@workflow/world-vercel 4.1.0-beta.33 → 4.1.0-beta.34

package/dist/encryption.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Vercel-specific key management for workflow encryption.
+ *
+ * This module handles:
+ * - HKDF key derivation (deployment key + projectId + runId → per-run key)
+ * - Cross-deployment key retrieval via the Vercel API
+ *
+ * The actual AES-GCM encrypt/decrypt operations are in @workflow/core/encryption
+ * which is browser-compatible. This module is Node.js only (uses node:crypto
+ * for HKDF and the Vercel API for key retrieval).
+ */
+import type { World } from '@workflow/world';
+/**
+ * Derive a per-run AES-256 encryption key using HKDF-SHA256.
+ *
+ * The derivation uses `projectId|runId` as the HKDF info parameter,
+ * ensuring that each run has a unique encryption key even when sharing
+ * the same deployment key.
+ *
+ * @param deploymentKey - Raw 32-byte deployment key
+ * @param projectId - Vercel project ID for context isolation
+ * @param runId - Workflow run ID for per-run key isolation
+ * @returns Raw 32-byte AES-256 key
+ */
+export declare function deriveRunKey(deploymentKey: Uint8Array, projectId: string, runId: string): Promise<Uint8Array>;
+/**
+ * Fetch the per-run encryption key from the Vercel API.
+ *
+ * The API performs HKDF-SHA256 derivation server-side, so the raw
+ * deployment key never leaves the API boundary. The returned key
+ * is ready-to-use for AES-GCM encrypt/decrypt operations.
+ *
+ * Uses OIDC token authentication (for cross-deployment runtime calls like
+ * resumeHook) or falls back to VERCEL_TOKEN (for external tooling like o11y).
+ *
+ * @param deploymentId - The deployment ID that holds the base key material
+ * @param projectId - The project ID for HKDF context isolation
+ * @param runId - The workflow run ID for per-run key derivation
+ * @param options.token - Auth token (from config). Falls back to OIDC or VERCEL_TOKEN.
+ * @returns Derived 32-byte per-run AES-256 key
+ */
+export declare function fetchRunKey(deploymentId: string, projectId: string, runId: string, options?: {
+    /** Auth token (from config). Falls back to OIDC or VERCEL_TOKEN. */
+    token?: string;
+}): Promise<Uint8Array>;
+/**
+ * Create the `getEncryptionKeyForRun` implementation for a Vercel World.
+ *
+ * Resolves the per-run AES-256 key by either:
+ * - Deriving it locally via HKDF when the run belongs to the current deployment
+ * - Fetching it from the Vercel API when the run belongs to a different deployment
+ *
+ * @param projectId - Vercel project ID for HKDF context isolation
+ * @param token - Optional auth token from config
+ * @returns The `getEncryptionKeyForRun` function, or `undefined` if no projectId
+ */
+export declare function createGetEncryptionKeyForRun(projectId: string | undefined, token?: string): World['getEncryptionKeyForRun'];
+//# sourceMappingURL=encryption.d.ts.map

package/dist/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAe,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAK1D;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,aAAa,EAAE,UAAU,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CAmCrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAC/B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IACR,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,UAAU,CAAC,CAiCrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,CAAC,EAAE,MAAM,GACb,KAAK,CAAC,wBAAwB,CAAC,CAyCjC"}

