@adonis-agora/durable 0.59.0 → 1.0.0-rc.0

package/dist/src/engine.js

@@ -35,6 +35,7 @@ import { ScheduleClient } from './schedules.js';
 import { SINGLETON_RESERVED_TAGS, withoutAdmission, withSingletonTracked, } from './singleton-admission.js';
 import { SingletonGate } from './singleton-gate.js';
 import { validateStandard, validateStandardSync, } from './standard-schema.js';
+import { StickyCache, StickyContinuation } from './sticky-continuation.js';
 import { sanitizeQueueToken, tenantGroup } from './tenant-group.js';
 import { TransportPool } from './transport-pool.js';
 import { workflowAls } from './workflow-als.js';
@@ -49,6 +50,10 @@ function mergeTags(staticTags, runTags) {
 /** A breakpoint checkpoint's `name` is `breakpoint` (or `breakpoint:<label>`). This name — not the
  *  reused `signal` kind — is the explicit marker the dashboard and `continue()` detect it by. */
 const BREAKPOINT = 'breakpoint';
+/** Default size of the sticky continuation cache (see {@link WorkflowEngineDeps.stickyRuns}). */
+const DEFAULT_STICKY_RUNS = 2000;
+/** Default idle limit of a parked body in the sticky cache. */
+const DEFAULT_STICKY_IDLE_MS = 300_000;
 const isBreakpoint = (cp) => cp.status === 'pending' && cp.name.startsWith(BREAKPOINT);
 /**
  * Every `RunStatus` from which a turn's outcome (`completed` / `failed` / `suspended` / `blocked`) is a
@@ -107,6 +112,11 @@ function wakeReasonSeen(payload, settledFans) {
         typeof pair[1] === 'number' &&
         (settledFans.get(pair[0]) ?? -1) >= pair[1]);
 }
+/**
+ * The control-plane target of a message about a run in `namespace`: the run's namespace, so the
+ * instances serving it hear it wherever the publisher is. Unknown → the publisher's own channel.
+ */
+const runTarget = (namespace) => namespace === undefined ? undefined : { namespace };
 /** Whether `status` is one a run never leaves on its own. */
 const isTerminalRun = (status) => TERMINAL_RUN_STATUSES.includes(status);
 /**
@@ -162,6 +172,8 @@ const leaseRefused = new WeakMap();
  * parent's next turn.
  */
 const LOCAL_RUN_CONCURRENCY = 256;
+/** Pending runs one {@link WorkflowEngine.runPending} poll takes at most. */
+const PENDING_POLL_BATCH = 100;
 /** How many dispatched runs this instance takes from the transport's run queue at once. */
 const RUN_CONSUMER_CONCURRENCY = 64;
 /** The most runs handed to {@link Transport.dispatchRuns} in one call. */
@@ -285,6 +297,16 @@ export class WorkflowEngine {
     maxRecoveryAttempts;
     unregisteredWorkflowGraceMs;
     reconcileMs;
+    /** Parked workflow bodies kept between turns (see {@link WorkflowEngineDeps.stickyRuns}). */
+    sticky;
+    /** Pending runs claimed by {@link runPending} for the turn about to run them, as read by the claim. */
+    claimedRuns = new Map();
+    /** The continuation each turn executing here runs in, by run id, while the turn runs. */
+    turnContinuations = new Map();
+    /** Whether a transport routes this instance's step results back to it (see `routeReplies`). */
+    repliesRouted = false;
+    /** The run row stamp (`updatedAt`, epoch ms) a turn here wrote when it settled `suspended`. */
+    suspendStamps = new Map();
     heartbeatPersistThrottleMs;
     timerBatchSize;
     eventBufferTtlMs;
@@ -530,6 +552,8 @@ export class WorkflowEngine {
         // which is what it must stay on to reach every tenant's queues.
         if (this.namespace !== undefined)
             this.pool.useNamespace(this.namespace);
+        if (this.namespace !== undefined)
+            this.controlPlane?.useNamespace?.(this.namespace);
         this.leaseMs = deps.leaseMs ?? 30_000;
         this.bootedAt = this.clock();
         this.maxRecoveryAttempts = deps.maxRecoveryAttempts;
@@ -544,6 +568,9 @@ export class WorkflowEngine {
             reconcile === undefined || !Number.isFinite(reconcile) || reconcile < 0
                 ? 300_000
                 : reconcile || undefined;
+        const stickyRuns = deps.stickyRuns ?? DEFAULT_STICKY_RUNS;
+        const stickyIdle = deps.stickyIdleMs ?? DEFAULT_STICKY_IDLE_MS;
+        this.sticky = new StickyCache(Number.isFinite(stickyRuns) ? Math.max(0, Math.floor(stickyRuns)) : DEFAULT_STICKY_RUNS, Number.isFinite(stickyIdle) && stickyIdle >= 0 ? stickyIdle : DEFAULT_STICKY_IDLE_MS);
         // Validated like `timerBatchSize`: a NaN/negative throttle would silently disable the
         // cross-instance liveness salvage (`timeoutMs + NaN` never compares true). `0` stays valid.
         const throttle = deps.heartbeatPersistThrottleMs;
@@ -673,6 +700,11 @@ export class WorkflowEngine {
         async (event) => {
             await this.persistStepEvent(event);
         });
+        // Step results come back to the instance holding the body parked on the step, where a transport
+        // can route them (see WorkflowEngineDeps.routeReplies).
