@fluidgrids/workflows 2026.1028.1 → 2026.1029.1

package/README.md

@@ -226,9 +226,52 @@ export const refundOrder = workflow(
   `ctx.signalRun` / `ctx.signalParent` / `ctx.getRunHandle`, `ctx.sideEffect`,
   `ctx.patched` / `ctx.deprecatePatch`, `ctx.now` / `ctx.random` / `ctx.uuid`,
   `ctx.setCurrentDetails`, cancellation scopes, `ctx.saga()`, and the parity
-  commands `ctx.upsertContext` and `ctx.continueAsNew`. User activities, local
-  activities, custom queries, updates and search attributes are Phase C and fail
-  the workflow task with `UNSUPPORTED_COMMAND`.
+  commands `ctx.upsertContext` and `ctx.continueAsNew`. User activities, user
+  functions as local activities, custom queries, updates and search attributes
+  are Phase C and fail the workflow task with `UNSUPPORTED_COMMAND`.
+- Since R2 (the runtime release `RUNTIME_RELEASE = 2`):
+  `ctx.localActivity(op, { args, retry, startToCloseTimeout, summary })` runs a
+  short node call inside the workflow task (at most 30 s; the `ctx.run`
+  allow-list applies). The task returns `outcome: 'localActivityRequested'`
+  with the calls it waits for; the worker runs them and runs the same task
+  again with `localActivityResults`, and the task records one
+  `RECORD_LOCAL_ACTIVITY` marker per call. A retryable failure is requested
+  again with the next `attempt` and its `backoffMs`; a replay returns the
+  recorded outcome and never runs the call again. A local activity the first
+  execution dropped (its scope was cancelled in the same activation, or the
+  run completed without awaiting it) records nothing and replays the same way;
+  one that would have been requested but has no marker is a non-determinism.
+- Run handles take a workflow id: `ctx.getRunHandle({ workflowKey, workflowId,
+firstRunId? })`, `ctx.signalRun(target, …)` and `ctx.cancelRun(target)`.
+- `ctx.onSignal(signal, { unfinishedPolicy: 'ABANDON' }, fn)`; a workflow that
+  finishes while a `WARN_AND_ABANDON` handler still runs logs one warning and
+  reports `unfinishedHandlers` in the task result (never on replay).
+- `ctx.info.lastResult`, `lastFailure`, `workflowId`, `runAttempt`, `summary`,
+  `details`, `context` (the memo), the timeouts, `retry`, `priority` and
+  `versioningBehavior` come from `WORKFLOW_STARTED`, so a replay sees what the
+  first execution saw; histories written before R2 fall back to the lease.
+- `workflow(name, { versioningBehavior, retry, runTimeout, executionTimeout,
+workflowTaskTimeout })` lowers to `config`; `lower()` writes the runtime
+  features a bundle uses to `code.features` (`localActivity`, `externalCancel`,
+  `childOptions`, `canOptions`, `autoUpgrade`, `runRetry`, `timeouts`) so the
+  service can refuse a push whose features its flags do not enable. The call
+  sites are read in every module of the project (helpers and vendored packages
+  included), and any use of the name `localActivity` counts. Each function's
+  settings are also written to `code.exports.workflows[fn].config`: the
+  service resolves run options per `workflowFn` from that table, so a
+  same-bundle child that runs on its parent's definition gets its own retry
+  and timeouts.
+- The command feature gate (`commandFeatures`, `isWorkflowCommandEnabled(cmd,
+features)`, `isReliefCommand`, `PHASE_B_CORE_FEATURES`,
+  `PHASE_B_PARITY_FEATURES`) is the one contract the service and the workers use
+  to enable parity commands. Every option the R1 runtime wrote stays in the
+  core set (`CORE_CHILD_OPTIONS`, `CORE_CAN_OPTIONS`), so a Phase B workflow
+  behaves the same with `fluidgrids.durable-parity` off; only the R2 options
+  (child `retry`, `versioningBehavior`, `idReusePolicy`, `idConflictPolicy`,
+  and a run-retry `continueAsNew` `retry`) need the flag. A continue-as-new
+  `retry` in the R1 activity shape (`retryDelay`, `maxRetries`) is still
+  written as R1 wrote it and has no effect; `continueAsNewRetryShape` tells
+  the shapes apart, and the service must ignore the legacy one; `rolloutBucket(key)` (FNV-1a 32 over UTF-8, modulo 100) is the rollout hash.
