@ankhorage/flow 0.4.1 → 0.5.0

package/dist/features/execution/application/runDurableWorkerAsync.js

@@ -0,0 +1,195 @@
+import { FlowSecurityError } from '../../security/FlowSecurityError.js';
+import { createRetryWork } from '../domain/createRetryWork.js';
+/** Claim bounded durable work and execute it with fenced recovery, retry, and approval handling. */
+export const runDurableWorkerAsync = async (input, dependencies) => {
+    assertWorkerInput(input);
+    const now = dependencies.clock.now();
+    const recoveredWorkIds = await dependencies.persistence.recoverExpiredClaimsAsync(now);
+    const claimed = await dependencies.persistence.claimDueWorkAsync({
+        leaseDurationMs: input.leaseDurationMs,
+        limit: Math.min(input.limit, input.concurrency),
+        now,
+        workerId: input.workerId,
+    });
+    const outcomes = await Promise.all(claimed.map((work) => processWorkAsync(work, input, dependencies)));
+    return { claimedWorkIds: claimed.map((work) => work.id), outcomes, recoveredWorkIds };
+};
+/** Executes one effect through the durable step and security boundaries. */
+const processWorkAsync = async (work, input, dependencies) => {
+    const { lease } = work;
+    if (lease === undefined)
+        return { status: 'lost_lease', workId: work.id };
+    const run = await dependencies.persistence.readRunAsync(work.runId);
+    if (run === undefined || run.status === 'cancelled') {
+        await completeAsync(work, input.workerId, dependencies);
+        return { status: 'cancelled', workId: work.id };
+    }
+    if (isCompleted(run.checkpoint, work.stepId)) {
+        await completeAsync(work, input.workerId, dependencies);
+        return { status: 'already_completed', workId: work.id };
+    }
+    try {
+        const outbox = await prepareOutboxAsync(work, dependencies);
+        if (outbox.status === 'delivered') {
+            const transitioned = await transitionAsync(run, 'succeeded', completedCheckpoint(run.checkpoint, work.stepId), dependencies);
+            const completed = await completeAsync(work, input.workerId, dependencies);
+            return {
+                status: transitioned && completed ? 'already_completed' : 'lost_lease',
+                workId: work.id,
+            };
+        }
+        const effectStatus = await executeEffectAsync(work, run, dependencies);
+        await dependencies.persistence.markOutboxDeliveredAsync(work.id);
+        const transitioned = await transitionAsync(run, 'succeeded', completedCheckpoint(run.checkpoint, work.stepId), dependencies);
+        if (!transitioned || !(await completeAsync(work, input.workerId, dependencies)))
+            return { status: 'lost_lease', workId: work.id };
+        return { status: effectStatus, workId: work.id };
+    }
+    catch (error) {
+        if (isApprovalPending(error))
+            return waitForApprovalAsync(work, run, input, dependencies);
+        return retryOrFailAsync(work, run, input, dependencies, error);
+    }
+};
+/** Create an idempotency-keyed outbox record before delivery, or resume its pending record after a crash. */
+const prepareOutboxAsync = async (work, dependencies) => {
+    const existing = await dependencies.persistence.readOutboxAsync(work.id);
+    if (existing !== undefined)
+        return existing;
+    const now = dependencies.clock.now().toISOString();
+    await dependencies.persistence.createOutboxAsync({
+        createdAt: now,
+        id: work.id,
+        idempotencyKey: work.idempotencyKey ?? work.id,
+        runId: work.runId,
+        status: 'pending',
+        workId: work.id,
+    });
+    const created = await dependencies.persistence.readOutboxAsync(work.id);
+    if (created === undefined)
+        throw new Error('FLOW_OUTBOX_CREATE_FAILED');
+    return created;
+};
+/** Runs internal work directly, while protected provider work requires reconciliation and a canonical permit. */
+const executeEffectAsync = async (work, run, dependencies) => {
+    const execute = () => dependencies.effects.executeAsync({
+        idempotencyKey: work.idempotencyKey ?? work.id,
+        run,
+        work,
+    });
+    if (work.effectKind === 'internal') {
+        if (work.securityOperation !== undefined)
+            throw new Error('FLOW_INTERNAL_EFFECT_SECURITY_OPERATION');
+        await execute();
+        return 'succeeded';
+    }
+    if (work.securityOperation === undefined)
+        throw new Error('FLOW_PROTECTED_EFFECT_SECURITY_OPERATION');
+    if (dependencies.security === undefined)
+        throw new Error('FLOW_SECURITY_PORT_REQUIRED');
+    if (dependencies.effects.reconcileAsync === undefined)
+        throw new Error('FLOW_PROTECTED_EFFECT_RECONCILIATION_REQUIRED');
+    if ((await dependencies.effects.reconcileAsync({
+        idempotencyKey: work.idempotencyKey ?? work.id,
+        run,
+        work,
+    })) === 'delivered')
+        return 'succeeded';
+    const permit = await dependencies.security.authorizeAsync(work.securityOperation);
+    await permit.executeAsync(async () => execute());
+    return 'succeeded';
+};
+/** Persist a waiting approval and defer its at-least-once delivery without consuming the lease. */
+const waitForApprovalAsync = async (work, run, input, dependencies) => {
+    const transitioned = await transitionAsync(run, 'waiting_approval', run.checkpoint, dependencies);
+    const released = await dependencies.persistence.releaseWorkAsync({
+        dueAt: new Date(dependencies.clock.now().getTime() + input.approvalPollIntervalMs).toISOString(),
+        id: work.id,
+        leaseFencingToken: claimFencingToken(work),
+        workerId: input.workerId,
+    });
+    return { status: transitioned && released ? 'waiting_approval' : 'lost_lease', workId: work.id };
+};
+/** Persist a bounded retry or terminal failure before releasing the claimed delivery. */
+const retryOrFailAsync = async (work, run, input, dependencies, error) => {
+    if (work.attempt >= input.retry.maxAttempts) {
+        await dependencies.effects.compensateAsync?.({ run, work });
+        const transitioned = await transitionAsync(run, 'failed', failedCheckpoint(run.checkpoint, work.stepId), dependencies);
+        const completed = await completeAsync(work, input.workerId, dependencies);
+        return {
+            error: errorMessage(error),
+            status: transitioned && completed ? 'failed' : 'lost_lease',
+            workId: work.id,
+        };
+    }
+    await dependencies.persistence.enqueueWorkAsync(createRetryWork(work, dependencies.clock.now(), input.retry));
+    const completed = await completeAsync(work, input.workerId, dependencies);
+    return {
+        error: errorMessage(error),
+        status: completed ? 'retry_scheduled' : 'lost_lease',
+        workId: work.id,
+    };
+};
+/** Compare-and-swap a run state while preserving its immutable flow revision. */
+const transitionAsync = (run, status, checkpoint, dependencies) => dependencies.persistence.transitionRunAsync({
+    expectedRevision: run.revision,
+    run: {
+        ...run,
+        ...(checkpoint === undefined ? {} : { checkpoint }),
+        revision: run.revision + 1,
+        status,
+        updatedAt: dependencies.clock.now().toISOString(),
+    },
+});
+/** Complete a work lease only when its owner and fencing token still match. */
+const completeAsync = (work, workerId, dependencies) => dependencies.persistence.completeWorkAsync({
+    id: work.id,
+    leaseFencingToken: claimFencingToken(work),
+    now: dependencies.clock.now(),
+    workerId,
+});
+/** Read the lease token only from a claimed work item. */
+const claimFencingToken = (work) => {
+    if (work.lease === undefined)
+        throw new Error('FLOW_WORK_LEASE_MISSING');
+    return work.lease.fencingToken;
+};
+/** Add a successful step exactly once to an immutable checkpoint. */
+const completedCheckpoint = (checkpoint, stepId) => ({
+    completedStepIds: unique([
+        ...(checkpoint?.completedStepIds ?? []),
+        ...(stepId === undefined ? [] : [stepId]),
+    ]),
+    ...(checkpoint?.data === undefined ? {} : { data: checkpoint.data }),
+    failedStepIds: checkpoint?.failedStepIds ?? [],
+});
+/** Add a terminally failed step to an immutable checkpoint. */
+const failedCheckpoint = (checkpoint, stepId) => ({
+    completedStepIds: checkpoint?.completedStepIds ?? [],
+    ...(checkpoint?.data === undefined ? {} : { data: checkpoint.data }),
+    failedStepIds: unique([
+        ...(checkpoint?.failedStepIds ?? []),
+        ...(stepId === undefined ? [] : [stepId]),
+    ]),
+});
+/** Check whether a completed checkpoint makes a duplicate delivery a no-op. */
+const isCompleted = (checkpoint, stepId) => stepId !== undefined && checkpoint?.completedStepIds.includes(stepId) === true;
+/** Validate finite worker bounds before touching persistence. */
+const assertWorkerInput = (input) => {
+    for (const value of [
+        input.approvalPollIntervalMs,
+        input.concurrency,
+        input.leaseDurationMs,
+        input.limit,
+        input.retry.maxAttempts,
+    ])
+        if (!Number.isSafeInteger(value) || value < 1)
+            throw new Error('FLOW_WORKER_INPUT_INVALID');
+};
+/** Identify the canonical pending-approval error without interpreting untrusted error shapes. */
+const isApprovalPending = (error) => error instanceof FlowSecurityError && error.code === 'approval_pending';
+/** Preserve a concise, provider-neutral failure signal in the worker result. */
+const errorMessage = (error) => error instanceof Error ? error.message : 'FLOW_EFFECT_FAILED';
+/** Keep persisted checkpoint arrays deterministic. */
+const unique = (values) => [...new Set(values)];
+//# sourceMappingURL=runDurableWorkerAsync.js.map

