@dudousxd/nestjs-durable-core 0.69.0 → 0.70.0

package/dist/index.d.cts

@@ -1260,6 +1260,16 @@ interface RunValueFacetRow {
     value: string | null;
     count: number;
 }
+/**
+ * The order {@link StateStore.runValueFacets} returns rows in, and the reason a caller can page
+ * them: most runs first, ties broken alphabetically, the absent bucket (`null`) last — and tags the
+ * engine mints one of per key after everything else, since they otherwise crowd out every tag a
+ * human wrote (see `ENGINE_MINTED_TAG_PREFIXES`).
+ *
+ * Fixed, not incidental: an unordered listing cannot be paged, because page two would be taken over
+ * a different arrangement of the same rows and would both repeat and skip.
+ */
+type RunValueFacetOrder = 'engine-tags-last, count desc, value asc, null last';
 /**
  * How much of the store {@link StateStore.runValueFacets} may read to answer.
  *
@@ -1267,15 +1277,35 @@ interface RunValueFacetRow {
  * unbounded in principle — a run tagged `singleton:<key>` mints a new tag per key — so a picker asks
  * for the top slice rather than the whole domain, and keeps free text for everything else.
  *
- * `scan` bounds the RUNS READ, and applies to the axes whose values are not a column of the run row
- * being counted — `tag` (inside a JSON array column) and the two attribute axes (a side table). Those
- * report counts over the newest `scan` matching runs rather than over all of them: a bounded,
- * deliberately approximate answer, where the alternative is a full scan on every keystroke. The
- * column axes (`workflow`, `status`, `origin`, `namespace`) are exact and ignore `scan`.
+ * `scan` bounds the RUNS READ, for a store that cannot group an axis in the database and has to
+ * count it in memory instead. Those axes report over the newest `scan` matching runs rather than
+ * over all of them — a bounded, deliberately approximate answer, where the alternative is a full
+ * scan on every keystroke.
+ *
+ * Which axes those are is a property of the ADAPTER, not of the axis: the column axes are a `GROUP
+ * BY` everywhere, and an adapter that can expand a JSON array and join its attribute side table (the
+ * MikroORM one does) answers `tag` and the attribute axes exactly too, ignoring `scan` entirely.
  */
 interface RunValueFacetOptions {
     limit?: number | undefined;
     scan?: number | undefined;
+    /**
+     * How many rows to skip, for a picker that pages as it scrolls. Meaningful only because the
+     * ordering is fixed (see {@link RunValueFacetRow}), so page two continues page one instead of
+     * re-shuffling it.
+     *
+     * On an axis answered from a bounded scan rather than a `GROUP BY` (see {@link scan}), paging is
+     * over that window: values outside it were never candidates on page one either.
+     */
+    offset?: number | undefined;
+    /**
+     * Narrow to values CONTAINING this text, case-insensitively — what a picker's search box sends.
+     *
+     * Server-side on purpose. A picker that filters an already-fetched page can only search what it
+     * happened to receive, so a rare value is unfindable precisely when searching is the only way to
+     * reach it: the top slice it was cut from is the reason the operator is typing.
+     */
+    search?: string | undefined;
 }
 /** The transaction handle `StateStore.transaction` hands to its work callback. */
 interface StoreTransaction {
@@ -3692,6 +3722,15 @@ declare class WorkflowEngine {
     /**
      * Resume each run only if this instance can acquire its recovery lease — so when several
      * replicas recover or poll at once, each run is picked up by exactly one of them.
+     *
+     * A run this instance cannot resume is SKIPPED, not allowed to abort the batch. The canonical
+     * case is skew protection: mid-rolling-deploy a pod leases a run whose workflow it does not have
+     * and `resume` throws by design — but the rest of the batch is runs it can drive perfectly well,
+     * and every caller here is a recovery sweep. Letting the first such run end the loop means one
+     * row stops recovery for the whole deployment, and (since the callers are pollers) sends the
+     * rejection into a lifecycle hook. Skipping leaves the run locked only until its lease expires,
+     * for a pod that does have the workflow — which is exactly what the skew-protection error asks
+     * for. Same posture as `publishEvent`'s per-subscriber isolation.
      */
     private resumeLeased;
     /**
@@ -4522,20 +4561,20 @@ declare function isEngineMintedTag(value: string | null): boolean;
  * Is this axis a plain column on the runs table, and so countable with a `GROUP BY` over the whole
  * matching set?
  *
- * The other three are not, in the same way for the same reason — the value isn't in a column of the
- * row being counted. A run's tags live inside ONE json array column that no `GROUP BY` portable
- * across sqlite/MySQL/Postgres reaches into, and its search attributes live in a side table whose
- * join back to the filtered run set differs per adapter. Those axes are counted in-process over a
- * bounded scan instead ({@link runValueFacetsFromRuns}), so their counts describe that window rather
- * than the whole store — which is why {@link RunValueFacetOptions.scan} exists.