 - Only store and registry nodes and `internal:http`, `internal:datatable`,
   `internal:set` and `internal:code` may run as activities
   (`ACTIVITY_NODE_ALLOWLIST`).
@@ -284,12 +327,27 @@ await replay(refundOrder, handle.history()); // throws DeterminismViolation on a
 ```
 
 The test environment appends exactly the events the service appends
-(`eventsForCommands`) and retries activities with `computeRetryDelay`. Its
-documented differences from the service: workflow tasks run in this process
-without the determinism shims (pass `taskExecutor` to run them in an isolate), a
-failed workflow task stops the run instead of being retried, activity
-start-to-close and heartbeat timeouts are not timed (a mock may throw a
-`TimeoutFailure`), and graph children are mocks (`mockChild`).
+(`eventsForCommands`) and retries activities with `computeRetryDelay`. Since R2
+it also runs local activities through `mock` (retried inside the task), start
+delays, run and execution timeouts and run-level retry on the fake clock,
+workflow-id policies (`workflowId`, `idReusePolicy`, `idConflictPolicy`) and
+workflow-id targets, schedule-to-start timeouts while a queue is held
+(`holdActivities`), heartbeat details on retry (`info.heartbeat`,
+`info.heartbeatDetails`), and fails `result()` with `UnfinishedHandlersError`
+when a run finishes while a signal handler still runs
+(`failOnUnfinishedHandlers`, default true). Its documented differences from the
+service: workflow tasks run in this process without the determinism shims (pass
+`taskExecutor` to run them in an isolate), a failed workflow task stops the run
+instead of being retried, activity start-to-close and heartbeat timeouts are not
+timed (a mock may throw a `TimeoutFailure`), local-activity retries do not wait
+for their backoff, the workflow-task timeout is recorded but not enforced, and
+graph children are mocks (`mockChild`).
+
+`buildBundle(files, { sourcemap: 'external' })` also returns the bundle's
+source map (`map`) with the same bundle bytes and `buildId`; it travels in the
+source archive (`map`), and `createSourceMapper`, `mapStackTrace` and
+`mapEnhancedStackTrace` turn the bundle positions of `__stack_trace` and
+`__enhanced_stack_trace` into source lines.
 
 `simulate(definition, { trigger, mocks, workflows })` walks a tier-1 graph in
 process. It is a reduced form: no expressions are evaluated, a node without a
@@ -301,7 +359,11 @@ merges are not modelled.
 
 `fixtures/histories/` holds the recorded histories of spec 10 §3 (timers,
 signals, cancellation, child runs, race, gather, continue-as-new, patched,
-side effects, activities, task failures, activation boundaries, and updates as
+side effects, activities, task failures, activation boundaries, the 21 R2
+parity histories (local activities, schedule-to-start, heartbeat details,
+cancellation types, child options, run retry, continue-as-new results and
+options, run and execution timeouts, start delay, external cancels, handler
+drain, auto-upgrade, task failures and failure types), and updates as
 parse-only fixtures), with their workflow sources in `fixtures/histories/src/`
 and the scenarios that recorded them in `fixtures/histories/scenarios.ts`.
 `bun run check:histories` re-records every history, replays it in QuickJS and in

package/dist/{activation-DnhG7SmF.d.ts → activation-BnVQMv9y.d.ts}

@@ -1,4 +1,4 @@
-import { U as RunEventRecord } from './types-DV-HX_Gt.js';
+import { Z as RunEventRecord } from './types-CnIOinoz.js';
 
 /**
  * Split a history into activations (C-HIST, spec 04 §2).

package/dist/{activation-BBh1p82z.d.cts → activation-CESehfYi.d.cts}

@@ -1,4 +1,4 @@
-import { U as RunEventRecord } from './types-CpBBjaGX.cjs';
+import { Z as RunEventRecord } from './types-CQKOhPTa.cjs';
 
 /**
  * Split a history into activations (C-HIST, spec 04 §2).

