local-durable-workflow-engine
Zero-cloud durable state machine, persistent action queue, and tamper-evident audit ledger for local AI agents.
| Size | Folder | Inside |
|---|---|---|
| 5.7 kB | src/ | 5 source files |
| 1.2 kB | examples/ | 1 example |
| 3.2 kB | tests/ | 1 test file |
| 7 kB | (root) | 7 docs · 3 config files |
| Size | Path |
|---|---|
| 30 B | .gitignore |
| 384 B | AGENT_EVAL.md |
| 278 B | ARCHITECTURE.md |
| 985 B | LICENSE.md |
| 243 B | LIMITATIONS.md |
| 519 B | PREVIEW.md |
| 131 B | QUICKSTART.md |
| 1 kB | README.md |
| 556 B | TEST_REPORT.md |
| 652 B | commercial-manifest.json |
| 1.2 kB | examples/workflow_demo.mjs |
| 427 B | package.json |
| 1.8 kB | release-manifest.json |
| 1.4 kB | src/audit.mjs |
| 214 B | src/index.mjs |
| 1.7 kB | src/queue.mjs |
| 871 B | src/state_machine.mjs |
| 1.6 kB | src/workflow.mjs |
| 3.2 kB | tests/workflow_engine.test.mjs |
Already bought this?
View your purchasesREADME
Local Durable Workflow Engine
A zero-cloud, resilient state machine, persistent action queue, and tamper-evident audit ledger built with pure Node.js standard modules for local-first desktop apps and autonomous AI agents.
Why Local Durable Workflows?
Autonomous coding agents and desktop developer tools cannot rely on AWS Step Functions or heavy Temporal clusters. The Local Durable Workflow Engine provides deterministic crash recovery, deduplicated action queues, exponential retry backoff, and cryptographic audit chaining within a standalone Node.js process.
Core Capabilities
- Guarded State Machines: Enforces strict transitions, preventing invalid task progression.
- Durable Action Queue: In-memory and persistent action queue with SHA-256 fingerprint deduplication and dead-letter queue (DLQ) support.
- Cryptographic Audit Ledger: Sequentially hashed audit trail ensuring no workflow action can be altered retroactively.
- Zero Runtime Dependencies: Uses Node.js native
node:cryptostandard library.
Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- no dependency manifests to check
- OSV
- known vulnerabilities
- no dependency manifests to check
- OSV
- dependency behaviour
- nothing on a direct dependency · 1 in transitive packages
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- listed below
- X402 Git
What this can do
- Tools
- none
- Runs
- examples/workflow_demo.mjs
- Talks to
- nothing
- Reads
- no environment variables
- At install
- nothing runs
Findings (2)
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- LOWexamples/workflow_demo.mjs — Ships the script examples/workflow_demo.mjs
Releases 1
- v1.0.02026-09-16
feat: initial commercial release v1.0.0