@futdevpro/nts-dynamo 1.15.203 → 1.15.217

package/build/_modules/operation-control/operation-executor.control-service.js

@@ -0,0 +1,311 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_OperationExecutor_ControlService = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_perf_hooks_1 = require("node:perf_hooks");
+/**
+ * One visible, single-use execution lifecycle. It owns renewal/cancellation observation, timers and provider abort.
+ * Work MUST cooperate with AbortSignal. Non-drained work remains visible; a host must retire that worker process.
+ * Mongo operations also require bounded connection/driver timeouts; shutdown never pretends a hung call drained.
+ */
+class DyNTS_OperationExecutor_ControlService {
+    settings;
+    workAbort = new AbortController();
+    heartbeatAbort = new AbortController();
+    timers = new Set();
+    graceTimers = new Set();
+    isStarted = false;
+    isRunning = false;
+    isClosed = false;
+    isWorkDrained = true;
+    activeStoreCalls = 0;
+    stopCode;
+    identity;
+    fencingToken;
+    lastReceipt = null;
+    leaseTimer;
+    completion;
+    workCompletion;
+    /** Requires direct Bedrock storage, explicit finite budgets and a server-owned opaque instance identity. */
+    constructor(settings) {
+        DyNTS_OperationExecutor_ControlService.assertSettings(settings);
+        this.settings = Object.freeze({ ...settings });
+    }
+    /** Shared host composition validates the exact same executor budgets before admitting any work. */
+    static assertSettings(settings) {
+        if (!settings?.store || !/^[0-9a-f]{64}$/u.test(settings.ownerId)
+            || ![settings.leaseDurationMs, settings.heartbeatIntervalMs, settings.maxRunTimeMs,
+                settings.shutdownGraceMs].every((value) => Number.isSafeInteger(value) && value > 0 && value <= 2_147_483_647)
+            || settings.heartbeatIntervalMs * 3 > settings.leaseDurationMs) {
+            throw new Error('DyNTS|OPERATION_EXECUTOR|INVALID_SETTINGS');
+        }
+    }
+    /** Starts exactly once; every acquire/renew request has a fresh identity, never an old acquire replay. */
+    run(execution) {
+        if (this.isStarted || this.isClosed) {
+            throw new Error('DyNTS|OPERATION_EXECUTOR|CLOSED');
+        }
+        if (!execution || !/^[0-9a-f]{64}$/u.test(execution.scopeHash)
+            || !/^[0-9a-f]{64}$/u.test(execution.operationId) || typeof execution.work !== 'function'
+            || (execution.recovery !== undefined && execution.recovery !== 'forbid-redispatch'
+                && execution.recovery !== 'allow-idempotent-replay')) {
+            throw new Error('DyNTS|OPERATION_EXECUTOR|INVALID_EXECUTION');
+        }
+        this.isStarted = true;
+        this.isRunning = true;
+        this.identity = Object.freeze({ ...execution });
+        this.completion = this.execute();
+        return this.completion;
+    }
+    /** Abort local work, then wait only the configured grace. False means the host MUST NOT declare shutdown complete. */
+    async shutdown() {
+        this.isClosed = true;
+        this.stop('shutdown');
+        const tasks = [];
+        if (this.completion) {
+            tasks.push(this.completion);
+        }
+        if (this.workCompletion) {
+            tasks.push(this.workCompletion);
+        }
+        await this.waitGrace(Promise.all(tasks));
+        return !this.isRunning && this.isWorkDrained && this.activeStoreCalls === 0;
+    }
+    /** Exposes unsettled work and database operations without raw reasons, payloads, errors or environment details. */
+    getStatus() {
+        return Object.freeze({
+            isRunning: this.isRunning, isClosed: this.isClosed, isWorkDrained: this.isWorkDrained,
+            activeStoreCalls: this.activeStoreCalls, activeTimers: this.timers.size + this.graceTimers.size,
+        });
+    }
+    async execute() {
+        this.schedule(() => this.stop('timed-out'), this.settings.maxRunTimeMs);
+        let code = 'store-failed';
+        let isTerminalCommitted = false;
+        try {
+            code = await this.acquireAndWork();
+            isTerminalCommitted = this.lastReceipt?.decision.accepted && this.lastReceipt.decision.code === 'completed';
+        }
+        catch (error) {
+            this.stopForStoreError(error);
+            code = this.stopCode ?? 'store-failed';
+        }
+        finally {
+            this.heartbeatAbort.abort();
+            if (!isTerminalCommitted) {
+                this.stop(code);
+                if (this.workCompletion && !this.isWorkDrained) {
+                    await this.waitGrace(this.workCompletion);
+                }
+                // Uncooperative work keeps its lease until expiry; no optimistic release or automatic redispatch.
