputFiles.find(file => file.path.endsWith("/worker.mjs")).contents;
+    const code = coordinator.outputFiles.find(file => file.path.endsWith("/workflow.mjs")).contents;
+    const map = coordinator.outputFiles.find(file => file.path.endsWith("/workflow.mjs.map")).contents;
+    const descriptor = (path, bytes) => ({ path, sha256: hash(bytes), bytes: bytes.byteLength });
+    const workflows = parseWorkflowArtifact({
+        schema: "andeo.app-workflows/v1", declarations: config.declarations,
+        module: { ...descriptor("workflow.mjs", code), contentType: "application/javascript+module" },
+        sourceMap: descriptor("workflow.mjs.map", map), compatibilityDate: config.compatibilityDate,
+        compatibilityFlags: ["nodejs_compat"], vars, services,
+    });
+    envelope.manifest.module = { ...descriptor("worker.mjs", httpBytes), path: "worker.mjs", contentType: "application/javascript+module" };
+    envelope.manifest.workflows = workflows;
+    const appVars = envelope.manifest.vars;
+    if (Object.entries(vars).some(([name, value]) => !appVars || typeof appVars !== "object" || appVars[name] !== value)) {
+        throw new Error("app_workflow_vars_must_match_artifact");
+    }
+    envelope.bundleDigest = hash(new TextEncoder().encode(JSON.stringify({
+        module: envelope.manifest.module, files: envelope.manifest.files,
+        ...(envelope.manifest.databaseSchema === undefined ? {} : { databaseSchema: envelope.manifest.databaseSchema }),
+        workflows,
+    })));
+    envelope.manifest.runtime.assetPrefix = "/_tenant-artifacts/" + envelope.bundleDigest;
+    await writeFile(resolve(artifactDirectory, "worker.mjs"), httpBytes);
+    await writeFile(resolve(artifactDirectory, "workflow.mjs"), code);
+    await writeFile(resolve(artifactDirectory, "workflow.mjs.map"), map);
+    await writeFile(verified.envelopePath, JSON.stringify(envelope, null, 2) + "\n");
+    const appTypes = config.declarations.map(d => "  " + d.binding + ": AndeoWorkflowBinding;").join("\n");
+    const coordinatorTypes = [...Object.keys(config.vars).map(name => "  " + name + ": string;"),
+        ...services.map(name => "  " + name + ": Pick<Fetcher, 'fetch'>;")].join("\n");
+    await writeFile(resolve(artifactDirectory, "workflow-env.d.ts"), `// Generated; coordinator bindings intentionally exclude native secrets/resources.
+interface AndeoWorkflowInstance {
+  readonly id: string | Promise<string>;
+  status(): Promise<{ status: string; error?: { code: string } }>;
+  sendEvent(event: { type: string; payload: unknown }): Promise<void>;
+  pause(): Promise<void>; resume(): Promise<void>; terminate(): Promise<void>; restart(): Promise<void>;
+}
+interface AndeoWorkflowBinding {
+  create(options?: { id?: string; params?: unknown }): Promise<AndeoWorkflowInstance>;
+  get(id: string): Promise<AndeoWorkflowInstance>;
+  createBatch(options: { id?: string; params?: unknown }[]): Promise<({ id: string; accepted: true } | { id?: string; accepted: false; error: string })[]>;
+}
+interface AppWorkflowEnv {
+${appTypes}
+}
+interface CoordinatorEnv {
+${coordinatorTypes}
+}
+`);
+    await verifyArtifact(artifactDirectory);
+}
+function hash(bytes) { return createHash("sha256").update(bytes).digest("hex"); }
+//# sourceMappingURL=workflow-package.js.map

