runwork 0.27.0 → 0.27.1

package/bundled-types/core-agent.d.ts

@@ -229,14 +229,17 @@ export declare const integrationApiSchema: z.ZodObject<{
     method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE"]>>;
     endpoint: z.ZodString;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     endpoint: string;
     method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
     data?: Record<string, unknown> | undefined;
+    headers?: Record<string, string> | undefined;
 }, {
     endpoint: string;
     data?: Record<string, unknown> | undefined;
     method?: "POST" | "GET" | "PUT" | "PATCH" | "DELETE" | undefined;
+    headers?: Record<string, string> | undefined;
 }>;
 /**
  * Get tool definitions for integration access

package/bundled-types/core-workflow-coordinator.d.ts

@@ -6,6 +6,16 @@
  * - Creates WorkflowInstance DOs
  * - Maintains an index for querying workflows
  * - Routes signals to correct instances
+ *
+ * Index storage: one storage key per instance entry (`index:<instanceId>`),
+ * read back with a prefix list. A single-value index hits the 2 MB per-value
+ * limit of SQLite-backed DO storage at roughly 11,000 entries, after which every
+ * write fails with SQLITE_TOOBIG. Apps deployed before the per-key layout still
+ * hold the legacy `workflow_index` value; it is migrated on first load.
+ *
+ * Retention: terminal entries older than the retention window are pruned from
+ * a self-armed alarm, and the index is trimmed inline when a write pushes it
+ * past the entry cap, so the index stays bounded without an external caller.
  */
 import { DurableObject } from 'cloudflare:workers';
 import type { NativeWorkflowStatus, NativeWorkflowConfig, ListWorkflowsOptions, WorkflowInstanceInfo, WorkflowInstanceStub } from './core-workflow-types';
@@ -19,8 +29,14 @@ import { type Env } from './core-utils';
  */
 export declare class WorkflowCoordinator extends DurableObject<Env> {
     private index;
+    /** Entry cap applied inline on writes and by the retention alarm. */
+    readonly retentionMaxEntries = 10000;
     /**
-     * Create a new workflow instance
+     * Create a new workflow instance.
+     *
+     * The index entry and stored params are written before the instance starts,
+     * so a completion notification from a fast workflow can never race ahead of
+     * its own pending entry, and an index failure surfaces before any work runs.
      */
     create(workflowName: string, params: Record<string, unknown>, config?: Partial<NativeWorkflowConfig>, metadata?: Record<string, unknown>): Promise<string>;
     /**
@@ -65,14 +81,36 @@ export declare class WorkflowCoordinator extends DurableObject<Env> {
         byWorkflow: Record<string, number>;
     }>;
     /**
-     * Clean up completed/old workflow entries
-     * Should be called periodically to prevent index bloat
+     * Clean up completed/old workflow entries.
+     *
+     * Removes terminal entries older than `olderThanMs`, every completed entry
+     * unless `keepCompleted` is set, and then the oldest terminal entries until
+     * the index fits within `maxEntries`. Active entries (pending, running,
+     * sleeping, waiting, paused) are never removed. Runs from the retention alarm
+     * and inline on writes; explicit calls remain supported.
      */
     cleanup(options?: {
         olderThanMs?: number;
         keepCompleted?: boolean;
         maxEntries?: number;
     }): Promise<number>;
+    /**
+     * Retention alarm: prune old terminal entries and re-arm while the index
+     * still holds anything.
+     */
+    alarm(): Promise<void>;
     private ensureIndexLoaded;
-    private persistIndex;
+    /**
+     * Move a legacy single-value index into per-entry keys. Per-entry values
+     * already present win, since they were written after the legacy value.
+     * An unreadable legacy value is dropped: the workflow instances themselves
+     * still hold their state, only the listing loses history.
+     */
+    private migrateLegacyIndex;
+    private deleteLegacyIndexKey;
+    /**
+     * Remove index entries and their stored params, in storage batches.
+     */
+    private removeEntries;
+    private ensureRetentionAlarm;
 }

