@adonis-agora/durable 0.49.0 → 0.50.0

package/dist/src/run-gateway/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,GAAG,YAAY,GAAG,QAAQ,CAAC;IAChD,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACzB,6FAA6F;IAC7F,QAAQ,IAAI,eAAe,CAAC;IAE5B,gEAAgE;IAChE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnD;uEACmE;IACnE,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAElD,mGAAmG;IACnG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAEzD;qGACiG;IACjG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjD;;;;;OAKG;IACH,YAAY,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEpF;gCAC4B;IAC5B,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE3F,sGAAsG;IACtG,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE1E;4EACwE;IACxE,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEvC;;;;OAIG;IACH,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzF;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEpF;sCACkC;IAClC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAElF;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,SAAS,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzF,kGAAkG;IAClG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7E"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,WAAW,EACX,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,GAAG,YAAY,GAAG,QAAQ,CAAC;IAChD,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACzB,6FAA6F;IAC7F,QAAQ,IAAI,eAAe,CAAC;IAE5B,gEAAgE;IAChE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnD;uEACmE;IACnE,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAElD,mGAAmG;IACnG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAEzD;qGACiG;IACjG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjD;;;;;OAKG;IACH,YAAY,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEpF;gCAC4B;IAC5B,aAAa,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE3F,sGAAsG;IACtG,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE1E;4EACwE;IACxE,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEvC;;;;OAIG;IACH,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzF;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEpF;sCACkC;IAClC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAElF;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,SAAS,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzF;;;;;;;OAOG;IACH,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEjD,oFAAoF;IACpF,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEpD;oDACgD;IAChD,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAElF;;8CAE0C;IAC1C,SAAS,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEzD;gFAC4E;IAC5E,cAAc,CAAC,CACb,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,aAAa,EACpB,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE/B;wGACoG;IACpG,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEnE,kGAAkG;IAClG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7E"}

package/dist/src/run-gateway/proxy-run-gateway.d.ts

@@ -1,5 +1,5 @@
-import type { EngineEvent, GroupHealth, RunQuery, RunReply, RunRequest, RunResult, SearchAttributes, StartRunMessage, StepCheckpoint, TenantEvent, WorkflowRun } from '../interfaces.js';
-import type { FanPage, FanPageQuery, RunDetail, RunDetailOptions } from '../run-detail-summary.js';
+import type { EngineEvent, GroupHealth, RunFacetQuery, RunFacetRow, RunQuery, RunReply, RunRequest, RunResult, RunValueAxis, RunValueFacetOptions, RunValueFacetRow, RunWaiting, SearchAttributes, StartRunMessage, StepCheckpoint, TenantEvent, WorkflowRun } from '../interfaces.js';
+import { type FanPage, type FanPageQuery, type RunDetail, type RunDetailOptions } from '../run-detail-summary.js';
 import type { WorkflowRef } from '../workflow-ref.js';
 import type { DurableTopology, RunGateway, StartRunOptions } from './interface.js';
 /**
@@ -34,14 +34,20 @@ export interface ProxyRunGatewayOptions {
     /** Round-trip timeout (ms) for a proxied read/control/start. Default 10_000. Spec §8: on timeout the
      *  proxy fails fast with a clear error rather than hanging a request forever. */
     requestTimeoutMs?: number | undefined;
+    /**
+     * How long (ms) the proxy remembers that the control plane does not know a verb (an older release,
+     * mid rolling upgrade) and serves it from older verbs instead of asking again. Default 60_000.
+     */
+    capabilityTtlMs?: number | undefined;
 }
 /**
  * Tenant-side {@link RunGateway} — a store-less pod's read/control/start surface, implemented ENTIRELY
  * over the wire. It owns NO store (structural isolation, spec §5): every verb round-trips to the
  * control plane's `RunRequestResponder` and back.
  *
- * - read/control (`getRun`/`listRuns`/`getCheckpoints`/`getSearchAttributes`/`workerHealth`/`signal`/
- *   `cancel`/`redispatchPending`) → publish a {@link RunRequest} correlated by a minted `requestId`,
+ * - read/control (`getRun`/`listRuns`/`getCheckpoints`/`getRunChildren`/`getRunDetail`/
+ *   `getFanMembers`/`getSearchAttributes`/`runFacets`/`runValueFacets`/`waitingFor`/`workerHealth`/
+ *   `signal`/`cancel`/`retry`/`continue`/`retryWithInput`/`redispatchPending`) → publish a {@link RunRequest} correlated by a minted `requestId`,
  *   await the {@link RunReply} within `requestTimeoutMs`;
  * - `start` → publish a {@link StartRunMessage} (its own channel, byte-compatible with aviary), then
  *   await the reply the responder correlates by the minted `runId`;
@@ -62,7 +68,13 @@ export declare class ProxyRunGateway implements RunGateway {
     listRuns(query: RunQuery): Promise<WorkflowRun[]>;
     getCheckpoints(runId: string): Promise<StepCheckpoint[]>;
     getRunChildren(runId: string): Promise<string[]>;
+    /**
+     * The detail in one round-trip. A control plane older than the verb (before 0.49) rejects it as
+     * unknown; the proxy then builds the same detail here from `getRun` + `getCheckpoints` (+
+     * `getRunChildren`), each still ownership-checked by the responder, and summarizes it locally.
