@workflow/web 5.0.0-beta.43 → 5.0.0-beta.46

package/build/server/assets/{highlighted-body-B3W2YXNL-B1Smd86a.js → highlighted-body-B3W2YXNL-C6ES2Pzm.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { aU as reactExports, aV as R, aW as Ks, aX as jsxRuntimeExports, aY as Qe } from "./app-_xgEuKqE.js";
+import { aW as reactExports, aX as R, aY as Ks, aZ as jsxRuntimeExports, a_ as Qe } from "./app-BpmEMaiu.js";
 import "node:stream";
 import "stream";
 import "util";

package/build/server/assets/{index-CSsrecUx.js → index-BtQfiVUN.js}

@@ -2,8 +2,8 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { H as HookSchema } from "./app-_xgEuKqE.js";
-import { A, a, b, c, d, e, f, g, h, i, j, k, l, B, m, n, o, p, C, D, q, E, r, s, t, u, v, F, w, x, y, z, G, I, J, L, M, K, O, P, Q, R, S, T, U, V, W, X, Y, Z, _, $, a0, a1, a2, a3, a4, a5, a6, a7, a8, a9, aa, ab, ac, ad, ae, af, ag, ah, ai, aj, ak, al, am, an, ao, ap, aq, ar, as, at, au, av, aw, ax, ay, az, aA, aB, aC, aD, aE, aF, aG, aH, aI, aJ, aK, aL, aM, aN, aO, aP, aQ, aR, aS, aT } from "./app-_xgEuKqE.js";
+import { H as HookSchema } from "./app-BpmEMaiu.js";
+import { A, a, b, c, d, e, f, g, h, i, j, k, l, m, n, B, o, p, q, r, C, D, s, E, t, u, v, F, w, x, y, z, G, I, J, L, M, K, O, P, Q, R, S, T, U, V, W, X, Y, Z, _, $, a0, a1, a2, a3, a4, a5, a6, a7, a8, a9, aa, ab, ac, ad, ae, af, ag, ah, ai, aj, ak, al, am, an, ao, ap, aq, ar, as, at, au, av, aw, ax, ay, az, aA, aB, aC, aD, aE, aF, aG, aH, aI, aJ, aK, aL, aM, aN, aO, aP, aQ, aR, aS, aT, aU, aV } from "./app-BpmEMaiu.js";
 import "node:stream";
 import "stream";
 import "util";
@@ -61,18 +61,18 @@ export {
   i as AnalyticsWaitSchema,
   j as AttributeChangeSchema,
   k as AttributeChangesSchema,
-  l as AttributeValidationError,
+  l as AttributeKeySchema,
+  m as AttributeValidationError,
+  n as AttributeValueSchema,
   B as BULK_CANCEL_MAX_RUN_IDS,
-  m as BaseEventSchema,
-  n as BulkCancelWorkflowRunResultSchema,
-  o as BulkCancelWorkflowRunsRequestSchema,
-  p as BulkCancelWorkflowRunsResultSchema,
+  o as BaseEventSchema,
+  p as BulkCancelWorkflowRunResultSchema,
+  q as BulkCancelWorkflowRunsRequestSchema,
+  r as BulkCancelWorkflowRunsResultSchema,
   C as CHILD_ENTITY_CREATION_EVENT_TYPES,
   D as DEFAULT_TIMESTAMP_THRESHOLD_FUTURE_MS,
-  q as DEFAULT_TIMESTAMP_THRESHOLD_PAST_MS,
-  E as EVENT_DATA_PAYLOAD_FIELD_BY_EVENT_TYPE,
-  r as EVENT_DATA_REF_FIELDS,
-  s as EVENT_ID_BODY_LENGTH,
+  s as DEFAULT_TIMESTAMP_THRESHOLD_PAST_MS,
+  E as EVENT_ID_BODY_LENGTH,
   t as EVENT_ID_PREFIX,
   u as EventSchema,
   v as EventTypeSchema,
@@ -96,66 +96,68 @@ export {
   T as RESERVED_ATTRIBUTE_KEY_PREFIX,
   U as ROOT_RUN_ID_ATTRIBUTE,
   V as RunInputSchema,
-  W as SPEC_VERSION_CURRENT,
-  X as SPEC_VERSION_LEGACY,
-  Y as SPEC_VERSION_MAX_SUPPORTED,
-  Z as SPEC_VERSION_SUPPORTS_ATTRIBUTES,
-  _ as SPEC_VERSION_SUPPORTS_CBOR_QUEUE_TRANSPORT,
-  $ as SPEC_VERSION_SUPPORTS_COMPRESSION,
-  a0 as SPEC_VERSION_SUPPORTS_SLOT_IDENTITY,
-  a1 as STEP_EVENT_TYPES,
-  a2 as SerializedDataSchema,
-  a3 as StepSchema,
-  a4 as StepStatusSchema,
-  a5 as StructuredErrorSchema,
-  a6 as TERMINAL_RUN_EVENT_TYPES,
-  a7 as TERMINAL_STEP_EVENT_TYPES,
-  a8 as TERMINAL_STEP_STATUSES,
-  a9 as TERMINAL_WORKFLOW_RUN_STATUSES,
-  aa as TerminalRunEventTypeSchema,
-  ab as TerminalStepStatusSchema,