package/dist/encryption.js

@@ -0,0 +1,137 @@
+/**
+ * Vercel-specific key management for workflow encryption.
+ *
+ * This module handles:
+ * - HKDF key derivation (deployment key + projectId + runId → per-run key)
+ * - Cross-deployment key retrieval via the Vercel API
+ *
+ * The actual AES-GCM encrypt/decrypt operations are in @workflow/core/encryption
+ * which is browser-compatible. This module is Node.js only (uses node:crypto
+ * for HKDF and the Vercel API for key retrieval).
+ */
+import { webcrypto } from 'node:crypto';
+import { getVercelOidcToken } from '@vercel/oidc';
+import * as z from 'zod';
+const KEY_BYTES = 32; // 256 bits = 32 bytes (AES-256)
+/**
+ * Derive a per-run AES-256 encryption key using HKDF-SHA256.
+ *
+ * The derivation uses `projectId|runId` as the HKDF info parameter,
+ * ensuring that each run has a unique encryption key even when sharing
+ * the same deployment key.
+ *
+ * @param deploymentKey - Raw 32-byte deployment key
+ * @param projectId - Vercel project ID for context isolation
+ * @param runId - Workflow run ID for per-run key isolation
+ * @returns Raw 32-byte AES-256 key
+ */
+export async function deriveRunKey(deploymentKey, projectId, runId) {
+    if (deploymentKey.length !== KEY_BYTES) {
+        throw new Error(`Invalid deployment key length: expected ${KEY_BYTES} bytes for AES-256, got ${deploymentKey.length} bytes`);
+    }
+    if (!projectId || typeof projectId !== 'string') {
+        throw new Error('projectId must be a non-empty string');
+    }
+    const baseKey = await webcrypto.subtle.importKey('raw', deploymentKey, 'HKDF', false, ['deriveBits']);
+    const info = new TextEncoder().encode(`${projectId}|${runId}`);
+    // Zero salt is acceptable per RFC 5869 Section 3.1 when the input key
+    // material has high entropy (as is the case with our random deployment key).
+    // The `info` parameter provides per-run context separation.
+    const derivedBits = await webcrypto.subtle.deriveBits({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: new Uint8Array(32),
+        info,
+    }, baseKey, KEY_BYTES * 8 // bits
+    );
+    return new Uint8Array(derivedBits);
+}
+/**
+ * Fetch the per-run encryption key from the Vercel API.
+ *
+ * The API performs HKDF-SHA256 derivation server-side, so the raw
+ * deployment key never leaves the API boundary. The returned key
+ * is ready-to-use for AES-GCM encrypt/decrypt operations.
+ *
+ * Uses OIDC token authentication (for cross-deployment runtime calls like
+ * resumeHook) or falls back to VERCEL_TOKEN (for external tooling like o11y).
+ *
+ * @param deploymentId - The deployment ID that holds the base key material
+ * @param projectId - The project ID for HKDF context isolation
+ * @param runId - The workflow run ID for per-run key derivation
+ * @param options.token - Auth token (from config). Falls back to OIDC or VERCEL_TOKEN.
+ * @returns Derived 32-byte per-run AES-256 key
+ */
+export async function fetchRunKey(deploymentId, projectId, runId, options) {
+    // Authenticate via provided token (CLI/config), OIDC token (runtime),
+    // or VERCEL_TOKEN env var (external tooling)
+    const oidcToken = await getVercelOidcToken().catch(() => null);
+    const token = options?.token ?? oidcToken ?? process.env.VERCEL_TOKEN;
+    if (!token) {
+        throw new Error('Cannot fetch run key: no OIDC token or VERCEL_TOKEN available');
+    }
+    const params = new URLSearchParams({ projectId, runId });
+    const response = await fetch(`https://api.vercel.com/v1/workflow/run-key/${deploymentId}?${params}`, {
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch run key for ${runId} (deployment ${deploymentId}): HTTP ${response.status}`);
+    }
+    const data = await response.json();
+    const result = z.object({ key: z.string() }).safeParse(data);
+    if (!result.success) {
+        throw new Error('Invalid response from Vercel API, missing "key" field');
+    }
+    return Buffer.from(result.data.key, 'base64');
+}
+/**
+ * Create the `getEncryptionKeyForRun` implementation for a Vercel World.
+ *
+ * Resolves the per-run AES-256 key by either:
+ * - Deriving it locally via HKDF when the run belongs to the current deployment
+ * - Fetching it from the Vercel API when the run belongs to a different deployment
+ *
+ * @param projectId - Vercel project ID for HKDF context isolation
+ * @param token - Optional auth token from config
+ * @returns The `getEncryptionKeyForRun` function, or `undefined` if no projectId
+ */
+export function createGetEncryptionKeyForRun(projectId, token) {
+    if (!projectId)
+        return undefined;
+    const currentDeploymentId = process.env.VERCEL_DEPLOYMENT_ID;
+    // Parse the local deployment key from env (lazy, only when encryption is used)
+    let localDeploymentKey;
+    function getLocalDeploymentKey() {
+        if (localDeploymentKey)
+            return localDeploymentKey;
+        const deploymentKeyBase64 = process.env.VERCEL_DEPLOYMENT_KEY;
+        if (!deploymentKeyBase64)
+            return undefined;
+        localDeploymentKey = Buffer.from(deploymentKeyBase64, 'base64');
+        return localDeploymentKey;
+    }
+    return async function getEncryptionKeyForRun(run, context) {
+        const runId = typeof run === 'string' ? run : run.runId;
+        const deploymentId = typeof run === 'string'
+            ? context?.deploymentId
+            : run.deploymentId;
+        // Same deployment, or no deploymentId provided (e.g., start() on
+        // current deployment, or step-handler during same-deployment execution)
+        // → use local deployment key + local HKDF derivation
+        if (!deploymentId || deploymentId === currentDeploymentId) {
+            const localKey = getLocalDeploymentKey();
+            if (!localKey)
+                return undefined;
+            return deriveRunKey(localKey, projectId, runId);
+        }
+        // Different deployment — fetch the derived per-run key from the
+        // Vercel API. The API performs HKDF derivation server-side so the
+        // raw deployment key never leaves the API boundary.
+        // Covers cross-deployment resumeHook() (OIDC auth) and o11y
+        // tooling reading data from other deployments (VERCEL_TOKEN).
+        return fetchRunKey(deploymentId, projectId, runId, { token });
+    };
+}
+//# sourceMappingURL=encryption.js.map

