@makaio/framework 1.0.0-dev-1788258714339 → 1.0.0-dev-1788511348215

package/dist/workflow-engine/index.d.mts

@@ -1,12 +1,12 @@
 import { a as ProviderOperationClaim, c as ProviderOperationObligation, i as ProcessBoundProvisionerLossProof, l as ProviderOperationOwnershipRecord, n as InitialProviderOperationClaimContextSource, o as ProviderOperationClaimDecision, r as PROVIDER_OPERATION_OBLIGATIONS, s as ProviderOperationMutationDecision, t as InitialProviderOperationClaimContext } from "../provider-operation-DbdyFwNm.mjs";
-import { A as RecoverableAttemptRecord, C as ProvisioningClaimDecision, D as RecordProviderOperationUncertaintyInput, E as RecordInfrastructureFailureInput, M as TakeOverProviderOperationInput, N as sameAllocationRef, O as RecordProvisionerIncarnationLostInput, P as sameWorkflowResult, S as ProvisioningAbsenceDecision, T as RecordAllocationTerminatedInput, _ as ExecutionAttemptStatus, a as BeginProvisioningInput, b as PendingAttemptAbandonmentDecision, c as EXECUTION_ATTEMPT_SETTLEMENT_KINDS, d as ExecutionAttemptOutcomeCommit, f as ExecutionAttemptOutcomeDecision, g as ExecutionAttemptSettlementKind, h as ExecutionAttemptRepository, i as AllocationTerminationDecision, j as RenewProviderOperationClaimInput, k as RecordProvisioningAbsentInput, l as EXECUTION_ATTEMPT_STATUSES, m as ExecutionAttemptRecoveryOperations, n as AllocationRefEvolution, o as DiscoveredAllocationDecision, p as ExecutionAttemptRecord, r as AllocationRefEvolutionDecision, s as DuplicateExecutionAttemptError, t as AllocationRecordingDecision, u as ExecutionAttemptCreate, v as HandoffProviderOperationInput, w as RecordAllocationInput, x as ProvisionerIncarnationLossDecision, y as InfrastructureFailureDecision } from "../execution-attempt-repository-BJ2W6wwx.mjs";
-import { a as WorkflowEngineServiceOptions, c as ExecutionAttemptAuthority, d as WorkflowWorkspaceRootResolver, f as registerDrizzleWorkflowStorage, i as WorkflowEngineService, l as WorkflowMaterializationSpecResolution, n as createWorkflowEnginePackage, o as WorkflowTriggerReconciler, r as workflowEnginePackage, s as WorkflowExecutor, t as WorkflowEngineToken, u as WorkflowMaterializationSpecResolver } from "../package-BNFTUFLB.mjs";
+import { A as RecordProviderOperationUncertaintyInput, C as PendingAttemptAbandonmentDecision, D as RecordAllocationInput, E as ProvisioningClaimDecision, F as TakeOverProviderOperationInput, I as decodeDurableOutcome, L as durableOutcome, M as RecordProvisioningAbsentInput, N as RecoverableAttemptRecord, O as RecordAllocationTerminatedInput, P as RenewProviderOperationClaimInput, R as sameAllocationRef, S as OutcomeCodec, T as ProvisioningAbsenceDecision, _ as ExecutionAttemptSettlementKind, a as BeginProvisioningInput, b as HandoffProviderOperationInput, c as DurableOutcome, d as ExecutionAttemptCreate, f as ExecutionAttemptOutcomeCommit, g as ExecutionAttemptRepository, h as ExecutionAttemptRecoveryOperations, i as AllocationTerminationDecision, j as RecordProvisionerIncarnationLostInput, k as RecordInfrastructureFailureInput, l as EXECUTION_ATTEMPT_SETTLEMENT_KINDS, m as ExecutionAttemptRecord, n as AllocationRefEvolution, o as DiscoveredAllocationDecision, p as ExecutionAttemptOutcomeDecision, r as AllocationRefEvolutionDecision, s as DuplicateExecutionAttemptError, t as AllocationRecordingDecision, u as EXECUTION_ATTEMPT_STATUSES, v as ExecutionAttemptStatus, w as ProvisionerIncarnationLossDecision, x as InfrastructureFailureDecision, y as ExecutionOwnerId, z as sameDurableOutcome } from "../execution-attempt-repository-DY4KTptE.mjs";