package/dist/features/execution/application/runDurableWorkerAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runDurableWorkerAsync.js","sourceRoot":"","sources":["../../../../src/features/execution/application/runDurableWorkerAsync.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG/D,oGAAoG;AACpG,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,KAOC,EACD,YAKC,EAC0B,EAAE;IAC7B,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAC/D,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;QAC/C,GAAG;QACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CACnE,CAAC;IACF,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;AACxF,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,KAAK,EAC5B,IAAqB,EACrB,KAAkD,EAClD,YAAyD,EAC7B,EAAE;IAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpD,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,GAAG,EACH,WAAW,EACX,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAChD,YAAY,CACb,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC1E,OAAO;gBACL,MAAM,EAAE,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY;gBACtE,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvE,MAAM,YAAY,CAAC,WAAW,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,GAAG,EACH,WAAW,EACX,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAChD,YAAY,CACb,CAAC;QACF,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAC1F,OAAO,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC;AAEF,6GAA6G;AAC7G,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAqB,EACrB,YAAyD,EACzD,EAAE;IACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,YAAY,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAC/C,SAAS,EAAE,GAAG;QACd,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE;QAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,iHAAiH;AACjH,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAqB,EACrB,GAAmB,EACnB,YAAyD,EACnC,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;QAChC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE;QAC9C,GAAG;QACH,IAAI;KACL,CAAC,CAAC;IACL,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;YACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;QACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;QACnD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,IACE,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC;QACzC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE;QAC9C,GAAG;QACH,IAAI;KACL,CAAC,CAAC,KAAK,WAAW;QAEnB,OAAO,WAAW,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClF,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,mGAAmG;AACnG,MAAM,oBAAoB,GAAG,KAAK,EAChC,IAAqB,EACrB,GAAmB,EACnB,KAAkD,EAClD,YAAyD,EAC7B,EAAE;IAC9B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,gBAAgB,CAAC;QAC/D,KAAK,EAAE,IAAI,IAAI,CACb,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,sBAAsB,CAClE,CAAC,WAAW,EAAE;QACf,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,YAAY,IAAI,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AACnG,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,IAAqB,EACrB,GAAmB,EACnB,KAAkD,EAClD,YAAyD,EACzD,KAAc,EACc,EAAE;IAC9B,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,GAAG,EACH,QAAQ,EACR,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAC7C,YAAY,CACb,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1E,OAAO;YACL,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;YAC1B,MAAM,EAAE,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;YAC3D,MAAM,EAAE,IAAI,CAAC,EAAE;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,CAAC,WAAW,CAAC,gBAAgB,CAC7C,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAC7D,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY;QACpD,MAAM,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC;AACJ,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,eAAe,GAAG,CACtB,GAAmB,EACnB,MAAgC,EAChC,UAAyC,EACzC,YAAyD,EACvC,EAAE,CACpB,YAAY,CAAC,WAAW,CAAC,kBAAkB,CAAC;IAC1C,gBAAgB,EAAE,GAAG,CAAC,QAAQ;IAC9B,GAAG,EAAE;QACH,GAAG,GAAG;QACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KAClD;CACF,CAAC,CAAC;AAEL,+EAA+E;AAC/E,MAAM,aAAa,GAAG,CACpB,IAAqB,EACrB,QAAgB,EAChB,YAAyD,EACvC,EAAE,CACpB,YAAY,CAAC,WAAW,CAAC,iBAAiB,CAAC;IACzC,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAAC;IAC1C,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE;IAC7B,QAAQ;CACT,CAAC,CAAC;AAEL,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,CAAC,IAAqB,EAAU,EAAE;IAC1D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;AACjC,CAAC,CAAC;AAEF,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,CAC1B,UAAyC,EACzC,MAA0B,EACP,EAAE,CAAC,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;KAC1C,CAAC;IACF,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACpE,aAAa,EAAE,UAAU,EAAE,aAAa,IAAI,EAAE;CAC/C,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,gBAAgB,GAAG,CACvB,UAAyC,EACzC,MAA0B,EACP,EAAE,CAAC,CAAC;IACvB,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,IAAI,EAAE;IACpD,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACpE,aAAa,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,UAAU,EAAE,aAAa,IAAI,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;KAC1C,CAAC;CACH,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,WAAW,GAAG,CAClB,UAAyC,EACzC,MAA0B,EACjB,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AAE7F,iEAAiE;AACjE,MAAM,iBAAiB,GAAG,CAAC,KAAkD,EAAQ,EAAE;IACrF,KAAK,MAAM,KAAK,IAAI;QAClB,KAAK,CAAC,sBAAsB;QAC5B,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,KAAK,CAAC,WAAW;KACxB;QACC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAChG,CAAC,CAAC;AAEF,iGAAiG;AACjG,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAW,EAAE,CACpD,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC;AAE1E,gFAAgF;AAChF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAU,EAAE,CAC9C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;AAEhE,sDAAsD;AACtD,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAqB,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC","sourcesContent":["import type {\n  FlowDurableRun,\n  FlowDurableWork,\n  FlowRetryPolicy,\n  FlowRunCheckpoint,\n} from '../../../types/durableExecution.js';\nimport type { FlowClock } from '../../../types/execution.js';\nimport type { FlowSecurityPort } from '../../../types/security.js';\nimport { FlowSecurityError } from '../../security/FlowSecurityError.js';\nimport { createRetryWork } from '../domain/createRetryWork.js';\nimport type { FlowPersistencePort } from '../ports/FlowPersistencePort.js';\n\n/** Claim bounded durable work and execute it with fenced recovery, retry, and approval handling. */\nexport const runDurableWorkerAsync = async (\n  input: {\n    readonly approvalPollIntervalMs: number;\n    readonly concurrency: number;\n    readonly leaseDurationMs: number;\n    readonly limit: number;\n    readonly retry: FlowRetryPolicy;\n    readonly workerId: string;\n  },\n  dependencies: {\n    readonly clock: FlowClock;\n    readonly effects: FlowDurableEffectPort;\n    readonly persistence: FlowPersistencePort;\n    readonly security?: FlowSecurityPort;\n  },\n): Promise<FlowWorkerResult> => {\n  assertWorkerInput(input);\n  const now = dependencies.clock.now();\n  const recoveredWorkIds = await dependencies.persistence.recoverExpiredClaimsAsync(now);\n  const claimed = await dependencies.persistence.claimDueWorkAsync({\n    leaseDurationMs: input.leaseDurationMs,\n    limit: Math.min(input.limit, input.concurrency),\n    now,\n    workerId: input.workerId,\n  });\n  const outcomes = await Promise.all(\n    claimed.map((work) => processWorkAsync(work, input, dependencies)),\n  );\n  return { claimedWorkIds: claimed.map((work) => work.id), outcomes, recoveredWorkIds };\n};\n\n/** Executes one effect through the durable step and security boundaries. */\nconst processWorkAsync = async (\n  work: FlowDurableWork,\n  input: Parameters<typeof runDurableWorkerAsync>[0],\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n): Promise<FlowWorkerOutcome> => {\n  const { lease } = work;\n  if (lease === undefined) return { status: 'lost_lease', workId: work.id };\n  const run = await dependencies.persistence.readRunAsync(work.runId);\n  if (run === undefined || run.status === 'cancelled') {\n    await completeAsync(work, input.workerId, dependencies);\n    return { status: 'cancelled', workId: work.id };\n  }\n  if (isCompleted(run.checkpoint, work.stepId)) {\n    await completeAsync(work, input.workerId, dependencies);\n    return { status: 'already_completed', workId: work.id };\n  }\n  try {\n    const outbox = await prepareOutboxAsync(work, dependencies);\n    if (outbox.status === 'delivered') {\n      const transitioned = await transitionAsync(\n        run,\n        'succeeded',\n        completedCheckpoint(run.checkpoint, work.stepId),\n        dependencies,\n      );\n      const completed = await completeAsync(work, input.workerId, dependencies);\n      return {\n        status: transitioned && completed ? 'already_completed' : 'lost_lease',\n        workId: work.id,\n      };\n    }\n    const effectStatus = await executeEffectAsync(work, run, dependencies);\n    await dependencies.persistence.markOutboxDeliveredAsync(work.id);\n    const transitioned = await transitionAsync(\n      run,\n      'succeeded',\n      completedCheckpoint(run.checkpoint, work.stepId),\n      dependencies,\n    );\n    if (!transitioned || !(await completeAsync(work, input.workerId, dependencies)))\n      return { status: 'lost_lease', workId: work.id };\n    return { status: effectStatus, workId: work.id };\n  } catch (error) {\n    if (isApprovalPending(error)) return waitForApprovalAsync(work, run, input, dependencies);\n    return retryOrFailAsync(work, run, input, dependencies, error);\n  }\n};\n\n/** Create an idempotency-keyed outbox record before delivery, or resume its pending record after a crash. */\nconst prepareOutboxAsync = async (\n  work: FlowDurableWork,\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n) => {\n  const existing = await dependencies.persistence.readOutboxAsync(work.id);\n  if (existing !== undefined) return existing;\n  const now = dependencies.clock.now().toISOString();\n  await dependencies.persistence.createOutboxAsync({\n    createdAt: now,\n    id: work.id,\n    idempotencyKey: work.idempotencyKey ?? work.id,\n    runId: work.runId,\n    status: 'pending',\n    workId: work.id,\n  });\n  const created = await dependencies.persistence.readOutboxAsync(work.id);\n  if (created === undefined) throw new Error('FLOW_OUTBOX_CREATE_FAILED');\n  return created;\n};\n\n/** Runs internal work directly, while protected provider work requires reconciliation and a canonical permit. */\nconst executeEffectAsync = async (\n  work: FlowDurableWork,\n  run: FlowDurableRun,\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n): Promise<'succeeded'> => {\n  const execute = () =>\n    dependencies.effects.executeAsync({\n      idempotencyKey: work.idempotencyKey ?? work.id,\n      run,\n      work,\n    });\n  if (work.effectKind === 'internal') {\n    if (work.securityOperation !== undefined)\n      throw new Error('FLOW_INTERNAL_EFFECT_SECURITY_OPERATION');\n    await execute();\n    return 'succeeded';\n  }\n  if (work.securityOperation === undefined)\n    throw new Error('FLOW_PROTECTED_EFFECT_SECURITY_OPERATION');\n  if (dependencies.security === undefined) throw new Error('FLOW_SECURITY_PORT_REQUIRED');\n  if (dependencies.effects.reconcileAsync === undefined)\n    throw new Error('FLOW_PROTECTED_EFFECT_RECONCILIATION_REQUIRED');\n  if (\n    (await dependencies.effects.reconcileAsync({\n      idempotencyKey: work.idempotencyKey ?? work.id,\n      run,\n      work,\n    })) === 'delivered'\n  )\n    return 'succeeded';\n  const permit = await dependencies.security.authorizeAsync(work.securityOperation);\n  await permit.executeAsync(async () => execute());\n  return 'succeeded';\n};\n\n/** Persist a waiting approval and defer its at-least-once delivery without consuming the lease. */\nconst waitForApprovalAsync = async (\n  work: FlowDurableWork,\n  run: FlowDurableRun,\n  input: Parameters<typeof runDurableWorkerAsync>[0],\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n): Promise<FlowWorkerOutcome> => {\n  const transitioned = await transitionAsync(run, 'waiting_approval', run.checkpoint, dependencies);\n  const released = await dependencies.persistence.releaseWorkAsync({\n    dueAt: new Date(\n      dependencies.clock.now().getTime() + input.approvalPollIntervalMs,\n    ).toISOString(),\n    id: work.id,\n    leaseFencingToken: claimFencingToken(work),\n    workerId: input.workerId,\n  });\n  return { status: transitioned && released ? 