+ * The other three are not: the value isn't in a column of the row being counted. A run's tags live
+ * inside ONE json array column, and its search attributes in a side table. Neither has a form that
+ * is the same across sqlite/MySQL/Postgres — each engine expands a JSON array its own way — so an
+ * adapter either writes that dialect SQL (the MikroORM one does, and answers those axes exactly) or
+ * counts them in-process over a bounded scan ({@link runValueFacetsFromRuns}), where the counts
+ * describe that window rather than the whole store. This function is what the second kind uses.
  */
 declare function axisIsRunColumn(axis: RunValueAxis): axis is {
     field: 'workflow' | 'status' | 'origin' | 'namespace';
 };
 /**
- * Fold, order and bound raw `(value, count)` rows into the answer callers see: highest count first,
- * ties broken alphabetically so a picker's order is stable between polls, the unattributed bucket
- * (`null`) last, and no more than `limit` rows.
+ * Fold, order, search and bound raw `(value, count)` rows into the answer callers see: highest count
+ * first, ties broken alphabetically so a picker's order is stable between polls (and therefore
+ * pageable), the unattributed bucket (`null`) last, and one `limit`-sized page from `offset`.
  *
  * Every store pipes its `GROUP BY` through this — the same role {@link mergeRunFacetRows} plays for
  * status/origin counts — so a picker lists the same values in the same order whichever adapter is
@@ -5233,4 +5272,4 @@ declare class InMemoryTransport implements Transport, ControlPlane {
     onControl(handler: (msg: ControlMessage) => void): void;
 }
 
-export { type AccumulatorHost, type Admission, type AdmissionBackend, type AdmissionItem, type AnnouncedWorkflow, type AnnouncementEvidence, type AttributeFilter, type AttributeOp, type AttributePredicateOperand, type AttributeValue, type BackoffStrategy, type BlockedDispatch, type BlockedResolution, CONTROL_FLOW_SIGNAL, CURRENT_PROTOCOL_VERSION, type CapabilityRequirement, type ChildCallOptions, CodecStateStore, ContinueAsNew, type ControlMessage, type ControlPlane, DEFAULT_PARTITION, DURABLE_OPTIONS, DURABLE_OPTIONS_CANONICAL, DURABLE_STEP_CONFIG, DURABLE_STEP_NAME, type Disagreement, type DispatchDiagnostics, type DispatchPlan, type DurableExecution, type DurableExecutionWrapper, type DurableTopology, type DurableWebhook, DurableWorkflow, ENGINE_MINTED_TAG_PREFIXES, EVENT_BUFFER_SCAN_LIMIT, EVENT_TOKEN_PREFIX, type EngineEvent, type EngineEventType, type EngineListener, Entities, type EntityConfig, type EntityHandler, type EntityHost, EventAccumulators, type EventBatchConfig, FatalError, GatherError, type GroupHealth, type Heartbeat, type HeartbeatSighting, type HeartbeatStatus, type HistoryEvent, InMemoryAdmissionBackend, InMemoryStateStore, InMemoryTransport, type InferSearchAttributes, LEGACY_V1_CAPABILITIES, LEGACY_V1_PROTOCOL, type MetricsCollector, type MetricsSnapshot, type NamedTransport, type NegotiateOptions, type NegotiationOutcome, type NegotiationReason, type NegotiationResult, NonDeterminismError, type PartitionSighting, type PayloadCodec, type QueueConfig, QueueController, RUN_VALUE_FACET_LIMIT, RUN_VALUE_FACET_SCAN, type RawWorkerDescriptor, RemoteStepError, RemoteStepTimeout, type RemoteTask, RemoteWorkflowExecutor, RemoteWorkflowTimeout, type RetentionPolicy, type RoutableDispatch, type RoutableResolution, type RoutingResolution, type RunAttributeRow, type RunDetail, type RunDispatcher, type RunFacetQuery, type RunFacetRow, RunGateway, type RunListItem, type RunQuery, type RunReply, type RunReplyResult, type RunRequest, type RunRequestKind, type RunResult, type RunSchedulesOptions, type RunStatus, type RunValueAxis, type RunValueFacetOptions, type RunValueFacetRow, type RunWaiting, STATE_STORE, STATE_STORE_CANONICAL, type ScalarAttributeFilter, type ScheduledWorkflow, type SearchAttributes, type SearchAttributesSchema, SignalTimeoutError, type SignalWaiter, type SingletonConfig, SingletonQueueFullError, StandardSchemaV1, type StartOptions, type StartRunMessage, type StateStore, type StepCheckpoint, type StepConfig, type StepDef, type StepDispatchOpts, type StepError, type StepEvent, type StepHandler, type StepInterceptor, type StepInvocation, type