package/dist/{chunk-XB53G2DK.js → chunk-25BKWR2O.js}

@@ -1,4 +1,4 @@
-import { runIsolateWorker, outcomeToCollection } from './chunk-H7KEVW2M.js';
+import { runIsolateWorker, outcomeToCollection } from './chunk-A2OHX3UQ.js';
 
 // src/generated/vm-worker-source.ts
 var VM_WORKER_SOURCE = '"use strict";\n\nvar import_node_worker_threads = require("node:worker_threads");\n\nfunction isRecord(value) {\n  return typeof value === "object" && value !== null && !Array.isArray(value);\n}\n\nvar DETERMINISM_VIOLATION = "DeterminismViolation";\nvar DETERMINISM_PRELUDE = `(() => {\n  const NAME = ${JSON.stringify(DETERMINISM_VIOLATION)};\n  const fail = (what) => {\n    const error = new Error(\n      what + " is not allowed in workflow code: lowering must give the same IR on every build. Read times and random values at run time instead (for example wf.now)."\n    );\n    error.name = NAME;\n    throw error;\n  };\n  const lock = (target, key, value) =>\n    Object.defineProperty(target, key, { value, writable: false, enumerable: false, configurable: false });\n  const RealDate = Date;\n  const LockedDate = function Date(...args) {\n    if (new.target === undefined) return fail("Date()");\n    if (args.length === 0) return fail("new Date()");\n    return Reflect.construct(RealDate, args, new.target);\n  };\n  lock(LockedDate, "prototype", RealDate.prototype);\n  lock(RealDate.prototype, "constructor", LockedDate);\n  lock(LockedDate, "now", function now() { return fail("Date.now()"); });\n  lock(LockedDate, "parse", RealDate.parse);\n  lock(LockedDate, "UTC", RealDate.UTC);\n  lock(globalThis, "Date", LockedDate);\n  lock(Math, "random", function random() { return fail("Math.random()"); });\n  const crypto = globalThis.crypto;\n  if (crypto !== null && typeof crypto === "object") {\n    for (const name of ["getRandomValues", "randomUUID"]) {\n      if (typeof crypto[name] === "function") lock(crypto, name, function () { return fail("crypto." + name + "()"); });\n    }\n  }\n  const DateTimeFormat = typeof Intl === "object" && Intl !== null ? Intl.DateTimeFormat : undefined;\n  if (typeof DateTimeFormat === "function") {\n    const proto = DateTimeFormat.prototype;\n    const format = Object.getOwnPropertyDescriptor(proto, "format");\n    if (format && typeof format.get === "function") {\n      const get = format.get;\n      Object.defineProperty(proto, "format", {\n        get() {\n          const bound = get.call(this);\n          return (date) => (date === undefined ? fail("Intl.DateTimeFormat format()") : bound(date));\n        },\n        enumerable: false,\n        configurable: false,\n      });\n    }\n    const formatToParts = proto.formatToParts;\n    if (typeof formatToParts === "function") {\n      lock(proto, "formatToParts", function (date) {\n        return date === undefined ? fail("Intl.DateTimeFormat formatToParts()") : formatToParts.call(this, date);\n      });\n    }\n  }\n})();\n`;\nfunction failure(kind, message) {\n  return { ok: false, failure: kind, message };\n}\n\nvar import_node_vm = require("node:vm");\nvar import_node_util = require("node:util");\nvar BUNDLE_GLOBAL = "__fluidgridsBundle";\nfunction wrap(code) {\n  return `(function () {\n  const describe = (error) => {\n    let name = "Error";\n    let message = "";\n    try {\n      if (error !