+                if (this.fencingToken !== undefined && this.isWorkDrained) {
+                    try {
+                        await this.call(this.command('abandon'));
+                    }
+                    catch (error) {
+                        if (!(error instanceof Error && ['DyNTS|OPERATION_STORE|RETIRED',
+                            'DyNTS|OPERATION_STORE|NOT_REGISTERED'].includes(error.message))) {
+                            code = 'store-failed';
+                        }
+                    }
+                }
+            }
+            for (const timer of this.timers) {
+                clearTimeout(timer);
+            }
+            this.timers.clear();
+            this.isRunning = false;
+            this.isClosed = true;
+            this.identity = undefined;
+            if (this.isWorkDrained) {
+                this.workCompletion = undefined;
+            }
+        }
+        return this.result(code);
+    }
+    async acquireAndWork() {
+        const acquired = await this.call(this.command('acquire'));
+        if (!acquired.decision.accepted || acquired.decision.code !== 'acquired') {
+            return acquired.decision.record?.state === 'cancelled' ? 'cancelled' : 'not-acquired';
+        }
+        this.fencingToken = acquired.decision.record.fencingToken;
+        const isRecovery = acquired.previousRecord !== null;
+        if (isRecovery && this.identity.recovery !== 'allow-idempotent-replay') {
+            return 'recovery-required';
+        }
+        if (this.workAbort.signal.aborted || !await this.renew()) {
+            return this.stopCode ?? 'lease-lost';
+        }
+        this.isWorkDrained = false;
+        this.workCompletion = Promise.resolve().then(async () => {
+            if (this.workAbort.signal.aborted) {
+                return { outcome: 'failed' };
+            }
+            try {
+                const value = await this.identity.work(Object.freeze({
+                    signal: this.workAbort.signal, fencingToken: this.fencingToken, isRecovery: isRecovery,
+                }));
+                return value?.outcome === 'succeeded' || value?.outcome === 'failed' ? value : { outcome: 'failed' };
+            }
+            catch {
+                return { outcome: 'failed' };
+            }
+        }).finally(() => {
+            this.isWorkDrained = true;
+            if (this.isClosed) {
+                this.workCompletion = undefined;
+            }
+        });
+        const heartbeat = this.heartbeat();
+        try {
+            const work = await this.waitWork();
+            this.heartbeatAbort.abort();
+            await heartbeat;
+            if (this.workAbort.signal.aborted || work === null) {
+                return this.stopCode ?? 'lease-lost';
+            }
+            // Cancellation versus completion is decided by the durable transaction, never by the local signal alone.
+            const completed = await this.call(this.command('complete', work.outcome), work);
+            return completed.decision.accepted && completed.decision.code === 'completed' ? work.outcome
+                : completed.decision.record?.state === 'cancelled' ? 'cancelled' : 'lease-lost';
+        }
+        finally {
+            this.heartbeatAbort.abort();
+            await heartbeat;
+        }
+    }
+    async renew() {
+        const startedAt = node_perf_hooks_1.performance.now();
+        const receipt = await this.call(this.command('renew'));
+        if (!receipt.decision.accepted || receipt.decision.code !== 'renewed') {
+            this.stop(receipt.decision.record?.state === 'cancelled' ? 'cancelled' : 'lease-lost');
+            return false;
+        }
+        // Request START, not response arrival: transport latency must never extend local permission to run work.
