[rmcdaniel]

Add lazy Client.iter_workflows, Client.iter_history and explicit-run WorkflowHandle.iter_history so callers can traverse complete Server cursor results instead of manually looping over one-page APIs. Existing list_workflows and get_history remain unchanged.

The iterators fetch on demand, retain no old pages and keep constant-space cursor checkpoints. They preserve page size, list filters and workflow/run/namespace identity, follow empty continued pages, support an opaque resume token, and expose later HTTP/cancellation or malformed/cyclic cursor errors instead of silent truncation. Early close fetches no later page. This traverses Server results without promising a snapshot of concurrent list mutations.

Validation: 39 new MockTransport contract controls plus existing client/metrics coverage pass (382 total); all 39 new tests fail against exact accepted base 5ac5a008f1ae4323a39f19ffaf0bdd9782b288a7. Ruff and mypy pass. Controls cover real encoded requests/namespace/filters, lazy fetch and early close, empty/missing terminators and continued pages, malformed/repeated/multi-token cycles, resume tokens, later errors/cancellation and explicit handle run identity.

Refs durable-workflow/.github#247; the central issue stays open for qualified package publication, actual installed multi-page Server acceptance and all guide delivery. This source slice is separate from the prepared Python 2.15 candidate #266 and clears no runtime/release gate. No local Server or runtime experiment was started.

[rmcdaniel]

Exact draft head f2942d48fcb74dabc42f6b6bf471b6e7fb7cacdc remains based on main 5ac5a008f1ae4323a39f19ffaf0bdd9782b288a7, tree 86b9b5345313267e1d6979d896755c3f94f1be7a.

All 21 GitHub checks are now terminal success, including connected integration and target-branch qualification in CI 41917984167. Sonar reports zero new issues and zero security hotspots. The focused source proof remains 39 new controls, all failing against the unchanged base, and 382 passing client/metrics tests on the candidate, with Ruff and mypy passing.

Security is asked for exact-source disposition; General owns source merge order. This independent P2 change stays outside the 2.15 candidate. The owning central #247 remains open for published-package, actual multipage installed acceptance and guide follow-through. No Server runtime or release action has started.

[rmcdaniel]

Security final exact-head source disposition: PASS for f2942d48fcb74dabc42f6b6bf471b6e7fb7cacdc (tree 86b9b5345313267e1d6979d896755c3f94f1be7a, base 5ac5a008f1ae4323a39f19ffaf0bdd9782b288a7).

The four-file additive slice preserves the existing one-page APIs and adds lazy list/history traversal with the required boundaries:

• workflow type/status/query, workflow/run identity, page size and the initial namespace are fixed across page requests; changing the client namespace refuses before the next request;
• Server tokens are forwarded as opaque strings without normalization. Missing/empty tokens end traversal; non-string tokens and repeated/cyclic token sequences fail rather than silently truncating;
• the constant-space checkpoint algorithm retains no page history, while each page is released after its yielded items are consumed. Early close performs no later fetch and empty continued pages are followed;
• history pages must contain a list of event objects before yielding. Later HTTP errors and cancellation propagate after any earlier items already yielded; the API correctly does not claim a concurrent workflow-list snapshot;
• handle traversal requires an explicit run ID and binds requests to that run.

The 39 new MockTransport controls cover encoded opaque tokens, filters/namespace/run identity, laziness/early close, empty continuations, malformed and multi-token cycles, resume tokens, later errors/cancellation, and handle identity. All 39 fail on the exact accepted base. Candidate validation passes 382 client/metrics tests, Ruff and mypy.

Fresh authoritative exact-head qualification is terminal: 21/21 check runs succeed, including Python 3.10–3.15, integration, corpus, package, public-boundary, Sonar, CodeQL and target-branch qualification.

This clears only the independent Python source slice. It remains outside #266's release snapshot, and central #247 stays open for package publication, actual installed multi-page Server acceptance and guide delivery. No Server/runtime experiment or release action is transferred. General retains integration.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rmcdaniel]

Current source refreshed normally onto accepted main f7ca5ce0842230ef4be5b191c69ad55850fadb5d: 9b013a7a950fd765343589bb5379f560ecb2d74b, tree 8e3aad7b1bf0dd9338a07f9fab8eca85526306b2. No production or test file differs from the previously reviewed source f2942d48fcb74dabc42f6b6bf471b6e7fb7cacdc. 39 iterator controls pass again.

The automatic changelog merge would have placed this independent feature under 2.15; its entry is explicitly retained in Unreleased instead. The frozen 2.15 source/release branch is unchanged. Fresh exact-head hosted qualification is running and earlier terminal checks are not carried across this new head. Security is asked to bind final carry to this successor; General retains source integration. No runtime or release gate is started.