StepKind, type StepLogger, type StepOptions, type StepRef, type StepResult, type StepUndo, type StoreTransaction, type SubProcessHandle, TERMINAL_RUN_STATUSES, TRANSPORT, TRANSPORT_CANONICAL, type TenantEvent, type Transport, type UndoOf, type UpdateResult, type UpdateValidator, VERSION_UNDECLARED_TAG, WORKFLOW_NAME_KEY, type WireDates, type WorkerAdjust, type WorkerConcurrencyStatus, type WorkerDescriptor, type WorkerHeartbeat, type WorkerLifecycle, type WorkerStatus, type WorkflowAnnouncement, WorkflowBlocked, type WorkflowClass, type WorkflowCommand, type WorkflowCtx, type WorkflowDecision, type WorkflowDirectory, WorkflowEngine, type WorkflowEngineDeps, type WorkflowExecutor, type WorkflowHandler, type WorkflowInputOf, type WorkflowOutputOf, type WorkflowRef, type WorkflowRegistration, type WorkflowRun, type WorkflowStartClient, type WorkflowStepEvent, WorkflowSuspended, type WorkflowTask, aggregateAnnouncements, announcementsOf, applyAttributeQuery, attributeColumnFor, attributeOperand, attributePredicateOperands, axisIsRunColumn, bindWorkflowClass, breakpointToken, buildWorkflowDirectory, canRoute, capableWorkers, classifyWaiterToken, clearDurableExecutionWrappers, collectMetrics, controlPlaneDescriptor, coveredTokens, createStepLogger, currentStep, currentWorkflowCtx, debug, describeWorker, descriptorHash, error, eventMatchOf, eventMatches, eventNameOf, eventPrefix, eventToken, facetOrigin, hasDurableExecutionWrappers, heartbeatStatus, indexWaitersByRun, info, isEngineMintedTag, isEventToken, isLegacyDescriptor, isWorkflowControlFlowSignal, log, matchesAttributes, mergeRunFacetRows, mergeRunValueFacetRows, missingCapabilities, negotiate, normalizeAttributeRows, normalizeDescriptor, observedAnnouncements, parseDuration, partitionOfToken, planDispatch, prevCronFireMs, readSearchAttributes, requiredCapabilities, resolveRouting, resolveRunWaiting, runDurableExecution, runInStepLogger, runInWorkflowCtx, runSchedules, runStepHandler, runValueFacetsFromRuns, sanitizeQueueToken, scheduledRunId, sqlComparator, stepConfigOf, stepId, stepNameOf, sub, subEvent, subProcess, tenantGroup, useDurableExecution, warn, workflowName };
+export { type AccumulatorHost, type Admission, type AdmissionBackend, type AdmissionItem, type AnnouncedWorkflow, type AnnouncementEvidence, type AttributeFilter, type AttributeOp, type AttributePredicateOperand, type AttributeValue, type BackoffStrategy, type BlockedDispatch, type BlockedResolution, CONTROL_FLOW_SIGNAL, CURRENT_PROTOCOL_VERSION, type CapabilityRequirement, type ChildCallOptions, CodecStateStore, ContinueAsNew, type ControlMessage, type ControlPlane, DEFAULT_PARTITION, DURABLE_OPTIONS, DURABLE_OPTIONS_CANONICAL, DURABLE_STEP_CONFIG, DURABLE_STEP_NAME, type Disagreement, type DispatchDiagnostics, type DispatchPlan, type DurableExecution, type DurableExecutionWrapper, type DurableTopology, type DurableWebhook, DurableWorkflow, ENGINE_MINTED_TAG_PREFIXES, EVENT_BUFFER_SCAN_LIMIT, EVENT_TOKEN_PREFIX, type EngineEvent, type EngineEventType, type EngineListener, Entities, type EntityConfig, type EntityHandler, type EntityHost, EventAccumulators, type EventBatchConfig, FatalError, GatherError, type GroupHealth, type Heartbeat, type HeartbeatSighting, type HeartbeatStatus, type HistoryEvent, InMemoryAdmissionBackend, InMemoryStateStore, InMemoryTransport, type InferSearchAttributes, LEGACY_V1_CAPABILITIES, LEGACY_V1_PROTOCOL, type MetricsCollector, type MetricsSnapshot, type NamedTransport, type NegotiateOptions, type NegotiationOutcome, type NegotiationReason, type NegotiationResult, NonDeterminismError, type PartitionSighting, type PayloadCodec, type QueueConfig, QueueController, RUN_VALUE_FACET_LIMIT, RUN_VALUE_FACET_SCAN, type RawWorkerDescriptor, RemoteStepError, RemoteStepTimeout, type RemoteTask, RemoteWorkflowExecutor, RemoteWorkflowTimeout, type RetentionPolicy, type RoutableDispatch, type RoutableResolution, type RoutingResolution, type RunAttributeRow, type RunDetail, type RunDispatcher, type RunFacetQuery, type RunFacetRow, RunGateway, type RunListItem, type RunQuery, type RunReply, type RunReplyResult, type RunRequest, type RunRequestKind, type RunResult, type RunSchedulesOptions, type RunStatus, type RunValueAxis, type RunValueFacetOptions, type