package/bundled-types/shared/shared/core-types.d.ts

@@ -28,7 +28,12 @@ export interface NangoProxyOptions {
     method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
     endpoint: string;
     providerConfigKey: string;
-    data?: Record<string, unknown>;
+    /**
+     * Request body. Encoded per the Content-Type in `headers`: form-encoded with
+     * bracket notation for application/x-www-form-urlencoded, JSON otherwise.
+     * A string is sent verbatim.
+     */
+    data?: Record<string, unknown> | string;
     headers?: Record<string, string>;
     params?: Record<string, string>;
     retries?: number;

package/dist/index.js

@@ -427,6 +427,124 @@ function safeRm(path) {
 var MAX_REDIRECTS = 10, transportOverride = "auto";
 var init_http = () => {};
 
+// ../../shared/utils/integration-body.ts
+function findHeader(headers, name) {
+  if (!headers)
+    return;
+  const wanted = name.toLowerCase();
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === wanted)
+      return value;
+  }
+  return;
+}
+function setHeader(headers, name, value) {
+  const wanted = name.toLowerCase();
+  const next = {};
+  for (const [key, existing] of Object.entries(headers)) {
+    if (key.toLowerCase() !== wanted)
+      next[key] = existing;
+  }
+  next[name] = value;
+  return next;
+}
+function mediaType(contentType) {
+  return (contentType ?? "").split(";")[0].trim().toLowerCase();
+}
+function isJsonContentType(contentType) {
+  const type = mediaType(contentType);
+  return type === JSON_CONTENT_TYPE || type.endsWith("+json");
+}
+function isFormContentType(contentType) {
+  return mediaType(contentType) === FORM_CONTENT_TYPE;
+}
+function isMultipartContentType(contentType) {
+  return mediaType(contentType) === "multipart/form-data";
+}
+function appendFormValue(out, key, value) {
+  if (value === undefined)
+    return;
+  if (value === null) {
+    out.append(key, "");
+    return;
+  }
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => appendFormValue(out, `${key}[${index}]`, item));
+    return;
+  }
+  if (typeof value === "object") {
+    for (const [childKey, childValue] of Object.entries(value)) {
+      appendFormValue(out, `${key}[${childKey}]`, childValue);
+    }
+    return;
+  }
+  out.append(key, String(value));
+}
+function encodeFormBody(value) {
+  if (typeof value === "string")
+    return value;
+  if (value === undefined || value === null)
+    return "";
+  const out = new URLSearchParams;
+  if (Array.isArray(value) || typeof value === "object") {
+    for (const [key, child] of Object.entries(value)) {
+      appendFormValue(out, key, child);
+    }
+  } else {
+    out.append("value", String(value));
+  }
+  return out.toString();
+}
+function looksLikeJson(text) {
+  const trimmed = text.trim();
+  if (!(trimmed.startsWith("{") || trimmed.startsWith("[")))
+    return false;
+  try {
+    JSON.parse(trimmed);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function encodeIntegrationBody(body, contentType) {
+  if (body === undefined || body === null) {
+    return { body: undefined, contentType };
+  }
+  if (isMultipartContentType(contentType)) {
+    throw new Error("multipart/form-data bodies are not supported by the integrations proxy. Send application/x-www-form-urlencoded or JSON instead.");
+  }
+  if (typeof body === "string") {
+    if (contentType)
+      return { body, contentType };