+        const remainingMs = receipt.decision.record.leaseExpiresAtMs - receipt.decidedAtMs
+            - (node_perf_hooks_1.performance.now() - startedAt);
+        if (this.leaseTimer) {
+            clearTimeout(this.leaseTimer);
+            this.timers.delete(this.leaseTimer);
+        }
+        if (remainingMs <= 0) {
+            this.stop('lease-lost');
+            return false;
+        }
+        this.leaseTimer = this.schedule(() => this.stop('lease-lost'), remainingMs);
+        return !this.workAbort.signal.aborted;
+    }
+    async heartbeat() {
+        try {
+            while (!this.heartbeatAbort.signal.aborted && !this.workAbort.signal.aborted) {
+                await this.waitInterval();
+                if (this.heartbeatAbort.signal.aborted || this.workAbort.signal.aborted || !await this.renew()) {
+                    return;
+                }
+            }
+        }
+        catch (error) {
+            this.stopForStoreError(error);
+        }
+    }
+    async waitInterval() {
+        await new Promise((resolve) => {
+            /** Releases both cancellation listeners on either abort or elapsed interval. */
+            const finish = () => {
+                clearTimeout(timer);
+                this.timers.delete(timer);
+                this.heartbeatAbort.signal.removeEventListener('abort', finish);
+                this.workAbort.signal.removeEventListener('abort', finish);
+                resolve();
+            };
+            const timer = this.schedule(finish, this.settings.heartbeatIntervalMs);
+            this.heartbeatAbort.signal.addEventListener('abort', finish, { once: true });
+            this.workAbort.signal.addEventListener('abort', finish, { once: true });
+            if (this.heartbeatAbort.signal.aborted || this.workAbort.signal.aborted) {
+                finish();
+            }
+        });
+    }
+    async waitWork() {
+        let onAbort;
+        const aborted = new Promise((resolve) => {
+            onAbort = () => resolve(null);
+            this.workAbort.signal.addEventListener('abort', onAbort, { once: true });
+            if (this.workAbort.signal.aborted) {
+                onAbort();
+            }
+        });
+        try {
+            return await Promise.race([this.workCompletion, aborted]);
+        }
+        finally {
+            this.workAbort.signal.removeEventListener('abort', onAbort);
+        }
+    }
+    async waitGrace(task) {
+        let timer;
+        const elapsed = new Promise((resolve) => {
+            timer = setTimeout(resolve, this.settings.shutdownGraceMs);
+            this.graceTimers.add(timer);
+        });
+        try {
+            await Promise.race([task, elapsed]);
+        }
+        finally {
+            clearTimeout(timer);
+            this.graceTimers.delete(timer);
+        }
+    }
+    stopForStoreError(error) {
+        this.stop(error instanceof Error && error.message === 'DyNTS|OPERATION_STORE|RETIRED' ? 'retired'
+            : error instanceof Error && error.message === 'DyNTS|OPERATION_STORE|NOT_REGISTERED'
+                ? 'lease-lost' : 'store-failed');
+    }
+    stop(code) {
+        if (!this.stopCode) {
+            this.stopCode = code;
+            this.workAbort.abort();
+        }
+    }
+    schedule(callback, durationMs) {
+        const timer = setTimeout(() => {
+            this.timers.delete(timer);
+            callback();
+        }, Math.max(1, Math.floor(durationMs)));
+        this.timers.add(timer);
+        return timer;
+    }
+    command(kind, outcome) {
+        const base = {
+            contractVersion: 'dyfm-operation-command/1', scopeHash: this.identity.scopeHash,
+            operationId: this.identity.operationId,
+            requestId: (0, node_crypto_1.createHash)('sha256').update((0, node_crypto_1.randomUUID)()).digest('hex'), ownerId: this.settings.ownerId,
+        };
+        switch (kind) {
+            case 'acquire': return { ...base, kind: kind, leaseDurationMs: this.settings.leaseDurationMs };
+            case 'renew': return { ...base, kind: kind, fencingToken: this.fencingToken,
+                leaseDurationMs: this.settings.leaseDurationMs };
+            case 'complete': return { ...base, kind: kind, fencingToken: this.fencingToken, outcome: outcome };
+            case 'abandon': return { ...base, kind: kind, fencingToken: this.fencingToken };
+        }
+    }
+    async call(command, work) {
+        this.activeStoreCalls += 1;
+        try {
+            const receipt = await this.settings.store.execute(command, work?.publication);
+            this.lastReceipt = receipt;
+            return receipt;
+        }
+        finally {
+            this.activeStoreCalls -= 1;
+        }
+    }
+    result(code) {
+        return Object.freeze({
+            contractVersion: 'dynts-operation-execution/1', code: code,
+            isWorkDrained: this.isWorkDrained, receipt: this.lastReceipt,
+        });
+    }
+}
+exports.DyNTS_OperationExecutor_ControlService = DyNTS_OperationExecutor_ControlService;
+//# sourceMappingURL=operation-executor.control-service.js.map