+        if ((deps.routeReplies ?? true) && this.sticky.enabled) {
+            this.repliesRouted = this.pool.routeReplies(this.instanceId);
+        }
         // Control plane: re-broadcast lifecycle events from OTHER instances to this instance's
         // subscribers (cross-pod live-tail), and act on cancellations issued elsewhere. A broker may
         // echo our own publish back — ignore those (we already handled them locally) to avoid duplicates.
@@ -1353,6 +1385,14 @@ export class WorkflowEngine {
      * worker bridge can use this for cooperative cancellation: abort the in-flight work for `runId`
      * instead of finishing it just to have the result discarded. Returns an unsubscribe function.
      */
+    /**
+     * Observe the control-plane traffic of every namespace, not only this engine's own: the process
+     * mounts a console (the durable dashboard) whose live tail follows runs of every namespace. The
+     * dashboard provider calls it; a control plane without namespaced channels ignores it.
+     */
+    observeAllNamespaces() {
+        this.controlPlane?.observeAll?.();
+    }
     onCancel(listener) {
         this.cancelListeners.add(listener);
         return () => this.cancelListeners.delete(listener);
@@ -2660,7 +2700,9 @@ export class WorkflowEngine {
                     this.eventsToBroadcast.shift();
                     msg = { kind: 'event', event: first, from: this.instanceId };
                 }
-                await this.controlPlane.publishControl(msg).catch(() => {
+                // A run's own event goes to its namespace's channel; step events carry none and stay here.
+                const target = msg.kind === 'event' ? runTarget(msg.event.namespace) : undefined;
+                await this.controlPlane.publishControl(msg, target).catch(() => {
                     // control-plane delivery is best-effort observability; never break execution
                 });
             }
@@ -2817,7 +2859,7 @@ export class WorkflowEngine {
             // queue already delivers it to a consuming instance.
             if (this.controlPlane && !this.runQueue) {
                 void this.controlPlane
-                    .publishControl({ kind: 'enqueued', runId, from: this.instanceId })
+                    .publishControl({ kind: 'enqueued', runId, from: this.instanceId }, runTarget(run.namespace))
                     .catch(() => undefined);
             }
         }
@@ -3609,7 +3651,38 @@ export class WorkflowEngine {
         });
     }
     async resumeRunNow(runId, allowFailed) {
-        const run = await this.store.getRun(runId);
+        // A run just claimed for this turn (runPending) is held, and was read by the claim.
+        const claimed = this.claimedRuns.get(runId);
+        if (claimed) {
+            this.claimedRuns.delete(runId);
+            return this.resumeLoadedRun(claimed, runId, allowFailed);
+        }
+        // Take the lease and read the run in one round trip when the store can: `execute` then finds
+        // the lease held for this turn. Not when a caller already holds it for this turn (a leased
+        // sweep) or a turn of the run is in flight here; a failed take reads the run as before.
+        const lockAndGet = this.lockedForTurn.has(runId) || this.executionLeases.has(runId)
+            ? undefined
+            : this.store.tryLockRunAndGet;
+        let run = null;
+        if (lockAndGet) {
+            const nowMs = this.clock();
+            run = await lockAndGet.call(this.store, runId, this.instanceId, nowMs + this.leaseMs, nowMs);
+        }
+        if (!run)
+            return this.resumeLoadedRun(await this.store.getRun(runId), runId, allowFailed);
+        this.lockedForTurn.add(runId);
+        try {
+            return await this.resumeLoadedRun(run, runId, allowFailed);
+        }
+        finally {
+            // Still marked: the turn never started (a finished run, another namespace, a registration
+            // that failed), so the lease taken above goes back.
+            if (this.lockedForTurn.delete(runId)) {
+                await this.store.releaseRunLock(runId, this.instanceId).catch(() => undefined);
+            }
+        }
+    }
+    async resumeLoadedRun(run, runId, allowFailed) {
         if (!run)
             throw new Error(`run ${runId} not found`);
         // A definitively-finished run must not be re-executed (e.g. a worker result landing after the
@@ -3750,6 +3823,8 @@ export class WorkflowEngine {
      */
     beginDrain(spentMs = 0) {
         this.draining = true;
+        // Parked bodies are only an optimization: the runs replay wherever they resume next.
+        this.sticky.clear();
         // Tell the local steps still running: a long one can stop between units of work instead of
         // being cut off when the drain budget runs out.
         if (!this.drainAbort.signal.aborted)
@@ -3923,7 +3998,7 @@ export class WorkflowEngine {
                 this.notifyCancelled(run.id);
                 if (this.controlPlane) {
                     void this.controlPlane
-                        .publishControl({ kind: 'cancel', runId: run.id, from: this.instanceId })
+                        .publishControl({ kind: 'cancel', runId: run.id, from: this.instanceId }, runTarget(run.namespace))
                         .catch(() => undefined);
                 }
                 this.notifyParent(run.id, { ok: false, error: error.message });
@@ -4661,9 +4736,58 @@ export class WorkflowEngine {
     async runPending(nowMs = this.clock()) {
         // Oldest-first (FIFO), capped per call so a backlog drains over several polls without one sweep
         // fetching unboundedly. A run not picked up this tick is picked up the next.
-        const pending = await asHeartbeat(() => this.store.listPendingRuns(100, this.namespace));
+        // A store that can claims a batch in one statement (rows another instance is claiming are
+        // skipped, not raced for), and the batch runs concurrently, within this engine's run budget.