+    return { body, contentType: looksLikeJson(body) ? JSON_CONTENT_TYPE : TEXT_CONTENT_TYPE };
+  }
+  if (isFormContentType(contentType)) {
+    return { body: encodeFormBody(body), contentType };
+  }
+  return { body: JSON.stringify(body), contentType: contentType ?? JSON_CONTENT_TYPE };
+}
+function encodeIntegrationRequest(body, headers = {}) {
+  const encoded = encodeIntegrationBody(body, findHeader(headers, "Content-Type"));
+  if (encoded.body === undefined) {
+    return { body: undefined, headers };
+  }
+  return {
+    body: encoded.body,
+    headers: setHeader(headers, "Content-Type", encoded.contentType ?? JSON_CONTENT_TYPE)
+  };
+}
+function parseBodyArgument(text, contentType) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    if (contentType && !isJsonContentType(contentType)) {
+      return text;
+    }
+    throw new Error('Body is not valid JSON. To send a raw or form-encoded body, set a matching Content-Type header (for example --header "Content-Type: application/x-www-form-urlencoded").');
+  }
+}
+var JSON_CONTENT_TYPE = "application/json", FORM_CONTENT_TYPE = "application/x-www-form-urlencoded", TEXT_CONTENT_TYPE = "text/plain; charset=utf-8";
+
 // src/api/client.ts
 class ApiClient {
   baseUrl;
@@ -868,22 +986,22 @@ class ApiClient {
     return res.data;
   }
   async callIntegrationProxy(integrationDbId, method, path, opts) {
-    const targetPath = opts?.query ? `${path}?${opts.query}` : path;
+    const targetPath = opts?.query ? `${path}${path.includes("?") ? "&" : "?"}${opts.query}` : path;
     const url = `${this.baseUrl}/api/proxy/integrations${targetPath}`;
-    const headers = {
+    const upperMethod = method.toUpperCase();
+    const hasBody = opts?.body !== undefined && opts?.body !== null && upperMethod !== "GET" && upperMethod !== "HEAD";
+    const encoded = encodeIntegrationRequest(hasBody ? opts?.body : undefined, {
       "X-Workspace-Integration-Id": integrationDbId,
-      ...Object.fromEntries(Object.entries(opts?.headers || {}))
-    };
+      ...opts?.headers || {}
+    });
+    const headers = encoded.headers;
     if (this.apiKey) {
       headers["Authorization"] = `Bearer ${this.apiKey}`;
     }
-    if (opts?.body) {
-      headers["Content-Type"] = "application/json";
-    }
     const response = await httpFetch(url, {
-      method,
+      method: upperMethod,
       headers,
-      body: opts?.body ? JSON.stringify(opts.body) : undefined
+      body: encoded.body
     });
     if (!response.ok) {
       const body = await response.text();
@@ -6212,6 +6330,16 @@ export declare class WorkflowInstanceDO extends DurableObject<Env> {
  * - Creates WorkflowInstance DOs
  * - Maintains an index for querying workflows
  * - Routes signals to correct instances
+ *
+ * Index storage: one storage key per instance entry (\`index:<instanceId>\`),
+ * read back with a prefix list. A single-value index hits the 2 MB per-value
+ * limit of SQLite-backed DO storage at roughly 11,000 entries, after which every
+ * write fails with SQLITE_TOOBIG. Apps deployed before the per-key layout still
+ * hold the legacy \`workflow_index\` value; it is migrated on first load.
+ *
+ * Retention: terminal entries older than the retention window are pruned from
+ * a self-armed alarm, and the index is trimmed inline when a write pushes it
+ * past the entry cap, so the index stays bounded without an external caller.
  */