RunValueFacetOrder, type RunValueFacetRow, type RunWaiting, STATE_STORE, STATE_STORE_CANONICAL, type ScalarAttributeFilter, type ScheduledWorkflow, type SearchAttributes, type SearchAttributesSchema, SignalTimeoutError, type SignalWaiter, type SingletonConfig, SingletonQueueFullError, StandardSchemaV1, type StartOptions, type StartRunMessage, type StateStore, type StepCheckpoint, type StepConfig, type StepDef, type StepDispatchOpts, type StepError, type StepEvent, type StepHandler, type StepInterceptor, type StepInvocation, type StepKind, type StepLogger, type StepOptions, type StepRef, type StepResult, type StepUndo, type StoreTransaction, type SubProcessHandle, TERMINAL_RUN_STATUSES, TRANSPORT, TRANSPORT_CANONICAL, type TenantEvent, type Transport, type UndoOf, type UpdateResult, type UpdateValidator, VERSION_UNDECLARED_TAG, WORKFLOW_NAME_KEY, type WireDates, type WorkerAdjust, type WorkerConcurrencyStatus, type WorkerDescriptor, type WorkerHeartbeat, type WorkerLifecycle, type WorkerStatus, type WorkflowAnnouncement, WorkflowBlocked, type WorkflowClass, type WorkflowCommand, type WorkflowCtx, type WorkflowDecision, type WorkflowDirectory, WorkflowEngine, type WorkflowEngineDeps, type WorkflowExecutor, type WorkflowHandler, type WorkflowInputOf, type WorkflowOutputOf, type WorkflowRef, type WorkflowRegistration, type WorkflowRun, type WorkflowStartClient, type WorkflowStepEvent, WorkflowSuspended, type WorkflowTask, aggregateAnnouncements, announcementsOf, applyAttributeQuery, attributeColumnFor, attributeOperand, attributePredicateOperands, axisIsRunColumn, bindWorkflowClass, breakpointToken, buildWorkflowDirectory, canRoute, capableWorkers, classifyWaiterToken, clearDurableExecutionWrappers, collectMetrics, controlPlaneDescriptor, coveredTokens, createStepLogger, currentStep, currentWorkflowCtx, debug, describeWorker, descriptorHash, error, eventMatchOf, eventMatches, eventNameOf, eventPrefix, eventToken, facetOrigin, hasDurableExecutionWrappers, heartbeatStatus, indexWaitersByRun, info, isEngineMintedTag, isEventToken, isLegacyDescriptor, isWorkflowControlFlowSignal, log, matchesAttributes, mergeRunFacetRows, mergeRunValueFacetRows, missingCapabilities, negotiate, normalizeAttributeRows, normalizeDescriptor, observedAnnouncements, parseDuration, partitionOfToken, planDispatch, prevCronFireMs, readSearchAttributes, requiredCapabilities, resolveRouting, resolveRunWaiting, runDurableExecution, runInStepLogger, runInWorkflowCtx, runSchedules, runStepHandler, runValueFacetsFromRuns, sanitizeQueueToken, scheduledRunId, sqlComparator, stepConfigOf, stepId, stepNameOf, sub, subEvent, subProcess, tenantGroup, useDurableExecution, warn, workflowName };

package/dist/index.d.ts

@@ -1260,6 +1260,16 @@ interface RunValueFacetRow {
     value: string | null;
     count: number;
 }
+/**
+ * The order {@link StateStore.runValueFacets} returns rows in, and the reason a caller can page
+ * them: most runs first, ties broken alphabetically, the absent bucket (`null`) last — and tags the
+ * engine mints one of per key after everything else, since they otherwise crowd out every tag a
+ * human wrote (see `ENGINE_MINTED_TAG_PREFIXES`).
+ *
+ * Fixed, not incidental: an unordered listing cannot be paged, because page two would be taken over
+ * a different arrangement of the same rows and would both repeat and skip.
+ */
+type RunValueFacetOrder = 'engine-tags-last, count desc, value asc, null last';
 /**
  * How much of the store {@link StateStore.runValueFacets} may read to answer.
  *
@@ -1267,15 +1277,35 @@ interface RunValueFacetRow {
  * unbounded in principle — a run tagged `singleton:<key>` mints a new tag per key — so a picker asks
  * for the top slice rather than the whole domain, and keeps free text for everything else.
  *
- * `scan` bounds the RUNS READ, and applies to the axes whose values are not a column of the run row
- * being counted — `tag` (inside a JSON array column) and the two attribute axes (a side table). Those
- * report counts over the newest `scan` matching runs rather than over all of them: a bounded,
- * deliberately approximate answer, where the alternative is a full scan on every keystroke. The
- * column axes (`workflow`, `status`, `origin`, `namespace`) are exact and ignore `scan`.