package/build/_modules/operation-control/operation-executor.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-executor.control-service.js","sourceRoot":"","sources":["../../../src/_modules/operation-control/operation-executor.control-service.ts"],"names":[],"mappings":";;;AAAA,6CAAqD;AACrD,qDAA8C;AAc9C;;;;GAIG;AACH,MAAa,sCAAsC;IAChC,QAAQ,CAA4C;IACpD,SAAS,GAAoB,IAAI,eAAe,EAAE,CAAC;IACnD,cAAc,GAAoB,IAAI,eAAe,EAAE,CAAC;IACxD,MAAM,GAAuC,IAAI,GAAG,EAAE,CAAC;IACvD,WAAW,GAAuC,IAAI,GAAG,EAAE,CAAC;IACrE,SAAS,GAAY,KAAK,CAAC;IAC3B,SAAS,GAAY,KAAK,CAAC;IAC3B,QAAQ,GAAY,KAAK,CAAC;IAC1B,aAAa,GAAY,IAAI,CAAC;IAC9B,gBAAgB,GAAW,CAAC,CAAC;IAC7B,QAAQ,CAAyC;IACjD,QAAQ,CAAsC;IAC9C,YAAY,CAAU;IACtB,WAAW,GAA4C,IAAI,CAAC;IAC5D,UAAU,CAAiC;IAC3C,UAAU,CAAqD;IAC/D,cAAc,CAAgD;IAEtE,4GAA4G;IAC5G,YAAY,QAAmD;QAC7D,sCAAsC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,mGAAmG;IAC5F,MAAM,CAAC,cAAc,CAAC,QAAmD;QAC9E,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;eAC5D,CAAC,CAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,YAAY;gBACjF,QAAQ,CAAC,eAAe,CAAE,CAAC,KAAK,CAAC,CAAC,KAAa,EAAW,EAAE,CAC5D,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,aAAa,CAAC;eAClE,QAAQ,CAAC,mBAAmB,GAAG,CAAC,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,0GAA0G;IACnG,GAAG,CAAC,SAA6C;QACtD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;eACzD,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;eACtF,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,mBAAmB;mBAC7E,SAAS,CAAC,QAAQ,KAAK,yBAAyB,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAEjC,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,sHAAsH;IAC/G,KAAK,CAAC,QAAQ;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,MAAM,KAAK,GAAuB,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAEzC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,gBAAgB,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,mHAAmH;IAC5G,SAAS;QACd,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;YACrF,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI;SAChG,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9E,IAAI,IAAI,GAAqD,cAAc,CAAC;QAC5E,IAAI,mBAAmB,GAAY,KAAK,CAAC;QAEzC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC;QAC9G,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAE5B,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEhB,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC/C,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC5C,CAAC;gBAED,kGAAkG;gBAClG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC1D,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC3C,CAAC;oBAAC,OAAO,KAAc,EAAE,CAAC;wBACxB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,CAAE,+BAA+B;4BAC/D,sCAAsC,CAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;4BACpE,IAAI,GAAG,cAAc,CAAC;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAE1B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAqC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5F,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzE,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QAC1D,MAAM,UAAU,GAAY,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC;QAE7D,IAAI,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,yBAAyB,EAAE,CAAC;YACvE,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAkD,EAAE;YACpG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAwC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;oBACxF,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU;iBACvF,CAAC,CAAC,CAAC;gBAEJ,OAAO,KAAK,EAAE,OAAO,KAAK,WAAW,IAAI,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvG,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC,OAAO,CAAC,GAAS,EAAE;YACpB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAE1B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAkB,IAAI,CAAC,SAAS,EAAE,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,IAAI,GAA+C,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE/E,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,SAAS,CAAC;YAEhB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;YACvC,CAAC;YACD,yGAAyG;YACzG,MAAM,SAAS,GAAqC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;YAElH,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;gBAC1F,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;QACpF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,SAAS,GAAW,6BAAW,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAqC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAEvF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,yGAAyG;QACzG,MAAM,WAAW,GAAW,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC,WAAW;cACtF,CAAC,6BAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAExB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;QAElF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7E,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAE1B,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC/F,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,gFAAgF;YAChF,MAAM,MAAM,GAAe,GAAS,EAAE;gBACpC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,KAAK,GAAkC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAEtG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAExE,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxE,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,OAAmB,CAAC;QACxB,MAAM,OAAO,GAAkB,IAAI,OAAO,CAAO,CAAC,OAA8B,EAAQ,EAAE;YACxF,OAAO,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAE,CAAC,CAAC;QAC9D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAsB;QAC5C,IAAI,KAAoC,CAAC;QACzC,MAAM,OAAO,GAAkB,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YAC7E,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAE,IAAI,EAAE,OAAO,CAAE,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,CAAC,CAAC,CAAC,SAAS;YAC/F,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,sCAAsC;gBAClF,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAEO,IAAI,CAAC,IAA2C;QACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,QAAoB,EAAE,UAAkB;QACvD,MAAM,KAAK,GAAkC,UAAU,CAAC,GAAS,EAAE;YACjE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,QAAQ,EAAE,CAAC;QACb,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEvB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,IAAkD,EAAE,OAAgC;QAElG,MAAM,IAAI,GAAG;YACX,eAAe,EAAE,0BAAmC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YACxF,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,SAAS,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,wBAAU,GAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;SACnG,CAAC;QAEF,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC/F,KAAK,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;gBACzE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YACnD,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACnG,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,OAAmC,EACnC,IAA0C;QAE1C,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAqC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAEhH,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAE3B,OAAO,OAAO,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAA2C;QACxD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,6BAA6B,EAAE,IAAI,EAAE,IAAI;YAC1D,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW;SAC7D,CAAC,CAAC;IACL,CAAC;CACF;AA9VD,wFA8VC"}

package/build/_modules/operation-control/operation-host.control-service.d.ts

@@ -0,0 +1,25 @@
+import { DyNTS_OperationExecution_Interface, DyNTS_OperationExecutionResult_Interface } from './_models/operation-executor.interface';
+import { DyNTS_OperationHostSettings_Interface, DyNTS_OperationHostShutdown_Interface, DyNTS_OperationHostStatus_Interface } from './_models/operation-host.interface';
+/**
+ * Bounded process-local ownership of the concrete Bedrock executors. No registration, authorization or replay policy
+ * is invented here. Shutdown closes admission first and signals every executor before waiting for any of them.
+ * A non-cooperative operation remains visible and closes admission; the caller must terminate/reconcile its worker.
+ */
+export declare class DyNTS_OperationHost_ControlService {
+    private readonly settings;
+    private readonly operations;
+    private isClosed;
+    private activeShutdownCalls;
+    private shutdownCompletion?;
+    /** Requires a concrete store and explicit finite admission/executor limits. No timers are started here. */
+    constructor(settings: DyNTS_OperationHostSettings_Interface);
+    /** Reserves capacity synchronously, including against reentrant work/store callbacks. Never queues or retries. */
+    run(execution: DyNTS_OperationExecution_Interface): Promise<DyNTS_OperationExecutionResult_Interface>;
+    /** Concurrent callers share one drain. An incomplete drain can be measured again, but admission never reopens. */
+    shutdown(): Promise<DyNTS_OperationHostShutdown_Interface>;
+    /** A snapshot of all owned resources, including completed executions whose work has not actually settled. */
+    getStatus(): DyNTS_OperationHostStatus_Interface;
+    private drain;
+    private prune;
+}
+//# sourceMappingURL=operation-host.control-service.d.ts.map

package/build/_modules/operation-control/operation-host.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-host.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/operation-control/operation-host.control-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,wCAAwC,EAEzC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,mCAAmC,EACpC,MAAM,oCAAoC,CAAC;AAG5C;;;;GAIG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkE;IAC7F,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,mBAAmB,CAAa;IACxC,OAAO,CAAC,kBAAkB,CAAC,CAAiD;IAE5E,2GAA2G;gBAC/F,QAAQ,EAAE,qCAAqC;IAS3D,kHAAkH;IAC3G,GAAG,CAAC,SAAS,EAAE,kCAAkC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IA0D5G,kHAAkH;IAC3G,QAAQ,IAAI,OAAO,CAAC,qCAAqC,CAAC;IAcjE,6GAA6G;IACtG,SAAS,IAAI,mCAAmC;YAsBzC,KAAK;IAuBnB,OAAO,CAAC,KAAK;CAWd"}

package/build/_modules/operation-control/operation-host.control-service.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_OperationHost_ControlService = void 0;
+const operation_executor_control_service_1 = require("./operation-executor.control-service");
+/**
+ * Bounded process-local ownership of the concrete Bedrock executors. No registration, authorization or replay policy
+ * is invented here. Shutdown closes admission first and signals every executor before waiting for any of them.
+ * A non-cooperative operation remains visible and closes admission; the caller must terminate/reconcile its worker.
