@lostgradient/weft 0.2.1 → 0.4.0

package/dist/mcp/dispatcher.js

@@ -103,7 +103,7 @@ function initialize(params, session) {
   return {
     protocolVersion: session.protocolVersion,
     capabilities: {
-      tools: { listChanged: !1 },
+      tools: { listChanged: !0 },
       resources: { subscribe: !0, listChanged: !1 },
       prompts: {},
       logging: {},

package/dist/mcp/http.js

@@ -109,7 +109,7 @@ function resolvePostSession(options, message) {
   if (session === void 0)
     return new Response("MCP session not found", { status: 404 });
   const principal = principalFromOptions(options);
-  if (!isSameSessionOwner(session.principal, principal))
+  if (!isAuthorizedForSession(session, principal, sessionTokenFromHeaders(options.request.headers)))
     return new Response("Forbidden", { status: 403, headers: noStoreHeaders() });
   options.sessionManager.touch(session);
   return { session, createdSession: !1, principal };
@@ -134,7 +134,7 @@ function handleMcpGet(options) {
   if (session === void 0)
     return new Response("MCP session not found", { status: 404 });
   const principal = principalFromOptions(options);
-  if (!isSameSessionOwner(session.principal, principal))
+  if (!isAuthorizedForSession(session, principal, sessionTokenFromHeaders(options.request.headers)))
     return new Response("Forbidden", { status: 403, headers: noStoreHeaders() });
   options.sessionManager.touch(session);
   const stream = new ReadableStream({
@@ -173,7 +173,7 @@ function handleMcpDelete(options) {
   const session = options.sessionManager.get(sessionId);
   if (session === void 0)
     return new Response("MCP session not found", { status: 404 });
-  if (!isSameSessionOwner(session.principal, principalFromOptions(options)))
+  if (!isAuthorizedForSession(session, principalFromOptions(options), sessionTokenFromHeaders(options.request.headers)))
     return new Response("Forbidden", { status: 403, headers: noStoreHeaders() });
   options.sessionManager.delete(sessionId);
   return new Response(null, { status: 204, headers: noStoreHeaders() });
@@ -181,6 +181,9 @@ function handleMcpDelete(options) {
 function sessionIdFromHeaders(headers) {
   return headers.get("Mcp-Session-Id") ?? headers.get("MCP-Session-Id");
 }
+function sessionTokenFromHeaders(headers) {
+  return headers.get("Mcp-Session-Token") ?? headers.get("MCP-Session-Token");
+}
 function validateProtocolVersion(headers) {
   const version = headers.get("Mcp-Protocol-Version") ?? headers.get("MCP-Protocol-Version");
   if (version === null)
@@ -191,8 +194,10 @@ function validateProtocolVersion(headers) {
 }
 function maybeSessionHeaders(session, includeSession) {
   const headers = noStoreHeaders();
-  if (includeSession)
+  if (includeSession) {
     headers["Mcp-Session-Id"] = session.id;
+    headers["Mcp-Session-Token"] = session.token;
+  }
   return headers;
 }
 function noStoreHeaders() {
@@ -204,6 +209,13 @@ function authRequiredFromOptions(options) {
 function principalFromOptions(options) {
   return options.principal ?? anonymousPrincipal();
 }
+function isAuthorizedForSession(session, caller, presentedToken) {
+  if (!isSameSessionOwner(session.principal, caller))
+    return !1;
+  if (isAuthenticated(session.principal))
+    return !0;
+  return presentedToken !== null && presentedToken === session.token;
+}
 function isSameSessionOwner(left, right) {
   if (left === right)
     return !0;
@@ -266,7 +278,5 @@ function validateOrigin(request, publicOrigin, trustedHosts) {
     return null;
   if (trustedHosts?.includes(originUrl.host))
     return null;
-  if (originUrl.host === new URL(request.url).host)
-    return null;
   return new Response("Forbidden", { status: 403 });
 }

package/dist/mcp/list-filter.js

@@ -4,7 +4,8 @@ const WORKFLOW_STATUS_VALUES = [
   "completed",
   "failed",
   "cancelled",
-  "timed-out"
+  "timed-out",
+  "suspended"
 ];
 export function parseMcpListFilter(value) {
   if (!isRecord(value))

package/dist/mcp/protocol.d.ts

@@ -15,6 +15,8 @@ import { type JsonRpcId } from '../server/json-rpc-protocol.ts';
 export declare const MCP_PROTOCOL_VERSION = "2025-11-25";
 /** MCP method used for live tool introspection. */
 export declare const MCP_TOOLS_LIST_METHOD = "tools/list";
+/** MCP notification emitted when the live tools/list output changes. */
+export declare const MCP_TOOLS_LIST_CHANGED_NOTIFICATION = "notifications/tools/list_changed";
 /** MCP method used for live resource introspection. */
 export declare const MCP_RESOURCES_LIST_METHOD = "resources/list";
 /** MCP method used for live resource-template introspection. */

package/dist/mcp/protocol.js

@@ -2,7 +2,7 @@ import {
   JSON_RPC_ERROR_CODES,
   JSON_RPC_VERSION
 } from "../server/json-rpc-protocol.js";
-export const MCP_PROTOCOL_VERSION = "2025-11-25", MCP_TOOLS_LIST_METHOD = "tools/list", MCP_RESOURCES_LIST_METHOD = "resources/list", MCP_RESOURCE_TEMPLATES_LIST_METHOD = "resources/templates/list", DEFAULT_MCP_MAX_BODY_BYTES = 1048576;
+export const MCP_PROTOCOL_VERSION = "2025-11-25", MCP_TOOLS_LIST_METHOD = "tools/list", MCP_TOOLS_LIST_CHANGED_NOTIFICATION = "notifications/tools/list_changed", MCP_RESOURCES_LIST_METHOD = "resources/list", MCP_RESOURCE_TEMPLATES_LIST_METHOD = "resources/templates/list", DEFAULT_MCP_MAX_BODY_BYTES = 1048576;
 export function successResponse(id, result) {
   return { jsonrpc: JSON_RPC_VERSION, id, result };
 }

package/dist/mcp/session.d.ts

@@ -63,6 +63,20 @@ export declare class McpSession {
     #private;
     readonly id: string;
     readonly principal: Principal;
+    /**
+     * Per-session continuation secret minted at creation. The session {@link id} is
+     * sent by the client on *every* continuation request (POST/GET/DELETE), so it is
+     * routinely exposed to proxy and access logs and is not, by itself, a credential.
+     * This token is the credential: it is disclosed to the creating client exactly
+     * once — in the `initialize` response — and never echoed on a continuation
+     * response. The HTTP transport requires it alongside the session id on every
+     * continuation request for sessions whose principal carries no other
+     * distinguishing secret (anonymous sessions under `authRequired: false`), so a
+     * leaked session id alone cannot drive, read, or terminate another caller's
+     * session. Authenticated sessions already re-present their credential per request
+     * and do not gate on this token.
+     */
+    readonly token: string;
     phase: McpSessionPhase;
     protocolVersion: string;
     readonly subscriptions: Set<string>;
@@ -79,6 +93,8 @@ export declare class McpSession {
     cancelRequest(requestId: unknown): string | undefined;
     /** True when an in-flight MCP request has received a cancellation notification. */
     isRequestCancelled(requestId: unknown): boolean;
+    /** Abort signal for an in-flight MCP request, if it can be cancelled. */
+    requestSignal(requestId: unknown): AbortSignal | undefined;
     /** Stop tracking an in-flight request after it completes. */
     untrackRequest(requestId: unknown): void;
     /** Return the workflow associated with an in-flight MCP request. */

package/dist/mcp/session.js

@@ -1,6 +1,8 @@
+import { WorkflowDefinitionRegisteredEvent } from "../core/events.js";
 import { WeftError } from "../core/weft-error.js";
-import { requestIdKey } from "./protocol.js";
+import { MCP_TOOLS_LIST_CHANGED_NOTIFICATION, requestIdKey } from "./protocol.js";
 import { isWorkflowSearchResourceUri, workflowResourceUri } from "./resources.js";
+import { listMcpTools } from "./tools.js";
 