== null && (typeof error === "object" || typeof error === "function")) {\n        const n = error.name;\n        if (typeof n === "string") name = n;\n        const m = error.message;\n        message = typeof m === "string" ? m : m === undefined ? "" + error : "" + m;\n      } else {\n        message = "" + error;\n      }\n    } catch (_) {\n      message = "a value whose message cannot be read was thrown";\n    }\n    return (name === ${JSON.stringify(DETERMINISM_VIOLATION)} ? "D" : "E") + message;\n  };\n  try {\n${code}\n;const __fluidgridsValue = ${BUNDLE_GLOBAL}.__fluidgrids;\n    return typeof __fluidgridsValue === "string" ? "R" + __fluidgridsValue : "N";\n  } catch (error) {\n    try {\n      return describe(error);\n    } catch (_) {\n      return "Ean error that cannot be described was thrown";\n    }\n  }\n})()`;\n}\nfunction hostErrorFields(error) {\n  if (!import_node_util.types.isNativeError(error)) return {};\n  const code = Object.getOwnPropertyDescriptor(error, "code")?.value;\n  const message = Object.getOwnPropertyDescriptor(error, "message")?.value;\n  return {\n    ...typeof code === "string" ? { code } : {},\n    ...typeof message === "string" ? { message } : {}\n  };\n}\nfunction decode(result) {\n  const tag = result.charAt(0);\n  const rest = result.slice(1);\n  if (tag === "R") return { ok: true, value: rest };\n  if (tag === "N")\n    return failure("no-collection", "The bundle did not export a workflow collection");\n  if (tag === "D") return failure("determinism", rest);\n  return failure("error", rest);\n}\nfunction runInVmContext(code, timeoutMs) {\n  const context = (0, import_node_vm.createContext)(/* @__PURE__ */ Object.create(null), {\n    codeGeneration: { strings: false, wasm: false },\n    microtaskMode: "afterEvaluate",\n    name: "fluidgrids-workflow-lowering"\n  });\n  const refuseImport = () => {\n    throw new Error("Workflow code may not import modules at run time");\n  };\n  const deadline = Date.now() + timeoutMs;\n  const run = (source, filename) => new import_node_vm.Script(source, { filename, importModuleDynamically: refuseImport }).runInContext(context, {\n    timeout: Math.max(1, deadline - Date.now()),\n    breakOnSigint: true\n  });\n  try {\n    run(DETERMINISM_PRELUDE, "determinism-prelude.js");\n    const result = run(wrap(code), "workflow-bundle.js");\n    return typeof result === "string" ? decode(result) : failure("no-collection", "The bundle did not export a workflow collection");\n  } catch (error) {\n    const fields = hostErrorFields(error);\n    if (fields.code === "ERR_SCRIPT_EXECUTION_TIMEOUT" || fields.message !== void 0 && /^Script execution timed out/.test(fields.message)) {\n      return failure("timeout", `Evaluating the workflow code timed out after ${timeoutMs} ms`);\n    }\n    return failure("error", fields.message ?? "The workflow code could not be evaluated");\n  }\n}\n\nprocess.on("unhandledRejection", () => void 0);\nvar input = import_node_worker_threads.workerData;\nimport_node_worker_threads.parentPort?.postMessage(\n  isRecord(input) && typeof input["code"] === "string" && typeof input["timeoutMs"] === "number" ? runInVmContext(input["code"], input["timeoutMs"]) : failure("crashed", "The evaluation worker received no bundle")\n);\n';

package/dist/{chunk-CBL5JSCC.cjs → chunk-2B37XAFQ.cjs}

@@ -1,21 +1,54 @@
 'use strict';
 
-var chunk57MSZ24T_cjs = require('./chunk-57MSZ24T.cjs');
+var chunkNXFBVDOI_cjs = require('./chunk-NXFBVDOI.cjs');
 var chunkGVTZMA5C_cjs = require('./chunk-GVTZMA5C.cjs');
 var chunkSAENRNBJ_cjs = require('./chunk-SAENRNBJ.cjs');
-var chunkFQIHX7YI_cjs = require('./chunk-FQIHX7YI.cjs');