+ * `scan` bounds the RUNS READ, for a store that cannot group an axis in the database and has to
+ * count it in memory instead. Those axes report over the newest `scan` matching runs rather than
+ * over all of them — a bounded, deliberately approximate answer, where the alternative is a full
+ * scan on every keystroke.
+ *
+ * Which axes those are is a property of the ADAPTER, not of the axis: the column axes are a `GROUP
+ * BY` everywhere, and an adapter that can expand a JSON array and join its attribute side table (the
+ * MikroORM one does) answers `tag` and the attribute axes exactly too, ignoring `scan` entirely.
  */
 interface RunValueFacetOptions {
     limit?: number | undefined;
     scan?: number | undefined;
+    /**
+     * How many rows to skip, for a picker that pages as it scrolls. Meaningful only because the
+     * ordering is fixed (see {@link RunValueFacetRow}), so page two continues page one instead of
+     * re-shuffling it.
+     *
+     * On an axis answered from a bounded scan rather than a `GROUP BY` (see {@link scan}), paging is
+     * over that window: values outside it were never candidates on page one either.
+     */
+    offset?: number | undefined;
+    /**
+     * Narrow to values CONTAINING this text, case-insensitively — what a picker's search box sends.
+     *
+     * Server-side on purpose. A picker that filters an already-fetched page can only search what it
+     * happened to receive, so a rare value is unfindable precisely when searching is the only way to
+     * reach it: the top slice it was cut from is the reason the operator is typing.
+     */
+    search?: string | undefined;
 }
 /** The transaction handle `StateStore.transaction` hands to its work callback. */
 interface StoreTransaction {
@@ -3692,6 +3722,15 @@ declare class WorkflowEngine {
     /**
      * Resume each run only if this instance can acquire its recovery lease — so when several
      * replicas recover or poll at once, each run is picked up by exactly one of them.
+     *
+     * A run this instance cannot resume is SKIPPED, not allowed to abort the batch. The canonical
+     * case is skew protection: mid-rolling-deploy a pod leases a run whose workflow it does not have
+     * and `resume` throws by design — but the rest of the batch is runs it can drive perfectly well,
+     * and every caller here is a recovery sweep. Letting the first such run end the loop means one
+     * row stops recovery for the whole deployment, and (since the callers are pollers) sends the
+     * rejection into a lifecycle hook. Skipping leaves the run locked only until its lease expires,
+     * for a pod that does have the workflow — which is exactly what the skew-protection error asks
+     * for. Same posture as `publishEvent`'s per-subscriber isolation.
      */
     private resumeLeased;
     /**
@@ -4522,20 +4561,20 @@ declare function isEngineMintedTag(value: string | null): boolean;
  * Is this axis a plain column on the runs table, and so countable with a `GROUP BY` over the whole
  * matching set?
  *
- * The other three are not, in the same way for the same reason — the value isn't in a column of the
- * row being counted. A run's tags live inside ONE json array column that no `GROUP BY` portable
- * across sqlite/MySQL/Postgres reaches into, and its search attributes live in a side table whose
- * join back to the filtered run set differs per adapter. Those axes are counted in-process over a
- * bounded scan instead ({@link runValueFacetsFromRuns}), so their counts describe that window rather
- * than the whole store — which is why {@link RunValueFacetOptions.scan} exists.
+ * The other three are not: the value isn't in a column of the row being counted. A run's tags live
+ * inside ONE json array column, and its search attributes in a side table. Neither has a form that
+ * is the same across sqlite/MySQL/Postgres — each engine expands a JSON array its own way — so an
+ * adapter either writes that dialect SQL (the MikroORM one does, and answers those axes exactly) or
+ * counts them in-process over a bounded scan ({@link runValueFacetsFromRuns}), where the counts
+ * describe that window rather than the whole store. This function is what the second kind uses.
  */
 declare function axisIsRunColumn(axis: RunValueAxis): axis is {
     field: 'workflow' | 'status' | 'origin' | 'namespace';
 };
 /**
- * Fold, order and bound raw `(value, count)` rows into the answer callers see: highest count first,
- * ties broken alphabetically so a picker's order is stable between polls, the unattributed bucket
- * (`null`) last, and no more than `limit` rows.
+ * Fold, order, search and bound raw `(value, count)` rows into the answer callers see: highest count
+ * first, ties broken alphabetically so a picker's order is stable between polls (and therefore
+ * pageable), the unattributed bucket (`null`) last, and one `limit`-sized page from `offset`.