+     */
     getRunDetail(runId: string, options?: RunDetailOptions): Promise<RunDetail | null>;
+    /** One page of a fan, paged here from the full timeline when the control plane predates the verb. */
     getFanMembers(runId: string, group: string, query: FanPageQuery): Promise<FanPage | null>;
     getSearchAttributes(runId: string): Promise<SearchAttributes | undefined>;
     /** Round-trips to the operator, which scopes the result to this tenant's own `@<partition>` groups. */
@@ -81,6 +93,22 @@ export declare class ProxyRunGateway implements RunGateway {
     redispatchPending(runId: string): Promise<(RunResult & {
         redispatched: number;
     }) | null>;
+    retry(runId: string): Promise<RunResult | null>;
+    continue(runId: string): Promise<RunResult | null>;
+    retryWithInput(runId: string, input: unknown): Promise<{
+        runId: string;
+    } | null>;
+    /**
+     * Scoped by the control plane to this tenant's own runs (the query's namespace is replaced). A
+     * control plane older than the verb rejects it as unknown; the proxy then counts the same cells
+     * from `runValueFacets` (the status axis per origin), or — on one older still — from a `listRuns`
+     * of the tenant's matching runs. Each answer is scoped by the control plane like the verb itself.
+     */
+    runFacets(query: RunFacetQuery): Promise<RunFacetRow[]>;
+    /** Scoped by the control plane to this tenant's own runs (the query's namespace is replaced). */
+    runValueFacets(axis: RunValueAxis, query: RunFacetQuery, opts?: RunValueFacetOptions): Promise<RunValueFacetRow[]>;
+    /** Only this tenant's own runs come back; another tenant's ids are silently absent. */
+    waitingFor(runIds: string[]): Promise<Record<string, RunWaiting>>;
     /** Live-tail ONE run by bridging onto this tenant's event channel and filtering by `runId`. */
     subscribe(runId: string, onEvent: (event: EngineEvent) => void): () => void;
 }

package/dist/src/run-gateway/proxy-run-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-run-gateway.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/proxy-run-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,UAAU,EAEV,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,WAAW,EACX,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,IAAI,CAAC;IACrD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAChF;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;qFACiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,eAAgB,YAAW,UAAU;;IAOhD,YAAY,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EASrE;IAiDD,QAAQ,IAAI,eAAe,CAE1B;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAEjD;IAED,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAEhD;IAED,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAEvD;IAED,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE/C;IAED,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAMjF;IAED,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAExF;IAED,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAExE;IAED,uGAAuG;IACvG,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAErC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAavF;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAMlF;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAIhF;IAED,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,SAAS,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC,CAKvF;IAED,+FAA+F;IAC/F,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAI1E;CACF"}
+{"version":3,"file":"proxy-run-gateway.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/proxy-run-gateway.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,UAAU,EAEV,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,WAAW,EACX,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,YAAY,EAGjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAWnF;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,IAAI,CAAC;IACrD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAChF;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;qFACiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAeD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,eAAgB,YAAW,UAAU;;IAchD,YAAY,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAUrE;IAuDD,QAAQ,IAAI,eAAe,CAE1B;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAEjD;IAED,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAEhD;IAED,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAEvD;IAED,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE/C;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAWjF;IAED,qGAAqG;IACrG,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAMxF;IA8CD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAExE;IAED,uGAAuG;IACvG,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAErC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAavF;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAMlF;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAIhF;IAED,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,SAAS,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC,CAKvF;IAED,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAE9C;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAEjD;IAED,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAE/E;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAetD;IAED,iGAAiG;IACjG,cAAc,CACZ,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,aAAa,EACpB,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAM7B;IAED,uFAAuF;IACvF,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAGhE;IAED,+FAA+F;IAC/F,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAI1E;CACF"}

package/dist/src/run-gateway/proxy-run-gateway.js

@@ -1,10 +1,21 @@
+import { childIdsOf } from '../fan-join.js';
+import { loadFanMembers, loadRunDetail, } from '../run-detail-summary.js';
+import { runFacetsOf } from '../run-facets.js';
+import { UNSUPPORTED_RUN_REQUEST } from './run-request-responder.js';
+/** The control plane answered a verb it does not know: it runs an older release than this tenant. */
+class UnsupportedRunRequestError extends Error {
+    code = UNSUPPORTED_RUN_REQUEST;
+}
+/** The message a responder before 0.50 rejected an unknown verb with (it sent no `code`). */
+const LEGACY_UNKNOWN_VERB = /^unknown run-request verb: /;
 /**
  * Tenant-side {@link RunGateway} — a store-less pod's read/control/start surface, implemented ENTIRELY
  * over the wire. It owns NO store (structural isolation, spec §5): every verb round-trips to the
  * control plane's `RunRequestResponder` and back.