+import { a as WorkflowEngineServiceOptions, c as ExecutionAttemptAuthority, d as WorkflowWorkspaceRootResolver, f as registerDrizzleWorkflowStorage, i as WorkflowEngineService, l as WorkflowMaterializationSpecResolution, n as createWorkflowEnginePackage, o as WorkflowTriggerReconciler, r as workflowEnginePackage, s as WorkflowExecutor, t as WorkflowEngineToken, u as WorkflowMaterializationSpecResolver } from "../package-efR90JGe.mjs";
 import { WorkflowTriggerPayloadPredicate, assertWorkflowTriggerPayload, compileWorkflowTriggerBindingFilter } from "./workflow-trigger-binding-consumer.mjs";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import { IMakaioBus } from "@makaio/framework/bus";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
-import { JsonPatchOperation, JsonValue, WorkflowAutomationTriggerBinding, WorkflowExecution, WorkflowExecutionSchema, WorkflowListQuerySchema, WorkflowRunResult, WorkflowRunnerCompletion, createWorkflowFinalizerNamespace } from "@makaio/framework/contracts";
+import { JsonPatchOperation, JsonValue, WorkflowAutomationTriggerBinding, WorkflowExecution, WorkflowExecutionSchema, WorkflowListQuerySchema, WorkflowRunResult, createWorkflowFinalizerNamespace } from "@makaio/framework/contracts";
 import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
 import * as _$drizzle_orm_pg_core0 from "drizzle-orm/pg-core";
 import * as _$_makaio_storage_drizzle0 from "@makaio/framework/storage/drizzle";
@@ -26,26 +26,181 @@ interface WorkflowSuccessFinalizer {
 //#endregion
 //#region subsystems/workflow-engine/src/authority-dispatch-runner.d.ts
 /**
- * Inputs for dispatching an Authority-owned workflow attempt.
+ * Inputs for dispatching an Authority-owned attempt.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
  */
-interface AuthorityDispatchRunnerOptions {
+interface AuthorityDispatchRunnerOptions<TOutcome> {
   /** Authority that persists and owns the execution attempt. */
-  readonly authority: ExecutionAttemptAuthority;
-  /** Workflow execution that owns the attempt. */
-  readonly executionId: string;
+  readonly authority: ExecutionAttemptAuthority<TOutcome>;
+  /** Owner identifier of the aggregate that owns the attempt. */
+  readonly executionId: ExecutionOwnerId;
   /** Dispatch operation whose successful return acknowledges acceptance. */
   readonly dispatch: (executionAttemptId: string) => Promise<unknown>;
 }
 /**
- * Dispatch an Authority-owned attempt and await its canonical terminal outcome.
+ * Dispatch an Authority-owned attempt and await its canonical outcome.
  *
  * A rejected dispatch operation is not proof that no provider received the
  * request. The pending-abandonment CAS distinguishes a confirmed pre-allocation
  * failure from a lost acknowledgement after provisioning, allocation, or settlement.
- * @param options - Authority, execution identity, and dispatch operation.
- * @returns The Authority-committed workflow completion.
+ * @param options - Authority, owner identity, and dispatch operation.
+ * @returns The Authority-committed outcome.
  */
-declare function runAuthorityDispatchedAttempt(options: AuthorityDispatchRunnerOptions): Promise<WorkflowRunnerCompletion>;
+declare function runAuthorityDispatchedAttempt<TOutcome>(options: AuthorityDispatchRunnerOptions<TOutcome>): Promise<TOutcome>;
+//#endregion
+//#region subsystems/workflow-engine/src/outcome-convergence.d.ts
+/**
+ * Input handed to {@link OutcomeConvergence.converge}.