+ */
+class DyNTS_OperationHost_ControlService {
+    settings;
+    operations = new Map();
+    isClosed = false;
+    activeShutdownCalls = 0;
+    shutdownCompletion;
+    /** Requires a concrete store and explicit finite admission/executor limits. No timers are started here. */
+    constructor(settings) {
+        operation_executor_control_service_1.DyNTS_OperationExecutor_ControlService.assertSettings(settings);
+        if (!Number.isSafeInteger(settings.maxActiveOperations) || settings.maxActiveOperations <= 0) {
+            throw new Error('DyNTS|OPERATION_HOST|INVALID_SETTINGS');
+        }
+        this.settings = Object.freeze({ ...settings });
+    }
+    /** Reserves capacity synchronously, including against reentrant work/store callbacks. Never queues or retries. */
+    run(execution) {
+        let snapshot;
+        try {
+            snapshot = {
+                scopeHash: execution?.scopeHash, operationId: execution?.operationId,
+                work: execution?.work, recovery: execution?.recovery,
+            };
+        }
+        catch {
+            throw new Error('DyNTS|OPERATION_HOST|INVALID_EXECUTION');
+        }
+        if (typeof snapshot.scopeHash !== 'string' || !/^[0-9a-f]{64}$/u.test(snapshot.scopeHash)
+            || typeof snapshot.operationId !== 'string' || !/^[0-9a-f]{64}$/u.test(snapshot.operationId)) {
+            throw new Error('DyNTS|OPERATION_HOST|INVALID_EXECUTION');
+        }
+        this.prune();
+        if (this.isClosed) {
+            throw new Error('DyNTS|OPERATION_HOST|CLOSED');
+        }
+        const key = `${snapshot.scopeHash}:${snapshot.operationId}`;
+        if (this.operations.has(key)) {
+            throw new Error('DyNTS|OPERATION_HOST|ALREADY_ACTIVE');
+        }
+        if (this.operations.size >= this.settings.maxActiveOperations) {
+            throw new Error('DyNTS|OPERATION_HOST|CAPACITY_EXCEEDED');
+        }
+        const executor = new operation_executor_control_service_1.DyNTS_OperationExecutor_ControlService(this.settings);
+        this.operations.set(key, executor);
+        let completion;
+        try {
+            completion = executor.run(snapshot);
+        }
+        catch {
+            this.operations.delete(key);
+            throw new Error('DyNTS|OPERATION_HOST|INVALID_EXECUTION');
+        }
+        return completion.then((result) => {
+            if (!result.isWorkDrained) {
+                this.isClosed = true;
+            }
+            this.prune();
+            return result;
+        }, () => {
+            this.isClosed = true;
+            throw new Error('DyNTS|OPERATION_HOST|EXECUTION_FAILED');
+        });
+    }
+    /** Concurrent callers share one drain. An incomplete drain can be measured again, but admission never reopens. */
+    shutdown() {
+        this.isClosed = true;
+        if (!this.shutdownCompletion) {
+            // Defer signaling until the promise is assigned: an abort listener may synchronously call shutdown again.
+            this.shutdownCompletion = Promise.resolve().then(() => this.drain()).finally(() => {
+                this.shutdownCompletion = undefined;
+            });
+        }
+        return this.shutdownCompletion;
+    }
+    /** A snapshot of all owned resources, including completed executions whose work has not actually settled. */
+    getStatus() {
+        this.prune();
+        let undrainedWorkCount = 0;
+        let activeStoreCalls = 0;
+        let activeTimers = 0;
+        for (const executor of this.operations.values()) {
+            const status = executor.getStatus();
+            undrainedWorkCount += status.isWorkDrained ? 0 : 1;
+            activeStoreCalls += status.activeStoreCalls;
+            activeTimers += status.activeTimers;
+        }
+        return Object.freeze({
+            contractVersion: 'dynts-operation-host-status/1', isClosed: this.isClosed,
+            isDrained: this.operations.size === 0 && this.activeShutdownCalls === 0,
+            activeOperationCount: this.operations.size, undrainedWorkCount: undrainedWorkCount,
+            activeStoreCalls: activeStoreCalls, activeTimers: activeTimers, activeShutdownCalls: this.activeShutdownCalls,
+        });
+    }
+    async drain() {
+        this.prune();
+        const results = await Promise.allSettled(Array.from(this.operations.values(), async (executor) => {
+            this.activeShutdownCalls += 1;
+            try {
+                return await executor.shutdown();
+            }
+            finally {
+                this.activeShutdownCalls -= 1;
+            }
+        }));
+        const failedShutdownCount = results.filter((result) => result.status === 'rejected').length;
+        const status = this.getStatus();