 export class McpSessionLimitExceededError extends WeftError {
   constructor() {
@@ -14,6 +16,7 @@ const RESOURCE_EVENT_NAMES = [
   "workflow:cancelled",
   "workflow:timed-out",
   "workflow:resumed",
+  "workflow:suspended",
   "signal:received",
   "signal:delivered",
   "attributes:changed",
@@ -24,6 +27,7 @@ const RESOURCE_EVENT_NAMES = [
 export class McpSession {
   id;
   principal;
+  token;
   phase = "new";
   protocolVersion = "2025-11-25";
   subscriptions = new Set;
@@ -35,6 +39,7 @@ export class McpSession {
   constructor(id, principal, currentTimeMilliseconds = Date.now()) {
     this.id = id;
     this.principal = principal;
+    this.token = crypto.randomUUID();
     this.createdAtMilliseconds = currentTimeMilliseconds;
     this.lastActivityMilliseconds = currentTimeMilliseconds;
   }
@@ -48,7 +53,7 @@ export class McpSession {
     const key = requestIdKey(asJsonRpcId(requestId));
     if (key === void 0)
       return;
-    this.#pendingRequests.set(key, { workflowId });
+    this.#pendingRequests.set(key, { workflowId, abortController: new AbortController });
   }
   cancelRequest(requestId) {
     const key = requestIdKey(asJsonRpcId(requestId));
@@ -58,12 +63,19 @@ export class McpSession {
     if (request === void 0)
       return;
     this.#cancelledRequestKeys.add(key);
+    request.abortController.abort();
     return request.workflowId;
   }
   isRequestCancelled(requestId) {
     const key = requestIdKey(asJsonRpcId(requestId));
     return key !== void 0 && this.#cancelledRequestKeys.has(key);
   }
+  requestSignal(requestId) {
+    const key = requestIdKey(asJsonRpcId(requestId));
+    if (key === void 0)
+      return;
+    return this.#pendingRequests.get(key)?.abortController.signal;
+  }
   untrackRequest(requestId) {
     const key = requestIdKey(asJsonRpcId(requestId));
     if (key === void 0)
@@ -108,23 +120,30 @@ function asJsonRpcId(value) {
 export class McpSessionManager {
   #engine;
   #sessions = new Map;
-  #listener;
+  #resourceListener;
+  #workflowDefinitionListener;
   #maximumSessions;
   #sessionIdleTimeoutMilliseconds;
   #currentTimeMilliseconds;
+  #toolListSignature;
   constructor(engine, options = {}) {
     this.#engine = engine;
     this.#maximumSessions = options.maximumSessions ?? 1024;
     this.#sessionIdleTimeoutMilliseconds = options.sessionIdleTimeoutMilliseconds ?? 1800000;
     this.#currentTimeMilliseconds = options.currentTimeMilliseconds ?? Date.now;
-    this.#listener = (event) => {
+    this.#toolListSignature = toolListSignature(engine);
+    this.#resourceListener = (event) => {
       const workflowId = event.workflowId;
       if (typeof workflowId !== "string")
         return;
       this.#notifyWorkflowResourceUpdated(workflowId);
     };
+    this.#workflowDefinitionListener = () => {
+      this.#notifyToolListChangedIfNeeded();
+    };
     for (const eventName of RESOURCE_EVENT_NAMES)
-      this.#engine.addEventListener(eventName, this.#listener);
+      this.#engine.addEventListener(eventName, this.#resourceListener);
+    this.#engine.addEventListener(WorkflowDefinitionRegisteredEvent.type, this.#workflowDefinitionListener);
   }
   create(principal) {
     this.#deleteExpiredSessions();
@@ -184,6 +203,20 @@ export class McpSessionManager {
     }
     this.#deleteExpiredSessions();
   }
+  #notifyToolListChangedIfNeeded() {
+    const nextSignature = toolListSignature(this.#engine);
+    if (toolListSignaturesEqual(this.#toolListSignature, nextSignature))
+      return;
+    this.#toolListSignature = nextSignature;
+    const now = this.#currentTimeMilliseconds();
+    for (const session of this.#sessions.values()) {
+      if (session.phase !== "ready")
+        continue;
+      session.touch(now);
+      session.notify(MCP_TOOLS_LIST_CHANGED_NOTIFICATION);
+    }
+    this.#deleteExpiredSessions();
+  }
   #deleteExpiredSessions() {
     const now = this.#currentTimeMilliseconds();
     for (const [sessionId, session] of this.#sessions) {
@@ -195,10 +228,31 @@ export class McpSessionManager {
   }
   async[Symbol.asyncDispose]() {
     for (const eventName of RESOURCE_EVENT_NAMES)
-      this.#engine.removeEventListener(eventName, this.#listener);
+      this.#engine.removeEventListener(eventName, this.#resourceListener);
+    this.#engine.removeEventListener(WorkflowDefinitionRegisteredEvent.type, this.#workflowDefinitionListener);
     this.closeAll();
   }
 }
+function toolListSignature(engine) {
+  return listMcpTools(engine).map((tool) => [
+    tool.name,
+    tool.title,
+    tool.description,
+    JSON.stringify(tool.inputSchema) ?? ""
+  ]);
+}
+function toolListSignaturesEqual(left, right) {
+  if (left.length !== right.length)
+    return !1;
+  for (let index = 0;index < left.length; index++) {
+    const leftEntry = left[index], rightEntry = right[index];
+    if (leftEntry === void 0 || rightEntry === void 0)
+      return !1;
+    if (leftEntry[0] !== rightEntry[0] || leftEntry[1] !== rightEntry[1] || leftEntry[2] !== rightEntry[2] || leftEntry[3] !== rightEntry[3])
+      return !1;
+  }
+  return !0;
+}
 export function createMcpSessionManager(engine, options) {
   return new McpSessionManager(engine, options);
 }

package/dist/mcp/tools.js

@@ -8,7 +8,7 @@ import {
   listVisibleWorkflows
 } from "./access.js";
 import { parseMcpListFilter } from "./list-filter.js";
-const toolRegistryCache = new WeakMap;
+const toolRegistryCache = new WeakMap, DEFAULT_WORKFLOW_TOOL_TIMEOUT_MS = 30000, MAX_WORKFLOW_TOOL_TIMEOUT_MS = 2147483647;
 export function listMcpTools(engine) {
   return getToolRegistry(engine).tools.map((tool) => tool.definition);
 }
@@ -71,7 +71,7 @@ function buildToolImplementations(engine) {
       },
       call: async (argumentsValue, context) => {
         assertScope(context, "workflows:write", "Calling workflow tools");
-        const input = argumentsValue, workflowId = crypto.randomUUID();
+        const { input, timeoutMs } = parseWorkflowToolArguments(argumentsValue), workflowId = crypto.randomUUID();
         context.session.trackRequest(context.requestId, workflowId);
         try {
           if (context.session.isRequestCancelled(context.requestId))
@@ -81,8 +81,13 @@ function buildToolImplementations(engine) {
           });
           if (context.session.isRequestCancelled(context.requestId))
             await context.engine.cancel(handle.id);
-          const result = await handle.result();
-          return { workflowId: handle.id, result };
+          const outcome = await waitForWorkflowToolResult(handle, {
+            timeoutMs,
+            signal: context.session.requestSignal(context.requestId)
+          });
+          if (outcome.status === "timed-out")
+            return workflowToolStillRunningResult(handle.id, timeoutMs);
+          return { workflowId: handle.id, result: outcome.result };
         } finally {
           context.session.untrackRequest(context.requestId);
         }
@@ -93,11 +98,73 @@ function buildToolImplementations(engine) {
 }
 function convertWorkflowInputSchema(workflowType, schema) {
   try {
-    return definitionSchemaToJsonSchema(schema, "input");
+    return withWorkflowToolTimeoutParameter(definitionSchemaToJsonSchema(schema, "input"));
   } catch (cause) {
     throw new RegistrySchemaConversionError("workflow", workflowType, "inputSchema", cause);
   }
 }
+function withWorkflowToolTimeoutParameter(schema) {
+  return {
+    type: "object",
+    additionalProperties: !1,
+    required: ["input"],
+    properties: {
+      input: schema,
+      timeoutMs: {
+        type: "integer",
+        minimum: 1,
+        maximum: MAX_WORKFLOW_TOOL_TIMEOUT_MS,
+        default: DEFAULT_WORKFLOW_TOOL_TIMEOUT_MS,
+        description: "Maximum milliseconds to wait for the workflow result before returning a running status."
+      }
+    }
+  };
+}
+function parseWorkflowToolArguments(argumentsValue) {
+  if (argumentsValue === null || typeof argumentsValue !== "object" || Array.isArray(argumentsValue))
+    return { input: argumentsValue, timeoutMs: DEFAULT_WORKFLOW_TOOL_TIMEOUT_MS };
+  const record = argumentsValue, timeoutMs = parseWorkflowToolTimeoutMs(record.timeoutMs);
+  return { input: record.input, timeoutMs };
+}
+function parseWorkflowToolTimeoutMs(value) {
+  if (value === void 0)
+    return DEFAULT_WORKFLOW_TOOL_TIMEOUT_MS;
+  if (typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= MAX_WORKFLOW_TOOL_TIMEOUT_MS)
+    return value;
+  throw new McpToolExecutionError(`Tool argument "timeoutMs" must be an integer from 1 to ${MAX_WORKFLOW_TOOL_TIMEOUT_MS}`);
+}
+async function waitForWorkflowToolResult(handle, options) {
+  if (options.signal?.aborted)
+    throw new McpToolExecutionError("Workflow cancelled");
+  let timeout, cleanupAbortListener;
+  const resultPromise = handle.result().then((result) => ({ status: "completed", result })), timeoutPromise = new Promise((resolve) => {
+    timeout = setTimeout(() => resolve({ status: "timed-out" }), options.timeoutMs);
+  }), cancellationPromise = options.signal === void 0 ? void 0 : new Promise((_resolve, reject) => {
+    const abort = () => reject(new McpToolExecutionError("Workflow cancelled"));
+    options.signal?.addEventListener("abort", abort, { once: !0 });
+    cleanupAbortListener = () => options.signal?.removeEventListener("abort", abort);
+  });
+  try {
+    return await Promise.race(cancellationPromise === void 0 ? [resultPromise, timeoutPromise] : [resultPromise, timeoutPromise, cancellationPromise]);
+  } finally {
+    if (timeout !== void 0)
+      clearTimeout(timeout);
+    cleanupAbortListener?.();
+  }
+}
+function workflowToolStillRunningResult(workflowId, timeoutMs) {
+  return {
+    workflowId,
+    status: "running",
+    timedOut: !0,
+    timeoutMs,
+    message: "Workflow is still running and was not cancelled. Call get_workflow_state with this workflowId to poll for completion.",
+    followUp: {
+      tool: "get_workflow_state",
+      arguments: { workflowId }
+    }
+  };
+}
 function builtInTools() {
   return [
     {
@@ -223,7 +290,7 @@ async function requireVisibleWorkflow(context, workflowId) {
   return state;
 }
 function toolSuccess(value) {
-  return { content: [{ type: "text", text: JSON.stringify(value) }] };
+  return { isError: !1, content: [{ type: "text", text: JSON.stringify(value) }] };
 }
 function toolError(message) {
   return { isError: !0, content: [{ type: "text", text: message }] };