  *
  * Every store pipes its `GROUP BY` through this — the same role {@link mergeRunFacetRows} plays for
  * status/origin counts — so a picker lists the same values in the same order whichever adapter is
@@ -5233,4 +5272,4 @@ declare class InMemoryTransport implements Transport, ControlPlane {
     onControl(handler: (msg: ControlMessage) => void): void;
 }
 
-export { type AccumulatorHost, type Admission, type AdmissionBackend, type AdmissionItem, type AnnouncedWorkflow, type AnnouncementEvidence, type AttributeFilter, type AttributeOp, type AttributePredicateOperand, type AttributeValue, type BackoffStrategy, type BlockedDispatch, type BlockedResolution, CONTROL_FLOW_SIGNAL, CURRENT_PROTOCOL_VERSION, type CapabilityRequirement, type ChildCallOptions, CodecStateStore, ContinueAsNew, type ControlMessage, type ControlPlane, DEFAULT_PARTITION, DURABLE_OPTIONS, DURABLE_OPTIONS_CANONICAL, DURABLE_STEP_CONFIG, DURABLE_STEP_NAME, type Disagreement, type DispatchDiagnostics, type DispatchPlan, type DurableExecution, type DurableExecutionWrapper, type DurableTopology, type DurableWebhook, DurableWorkflow, ENGINE_MINTED_TAG_PREFIXES, EVENT_BUFFER_SCAN_LIMIT, EVENT_TOKEN_PREFIX, type EngineEvent, type EngineEventType, type EngineListener, Entities, type EntityConfig, type EntityHandler, type EntityHost, EventAccumulators, type EventBatchConfig, FatalError, GatherError, type GroupHealth, type Heartbeat, type HeartbeatSighting, type HeartbeatStatus, type HistoryEvent, InMemoryAdmissionBackend, InMemoryStateStore, InMemoryTransport, type InferSearchAttributes, LEGACY_V1_CAPABILITIES, LEGACY_V1_PROTOCOL, type MetricsCollector, type MetricsSnapshot, type NamedTransport, type NegotiateOptions, type NegotiationOutcome, type NegotiationReason, type NegotiationResult, NonDeterminismError, type PartitionSighting, type PayloadCodec, type QueueConfig, QueueController, RUN_VALUE_FACET_LIMIT, RUN_VALUE_FACET_SCAN, type RawWorkerDescriptor, RemoteStepError, RemoteStepTimeout, type RemoteTask, RemoteWorkflowExecutor, RemoteWorkflowTimeout, type RetentionPolicy, type RoutableDispatch, type RoutableResolution, type RoutingResolution, type RunAttributeRow, type RunDetail, type RunDispatcher, type RunFacetQuery, type RunFacetRow, RunGateway, type RunListItem, type RunQuery, type RunReply, type RunReplyResult, type RunRequest, type RunRequestKind, type RunResult, type RunSchedulesOptions, type RunStatus, type RunValueAxis, type RunValueFacetOptions, type RunValueFacetRow, type RunWaiting, STATE_STORE, STATE_STORE_CANONICAL, type ScalarAttributeFilter, type ScheduledWorkflow, type SearchAttributes, type SearchAttributesSchema, SignalTimeoutError, type SignalWaiter, type SingletonConfig, SingletonQueueFullError, StandardSchemaV1, type StartOptions, type StartRunMessage, type StateStore, type StepCheckpoint, type StepConfig, type StepDef, type StepDispatchOpts, type StepError, type StepEvent, type StepHandler, type StepInterceptor, type StepInvocation, type StepKind, type StepLogger, type StepOptions, type StepRef, type StepResult, type StepUndo, type StoreTransaction, type SubProcessHandle, TERMINAL_RUN_STATUSES, TRANSPORT, TRANSPORT_CANONICAL, type TenantEvent, type Transport, type UndoOf, type UpdateResult, type UpdateValidator, VERSION_UNDECLARED_TAG, WORKFLOW_NAME_KEY, type WireDates, type WorkerAdjust, type WorkerConcurrencyStatus, type WorkerDescriptor, type WorkerHeartbeat, type WorkerLifecycle, type WorkerStatus, type WorkflowAnnouncement, WorkflowBlocked, type WorkflowClass, type WorkflowCommand, type WorkflowCtx, type WorkflowDecision, type WorkflowDirectory, WorkflowEngine, type WorkflowEngineDeps, type WorkflowExecutor, type WorkflowHandler, type WorkflowInputOf, type WorkflowOutputOf, type WorkflowRef, type WorkflowRegistration, type WorkflowRun, type WorkflowStartClient, type WorkflowStepEvent, WorkflowSuspended, type