 import { DurableObject } from 'cloudflare:workers';
 import type { NativeWorkflowStatus, NativeWorkflowConfig, ListWorkflowsOptions, WorkflowInstanceInfo, WorkflowInstanceStub } from './core-workflow-types';
@@ -6225,8 +6353,14 @@ import { type Env } from './core-utils';
  */
 export declare class WorkflowCoordinator extends DurableObject<Env> {
     private index;
+    /** Entry cap applied inline on writes and by the retention alarm. */
+    readonly retentionMaxEntries = 10000;
     /**
-     * Create a new workflow instance
+     * Create a new workflow instance.
+     *
+     * The index entry and stored params are written before the instance starts,
+     * so a completion notification from a fast workflow can never race ahead of
+     * its own pending entry, and an index failure surfaces before any work runs.
      */
     create(workflowName: string, params: Record<string, unknown>, config?: Partial<NativeWorkflowConfig>, metadata?: Record<string, unknown>): Promise<string>;
     /**
@@ -6271,16 +6405,38 @@ export declare class WorkflowCoordinator extends DurableObject<Env> {
         byWorkflow: Record<string, number>;
     }>;
     /**
-     * Clean up completed/old workflow entries
-     * Should be called periodically to prevent index bloat
+     * Clean up completed/old workflow entries.
+     *
+     * Removes terminal entries older than \`olderThanMs\`, every completed entry
+     * unless \`keepCompleted\` is set, and then the oldest terminal entries until
+     * the index fits within \`maxEntries\`. Active entries (pending, running,
+     * sleeping, waiting, paused) are never removed. Runs from the retention alarm
+     * and inline on writes; explicit calls remain supported.
      */
     cleanup(options?: {
         olderThanMs?: number;
         keepCompleted?: boolean;
         maxEntries?: number;
     }): Promise<number>;
+    /**
+     * Retention alarm: prune old terminal entries and re-arm while the index
+     * still holds anything.
+     */
+    alarm(): Promise<void>;
     private ensureIndexLoaded;
-    private persistIndex;
+    /**
+     * Move a legacy single-value index into per-entry keys. Per-entry values
+     * already present win, since they were written after the legacy value.
+     * An unreadable legacy value is dropped: the workflow instances themselves
+     * still hold their state, only the listing loses history.
+     */
+    private migrateLegacyIndex;
+    private deleteLegacyIndexKey;
+    /**
+     * Remove index entries and their stored params, in storage batches.
+     */
+    private removeEntries;
+    private ensureRetentionAlarm;
 }
 `,
     "core-integration-entities.d.ts": `/**
@@ -7962,14 +8118,17 @@ export declare const integrationApiSchema: z.ZodObject<{
     method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE"]>>;
     endpoint: z.ZodString;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     endpoint: string;
     method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
     data?: Record<string, unknown> | undefined;
+    headers?: Record<string, string> | undefined;
 }, {
     endpoint: string;
     data?: Record<string, unknown> | undefined;
     method?: "POST" | "GET" | "PUT" | "PATCH" | "DELETE" | undefined;
+    headers?: Record<string, string> | undefined;
 }>;
 /**
  * Get tool definitions for integration access
@@ -8205,7 +8364,7 @@ function createKeyboardListener() {
 }
 