package/dist/observability/index.js

@@ -1,4 +1,4 @@
 // @bun
-var OS=Object.defineProperty;var PS=(S)=>S;function bS(S,$){this[S]=PS.bind(null,$)}var eS=(S,$)=>{for(var G in $)OS(S,G,{get:$[G],enumerable:!0,configurable:!0,set:bS.bind($,G)})};var Q=(S,$)=>()=>(S&&($=S(S=0)),$);var m,d,i,n;var o=Q(()=>{m=class m extends Event{static type="activity:started";operationId;workflowId;activityName;attempt;constructor(S,$,G,K){super(m.type);this.operationId=S,this.workflowId=$,this.activityName=G,this.attempt=K}};d=class d extends Event{static type="activity:completed";operationId;workflowId;activityName;duration;constructor(S,$,G,K){super(d.type);this.operationId=S,this.workflowId=$,this.activityName=G,this.duration=K}};i=class i extends Event{static type="activity:async-pending";token;operationId;workflowId;activityName;attempt;constructor(S,$,G,K,L){super(i.type);this.token=S,this.operationId=$,this.workflowId=G,this.activityName=K,this.attempt=L}};n=class n extends Event{static type="activity:failed";operationId;workflowId;activityName;error;attempt;constructor(S,$,G,K,L){super(n.type);this.operationId=S,this.workflowId=$,this.activityName=G,this.error=K,this.attempt=L}}});var l;var r=Q(()=>{l=class l extends Event{static type="attributes:changed";workflowId;changes;constructor(S,$){super(l.type);this.workflowId=S,this.changes=$}}});var s,a;var t=Q(()=>{s=class s extends Event{static type="signal:received";workflowId;signalName;payload;constructor(S,$,G){super(s.type);this.workflowId=S,this.signalName=$,this.payload=G}};a=class a extends Event{static type="signal:delivered";workflowId;signalName;constructor(S,$){super(a.type);this.workflowId=S,this.signalName=$}}});var e,SS,$S,GS,KS,LS,xS;var WS=Q(()=>{e=class e extends Event{static type="checkpoint:size-warning";workflowId;sizeBytes;step;constructor(S,$,G){super(e.type);this.workflowId=S,this.sizeBytes=$,this.step=G}};SS=class SS extends Event{static type="development:warning";workflowId;message;fieldPaths;constructor(S,$,G){super(SS.type);this.workflowId=S,this.message=$,this.fieldPaths=G}};$S=class $S extends Event{static type="cleanup:warning";source;error;workflowId;constructor(S,$,G){super($S.type);this.source=S,this.error=$,this.workflowId=G}};GS=class GS extends Event{static type="storage:size-reported";sizeBytes;constructor(S){super(GS.type);this.sizeBytes=S}};KS=class KS extends Event{static type="alert:fired";metric;threshold;currentValue;window;constructor(S,$,G,K){super(KS.type);this.metric=S,this.threshold=$,this.currentValue=G,this.window=K}};LS=class LS extends Event{static type="alert:resolved";metric;threshold;currentValue;window;constructor(S,$,G,K){super(LS.type);this.metric=S,this.threshold=$,this.currentValue=G,this.window=K}};xS=class xS extends Event{static type="constraint:violated";workflowId;constraintName;scope;onViolation;constructor(S,$,G,K){super(xS.type);this.workflowId=S,this.constraintName=$,this.scope=G,this.onViolation=K}}});var XS,TS;var JS=Q(()=>{XS=class XS extends Event{static type="update:received";updateId;workflowId;name;payload;constructor(S,$,G,K){super(XS.type);this.updateId=S,this.workflowId=$,this.name=G,this.payload=K}};TS=class TS extends Event{static type="update:completed";updateId;workflowId;name;result;error;constructor(S,$,G,K,L){super(TS.type);this.updateId=S,this.workflowId=$,this.name=G,this.result=K,this.error=L}}});var QS,j,q,H,Y,B0,jS,qS;var HS=Q(()=>{QS=class QS extends Event{static type="workflow:started";workflowId;workflowType;input;constructor(S,$,G){super(QS.type);this.workflowId=S,this.workflowType=$,this.input=G}};j=class j extends Event{static type="workflow:completed";workflowId;result;duration;constructor(S,$,G){super(j.type);this.workflowId=S,this.result=$,this.duration=G}};q=class q extends Event{static type="workflow:failed";workflowId;error;constructor(S,$){super(q.type);this.workflowId=S,this.error=$}};H=class H extends Event{static type="workflow:cancelled";workflowId;constructor(S){super(H.type);this.workflowId=S}};Y=class Y extends Event{static type="workflow:timed-out";workflowId;timeoutType;elapsed;reason;constructor(S,$,G,K){super(Y.type);if(this.workflowId=S,this.timeoutType=$,this.elapsed=G,K!==void 0)this.reason=K}};B0=new Set([j.type,q.type,H.type,Y.type]);jS=class jS extends Event{static type="workflow:resumed";workflowId;fromStep;constructor(S,$){super(jS.type);this.workflowId=S,this.fromStep=$}};qS=class qS extends Event{static type="workflow:recovery-skipped";workflowId;workflowType;reason;constructor(S,$,G){super(qS.type);this.workflowId=S,this.workflowType=$,this.reason=G}}});var YS=Q(()=>{o();r();t();WS();JS();HS()});var ZS=Q(()=>{YS()});var DS={traceId:"0".repeat(32),spanId:"0".repeat(16),traceFlags:0},P={setAttribute(){},setStatus(){},recordException(){},end(){},spanContext(){return DS}},z={setAttribute:(...S)=>P.setAttribute(...S),setStatus:(...S)=>P.setStatus(...S),recordException:(...S)=>P.recordException(...S),end:(...S)=>P.end(...S)},US={startSpan(){return P}},V={record(){},add(){}},_S={createHistogram(){return V},createCounter(){return V},createUpDownCounter(){return V}},yS=Symbol("ROOT_CONTEXT"),RS={trace:{getTracer(){return US},setSpan(S){return S}},metrics:{getMeter(){return _S}},context:{ROOT_CONTEXT:yS,with(S,$){return $()}},SpanStatusCode:{OK:1,ERROR:2,UNSET:0}},M;function AS(){let S=globalThis.require;if(typeof S==="function")return($)=>S($);return()=>{return}}function VS(S){return S?.trace?.getTracer!=null&&S.SpanStatusCode!=null}function fS(S=AS()){try{let $=S("@opentelemetry/api");if(VS($))return $}catch{}return}function k(S){if(M)return M;let $=fS(S);if($)return M=$,M;return M=RS,M}function I(S){let $=new Uint8Array(S);return crypto.getRandomValues($),Array.from($,(G)=>G.toString(16).padStart(2,"0")).join("")}var N="traceparent",CS=/^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/,zS="00000000000000000000000000000000",IS="0000000000000000";function p(S){let $=CS.exec(S);if(!$)return null;let[,G,K,L,W]=$;if(K===zS)return null;if(L===IS)return null;return{version:G,traceId:K,spanId:L,traceFlags:parseInt(W,16)}}function g(S){let $=S.traceFlags.toString(16).padStart(2,"0");return`${S.version}-${S.traceId}-${S.spanId}-${$}`}function b(S){let $=S.get(N);if(!$)return null;return p($)}function f(S,$){S.set(N,g($))}function NS(){return I(16)}function pS(){return I(8)}var u=1024;function w(S,$){let G;try{G=JSON.stringify(S)}catch{G=String(S)}if(G.length>$)return G.slice(0,$)+"...";return G}function gS(S){return S instanceof Error?S.message:String(S)}function uS(S){return S instanceof Error?S:Error(String(S))}function D(S,$){let G=S.spanContext();f($,{version:"00",traceId:G.traceId,spanId:G.spanId,traceFlags:G.traceFlags})}function B(S,$,G){let K=S.attributeExtractor;if(!K)return;let L=K(G);for(let[W,X]of Object.entries(L))$.setAttribute(W,X)}function U(S,$){let G=S.workflowSpans.get($);return G?S.trace.setSpan(S.api.context.ROOT_CONTEXT,G.span):S.api.context.ROOT_CONTEXT}function C(S,$,G){$.setStatus({code:S.SpanStatusCode.ERROR,message:gS(G)}),$.recordException(uS(G))}function h(S,$,G,K){try{let L=G();return $.setStatus({code:S.SpanStatusCode.OK}),K?.(L),L}catch(L){throw C(S,$,L),L}finally{$.end()}}async function _(S,$,G,K){try{let L=await G();return $.setStatus({code:S.SpanStatusCode.OK}),K?.(L),L}catch(L){throw C(S,$,L),L}finally{$.end()}}function*y(S,$,G,K){try{let L=yield*G();return $.setStatus({code:S.SpanStatusCode.OK}),K?.