Merge branch 'main' into main

Author: sepcnt

.changeset/allow-sync-step-functions.md

@@ -0,0 +1,6 @@
+---
+"@workflow/swc-plugin": minor
+"@workflow/typescript-plugin": minor
+---
+
+Allow synchronous functions to use `"use step"` directive. This enables using `"use step"` as a mechanism to strip Node.js-dependent code from the workflow VM bundle without requiring the function to be async.

.changeset/bright-pears-drum.md

@@ -0,0 +1,11 @@
+---
+"@workflow/world": major
+"@workflow/world-local": major
+"@workflow/world-vercel": major
+"@workflow/world-postgres": major
+"@workflow/core": major
+"@workflow/cli": major
+"@workflow/web": major
+---
+
+**BREAKING CHANGE**: Restructure stream methods on World interface to use `world.streams.*` namespace with `runId` as the first parameter. `writeToStream(name, runId, chunk)` → `streams.write(runId, name, chunk)`, `writeToStreamMulti` → `streams.writeMulti`, `closeStream` → `streams.close`, `readFromStream` → `streams.get(runId, name, startIndex?)`, `listStreamsByRunId` → `streams.list(runId)`.

.changeset/builders-discovery-fixes.md

@@ -0,0 +1,9 @@
+---
+"@workflow/builders": patch
+---
+
+Fix step bundle discovery and externalization for SDK serde classes
+
+- Broaden `importParents` tracking to all imports (not just file extensions) so `parentHasChild()` works through bare specifier imports
+- Include `workflow/runtime` in discovery inputs so SDK serde classes like `Run` are always discovered
+- Bundle node_modules deps instead of externalizing with broken relative paths

.changeset/cool-cups-greet.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/esm-builders.md

@@ -0,0 +1,6 @@
+---
+"@workflow/builders": patch
+"@workflow/cli": patch
+---
+
+Switch Vercel Build Output API and standalone builder output from CJS to ESM. Step bundles, workflow bundles, and webhook bundles now emit ESM format by default, preserving native `import.meta.url` support and eliminating the need for CJS polyfills. Fully-bundled ESM output includes a `createRequire` banner to support CJS dependencies that use `require()` for Node.js builtins. The intermediate workflow bundle (which runs inside `vm.runInContext`) remains CJS as required by the VM execution model.

.changeset/features-encryption-metadata.md

@@ -0,0 +1,5 @@
+---
+"@workflow/core": minor
+---
+
+Add `features.encryption` to `WorkflowMetadata` returned by `getWorkflowMetadata()`

.changeset/fix-community-world-specversion.md

@@ -0,0 +1,9 @@
+---
+'@workflow/core': patch
+'@workflow/world': patch
+'@workflow/world-vercel': patch
+'@workflow/world-local': patch
+'@workflow/world-postgres': patch
+---
+
+Fix community world E2E tests by adding `specVersion` to the World interface so `start()` uses the safe baseline (v2) for worlds that don't declare their supported version

.changeset/fix-health-check-correlation-id.md

@@ -0,0 +1,5 @@
+---
+'@workflow/core': patch
+---
+
+Remove redundant `hc_` prefix from health check correlationId that caused doubled `hc_hc_` in the derived runId and stream name.

.changeset/fix-next-esm-compat.md

@@ -0,0 +1,5 @@
+---
+"workflow": patch
+---
+
+Fix `workflow/next` ESM compatibility for `next.config.mjs` files

.changeset/fix-provider-tool-identity.md

@@ -0,0 +1,7 @@
+---
+'@workflow/ai': patch
+---
+
+fix(ai): preserve provider tool identity across step boundaries
+
+Provider tools (e.g. `anthropic.tools.webSearch`) were being converted to plain function tools in `toolsToModelTools`, stripping `type: 'provider'`, `id`, and `args`. This caused providers like Anthropic Gateway to not recognize them as provider-executed tools.