+        const claim = this.store.claimPendingRuns;
+        if (claim) {
+            if (this.draining)
+                return [];
+            const room = Math.min(PENDING_POLL_BATCH, LOCAL_RUN_CONCURRENCY - this.inflight.size);
+            if (room <= 0)
+                return [];
+            const claimed = await asHeartbeat(() => claim.call(this.store, room, this.instanceId, nowMs + this.leaseMs, nowMs, this.namespace));
+            return this.runClaimed(claimed, nowMs);
+        }
+        const pending = await asHeartbeat(() => this.store.listPendingRuns(PENDING_POLL_BATCH, this.namespace));
         return this.resumeLeased(pending, nowMs);
     }
+    /**
+     * Run `claimed` (pending runs this instance just leased, read as locked): every turn starts at
+     * once, and each re-enters the lease taken for it without reading the run again. A run this
+     * instance cannot resume is skipped and logged, as {@link resumeLeased} does; its lease lapses.
+     */
+    async runClaimed(claimed, nowMs) {
+        const turns = claimed.map(async (run) => {
+            if (this.draining) {
+                // Drain began after the claim: give the lease back; the run stays for another instance.
+                await this.store.releaseRunLock(run.id, this.instanceId).catch(() => undefined);
+                return undefined;
+            }
+            this.lockedForTurn.add(run.id);
+            this.claimedRuns.set(run.id, run);
+            try {
+                return await this.resumeImplicit(run.id);
+            }
+            catch (error) {
+                if (error instanceof NamespaceMismatch)
+                    return undefined;
+                if (error instanceof WorkflowNotRegistered) {
+                    const settled = await this.settleUnregistered(run, nowMs).catch(() => undefined);
+                    if (settled)
+                        return settled;
+                    if (settled !== undefined)
+                        return undefined;
+                }
+                console.error(`[adonis-durable] could not resume run ${run.id} (${run.workflow}@${run.workflowVersion}); leaving it for another instance or a later tick:`, error);
+                return undefined;
+            }
+            finally {
+                this.lockedForTurn.delete(run.id);
+                this.claimedRuns.delete(run.id);
+            }
+        });
+        return (await Promise.all(turns)).filter((r) => r !== undefined);
+    }
     /**
      * Resolve once `runId` reaches a settled state — terminal (completed/failed/cancelled/dead) or
      * suspended (handed off to a timer/signal/event). The async counterpart to dispatch: pair it with
@@ -5172,7 +5296,7 @@ export class WorkflowEngine {
             await this.store.bufferSignal(`cancel:${runId}`, true).catch(() => undefined);
             if (this.controlPlane) {
                 void this.controlPlane
-                    .publishControl({ kind: 'cancel', runId, from: this.instanceId })
+                    .publishControl({ kind: 'cancel', runId, from: this.instanceId }, runTarget(run.namespace))
                     .catch(() => undefined);
             }
             // Tracked (see {@link trackEffect}): the background resume replays the run and drives its saga
@@ -5213,7 +5337,7 @@ export class WorkflowEngine {
         this.notifyCancelled(runId);
         if (this.controlPlane) {
             void this.controlPlane
-                .publishControl({ kind: 'cancel', runId, from: this.instanceId })
+                .publishControl({ kind: 'cancel', runId, from: this.instanceId }, runTarget(run.namespace))
                 .catch(() => undefined);
         }
         // A cancelled singleton run frees its slot — wake the next gated waiter now (notify-on-release).
@@ -6033,13 +6157,20 @@ export class WorkflowEngine {
         // conditional write IS the guard — it subsumes the read-then-write this branch used to do (that
         // was itself a narrower, TOCTOU-prone version of the same check, and only looked for `cancelled`;
         // this now also catches `completed`/`dead` reached via any other path mid-turn).
+        // Strictly later than the row this turn read: a parked body is recognized by the exact stamp its
+        // suspend wrote (see takeContinuation), so no later settle, by any instance with any clock, may
+        // write that same stamp again, even within the same millisecond.
+        const stamp = new Date(Math.max(updatedAt.getTime(), run.updatedAt.getTime() + 1));
         const applied = await this.store.updateRunIf(run.id, SETTLE_ELIGIBLE_STATUSES, await this.withRunTrace(run, {
             status: 'suspended',
             wakeAt: this.reconcileWakeAt(outcome.wakeAt),
-            updatedAt,
+            updatedAt: stamp,
         }));
         if (!applied)
             return this.echoCurrentStatus(run.id);
+        run.updatedAt = stamp;
+        if (this.turnContinuations.has(run.id))
+            this.suspendStamps.set(run.id, stamp.getTime());
         this.emit({
             type: 'run.suspended',
             runId: run.id,
@@ -6084,7 +6215,8 @@ export class WorkflowEngine {
      * settled it), so report what is persisted rather than writing over it.
      */
     /**
-     * A run's first execution: `pending` -> `running`. A singleton run not yet admitted is stamped
+     * A run's first execution: `pending` -> `running`, resolving whether it moved it (a run cancelled
+     * or deleted since it was read did not move). A singleton run not yet admitted is stamped
      * {@link SINGLETON_TRACKED_TAG} in the same write, BEFORE it competes for a slot, so a run this
      * replica is about to admit or deny is never mistaken for a holder admitted by a replica older than
      * 0.51 (see `legacySingletonHolders`).