  *
- * - read/control (`getRun`/`listRuns`/`getCheckpoints`/`getSearchAttributes`/`workerHealth`/`signal`/
- *   `cancel`/`redispatchPending`) → publish a {@link RunRequest} correlated by a minted `requestId`,
+ * - read/control (`getRun`/`listRuns`/`getCheckpoints`/`getRunChildren`/`getRunDetail`/
+ *   `getFanMembers`/`getSearchAttributes`/`runFacets`/`runValueFacets`/`waitingFor`/`workerHealth`/
+ *   `signal`/`cancel`/`retry`/`continue`/`retryWithInput`/`redispatchPending`) → publish a {@link RunRequest} correlated by a minted `requestId`,
  *   await the {@link RunReply} within `requestTimeoutMs`;
  * - `start` → publish a {@link StartRunMessage} (its own channel, byte-compatible with aviary), then
  *   await the reply the responder correlates by the minted `runId`;
@@ -23,6 +34,13 @@ export class ProxyRunGateway {
     #wireTenant;
     #timeoutMs;
     #pending = new Map();
+    #capabilityTtlMs;
+    /**
+     * Verb → when to ask the control plane for it again, after it answered that it does not know it.
+     * During a rolling upgrade the control plane is several pods of mixed versions behind one queue and
+     * a reply does not say which pod sent it, so the whole control plane counts as old until then.
+     */
+    #unsupportedUntil = new Map();
     constructor(transport, options) {
         this.#transport = transport;
         this.#partition = options.partition;
@@ -30,6 +48,7 @@ export class ProxyRunGateway {
         // no token, the raw partition does (prefix-isolation-only, aviary-compatible).
         this.#wireTenant = options.token ?? options.partition;
         this.#timeoutMs = options.requestTimeoutMs ?? 10_000;
+        this.#capabilityTtlMs = options.capabilityTtlMs ?? 60_000;
         // One reply subscription for the whole gateway; every RunReply is matched to its pending call by id.
         this.#transport.onRunReply((reply) => this.#handleReply(reply));
     }
@@ -42,6 +61,11 @@ export class ProxyRunGateway {
         if (reply.result.ok) {
             pending.resolve(reply.result.data);
         }
+        else if (reply.result.error.code === UNSUPPORTED_RUN_REQUEST ||
+            (reply.result.error.code === undefined &&
+                LEGACY_UNKNOWN_VERB.test(reply.result.error.message))) {
+            pending.reject(new UnsupportedRunRequestError(reply.result.error.message));
+        }
         else {
             const err = new Error(reply.result.error.message);
             if (reply.result.error.code !== undefined)
@@ -90,13 +114,55 @@ export class ProxyRunGateway {
     getRunChildren(runId) {
         return this.#request({ kind: 'getRunChildren', runId });
     }
+    /**
+     * The detail in one round-trip. A control plane older than the verb (before 0.49) rejects it as
+     * unknown; the proxy then builds the same detail here from `getRun` + `getCheckpoints` (+
+     * `getRunChildren`), each still ownership-checked by the responder, and summarizes it locally.
+     */
     getRunDetail(runId, options) {
-        return this.#request(options === undefined
+        return this.#withFallback('getRunDetail', () => this.#request(options === undefined
             ? { kind: 'getRunDetail', runId }
-            : { kind: 'getRunDetail', runId, options });
+            : { kind: 'getRunDetail', runId, options }), () => loadRunDetail(this.#legacyDetailSource(), runId, options));
     }
+    /** One page of a fan, paged here from the full timeline when the control plane predates the verb. */
     getFanMembers(runId, group, query) {
-        return this.#request({ kind: 'getFanMembers', runId, group, query });
+        return this.#withFallback('getFanMembers', () => this.#request({ kind: 'getFanMembers', runId, group, query }), () => loadFanMembers(this.#legacyDetailSource(), runId, group, query));
+    }
+    /**
+     * Ask the control plane for `kind`, or serve `fallback` when it answers that it does not know the
+     * verb (remembered for `capabilityTtlMs`, so a fleet mid-upgrade costs one extra round-trip a
+     * minute rather than one per call). Any other failure propagates.