(L),L}catch(L){throw C(S,$,L),L}finally{$.end()}}function E(S){return{async execute($,G){let K=b($.headers),L=S.api.context.ROOT_CONTEXT;if(K){let X={...z,spanContext(){return{traceId:K.traceId,spanId:K.spanId,traceFlags:K.traceFlags}}};L=S.trace.setSpan(S.api.context.ROOT_CONTEXT,X)}let W=S.tracer.startSpan(`activity:execute:${$.activityName}`,{attributes:{"weft.activity.name":$.activityName,"weft.activity.attempt":$.attempt,...K?{"weft.parent.trace_id":K.traceId}:{}}},L);if(S.recordPayloads&&$.input!==void 0)W.setAttribute("weft.payload.input",w($.input,S.maxPayloadSize));return _(S,W,()=>G($))}}}var F={workflowDuration:{name:"weft.workflow.duration",description:"Duration of workflow execution in milliseconds",unit:"ms",type:"histogram"},activityDuration:{name:"weft.activity.duration",description:"Duration of activity execution in milliseconds",unit:"ms",type:"histogram"},activityAttempts:{name:"weft.activity.attempts",description:"Total activity execution attempts",unit:"attempts",type:"counter"},workflowActive:{name:"weft.workflow.active",description:"Number of currently active workflows",unit:"workflows",type:"gauge"},workflowStarted:{name:"weft.workflow.started",description:"Total workflows started",unit:"workflows",type:"counter"},workflowCompleted:{name:"weft.workflow.completed",description:"Total workflows completed",unit:"workflows",type:"counter"},workflowFailed:{name:"weft.workflow.failed",description:"Total workflows failed",unit:"workflows",type:"counter"},promptCacheHits:{name:"weft.prompt_cache.hits",description:"Total prompt prefix cache hits",unit:"hits",type:"counter"},promptCacheMisses:{name:"weft.prompt_cache.misses",description:"Total prompt prefix cache misses",unit:"misses",type:"counter"},dpmoDefects:{name:"weft.dpmo.defects",description:"Total failed workflows (DPMO numerator)",unit:"workflows",type:"counter"},dpmoOperations:{name:"weft.dpmo.operations",description:"Total started workflows (DPMO denominator)",unit:"workflows",type:"counter"},taskBacklog:{name:"weft.task.backlog",description:"Number of queued tasks waiting for workers",unit:"tasks",type:"gauge"},taskQueueLatency:{name:"weft.task.queue_latency",description:"Time tasks spend queued before dispatch in milliseconds",unit:"ms",type:"histogram"},taskExecutionLatency:{name:"weft.task.execution_latency",description:"Time tasks spend executing after worker start in milliseconds",unit:"ms",type:"histogram"},taskRetries:{name:"weft.task.retries",description:"Total task retry attempts after the first dispatch attempt",unit:"retries",type:"counter"},taskRequeues:{name:"weft.task.requeues",description:"Total visibility-timeout or disconnect task requeues",unit:"requeues",type:"counter"},taskStaleHeartbeats:{name:"weft.task.stale_heartbeats",description:"Number of in-flight tasks whose heartbeat age exceeds the diagnostic threshold",unit:"tasks",type:"gauge"},workerCapacitySaturation:{name:"weft.worker.capacity_saturation",description:"Ratio of in-flight worker slots to total worker concurrency",unit:"ratio",type:"gauge"}};var hS=1e4;class v{#S;#G=0;#$=0;constructor(S){this.#S=new Float64Array(S)}push(S){if(this.#S[this.#G]=S,this.#G=(this.#G+1)%this.#S.length,this.#$<this.#S.length)this.#$++}toArray(){if(this.#$<this.#S.length)return Array.from(this.#S.subarray(0,this.#$));let S=Array.from({length:this.#$});for(let $=0;$<this.#$;$++)S[$]=this.#S[(this.#G+$)%this.#S.length];return S}}class R{#S;#G;#$;constructor(){this.#S=new Map,this.#G=new Map,this.#$=new Map}increment(S,$=1){this.#S.set(S,(this.#S.get(S)??0)+$)}record(S,$){let G=this.#G.get(S);if(!G)G=new v(hS),this.#G.set(S,G);G.push($)}gauge(S,$){this.#$.set(S,$)}snapshot(){let S={};for(let[$,G]of this.#S)S[$]={type:"counter",value:G};for(let[$,G]of this.#G){let K=G.toArray(),L=vS(K);S[$]={type:"histogram",count:K.length,sum:cS(K),p50:L[Math.floor(L.length*0.5)]??0,p99:L[Math.floor(L.length*0.99)]??0,min:L[0]??0,max:L[L.length-1]??0}}for(let[$,G]of this.#$)S[$]={type:"gauge",value:G};return S}reset(){this.#S.clear(),this.#G.clear(),this.#$.clear()}}function ES(S){let $;if(typeof S==="string")$=k().metrics.getMeter(S);else if(S)$=S;else $=k().metrics.getMeter("weft");return{workflowDuration:$.createHistogram("weft.workflow.duration",{unit:"ms"}),activityDuration:$.createHistogram("weft.activity.duration",{unit:"ms"}),activityAttempts:$.createCounter("weft.activity.attempts"),activeWorkflows:$.createUpDownCounter("weft.workflow.active")}}function vS(S){let $=[...S];return $.sort((G,K)=>G-K),$}function cS(S){let $=0;for(let G of S)$+=G;return $}function mS(S,$){let G=$?.type==="histogram"?$.count:0,K=$?.type==="histogram"?$.sum:0;return[`# TYPE ${S} histogram`,`${S}_count ${G}`,`${S}_sum ${K}`]}function dS(S,$){let G=$?.type==="counter"?$.value:0;return[`# TYPE ${S} counter`,`${S}_total ${G}`]}function iS(S,$){let G=$?.type==="gauge"?$.value:0;return[`# TYPE ${S} gauge`,`${S} ${G}`]}var nS={histogram:mS,counter:dS,gauge:iS};function oS(S,$){let G=S.name.replace(/\./g,"_"),K=$[S.name];return[`# HELP ${G} ${S.description}`,...nS[S.type](G,K)]}function lS(S){let $=S[F.dpmoDefects.name],G=S[F.dpmoOperations.name],K=$?.type==="counter"?$.value:0,L=G?.type==="counter"?G.value:0,W=L===0?0:K*1e6/L,X="weft_dpmo";return["# HELP weft_dpmo Defects per million operations (failed workflows / started workflows * 1e6)","# TYPE weft_dpmo gauge",`weft_dpmo ${W}`]}function c(S){let $=[];for(let G of Object.values(F))$.push(...oS(G,S));return $.push(...lS(S)),$.join(`
+var kS=Object.defineProperty;var zS=(S)=>S;function CS(S,W){this[S]=zS.bind(null,W)}var L0=(S,W)=>{for(var $ in W)kS(S,$,{get:W[$],enumerable:!0,configurable:!0,set:CS.bind(W,$)})};var L=(S,W)=>()=>(S&&(W=S(S=0)),W);var Q0=(S,W,$)=>{if(W!=null){if(typeof W!=="object"&&typeof W!=="function")throw TypeError('Object expected to be assigned to "using" declaration');let x;if($)x=W[Symbol.asyncDispose];if(x===void 0)x=W[Symbol.dispose];if(typeof x!=="function")throw TypeError("Object not disposable");S.push([$,x,W])}else if($)S.push([$]);return W},j0=(S,W,$)=>{let x=(K)=>W=$?new SuppressedError(K,W,"An error was suppressed during disposal"):($=!0,K),G=(K)=>{while(K=S.pop())try{var J=K[1]&&K[1].call(K[2]);if(K[0])return Promise.resolve(J).then(G,(H)=>(x(H),G()))}catch(H){x(H)}if($)throw W};return G()};var c,i,d,n,l;var o=L(()=>{c=class c extends Event{static type="activity:started";operationId;workflowId;activityName;attempt;constructor(S,W,$,x){super(c.type);this.operationId=S,this.workflowId=W,this.activityName=$,this.attempt=x}};i=class i extends Event{static type="activity:completed";operationId;workflowId;activityName;duration;constructor(S,W,$,x){super(i.type);this.operationId=S,this.workflowId=W,this.activityName=$,this.duration=x}};d=class d extends Event{static type="activity:async-pending";token;operationId;workflowId;activityName;attempt;constructor(S,W,$,x,G){super(d.type);this.token=S,this.operationId=W,this.workflowId=$,this.activityName=x,this.attempt=G}};n=class n extends Event{static type="activity:failed";operationId;workflowId;activityName;error;attempt;constructor(S,W,$,x,G){super(n.type);this.operationId=S,this.workflowId=W,this.activityName=$,this.error=x,this.attempt=G}};l=class l extends Event{static type="task:dead-lettered";operationId;workflowId;activityName;queue;workerId;reason;errorMessage;constructor({operationId:S,workflowId:W,activityName:$,queue:x,workerId:G,errorMessage:K}){super(l.type);this.operationId=S,this.workflowId=W,this.activityName=$,this.queue=x,this.workerId=G,this.reason="result-resolution-storage-exhausted",this.errorMessage=K}}});var r;var s=L(()=>{r=class r extends Event{static type="attributes:changed";workflowId;changes;constructor(S,W){super(r.type);this.workflowId=S,this.changes=W}}});var