'waiting_approval' : 'lost_lease', workId: work.id };\n};\n\n/** Persist a bounded retry or terminal failure before releasing the claimed delivery. */\nconst retryOrFailAsync = async (\n  work: FlowDurableWork,\n  run: FlowDurableRun,\n  input: Parameters<typeof runDurableWorkerAsync>[0],\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n  error: unknown,\n): Promise<FlowWorkerOutcome> => {\n  if (work.attempt >= input.retry.maxAttempts) {\n    await dependencies.effects.compensateAsync?.({ run, work });\n    const transitioned = await transitionAsync(\n      run,\n      'failed',\n      failedCheckpoint(run.checkpoint, work.stepId),\n      dependencies,\n    );\n    const completed = await completeAsync(work, input.workerId, dependencies);\n    return {\n      error: errorMessage(error),\n      status: transitioned && completed ? 'failed' : 'lost_lease',\n      workId: work.id,\n    };\n  }\n  await dependencies.persistence.enqueueWorkAsync(\n    createRetryWork(work, dependencies.clock.now(), input.retry),\n  );\n  const completed = await completeAsync(work, input.workerId, dependencies);\n  return {\n    error: errorMessage(error),\n    status: completed ? 'retry_scheduled' : 'lost_lease',\n    workId: work.id,\n  };\n};\n\n/** Compare-and-swap a run state while preserving its immutable flow revision. */\nconst transitionAsync = (\n  run: FlowDurableRun,\n  status: FlowDurableRun['status'],\n  checkpoint: FlowRunCheckpoint | undefined,\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n): Promise<boolean> =>\n  dependencies.persistence.transitionRunAsync({\n    expectedRevision: run.revision,\n    run: {\n      ...run,\n      ...(checkpoint === undefined ? {} : { checkpoint }),\n      revision: run.revision + 1,\n      status,\n      updatedAt: dependencies.clock.now().toISOString(),\n    },\n  });\n\n/** Complete a work lease only when its owner and fencing token still match. */\nconst completeAsync = (\n  work: FlowDurableWork,\n  workerId: string,\n  dependencies: Parameters<typeof runDurableWorkerAsync>[1],\n): Promise<boolean> =>\n  dependencies.persistence.completeWorkAsync({\n    id: work.id,\n    leaseFencingToken: claimFencingToken(work),\n    now: dependencies.clock.now(),\n    workerId,\n  });\n\n/** Read the lease token only from a claimed work item. */\nconst claimFencingToken = (work: FlowDurableWork): number => {\n  if (work.lease === undefined) throw new Error('FLOW_WORK_LEASE_MISSING');\n  return work.lease.fencingToken;\n};\n\n/** Add a successful step exactly once to an immutable checkpoint. */\nconst completedCheckpoint = (\n  checkpoint: FlowRunCheckpoint | undefined,\n  stepId: string | undefined,\n): FlowRunCheckpoint => ({\n  completedStepIds: unique([\n    ...(checkpoint?.completedStepIds ?? []),\n    ...(stepId === undefined ? [] : [stepId]),\n  ]),\n  ...(checkpoint?.data === undefined ? {} : { data: checkpoint.data }),\n  failedStepIds: checkpoint?.failedStepIds ?? [],\n});\n\n/** Add a terminally failed step to an immutable checkpoint. */\nconst failedCheckpoint = (\n  checkpoint: FlowRunCheckpoint | undefined,\n  stepId: string | undefined,\n): FlowRunCheckpoint => ({\n  completedStepIds: checkpoint?.completedStepIds ?? [],\n  ...(checkpoint?.data === undefined ? {} : { data: checkpoint.data }),\n  failedStepIds: unique([\n    ...(checkpoint?.failedStepIds ?? []),\n    ...(stepId === undefined ? [] : [stepId]),\n  ]),\n});\n\n/** Check whether a completed checkpoint makes a duplicate delivery a no-op. */\nconst isCompleted = (\n  checkpoint: FlowRunCheckpoint | undefined,\n  stepId: string | undefined,\n): boolean => stepId !== undefined && checkpoint?.completedStepIds.includes(stepId) === true;\n\n/** Validate finite worker bounds before touching persistence. */\nconst assertWorkerInput = (input: Parameters<typeof runDurableWorkerAsync>[0]): void => {\n  for (const value of [\n    input.approvalPollIntervalMs,\n    input.concurrency,\n    input.leaseDurationMs,\n    input.limit,\n    input.retry.maxAttempts,\n  ])\n    if (!Number.isSafeInteger(value) || value < 1) throw new Error('FLOW_WORKER_INPUT_INVALID');\n};\n\n/** Identify the canonical pending-approval error without interpreting untrusted error shapes. */\nconst isApprovalPending = (error: unknown): boolean =>\n  error instanceof FlowSecurityError && error.code === 'approval_pending';\n\n/** Preserve a concise, provider-neutral failure signal in the worker result. */\nconst errorMessage = (error: unknown): string =>\n  error instanceof Error ? error.message : 'FLOW_EFFECT_FAILED';\n\n/** Keep persisted checkpoint arrays deterministic. */\nconst unique = (values: readonly string[]): readonly string[] => [...new Set(values)];\n\n/** Application-owned effect boundary; adapters must apply the supplied idempotency key at their side-effect boundary. */\nexport interface FlowDurableEffectPort {\n  readonly compensateAsync?: (input: {\n    readonly run: FlowDurableRun;\n    readonly work: FlowDurableWork;\n  }) => Promise<void>;\n  readonly executeAsync: (input: {\n    readonly idempotencyKey: string;\n    readonly run: FlowDurableRun;\n    readonly work: FlowDurableWork;\n  }) => Promise<void>;\n  /**\n   * Query the provider's idempotency boundary before a protected replay. A provider must return\n   * `delivered` only when the stable key proves that the original effect completed.\n   */\n  readonly reconcileAsync?: (input: {\n    readonly idempotencyKey: string;\n    readonly run: FlowDurableRun;\n    readonly work: FlowDurableWork;\n  }) => Promise<'delivered' | 'unknown'>;\n}\n\n/** Observable outcome for every delivery claimed by one bounded worker tick. */\nexport interface FlowWorkerOutcome {\n  readonly error?: string;\n  readonly status:\n    | 'already_completed'\n    | 'cancelled'\n    | 'failed'\n    | 'lost_lease'\n    | 'retry_scheduled'\n    | 'succeeded'\n    | 'waiting_approval';\n  readonly workId: string;\n}\n\n/** Summary of one worker tick; delivery remains at-least-once until fenced completion. */\nexport interface FlowWorkerResult {\n  readonly claimedWorkIds: readonly string[];\n  readonly outcomes: readonly FlowWorkerOutcome[];\n  readonly recoveredWorkIds: readonly string[];\n}\n"]}