+var chunkJ3PYFGKA_cjs = require('./chunk-J3PYFGKA.cjs');
 
 // src/builder/collect.ts
 var COLLECTION_FORMAT = "fluidgrids.tier1-collection";
+function configDuration(value) {
+  return typeof value === "string" ? value : chunkJ3PYFGKA_cjs.toMs(value) / 1e3;
+}
+function runSettingsOf(options) {
+  const config = {};
+  const features = [];
+  if (options.runTimeout !== void 0) config.timeout = chunkJ3PYFGKA_cjs.toMs(options.runTimeout) / 1e3;
+  if (options.executionTimeout !== void 0)
+    config.executionTimeout = configDuration(options.executionTimeout);
+  if (options.workflowTaskTimeout !== void 0)
+    config.workflowTaskTimeout = configDuration(options.workflowTaskTimeout);
+  if (options.runTimeout !== void 0 || options.executionTimeout !== void 0 || options.workflowTaskTimeout !== void 0)
+    features.push("timeouts");
+  if (options.versioningBehavior !== void 0) {
+    config.versioningBehavior = options.versioningBehavior;
+    if (options.versioningBehavior === "AUTO_UPGRADE") features.push("autoUpgrade");
+  }
+  if (options.retry !== void 0) {
+    const retry = {};
+    if (options.retry.maxAttempts !== void 0) retry.maxAttempts = options.retry.maxAttempts;
+    if (options.retry.initialDelay !== void 0)
+      retry.initialDelay = configDuration(options.retry.initialDelay);
+    if (options.retry.backoffMultiplier !== void 0)
+      retry.backoffMultiplier = options.retry.backoffMultiplier;
+    if (options.retry.maxDelay !== void 0)
+      retry.maxDelay = configDuration(options.retry.maxDelay);
+    if (options.retry.nonRetryableErrorTypes !== void 0)
+      retry.nonRetryableErrorTypes = [...options.retry.nonRetryableErrorTypes];
+    config.retry = retry;
+    features.push("runRetry");
+  }
+  return { config, features };
+}
 function triggerOf(spec, where) {
   if (spec === void 0) return void 0;
-  const operation = chunk57MSZ24T_cjs.isOperation(spec) ? spec : chunkSAENRNBJ_cjs.isRecord(spec) ? spec.operation : void 0;
-  if (!chunk57MSZ24T_cjs.isOperation(operation))
+  const operation = chunkNXFBVDOI_cjs.isOperation(spec) ? spec : chunkSAENRNBJ_cjs.isRecord(spec) ? spec.operation : void 0;
+  if (!chunkNXFBVDOI_cjs.isOperation(operation))
     throw new chunkGVTZMA5C_cjs.BuilderError(`${where}: trigger must be a trigger operation`);
   const out = { nodeType: operation.nodeType };
   if (operation.version !== void 0) out.version = operation.version;
   if (operation.operation !== void 0) out.operation = operation.operation;
-  if (!chunk57MSZ24T_cjs.isOperation(spec)) {
+  if (!chunkNXFBVDOI_cjs.isOperation(spec)) {
     if (spec.args !== void 0) out.args = spec.args;
     if (spec.id !== void 0) out.id = spec.id;
   }
@@ -27,7 +60,7 @@ function collectWorkflowExports(modules) {
   for (const [module, namespace] of modules) {
     for (const exportName of Object.keys(namespace).sort()) {
       const value = namespace[exportName];
-      if (!chunkFQIHX7YI_cjs.isDurableWorkflow(value) || exportNames.has(value)) continue;
+      if (!chunkJ3PYFGKA_cjs.isDurableWorkflow(value) || exportNames.has(value)) continue;
       exportNames.set(value, exportName);
       const options = value.options;
       const entry = {
@@ -35,13 +68,16 @@ function collectWorkflowExports(modules) {
         exportName,
         name: value.name,
         taskQueue: options.taskQueue ?? "managed",
-        interface: chunkFQIHX7YI_cjs.interfaceOf(value)
+        interface: chunkJ3PYFGKA_cjs.interfaceOf(value)
       };
       if (options.title !== void 0) entry.title = options.title;