+ *
+ * Named rather than inlined so an owner-side realization can state the shape
+ * it implements against, and so a consumer can pin it from the public surface.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+interface OutcomeConvergenceInput<TOutcome> {
+  /** Owner identifier the attempt belongs to. */
+  readonly executionId: ExecutionOwnerId;
+  /** Authority-created attempt identifier. */
+  readonly executionAttemptId: string;
+  /** The canonical committed outcome, never the submitter's copy of it. */
+  readonly outcome: TOutcome;
+  /** The durable decision that produced the committed outcome. */
+  readonly decision: 'accepted' | 'duplicate';
+}
+/**
+ * Owner-side convergence of a committed attempt outcome.
+ *
+ * Runs after the durable commit and before waiter settlement and ACK. It is
+ * idempotent by contract: it is re-entered for every duplicate retry, because
+ * a worker whose first submission committed but did not converge resubmits
+ * the same outcome, receives `duplicate`, and must converge again.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+interface OutcomeConvergence<TOutcome> {
+  /**
+   * Converge owner state with the committed outcome.
+   * @param input - Attempt identity, the canonical committed outcome, and the
+   *   durable decision that produced it.
+   */
+  converge(input: OutcomeConvergenceInput<TOutcome>): Promise<void>;
+}
+/**
+ * Owner-side validation that runs before the durable commit.
+ *
+ * Performs reads only: an outcome it rejects never becomes an immutable
+ * attempt outcome, so a corrected retry is not answered as a conflict. What
+ * it inspects is the canonical outcome the attempt will hold, obtained from
+ * `ExecutionAttemptAuthority.canonicalizeOutcome` before the commit.
+ *
+ * **A realization must be retry-stable.** {@link submitAttemptOutcome} runs it
+ * ahead of every commit, including the retry of a submission that already
+ * committed, so its verdict may depend only on the submission itself and on
+ * owner facts no convergence step rewrites — never on owner state convergence
+ * moves forward. A validator that read, say, a mutable lifecycle status would
+ * reject the identical retry of an outcome its own convergence already
+ * committed, and the waiter for that outcome would never settle.
+ *
+ * Retry-stable is measured on the outcome, not on its text. A retry need not
+ * render the same text as the first commit: `sameDurableOutcome` judges
+ * two texts the same outcome whatever member order they carry and answers
+ * `duplicate` for such a retry, while the validator sees the retry's own
+ * canonical rendering, never the stored one. Its verdict may therefore turn
+ * only on what `sameDurableOutcome` compares — the members and their values
+ * — and never on member order or any other detail of one particular
+ * rendering. A validator that keyed on which member comes first would reject
+ * the retry the repository is about to report as `duplicate`, and the
+ * committed-but-unconverged waiter could never recover. Validating the stored
+ * representation instead is not an option, for the reason the next paragraph
+ * gives: validation runs ahead of the commit, where the retry's rendering is
+ * the only one there is.
+ *
+ * The rule is stated here rather than worked around downstream because the
+ * order it constrains is the one that keeps a spoofed outcome out of durable
+ * storage: validation cannot move behind the commit without committing what
+ * it exists to reject. The workflow adapter's `validateOutcomeExecutionIdentity`
+ * satisfies it by correlating the submitted result against immutable durable
+ * identity — the execution's own id and workflow id, and the run context's
+ * terminal-authority binding, none of which outcome convergence touches.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+interface OutcomePreCommitValidation<TOutcome> {
+  /**
+   * Validate an outcome against owner state.
+   *
+   * Called again for every retry of the same submission, so the same outcome
+   * owes the same verdict — the same as `sameDurableOutcome` reads it,
+   * which ignores member order and every other rendering detail, not the
+   * same text.
+   *
+   * The outcome handed over is the canonical one — what the attempt will
+   * hold and what {@link OutcomeConvergence.converge} will receive — not the
+   * submitter's copy of it. A codec may normalize while serializing, so
+   * validating the copy would let an outcome the validator would have
+   * rejected become the immutable committed one.
+   * @param executionId - Owner identifier the attempt belongs to.
+   * @param outcome - Canonical outcome about to be committed.
+   * @throws When the outcome must not be committed.