package/dist/features/execution/domain/calculateRetryDueAt.d.ts

@@ -0,0 +1,4 @@
+import type { FlowRetryPolicy } from '../../../types/durableExecution.js';
+/*** Calculate an exponential retry time from persisted attempt state without ambient time. */
+export declare const calculateRetryDueAt: (now: Date, completedAttempt: number, policy: FlowRetryPolicy) => string;
+//# sourceMappingURL=calculateRetryDueAt.d.ts.map

package/dist/features/execution/domain/calculateRetryDueAt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculateRetryDueAt.d.ts","sourceRoot":"","sources":["../../../../src/features/execution/domain/calculateRetryDueAt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,GAC9B,KAAK,IAAI,EACT,kBAAkB,MAAM,EACxB,QAAQ,eAAe,KACtB,MAaF,CAAC"}

package/dist/features/execution/domain/calculateRetryDueAt.js

@@ -0,0 +1,14 @@
+/*** Calculate an exponential retry time from persisted attempt state without ambient time. */
+export const calculateRetryDueAt = (now, completedAttempt, policy) => {
+    if (!Number.isSafeInteger(completedAttempt) || completedAttempt < 1)
+        throw new Error('FLOW_RETRY_ATTEMPT_INVALID');
+    if (!Number.isSafeInteger(policy.baseDelayMs) || policy.baseDelayMs < 0)
+        throw new Error('FLOW_RETRY_BASE_DELAY_INVALID');
+    if (!Number.isSafeInteger(policy.maxDelayMs) ||
+        policy.maxDelayMs < policy.baseDelayMs ||
+        policy.maxDelayMs < 0)
+        throw new Error('FLOW_RETRY_MAX_DELAY_INVALID');
+    const delay = Math.min(policy.maxDelayMs, policy.baseDelayMs * 2 ** (completedAttempt - 1));
+    return new Date(now.getTime() + delay).toISOString();
+};
+//# sourceMappingURL=calculateRetryDueAt.js.map

package/dist/features/execution/domain/calculateRetryDueAt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calculateRetryDueAt.js","sourceRoot":"","sources":["../../../../src/features/execution/domain/calculateRetryDueAt.ts"],"names":[],"mappings":"AAEA,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,GAAS,EACT,gBAAwB,EACxB,MAAuB,EACf,EAAE;IACV,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW;QACtC,MAAM,CAAC,UAAU,GAAG,CAAC;QAErB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC,CAAC","sourcesContent":["import type { FlowRetryPolicy } from '../../../types/durableExecution.js';\n\n/*** Calculate an exponential retry time from persisted attempt state without ambient time. */\nexport const calculateRetryDueAt = (\n  now: Date,\n  completedAttempt: number,\n  policy: FlowRetryPolicy,\n): string => {\n  if (!Number.isSafeInteger(completedAttempt) || completedAttempt < 1)\n    throw new Error('FLOW_RETRY_ATTEMPT_INVALID');\n  if (!Number.isSafeInteger(policy.baseDelayMs) || policy.baseDelayMs < 0)\n    throw new Error('FLOW_RETRY_BASE_DELAY_INVALID');\n  if (\n    !Number.isSafeInteger(policy.maxDelayMs) ||\n    policy.maxDelayMs < policy.baseDelayMs ||\n    policy.maxDelayMs < 0\n  )\n    throw new Error('FLOW_RETRY_MAX_DELAY_INVALID');\n  const delay = Math.min(policy.maxDelayMs, policy.baseDelayMs * 2 ** (completedAttempt - 1));\n  return new Date(now.getTime() + delay).toISOString();\n};\n"]}

package/dist/features/execution/domain/createDurableRun.d.ts

@@ -0,0 +1,7 @@
+import type { FlowDefinitionRef, FlowDurableRun } from '../../../types/durableExecution.js';
+/*** Create a revision-zero run pinned permanently to one published flow definition. */
+export declare const createDurableRun: (input: {
+    readonly flow: FlowDefinitionRef;
+    readonly id: string;
+}, now: Date) => FlowDurableRun;
+//# sourceMappingURL=createDurableRun.d.ts.map

package/dist/features/execution/domain/createDurableRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDurableRun.d.ts","sourceRoot":"","sources":["../../../../src/features/execution/domain/createDurableRun.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAE5F,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,GAC3B,OAAO;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAChE,KAAK,IAAI,KACR,cAOD,CAAC"}

package/dist/features/execution/domain/createDurableRun.js

@@ -0,0 +1,10 @@
+/*** Create a revision-zero run pinned permanently to one published flow definition. */
+export const createDurableRun = (input, now) => ({
+    createdAt: now.toISOString(),
+    flow: { ...input.flow },
+    id: input.id,
+    revision: 0,
+    status: 'queued',
+    updatedAt: now.toISOString(),
+});
+//# sourceMappingURL=createDurableRun.js.map

package/dist/features/execution/domain/createDurableRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDurableRun.js","sourceRoot":"","sources":["../../../../src/features/execution/domain/createDurableRun.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAgE,EAChE,GAAS,EACO,EAAE,CAAC,CAAC;IACpB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;IACvB,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;CAC7B,CAAC,CAAC","sourcesContent":["import type { FlowDefinitionRef, FlowDurableRun } from '../../../types/durableExecution.js';\n\n/*** Create a revision-zero run pinned permanently to one published flow definition. */\nexport const createDurableRun = (\n  input: { readonly flow: FlowDefinitionRef; readonly id: string },\n  now: Date,\n): FlowDurableRun => ({\n  createdAt: now.toISOString(),\n  flow: { ...input.flow },\n  id: input.id,\n  revision: 0,\n  status: 'queued',\n  updatedAt: now.toISOString(),\n});\n"]}

package/dist/features/execution/domain/createRetryWork.d.ts

@@ -0,0 +1,4 @@
+import type { FlowDurableWork, FlowRetryPolicy } from '../../../types/durableExecution.js';
+/*** Create the next immutable work attempt from a completed attempt and controlled clock. */
+export declare const createRetryWork: (completed: FlowDurableWork, now: Date, policy: FlowRetryPolicy) => FlowDurableWork;
+//# sourceMappingURL=createRetryWork.d.ts.map

package/dist/features/execution/domain/createRetryWork.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRetryWork.d.ts","sourceRoot":"","sources":["../../../../src/features/execution/domain/createRetryWork.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG3F,6FAA6F;AAC7F,eAAO,MAAM,eAAe,GAC1B,WAAW,eAAe,EAC1B,KAAK,IAAI,EACT,QAAQ,eAAe,KACtB,eAaD,CAAC"}