       if (options.description !== void 0) entry.description = options.description;
       if (options.standalone !== void 0) entry.standalone = options.standalone;
       const trigger = triggerOf(options.trigger, `workflow("${value.name}")`);
       if (trigger) entry.trigger = trigger;
+      const settings = runSettingsOf(options);
+      if (Object.keys(settings.config).length > 0) entry.config = settings.config;
+      if (settings.features.length > 0) entry.features = settings.features;
       durable.push(entry);
     }
   }
@@ -49,7 +85,7 @@ function collectWorkflowExports(modules) {
   for (const [module, namespace] of modules) {
     for (const exportName of Object.keys(namespace).sort()) {
       const value = namespace[exportName];
-      if (!chunk57MSZ24T_cjs.isTier1Workflow(value)) continue;
+      if (!chunkNXFBVDOI_cjs.isTier1Workflow(value)) continue;
       for (const ref of value.durableRefs ?? []) {
         const resolved = exportNames.get(ref.definition);
         if (resolved === void 0)

package/dist/{chunk-DJYMDLV5.js → chunk-2DDULZFM.js}

@@ -1,5 +1,84 @@
+// src/history/allowlist.ts
+var ACTIVITY_INTERNAL_ALLOWLIST = /* @__PURE__ */ new Set([
+  "internal:http",
+  "internal:datatable",
+  "internal:set",
+  "internal:code"
+]);
+var ACTIVITY_NODE_DENYLIST = /* @__PURE__ */ new Set([
+  "internal:end",
+  "internal:if",
+  "internal:switch",
+  "internal:loop",
+  "internal:merge",
+  "internal:wait",
+  "internal:subworkflow",
+  "internal:code-workflow",
+  "internal:wait-for-signal",
+  "internal:send-and-wait",
+  "internal:respond-to-webhook",
+  "internal:failure-triage"
+]);
+var ACTIVITY_NODE_ALLOWLIST = {
+  internal: ACTIVITY_INTERNAL_ALLOWLIST,
+  refused: ACTIVITY_NODE_DENYLIST,
+  /** Non-built-in node types (store and registry nodes) are allowed. */
+  external: "allowed"
+};
+var LEGACY_SHORT_NAMES = /* @__PURE__ */ new Set([
+  "if",
+  "switch",
+  "loop",
+  "merge",
+  "set",
+  "filter",
+  "aggregate",
+  "wait",
+  "noop",
+  "code",
+  "http",
+  "transform",
+  "validate",
+  "log",
+  "error",
+  "subworkflow",
+  "end",
+  "trigger",
+  "webhook",
+  "schedule",
+  "manual",
+  "api"
+]);
+function canonicalType(nodeType) {
+  const lower = nodeType.trim().toLowerCase();
+  return LEGACY_SHORT_NAMES.has(lower) ? `internal:${lower}` : lower;
+}
+function isActivityNodeTypeAllowed(nodeType) {
+  if (typeof nodeType !== "string" || nodeType.trim() === "") return false;
+  const type = canonicalType(nodeType);
+  if (!type.startsWith("internal:")) return true;
+  return ACTIVITY_INTERNAL_ALLOWLIST.has(type);
+}
+var ActivityNodeTypeNotAllowedError = class extends Error {
+  constructor(nodeType) {
+    super(
+      `${nodeType} cannot run as a durable activity: only store and registry nodes and internal:http, internal:datatable, internal:set and internal:code can`
+    );
+    this.nodeType = nodeType;
+    this.name = "ActivityNodeTypeNotAllowedError";
+  }
+  nodeType;
+  code = "durable.activityTypeNotAllowed";
+  errorType = "VALIDATION";
+  nonRetryable = true;
+};
+function assertActivityNodeType(nodeType) {
+  if (!isActivityNodeTypeAllowed(nodeType)) throw new ActivityNodeTypeNotAllowedError(nodeType);
+}
+
 // src/history/types.ts
 var HISTORY_PROTOCOL = 1;
+var RUNTIME_RELEASE = 2;
 var EVENT_TYPES = [
   "WORKFLOW_STARTED",
   "WORKFLOW_TASK_SCHEDULED",
@@ -139,6 +218,18 @@ var CHILD_CANCELLATION_TYPES = [
   "TRY_CANCEL",
   "ABANDON"
 ];
+var WORKFLOW_ID_REUSE_POLICIES = [