package/dist/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,gCAAgC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,aAAyB,EACzB,SAAiB,EACjB,KAAa;IAEb,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,2BAA2B,aAAa,CAAC,MAAM,QAAQ,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAC9C,KAAK,EACL,aAAa,EACb,MAAM,EACN,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC;IAE/D,sEAAsE;IACtE,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,UAAU,CACnD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI;KACL,EACD,OAAO,EACP,SAAS,GAAG,CAAC,CAAC,OAAO;KACtB,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAAoB,EACpB,SAAiB,EACjB,KAAa,EACb,OAGC;IAED,sEAAsE;IACtE,6CAA6C;IAC7C,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,8CAA8C,YAAY,IAAI,MAAM,EAAE,EACtE;QACE,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;KACF,CACF,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,gBAAgB,YAAY,WAAW,QAAQ,CAAC,MAAM,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAA6B,EAC7B,KAAc;IAEd,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAE7D,+EAA+E;IAC/E,IAAI,kBAA0C,CAAC;IAC/C,SAAS,qBAAqB;QAC5B,IAAI,kBAAkB;YAAE,OAAO,kBAAkB,CAAC;QAClD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC9D,IAAI,CAAC,mBAAmB;YAAE,OAAO,SAAS,CAAC;QAC3C,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,OAAO,KAAK,UAAU,sBAAsB,CAC1C,GAAyB,EACzB,OAAiC;QAEjC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACxD,MAAM,YAAY,GAChB,OAAO,GAAG,KAAK,QAAQ;YACrB,CAAC,CAAE,OAAO,EAAE,YAAmC;YAC/C,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;QAEvB,iEAAiE;QACjE,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,mBAAmB,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,OAAO,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,gEAAgE;QAChE,kEAAkE;QAClE,oDAAoD;QACpD,4DAA4D;QAC5D,8DAA8D;QAC9D,OAAO,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import type { World } from '@workflow/world';
 import type { APIConfig } from './utils.js';
+export { createGetEncryptionKeyForRun, deriveRunKey, fetchRunKey, } from './encryption.js';
 export { createQueue } from './queue.js';
 export { createStorage } from './storage.js';
 export { createStreamer } from './streamer.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAI7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,KAAK,CAM3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAK7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EACL,4BAA4B,EAC5B,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,KAAK,CAe3D"}