+   */
+  validate(executionId: ExecutionOwnerId, outcome: TOutcome): Promise<void>;
+}
+/**
+ * Dependencies of {@link submitAttemptOutcome}.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+interface AttemptOutcomeSubmissionDeps<TOutcome> {
+  /** Authority that commits the outcome and holds the in-process waiter. */
+  readonly authority: ExecutionAttemptAuthority<TOutcome>;
+  /** Owner convergence that runs for `accepted` and `duplicate` decisions. */
+  readonly convergence: OutcomeConvergence<TOutcome>;
+  /** Optional owner validation that runs before the durable commit. */
+  readonly validation?: OutcomePreCommitValidation<TOutcome>;
+}
+/**
+ * Input of {@link submitAttemptOutcome}.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+interface AttemptOutcomeSubmission<TOutcome> {
+  /** Owner identifier the attempt belongs to. */
+  readonly executionId: ExecutionOwnerId;
+  /** Authority-created attempt identifier. */
+  readonly executionAttemptId: string;
+  /** Outcome the worker submitted. */
+  readonly outcome: TOutcome;
+}
+/**
+ * Submit an attempt outcome through the generic owner boundary.
+ *
+ * Order: one canonicalization of the submitted outcome, optional pre-commit
+ * validation of that canonical value, durable commit of that same rendering
+ * through the authority, owner convergence for `accepted` and `duplicate`,
+ * then waiter settlement on a fresh decode of the text the decision reports
+ * as committed. The decision kind is returned for the caller's
+ * acknowledgement.
+ *
+ * Invariants this function keeps:
+ * - the submission is rendered exactly once, and the submitter's object is
+ *   never read again after that: an outcome the caller mutates while an await
+ *   is pending can reach neither the validation nor the durable write;
+ * - validation and convergence see one and the same value: the canonical
+ *   outcome the attempt holds, never the submitter's copy of it;
+ * - convergence only ever sees `decision.outcome`, the repository's own
+ *   committed object;
+ * - the waiter settles on a value decoded afresh from the text the attempt
+ *   stores — the decision's own text, which for a `duplicate` is the first
+ *   commit's rather than the retry's — so what a runner receives is the
+ *   committed outcome even when convergence mutated the object it was handed;
+ * - a throwing convergence leaves the outcome durably committed and the
+ *   waiter pending, so the worker's retry yields `duplicate` and converges
+ *   again; nothing is rejected or deleted here. That recovery path runs the
+ *   validation again first, which is why {@link OutcomePreCommitValidation}
+ *   owes a retry-stable verdict;
+ * - `conflict` and `fenced` skip convergence and settlement; their waiter
+ *   rejection already happened inside `ExecutionAttemptAuthority.commitOutcome`.
+ * @param deps - Authority, convergence, and optional validation.
+ * @param input - Attempt identity and submitted outcome.
+ * @returns The durable decision kind.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
+ */
+declare function submitAttemptOutcome<TOutcome>(deps: AttemptOutcomeSubmissionDeps<TOutcome>, input: AttemptOutcomeSubmission<TOutcome>): Promise<'accepted' | 'duplicate' | 'conflict' | 'fenced'>;
 //#endregion
 //#region subsystems/workflow-engine/src/storage/namespace.d.ts
 /**
@@ -1190,8 +1345,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -1236,8 +1391,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -1279,8 +1434,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -1307,8 +1462,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -1439,8 +1594,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -1464,8 +1619,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
       status: z.ZodOptional<z.ZodEnum<{
         cancelled: "cancelled";
         rejected: "rejected";
-        resumed: "resumed";
         waiting: "waiting";
+        resumed: "resumed";
         "timed-out": "timed-out";
       }>>;
       limit: z.ZodDefault<z.ZodNumber>;
@@ -1480,8 +1635,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -1515,8 +1670,8 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -2972,7 +3127,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           tableName: "workflow_execution_frames";
           dataType: "string";
           columnType: "SQLiteText";
-          data: "pending" | "completed" | "cancelled" | "failed" | "running" | "skipped" | "waiting";
+          data: "pending" | "completed" | "cancelled" | "failed" | "running" | "waiting" | "skipped";