a,t;var e=L(()=>{a=class a extends Event{static type="schedule:fired";scheduleId;workflowId;firedAt;occurrence;constructor(S,W,$,x){super(a.type);this.scheduleId=S,this.workflowId=W,this.firedAt=$,this.occurrence=x}};t=class t extends Event{static type="schedule:missed-fire";scheduleId;missedCount;windowStart;windowEnd;constructor(S,W,$,x){super(t.type);this.scheduleId=S,this.missedCount=W,this.windowStart=$,this.windowEnd=x}}});var SS,WS;var $S=L(()=>{SS=class SS extends Event{static type="signal:received";workflowId;signalName;payload;constructor(S,W,$){super(SS.type);this.workflowId=S,this.signalName=W,this.payload=$}};WS=class WS extends Event{static type="signal:delivered";workflowId;signalName;constructor(S,W){super(WS.type);this.workflowId=S,this.signalName=W}}});var xS,GS,KS,XS,JS,LS,QS,jS,HS;var YS=L(()=>{xS=class xS extends Event{static type="checkpoint:size-warning";workflowId;sizeBytes;step;constructor(S,W,$){super(xS.type);this.workflowId=S,this.sizeBytes=W,this.step=$}};GS=class GS extends Event{static type="development:warning";workflowId;message;fieldPaths;constructor(S,W,$){super(GS.type);this.workflowId=S,this.message=W,this.fieldPaths=$}};KS=class KS extends Event{static type="cleanup:warning";source;error;workflowId;constructor(S,W,$){super(KS.type);this.source=S,this.error=W,this.workflowId=$}};XS=class XS extends Event{static type="storage:size-reported";sizeBytes;constructor(S){super(XS.type);this.sizeBytes=S}};JS=class JS extends Event{static type="worker:connected";workerId;queue;activities;concurrency;constructor(S,W,$,x){super(JS.type);this.workerId=S,this.queue=W,this.activities=$,this.concurrency=x}};LS=class LS extends Event{static type="worker:disconnected";workerId;inFlightTaskCount;constructor(S,W){super(LS.type);this.workerId=S,this.inFlightTaskCount=W}};QS=class QS extends Event{static type="alert:fired";metric;threshold;currentValue;window;constructor(S,W,$,x){super(QS.type);this.metric=S,this.threshold=W,this.currentValue=$,this.window=x}};jS=class jS extends Event{static type="alert:resolved";metric;threshold;currentValue;window;constructor(S,W,$,x){super(jS.type);this.metric=S,this.threshold=W,this.currentValue=$,this.window=x}};HS=class HS extends Event{static type="constraint:violated";workflowId;constraintName;scope;onViolation;constructor(S,W,$,x){super(HS.type);this.workflowId=S,this.constraintName=W,this.scope=$,this.onViolation=x}}});var ZS,OS;var BS=L(()=>{ZS=class ZS extends Event{static type="update:received";updateId;workflowId;name;payload;constructor(S,W,$,x){super(ZS.type);this.updateId=S,this.workflowId=W,this.name=$,this.payload=x}};OS=class OS extends Event{static type="update:completed";updateId;workflowId;name;result;error;constructor(S,W,$,x,G){super(OS.type);this.updateId=S,this.workflowId=W,this.name=$,this.result=x,this.error=G}}});var PS,qS,Y,Z,O,B,z0,TS,yS,US,_S;var bS=L(()=>{PS=class PS extends Event{static type="workflow:definition-registered";workflowType;constructor(S){super(PS.type);this.workflowType=S}};qS=class qS extends Event{static type="workflow:started";workflowId;workflowType;input;constructor(S,W,$){super(qS.type);this.workflowId=S,this.workflowType=W,this.input=$}};Y=class Y extends Event{static type="workflow:completed";workflowId;result;duration;constructor(S,W,$){super(Y.type);this.workflowId=S,this.result=W,this.duration=$}};Z=class Z extends Event{static type="workflow:failed";workflowId;error;constructor(S,W){super(Z.type);this.workflowId=S,this.error=W}};O=class O extends Event{static type="workflow:cancelled";workflowId;constructor(S){super(O.type);this.workflowId=S}};B=class B extends Event{static type="workflow:timed-out";workflowId;timeoutType;elapsed;reason;constructor(S,W,$,x){super(B.type);if(this.workflowId=S,this.timeoutType=W,this.elapsed=$,x!==void 0)this.reason=x}};z0=new Set([Y.type,Z.type,O.type,B.type]);TS=class TS extends Event{static type="workflow:resumed";workflowId;fromStep;constructor(S,W){super(TS.type);this.workflowId=S,this.fromStep=W}};yS=class yS extends Event{static type="workflow:suspended";workflowId;constructor(S){super(yS.type);this.workflowId=S}};US=class US extends Event{static type="workflow:recovery-skipped";workflowId;workflowType;reason;constructor(S,W,$){super(US.type);this.workflowId=S,this.workflowType=W,this.reason=$}};_S=class _S extends Event{static type="workflow:teardown";workflowId;workflowType;status;attempts;error;constructor(S,W,$,x,G){super(_S.type);this.workflowId=S,this.workflowType=W,this.status=$,this.attempts=x,this.error=G}}});var FS=L(()=>{o();s();e();$S();YS();BS();bS()});var MS=L(()=>{FS()});var wS={traceId:"0".repeat(32),spanId:"0".repeat(16),traceFlags:0},F={setAttribute(){},setStatus(){},recordException(){},end(){},spanContext(){return wS}},w={setAttribute:(...S)=>F.setAttribute(...S),setStatus:(...S)=>F.setStatus(...S),recordException:(...S)=>F.recordException(...S),end:(...S)=>F.end(...S)},pS={startSpan(){return F}},k={record(){},add(){}},IS={createHistogram(){return k},createCounter(){return k},createUpDownCounter(){return k}},NS=Symbol("ROOT_CONTEXT"),gS={trace:{getTracer(){return pS},setSpan(S){return S}},metrics:{getMeter(){return IS}},context:{ROOT_CONTEXT:NS,with(S,W){return W()}},SpanStatusCode:{OK:1,ERROR:2,UNSET:0}},q;function vS(){let S=globalThis.require;if(typeof S==="function")return(W)=>S(W);return()=>{return}}function ES(S){return S?.trace?.getTracer!=null&&S.SpanStatusCode!=null}function hS(S=vS()){try{let W=S("@opentelemetry/api");if(ES(W))return W}catch{}return}function T(S){if(q)return q;let W=hS(S);if(W)return q=W,q;return q=gS,q}function p(S){let W=new Uint8Array(S);return crypto.getRandomValues(W),Array.from(W,($)=>$.toString(16).padStart(2,"0")).join("")}var I="traceparent",uS=/^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/,mS="00000000000000000000000000000000",cS="0000000000000000";function N(S){let W=uS.exec(S);if(!W)return null;let[,$,x,G,K]=W;if(x===mS)return null;if(G===cS)return null;return{version:$,traceId:x,spanId:G,traceFlags:parseInt(K,16)}}function g(S){let W=S.traceFlags.toString(16).padStart(2,"0");return`${S.version}-${S.traceId}-${S.spanId}-${W}`}function M(S){let W=S.get(I);if(!W)return null;return N(W)}function z(S,W){S.set(I,g(W))}function iS(){return p(16)}function dS(){return p(8)}var v=1024;function y(S,W){let $;try{$=JSON.stringify(S)}catch{$=String(S)}if($.length>W)return $.slice(0,W)+"...";return $}function nS(S){return S instanceof Error?S.message:String(S)}function lS(S){return S instanceof Error?S:Error(String(S))}function R(S,W){let $=S.spanContext();z(W,{version:"00",traceId:$.traceId,spanId:$.spanId,traceFlags:$.traceFlags})}function U(S,W,$){let x=S.attributeExtractor;if(!x)return;let G=x($);for(let[K,J]of Object.entries(G))W.setAttribute(K,J)}function A(S,W){let $=S.workflowSpans.get(W);return $?S.trace.setSpan(S.api.context.ROOT_CONTEXT,$.span):S.api.context.ROOT_CONTEXT}function C(S,W,$){W.setStatus({code:S.SpanStatusCode.ERROR,message:nS($)}),W.recordException(lS($))}function E(S,W,$,x){try{let G=$();return W.setStatus({code:S.SpanStatusCode.OK}),x?.(G),G}catch(G){throw C(S,W,G),G}finally{W.end()}}async function f(S,W,$,x){try{let G=await $();return W.setStatus({code:S.SpanStatusCode.OK}),x?.(G),G}catch(G){throw C(S,W,G),G}finally{W.end()}}function*D(S,W,$,x){try{let G=yield*$();return W.setStatus({code:S.SpanStatusCode.OK}),x?.