X402 Git

local-durable-workflow-engine

Zero-cloud durable state machine, persistent action queue, and tamper-evident audit ledger for local AI agents.

Top level of the repository
SizeFolderInside
5.7 kBsrc/5 source files
1.2 kBexamples/1 example
3.2 kBtests/1 test file
7 kB(root)7 docs · 3 config files
19 files · 17.2 kB · computed 2026-09-16
SizePath
30 B.gitignore
384 BAGENT_EVAL.md
278 BARCHITECTURE.md
985 BLICENSE.md
243 BLIMITATIONS.md
519 BPREVIEW.md
131 BQUICKSTART.md
1 kBREADME.md
556 BTEST_REPORT.md
652 Bcommercial-manifest.json
1.2 kBexamples/workflow_demo.mjs
427 Bpackage.json
1.8 kBrelease-manifest.json
1.4 kBsrc/audit.mjs
214 Bsrc/index.mjs
1.7 kBsrc/queue.mjs
871 Bsrc/state_machine.mjs
1.6 kBsrc/workflow.mjs
3.2 kBtests/workflow_engine.test.mjs
computed 2026-09-16 21:27 UTC · analyzer 0.1.0

Already bought this?

View your purchases

README

Local Durable Workflow Engine

A zero-cloud, resilient state machine, persistent action queue, and tamper-evident audit ledger built with pure Node.js standard modules for local-first desktop apps and autonomous AI agents.

Why Local Durable Workflows?

Autonomous coding agents and desktop developer tools cannot rely on AWS Step Functions or heavy Temporal clusters. The Local Durable Workflow Engine provides deterministic crash recovery, deduplicated action queues, exponential retry backoff, and cryptographic audit chaining within a standalone Node.js process.

Core Capabilities

  • Guarded State Machines: Enforces strict transitions, preventing invalid task progression.
  • Durable Action Queue: In-memory and persistent action queue with SHA-256 fingerprint deduplication and dead-letter queue (DLQ) support.
  • Cryptographic Audit Ledger: Sequentially hashed audit trail ensuring no workflow action can be altered retroactively.
  • Zero Runtime Dependencies: Uses Node.js native node:crypto standard library.

Security scan report

Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from X402 Git and Socket are listed below.

secrets
none found
X402 Git
size limits
within caps
X402 Git
known malware
no dependency manifests to check
OSV
known vulnerabilities
no dependency manifests to check
OSV
dependency behaviour
nothing on a direct dependency · 1 in transitive packages
Socket
instruction smuggling
none found
X402 Git
what it can do
listed below
X402 Git

What this can do

Tools
none
Runs
examples/workflow_demo.mjs
Talks to
nothing
Reads
no environment variables
At install
nothing runs
Findings (2)
  • LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
  • LOWexamples/workflow_demo.mjs — Ships the script examples/workflow_demo.mjs

Releases 1

  1. v1.0.02026-09-16

    feat: initial commercial release v1.0.0

$119updates $29

Buy — go to the order block