 // src/generated/version.ts
-var VERSION = "0.27.0";
+var VERSION = "0.27.1";
 
 // src/commands/dev.ts
 var exports_dev = {};
@@ -19885,17 +20044,10 @@ async function parseCurlToRequest(curlStr) {
     try {
       body = JSON.parse(dataStr);
     } catch {
-      if (dataStr.includes("=") && !dataStr.includes("{")) {
-        const formData = {};
-        for (const pair of dataStr.split("&")) {
-          const eqIdx = pair.indexOf("=");
-          if (eqIdx > 0) {
-            formData[decodeURIComponent(pair.slice(0, eqIdx))] = decodeURIComponent(pair.slice(eqIdx + 1));
-          }
-        }
-        body = formData;
-      } else {
-        body = dataStr;
+      body = dataStr;
+      const hasContentType = Object.keys(filteredHeaders).some((k) => k.toLowerCase() === "content-type");
+      if (!hasContentType) {
+        filteredHeaders["Content-Type"] = "application/x-www-form-urlencoded";
       }
     }
   }
@@ -20021,16 +20173,19 @@ Used by your team (${teamOnly.length} more):
     process.exit(1);
   }
 });
-var callCommand = new Command10("call").description("Make a proxy call to a connected integration").argument("<integration>", "Integration name (e.g., hubspot, slack)").argument("[method]", "HTTP method (GET, POST, PUT, DELETE)").argument("[path]", "API path (e.g., /crm/v3/contacts)").option("--workspace <name-or-id>", "Workspace name or ID").option("--body <json>", "Request body JSON").option("--header <header>", "Request header (repeatable)", (val, prev) => [...prev, val], []).option("--query <query>", "Query string (e.g., limit=10&offset=0)").option("--curl <command>", 'Parse a curl command (paste from Chrome DevTools "Copy as cURL")').option("--curl-file <file>", "Read curl command from a file").action(async (integration, method, path2, opts, command) => {
+var callCommand = new Command10("call").description("Make a proxy call to a connected integration").argument("<integration>", "Integration name (e.g., hubspot, slack)").argument("[method]", "HTTP method (GET, POST, PUT, DELETE)").argument("[path]", "API path (e.g., /crm/v3/contacts)").option("--workspace <name-or-id>", "Workspace name or ID").option("--body <body>", "Request body: JSON, or a raw string when a non-JSON Content-Type header is set").option("--form", "Send the body as application/x-www-form-urlencoded (Stripe, Twilio, OAuth token endpoints). Accepts a JSON object (form-encoded, nested keys in bracket notation) or an already-encoded a=b&c=d string").option("--header <header>", "Request header (repeatable). Content-Type decides how --body is encoded", (val, prev) => [...prev, val], []).option("--query <query>", "Query string (e.g., limit=10&offset=0)").option("--curl <command>", 'Parse a curl command (paste from Chrome DevTools "Copy as cURL")').option("--curl-file <file>", "Read curl command from a file").action(async (integration, method, path2, opts, command) => {
   const useJson = shouldOutputJson(command.optsWithGlobals().json);
   const credentials = requireAuth();
   const client = new ApiClient(credentials);
   const { workspaceId } = await resolveWorkspace2(client, opts);
   let finalMethod;
   let finalPath;
-  const headers = {};
+  let headers = {};
   let body;
   let query = opts.query;
+  if (opts.form) {
+    headers = setHeader(headers, "Content-Type", FORM_CONTENT_TYPE);
+  }
   if (opts.curl || opts.curlFile) {
     let curlStr = opts.curl;
     if (opts.curlFile) {
@@ -20047,7 +20202,7 @@ var callCommand = new Command10("call").description("Make a proxy call to a conn
       finalPath = result.path;
       if (result.query)
         query = query || result.query;
-      Object.assign(headers, result.headers);
+      headers = opts.form ? setHeader({ ...result.headers }, "Content-Type", FORM_CONTENT_TYPE) : { ...result.headers };
       body = result.body;
     } catch (err) {
       console.error("Failed to parse curl command:", err instanceof Error ? err.message : err);
@@ -20058,13 +20213,13 @@ var callCommand = new Command10("call").description("Make a proxy call to a conn
     finalPath = path2;
     for (const h of opts.header || []) {
       const [key, ...rest] = h.split(":");
-      headers[key.trim()] = rest.join(":").trim();
+      headers = setHeader(headers, key.trim(), rest.join(":").trim());
     }
     if (opts.body) {
       try {
-        body = JSON.parse(opts.body);
-      } catch {
-        console.error("Invalid JSON in --body");
+        body = parseBodyArgument(opts.body, findHeader(headers, "Content-Type"));
+      } catch (err) {
+        console.error(err instanceof Error ? err.message : "Invalid --body");
         process.exit(1);
       }
     }
@@ -21819,7 +21974,7 @@ function generateIntroSkill(ctx) {
   lines.push("| `runwork entities list` | Browse data across apps |");
   lines.push("| `runwork entities records <name>` | Query entity records |");
   lines.push("| `runwork workflows trigger <name>` | Trigger a workflow |");
-  lines.push("| `runwork integrations call <id> <method> <path>` | Call an integration API |");
+  lines.push("| `runwork integrations call <id> <method> <path>` | Call an integration API (`--body` JSON; `--form` for form-encoded APIs such as Stripe) |");
   lines.push("| `runwork integrations search <query>` | Search 3,200+ available integrations |");
   lines.push("| `runwork logs` | View app logs |");
   lines.push("| `runwork doctor` | Check system health (`--fix` auto-remediates git auth/remote; `--check <names>` scopes output) |");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runwork",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "description": "CLI for Runwork: develop, preview, and deploy Runwork apps from your local machine.",
   "license": "UNLICENSED",
   "author": "Runwork, Inc. <info@runwork.ai> (https://www.runwork.ai)",