package/dist/features/execution/domain/createRetryWork.js

@@ -0,0 +1,17 @@
+import { calculateRetryDueAt } from './calculateRetryDueAt.js';
+/*** Create the next immutable work attempt from a completed attempt and controlled clock. */
+export const createRetryWork = (completed, now, policy) => ({
+    ...(completed.idempotencyKey === undefined ? {} : { idempotencyKey: completed.idempotencyKey }),
+    attempt: completed.attempt + 1,
+    dueAt: calculateRetryDueAt(now, completed.attempt, policy),
+    effectKind: completed.effectKind,
+    flow: { ...completed.flow },
+    id: `${completed.runId}:attempt:${completed.attempt + 1}`,
+    runId: completed.runId,
+    ...(completed.securityOperation === undefined
+        ? {}
+        : { securityOperation: completed.securityOperation }),
+    ...(completed.stepId === undefined ? {} : { stepId: completed.stepId }),
+    status: 'ready',
+});
+//# sourceMappingURL=createRetryWork.js.map

package/dist/features/execution/domain/createRetryWork.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRetryWork.js","sourceRoot":"","sources":["../../../../src/features/execution/domain/createRetryWork.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,SAA0B,EAC1B,GAAS,EACT,MAAuB,EACN,EAAE,CAAC,CAAC;IACrB,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;IAC/F,OAAO,EAAE,SAAS,CAAC,OAAO,GAAG,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1D,UAAU,EAAE,SAAS,CAAC,UAAU;IAChC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE;IAC3B,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,YAAY,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE;IACzD,KAAK,EAAE,SAAS,CAAC,KAAK;IACtB,GAAG,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,CAAC;IACvD,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IACvE,MAAM,EAAE,OAAO;CAChB,CAAC,CAAC","sourcesContent":["import type { FlowDurableWork, FlowRetryPolicy } from '../../../types/durableExecution.js';\nimport { calculateRetryDueAt } from './calculateRetryDueAt.js';\n\n/*** Create the next immutable work attempt from a completed attempt and controlled clock. */\nexport const createRetryWork = (\n  completed: FlowDurableWork,\n  now: Date,\n  policy: FlowRetryPolicy,\n): FlowDurableWork => ({\n  ...(completed.idempotencyKey === undefined ? {} : { idempotencyKey: completed.idempotencyKey }),\n  attempt: completed.attempt + 1,\n  dueAt: calculateRetryDueAt(now, completed.attempt, policy),\n  effectKind: completed.effectKind,\n  flow: { ...completed.flow },\n  id: `${completed.runId}:attempt:${completed.attempt + 1}`,\n  runId: completed.runId,\n  ...(completed.securityOperation === undefined\n    ? {}\n    : { securityOperation: completed.securityOperation }),\n  ...(completed.stepId === undefined ? {} : { stepId: completed.stepId }),\n  status: 'ready',\n});\n"]}

package/dist/features/execution/domain/isCronDueAt.d.ts

@@ -0,0 +1,7 @@
+/** Determine whether one UTC instant matches a five-field POSIX cron expression in an IANA zone. */
+export declare const isCronDueAt: (input: {
+    readonly cron: string;
+    readonly now: Date;
+    readonly timezone?: string;
+}) => boolean;
+//# sourceMappingURL=isCronDueAt.d.ts.map

package/dist/features/execution/domain/isCronDueAt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCronDueAt.d.ts","sourceRoot":"","sources":["../../../../src/features/execution/domain/isCronDueAt.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,eAAO,MAAM,WAAW,GAAI,OAAO;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,KAAG,OAuBH,CAAC"}

package/dist/features/execution/domain/isCronDueAt.js

@@ -0,0 +1,114 @@
+/** Determine whether one UTC instant matches a five-field POSIX cron expression in an IANA zone. */
+export const isCronDueAt = (input) => {
+    const fields = input.cron.trim().split(/\s+/);
+    if (fields.length !== 5)
+        throw new Error('FLOW_CRON_INVALID');
+    const local = localParts(input.now, input.timezone ?? 'Etc/UTC');
+    const [minute, hour, dayOfMonth, month, dayOfWeek] = fields;
+    if (minute === undefined ||
+        hour === undefined ||
+        dayOfMonth === undefined ||
+        month === undefined ||
+        dayOfWeek === undefined)
+        throw new Error('FLOW_CRON_INVALID');
+    const minuteMatches = matchesField(minute, local.minute, 0, 59);
+    const hourMatches = matchesField(hour, local.hour, 0, 23);
+    const monthMatches = matchesField(month, local.month, 1, 12);
+    const dayOfMonthMatches = matchesField(dayOfMonth, local.day, 1, 31);
+    const dayOfWeekMatches = matchesField(dayOfWeek, local.dayOfWeek, 0, 7);
+    const dayMatches = dayOfMonth === '*' || dayOfWeek === '*'
+        ? dayOfMonthMatches && dayOfWeekMatches
+        : dayOfMonthMatches || dayOfWeekMatches;
+    return minuteMatches && hourMatches && monthMatches && dayMatches;
+};
+/** Format a UTC instant into its real local wall-clock fields; duplicate fall-back instants remain distinct instants. */
+const localParts = (now, timezone) => {
+    try {
+        const parts = new Intl.DateTimeFormat('en-US', {
+            day: 'numeric',
+            hour: 'numeric',
+            hourCycle: 'h23',
+            minute: 'numeric',
+            month: 'numeric',
+            timeZone: timezone,
+            weekday: 'short',
+        }).formatToParts(now);
+        const read = (type) => parts.find((part) => part.type === type)?.value ?? invalidTimezone();
+        return {
+            day: Number(read('day')),
+            dayOfWeek: weekday(read('weekday')),
+            hour: Number(read('hour')),
+            minute: Number(read('minute')),
+            month: Number(read('month')),
+        };
+    }
+    catch {
+        throw new Error('FLOW_CRON_TIMEZONE_INVALID');
+    }
+};
+/** Match one POSIX cron field including lists, ranges, and positive step values. */
+const matchesField = (field, value, minimum, maximum) => field.split(',').some((part) => matchesPart(part, value, minimum, maximum));
+/** Match one validated cron list member. */
+const matchesPart = (part, value, minimum, maximum) => {
+    const [rangePart, stepPart] = part.split('/');
+    if (part.split('/').length > 2 || rangePart === undefined)
+        throw new Error('FLOW_CRON_INVALID');
+    const step = stepPart === undefined ? 1 : parseValue(stepPart, 1, maximum - minimum + 1);
+    const [start, end] = parseRange(rangePart, minimum, maximum);
+    return value >= start && value <= end && (value - start) % step === 0;
+};
+/** Parse a wildcard, number, or inclusive numeric range. */
+const parseRange = (range, minimum, maximum) => {
+    if (range === '*')
+        return [minimum, maximum];
+    const values = range.split('-');
+    if (values.length === 1) {
+        const [single] = values;
+        if (single === undefined)
+            throw new Error('FLOW_CRON_INVALID');
+        const value = parseValue(single, minimum, maximum);
+        return [value, value];
+    }
+    if (values.length !== 2 || values[0] === undefined || values[1] === undefined)
+        throw new Error('FLOW_CRON_INVALID');
+    const start = parseValue(values[0], minimum, maximum);
+    const end = parseValue(values[1], minimum, maximum);
+    if (end < start)
+        throw new Error('FLOW_CRON_INVALID');
+    return [start, end];
+};
+/** Parse one strict POSIX cron integer. */
+const parseValue = (value, minimum, maximum) => {
+    if (!/^\d+$/.test(value))
+        throw new Error('FLOW_CRON_INVALID');
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum)
+        throw new Error('FLOW_CRON_INVALID');
+    return parsed;
+};
+/** Map English short weekday names produced by the fixed formatter to POSIX weekday values. */
+const weekday = (value) => {
+    switch (value) {
+        case 'Sun':
+            return 0;
+        case 'Mon':
+            return 1;
+        case 'Tue':
+            return 2;
+        case 'Wed':
+            return 3;
+        case 'Thu':
+            return 4;
+        case 'Fri':
+            return 5;
+        case 'Sat':
+            return 6;
+        default:
+            return invalidTimezone();
+    }
+};
+/** Keep an impossible formatter shape distinct from a cron syntax error. */
+const invalidTimezone = () => {
+    throw new Error('FLOW_CRON_TIMEZONE_INVALID');
+};
+//# sourceMappingURL=isCronDueAt.js.map