-  ac as TerminalWorkflowRunStatusSchema,
-  ad as ValidQueueName,
-  ae as WAIT_EVENT_TYPES,
-  af as WaitSchema,
-  ag as WaitStatusSchema,
-  ah as WorkflowInvokePayloadSchema,
-  ai as WorkflowRunBaseSchema,
-  aj as WorkflowRunSchema,
-  ak as WorkflowRunStatusSchema,
-  al as applyAttributeChanges,
-  am as entityEventClass,
-  an as envFlag,
-  ao as envNumber,
-  ap as eventIdToSlot,
-  aq as getEventDataPayloadField,
-  ar as getEventDataRefFields,
-  as as getMaxEventsPerRun,
-  at as getQueueTopicPrefix,
-  au as isChildEntityCreationEvent,
-  av as isChildEntityCreationEventType,
-  aw as isHookEventRequiringExistence,
-  ax as isHookLifecycleEventType,
-  ay as isLegacySpecVersion,
-  az as isNodeHttpEnabled,
-  aA as isSlotBody,
-  aB as isSlotEventId,
-  aC as isStepEventType,
-  aD as isTerminalRunEventType,
-  aE as isTerminalStepEventType,
-  aF as isTerminalStepStatus,
-  aG as isTerminalWorkflowRunStatus,
-  aH as isWaitEventType,
-  aI as parseQueueName,
-  aJ as reenqueueActiveRuns,
-  aK as requiresNewerWorld,
-  aL as resolveQueueNamespace,
-  aM as slotToEventId,
-  aN as stripEventDataRefs,
-  aO as ulidToDate,
-  aP as validateAttributeChanges,
-  aQ as validateAttributeKey,
-  aR as validateAttributeValue,
-  aS as validateUlidTimestamp,
-  aT as workflowRunIdSchema
+  W as SEALED_LOG_ENV_VAR,
+  X as SPEC_VERSION_CURRENT,
+  Y as SPEC_VERSION_LEGACY,
+  Z as SPEC_VERSION_MAX_SUPPORTED,
+  _ as SPEC_VERSION_SUPPORTS_ATTRIBUTES,
+  $ as SPEC_VERSION_SUPPORTS_CBOR_QUEUE_TRANSPORT,
+  a0 as SPEC_VERSION_SUPPORTS_COMPRESSION,
+  a1 as SPEC_VERSION_SUPPORTS_SEALED_LOG,
+  a2 as SPEC_VERSION_SUPPORTS_SLOT_IDENTITY,
+  a3 as STEP_EVENT_TYPES,
+  a4 as SerializedDataSchema,
+  a5 as StepSchema,
+  a6 as StepStatusSchema,
+  a7 as StructuredErrorSchema,
+  a8 as TERMINAL_RUN_EVENT_TYPES,
+  a9 as TERMINAL_STEP_EVENT_TYPES,
+  aa as TERMINAL_STEP_STATUSES,
+  ab as TERMINAL_WORKFLOW_RUN_STATUSES,
+  ac as TerminalRunEventTypeSchema,
+  ad as TerminalStepStatusSchema,
+  ae as TerminalWorkflowRunStatusSchema,
+  af as ValidQueueName,
+  ag as WAIT_EVENT_TYPES,
+  ah as WaitSchema,
+  ai as WaitStatusSchema,
+  aj as WorkflowInvokePayloadSchema,
+  ak as WorkflowRunBaseSchema,
+  al as WorkflowRunSchema,
+  am as WorkflowRunStatusSchema,
+  an as applyAttributeChanges,
+  ao as entityEventClass,
+  ap as envFlag,
+  aq as envNumber,
+  ar as eventIdToSlot,
+  as as getEventDataPayloadField,
+  at as getEventDataRefFields,
+  au as getMaxEventsPerRun,
+  av as getQueueTopicPrefix,
+  aw as isChildEntityCreationEvent,
+  ax as isChildEntityCreationEventType,
+  ay as isHookEventRequiringExistence,
+  az as isHookLifecycleEventType,
+  aA as isLegacySpecVersion,
+  aB as isNodeHttpEnabled,
+  aC as isSealedNoopEvent,
+  aD as isSlotBody,
+  aE as isSlotEventId,
+  aF as isStepEventType,
+  aG as isTerminalRunEventType,
+  aH as isTerminalStepEventType,
+  aI as isTerminalStepStatus,
+  aJ as isTerminalWorkflowRunStatus,
+  aK as isWaitEventType,
+  aL as mintedSpecVersion,
+  aM as parseQueueName,
+  aN as reenqueueActiveRuns,
+  aO as requiresNewerWorld,
+  aP as resolveQueueNamespace,
+  aQ as slotToEventId,
+  aR as stripEventDataRefs,
+  aS as ulidToDate,
+  aT as validateAttributeChanges,
+  aU as validateUlidTimestamp,
+  aV as workflowRunIdSchema
 };