+  "ALLOW_DUPLICATE",
+  "ALLOW_DUPLICATE_FAILED_ONLY",
+  "REJECT_DUPLICATE"
+];
+var WORKFLOW_ID_CONFLICT_POLICIES = [
+  "FAIL",
+  "USE_EXISTING",
+  "TERMINATE_EXISTING"
+];
+var VERSIONING_BEHAVIORS = ["PINNED", "AUTO_UPGRADE"];
+var WORKFLOW_TIMEOUT_TYPES = ["WORKFLOW_RUN", "WORKFLOW_EXECUTION"];
 var DEFAULT_HISTORY_LIMIT = { events: 1e4, bytes: 16 * 1024 * 1024 };
 var CONTINUE_AS_NEW_SUGGESTED_RATIO = 0.8;
 var HISTORY_LIMIT_EXCEEDED_RATIO = 0.95;
@@ -147,6 +238,7 @@ var BUILT_IN_QUERIES = [
   "__enhanced_stack_trace",
   "__metadata"
 ];
+var LOCAL_ACTIVITY_MAX_TIMEOUT_MS = 3e4;
 var COMMAND_EVENT_TYPES = {
   SCHEDULE_ACTIVITY: "ACTIVITY_SCHEDULED",
   REQUEST_CANCEL_ACTIVITY: "ACTIVITY_CANCEL_REQUESTED",
@@ -224,4 +316,4 @@ function isCommandEvent(event) {
   return COMMAND_EVENTS.has(event.type);
 }
 
-export { ACTIVITY_CANCELLATION_TYPES, BUILT_IN_QUERIES, CHILD_CANCELLATION_TYPES, COMMAND_EVENTS, COMMAND_EVENT_TYPES, COMMAND_TYPES, CONTINUE_AS_NEW_SUGGESTED_RATIO, DEFAULT_HISTORY_LIMIT, ERROR_TYPES, EVENT_TYPES, EXECUTION_KINDS, HISTORY_LIMIT_EXCEEDED_RATIO, HISTORY_PROTOCOL, INPUT_EVENTS, PARENT_CLOSE_POLICIES, PHASE_B_CORE_COMMANDS, PHASE_B_PARITY_COMMANDS, PHASE_C_COMMANDS, TASK_FAILURE_CAUSES, TERMINAL_COMMANDS, TERMINAL_EVENTS, isCommandEvent, isInputEvent };
+export { ACTIVITY_CANCELLATION_TYPES, ACTIVITY_INTERNAL_ALLOWLIST, ACTIVITY_NODE_ALLOWLIST, ACTIVITY_NODE_DENYLIST, ActivityNodeTypeNotAllowedError, BUILT_IN_QUERIES, CHILD_CANCELLATION_TYPES, COMMAND_EVENTS, COMMAND_EVENT_TYPES, COMMAND_TYPES, CONTINUE_AS_NEW_SUGGESTED_RATIO, DEFAULT_HISTORY_LIMIT, ERROR_TYPES, EVENT_TYPES, EXECUTION_KINDS, HISTORY_LIMIT_EXCEEDED_RATIO, HISTORY_PROTOCOL, INPUT_EVENTS, LOCAL_ACTIVITY_MAX_TIMEOUT_MS, PARENT_CLOSE_POLICIES, PHASE_B_CORE_COMMANDS, PHASE_B_PARITY_COMMANDS, PHASE_C_COMMANDS, RUNTIME_RELEASE, TASK_FAILURE_CAUSES, TERMINAL_COMMANDS, TERMINAL_EVENTS, VERSIONING_BEHAVIORS, WORKFLOW_ID_CONFLICT_POLICIES, WORKFLOW_ID_REUSE_POLICIES, WORKFLOW_TIMEOUT_TYPES, assertActivityNodeType, isActivityNodeTypeAllowed, isCommandEvent, isInputEvent };

package/dist/{chunk-623FVQSN.cjs → chunk-3FIDHONL.cjs}

@@ -1,7 +1,86 @@
 'use strict';
 
+// src/history/allowlist.ts
+var ACTIVITY_INTERNAL_ALLOWLIST = /* @__PURE__ */ new Set([
+  "internal:http",
+  "internal:datatable",
+  "internal:set",
+  "internal:code"
+]);
+var ACTIVITY_NODE_DENYLIST = /* @__PURE__ */ new Set([
+  "internal:end",
+  "internal:if",
+  "internal:switch",
+  "internal:loop",
+  "internal:merge",
+  "internal:wait",
+  "internal:subworkflow",
+  "internal:code-workflow",
+  "internal:wait-for-signal",
+  "internal:send-and-wait",
+  "internal:respond-to-webhook",
+  "internal:failure-triage"
+]);
+var ACTIVITY_NODE_ALLOWLIST = {
+  internal: ACTIVITY_INTERNAL_ALLOWLIST,
+  refused: ACTIVITY_NODE_DENYLIST,
+  /** Non-built-in node types (store and registry nodes) are allowed. */
+  external: "allowed"
+};
+var LEGACY_SHORT_NAMES = /* @__PURE__ */ new Set([
+  "if",
+  "switch",
+  "loop",
+  "merge",
+  "set",
+  "filter",
+  "aggregate",
+  "wait",
+  "noop",
+  "code",
+  "http",
+  "transform",
+  "validate",
+  "log",
+  "error",
+  "subworkflow",
+  "end",
+  "trigger",
+  "webhook",
+  "schedule",
+  "manual",
+  "api"
+]);
+function canonicalType(nodeType) {
+  const lower = nodeType.trim().toLowerCase();
+  return LEGACY_SHORT_NAMES.has(lower) ? `internal:${lower}` : lower;
+}
+function isActivityNodeTypeAllowed(nodeType) {