package/dist/workflow-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-package.js","sourceRoot":"","sources":["../src/workflow-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;kEAEkE;AAClE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,iBAAyB,EAAE,WAAoB;IACrG,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM;QAAE,OAAO;IACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QACtD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;eAC1E,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;eACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,eAAe,CAClF,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClJ,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,GAAG,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9E,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KACrH,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC;QAC3D,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE;QACpE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI;QAChG,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;QACvF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO;oBAC7C,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC5G,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrH,CAAC,EAAE,CAAC;KACL,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAClI,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,+BAA+B,EAAE,YAAY,CAAC,CAAC;IAClJ,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,+BAA+B,EAAE,cAAc,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAE,CAAC,QAAQ,CAAC;IAC9F,MAAM,IAAI,GAAG,WAAW,CAAC,WAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAE,CAAC,QAAQ,CAAC;IAClG,MAAM,GAAG,GAAG,WAAW,CAAC,WAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAE,CAAC,QAAQ,CAAC;IACrG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,qBAAqB,CAAC;QACtC,MAAM,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;QACnE,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC7F,SAAS,EAAE,UAAU,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3F,kBAAkB,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ;KACtD,CAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IACxI,QAAQ,CAAC,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAK,OAAmC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAClJ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACnE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK;QAChE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC/G,SAAS;KACV,CAAC,CAAC,CAAC,CAAC;IACL,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,GAAG,qBAAqB,GAAG,QAAQ,CAAC,YAAY,CAAC;IACtF,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,GAAG,yBAAyB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvG,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,WAAW,CAAC;QAC1F,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,EAAE;;;;;;;;;;;;;EAajE,QAAQ;;;EAGR,gBAAgB;;CAEjB,CAAC,CAAC;IACD,MAAM,cAAc,CAAC,iBAAiB,CAAC,CAAC;AAC1C,CAAC;AACD,SAAS,IAAI,CAAC,KAAiB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withandeo/cli",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Developer CLI for Andeo applications",
   "type": "module",
   "license": "UNLICENSED",
@@ -31,6 +31,13 @@
     "typescript": "^7.0.2",
     "vitest": "^4.1.11"
   },
+  "dependencies": {
+    "@cloudflare/dynamic-workflows": "0.1.1",
+    "esbuild": "0.28.1",
+    "jsonc-parser": "3.3.1",
+    "miniflare": "5.20260918.0-alpha",
+    "smol-toml": "1.8.0"
+  },
   "exports": {
     "./cli": "./dist/main.js"
   },

package/skill/tender-accounts/SKILL.md

@@ -354,12 +354,25 @@ Retry only a requested or failed preview workflow:
 npx @withandeo/cli delivery retry --delivery <delivery-id> --json
 ```
 
+CLI 0.12.0 carries artifact/delivery access across automatic token refresh within
+the same login. Logout, session expiry, or revoked owner/project access still
+stop background work. For a pre-session-tracking preview stranded by an expired
+credential, only its original owner may explicitly recover it from the linked
+app with `delivery retry --delivery <delivery-id> --reauthorize --json`. This
+requires current developer access, retains the exact artifact and upload
+receipts, and cannot replace an already tracked login or publish production.
+Do not clear pending provider holds or rewrite credential IDs to recover work.
+
 Mint a new browser session for an already-succeeded delivery without rebuilding:
 
 ```sh
-npx @withandeo/cli delivery preview --delivery <delivery-id> --json
+npx @withandeo/cli preview entries --json
+npx @withandeo/cli preview open --from <delivery-id> --json
+npx @withandeo/cli preview open --from sbl_EXAMPLE --return-path /account --json
 ```
 
+Preview entry selection follows published app connections automatically. When the response requires a choice, select an eligible app using `--through prj_ENTRY`. Only the previewed app's developer grant is needed. Private apps cannot open directly; a connection administrator must enable an eligible entry. Preserve the exact `from` ID when recovering from a session error and use `preview open` instead of rebuilding. Opening replaces the browser's previous preview selection and preserves sign-in.
+
 `<delivery-id>` is the `dly_` value returned by `preview`. A `dwf_` value is a production workflow ID and must not be passed to developer-delivery commands. If a merchant administrator sees a `dwf_` publish waiting with zero attempts, the supported recovery is **Activity → Resume exact publish**; it resumes the stored exact composition without rebuilding. Use the error code, request ID, and suggested command from the CLI. Do not retry with altered IDs, another project, or raw HTTP requests.
 
 When runtime evidence is needed, stream only the linked project and exact target:

package/templates/shopify-customer-account/apps/gateway/README.md

@@ -9,3 +9,5 @@ Local HTTP development returns an explicit signed-out state. Real Shopify sign-i
 The generated `.dev` hostname stays the Shopify callback anchor. When a merchant vanity domain is activated, add it to the public comma-separated `ACCOUNT_VANITY_HOSTNAMES` environment value so the exact-host session policy can safely return the shopper there. Do not move Shopify callback configuration to the vanity hostname.
 
 Managed builds retain published settings through `TENDER_PUBLIC_VARS_SOURCE`, which points to the app's verified build envelope and takes precedence over `--vars`. The packager checks the app identity and declared public-variable allowlist. Without that input, local packaging reads `--vars` or `.dev.vars` as usual.
+
+If this app needs runtime secrets, declare their names in its app configuration and ask an app administrator to select shared previews, initialize its targets, and save each app-level secret in Settings. Read a native secret directly as a string, such as `env.API_TOKEN`; do not use a Secrets Store `.get()` binding. One saved value applies to preview and production. A new gateway preview replaces its previous preview. The portal can keep independent previews so multiple portal PRs remain available simultaneously. These are explicit project policies, independent of the app's name or kind.