[pull] main from vercel:main

.changeset/bright-waits-refresh.md

@@ -0,0 +1,9 @@
+---
+'@workflow/core': patch
+'@workflow/world': patch
+'@workflow/world-local': patch
+'@workflow/world-postgres': patch
+'@workflow/world-vercel': patch
+---
+
+Refresh workflow events after completing elapsed waits so concurrent hook events preserve deterministic replay order.

.changeset/corrupted-event-log-code.md

@@ -0,0 +1,7 @@
+---
+"@workflow/core": patch
+"@workflow/errors": patch
+"@workflow/world": patch
+---
+
+Report corrupted event logs with a distinct `CorruptedEventLogError` type and `CORRUPTED_EVENT_LOG` run error code.

.changeset/fix-inline-execution-flow-count-race.md

@@ -0,0 +1,5 @@
+---
+"@workflow/world-testing": patch
+---
+
+Fix race condition in test server's flow invocation counter that caused intermittent failures in the inline-execution test suite (e.g. "sequential steps complete in a single flow invocation"). The counter is now incremented before awaiting the flow handler, so the count is observable as soon as the run transitions to completed.

.changeset/fix-observability-getworld-import.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/guard-step-consumer-events.md

@@ -0,0 +1,6 @@
+---
+'@workflow/core': patch
+'@workflow/world': patch
+---
+
+Validate step, wait, and hook lifecycle events against replay ownership metadata.

.changeset/modern-penguins-peel.md

@@ -0,0 +1,5 @@
+---
+"@workflow/web-shared": patch
+---
+
+trace viewer bug fix + file cleanup

.changeset/rare-badgers-judge.md

@@ -0,0 +1,5 @@
+---
+"@workflow/web-shared": patch
+---
+
+updated colours on the trace viewer

.changeset/yellow-pianos-relax.md

@@ -0,0 +1,5 @@
+---
+"@workflow/web-shared": patch
+---
+
+Add reduced motion for the trace viewer 

.github/actions/wait-for-vercel-project/action.yml

@@ -28,6 +28,8 @@ outputs:
     description: 'The URL of the ready deployment (e.g. https://my-project-abc123.vercel.app).'
   deployment-id:
     description: 'The Vercel deployment ID (dpl_xxx), resolved from the matching commit status. Empty string if it could not be resolved.'
+  deployment-state:
+    description: 'The GitHub Deployment status state that made the deployment terminal-ready, such as success or inactive.'
 
 runs:
   using: 'node20'

.github/actions/wait-for-vercel-project/dist/index.js

@@ -19995,6 +19995,7 @@ async function run() {
       core.info(`Deployment ID: ${deploymentId}`);
       core.setOutput("deployment-url", deploymentUrl);
       core.setOutput("deployment-id", deploymentId);
+      core.setOutput("deployment-state", latest.state);
       return;
     }
     throw new Error(

.github/actions/wait-for-vercel-project/src/wait-for-deployment.ts

@@ -279,6 +279,7 @@ async function run(): Promise<void> {
       core.info(`Deployment ID: ${deploymentId}`);
       core.setOutput('deployment-url', deploymentUrl);
       core.setOutput('deployment-id', deploymentId);
+      core.setOutput('deployment-state', latest.state);
       return;
     }
 

.github/workflows/docs-checks.yml

@@ -80,6 +80,7 @@ jobs:
           environment: ${{ github.ref == 'refs/heads/main' && 'production' || 'preview' }}
 
       - name: Verify OpenGraph images and sitemap
+        if: steps.waitForDocsDeployment.outputs.deployment-state == 'success'
         run: pnpm --filter docs test:smoke
         env:
           DEPLOYMENT_URL: ${{ steps.waitForDocsDeployment.outputs.deployment-url }}
@@ -90,6 +91,7 @@ jobs:
           # See: https://vercel.com/docs/deployment-protection/methods-to-bypass-deployment-protection/trusted-sources
 
       - name: Verify rendered docs links
+        if: steps.waitForDocsDeployment.outputs.deployment-state == 'success'
         run: pnpm --filter docs lint:rendered-links
         env:
           DEPLOYMENT_URL: ${{ steps.waitForDocsDeployment.outputs.deployment-url }}

packages/core/src/abort-consistency.test.ts

@@ -340,15 +340,20 @@ describe('AbortController consistency', () => {
               runId: 'wrun_test',
               eventType: 'hook_created',
               correlationId: hookItem.correlationId,
-              eventData: {},
+              eventData: {
+                token: 'test-token',
+              },
               createdAt: new Date(),
             },
             {
               eventId: 'evnt_1',
               runId: 'wrun_test',
               eventType: 'hook_received',
               correlationId: hookItem.correlationId,
-              eventData: { payload: { reason: 'hook worked' } },
+              eventData: {
+                token: 'test-token',
+                payload: { reason: 'hook worked' },
+              },
               createdAt: new Date(),
             },
           ];

packages/core/src/abort-controller.test.ts

@@ -6,12 +6,15 @@
  * (for real-time step propagation).
  */
 
+import { CorruptedEventLogError } from '@workflow/errors';
+import { withResolvers } from '@workflow/utils';
 import type { Event } from '@workflow/world';
 import * as nanoid from 'nanoid';
 import { monotonicFactory } from 'ulid';
 import { describe, expect, it, vi } from 'vitest';
 import { EventsConsumer } from './events-consumer.js';
 import type { WorkflowOrchestratorContext } from './private.js';
+import { dehydrateStepReturnValue } from './serialization.js';
 import { createContext } from './vm/index.js';
 import {
   createCreateAbortController,
@@ -115,6 +118,51 @@ describe('AbortController in workflow VM', () => {
       expect(controller.signal.aborted).toBe(true);
     });
 
+    it('reports a CorruptedEventLogError when abort hook_received token mismatches the controller', async () => {
+      ctx = setupWorkflowContext([]);
+      const ProbeAbortController = createCreateAbortController(ctx);
+      new ProbeAbortController();
+      const probeHookItem = [...ctx.invocationsQueue.values()].find(
+        (item) => item.type === 'hook'
+      );
+      expect(probeHookItem).toBeDefined();
+      if (!probeHookItem || probeHookItem.type !== 'hook') {
+        throw new Error('Expected abort hook item');
+      }
+
+      const ops: Promise<any>[] = [];
+      ctx = setupWorkflowContext([
+        {
+          eventId: 'evnt_0',
+          runId: 'wrun_test',
+          eventType: 'hook_received',
+          correlationId: probeHookItem.correlationId,
+          eventData: {
+            token: 'wrong-token',
+            payload: await dehydrateStepReturnValue(
+              { reason: 'aborted' },
+              'wrun_test',
+              undefined,
+              ops
+            ),
+          },
+          createdAt: new Date(),
+        },
+      ]);
+
+      const errorReceived = withResolvers<Error>();
+      ctx.onWorkflowError = errorReceived.resolve;
+
+      const AbortController = createCreateAbortController(ctx);
+      new AbortController();
+
+      const workflowError = await errorReceived.promise;
+      expect(workflowError).toBeInstanceOf(CorruptedEventLogError);
+      expect(workflowError?.message).toContain('hook_received');
+      expect(workflowError?.message).toContain('wrong-token');
+      expect(workflowError?.message).toContain(probeHookItem.token);
+    });
+
     it('signal.aborted is false initially', () => {
       ctx = setupWorkflowContext([]);
       const AbortController = createCreateAbortController(ctx);