@@ -6092,14 +6224,19 @@ export class WorkflowEngine {
     async markStarted(run, singleton) {
         const tags = singleton ? withSingletonTracked(run.tags) : run.tags;
         const retag = tags !== run.tags;
-        await this.store.updateRun(run.id, {
+        // A compare-and-set on `pending`: the run was read before this turn took it, and a cancel (or a
+        // delete) landing in between must not be overwritten with `running`, which would resurrect it.
+        const started = await this.store.updateRunIf(run.id, ['pending'], {
             status: 'running',
             ...(retag ? { tags } : {}),
             updatedAt: new Date(),
         });
+        if (!started)
+            return false;
         run.status = 'running';
         if (retag)
             run.tags = tags;
+        return true;
     }
     async singletonWaitResult(run) {
         const current = await this.store.getRun(run.id);
@@ -6143,7 +6280,11 @@ export class WorkflowEngine {
             return { runId: run.id, status: 'suspended' };
         }
         if (run.status === 'pending') {
-            await this.markStarted(run, registered?.singleton !== undefined);
+            if (!(await this.markStarted(run, registered?.singleton !== undefined))) {
+                // No longer `pending` (cancelled or deleted since it was read): nothing to run.
+                await this.store.releaseRunLock(run.id, this.instanceId).catch(() => undefined);
+                return await this.echoCurrentStatus(run.id);
+            }
             this.emit({
                 type: 'run.started',
                 runId: run.id,
@@ -6158,7 +6299,14 @@ export class WorkflowEngine {
         // Capability/protocol guard (design §7.5): a remote workflow's turn dispatches a WorkflowTask to
         // its group — if no live worker on that group can run it, park `blocked` before advancing rather
         // than handing the task to the executor to enqueue into a void. Re-checked each turn (recovery).
-        const routePlan = await this.planRoute(registered.convention ? conventionGroup(run.workflow, run.namespace) : remote.group, registered.requires);
+        const routeToken = registered.convention
+            ? conventionGroup(run.workflow, run.namespace)
+            : remote.group;
+        let routePlan = await this.planRoute(routeToken, registered.requires);
+        // As in ensureRoutable: re-read before parking, never park on reused descriptors.
+        if (routePlan?.status === 'blocked') {
+            routePlan = await this.planRoute(routeToken, registered.requires, true);
+        }
         if (routePlan?.status === 'blocked')
             return this.parkBlocked(run, routePlan);
         const checkpoints = await this.replayCheckpoints(run.id);
@@ -7204,7 +7352,11 @@ export class WorkflowEngine {
         // gate, so an admitted run's body never starts while it still reads `pending`. A resumed run is
         // already past `pending`, so this fires exactly once.
         if (run.status === 'pending') {
-            await this.markStarted(run, registered?.singleton !== undefined);
+            if (!(await this.markStarted(run, registered?.singleton !== undefined))) {
+                // No longer `pending` (cancelled or deleted since it was read): nothing to run.
+                await this.store.releaseRunLock(run.id, this.instanceId).catch(() => undefined);
+                return await this.echoCurrentStatus(run.id);
+            }
             this.emit({
                 type: 'run.started',
                 runId: run.id,
@@ -7218,20 +7370,37 @@ export class WorkflowEngine {
         if (registered?.singleton && !(await this.singletons.admit(run, registered.singleton))) {
             return this.singletonWaitResult(run);
         }
+        // A body this instance parked on dispatched steps in an earlier turn continues from there (see
+        // `sticky-continuation.ts`), when nothing but this instance's own turn has settled the run since.
+        const stickyOk = this.stickyEligible(run);
+        let cont = stickyOk ? this.takeContinuation(run, fn) : undefined;
+        const warm = cont !== undefined;
+        // The parked steps' checkpoints, read before the body resumes: a failing read fails the turn
+        // like a failing history read does, never the run.
+        const parkedFresh = cont ? await this.readParked(run.id, cont) : undefined;
         // Saga compensations registered by completed steps; run in reverse if the run later fails.
-        const compensations = [];
+        const compensations = cont ? cont.compensations : [];
         // Load this run's checkpoints ONCE and key them by seq, so replaying the completed prefix reads
         // from memory instead of one `getCheckpoint` SELECT per primitive (the O(N²) replay-reads fix).
         // Read once at execution start: a checkpoint written AFTER this snapshot (the signal/timer/child
         // this resume wakes on, or one written later in this same execution) is absent from the map, and
         // the ctx falls back to the live store for any absent seq — so replay semantics are unchanged.
-        const snapshot = await this.replayCheckpoints(run.id);
-        const replay = new Map();
+        // A warm continuation already replayed its prefix: it reads only what lies past its park point.
+        const snapshot = cont ? [] : await this.replayCheckpoints(run.id);
+        const replay = cont ? cont.replay : new Map();
         for (const cp of snapshot)
             replay.set(cp.seq, cp);
+        if (!cont && stickyOk) {
+            cont = new StickyContinuation(run.id, fn, run.workflowVersion, compensations, replay, (c) => this.sticky.evict(c.runId));
+        }
+        if (cont)
+            this.turnContinuations.set(run.id, cont);
+        let parkedTurn = false;
         let suspendedOnFan;
         let settledSuspended = false;
-        const ctx = createWorkflowCtx(this.ctxHostFor(replay, run.namespace), run.id, compensations, run.workflow);
+        const ctx = warm
+            ? undefined
+            : createWorkflowCtx(this.ctxHostFor(replay, run.namespace, cont), run.id, compensations, run.workflow);
         // Every settle below is `return await`ed, never a bare `return this.settleRun(...)`: inside
         // `try … finally` a bare return runs the `finally` — which RELEASES THE LEASE — as soon as the
         // return expression is evaluated, while the settle's own write is still in flight. A first turn
@@ -7248,8 +7417,33 @@ export class WorkflowEngine {
             // Establish the ambient ctx for the duration of this body turn so context-aware statics
             // (`BaseWorkflow.start`/`dispatch`) reachable from `fn` route through this run's `ctx.child`/
             // `ctx.startChild`. Re-set on every replay turn (each is its own async scope) — correct.