           driverParam: string;
           notNull: true;
           hasDefault: true;
@@ -2985,7 +3140,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           generated: undefined;
         }, {}, {
           length: number | undefined;
-          $type: "pending" | "completed" | "cancelled" | "failed" | "running" | "skipped" | "waiting";
+          $type: "pending" | "completed" | "cancelled" | "failed" | "running" | "waiting" | "skipped";
         }>;
         attempt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
           name: string;
@@ -3255,7 +3410,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           tableName: "workflow_gate_instances";
           dataType: "string";
           columnType: "SQLiteText";
-          data: "cancelled" | "rejected" | "resumed" | "waiting" | "timed-out";
+          data: "cancelled" | "rejected" | "waiting" | "resumed" | "timed-out";
           driverParam: string;
           notNull: true;
           hasDefault: true;
@@ -3268,7 +3423,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           generated: undefined;
         }, {}, {
           length: number | undefined;
-          $type: "cancelled" | "rejected" | "resumed" | "waiting" | "timed-out";
+          $type: "cancelled" | "rejected" | "waiting" | "resumed" | "timed-out";
         }>;
         autoAction: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
           name: "auto_action";
@@ -4767,7 +4922,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           tableName: "worklog_frame_entries";
           dataType: "string";
           columnType: "SQLiteText";
-          data: "pending" | "completed" | "cancelled" | "failed" | "running" | "skipped" | "waiting";
+          data: "pending" | "completed" | "cancelled" | "failed" | "running" | "waiting" | "skipped";
           driverParam: string;
           notNull: true;
           hasDefault: false;
@@ -5201,7 +5356,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           tableName: "worklog_gate_events";
           dataType: "string";
           columnType: "SQLiteText";
-          data: "cancelled" | "rejected" | "resumed" | "waiting" | "timed-out";
+          data: "cancelled" | "rejected" | "waiting" | "resumed" | "timed-out";
           driverParam: string;
           notNull: true;
           hasDefault: false;
@@ -5214,7 +5369,7 @@ declare const WorkflowStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           generated: undefined;
         }, {}, {
           length: number | undefined;
-          $type: "cancelled" | "rejected" | "resumed" | "waiting" | "timed-out";
+          $type: "cancelled" | "rejected" | "waiting" | "resumed" | "timed-out";
         }>;
         prompt: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
           name: "prompt";
@@ -6813,8 +6968,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -6859,8 +7014,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -6902,8 +7057,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           cancelled: "cancelled";
           failed: "failed";
           running: "running";
-          skipped: "skipped";
           waiting: "waiting";
+          skipped: "skipped";
         }>;
         attempt: z.ZodDefault<z.ZodNumber>;
         iteration: z.ZodOptional<z.ZodNumber>;
@@ -6930,8 +7085,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -7062,8 +7217,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -7087,8 +7242,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
       status: z.ZodOptional<z.ZodEnum<{
         cancelled: "cancelled";
         rejected: "rejected";
-        resumed: "resumed";
         waiting: "waiting";
+        resumed: "resumed";
         "timed-out": "timed-out";
       }>>;
       limit: z.ZodDefault<z.ZodNumber>;
@@ -7103,8 +7258,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -7138,8 +7293,8 @@ declare const WorkflowStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
         status: z.ZodEnum<{
           cancelled: "cancelled";
           rejected: "rejected";
-          resumed: "resumed";
           waiting: "waiting";
+          resumed: "resumed";
           "timed-out": "timed-out";
         }>;
         autoAction: z.ZodEnum<{
@@ -7767,7 +7922,7 @@ declare const workflowDefinitionsDual: _$_makaio_storage_drizzle0.DualTable<"wor
   }>>;
   /**
    * Portable executable source for worker dispatch (JSON).
-   * Tells the runtime where to load the workflow module on a worker node.
+   * Tells the runtime where to load the workflow module on a worker.