WorkflowTask, aggregateAnnouncements, announcementsOf, applyAttributeQuery, attributeColumnFor, attributeOperand, attributePredicateOperands, axisIsRunColumn, bindWorkflowClass, breakpointToken, buildWorkflowDirectory, canRoute, capableWorkers, classifyWaiterToken, clearDurableExecutionWrappers, collectMetrics, controlPlaneDescriptor, coveredTokens, createStepLogger, currentStep, currentWorkflowCtx, debug, describeWorker, descriptorHash, error, eventMatchOf, eventMatches, eventNameOf, eventPrefix, eventToken, facetOrigin, hasDurableExecutionWrappers, heartbeatStatus, indexWaitersByRun, info, isEngineMintedTag, isEventToken, isLegacyDescriptor, isWorkflowControlFlowSignal, log, matchesAttributes, mergeRunFacetRows, mergeRunValueFacetRows, missingCapabilities, negotiate, normalizeAttributeRows, normalizeDescriptor, observedAnnouncements, parseDuration, partitionOfToken, planDispatch, prevCronFireMs, readSearchAttributes, requiredCapabilities, resolveRouting, resolveRunWaiting, runDurableExecution, runInStepLogger, runInWorkflowCtx, runSchedules, runStepHandler, runValueFacetsFromRuns, sanitizeQueueToken, scheduledRunId, sqlComparator, stepConfigOf, stepId, stepNameOf, sub, subEvent, subProcess, tenantGroup, useDurableExecution, warn, workflowName };
+export { type AccumulatorHost, type Admission, type AdmissionBackend, type AdmissionItem, type AnnouncedWorkflow, type AnnouncementEvidence, type AttributeFilter, type AttributeOp, type AttributePredicateOperand, type AttributeValue, type BackoffStrategy, type BlockedDispatch, type BlockedResolution, CONTROL_FLOW_SIGNAL, CURRENT_PROTOCOL_VERSION, type CapabilityRequirement, type ChildCallOptions, CodecStateStore, ContinueAsNew, type ControlMessage, type ControlPlane, DEFAULT_PARTITION, DURABLE_OPTIONS, DURABLE_OPTIONS_CANONICAL, DURABLE_STEP_CONFIG, DURABLE_STEP_NAME, type Disagreement, type DispatchDiagnostics, type DispatchPlan, type DurableExecution, type DurableExecutionWrapper, type DurableTopology, type DurableWebhook, DurableWorkflow, ENGINE_MINTED_TAG_PREFIXES, EVENT_BUFFER_SCAN_LIMIT, EVENT_TOKEN_PREFIX, type EngineEvent, type EngineEventType, type EngineListener, Entities, type EntityConfig, type EntityHandler, type EntityHost, EventAccumulators, type EventBatchConfig, FatalError, GatherError, type GroupHealth, type Heartbeat, type HeartbeatSighting, type HeartbeatStatus, type HistoryEvent, InMemoryAdmissionBackend, InMemoryStateStore, InMemoryTransport, type InferSearchAttributes, LEGACY_V1_CAPABILITIES, LEGACY_V1_PROTOCOL, type MetricsCollector, type MetricsSnapshot, type NamedTransport, type NegotiateOptions, type NegotiationOutcome, type NegotiationReason, type NegotiationResult, NonDeterminismError, type PartitionSighting, type PayloadCodec, type QueueConfig, QueueController, RUN_VALUE_FACET_LIMIT, RUN_VALUE_FACET_SCAN, type RawWorkerDescriptor, RemoteStepError, RemoteStepTimeout, type RemoteTask, RemoteWorkflowExecutor, RemoteWorkflowTimeout, type RetentionPolicy, type RoutableDispatch, type RoutableResolution, type RoutingResolution, type RunAttributeRow, type RunDetail, type RunDispatcher, type RunFacetQuery, type RunFacetRow, RunGateway, type RunListItem, type RunQuery, type RunReply, type RunReplyResult, type RunRequest, type RunRequestKind, type RunResult, type RunSchedulesOptions, type RunStatus, type RunValueAxis, type RunValueFacetOptions, type RunValueFacetOrder, type RunValueFacetRow, type RunWaiting, STATE_STORE, STATE_STORE_CANONICAL, type ScalarAttributeFilter, type ScheduledWorkflow, type SearchAttributes, type SearchAttributesSchema, SignalTimeoutError, type SignalWaiter, type SingletonConfig, SingletonQueueFullError, StandardSchemaV1, type StartOptions, type StartRunMessage, type StateStore, type StepCheckpoint, type StepConfig, type StepDef, type StepDispatchOpts, type StepError, type StepEvent, type StepHandler, type StepInterceptor, type StepInvocation, type StepKind, type StepLogger, type StepOptions, type StepRef, type StepResult, type StepUndo, type StoreTransaction, type SubProcessHandle, TERMINAL_RUN_STATUSES, TRANSPORT, TRANSPORT_CANONICAL, type TenantEvent, type Transport, type UndoOf, type UpdateResult, type UpdateValidator, VERSION_UNDECLARED_TAG, WORKFLOW_NAME_KEY, type WireDates, type WorkerAdjust, type WorkerConcurrencyStatus, type WorkerDescriptor, type WorkerHeartbeat, type WorkerLifecycle, type WorkerStatus, type WorkflowAnnouncement, WorkflowBlocked, type WorkflowClass, type WorkflowCommand, type WorkflowCtx, type WorkflowDecision, type WorkflowDirectory, WorkflowEngine, type WorkflowEngineDeps, type WorkflowExecutor, type WorkflowHandler, type WorkflowInputOf, type WorkflowOutputOf, type WorkflowRef, type WorkflowRegistration, type