The Next proxy (middleware) 307-redirected every non-/auth path without an
'auth' cookie to /auth, intercepting the (social) group's `/` and all /hz/*
routes so the dashboard never rendered and /hz/auth/* + /hz/bff/* were guarded.
Bypass '/' and '/hz/*' early (Postiz behavior for its own paths untouched).
frontend 1.0.1 -> 1.0.2.
The cloud embedded engine links luxfi/zap v1.2.0 (MVS) which emits ZAP wire
version 2; @hanzoai/tasks 1.49.0 only accepted version 1 -> 'unsupported version 2'
against cloud.hanzo.svc:9999. 1.49.1 accepts both wire versions (generic object
encoding is identical) and exports TokenProvider + loosens proxyActivities.
Verified live against cloud v1.786.102's gated engine: signals, continueAsNew,
startChild, search attrs all run to COMPLETED with an IAM bearer.
Replace @temporalio/* + nestjs-temporal-core with @hanzoai/tasks. Durable
workflow execution now runs on the ONE Hanzo Tasks engine embedded in cloud,
reached over its identity-gated ZAP listener (cloud.hanzo.svc:9999) and
authenticated with a Hanzo IAM client_credentials bearer (owner-scoped). No
upstream Temporal anywhere.
- libraries/.../temporal/tasks.ts: @hanzoai/tasks-backed NestJS integration —
@Activity/@ActivityMethod decorators, TemporalService facade
(client.getRawClient()/getWorkflowHandle(), terminateWorkflow()), IAM
client_credentials token source, getTemporalModule(). Connects a Client +
one Worker per task queue (main + per social integration), RegisterNamespace
on init.
- temporal.module.ts re-exports getTemporalModule; temporal.register.ts is a
no-op (search attrs need no pre-registration on Hanzo Tasks);
infinite.workflow.register.ts + health.controller.ts use @hanzoai/tasks;
backend main.ts drops the Temporal worker Runtime.install.
- temporal/workflow.ts: workflow-side barrel re-exporting @hanzoai/tasks with a
drop-in proxyActivities (unconstrained generic + cancellationType superset)
so proxyActivities<ActivityClass>() type-checks as it did under @temporalio.
- All 11 workflows + 4 activity classes + 2 signals ported; uses proxyActivities,
sleep, condition, defineSignal/setHandler (signal-to-running-wf), continueAsNew
(digest/sendEmail), startChild (post repeat), typed search attributes,
workflowIdConflictPolicy.
- @hanzoai/tasks vendored as a tarball (file: dep); TEMPORAL_ADDRESS scrubbed,
new TASKS_ADDRESS default cloud.hanzo.svc:9999 / TASKS_NAMESPACE default.
Orchestrator + backend build green (nest build, full typecheck).