+     */
+    async #withFallback(kind, ask, fallback) {
+        if (!this.#knownUnsupported(kind)) {
+            try {
+                return await ask();
+            }
+            catch (err) {
+                if (!(err instanceof UnsupportedRunRequestError))
+                    throw err;
+                this.#unsupportedUntil.set(kind, Date.now() + this.#capabilityTtlMs);
+            }
+        }
+        return fallback();
+    }
+    #knownUnsupported(kind) {
+        const until = this.#unsupportedUntil.get(kind);
+        if (until === undefined)
+            return false;
+        if (Date.now() < until)
+            return true;
+        this.#unsupportedUntil.delete(kind);
+        return false;
+    }
+    /** The verbs every control plane answers, as a {@link RunDetailSource}. Children fall back to the
+     *  timeline's child edges if even `getRunChildren` is unknown. */
+    #legacyDetailSource() {
+        return {
+            getRun: (runId) => this.getRun(runId),
+            listCheckpoints: (runId) => this.getCheckpoints(runId),
+            getRunChildren: (runId) => this.#withFallback('getRunChildren', () => this.getRunChildren(runId), async () => [...new Set(childIdsOf(await this.getCheckpoints(runId)))]),
+        };
     }
     getSearchAttributes(runId) {
         return this.#request({ kind: 'getSearchAttributes', runId });
@@ -139,6 +205,36 @@ export class ProxyRunGateway {
             runId,
         });
     }
+    retry(runId) {
+        return this.#request({ kind: 'retry', runId });
+    }
+    continue(runId) {
+        return this.#request({ kind: 'continue', runId });
+    }
+    retryWithInput(runId, input) {
+        return this.#request({ kind: 'retryWithInput', runId, input });
+    }
+    /**
+     * Scoped by the control plane to this tenant's own runs (the query's namespace is replaced). A
+     * control plane older than the verb rejects it as unknown; the proxy then counts the same cells
+     * from `runValueFacets` (the status axis per origin), or — on one older still — from a `listRuns`
+     * of the tenant's matching runs. Each answer is scoped by the control plane like the verb itself.
+     */
+    runFacets(query) {
+        return this.#withFallback('runFacets', () => this.#request({ kind: 'runFacets', query }), () => this.#withFallback('runValueFacets', () => runFacetsOf({ runValueFacets: (axis, q, opts) => this.runValueFacets(axis, q, opts) }, query), () => runFacetsOf({ listRuns: (q) => this.listRuns(q) }, query)));
+    }
+    /** Scoped by the control plane to this tenant's own runs (the query's namespace is replaced). */
+    runValueFacets(axis, query, opts) {
+        return this.#request(opts === undefined
+            ? { kind: 'runValueFacets', axis, query }
+            : { kind: 'runValueFacets', axis, query, opts });
+    }
+    /** Only this tenant's own runs come back; another tenant's ids are silently absent. */
+    waitingFor(runIds) {
+        if (runIds.length === 0)
+            return Promise.resolve({});
+        return this.#request({ kind: 'waitingFor', runIds });
+    }
     /** Live-tail ONE run by bridging onto this tenant's event channel and filtering by `runId`. */
     subscribe(runId, onEvent) {
         return this.#transport.onTenantEvent(this.#partition, (evt) => {

package/dist/src/run-gateway/proxy-run-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-run-gateway.js","sourceRoot":"","sources":["../../../src/run-gateway/proxy-run-gateway.ts"],"names":[],"mappings":"AAkEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,eAAe;IACjB,UAAU,CAAiB;IAC3B,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEpD,YAAY,SAAyB,EAAE,OAA+B;QACpE,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,oGAAoG;QACpG,+EAA+E;QAC/E,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACrD,qGAAqG;QACrG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,YAAY,CAAC,KAAe;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,gFAAgF;QACtG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAA8B,CAAC;YAC/E,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;+GAC2G;IAC3G,WAAW,CAAI,aAAqB,EAAE,SAAiB,EAAE,IAAyB;QAChF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpC,MAAM,CACJ,IAAI,KAAK,CACP,wCAAwC,SAAS,WAAW,IAAI,CAAC,UAAU,IAAI,CAChF,CACF,CAAC;YACJ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACpB,2DAA2D;YAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,OAA+B,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtD,IAAI,CAAC,YAAY;oBAAE,OAAO,CAAC,8DAA8D;gBACzF,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpC,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uGAAuG;IACvG,QAAQ,CAAI,IAAoB;QAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,WAAW,CAAI,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CACpD,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAClF,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,QAAQ,CAAC,KAAe;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,OAA0B;QACpD,OAAO,IAAI,CAAC,QAAQ,CAClB,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,KAAmB;QAC7D,OAAO,IAAI,CAAC,QAAQ,CAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAA+B,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,uGAAuG;IACvG,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAqB,EAAE,KAAc,EAAE,IAAsB;QACjE,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAoB;YAC3B,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,6FAA6F;YAC7F,sFAAsF;YACtF,QAAQ,EAAE,QAAkB;YAC5B,KAAK;YACL,KAAK;YACL,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAY,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,OAAiB;QACrD,OAAO,IAAI,CAAC,QAAQ,CAClB,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,IAA+B;QACnD,OAAO,IAAI,CAAC,QAAQ,CAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAgD;YAClE,IAAI,EAAE,YAAY;YAClB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IAC/F,SAAS,CAAC,KAAa,EAAE,OAAqC;QAC5D,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5D,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"proxy-run-gateway.js","sourceRoot":"","sources":["../../../src/run-gateway/proxy-run-