WorkflowRun, type WorkflowStartClient, type WorkflowStepEvent, WorkflowSuspended, type WorkflowTask, aggregateAnnouncements, announcementsOf, applyAttributeQuery, attributeColumnFor, attributeOperand, attributePredicateOperands, axisIsRunColumn, bindWorkflowClass, breakpointToken, buildWorkflowDirectory, canRoute, capableWorkers, classifyWaiterToken, clearDurableExecutionWrappers, collectMetrics, controlPlaneDescriptor, coveredTokens, createStepLogger, currentStep, currentWorkflowCtx, debug, describeWorker, descriptorHash, error, eventMatchOf, eventMatches, eventNameOf, eventPrefix, eventToken, facetOrigin, hasDurableExecutionWrappers, heartbeatStatus, indexWaitersByRun, info, isEngineMintedTag, isEventToken, isLegacyDescriptor, isWorkflowControlFlowSignal, log, matchesAttributes, mergeRunFacetRows, mergeRunValueFacetRows, missingCapabilities, negotiate, normalizeAttributeRows, normalizeDescriptor, observedAnnouncements, parseDuration, partitionOfToken, planDispatch, prevCronFireMs, readSearchAttributes, requiredCapabilities, resolveRouting, resolveRunWaiting, runDurableExecution, runInStepLogger, runInWorkflowCtx, runSchedules, runStepHandler, runValueFacetsFromRuns, sanitizeQueueToken, scheduledRunId, sqlComparator, stepConfigOf, stepId, stepNameOf, sub, subEvent, subProcess, tenantGroup, useDurableExecution, warn, workflowName };

package/dist/index.js

@@ -3889,6 +3889,15 @@ var WorkflowEngine = class {
   /**
   * Resume each run only if this instance can acquire its recovery lease — so when several
   * replicas recover or poll at once, each run is picked up by exactly one of them.
+  *
+  * A run this instance cannot resume is SKIPPED, not allowed to abort the batch. The canonical
+  * case is skew protection: mid-rolling-deploy a pod leases a run whose workflow it does not have
+  * and `resume` throws by design — but the rest of the batch is runs it can drive perfectly well,
+  * and every caller here is a recovery sweep. Letting the first such run end the loop means one
+  * row stops recovery for the whole deployment, and (since the callers are pollers) sends the
+  * rejection into a lifecycle hook. Skipping leaves the run locked only until its lease expires,
+  * for a pod that does have the workflow — which is exactly what the skew-protection error asks
+  * for. Same posture as `publishEvent`'s per-subscriber isolation.
   */
   async resumeLeased(runs, nowMs = this.clock(), onLocked) {
     if (this.draining) return [];
@@ -3896,8 +3905,12 @@ var WorkflowEngine = class {
     for (const run of runs) {
       const acquired = await this.store.tryLockRun(run.id, this.instanceId, nowMs + this.leaseMs, nowMs);
       if (!acquired) continue;
-      const settled = onLocked ? await onLocked(run) : void 0;
-      results.push(settled ?? await this.resume(run.id));
+      try {
+        const settled = onLocked ? await onLocked(run) : void 0;
+        results.push(settled ?? await this.resume(run.id));
+      } catch (error2) {
+        console.error(`[nestjs-durable] could not resume run ${run.id} (${run.workflow}@${run.workflowVersion}); leaving it for another instance:`, error2);
+      }
     }
     return results;
   }
@@ -6051,12 +6064,13 @@ function mergeRunValueFacetRows(rows, opts) {
     const value = row.value ?? null;
     counts.set(value, (counts.get(value) ?? 0) + Number(row.count));
   }
+  const needle = opts?.search?.trim().toLowerCase();
   const merged = [
     ...counts
   ].map(([value, count]) => ({
     value,
     count
-  })).filter((row) => row.count > 0).sort((a, b) => {
+  })).filter((row) => row.count > 0).filter((row) => !needle || row.value?.toLowerCase().includes(needle)).sort((a, b) => {
     const engineA = isEngineMintedTag(a.value);
     const engineB = isEngineMintedTag(b.value);
     if (engineA !== engineB) return engineA ? 1 : -1;
@@ -6065,7 +6079,8 @@ function mergeRunValueFacetRows(rows, opts) {
     if (b.value === null) return -1;
     return a.value.localeCompare(b.value);
   });
-  return merged.slice(0, opts?.limit ?? RUN_VALUE_FACET_LIMIT);
+  const offset = opts?.offset ?? 0;
+  return merged.slice(offset, offset + (opts?.limit ?? RUN_VALUE_FACET_LIMIT));
 }
 __name(mergeRunValueFacetRows, "mergeRunValueFacetRows");
 function runValueFacetsFromRuns(runs, axis, opts) {