package/build/server/assets/{index-Ck5CB_wQ.js → index-QOlZC9D-.js}

@@ -1137,7 +1137,7 @@ function requireWebsocket() {
   const DEFAULT_MAX_PAYLOAD = 256 * 1024;
   async function loadWebSocketServer() {
     try {
-      const ws = await import("./wrapper-DWeVTope.js");
+      const ws = await import("./wrapper-Bjff6YRz.js");
       return ws.WebSocketServer;
     } catch {
       throw new Error(

package/build/server/assets/{mermaid-3ZIDBTTL-CwYR558N.js → mermaid-3ZIDBTTL-X6IEJ8gj.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { N as Nt } from "./app-_xgEuKqE.js";
+import { N as Nt } from "./app-BpmEMaiu.js";
 import "node:stream";
 import "stream";
 import "util";

package/build/server/assets/{token-COK7oHMh.js → token-CrxXUTBD.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { bd as requireTokenError, bc as requireTokenUtil, bb as getDefaultExportFromCjs } from "./app-_xgEuKqE.js";
+import { bh as requireTokenError, bg as requireTokenUtil, bf as getDefaultExportFromCjs } from "./app-BpmEMaiu.js";
 function _mergeNamespaces(n, m) {
   for (var i = 0; i < m.length; i++) {
     const e = m[i];

package/build/server/assets/{token-util-BhmVdeCX.js → token-util-DuToe55u.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { bb as getDefaultExportFromCjs, bc as requireTokenUtil } from "./app-_xgEuKqE.js";
+import { bf as getDefaultExportFromCjs, bg as requireTokenUtil } from "./app-BpmEMaiu.js";
 function _mergeNamespaces(n, m) {
   for (var i = 0; i < m.length; i++) {
     const e = m[i];