package/dist/features/execution/domain/isCronDueAt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCronDueAt.js","sourceRoot":"","sources":["../../../../src/features/execution/domain/isCronDueAt.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAI3B,EAAW,EAAE;IACZ,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC;IAC5D,IACE,MAAM,KAAK,SAAS;QACpB,IAAI,KAAK,SAAS;QAClB,UAAU,KAAK,SAAS;QACxB,KAAK,KAAK,SAAS;QACnB,SAAS,KAAK,SAAS;QAEvB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GACd,UAAU,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG;QACrC,CAAC,CAAC,iBAAiB,IAAI,gBAAgB;QACvC,CAAC,CAAC,iBAAiB,IAAI,gBAAgB,CAAC;IAC5C,OAAO,aAAa,IAAI,WAAW,IAAI,YAAY,IAAI,UAAU,CAAC;AACpE,CAAC,CAAC;AAEF,yHAAyH;AACzH,MAAM,UAAU,GAAG,CACjB,GAAS,EACT,QAAgB,EAOhB,EAAE;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YAC7C,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,IAAkC,EAAU,EAAE,CAC1D,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC;QACvE,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC7B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,OAAe,EAAE,OAAe,EAAW,EAAE,CAC/F,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9E,4CAA4C;AAC5C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAAe,EAAE,OAAe,EAAW,EAAE;IAC7F,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,KAAK,IAAI,KAAK,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe,EAA6B,EAAE;IAChG,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;QAC3E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,GAAG,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,2CAA2C;AAC3C,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe,EAAU,EAAE;IAC7E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,IAAI,MAAM,GAAG,OAAO;QACvE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE;IACxC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX;YACE,OAAO,eAAe,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,eAAe,GAAG,GAAU,EAAE;IAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,CAAC,CAAC","sourcesContent":["/** Determine whether one UTC instant matches a five-field POSIX cron expression in an IANA zone. */\nexport const isCronDueAt = (input: {\n  readonly cron: string;\n  readonly now: Date;\n  readonly timezone?: string;\n}): boolean => {\n  const fields = input.cron.trim().split(/\\s+/);\n  if (fields.length !== 5) throw new Error('FLOW_CRON_INVALID');\n  const local = localParts(input.now, input.timezone ?? 'Etc/UTC');\n  const [minute, hour, dayOfMonth, month, dayOfWeek] = fields;\n  if (\n    minute === undefined ||\n    hour === undefined ||\n    dayOfMonth === undefined ||\n    month === undefined ||\n    dayOfWeek === undefined\n  )\n    throw new Error('FLOW_CRON_INVALID');\n  const minuteMatches = matchesField(minute, local.minute, 0, 59);\n  const hourMatches = matchesField(hour, local.hour, 0, 23);\n  const monthMatches = matchesField(month, local.month, 1, 12);\n  const dayOfMonthMatches = matchesField(dayOfMonth, local.day, 1, 31);\n  const dayOfWeekMatches = matchesField(dayOfWeek, local.dayOfWeek, 0, 7);\n  const dayMatches =\n    dayOfMonth === '*' || dayOfWeek === '*'\n      ? dayOfMonthMatches && dayOfWeekMatches\n      : dayOfMonthMatches || dayOfWeekMatches;\n  return minuteMatches && hourMatches && monthMatches && dayMatches;\n};\n\n/** Format a UTC instant into its real local wall-clock fields; duplicate fall-back instants remain distinct instants. */\nconst localParts = (\n  now: Date,\n  timezone: string,\n): {\n  readonly day: number;\n  readonly dayOfWeek: number;\n  readonly hour: number;\n  readonly minute: number;\n  readonly month: number;\n} => {\n  try {\n    const parts = new Intl.DateTimeFormat('en-US', {\n      day: 'numeric',\n      hour: 'numeric',\n      hourCycle: 'h23',\n      minute: 'numeric',\n      month: 'numeric',\n      timeZone: timezone,\n      weekday: 'short',\n    }).formatToParts(now);\n    const read = (type: Intl.DateTimeFormatPartTypes): string =>\n      parts.find((part) => part.type === type)?.value ?? invalidTimezone();\n    return {\n      day: Number(read('day')),\n      dayOfWeek: weekday(read('weekday')),\n      hour: Number(read('hour')),\n      minute: Number(read('minute')),\n      month: Number(read('month')),\n    };\n  } catch {\n    throw new Error('FLOW_CRON_TIMEZONE_INVALID');\n  }\n};\n\n/** Match one POSIX cron field including lists, ranges, and positive step values. */\nconst matchesField = (field: string, value: number, minimum: number, maximum: number): boolean =>\n  field.split(',').some((part) => matchesPart(part, value, minimum, maximum));\n\n/** Match one validated cron list member. */\nconst matchesPart = (part: string, value: number, minimum: number, maximum: number): boolean => {\n  const [rangePart, stepPart] = part.split('/');\n  if (part.split('/').length > 2 || rangePart === undefined) throw new Error('FLOW_CRON_INVALID');\n  const step = stepPart === undefined ? 1 : parseValue(stepPart, 1, maximum - minimum + 1);\n  const [start, end] = parseRange(rangePart, minimum, maximum);\n  return value >= start && value <= end && (value - start) % step === 0;\n};\n\n/** Parse a wildcard, number, or inclusive numeric range. */\nconst parseRange = (range: string, minimum: number, maximum: number): readonly [number, number] => {\n  if (range === '*') return [minimum, maximum];\n  const values = range.split('-');\n  if (values.length === 1) {\n    const [single] = values;\n    if (single === undefined) throw new Error('FLOW_CRON_INVALID');\n    const value = parseValue(single, minimum, maximum);\n    return [value, value];\n  }\n  if (values.length !== 2 || values[0] === undefined || values[1] === undefined)\n    throw new Error('FLOW_CRON_INVALID');\n  const start = parseValue(values[0], minimum, maximum);\n  const end = parseValue(values[1], minimum, maximum);\n  if (end < start) throw new Error('FLOW_CRON_INVALID');\n  return [start, end];\n};\n\n/** Parse one strict POSIX cron integer. */\nconst parseValue = (value: string, minimum: number, maximum: number): number => {\n  if (!/^\\d+$/.test(value)) throw new Error('FLOW_CRON_INVALID');\n  const parsed = Number(value);\n  if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum)\n    throw new Error('FLOW_CRON_INVALID');\n  return parsed;\n};\n\n/** Map English short weekday names produced by the fixed formatter to POSIX weekday values. */\nconst weekday = (value: string): number => {\n  switch (value) {\n    case 'Sun':\n      return 0;\n    case 'Mon':\n      return 1;\n    case 'Tue':\n      return 2;\n    case 'Wed':\n      return 3;\n    case 'Thu':\n      return 4;\n    case 'Fri':\n      return 5;\n    case 'Sat':\n      return 6;\n    default:\n      return invalidTimezone();\n  }\n};\n\n/** Keep an impossible formatter shape distinct from a cron syntax error. */\nconst invalidTimezone = (): never => {\n  throw new Error('FLOW_CRON_TIMEZONE_INVALID');\n};\n"]}