-            const input = await this.turnInput(run, registered);
-            const output = await workflowAls.run(ctx, () => fn(ctx, input));
+            let output;
+            if (cont) {
+                if (parkedFresh) {
+                    cont.attached = true;
+                    await cont.resumeParked(parkedFresh);
+                }
+                else {
+                    const input = await this.turnInput(run, registered);
+                    const body = ctx;
+                    cont.begin(() => workflowAls.run(body, () => fn(body, input)));
+                }
+                const outcome = await cont.next();
+                if (outcome.kind === 'parked') {
+                    // Parked on dispatched steps with nothing else in flight: suspend exactly as a thrown
+                    // suspension would, and keep the body for the run's next turn here.
+                    parkedTurn = true;
+                    throw new WorkflowSuspended(outcome.wakeAt, outcome.waitSeqs);
+                }
+                if (outcome.kind === 'threw')
+                    throw outcome.error;
+                output = outcome.value;
+            }
+            else {
+                const input = await this.turnInput(run, registered);
+                const body = ctx;
+                output = await workflowAls.run(body, () => fn(body, input));
+            }
             // A compensating cancel requested while this turn ran (or one whose resume replays straight to
             // `return`, with no suspension point left) still wins: undo + settle cancelled, never completed.
             if (await this.takeCancelIntent(run.id)) {
@@ -7312,6 +7506,11 @@ export class WorkflowEngine {
                     return await this.compensateAndCancel(run, compensations);
                 }
                 const settled = await this.settleRun(run, { kind: 'suspended', wakeAt: err.wakeAt });
+                const stamp = this.suspendStamps.get(run.id);
+                this.suspendStamps.delete(run.id);
+                if (parkedTurn && cont && settled.status === 'suspended' && stamp !== undefined) {
+                    this.keepContinuation(cont, stamp);
+                }
                 // Close the settle-vs-delivery race: a signal/result that landed WHILE this turn was still
                 // executing wrote its checkpoint durably, but its resume no-oped against our held lease —
                 // and this settle just parked the run on nothing but the reconcile fallback (or nothing at
@@ -7370,6 +7569,9 @@ export class WorkflowEngine {
             //
             // A suspended turn keeps the lease instead when a wake it refused asked for another turn, and
             // runs that turn (see `requestWake`).
+            if (cont && this.turnContinuations.get(run.id) === cont) {
+                this.turnContinuations.delete(run.id);
+            }
             let released = true;
             try {
                 if (settledSuspended)
@@ -7620,10 +7822,11 @@ export class WorkflowEngine {
     /** The seam handed to {@link createWorkflowCtx}: the authoring API reaches durability + lifecycle
      *  (checkpointing, dispatch, child start) through this, so the ctx primitives live in their own
      *  module and the engine stays the orchestrator. */
-    ctxHostFor(replay, runNamespace) {
+    ctxHostFor(replay, runNamespace, sticky) {
         return {
             store: this.store,
             replay,
+            sticky,
             clock: this.clock,
             stepSignal: this.drainAbort.signal,
             eventBufferTtlMs: this.eventBufferTtlMs,
@@ -7631,7 +7834,18 @@ export class WorkflowEngine {
             startStep: (s) => this.startStep(s),
             completeStep: (s) => this.completeStep(s),
             failStep: (s) => this.failStep(s),
-            callRemote: (runId, seq, step, input, queue, transport, admission) => this.callRemote(runId, seq, step, input, queue, transport, replay, admission, runNamespace),
+            callRemote: (runId, seq, step, input, queue, transport, admission) => {
+                const call = this.callRemote(runId, seq, step, input, queue, transport, replay, admission, runNamespace);
+                if (!sticky)
+                    return call;
+                // In a sticky continuation a call that would suspend parks instead: a later turn
+                // re-evaluates it (the same logic, against its freshly read checkpoint).
+                return call.catch((err) => {
+                    if (!(err instanceof WorkflowSuspended) || !sticky.attached)
+                        throw err;
+                    return sticky.park(seq, err.wakeAt, (fresh) => this.callRemote(runId, seq, step, input, queue, transport, fresh ? new Map([[seq, fresh]]) : undefined, admission, runNamespace, undefined, true));
+                });
+            },
             callRemoteAll: (runId, positions, step, inputs, opts) => this.callRemoteAll(runId, positions, step, inputs, opts, runNamespace),
             // Defer so a fast child can't reentrantly resume a still-running parent. The child inherits the
             // PARENT RUN's namespace, not this engine's: an operator legitimately executes every tenant's
@@ -7762,12 +7976,12 @@ export class WorkflowEngine {
      *  descriptor keyspace. Empty when no transport can introspect it (in-process / pre-handshake broker)
      *  OR nobody is publishing — either way the guard is skipped and dispatch proceeds legacy
      *  assume-compatible (design §7.7). Never throws (the transport degrades to `[]`). */
-    async liveDescriptorsFor(token) {
+    async liveDescriptorsFor(token, fresh = false) {
         const read = this.primaryTransport?.listWorkerDescriptors;
         if (!read)
             return [];
         try {
-            return await read.call(this.primaryTransport, token);
+            return await read.call(this.primaryTransport, token, fresh ? { fresh } : undefined);
         }
         catch {
             return [];
@@ -7780,8 +7994,8 @@ export class WorkflowEngine {
      * - a `routable` plan — ≥1 live worker is capability-capable AND protocol-compatible (dispatch);
      * - a `blocked` plan — descriptors exist but none can run it (park the run, never dispatch into it).