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAqB5C,OAAO,EAGL,cAAc,EACd,aAAa,GAId,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,qGAAqG;AACrG,MAAM,0BAA2B,SAAQ,KAAK;IACnC,IAAI,GAAG,uBAAuB,CAAC;CACzC;AAED,6FAA6F;AAC7F,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAuD1D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,eAAe;IACjB,UAAU,CAAiB;IAC3B,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,gBAAgB,CAAS;IAClC;;;;OAIG;IACM,iBAAiB,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEvE,YAAY,SAAyB,EAAE,OAA+B;QACpE,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,oGAAoG;QACpG,+EAA+E;QAC/E,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC;QAC1D,qGAAqG;QACrG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,YAAY,CAAC,KAAe;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,gFAAgF;QACtG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,IACL,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,uBAAuB;YACnD,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACpC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAA8B,CAAC;YAC/E,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;+GAC2G;IAC3G,WAAW,CAAI,aAAqB,EAAE,SAAiB,EAAE,IAAyB;QAChF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpC,MAAM,CACJ,IAAI,KAAK,CACP,wCAAwC,SAAS,WAAW,IAAI,CAAC,UAAU,IAAI,CAChF,CACF,CAAC;YACJ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACpB,2DAA2D;YAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,OAA+B,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtD,IAAI,CAAC,YAAY;oBAAE,OAAO,CAAC,8DAA8D;gBACzF,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpC,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uGAAuG;IACvG,QAAQ,CAAI,IAAoB;QAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,WAAW,CAAI,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CACpD,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAClF,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,QAAQ,CAAC,KAAe;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAa,EAAE,OAA0B;QACpD,OAAO,IAAI,CAAC,aAAa,CACvB,cAAc,EACd,GAAG,EAAE,CACH,IAAI,CAAC,QAAQ,CACX,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,CAC7C,EACH,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,qGAAqG;IACrG,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,KAAmB;QAC7D,OAAO,IAAI,CAAC,aAAa,CACvB,eAAe,EACf,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EACnF,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CACtE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,IAA4B,EAC5B,GAAqB,EACrB,QAA0B;QAE1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,EAAE,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC5D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,iBAAiB,CAAC,IAA4B;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;sEACkE;IAClE,mBAAmB;QACjB,OAAO;YACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACrC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YACtD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACxB,IAAI,CAAC,aAAa,CAChB,gBAAgB,EAChB,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAChC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACvE;SACJ,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAA+B,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,uGAAuG;IACvG,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAqB,EAAE,KAAc,EAAE,IAAsB;QACjE,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAoB;YAC3B,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,6FAA6F;YAC7F,sFAAsF;YACtF,QAAQ,EAAE,QAAkB;YAC5B,KAAK;YACL,KAAK;YACL,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAY,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,OAAiB;QACrD,OAAO,IAAI,CAAC,QAAQ,CAClB,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,IAA+B;QACnD,OAAO,IAAI,CAAC,QAAQ,CAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAgD;YAClE,IAAI,EAAE,YAAY;YAClB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,cAAc,CAAC,KAAa,EAAE,KAAc;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAoB;QAC5B,OAAO,IAAI,CAAC,aAAa,CACvB,WAAW,EACX,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAChE,GAAG,EAAE,CACH,IAAI,CAAC,aAAa,CAChB,gBAAgB,EAChB,GAAG,EAAE,CACH,WAAW,CACT,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EACzE,KAAK,CACN,EACH,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAChE,CACJ,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,cAAc,CACZ,IAAkB,EAClB,KAAoB,EACpB,IAA2B;QAE3B,OAAO,IAAI,CAAC,QAAQ,CAClB,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE;YACzC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,UAAU,CAAC,MAAgB;QACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,QAAQ,CAA6B,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,+FAA+F;IAC/F,SAAS,CAAC,KAAa,EAAE,OAAqC;QAC5D,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5D,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/run-gateway/run-request-responder.d.ts

@@ -13,6 +13,13 @@ export interface ResponderTransport {
     publishRunReply(reply: RunReply): Promise<void>;
     publishTenantEvent(evt: TenantEvent): Promise<void>;
 }
+/**
+ * The error `code` a responder answers a verb it does not know with, so a newer tenant can tell
+ * "this control plane is older than me" from a real failure and fall back at once instead of
+ * waiting out its timeout. Responders before 0.50 answered with an error message
+ * (`unknown run-request verb: <kind>`) and no code; `ProxyRunGateway` recognizes both.
+ */
+export declare const UNSUPPORTED_RUN_REQUEST = "unsupported-request";
 /** Options for {@link RunRequestResponder}. */
 export interface RunRequestResponderOptions {
     /**
@@ -40,16 +47,22 @@ export interface RunRequestResponderOptions {
  * 1. **Authenticate + derive tenant.** With a {@link RunRequestResponderOptions.verifyTenant}, the
  *    signed token (carried in the wire `tenant` field) is verified and the real tenant is DERIVED from
  *    it; the body's claim is ignored. An invalid token short-circuits to an `unauthorized` reply.
- * 2. **`listRuns` is namespace-forced** to the derived tenant — the client's `namespace` is discarded,
- *    never merely validated, so a tenant cannot enumerate another's runs.