package/build/server/assets/{websocket-server-ByjlHAhQ.js → websocket-server-CTnzV_B7.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { be as getAugmentedNamespace, bb as getDefaultExportFromCjs } from "./app-_xgEuKqE.js";
+import { bi as getAugmentedNamespace, bf as getDefaultExportFromCjs } from "./app-BpmEMaiu.js";
 import require$$0$2 from "stream";
 import require$$0$3 from "events";
 import require$$2$1 from "http";

package/build/server/assets/{wrapper-DWeVTope.js → wrapper-Bjff6YRz.js}

@@ -2,9 +2,9 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { W as WebSocket } from "./websocket-server-ByjlHAhQ.js";
-import { p, r, s, w, a, e, b } from "./websocket-server-ByjlHAhQ.js";
-import "./app-_xgEuKqE.js";
+import { W as WebSocket } from "./websocket-server-CTnzV_B7.js";
+import { p, r, s, w, a, e, b } from "./websocket-server-CTnzV_B7.js";
+import "./app-BpmEMaiu.js";
 import "node:stream";
 import "stream";
 import "util";

package/build/server/assets/{ws-transport-BCfcEhAO.js → ws-transport-ByYax88V.js}

@@ -5,8 +5,8 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { a_ as isWsEventsTransportEnabled, a$ as getHttpUrl, b0 as getHttpConfig, b1 as headersToRecord, b2 as getRequestTimeoutMs, b3 as injectTraceContextIntoHeaders, b4 as withHttpClientSpan, b5 as ErrorType, b6 as WorkflowWsReconnectAttempt, b7 as NetworkProtocolName, b8 as WorkflowEventsTransport, b9 as distExports, ba as decodeFrames } from "./app-_xgEuKqE.js";
-import { W as WebSocket } from "./websocket-server-ByjlHAhQ.js";
+import { b0 as isWsEventsTransportEnabled, b1 as getHttpUrl, b2 as globalSingleton, b3 as version, b4 as getHttpConfig, b5 as headersToRecord, b6 as getRequestTimeoutMs, b7 as injectTraceContextIntoHeaders, b8 as withHttpClientSpan, b9 as ErrorType, ba as WorkflowWsReconnectAttempt, bb as NetworkProtocolName, bc as WorkflowEventsTransport, bd as distExports, be as decodeFrames } from "./app-BpmEMaiu.js";
+import { W as WebSocket } from "./websocket-server-CTnzV_B7.js";
 import "node:stream";
 import "stream";
 import "util";
@@ -107,15 +107,15 @@ class WsEventsTransport {
     __publicField(this, "reconnectTimer", null);
     /** Number of `open()` calls not yet matched by a `release()`. The socket goes
      *  away at zero. A refcount rather than a flag because concurrent invocations
-     *  for one run share this instance — see `open`. */
+     *  for one run share this instance; see `open`. */
     __publicField(this, "openCount", 0);
     /** Set by `close()`. Suppresses reconnects so an intentional teardown can't
      *  be undone by the close handler it triggers. */
     __publicField(this, "closed", false);
     /** Reason from the most recent `drain`, consumed by the close that follows. */
     __publicField(this, "lastDrainReason", null);
-    /** A drain said the *token* expired, not that the socket aged out — the next
-     *  connect must not reuse the same bearer. */
+    /** A drain said the *token* expired, not that the socket aged out, so the
+     *  next connect must not reuse the same bearer. */
     __publicField(this, "needsFreshToken", false);
     /** Authorization the current socket was opened with, so a forced refresh can
      *  tell whether it actually produced a new one. */
@@ -160,7 +160,7 @@ class WsEventsTransport {
   }
   /**
    * Claim the channel and start connecting. Called once per invocation that
-   * intends to write, at the point the run id is known — connecting lazily on
+   * intends to write, at the point the run id is known. Connecting lazily on
    * the first write instead bills the handshake (plus the OIDC mint riding it)
    * to whichever event happens to be written first; when that's a `step_started`
    * issued as the step body already runs, its server-recorded timestamp lands
@@ -211,7 +211,7 @@ class WsEventsTransport {
   /**
    * Drop the socket and evict this transport from the cache. Terminal, not a
    * pause: the instance stays closed and a later `openWsChannel` for the same
-   * run constructs a fresh one. Idempotent. Safe with work in flight — those
+   * run constructs a fresh one. Idempotent. Safe with work in flight: those
    * requests fail through the socket's own `close` handler, same as any other
    * close.
    */
@@ -224,8 +224,9 @@ class WsEventsTransport {
       clearTimeout(this.reconnectTimer);
       this.reconnectTimer = null;
     }
-    if (transports.get(this.wsUrl) === this)
-      transports.delete(this.wsUrl);