      */
-    async planRoute(token, requires) {
-        const descriptors = await this.liveDescriptorsFor(token);
+    async planRoute(token, requires, fresh = false) {
+        const descriptors = await this.liveDescriptorsFor(token, fresh);
         if (descriptors.length === 0)
             return undefined; // legacy/no-runtime path — skip the guard
         return planDispatch(requires ?? [], descriptors, this.cpDescriptor, token);
@@ -7791,7 +8005,10 @@ export class WorkflowEngine {
      *  checkpoint + dispatching into a queue nobody consumes (design §7.5). A no-op when the guard does
      *  not engage (no descriptors) or a capable+compatible worker exists. */
     async ensureRoutable(token, requires) {
-        const plan = await this.planRoute(token, requires);
+        let plan = await this.planRoute(token, requires);
+        // Never park a run on reused descriptors: a capable worker may have joined since they were read.
+        if (plan?.status === 'blocked')
+            plan = await this.planRoute(token, requires, true);
         if (plan?.status === 'blocked')
             throw new WorkflowBlocked(plan);
     }
@@ -7847,7 +8064,21 @@ export class WorkflowEngine {
         }));
         return blocked;
     }
-    async callRemote(runId, seq, step, input, queue, transport, replay, admission, runNamespace, parallelGroup) {
+    async callRemote(runId, seq, step, input, queue, transport, replay, admission, runNamespace, parallelGroup, 
+    /** `replay` holds this step's checkpoint as just read from the store: no re-read needed. */
+    fresh) {
+        // A position the turn's history does not hold is normally a first dispatch: write its `pending`
+        // row only if none is there, instead of reading the position first. A row that is there (a turn
+        // this one did not see wrote it) is then read and handled below like any other.
+        if (replay !== undefined &&
+            !replay.has(seq) &&
+            this.store.insertCheckpointIfAbsent &&
+            !step.timeoutMs &&
+            this.pool.size > 0 &&
+            !(queue && this.admission.handles(queue)) &&
+            (await this.dispatchIfAbsent(runId, seq, step, input, transport, admission, runNamespace, parallelGroup))) {
+            throw new WorkflowSuspended(undefined, [seq]);
+        }
         // Read the prefix from the per-execution snapshot (avoids the O(N²) replay SELECTs); a seq absent
         // from the snapshot — not yet dispatched, or written after the snapshot — falls back to the store.
         let existing = replay?.get(seq) ?? (await this.store.getCheckpoint(runId, seq));
@@ -7857,7 +8088,7 @@ export class WorkflowEngine {
         // the lost-dispatch lease, or a re-dispatch) — written from a stale row, that overwrites the landed
         // `completed` result with `pending` and parks the run on a lease an hour out. So a pending step is
         // re-read from the store before anything acts on it (one read, only at a suspension point).
-        if (existing?.status === 'pending' && replay?.has(seq)) {
+        if (existing?.status === 'pending' && replay?.has(seq) && !fresh) {
             existing = (await this.store.getCheckpoint(runId, seq)) ?? existing;
         }
         if (existing && existing.name !== step.name) {
@@ -7938,6 +8169,8 @@ export class WorkflowEngine {
                 priority: admission?.priority,
                 attempt: reAttempt,
                 transport,
+                // A fan's steps are joined by its barrier, not a parked body: their results stay shared.
+                replyHere: parallelGroup === undefined,
             });
             this.emit({
                 type: 'step.started',
@@ -8042,10 +8275,66 @@ export class WorkflowEngine {
             attempt,
             transport,
             enqueuedAt,
+            replyHere: parallelGroup === undefined,
         });
         this.emit({ type: 'step.started', runId, seq, name: step.name, kind: 'remote' });
         throw new WorkflowSuspended(undefined, [seq]);
     }
+    /**
+     * {@link callRemote}'s first dispatch of a step, written with
+     * {@link StateStore.insertCheckpointIfAbsent}: resolves whether it wrote the `pending` row and
+     * dispatched. `false` when the position already has a row, or when no live worker can take the
+     * step (the read-first path then decides, so a step that is in fact done is never blocked).