+ * 2. **`listRuns`, `runFacets` and `runValueFacets` are namespace-forced** to the derived tenant —
+ *    the client's `namespace` is discarded, never merely validated, so a tenant cannot enumerate (or
+ *    count, or read the tag vocabulary of) another's runs. **`waitingFor`** answers only the ids the
+ *    tenant owns.
  * 3. **`workerHealth` is group-scoped** to the tenant's own `@<tenant>` queues.
  * 4. **Every runId-bearing verb** (`getRun`/`getCheckpoints`/`getRunDetail`/`getFanMembers`/
- *    `getSearchAttributes`/`signal`/`cancel`/`redispatch`) loads the run alone FIRST — never its
- *    timeline — and rejects with `cross-tenant` when `run.namespace` isn't the derived tenant —
+ *    `getSearchAttributes`/`signal`/`cancel`/`redispatch`/`retry`/`continue`/`retryWithInput`)
+ *    loads the run alone FIRST — never its timeline — and rejects with `cross-tenant` when `run.namespace` isn't the derived tenant —
  *    anti-IDOR, so a tenant can never read OR act on another tenant's run.
  * 5. **`start` forces the run's namespace** to the derived tenant, so a started run is owned by, and
  *    later only reachable by, that tenant.
- * 6. **Unknown verbs are rejected** rather than silently ignored.
+ * 6. **Unknown verbs are rejected** rather than silently ignored, with the
+ *    {@link UNSUPPORTED_RUN_REQUEST} code and before the gateway is touched.
+ *
+ * Every request gets a reply: a gateway (or verifier) that throws becomes an error reply, because a
+ * request left unanswered makes the tenant wait out its whole timeout.
  *
  * Do not weaken any of these — they are the isolation guarantee of the store-less cluster.
  */

package/dist/src/run-gateway/run-request-responder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-request-responder.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/run-request-responder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EAER,UAAU,EAEV,eAAe,EACf,WAAW,EAEZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChE,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CAC9F;AASD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,mBAAmB;;IAc9B,YACE,SAAS,EAAE,kBAAkB,EAC7B,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,0BAA+B,EAkBzC;IAED;;;;OAIG;IACH,KAAK,IAAI,IAAI,CAcZ;IAED,mGAAmG;IACnG,IAAI,IAAI,IAAI,CAIX;CA0LF"}
+{"version":3,"file":"run-request-responder.d.ts","sourceRoot":"","sources":["../../../src/run-gateway/run-request-responder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EAER,UAAU,EAGV,eAAe,EACf,WAAW,EAEZ,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChE,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AA6B7D,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CAC9F;AASD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,mBAAmB;;IAc9B,YACE,SAAS,EAAE,kBAAkB,EAC7B,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,0BAA+B,EAkBzC;IAED;;;;OAIG;IACH,KAAK,IAAI,IAAI,CA8BZ;IAED,mGAAmG;IACnG,IAAI,IAAI,IAAI,CAIX;CAyPF"}

package/dist/src/run-gateway/run-request-responder.js

@@ -1,4 +1,32 @@
 import { loadFanMembers, loadRunDetail } from '../run-detail-summary.js';
+import { runFacetsOf } from '../run-facets.js';
+/**
+ * The error `code` a responder answers a verb it does not know with, so a newer tenant can tell
+ * "this control plane is older than me" from a real failure and fall back at once instead of
+ * waiting out its timeout. Responders before 0.50 answered with an error message
+ * (`unknown run-request verb: <kind>`) and no code; `ProxyRunGateway` recognizes both.
+ */
+export const UNSUPPORTED_RUN_REQUEST = 'unsupported-request';
+/** Every verb this responder answers. Checked before the gateway is touched. */
+const KNOWN_KINDS = new Set([
+    'getRun',
+    'listRuns',
+    'getCheckpoints',
+    'getSearchAttributes',
+    'getRunChildren',
+    'getRunDetail',
+    'getFanMembers',
+    'workerHealth',
+    'signal',
+    'cancel',
+    'redispatch',
+    'runFacets',
+    'runValueFacets',
+    'retry',
+    'continue',
+    'retryWithInput',
+    'waitingFor',
+]);
 /** `EngineEvent` types that END a run's lifecycle — no further event for that `runId` follows, so it is
  *  the safe point to drop the run from the namespace cache. Cancellation + dead-lettering are both
  *  emitted as `run.failed`; `run.suspended` is NOT terminal (a suspended run resumes). */
@@ -15,16 +43,22 @@ function isTerminalRunEvent(event) {
  * 1. **Authenticate + derive tenant.** With a {@link RunRequestResponderOptions.verifyTenant}, the
  *    signed token (carried in the wire `tenant` field) is verified and the real tenant is DERIVED from
  *    it; the body's claim is ignored. An invalid token short-circuits to an `unauthorized` reply.
- * 2. **`listRuns` is namespace-forced** to the derived tenant — the client's `namespace` is discarded,
- *    never merely validated, so a tenant cannot enumerate another's runs.