+    if (wsState.transports.get(this.wsUrl) === this) {
+      wsState.transports.delete(this.wsUrl);
+    }
     const conn = this.connection;
     this.connection = null;
     conn == null ? void 0 : conn.ws.close(1e3, reason);
@@ -241,7 +242,7 @@ class WsEventsTransport {
     return this.connecting;
   }
   /**
-   * Resolve the headers for one upgrade request — once per socket, since the
+   * Resolve the headers for one upgrade request, once per socket, since the
    * bearer only rides the upgrade. Re-resolving per socket is what lets a
    * reconnect pick up a fresh token rather than replaying an expired one.
    *
@@ -437,13 +438,13 @@ class WsEventsTransport {
     conn.pending.clear();
   }
   /**
-   * Fail every waiter on `conn` and drop the socket — for a reply that can't be
+   * Fail every waiter on `conn` and drop the socket, for a reply that can't be
    * correlated to a caller, and for a request that outlived its deadline. The
    * whole connection goes because each case says the stream itself is no longer
    * understood; logging and moving on would leave the originating request in
    * `pending` with nothing able to answer it until the server drains (~680s),
    * well past the waiting invocation's `maxDuration`. The socket's own `close`
-   * handler does the teardown and schedules the reconnect — failing the waiters
+   * handler does the teardown and schedules the reconnect; failing the waiters
    * here is what makes callers see this diagnosis, not a bare close code.
    */
   failConnection(conn, message) {
@@ -453,12 +454,31 @@ class WsEventsTransport {
     conn.ws.close();
   }
 }
-const transports = /* @__PURE__ */ new Map();
+const wsState = globalSingleton(
+  // Keyed by package version, unlike the state that holds only plain data.
+  // Two different published versions of this package can share one process (a
+  // transitive dependency pinning an older `@workflow/core`, which depends on
+  // this package by exact version), and this Map holds `WsEventsTransport`
+  // instances. An unversioned key would hand one version's write path an object
+  // built by the other version's class, and `events-v4.ts` would then frame and
+  // parse against a protocol the other copy may not share. There is no version
+  // negotiation on this socket to catch that. `shapeVersion` cannot express it:
+  // the container shape is stable, the hazard is in the contents. Two versions
+  // therefore keep separate registries, which costs a second socket and is what
+  // happened before this package was bundled anyway.
+  `@workflow/world-vercel//wsEventsTransports@${version}`,
+  1,
+  () => ({
+    transports: /* @__PURE__ */ new Map(),
+    loggedWsProxyFallback: false,
+    loggedWsInUse: false
+  })
+);
 function getWsEventsTransport(wsUrl, getHeaders) {
-  let transport = transports.get(wsUrl);
+  let transport = wsState.transports.get(wsUrl);
   if (!transport) {
     transport = new WsEventsTransport(wsUrl, getHeaders);
-    transports.set(wsUrl, transport);
+    wsState.transports.set(wsUrl, transport);
   }
   return transport;
 }
@@ -474,8 +494,8 @@ function openWsChannel(runId, config) {
   const resolved = resolveChannelUrl(runId, config);
   if (!resolved)
     return void 0;
-  if (!loggedWsInUse) {
-    loggedWsInUse = true;
+  if (!wsState.loggedWsInUse) {
+    wsState.loggedWsInUse = true;
     console.log(`world-vercel: using ws events transport (${resolved}).`);
   }
   const transport = getWsEventsTransport(resolved, async ({ forceRefresh }) => {
@@ -502,13 +522,11 @@ async function refreshOidcTokenBestEffort() {
   } catch {
   }
 }
-let loggedWsProxyFallback = false;
-let loggedWsInUse = false;
 function resolveChannelUrl(runId, config) {
   const { baseUrl, usingProxy } = getHttpUrl(config);
   if (usingProxy) {
-    if (!loggedWsProxyFallback) {
-      loggedWsProxyFallback = true;
+    if (!wsState.loggedWsProxyFallback) {
+      wsState.loggedWsProxyFallback = true;
       console.warn(`world-vercel: ws events transport requested but a World with projectConfig (api-workflow proxy, resolved baseUrl: ${baseUrl}) is active — falling back.`);
     }
     return null;
@@ -519,7 +537,7 @@ function resolveWsTransport(runId, config) {
   const wsUrl = resolveChannelUrl(runId, config);
   if (!wsUrl)
     return null;
-  const transport = transports.get(wsUrl);
+  const transport = wsState.transports.get(wsUrl);
   return transport ? { transport, wsUrl } : null;
 }
 export {