+     */
+    async dispatchIfAbsent(runId, seq, step, input, transport, admission, runNamespace, parallelGroup) {
+        const validInput = step.input
+            ? await validateStandard(step.input, input, `step "${step.name}" input`, 'invalid_input')
+            : input;
+        const token = stepGroup(step, runNamespace);
+        try {
+            await this.ensureRoutable(token, step.requires);
+        }
+        catch (err) {
+            if (err instanceof WorkflowBlocked)
+                return false;
+            throw err;
+        }
+        const id = stepId(runId, seq);
+        const enqueuedAt = new Date();
+        const insert = this.store.insertCheckpointIfAbsent;
+        const wrote = await insert.call(this.store, {
+            runId,
+            seq,
+            name: step.name,
+            kind: 'remote',
+            stepId: id,
+            status: 'pending',
+            input: validInput,
+            attempts: 1,
+            workerGroup: token,
+            ...(parallelGroup !== undefined ? { parallelGroup } : {}),
+            enqueuedAt,
+            startedAt: enqueuedAt, // placeholders until the worker result lands
+            finishedAt: enqueuedAt,
+        });
+        if (!wrote)
+            return false;
+        await this.dispatchRemoteTask({
+            runId,
+            seq,
+            name: step.name,
+            stepId: id,
+            group: token,
+            input: validInput,
+            priority: admission?.priority,
+            attempt: 1,
+            transport,
+            enqueuedAt,
+            replyHere: parallelGroup === undefined,
+        });
+        this.emit({ type: 'step.started', runId, seq, name: step.name, kind: 'remote' });
+        return true;
+    }
     /**
      * `ctx.all` over a `@Step`: one durable step per input, dispatched together, joined once. The ctx
      * reserves the whole position block up front, so replay re-derives the same seqs.
@@ -8283,11 +8572,85 @@ export class WorkflowEngine {
             context: this.context?.(),
             priority: task.priority,
             attempt: task.attempt,
+            ...(task.replyHere && this.repliesRouted && !this.draining
+                ? { replyTo: this.instanceId }
+                : {}),
         };
         if (task.enqueuedAt)
             remote[DISPATCH_KEY] = dispatchKey(task.stepId, task.attempt, task.enqueuedAt);
         return this.pool.dispatch(remote, task.transport);
     }
+    /**
+     * Whether this turn of `run` may run in a sticky continuation (see `sticky-continuation.ts`). Not
+     * while the engine drains, nor with a compensating cancel requested for the run.
+     */
+    stickyEligible(run) {
+        return this.sticky.enabled && !this.draining && !this.cancelRequested.has(run.id);
+    }
+    /**
+     * The continuation this instance parked for `run`, if it is still the run's latest turn: the run
+     * is `suspended` with the very stamp this instance's suspend wrote, on the same body and version.
+     * Any other settle in between (another instance's turn, a retry, a cancel) changed the stamp, and
+     * the run replays instead. Taking it removes it from the cache.
+     */
+    takeContinuation(run, fn) {
+        const cont = this.sticky.take(run.id);
+        if (!cont)
+            return undefined;
+        const valid = cont.fn === fn &&
+            cont.workflowVersion === run.workflowVersion &&
+            run.status === 'suspended' &&
+            cont.stamp !== undefined &&
+            run.updatedAt.getTime() === cont.stamp;
+        if (!valid) {
+            this.sticky.misses += 1;
+            return undefined;
+        }
+        this.sticky.hits += 1;
+        return cont;
+    }
+    /** Keep `cont` (parked, detached) for the run's next turn here, stamped with its suspend write. */
+    keepContinuation(cont, stamp) {
+        if (cont.unusable)
+            return;
+        cont.stamp = stamp;
+        // Everything up to the park point is consumed; later positions read the store.
+        cont.replay.clear();
+        this.sticky.put(cont);
+    }
+    /**
+     * The checkpoints of the steps `cont` is parked on, as a replay would see them: in one read when
+     * the store batches, and without the input of a step that completed (what
+     * {@link StateStore.getCheckpointsForSettle} leaves out). A step still open or failed is read
+     * whole, since a re-dispatch or a retry sends its input again.
+     */
+    async readParked(runId, cont) {
+        const fresh = new Map();
+        for (const seq of cont.parked.keys())
+            fresh.set(seq, cont.hints.get(seq) ?? null);
+        cont.hints.clear();
+        const seqs = [...fresh].flatMap(([seq, cp]) => (cp ? [] : [seq]));
+        if (seqs.length === 0)
+            return fresh;
+        const lean = this.store.getCheckpointsForSettle ?? this.store.getCheckpoints;
+        if (lean) {
+            for (const cp of await lean.call(this.store, runId, seqs))
+                fresh.set(cp.seq, cp);
+        }
+        else {
+            for (const seq of seqs)
+                fresh.set(seq, await this.store.getCheckpoint(runId, seq));
+        }
+        if (lean === this.store.getCheckpointsForSettle) {
+            for (const seq of seqs) {
+                const cp = fresh.get(seq);
+                if (cp && cp.status !== 'completed') {
+                    fresh.set(seq, await this.store.getCheckpoint(runId, seq));
+                }
+            }
+        }
+        return fresh;
+    }
     /** A turn's read of its run's checkpoints: {@link StateStore.listCheckpointsForReplay}, or every
      *  column through {@link StateStore.listCheckpoints} on a store without it. */
     replayCheckpoints(runId) {
@@ -8558,6 +8921,9 @@ export class WorkflowEngine {
      * replays every write of the batch, so a second would only replay it again.
      */
     async completeRemoteResults(runId, results, queuedIn = () => false) {
+        if (this.store.settleResultsIfPending) {
+            return this.settleResultsReturning(runId, results, queuedIn);
+        }
         const outcomes = results.map(() => true);
         const settleOneByOne = async (indexes) => {
             for (const i of indexes) {
@@ -8689,6 +9055,144 @@ export class WorkflowEngine {
         }
         return outcomes;
     }
+    /**
+     * {@link completeRemoteResults} on a store with {@link StateStore.settleResultsIfPending}: the
+     * results settle their `pending` rows and read them back, with their run's status, in one call,
+     * instead of reading the rows and the run and then writing. An entry that settled nothing (a
+     * redelivery, a step gone, a late result for a finished run) takes the single-result path, which
+     * reads first and re-drives, drops or salvages. A settled `completed` row is also handed to the
+     * run's parked body, if this instance holds one, so its next turn does not read it again.