+        return Object.freeze({
+            ...status, contractVersion: 'dynts-operation-host-shutdown/1', failedShutdownCount: failedShutdownCount,
+            isShutdownComplete: status.isDrained && failedShutdownCount === 0,
+        });
+    }
+    prune() {
+        for (const entry of this.operations) {
+            const [key, executor] = entry;
+            const status = executor.getStatus();
+            if (status.isClosed && !status.isRunning && status.isWorkDrained
+                && status.activeStoreCalls === 0 && status.activeTimers === 0) {
+                this.operations.delete(key);
+            }
+        }
+    }
+}
+exports.DyNTS_OperationHost_ControlService = DyNTS_OperationHost_ControlService;
+//# sourceMappingURL=operation-host.control-service.js.map

package/build/_modules/operation-control/operation-host.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-host.control-service.js","sourceRoot":"","sources":["../../../src/_modules/operation-control/operation-host.control-service.ts"],"names":[],"mappings":";;;AAUA,6FAA8F;AAE9F;;;;GAIG;AACH,MAAa,kCAAkC;IAC5B,QAAQ,CAAwC;IAChD,UAAU,GAAwD,IAAI,GAAG,EAAE,CAAC;IACrF,QAAQ,GAAY,KAAK,CAAC;IAC1B,mBAAmB,GAAW,CAAC,CAAC;IAChC,kBAAkB,CAAkD;IAE5E,2GAA2G;IAC3G,YAAY,QAA+C;QACzD,2EAAsC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,kHAAkH;IAC3G,GAAG,CAAC,SAA6C;QACtD,IAAI,QAA4C,CAAC;QAEjD,IAAI,CAAC;YACH,QAAQ,GAAG;gBACT,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW;gBACpE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;aACrD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;eACpF,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QAEb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,GAAG,GAAW,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEpE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,2EAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,IAAI,UAA6D,CAAC;QAElE,IAAI,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAE5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,MAAgD,EAC/B,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;YAEb,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,GAAU,EAAE;YACb,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YAErB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kHAAkH;IAC3G,QAAQ;QACb,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,0GAA0G;YAC1G,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAmD,EAAE,CACpG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAS,EAAE;gBACjC,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,6GAA6G;IACtG,SAAS;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,kBAAkB,GAAW,CAAC,CAAC;QACnC,IAAI,gBAAgB,GAAW,CAAC,CAAC;QACjC,IAAI,YAAY,GAAW,CAAC,CAAC;QAE7B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,MAAM,MAAM,GAA4C,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE7E,kBAAkB,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAC;YAC5C,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,+BAA+B,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACzE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,mBAAmB,KAAK,CAAC;YACvE,oBAAoB,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,kBAAkB;YAClF,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9G,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAoC,MAAM,OAAO,CAAC,UAAU,CACvE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAgD,EAC3E,EAAE;YACjB,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACnC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,MAAM,mBAAmB,GAAW,OAAO,CAAC,MAAM,CAAC,CAAC,MAAqC,EAAW,EAAE,CACpG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QACvC,MAAM,MAAM,GAAwC,IAAI,CAAC,SAAS,EAAE,CAAC;QAErE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,MAAM,EAAE,eAAe,EAAE,iCAAiC,EAAE,mBAAmB,EAAE,mBAAmB;YACvG,kBAAkB,EAAE,MAAM,CAAC,SAAS,IAAI,mBAAmB,KAAK,CAAC;SAClE,CAAC,CAAC;IACL,CAAC;IAEO,KAAK;QACX,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,CAAE,GAAG,EAAE,QAAQ,CAAE,GAAqD,KAAK,CAAC;YAClF,MAAM,MAAM,GAA4C,QAAQ,CAAC,SAAS,EAAE,CAAC;YAE7E,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa;mBAC3D,MAAM,CAAC,gBAAgB,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AApJD,gFAoJC"}

package/build/_modules/operation-control/operation.mongo-store.d.ts

@@ -0,0 +1,52 @@
+import { ClientSession } from 'mongoose';
+import { DyFM_OperationRecord_Interface } from '@futdevpro/fsm-dynamo/operation-control';
+import { DyNTS_OperationErasure_Interface, DyNTS_OperationIdentity_Interface, DyNTS_OperationPublication_Interface, DyNTS_OperationReceipt_Interface, DyNTS_OperationRetirement_Interface, DyNTS_OperationStoreSettings_Interface } from './_models/operation-store.interface';
+/**
+ * Replica-set Mongo operation store. One identity row serializes ALL decisions, including denials and exact replay.