package/build/server/assets/{zstd-browser-decoder-D8JD_nwS.js → zstd-browser-decoder-Bfk1d5vU.js}

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { aZ as registerZstdDecoder } from "./app-_xgEuKqE.js";
+import { a$ as registerZstdDecoder } from "./app-BpmEMaiu.js";
 import "node:stream";
 import "stream";
 import "util";

package/build/server/index.js

@@ -2,7 +2,7 @@ import { createRequire as __wkfCreateRequire } from "node:module";
 if (typeof require === "undefined") {
   globalThis.require = __wkfCreateRequire(import.meta.url);
 }
-import { bf, bg } from "./assets/app-_xgEuKqE.js";
+import { bj, bk } from "./assets/app-BpmEMaiu.js";
 import "express";
 import "node:stream";
 import "stream";
@@ -48,6 +48,6 @@ import "os";
 import "net";
 import "node:assert/strict";
 export {
-  bf as app,
-  bg as createFetchHandler
+  bj as app,
+  bk as createFetchHandler
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@workflow/web",
   "description": "Workflow Observability UI",
-  "version": "5.0.0-beta.43",
+  "version": "5.0.0-beta.46",
   "type": "module",
   "private": false,
   "files": [
@@ -41,7 +41,7 @@
   "dependencies": {
     "express": "^5.2.1",
     "swr": "^2.3.6",
-    "@workflow/world-local": "5.0.0-beta.37"
+    "@workflow/world-local": "5.0.0-beta.40"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.4",
@@ -86,12 +86,12 @@
     "typescript": "^6.0.3",
     "vite": "^6",
     "vitest": "^3.2.7",
-    "@workflow/core": "5.0.0-beta.43",
-    "@workflow/errors": "5.0.0-beta.17",
-    "@workflow/utils": "5.0.0-beta.8",
-    "@workflow/web-shared": "5.0.0-beta.43",
-    "@workflow/world": "5.0.0-beta.28",
-    "@workflow/world-vercel": "5.0.0-beta.39"
+    "@workflow/core": "5.0.0-beta.46",
+    "@workflow/errors": "5.0.0-beta.18",
+    "@workflow/web-shared": "5.0.0-beta.46",
+    "@workflow/utils": "5.0.0-beta.9",
+    "@workflow/world": "5.0.0-beta.31",
+    "@workflow/world-vercel": "5.0.0-beta.42"
   },
   "scripts": {
     "dev": "react-router dev",