+     */
+    async settleResultsReturning(runId, results, queuedIn) {
+        const outcomes = results.map(() => true);
+        const settle = this.store.settleResultsIfPending.bind(this.store);
+        // A second copy of a result in the same batch is a duplicate delivery: the first copy settles
+        // the step (or re-drives the resume), so the copy is dropped like a late one.
+        const seen = new Set();
+        const live = results.flatMap((r, i) => {
+            if (seen.has(r.seq))
+                return [];
+            seen.add(r.seq);
+            return [i];
+        });
+        const finishedAt = new Date();
+        const entries = live.map((i) => {
+            const result = results[i];
+            return {
+                runId,
+                seq: result.seq,
+                status: result.status,
+                output: result.status === 'completed' ? result.output : undefined,
+                error: result.error,
+                events: result.events,
+                startedAt: result.startedAt ? new Date(result.startedAt) : undefined,
+                finishedAt,
+            };
+        });
+        // Never rejects as a whole: the batch call rejecting wrote nothing, so the entries are then
+        // settled one by one and a failing one fails only its own result.
+        let rows;
+        try {
+            rows = await settle(entries);
+        }
+        catch (err) {
+            if (entries.length === 1) {
+                rows = [{ error: err }];
+            }
+            else {
+                const one = await Promise.allSettled(entries.map((e) => settle([e])));
+                rows = one.map((o) => o.status === 'fulfilled' ? (o.value[0] ?? null) : { error: o.reason });
+            }
+        }
+        const resumable = [];
+        const unsettled = [];
+        let run;
+        // The run's parked body: in the cache, or in a turn that is parking it right now.
+        const parked = this.sticky.peek(runId) ?? this.turnContinuations.get(runId);
+        for (const [k, row] of rows.entries()) {
+            const index = live[k];
+            const result = results[index];
+            if (row === null) {
+                unsettled.push(index);
+                continue;
+            }
+            if ('error' in row) {
+                outcomes[index] = { error: row.error };
+                continue;
+            }
+            const cp = row.checkpoint;
+            // The run as it read when this result settled: what the resume owes it (see `resumeOwed`).
+            run ??= { id: runId, status: row.run.status, wakeAt: row.run.wakeAt };
+            try {
+                await this.releaseQueueSlot(cp);
+            }
+            catch (error) {
+                // Written but not acknowledged: the redelivery finds the step settled and re-drives.
+                outcomes[index] = { error };
+            }
+            if (cp.status === 'completed')
+                parked?.hint(cp);
+            this.emit({
+                type: result.status === 'completed' ? 'step.completed' : 'step.failed',
+                runId,
+                seq: result.seq,
+                name: cp.name,
+                kind: cp.kind,
+                output: result.output,
+                error: result.error,
+                queueMs: cp.startedAt.getTime() - cp.enqueuedAt.getTime(),
+                durationMs: finishedAt.getTime() - cp.startedAt.getTime(),
+            });
+            resumable.push({ cp, result });
+        }
+        // Nothing written for these: read first, then re-drive, drop or salvage, one at a time.
+        for (const index of unsettled) {
+            try {
+                await this.completeOneRemoteResult(results[index], queuedIn);
+            }
+            catch (error) {
+                outcomes[index] = { error };
+            }
+        }
+        if (resumable.length === 0)
+            return outcomes;
+        // The barrier logic of the read-first batch path (see completeRemoteResults): one resume.
+        const barriers = new Map();
+        const highest = new Map();
+        for (const { cp } of resumable) {
+            const fan = parseStepFanGroup(cp.parallelGroup);
+            if (fan)
+                highest.set(fan.firstSeq, Math.max(highest.get(fan.firstSeq) ?? cp.seq, cp.seq));
+        }
+        const singles = resumable
+            .filter(({ cp }) => !parseStepFanGroup(cp.parallelGroup))
+            .map(({ cp }) => cp.seq);
+        for (const { cp, result } of resumable) {
+            const fan = parseStepFanGroup(cp.parallelGroup);
+            if (!fan || result.status === 'failed') {
+                this.noteSettledHere(runId, singles);
+                await this.resumeOwed(run, runId);
+                return outcomes;
+            }
+            let closed = barriers.get(fan.firstSeq);
+            if (!closed) {
+                const lastSeq = fan.firstSeq + fan.size - 1;
+                closed = queuedIn(fan.firstSeq, lastSeq)
+                    ? Promise.resolve(true)
+                    : this.stepFanHasPending(runId, fan.firstSeq, lastSeq).catch(() => false);
+                barriers.set(fan.firstSeq, closed);
+            }
+            if (!(await closed)) {
+                this.noteSettledHere(runId, singles);
+                await this.resumeOwed(run, runId, {
+                    first: fan.firstSeq,
+                    seq: highest.get(fan.firstSeq) ?? cp.seq,
+                });
+                return outcomes;
+            }
+        }
+        return outcomes;
+    }
     /**
      * Settle pending steps, each only while its row is still `pending`; per entry, whether it wrote
      * or the error that kept it from writing. Through {@link StateStore.settleCheckpointsIfPending}