Class DurableObjectRunner<TEnv>Abstract

Protected Readonlyenv

Protected Optional Readonlystate

ProtectedtenantId

• get tenantId(): string

  The tenant this instance serves, recovered from the DO's OWN identity. The name was set by the trusted Worker via idFromName(${workflowId}:${runId}) and is unforgeable at this boundary (id.name is populated only for idFromName-created ids). Safe to parse: PATH_SAFE_ID_PATTERN excludes ':' from workflowId, so the first ':' is the join; the tenant-ID pattern excludes '' from tenantId, so the first '' in the runId is the tenant boundary.

  THROWS rather than defaulting — an unscoped grant store is a cross-tenant capability mint. Node tests that exercise tenant-bound wiring pass a stub state { id: { name: 'wf:tenant_uuid' } }; never soften this to a default for the workerd path.

  Returns string

Protected Abstractbuild

• build(env: TEnv): RunnerRuntime

  Define workflows via init() and return its runtime. Called once, lazily.

  Parameters

  • env: TEnv

  Returns RunnerRuntime