✨ Run a workflow on a runner and its owner somewhere else (#698)

.github/workflows/ci.yml

@@ -640,6 +640,34 @@ jobs:
   # on a `ci-main-red-fix` pull request, and may be skipped on an ordinary one.
   # Every other job must succeed outright — an unexpected skip is an unproven
   # job, which is exactly what this check exists to catch.
+  # The workerd suite. It runs where the runtime is real: acquisition lifetime,
+  # owner eviction and transaction atomicity are properties of a Durable Object
+  # rather than of any model of one, so none of them is provable in the Deno,
+  # Node or Bun corpora — which is also why these files carry a `.vitest.ts`
+  # suffix those corpora never discover.
+  #
+  # `pnpm install` comes last on purpose: `deno install` prunes the links pnpm
+  # placed (scripts/deps.ts says so in its own header), and the plugin only
+  # takes over the pool when it and the CLI hold the same vitest.
+  test-cloudflare:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: "22"
+
+      - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
+
+      - run: pnpm install
+
+      - name: Typecheck the Cloudflare owner
+        run: pnpm check:cloudflare
+
+      - name: Cloudflare Workers suite
+        run: pnpm test:cloudflare
+
   green:
     needs:
       [
@@ -653,6 +681,7 @@ jobs:
         site,
         test-node,
         test-bun,
+        test-cloudflare,
       ]
     if: always()
     runs-on: ubuntu-latest

deno.json

@@ -1,13 +1,21 @@
 {
-  "workspace": ["packages/*", "site"],
+  "workspace": [
+    "packages/*",
+    "site"
+  ],
   "exclude": [
     "scripts/tests/fixtures",
     ".xmd-eval",
     "**/npm",
     "packages/workflow/vendor/cloudflare-computer-dofs/upstream",
     "packages/workflow/vendor/cloudflare-computer-dofs/generated/**/*.d.ts",
     "packages/acp/vendor/acpx/upstream",
-    "packages/acp/vendor/acpx/generated/**/*.d.ts"
+    "packages/acp/vendor/acpx/generated/**/*.d.ts",
+    "packages/workflow/src/cloudflare",
+    "packages/workflow/tests/cloudflare",
+    "vitest.config.ts",
+    "packages/workflow/tsconfig.cloudflare.json",
+    "packages/workflow/cloudflare.ts"
   ],
   "nodeModulesDir": "auto",
   "lock": {
@@ -71,6 +79,8 @@
     "review:local": "deno run --allow-all packages/cli/src/deno.ts run .reviews/ReviewPR.local.md --component-dir .reviews/components --component-dir .reviews/policies --component-dir packages/core/components -j .reviews/journal.local.jsonl",
     "analyze": "deno run --allow-all packages/cli/src/deno.ts run .reviews/AnalyzeRepo.md --component-dir .reviews/components --component-dir .reviews/policies --component-dir packages/core/components -j .reviews/journal.analyze.jsonl",
     "analyze:ci": "deno run --allow-all packages/cli/src/deno.ts run .reviews/AnalyzeRepoCI.md --component-dir .reviews/components --component-dir .reviews/policies --component-dir packages/core/components -j .reviews/journal.analyze.ci.jsonl",
-    "analyze:dispatch": "deno run --allow-all packages/cli/src/deno.ts run .reviews/DispatchRepoAnalysis.md --component-dir .reviews/components --component-dir .reviews/policies --component-dir packages/core/components -j .reviews/journal.dispatch.jsonl"
+    "analyze:dispatch": "deno run --allow-all packages/cli/src/deno.ts run .reviews/DispatchRepoAnalysis.md --component-dir .reviews/components --component-dir .reviews/policies --component-dir packages/core/components -j .reviews/journal.dispatch.jsonl",
+    "test:cloudflare": "pnpm test:cloudflare",
+    "check:cloudflare": "pnpm check:cloudflare"
   }
 }