+ * 2. **`listRuns`, `runFacets` and `runValueFacets` are namespace-forced** to the derived tenant —
+ *    the client's `namespace` is discarded, never merely validated, so a tenant cannot enumerate (or
+ *    count, or read the tag vocabulary of) another's runs. **`waitingFor`** answers only the ids the
+ *    tenant owns.
  * 3. **`workerHealth` is group-scoped** to the tenant's own `@<tenant>` queues.
  * 4. **Every runId-bearing verb** (`getRun`/`getCheckpoints`/`getRunDetail`/`getFanMembers`/
- *    `getSearchAttributes`/`signal`/`cancel`/`redispatch`) loads the run alone FIRST — never its
- *    timeline — and rejects with `cross-tenant` when `run.namespace` isn't the derived tenant —
+ *    `getSearchAttributes`/`signal`/`cancel`/`redispatch`/`retry`/`continue`/`retryWithInput`)
+ *    loads the run alone FIRST — never its timeline — and rejects with `cross-tenant` when `run.namespace` isn't the derived tenant —
  *    anti-IDOR, so a tenant can never read OR act on another tenant's run.
  * 5. **`start` forces the run's namespace** to the derived tenant, so a started run is owned by, and
  *    later only reachable by, that tenant.
- * 6. **Unknown verbs are rejected** rather than silently ignored.
+ * 6. **Unknown verbs are rejected** rather than silently ignored, with the
+ *    {@link UNSUPPORTED_RUN_REQUEST} code and before the gateway is touched.
+ *
+ * Every request gets a reply: a gateway (or verifier) that throws becomes an error reply, because a
+ * request left unanswered makes the tenant wait out its whole timeout.
  *
  * Do not weaken any of these — they are the isolation guarantee of the store-less cluster.
  */
@@ -61,17 +95,35 @@ export class RunRequestResponder {
      */
     start() {
         this.#transport.onRunRequest(async (msg) => {
-            const reply = await this.#handleRequest(msg);
-            await this.#transport.publishRunReply(reply);
+            let answer;
+            try {
+                answer = await this.#handleRequest(msg);
+            }
+            catch (err) {
+                // Without a reply the tenant waits out its whole timeout for an answer that never comes.
+                answer = reply(msg.requestId, { ok: false, error: { message: errorMessage(err) } });
+            }
+            await this.#transport.publishRunReply(answer);
         });
         this.#transport.onStartRun(async (msg) => {
-            const reply = await this.#handleStart(msg);
-            if (reply)
-                await this.#transport.publishRunReply(reply);
+            let answer;
+            try {
+                answer = await this.#handleStart(msg);
+            }
+            catch (err) {
+                answer =
+                    msg.runId === undefined
+                        ? undefined
+                        : reply(msg.runId, { ok: false, error: { message: errorMessage(err) } });
+            }
+            if (answer)
+                await this.#transport.publishRunReply(answer);
         });
         if (this.#subscribeEngineEvents) {
             this.#unsubscribeEvents = this.#subscribeEngineEvents((event) => {
-                void this.#republish(event);
+                // Best-effort, like the publish itself: a failing run lookup (the store briefly down) must
+                // not surface as an unhandled rejection from an event listener.
+                void this.#republish(event).catch(() => undefined);
             });
         }
     }
@@ -93,45 +145,104 @@ export class RunRequestResponder {
             });
         }
         const { body } = msg;
+        if (!KNOWN_KINDS.has(body.kind)) {
+            return reply(msg.requestId, {
+                ok: false,
+                error: {
+                    message: `the control plane does not support the ${String(body.kind)} run request`,
+                    code: UNSUPPORTED_RUN_REQUEST,
+                },
+            });
+        }
+        try {
+            return reply(msg.requestId, { ok: true, data: await this.#answer(body, tenant) });
+        }
+        catch (err) {
+            if (err instanceof CrossTenantError) {
+                return reply(msg.requestId, {
+                    ok: false,
+                    error: { message: 'run belongs to another tenant', code: 'cross-tenant' },
+                });
+            }
+            if (err instanceof GatewayLacksVerbError) {
+                return reply(msg.requestId, {
+                    ok: false,
+                    error: { message: err.message, code: UNSUPPORTED_RUN_REQUEST },
+                });
+            }
+            return reply(msg.requestId, { ok: false, error: { message: errorMessage(err) } });
+        }
+    }
+    /** Answer a known verb for the verified `tenant`. A run of another tenant throws
+     *  {@link CrossTenantError} before the verb runs. */
+    async #answer(body, tenant) {
         if (body.kind === 'listRuns') {
             // Force the namespace to the verified tenant — the client value is DISCARDED, never validated, so
             // a tenant can't widen its own query into another's namespace.