    */
   executableSource: _$_makaio_storage_drizzle0.DualBuilder<_$drizzle_orm0.$Type<_$drizzle_orm_sqlite_core0.SQLiteTextJsonBuilderInitial<string>, {
     kind: "path";
@@ -7791,7 +7946,7 @@ declare const workflowDefinitionsDual: _$_makaio_storage_drizzle0.DualTable<"wor
     workflowId: string;
   }>>;
   /**
-   * Resource requirements for WorkerNode provider selection (JSON).
+   * Resource requirements for Worker provider selection (JSON).
    * Constrains pool/provider matching during dispatch.
    */
   requirements: _$_makaio_storage_drizzle0.DualBuilder<_$drizzle_orm0.$Type<_$drizzle_orm_sqlite_core0.SQLiteTextJsonBuilderInitial<string>, {
@@ -8067,4 +8222,4 @@ declare function patchWorkflowState(db: MakaioDatabase, params: {
   value: JsonValue;
 }>;
 //#endregion
-export { type AllocationRecordingDecision, type AllocationRefEvolution, type AllocationRefEvolutionDecision, type AllocationTerminationDecision, type AuthorityDispatchRunnerOptions, type BeginProvisioningInput, type DiscoveredAllocationDecision, DuplicateExecutionAttemptError, EXECUTION_ATTEMPT_SETTLEMENT_KINDS, EXECUTION_ATTEMPT_STATUSES, ExecutionAttemptAuthority, type ExecutionAttemptCreate, type ExecutionAttemptOutcomeCommit, type ExecutionAttemptOutcomeDecision, type ExecutionAttemptRecord, type ExecutionAttemptRecoveryOperations, type ExecutionAttemptRepository, type ExecutionAttemptSettlementKind, type ExecutionAttemptStatus, type HandoffProviderOperationInput, type InfrastructureFailureDecision, type InitialProviderOperationClaimContext, type InitialProviderOperationClaimContextSource, PROVIDER_OPERATION_OBLIGATIONS, type PendingAttemptAbandonmentDecision, type ProcessBoundProvisionerLossProof, type ProviderOperationClaim, type ProviderOperationClaimDecision, type ProviderOperationMutationDecision, type ProviderOperationObligation, type ProviderOperationOwnershipRecord, type ProvisionerIncarnationLossDecision, type ProvisioningAbsenceDecision, type ProvisioningClaimDecision, type RecordAllocationInput, type RecordAllocationTerminatedInput, type RecordInfrastructureFailureInput, type RecordProviderOperationUncertaintyInput, type RecordProvisionerIncarnationLostInput, type RecordProvisioningAbsentInput, type RecoverableAttemptRecord, type RenewProviderOperationClaimInput, type TakeOverProviderOperationInput, WorkflowEngineService, type WorkflowEngineServiceOptions, WorkflowEngineToken, WorkflowExecutor, type WorkflowMaterializationSpecResolution, type WorkflowMaterializationSpecResolver, WorkflowStorageNamespace, WorkflowStorageSubjects, type WorkflowSuccessFinalizer, type WorkflowTriggerPayloadPredicate, WorkflowTriggerReconciler, type WorkflowWorkspaceRootResolver, assertWorkflowTriggerPayload, buildWorkflowExpressionContextFromResolvedInputs, compileWorkflowTriggerBindingFilter, createWorkflowEnginePackage, getWorkflowState, initializeWorkflowState, patchWorkflowState, registerDrizzleWorkflowStorage, runAuthorityDispatchedAttempt, runShellStep, sameAllocationRef, sameWorkflowResult, workflowDefinitionsDual, workflowEnginePackage, workflowExecutionStateDual, workflowExecutionStateEventsDual, workflowExecutionsDual, workflowFinalizationsDual, workflowStepSpansDual, worklogFrameEntriesDual, worklogSummariesDual };