(G),G}catch(G){throw C(S,W,G),G}finally{W.end()}}function h(S){return{async execute(W,$){let x=M(W.headers),G=S.api.context.ROOT_CONTEXT;if(x){let J={...w,spanContext(){return{traceId:x.traceId,spanId:x.spanId,traceFlags:x.traceFlags}}};G=S.trace.setSpan(S.api.context.ROOT_CONTEXT,J)}let K=S.tracer.startSpan(`activity:execute:${W.activityName}`,{attributes:{"weft.activity.name":W.activityName,"weft.activity.attempt":W.attempt,...x?{"weft.parent.trace_id":x.traceId}:{}}},G);if(S.recordPayloads&&W.input!==void 0)K.setAttribute("weft.payload.input",y(W.input,S.maxPayloadSize));return f(S,K,()=>$(W))}}}var _={workflowDuration:{name:"weft.workflow.duration",description:"Duration of workflow execution in milliseconds",unit:"ms",type:"histogram"},activityDuration:{name:"weft.activity.duration",description:"Duration of activity execution in milliseconds",unit:"ms",type:"histogram"},activityAttempts:{name:"weft.activity.attempts",description:"Total activity execution attempts",unit:"attempts",type:"counter"},workflowActive:{name:"weft.workflow.active",description:"Number of currently active workflows",unit:"workflows",type:"gauge"},workflowStarted:{name:"weft.workflow.started",description:"Total workflows started",unit:"workflows",type:"counter"},workflowCompleted:{name:"weft.workflow.completed",description:"Total workflows completed",unit:"workflows",type:"counter"},workflowFailed:{name:"weft.workflow.failed",description:"Total workflows failed",unit:"workflows",type:"counter"},promptCacheHits:{name:"weft.prompt_cache.hits",description:"Total prompt prefix cache hits",unit:"hits",type:"counter"},promptCacheMisses:{name:"weft.prompt_cache.misses",description:"Total prompt prefix cache misses",unit:"misses",type:"counter"},dpmoDefects:{name:"weft.dpmo.defects",description:"Total failed workflows (DPMO numerator)",unit:"workflows",type:"counter"},dpmoOperations:{name:"weft.dpmo.operations",description:"Total started workflows (DPMO denominator)",unit:"workflows",type:"counter"},taskBacklog:{name:"weft.task.backlog",description:"Number of queued tasks waiting for workers",unit:"tasks",type:"gauge"},taskQueueLatency:{name:"weft.task.queue_latency",description:"Time tasks spend queued before dispatch in milliseconds",unit:"ms",type:"histogram"},taskExecutionLatency:{name:"weft.task.execution_latency",description:"Time tasks spend executing after worker start in milliseconds",unit:"ms",type:"histogram"},taskRetries:{name:"weft.task.retries",description:"Total task retry attempts after the first dispatch attempt",unit:"retries",type:"counter"},taskRequeues:{name:"weft.task.requeues",description:"Total visibility-timeout or disconnect task requeues",unit:"requeues",type:"counter"},taskStaleHeartbeats:{name:"weft.task.stale_heartbeats",description:"Number of in-flight tasks whose heartbeat age exceeds the diagnostic threshold",unit:"tasks",type:"gauge"},workerCapacitySaturation:{name:"weft.worker.capacity_saturation",description:"Ratio of in-flight worker slots to total worker concurrency",unit:"ratio",type:"gauge"}};var oS=1e4;class u{#S;#$=0;#W=0;constructor(S){this.#S=new Float64Array(S)}push(S){if(this.#S[this.#$]=S,this.#$=(this.#$+1)%this.#S.length,this.#W<this.#S.length)this.#W++}toArray(){if(this.#W<this.#S.length)return Array.from(this.#S.subarray(0,this.#W));let S=Array.from({length:this.#W});for(let W=0;W<this.#W;W++)S[W]=this.#S[(this.#$+W)%this.#S.length];return S}}class V{#S;#$;#W;constructor(){this.#S=new Map,this.#$=new Map,this.#W=new Map}increment(S,W=1){this.#S.set(S,(this.#S.get(S)??0)+W)}record(S,W){let $=this.#$.get(S);if(!$)$=new u(oS),this.#$.set(S,$);$.push(W)}gauge(S,W){this.#W.set(S,W)}snapshot(){let S={};for(let[W,$]of this.#S)S[W]={type:"counter",value:$};for(let[W,$]of this.#$){let x=$.toArray(),G=sS(x);S[W]={type:"histogram",count:x.length,sum:aS(x),p50:G[Math.floor(G.length*0.5)]??0,p99:G[Math.floor(G.length*0.99)]??0,min:G[0]??0,max:G[G.length-1]??0}}for(let[W,$]of this.#W)S[W]={type:"gauge",value:$};return S}reset(){this.#S.clear(),this.#$.clear(),this.#W.clear()}}function rS(S){let W;if(typeof S==="string")W=T().metrics.getMeter(S);else if(S)W=S;else W=T().metrics.getMeter("weft");return{workflowDuration:W.createHistogram("weft.workflow.duration",{unit:"ms"}),activityDuration:W.createHistogram("weft.activity.duration",{unit:"ms"}),activityAttempts:W.createCounter("weft.activity.attempts"),activeWorkflows:W.createUpDownCounter("weft.workflow.active")}}function sS(S){let W=[...S];return W.sort(($,x)=>$-x),W}function aS(S){let W=0;for(let $ of S)W+=$;return W}function tS(S,W){let $=W?.type==="histogram"?W.count:0,x=W?.type==="histogram"?W.sum:0;return[`# TYPE ${S} histogram`,`${S}_count ${$}`,`${S}_sum ${x}`]}function eS(S,W){let $=W?.type==="counter"?W.value:0;return[`# TYPE ${S} counter`,`${S}_total ${$}`]}function S0(S,W){let $=W?.type==="gauge"?W.value:0;return[`# TYPE ${S} gauge`,`${S} ${$}`]}var W0={histogram:tS,counter:eS,gauge:S0};function $0(S,W){let $=S.name.replace(/\./g,"_"),x=W[S.name];return[`# HELP ${$} ${S.description}`,...W0[S.type]($,x)]}function x0(S){let W=S[_.dpmoDefects.name],$=S[_.dpmoOperations.name],x=W?.type==="counter"?W.value:0,G=$?.type==="counter"?$.value:0,K=G===0?0:x*1e6/G,J="weft_dpmo";return["# HELP weft_dpmo Defects per million operations (failed workflows / started workflows * 1e6)","# TYPE weft_dpmo gauge",`weft_dpmo ${K}`]}function m(S){let W=[];for(let $ of Object.values(_))W.push(...$0($,S));return W.push(...x0(S)),W.join(`
 `)+`
-`}function rS(S){return{serialize(){let $=S?.snapshot()??{};return c($)}}}ZS();var sS=3600000,MS=1e4,aS=3600000;function kS(S){let $=Date.now();for(let[G,K]of S.workflowSpans)if($-K.createdAt>sS)K.span.end(),S.workflowSpans.delete(G);if(S.workflowSpans.size>MS){let G=S.workflowSpans.size-MS,K=0;for(let[L,W]of S.workflowSpans){if(K>=G)break;W.span.end(),S.workflowSpans.delete(L),K++}}}function wS(S,$){let G=S.workflowSpans.get($);if(G)G.span.end(),S.workflowSpans.delete($)}function BS(S){function $(x,Z,T){let J=S.workflowSpans.get(x);if(!J)return;if(Z==="error")J.span.setStatus({code:S.SpanStatusCode.ERROR,...T?{message:T}:{}});else J.span.setStatus({code:S.SpanStatusCode.OK});J.span.end(),S.workflowSpans.delete(x)}let G=(x)=>{if(!(x instanceof j))return;$(x.workflowId,"ok")},K=(x)=>{if(!(x instanceof q))return;$(x.workflowId,"error",x.error.message),S.metrics.increment("weft.dpmo.defects")},L=(x)=>{if(!(x instanceof H))return;$(x.workflowId,"error","Workflow cancelled")},W=(x)=>{if(!(x instanceof Y))return;$(x.workflowId,"error",`Workflow timed out (${x.timeoutType}) after ${x.elapsed}ms`),S.metrics.increment("weft.dpmo.defects")};if(S.eventTarget)S.eventTarget.addEventListener(j.type,G),S.eventTarget.addEventListener(q.type,K),S.eventTarget.addEventListener(H.type,L),S.eventTarget.addEventListener(Y.type,W);function X(x=aS){let Z=Date.now()-x,T=0;for(let[J,O]of S.workflowSpans)if(O.createdAt<=Z)O.span.setStatus({code:S.SpanStatusCode.ERROR,message:"span evicted (stale)"}),O.span.end(),S.workflowSpans.delete(J),T++;return T}function A(){if(S.eventTarget)S.eventTarget.removeEventListener(j.type,G),S.eventTarget.removeEventListener(q.type,K),S.eventTarget.removeEventListener(H.type,L),S.eventTarget.removeEventListener(Y.type,W);for(let x of S.workflowSpans.values())x.span.setStatus({code:S.SpanStatusCode.ERROR,message:"Observability disposed"}),x.span.end();S.workflowSpans.clear()}return{endWorkflowSpan:$,evictStaleSpans:X,dispose:A}}function FS(S){return{workflowStart($,G){kS(S);let K=S.workflowSpans.get($.workflowId);if(K)K.span.setStatus({code:S.SpanStatusCode.OK}),wS(S,$.workflowId);let L=S.tracer.startSpan(`workflow:${$.workflowType}`,{attributes:{"weft.workflow.id":$.workflowId,"weft.workflow.type":$.workflowType}});if(S.workflowSpans.set($.workflowId,{span:L,createdAt:Date.now()}),D(L,$.headers),S.recordPayloads&&$.input!