package/dist/features/execution/ports/FlowPersistencePort.d.ts

@@ -0,0 +1,34 @@
+import type { FlowDurableRun, FlowDurableWork, FlowOutboxRecord } from '../../../types/durableExecution.js';
+export interface FlowPersistencePort {
+    readonly cancelRunWorkAsync: (runId: string) => Promise<readonly string[]>;
+    readonly claimDueWorkAsync: (input: {
+        readonly leaseDurationMs: number;
+        readonly limit: number;
+        readonly now: Date;
+        readonly workerId: string;
+    }) => Promise<readonly FlowDurableWork[]>;
+    readonly completeWorkAsync: (input: {
+        readonly id: string;
+        readonly leaseFencingToken: number;
+        readonly now: Date;
+        readonly workerId: string;
+    }) => Promise<boolean>;
+    readonly createOutboxAsync: (record: FlowOutboxRecord) => Promise<void>;
+    readonly createRunAsync: (run: FlowDurableRun) => Promise<void>;
+    readonly enqueueWorkAsync: (work: FlowDurableWork) => Promise<void>;
+    readonly markOutboxDeliveredAsync: (id: string) => Promise<boolean>;
+    readonly readOutboxAsync: (id: string) => Promise<FlowOutboxRecord | undefined>;
+    readonly readRunAsync: (id: string) => Promise<FlowDurableRun | undefined>;
+    readonly recoverExpiredClaimsAsync: (now: Date) => Promise<readonly string[]>;
+    readonly releaseWorkAsync: (input: {
+        readonly dueAt: string;
+        readonly id: string;
+        readonly leaseFencingToken: number;
+        readonly workerId: string;
+    }) => Promise<boolean>;
+    readonly transitionRunAsync: (input: {
+        readonly expectedRevision: number;
+        readonly run: FlowDurableRun;
+    }) => Promise<boolean>;
+}
+//# sourceMappingURL=FlowPersistencePort.d.ts.map

package/dist/features/execution/ports/FlowPersistencePort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FlowPersistencePort.d.ts","sourceRoot":"","sources":["../../../../src/features/execution/ports/FlowPersistencePort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC3E,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,QAAQ,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAChF,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC3E,QAAQ,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE;QACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB"}

package/dist/features/execution/ports/FlowPersistencePort.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FlowPersistencePort.js.map

package/dist/features/execution/ports/FlowPersistencePort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FlowPersistencePort.js","sourceRoot":"","sources":["../../../../src/features/execution/ports/FlowPersistencePort.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  FlowDurableRun,\n  FlowDurableWork,\n  FlowOutboxRecord,\n} from '../../../types/durableExecution.js';\n\nexport interface FlowPersistencePort {\n  readonly cancelRunWorkAsync: (runId: string) => Promise<readonly string[]>;\n  readonly claimDueWorkAsync: (input: {\n    readonly leaseDurationMs: number;\n    readonly limit: number;\n    readonly now: Date;\n    readonly workerId: string;\n  }) => Promise<readonly FlowDurableWork[]>;\n  readonly completeWorkAsync: (input: {\n    readonly id: string;\n    readonly leaseFencingToken: number;\n    readonly now: Date;\n    readonly workerId: string;\n  }) => Promise<boolean>;\n  readonly createOutboxAsync: (record: FlowOutboxRecord) => Promise<void>;\n  readonly createRunAsync: (run: FlowDurableRun) => Promise<void>;\n  readonly enqueueWorkAsync: (work: FlowDurableWork) => Promise<void>;\n  readonly markOutboxDeliveredAsync: (id: string) => Promise<boolean>;\n  readonly readOutboxAsync: (id: string) => Promise<FlowOutboxRecord | undefined>;\n  readonly readRunAsync: (id: string) => Promise<FlowDurableRun | undefined>;\n  readonly recoverExpiredClaimsAsync: (now: Date) => Promise<readonly string[]>;\n  readonly releaseWorkAsync: (input: {\n    readonly dueAt: string;\n    readonly id: string;\n    readonly leaseFencingToken: number;\n    readonly workerId: string;\n  }) => Promise<boolean>;\n  readonly transitionRunAsync: (input: {\n    readonly expectedRevision: number;\n    readonly run: FlowDurableRun;\n  }) => Promise<boolean>;\n}\n"]}

package/dist/features/security/application/createFlowSecurityPort.js

@@ -17,9 +17,9 @@ const authorizeAsync = async (input, operation) => {
     if (!isGranted(input.grants, identity.actor, identity.capability))
         return denyAsync(input.audit, identity, targetHost, 'permission_denied');
     const approval = await input.approvalStore.getAsync(identity);
-    if (!approval || approval.status === 'pending')
+    if (approval?.status === 'pending')
         return denyAsync(input.audit, identity, targetHost, 'approval_pending');
-    if (approval.status !== 'approved' || !sameIdentity(approval.operation, identity))
+    if (approval?.status !== 'approved' || !sameIdentity(approval.operation, identity))
         return denyAsync(input.audit, identity, targetHost, 'approval_rejected');
     if (!(await input.operationStore.claimAsync(identity)))
         return denyAsync(input.audit, identity, targetHost, 'idempotency_conflict');