+export { type AllocationRecordingDecision, type AllocationRefEvolution, type AllocationRefEvolutionDecision, type AllocationTerminationDecision, type AttemptOutcomeSubmission, type AttemptOutcomeSubmissionDeps, type AuthorityDispatchRunnerOptions, type BeginProvisioningInput, type DiscoveredAllocationDecision, DuplicateExecutionAttemptError, type DurableOutcome, EXECUTION_ATTEMPT_SETTLEMENT_KINDS, EXECUTION_ATTEMPT_STATUSES, ExecutionAttemptAuthority, type ExecutionAttemptCreate, type ExecutionAttemptOutcomeCommit, type ExecutionAttemptOutcomeDecision, type ExecutionAttemptRecord, type ExecutionAttemptRecoveryOperations, type ExecutionAttemptRepository, type ExecutionAttemptSettlementKind, type ExecutionAttemptStatus, type ExecutionOwnerId, type HandoffProviderOperationInput, type InfrastructureFailureDecision, type InitialProviderOperationClaimContext, type InitialProviderOperationClaimContextSource, type OutcomeCodec, type OutcomeConvergence, type OutcomeConvergenceInput, type OutcomePreCommitValidation, PROVIDER_OPERATION_OBLIGATIONS, type PendingAttemptAbandonmentDecision, type ProcessBoundProvisionerLossProof, type ProviderOperationClaim, type ProviderOperationClaimDecision, type ProviderOperationMutationDecision, type ProviderOperationObligation, type ProviderOperationOwnershipRecord, type ProvisionerIncarnationLossDecision, type ProvisioningAbsenceDecision, type ProvisioningClaimDecision, type RecordAllocationInput, type RecordAllocationTerminatedInput, type RecordInfrastructureFailureInput, type RecordProviderOperationUncertaintyInput, type RecordProvisionerIncarnationLostInput, type RecordProvisioningAbsentInput, type RecoverableAttemptRecord, type RenewProviderOperationClaimInput, type TakeOverProviderOperationInput, WorkflowEngineService, type WorkflowEngineServiceOptions, WorkflowEngineToken, WorkflowExecutor, type WorkflowMaterializationSpecResolution, type WorkflowMaterializationSpecResolver, WorkflowStorageNamespace, WorkflowStorageSubjects, type WorkflowSuccessFinalizer, type WorkflowTriggerPayloadPredicate, WorkflowTriggerReconciler, type WorkflowWorkspaceRootResolver, assertWorkflowTriggerPayload, buildWorkflowExpressionContextFromResolvedInputs, compileWorkflowTriggerBindingFilter, createWorkflowEnginePackage, decodeDurableOutcome, durableOutcome, getWorkflowState, initializeWorkflowState, patchWorkflowState, registerDrizzleWorkflowStorage, runAuthorityDispatchedAttempt, runShellStep, sameAllocationRef, sameDurableOutcome, submitAttemptOutcome, workflowDefinitionsDual, workflowEnginePackage, workflowExecutionStateDual, workflowExecutionStateEventsDual, workflowExecutionsDual, workflowFinalizationsDual, workflowStepSpansDual, worklogFrameEntriesDual, worklogSummariesDual };

package/dist/workflow-engine/index.mjs

@@ -1 +1 @@
-import{B as e,H as t,M as n,P as r,T as i,W as a,X as o,et as s,g as c,it as l,j as u,ot as d}from"../authority-state-bootstrap-CLYus369.mjs";import{a as f,c as p,d as m,i as h,l as g,n as _,o as v,r as y,s as b,t as x,u as S}from"../package-B01gmu75.mjs";import{assertWorkflowTriggerPayload as C,compileWorkflowTriggerBindingFilter as w}from"./workflow-trigger-binding-consumer.mjs";import{DuplicateExecutionAttemptError as T,EXECUTION_ATTEMPT_SETTLEMENT_KINDS as E,EXECUTION_ATTEMPT_STATUSES as D,sameAllocationRef as O,sameWorkflowResult as k}from"./execution-attempt-repository.mjs";import{PROVIDER_OPERATION_OBLIGATIONS as A}from"./provider-operation.mjs";import{JsonValueSchema as j,WorkflowFrameStateSchema as M}from"@makaio/framework/contracts";const N=new Set([...M.shape.status.options]);function P(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function F(e){if(!P(e))return!1;for(let t of Object.values(e))if(!P(t)||typeof t.status!