==void 0)L.setAttribute("weft.payload.input",w($.input,S.maxPayloadSize));B(S,L,$),S.metrics.increment("weft.workflow.started"),S.metrics.increment("weft.dpmo.operations"),G($)},*activity($,G){let K=S.tracer.startSpan(`activity:${$.activityName}`,{attributes:{"weft.activity.name":$.activityName,"weft.activity.attempt":$.attempt}},U(S,$.workflowId));if(D(K,$.headers),S.recordPayloads&&$.input!==void 0)K.setAttribute("weft.payload.input",w($.input,S.maxPayloadSize));B(S,K,$);let L=Date.now();return yield*y(S,K,()=>G($),()=>{S.metrics.record("weft.activity.duration",Date.now()-L),S.metrics.increment("weft.activity.attempts")})},*sleep($,G){let K=S.tracer.startSpan("sleep",{attributes:{"weft.sleep.duration":$.duration}},U(S,$.workflowId));B(S,K,$),yield*y(S,K,()=>G($))},*waitForSignal($,G){let K=S.tracer.startSpan("waitForSignal",{attributes:{"weft.signal.name":$.signalName}},U(S,$.workflowId));return B(S,K,$),yield*y(S,K,()=>G($))},async childWorkflow($,G){let K=[],L=b($.parentHeaders);if(L)K.push({context:{traceId:L.traceId,spanId:L.spanId,traceFlags:L.traceFlags}});let W=S.tracer.startSpan(`childWorkflow:${$.workflowType}`,{attributes:{"weft.child_workflow.type":$.workflowType,"weft.child_workflow.id":$.childWorkflowId,"weft.child_workflow.parent_id":$.workflowId},links:K},S.api.context.ROOT_CONTEXT);if(D(W,$.headers),S.recordPayloads&&$.input!==void 0)W.setAttribute("weft.payload.input",w($.input,S.maxPayloadSize));return S.metrics.increment("weft.child_workflow.started"),_(S,W,()=>G($))},signalReceived($,G){let K=S.tracer.startSpan(`signal:received:${$.signalName}`,{attributes:{"weft.signal.name":$.signalName,"weft.signal.workflow_id":$.workflowId}});B(S,K,$),h(S,K,()=>G($))}}}function tS(S){let{attributeExtractor:$,eventTarget:G,maxPayloadSize:K=u,metrics:L=new R,openTelemetryApi:W=k(),recordPayloads:X=!1,tracerName:A="weft",tracerVersion:x}=S??{},Z=W,{trace:T,SpanStatusCode:J}=Z,O=T.getTracer(A,x);return{api:Z,trace:T,SpanStatusCode:J,tracer:O,recordPayloads:X,maxPayloadSize:K,attributeExtractor:$,eventTarget:G,metrics:L,workflowSpans:new Map}}function m0(S){let $=tS(S),G=FS($),K=E($),L={...G,...K},W=BS($);return{interceptor:L,metrics:$.metrics,...W}}export{c as serializeMetricsSnapshotForPrometheus,p as parseTraceParent,f as injectTraceParent,k as getOpenTelemetryApi,NS as generateTraceId,pS as generateSpanId,g as formatTraceParent,b as extractTraceParent,ES as createOpenTelemetryMetrics,m0 as createObservabilityInterceptors,rS as createMetricsCollectorExporter,R as MetricsCollector,F as METRICS};
+`}function G0(S){return{serialize(){let W=S?.snapshot()??{};return m(W)}}}MS();var K0=3600000,RS=1e4,X0=3600000;function AS(S){let W=Date.now();for(let[$,x]of S.workflowSpans)if(W-x.createdAt>K0)x.span.end(),S.workflowSpans.delete($);if(S.workflowSpans.size>RS){let $=S.workflowSpans.size-RS,x=0;for(let[G,K]of S.workflowSpans){if(x>=$)break;K.span.end(),S.workflowSpans.delete(G),x++}}}function fS(S,W){let $=S.workflowSpans.get(W);if($)$.span.end(),S.workflowSpans.delete(W)}function DS(S){function W(X,P,Q){let j=S.workflowSpans.get(X);if(!j)return;if(P==="error")j.span.setStatus({code:S.SpanStatusCode.ERROR,...Q?{message:Q}:{}});else j.span.setStatus({code:S.SpanStatusCode.OK});j.span.end(),S.workflowSpans.delete(X)}let $=(X)=>{if(!(X instanceof Y))return;W(X.workflowId,"ok")},x=(X)=>{if(!(X instanceof Z))return;W(X.workflowId,"error",X.error.message),S.metrics.increment("weft.dpmo.defects")},G=(X)=>{if(!(X instanceof O))return;W(X.workflowId,"error","Workflow cancelled")},K=(X)=>{if(!(X instanceof B))return;W(X.workflowId,"error",`Workflow timed out (${X.timeoutType}) after ${X.elapsed}ms`),S.metrics.increment("weft.dpmo.defects")};if(S.eventTarget)S.eventTarget.addEventListener(Y.type,$),S.eventTarget.addEventListener(Z.type,x),S.eventTarget.addEventListener(O.type,G),S.eventTarget.addEventListener(B.type,K);function J(X=X0){let P=Date.now()-X,Q=0;for(let[j,b]of S.workflowSpans)if(b.createdAt<=P)b.span.setStatus({code:S.SpanStatusCode.ERROR,message:"span evicted (stale)"}),b.span.end(),S.workflowSpans.delete(j),Q++;return Q}function H(){if(S.eventTarget)S.eventTarget.removeEventListener(Y.type,$),S.eventTarget.removeEventListener(Z.type,x),S.eventTarget.removeEventListener(O.type,G),S.eventTarget.removeEventListener(B.type,K);for(let X of S.workflowSpans.values())X.span.setStatus({code:S.SpanStatusCode.ERROR,message:"Observability disposed"}),X.span.end();S.workflowSpans.clear()}return{endWorkflowSpan:W,evictStaleSpans:J,dispose:H}}function VS(S){return{workflowStart(W,$){AS(S);let x=S.workflowSpans.get(W.workflowId);if(x)x.span.setStatus({code:S.SpanStatusCode.OK}),fS(S,W.workflowId);let G=S.tracer.startSpan(`workflow:${W.workflowType}`,{attributes:{"weft.workflow.id":W.workflowId,"weft.workflow.type":W.workflowType}});if(S.workflowSpans.set(W.workflowId,{span:G,createdAt:Date.now()}),R(G,W.headers),S.recordPayloads&&W.input!==void 0)G.setAttribute("weft.payload.input",y(W.input,S.maxPayloadSize));U(S,G,W),S.metrics.increment("weft.workflow.started"),S.metrics.increment("weft.dpmo.operations"),$(W)},*activity(W,$){let x=S.tracer.startSpan(`activity:${W.activityName}`,{attributes:{"weft.activity.name":W.activityName,"weft.activity.attempt":W.attempt}},A(S,W.workflowId));if(R(x,W.headers),S.recordPayloads&&W.input!==void 0)x.setAttribute("weft.payload.input",y(W.input,S.maxPayloadSize));U(S,x,W);let G=Date.now();return yield*D(S,x,()=>$(W),()=>{S.metrics.record("weft.activity.duration",Date.now()-G),S.metrics.increment("weft.activity.attempts")})},*sleep(W,$){let x=S.tracer.startSpan("sleep",{attributes:{"weft.sleep.duration":W.duration}},A(S,W.workflowId));U(S,x,W),yield*D(S,x,()=>$(W))},*waitForSignal(W,$){let x=S.tracer.startSpan("waitForSignal",{attributes:{"weft.signal.name":W.signalName}},A(S,W.workflowId));return U(S,x,W),yield*D(S,x,()=>$(W))},async childWorkflow(W,$){let x=[],G=M(W.parentHeaders);if(G)x.push({context:{traceId:G.traceId,spanId:G.spanId,traceFlags:G.traceFlags}});let K=S.tracer.startSpan(`childWorkflow:${W.workflowType}`,{attributes:{"weft.child_workflow.type":W.workflowType,"weft.child_workflow.id":W.childWorkflowId,"weft.child_workflow.parent_id":W.workflowId},links:x},S.api.context.ROOT_CONTEXT);if(R(K,W.headers),S.recordPayloads&&W.input!==void 0)K.setAttribute("weft.payload.input",y(W.input,S.maxPayloadSize));return S.metrics.increment("weft.child_workflow.started"),f(S,K,()=>$(W))},signalReceived(W,$){let x=S.tracer.startSpan(`signal:received:${W.signalName}`,{attributes:{"weft.signal.name":W.signalName,"weft.signal.workflow_id":W.workflowId}});U(S,x,W),E(S,x,()=>$(W))}}}function J0(S){let{attributeExtractor:W,eventTarget:$,maxPayloadSize:x=v,metrics:G=new V,openTelemetryApi:K=T(),recordPayloads:J=!1,tracerName:H="weft",tracerVersion:X}=S??{},P=K,{trace:Q,SpanStatusCode:j}=P,b=Q.getTracer(H,X);return{api:P,trace:Q,SpanStatusCode:j,tracer:b,recordPayloads:J,maxPayloadSize:x,attributeExtractor:W,eventTarget:$,metrics:G,workflowSpans:new Map}}function $W(S){let W=J0(S),$=VS(W),x=h(W),G={...$,...x},K=DS(W);return{interceptor:G,metrics:W.metrics,...K}}export{m as serializeMetricsSnapshotForPrometheus,N as parseTraceParent,z as injectTraceParent,T as getOpenTelemetryApi,iS as generateTraceId,dS as generateSpanId,g as formatTraceParent,M as extractTraceParent,rS as createOpenTelemetryMetrics,$W as createObservabilityInterceptors,G0 as createMetricsCollectorExporter,V as MetricsCollector,_ as METRICS};