package/dist/index.js

@@ -1,14 +1,20 @@
+import { createGetEncryptionKeyForRun } from './encryption.js';
 import { createQueue } from './queue.js';
 import { createStorage } from './storage.js';
 import { createStreamer } from './streamer.js';
+export { createGetEncryptionKeyForRun, deriveRunKey, fetchRunKey, } from './encryption.js';
 export { createQueue } from './queue.js';
 export { createStorage } from './storage.js';
 export { createStreamer } from './streamer.js';
 export function createVercelWorld(config) {
+    // Project ID for HKDF key derivation context.
+    // Use config value first (set correctly by CLI/web), fall back to env var (runtime).
+    const projectId = config?.projectConfig?.projectId || process.env.VERCEL_PROJECT_ID;
     return {
         ...createQueue(config),
         ...createStorage(config),
         ...createStreamer(config),
+        getEncryptionKeyForRun: createGetEncryptionKeyForRun(projectId, config?.token),
     };
 }
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,OAAO;QACL,GAAG,WAAW,CAAC,MAAM,CAAC;QACtB,GAAG,aAAa,CAAC,MAAM,CAAC;QACxB,GAAG,cAAc,CAAC,MAAM,CAAC;KAC1B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,OAAO,EACL,4BAA4B,EAC5B,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,8CAA8C;IAC9C,qFAAqF;IACrF,MAAM,SAAS,GACb,MAAM,EAAE,aAAa,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAEpE,OAAO;QACL,GAAG,WAAW,CAAC,MAAM,CAAC;QACtB,GAAG,aAAa,CAAC,MAAM,CAAC;QACxB,GAAG,cAAc,CAAC,MAAM,CAAC;QACzB,sBAAsB,EAAE,4BAA4B,CAClD,SAAS,EACT,MAAM,EAAE,KAAK,CACd;KACF,CAAC;AACJ,CAAC"}

package/dist/steps.d.ts

@@ -8,6 +8,7 @@ import type { APIConfig } from './utils.js';
 export declare const StepWireSchema: z.ZodObject<{
     output: z.ZodOptional<z.ZodUnion<readonly [z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>]>>;
     input: z.ZodUnion<readonly [z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>]>;
+    runId: z.ZodString;
     status: z.ZodEnum<{
         pending: "pending";
         running: "running";
@@ -15,13 +16,12 @@ export declare const StepWireSchema: z.ZodObject<{
         failed: "failed";
         cancelled: "cancelled";
     }>;
-    retryAfter: z.ZodOptional<z.ZodCoercedDate<unknown>>;
-    runId: z.ZodString;
     specVersion: z.ZodOptional<z.ZodNumber>;
     startedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
-    completedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
+    completedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    retryAfter: z.ZodOptional<z.ZodCoercedDate<unknown>>;
     stepId: z.ZodString;
     stepName: z.ZodString;
     attempt: z.ZodNumber;

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "4.1.0-beta.33";
+export declare const version = "4.1.0-beta.34";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 // Generated by genversion.
-export const version = '4.1.0-beta.33';
+export const version = '4.1.0-beta.34';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/world-vercel",
-  "version": "4.1.0-beta.33",
+  "version": "4.1.0-beta.34",
   "description": "Vercel platform World implementation for Workflow DevKit",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "cbor-x": "1.6.0",
     "zod": "4.1.11",
     "@workflow/errors": "4.1.0-beta.16",
-    "@workflow/world": "4.1.0-beta.5"
+    "@workflow/world": "4.1.0-beta.6"
   },
   "peerDependencies": {
     "@opentelemetry/api": "1"