-            const data = await this.#gateway.listRuns({ ...body.query, namespace: tenant });
-            return reply(msg.requestId, { ok: true, data });
+            return this.#gateway.listRuns({ ...body.query, namespace: tenant });
         }
         if (body.kind === 'workerHealth') {
             // Not runId-bearing. Scope by the group-name convention instead: a tenant's queues are suffixed
             // `<name>@<tenant>`, so keep only groups ending in `@<tenant>` — the operator's own bare groups
             // and every other tenant's are dropped.
             const all = await this.#gateway.workerHealth();
-            const data = all.filter((h) => h.group.endsWith(`@${tenant}`));
-            return reply(msg.requestId, { ok: true, data });
+            return all.filter((h) => h.group.endsWith(`@${tenant}`));
         }
-        // Every remaining verb is runId-bearing. Load the run FIRST — before calling the verb — so a
-        // cross-tenant request never reaches the gateway's mutating methods (signal/cancel/redispatch) or
-        // leaks another tenant's run via a read (getRun/getCheckpoints/getSearchAttributes).
-        const run = await this.#gateway.getRun(body.runId);
-        if (run && run.namespace !== tenant) {
-            return reply(msg.requestId, {
-                ok: false,
-                error: { message: 'run belongs to another tenant', code: 'cross-tenant' },
-            });
+        if (body.kind === 'runFacets') {
+            // Forced to the tenant exactly like `listRuns`: the counts label the tenant's own list.
+            const scoped = { ...body.query, namespace: tenant };
+            if (this.#gateway.runFacets)
+                return this.#gateway.runFacets(scoped);
+            const facets = this.#gateway.runValueFacets;
+            if (!facets)
+                throw new GatewayLacksVerbError(body.kind);
+            return runFacetsOf({ runValueFacets: (axis, q, opts) => facets.call(this.#gateway, axis, q, opts) }, scoped);
         }
-        try {
-            const data = await this.#callVerb(body, run);
-            return reply(msg.requestId, { ok: true, data });
+        if (body.kind === 'runValueFacets') {
+            // Forced too: enumerating values over other tenants' runs would leak their tag and attribute
+            // vocabulary, and offer picks this tenant's list can never match.
+            if (!this.#gateway.runValueFacets)
+                throw new GatewayLacksVerbError(body.kind);
+            return this.#gateway.runValueFacets(body.axis, { ...body.query, namespace: tenant }, body.opts);
         }
-        catch (err) {
-            return reply(msg.requestId, {
-                ok: false,
-                error: { message: err instanceof Error ? err.message : String(err) },
-            });
+        if (body.kind === 'waitingFor') {
+            // Bulk and caller-chosen ids, which could probe another tenant's runs: keep only the matches
+            // the tenant owns, checked per MATCHED entry (bounded by how many ids are actually waiting).
+            if (!this.#gateway.waitingFor)
+                throw new GatewayLacksVerbError(body.kind);
+            const all = await this.#gateway.waitingFor(body.runIds);
+            const owned = {};
+            await Promise.all(Object.entries(all).map(async ([runId, waiting]) => {
+                const owner = await this.#gateway.getRun(runId);
+                if (owner && owner.namespace === tenant)
+                    owned[runId] = waiting;
+            }));
+            return owned;
         }
+        // Every remaining verb is runId-bearing. Load the run FIRST — before calling the verb — so a
+        // cross-tenant request never reaches the gateway's mutating methods (signal/cancel/redispatch/
+        // retry/continue/retryWithInput) or leaks another tenant's run via a read (getRun/getCheckpoints/getSearchAttributes).
+        const run = await this.#gateway.getRun(body.runId);
+        if (run && run.namespace !== tenant)
+            throw new CrossTenantError();
+        return this.#callVerb(body, run);
     }
     /** Dispatch a runId-bearing verb. `run` is the already-loaded run (ownership-checked by the caller) —
      *  reused for `getRun` so it isn't fetched twice. An unknown verb is rejected, never silently dropped. */
     #callVerb(body, run) {
         switch (body.kind) {
+            case 'retry':
+                if (!this.#gateway.retry)
+                    throw new GatewayLacksVerbError(body.kind);
+                return this.#gateway.retry(body.runId);
+            case 'continue':
+                if (!this.#gateway.continue)
+                    throw new GatewayLacksVerbError(body.kind);
+                return this.#gateway.continue(body.runId);
+            case 'retryWithInput':
+                if (!this.#gateway.retryWithInput)
+                    throw new GatewayLacksVerbError(body.kind);
+                return this.#gateway.retryWithInput(body.runId, body.input);
             case 'getRun':
                 return Promise.resolve(run);
             case 'getCheckpoints':
@@ -251,6 +362,18 @@ export class RunRequestResponder {
         return verified ? verified.tenant : null;
     }
 }
+/** A runId-bearing request addressed a run of another tenant. */
+class CrossTenantError extends Error {
+}
+/** The control plane's gateway does not implement an optional verb (a hand-written gateway). */
+class GatewayLacksVerbError extends Error {
+    constructor(kind) {
+        super(`the control plane does not support the ${kind} run request`);
+    }
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
 /** Build a correlated {@link RunReply}. */
 function reply(requestId, result) {
     return { requestId, result };