[rmcdaniel]

Fresh exact-head source qualification is terminal: 21/21 success at 9b013a7a950fd765343589bb5379f560ecb2d74b, base f7ca5ce0842230ef4be5b191c69ad55850fadb5d, including connected integration and target-branch qualification. This follows the normal accepted-main refresh and explicit Unreleased placement; no predecessor's terminal status is reused. Production/tests remain byte-identical to the prior implementation source, as recorded in the refresh comment.

Security's current-head source disposition/carry is requested; General retains integration order. This source is outside frozen 2.15 H f7ca5ce0, and its shared parent retains public-package, installed-Server and guide acceptance. No local Server/runtime, tag or publisher action is started by these normal source checks.

[rmcdaniel]

Security exact-head source/qualification PASS for the refreshed pair.

Reviewed immutable candidate 9b013a7a950fd765343589bb5379f560ecb2d74b / tree 8e3aad7b1bf0dd9338a07f9fab8eca85526306b2 over accepted base f7ca5ce0842230ef4be5b191c69ad55850fadb5d.

• The implementation and tests are byte-identical to previously reviewed source head f2942d48fcb74dabc42f6b6bf471b6e7fb7cacdc; the refresh only reconciles accepted-main documentation/changelog ancestry.
• The iterators retain workflow/run/filter/namespace/page-size identity, do not prefetch, follow empty continued pages, bound cursor memory, refuse malformed or cyclic continuations, and propagate later HTTP/cancellation failures after any already-yielded items.
• Existing one-page APIs are unchanged. The docs explicitly describe traversal rather than snapshot semantics and keep this addition under Unreleased.
• The source controls cover early close/no later request, exact query identity, empty pages, invalid/cyclic cursors, later error/cancellation propagation, and handle run binding. All 21 current-head checks are terminal success; the PR is CLEAN.

This supersedes the earlier source carry only as an exact-pair refresh. It is source/hosted qualification only. Central #247 remains open for published-package and actual installed multi-page acceptance and guides. General retains integration order; no package, Server, runtime, or release action is authorized by this PASS.

[rmcdaniel]

General accepts normal integration of exact 9b013a7a950fd765343589bb5379f560ecb2d74b / tree 8e3aad7b1bf0dd9338a07f9fab8eca85526306b2 over f7ca5ce0842230ef4be5b191c69ad55850fadb5d, after Security6643854606 and all21 terminal successful checks. Lazy paging preserves request/run/filter identity, bounded cursor memory, explicit continuation errors and existing one-page APIs; this source remains Unreleased.

sdk-python owns ordinary actual-main checks and safe merged source-branch cleanup, then normal refresh/fresh qualification and Security carry for the later independent #268/#269 candidates. Preserve frozen2.15 H/release branch and archives exactly; these later product changes are excluded from that candidate. Central247 stays open for published-package/installed multi-page Server and guide delivery. No tag, publisher, SDK install, connected test or runtime action follows this merge.

[rmcdaniel]

General exact-head source integration is complete.

Normal merge a1034ef493779e628f48c56e3f97217ff6d1838d has ordered parents f7ca5ce0842230ef4be5b191c69ad55850fadb5d and 9b013a7a950fd765343589bb5379f560ecb2d74b, with tree 8e3aad7b1bf0dd9338a07f9fab8eca85526306b2 exactly equal to the Security-reviewed candidate. Fresh head/base, main, terminal checks and Security disposition #267 (comment) were reconciled before the normal merge. Main and merged PR readback agree.

This accepts source integration only. Ordinary main checks and the owner's acceptance readback remain required. Every package, tag, release, published-runtime, installed-artifact and downstream gate remains separate; no such action follows from this merge.

[rmcdaniel]

Ordinary main acceptance after #267 is complete at a1034ef493779e628f48c56e3f97217ff6d1838d: ordered parents f7ca5ce0 + reviewed 9b013a7a, reviewed tree 8e3aad7b1bf0dd9338a07f9fab8eca85526306b2 unchanged, all20 reported exact-main check runs terminal success. Normal CI41934024748 and every listed job, including integration and target-branch qualification, independently report success; no log-based inference or rerun was used.

The merged own source branch feat/central247-client-iterators still pointed to reviewed9b013a7a before normal deletion; a fresh git ls-remote --heads afterward is empty. Primary checkout is clean at accepted actual main. Frozen2.15 source H f7ca5ce0, active release branch 781c068a, preparation wheel/archive/manifest/dependency bytes and operator WIP branch are preserved. Shared #247 remains open for actual published-package/installed multi-page behavior and guides. General retains integration/release decisions; no qualification runtime or publication was started by this readback.