+ * Dispatch never creates identities. Explicit random registration makes retired identity erasure non-resurrectable.
+ */
+export declare class DyNTS_Operation_MongoStore {
+    private readonly settings;
+    private readonly transactions;
+    private readiness?;
+    /** Uses the same connection for transaction sessions and collections. issuer is the authenticated account ID. */
+    constructor(settings: DyNTS_OperationStoreSettings_Interface);
+    /** Creates collections before transactions; primary-key uniqueness covers identity and exact command replay. */
+    ensureReady(): Promise<void>;
+    /**
+     * Mint a NEW random operation identity. Persist the product's identity mapping in this SAME owning transaction.
+     * Never call registration as a fallback from execute/not-found. Caller authorization remains outside this primitive.
+     */
+    register(scopeHash: string, session: ClientSession): Promise<DyNTS_OperationIdentity_Interface>;
+    /**
+     * Close authority without deleting evidence. Commit the product's no-new-work/privacy barrier in the SAME session.
+     * Retirement is irreversible and idempotent. It is distinct from ordinary cancellation and ends receipt replay.
+     */
+    retire(identity: DyNTS_OperationIdentity_Interface, session: ClientSession): Promise<DyNTS_OperationRetirement_Interface | null>;
+    /**
+     * Erase at most batchSize receipts, then the retired identity after its last issued lease expires (DB time).
+     * Caller owns verified erasure/retention policy and must update its product mapping in this SAME transaction.
+     * No anonymous/forever tombstone remains; stale requests cannot recreate a deleted registration.
+     */
+    eraseRetired(identity: DyNTS_OperationIdentity_Interface, batchSize: number, session: ClientSession): Promise<DyNTS_OperationErasure_Interface>;
+    /**
+     * Commits the exact original decision or returns its historical receipt. A different command/publication conflicts.
+     * No provider/network work belongs in publication.write; only same-session database changes can be made atomic.
+     */
+    execute(commandValue: unknown, publication?: DyNTS_OperationPublication_Interface): Promise<DyNTS_OperationReceipt_Interface>;
+    /** Majority primary snapshot only; callers must use execute for fenced publication, not trust a read as a lease. */
+    observe(identity: DyNTS_OperationIdentity_Interface): Promise<DyFM_OperationRecord_Interface | null>;
+    private executeTransaction;
+    private applyAtBoundary;
+    private parseDocument;
+    private parseReceipt;
+    private identityKey;
+    private isTime;
+    private leaseValidator;
+    private lifecycle;
+    private isHash;
+    private isMongoCode;
+    private leases;
+    private receipts;
+}
+//# sourceMappingURL=operation.mongo-store.d.ts.map

package/build/_modules/operation-control/operation.mongo-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation.mongo-store.d.ts","sourceRoot":"","sources":["../../../src/_modules/operation-control/operation.mongo-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAS,MAAM,UAAU,CAAC;AAEhD,OAAO,EAIL,8BAA8B,EAC/B,MAAM,yCAAyC,CAAC;AAIjD,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,mCAAmC,EACnC,sCAAsC,EACvC,MAAM,qCAAqC,CAAC;AAiB7C;;;GAGG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IACrE,OAAO,CAAC,SAAS,CAAC,CAAgB;IAElC,iHAAiH;gBACrG,QAAQ,EAAE,sCAAsC;IAqB5D,gHAAgH;IACnG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAuCzC;;;OAGG;IACU,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAwB5G;;;OAGG;IACU,MAAM,CACjB,QAAQ,EAAE,iCAAiC,EAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC;IA8BtD;;;;OAIG;IACU,YAAY,CACvB,QAAQ,EAAE,iCAAiC,EAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,gCAAgC,CAAC;IAuD5C;;;OAGG;IACU,OAAO,CAClB,YAAY,EAAE,OAAO,EACrB,WAAW,CAAC,EAAE,oCAAoC,GACjD,OAAO,CAAC,gCAAgC,CAAC;IA8E5C,oHAAoH;IACvG,OAAO,CAClB,QAAQ,EAAE,iCAAiC,GAC1C,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;YAsBnC,kBAAkB;YA0FlB,eAAe;IA2C7B,OAAO,CAAC,aAAa;IA8BrB,OAAO,CAAC,YAAY;IA4CpB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,cAAc;YAmBR,SAAS;IAiCvB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,QAAQ;CAKjB"}