+  if (typeof nodeType !== "string" || nodeType.trim() === "") return false;
+  const type = canonicalType(nodeType);
+  if (!type.startsWith("internal:")) return true;
+  return ACTIVITY_INTERNAL_ALLOWLIST.has(type);
+}
+var ActivityNodeTypeNotAllowedError = class extends Error {
+  constructor(nodeType) {
+    super(
+      `${nodeType} cannot run as a durable activity: only store and registry nodes and internal:http, internal:datatable, internal:set and internal:code can`
+    );
+    this.nodeType = nodeType;
+    this.name = "ActivityNodeTypeNotAllowedError";
+  }
+  nodeType;
+  code = "durable.activityTypeNotAllowed";
+  errorType = "VALIDATION";
+  nonRetryable = true;
+};
+function assertActivityNodeType(nodeType) {
+  if (!isActivityNodeTypeAllowed(nodeType)) throw new ActivityNodeTypeNotAllowedError(nodeType);
+}
+
 // src/history/types.ts
 var HISTORY_PROTOCOL = 1;
+var RUNTIME_RELEASE = 2;
 var EVENT_TYPES = [
   "WORKFLOW_STARTED",
   "WORKFLOW_TASK_SCHEDULED",
@@ -141,6 +220,18 @@ var CHILD_CANCELLATION_TYPES = [
   "TRY_CANCEL",
   "ABANDON"
 ];
+var WORKFLOW_ID_REUSE_POLICIES = [
+  "ALLOW_DUPLICATE",
+  "ALLOW_DUPLICATE_FAILED_ONLY",
+  "REJECT_DUPLICATE"
+];
+var WORKFLOW_ID_CONFLICT_POLICIES = [
+  "FAIL",
+  "USE_EXISTING",
+  "TERMINATE_EXISTING"
+];
+var VERSIONING_BEHAVIORS = ["PINNED", "AUTO_UPGRADE"];
+var WORKFLOW_TIMEOUT_TYPES = ["WORKFLOW_RUN", "WORKFLOW_EXECUTION"];
 var DEFAULT_HISTORY_LIMIT = { events: 1e4, bytes: 16 * 1024 * 1024 };
 var CONTINUE_AS_NEW_SUGGESTED_RATIO = 0.8;
 var HISTORY_LIMIT_EXCEEDED_RATIO = 0.95;
@@ -149,6 +240,7 @@ var BUILT_IN_QUERIES = [
   "__enhanced_stack_trace",
   "__metadata"
 ];
+var LOCAL_ACTIVITY_MAX_TIMEOUT_MS = 3e4;
 var COMMAND_EVENT_TYPES = {
   SCHEDULE_ACTIVITY: "ACTIVITY_SCHEDULED",
   REQUEST_CANCEL_ACTIVITY: "ACTIVITY_CANCEL_REQUESTED",
@@ -227,6 +319,10 @@ function isCommandEvent(event) {
 }
 
 exports.ACTIVITY_CANCELLATION_TYPES = ACTIVITY_CANCELLATION_TYPES;
+exports.ACTIVITY_INTERNAL_ALLOWLIST = ACTIVITY_INTERNAL_ALLOWLIST;
+exports.ACTIVITY_NODE_ALLOWLIST = ACTIVITY_NODE_ALLOWLIST;
+exports.ACTIVITY_NODE_DENYLIST = ACTIVITY_NODE_DENYLIST;
+exports.ActivityNodeTypeNotAllowedError = ActivityNodeTypeNotAllowedError;
 exports.BUILT_IN_QUERIES = BUILT_IN_QUERIES;
 exports.CHILD_CANCELLATION_TYPES = CHILD_CANCELLATION_TYPES;
 exports.COMMAND_EVENTS = COMMAND_EVENTS;
@@ -240,12 +336,20 @@ exports.EXECUTION_KINDS = EXECUTION_KINDS;
 exports.HISTORY_LIMIT_EXCEEDED_RATIO = HISTORY_LIMIT_EXCEEDED_RATIO;
 exports.HISTORY_PROTOCOL = HISTORY_PROTOCOL;
 exports.INPUT_EVENTS = INPUT_EVENTS;
+exports.LOCAL_ACTIVITY_MAX_TIMEOUT_MS = LOCAL_ACTIVITY_MAX_TIMEOUT_MS;
 exports.PARENT_CLOSE_POLICIES = PARENT_CLOSE_POLICIES;
 exports.PHASE_B_CORE_COMMANDS = PHASE_B_CORE_COMMANDS;
 exports.PHASE_B_PARITY_COMMANDS = PHASE_B_PARITY_COMMANDS;
 exports.PHASE_C_COMMANDS = PHASE_C_COMMANDS;
+exports.RUNTIME_RELEASE = RUNTIME_RELEASE;
 exports.TASK_FAILURE_CAUSES = TASK_FAILURE_CAUSES;
 exports.TERMINAL_COMMANDS = TERMINAL_COMMANDS;
 exports.TERMINAL_EVENTS = TERMINAL_EVENTS;
+exports.VERSIONING_BEHAVIORS = VERSIONING_BEHAVIORS;
+exports.WORKFLOW_ID_CONFLICT_POLICIES = WORKFLOW_ID_CONFLICT_POLICIES;
+exports.WORKFLOW_ID_REUSE_POLICIES = WORKFLOW_ID_REUSE_POLICIES;
+exports.WORKFLOW_TIMEOUT_TYPES = WORKFLOW_TIMEOUT_TYPES;
+exports.assertActivityNodeType = assertActivityNodeType;
+exports.isActivityNodeTypeAllowed = isActivityNodeTypeAllowed;
 exports.isCommandEvent = isCommandEvent;
 exports.isInputEvent = isInputEvent;