package/dist/server/asyncapi-channels.js

@@ -1,6 +1,6 @@
 import { compareStrings } from "./json-schema-utilities.js";
 import { externalApiPath } from "./route-model.js";
-const JSON_RPC_VERSION = "2.0", EVENT_DELIVER_METHOD = "weft.events.deliver", EVENTS_TERMINATED_METHOD = "weft.events.terminated", UNSUBSCRIBE_METHOD = "weft.workflows.unsubscribe", JSON_RPC_ID_SCHEMA = {
+const JSON_RPC_VERSION = "2.0", EVENT_DELIVER_METHOD = "weft.events.deliver", EVENTS_TERMINATED_METHOD = "weft.events.terminated", WORKFLOW_SUBSCRIPTION_OPERATION_NAME = "weft.workflows.events", WORKFLOW_SUBSCRIPTION_REQUEST_METHOD = "weft.workflows.subscribe", UNSUBSCRIBE_METHOD = "weft.workflows.unsubscribe", JSON_RPC_ID_SCHEMA = {
   oneOf: [{ type: "string" }, { type: "number" }, { type: "null" }]
 }, SUBSCRIPTION_TERMINATION_REASON_SCHEMA = {
   enum: ["client-unsubscribed", "server-closed", "validation-failed"],
@@ -39,7 +39,7 @@ export function buildWebSocketMessages(operation, definitionSchemaToJsonSchema)
     [names.subscribeRequest]: {
       name: names.subscribeRequest,
       contentType: "application/json",
-      payload: jsonRpcRequestPayload(operation.name, inputSchema),
+      payload: jsonRpcRequestPayload(subscriptionRequestMethod(operation), inputSchema),
       summary: `Subscribe to ${operation.name}.`
     },
     [names.subscribeAck]: {
@@ -149,6 +149,9 @@ export function buildOperationEntry(operation, channelName, kind) {
 function operationPrefix(operation) {
   return operation.name.replaceAll(".", "_");
 }
+function subscriptionRequestMethod(operation) {
+  return operation.name === WORKFLOW_SUBSCRIPTION_OPERATION_NAME ? WORKFLOW_SUBSCRIPTION_REQUEST_METHOD : operation.name;
+}
 function webSocketMessageNames(operation) {
   const prefix = operationPrefix(operation);
   return {

package/dist/server/attribute-filters.d.ts

@@ -10,9 +10,14 @@
  *
  * @module server/attribute-filters
  */
-import type { AttributeFilter, SearchAttributeValue } from '../core/types.ts';
-type ParsedAttributeFilter = Omit<AttributeFilter, 'key'> & {
+import type { AttributeFilterScalarValue } from '../core/types.ts';
+type ParsedAttributeFilter = {
     key: string;
+    value?: AttributeFilterScalarValue | AttributeFilterScalarValue[] | undefined;
+    gt?: AttributeFilterScalarValue | undefined;
+    lt?: AttributeFilterScalarValue | undefined;
+    gte?: AttributeFilterScalarValue | undefined;
+    lte?: AttributeFilterScalarValue | undefined;
 };
 /**
  * Parse `attr.{name}={value}`, `attr.{name}.gt={value}`,
@@ -33,5 +38,5 @@ export declare function parseAttributeFilters(params: URLSearchParams): ParsedAt
  * preserved. The empty string stays a string (it would otherwise
  * coerce to `0` via `Number('')`).
  */
-export declare function inferAttributeValue(raw: string): SearchAttributeValue;
+export declare function inferAttributeValue(raw: string): AttributeFilterScalarValue;
 export {};

package/dist/server/attribute-filters.js

@@ -6,7 +6,7 @@ export function parseAttributeFilters(params) {
     const rest = key.slice(5), dotIndex = rest.indexOf(".");
     if (dotIndex === -1) {
       const name = rest, existing = filterMap.get(name) ?? { key: name };
-      existing.value = inferAttributeValue(value);
+      existing.value = appendExactAttributeValue(existing.value, inferAttributeValue(value));
       filterMap.set(name, existing);
     } else {
       const name = rest.slice(0, dotIndex), operator = rest.slice(dotIndex + 1), existing = filterMap.get(name) ?? { key: name };
@@ -27,6 +27,11 @@ export function parseAttributeFilters(params) {
   }
   return [...filterMap.values()];
 }
+function appendExactAttributeValue(current, next) {
+  if (current === void 0)
+    return next;
+  return [...Array.isArray(current) ? current : [current], next];
+}
 export function inferAttributeValue(raw) {
   if (raw === "true")
     return !0;

package/dist/server/authentication/api-key.d.ts

@@ -1,3 +1,4 @@
 import type { AuthorizationScope } from '../authorization-scope.ts';
+import { type ConstantTimeApiKeyEntry } from './constant-time-api-key.ts';
 import type { AuthConfig, AuthResult } from './types.ts';
-export declare function tryAdmitApiKey(presentedKey: string, resolver: AuthConfig['resolveApiKeyPrincipal'], apiKeySet: Set<string> | null, defaultApiKeyScopes: ReadonlyArray<AuthorizationScope>): Promise<AuthResult | 'continue'>;
+export declare function tryAdmitApiKey(presentedKey: string, resolver: AuthConfig['resolveApiKeyPrincipal'], apiKeyEntries: ReadonlyArray<ConstantTimeApiKeyEntry<undefined>> | null, defaultApiKeyScopes: ReadonlyArray<AuthorizationScope>): Promise<AuthResult | 'continue'>;

package/dist/server/authentication/api-key.js

@@ -1,4 +1,7 @@
 import { principalFromApiKey } from "../principal.js";
+import {
+  findConstantTimeApiKeyMatch
+} from "./constant-time-api-key.js";
 function validateApiKeyPrincipalMethod(principal) {
   if (principal.method !== "api-key") {
     console.warn(`resolveApiKeyPrincipal returned principal with method "${principal.method}"; expected "api-key". Rejecting.`);
@@ -56,7 +59,7 @@ function deepFreezeApiKeyPrincipal(principal) {
   };
   return Object.freeze(frozen);
 }
-export async function tryAdmitApiKey(presentedKey, resolver, apiKeySet, defaultApiKeyScopes) {
+export async function tryAdmitApiKey(presentedKey, resolver, apiKeyEntries, defaultApiKeyScopes) {
   if (resolver !== void 0) {
     let resolved;
     try {
@@ -69,7 +72,7 @@ export async function tryAdmitApiKey(presentedKey, resolver, apiKeySet, defaultA
       return { authenticated: !0, method: "api-key", principal: deepFreezeApiKeyPrincipal(resolved) };
     return { authenticated: !1, error: "No valid credentials provided" };
   }
-  if (apiKeySet?.has(presentedKey)) {
+  if (apiKeyEntries !== null && findConstantTimeApiKeyMatch(presentedKey, apiKeyEntries) !== null) {
     const principal = principalFromApiKey({
       subject: "api-key-caller",
       scopes: defaultApiKeyScopes

package/dist/server/authentication/constant-time-api-key.d.ts

@@ -0,0 +1,15 @@
+export type ConstantTimeApiKeyEntry<T> = {
+    readonly digest: Uint8Array;
+    readonly value: T;
+};
+export type ConstantTimeApiKeyMatcher<T> = {
+    readonly entries: ReadonlyArray<ConstantTimeApiKeyEntry<T>>;
+    matches(presentedKey: string): boolean;
+};
+export declare function createConstantTimeApiKeyEntry<T>(key: string, value: T): ConstantTimeApiKeyEntry<T>;
+export declare function createConstantTimeApiKeyMatcher(keys: ReadonlyArray<string>): ConstantTimeApiKeyMatcher<undefined>;
+export declare function createConstantTimeApiKeyMatcher<T>(keys: ReadonlyArray<{
+    readonly key: string;
+    readonly value: T;
+}>): ConstantTimeApiKeyMatcher<T>;
+export declare function findConstantTimeApiKeyMatch<T>(presentedKey: string, entries: ReadonlyArray<ConstantTimeApiKeyEntry<T>>): ConstantTimeApiKeyEntry<T> | null;