=`string`||!N.has(t.status)||`result`in t&&t.result!==void 0&&!j.safeParse(t.result).success)return!1;return!0}function I(e){let t={trigger:P(e.trigger)?e.trigger:{},steps:F(e.steps)?e.steps:{},inputs:j.safeParse(e.inputs).success?e.inputs:{}};return`item`in e&&(t.item=e.item),typeof e.index==`number`&&(t.index=e.index),t}export{T as DuplicateExecutionAttemptError,E as EXECUTION_ATTEMPT_SETTLEMENT_KINDS,D as EXECUTION_ATTEMPT_STATUSES,f as ExecutionAttemptAuthority,A as PROVIDER_OPERATION_OBLIGATIONS,h as WorkflowEngineService,x as WorkflowEngineToken,b as WorkflowExecutor,u as WorkflowStorageNamespace,n as WorkflowStorageSubjects,v as WorkflowTriggerReconciler,C as assertWorkflowTriggerPayload,I as buildWorkflowExpressionContextFromResolvedInputs,w as compileWorkflowTriggerBindingFilter,_ as createWorkflowEnginePackage,g as getWorkflowState,S as initializeWorkflowState,m as patchWorkflowState,p as registerDrizzleWorkflowStorage,c as runAuthorityDispatchedAttempt,i as runShellStep,O as sameAllocationRef,k as sameWorkflowResult,r as workflowDefinitionsDual,y as workflowEnginePackage,e as workflowExecutionStateDual,t as workflowExecutionStateEventsDual,a as workflowExecutionsDual,d as workflowFinalizationsDual,o as workflowStepSpansDual,s as worklogFrameEntriesDual,l as worklogSummariesDual};
+import{B as e,H as t,M as n,P as r,T as i,W as a,X as o,et as s,g as c,it as l,j as u,ot as d}from"../authority-state-bootstrap-eitx6Ukn.mjs";import{a as f,c as p,d as m,f as h,i as g,l as _,n as v,o as y,r as b,s as x,t as S,u as C}from"../package-Cgjpm9om.mjs";import{assertWorkflowTriggerPayload as w,compileWorkflowTriggerBindingFilter as T}from"./workflow-trigger-binding-consumer.mjs";import{DuplicateExecutionAttemptError as E,EXECUTION_ATTEMPT_SETTLEMENT_KINDS as D,EXECUTION_ATTEMPT_STATUSES as O,decodeDurableOutcome as k,durableOutcome as A,sameAllocationRef as j,sameDurableOutcome as M}from"./execution-attempt-repository.mjs";import{PROVIDER_OPERATION_OBLIGATIONS as N}from"./provider-operation.mjs";import{JsonValueSchema as P,WorkflowFrameStateSchema as F}from"@makaio/framework/contracts";const I=new Set([...F.shape.status.options]);function L(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function R(e){if(!L(e))return!1;for(let t of Object.values(e))if(!L(t)||typeof t.status!=`string`||!I.has(t.status)||`result`in t&&t.result!==void 0&&!P.safeParse(t.result).success)return!1;return!0}function z(e){let t={trigger:L(e.trigger)?e.trigger:{},steps:R(e.steps)?e.steps:{},inputs:P.safeParse(e.inputs).success?e.inputs:{}};return`item`in e&&(t.item=e.item),typeof e.index==`number`&&(t.index=e.index),t}export{E as DuplicateExecutionAttemptError,D as EXECUTION_ATTEMPT_SETTLEMENT_KINDS,O as EXECUTION_ATTEMPT_STATUSES,f as ExecutionAttemptAuthority,N as PROVIDER_OPERATION_OBLIGATIONS,g as WorkflowEngineService,S as WorkflowEngineToken,x as WorkflowExecutor,u as WorkflowStorageNamespace,n as WorkflowStorageSubjects,y as WorkflowTriggerReconciler,w as assertWorkflowTriggerPayload,z as buildWorkflowExpressionContextFromResolvedInputs,T as compileWorkflowTriggerBindingFilter,v as createWorkflowEnginePackage,k as decodeDurableOutcome,A as durableOutcome,C as getWorkflowState,m as initializeWorkflowState,h as patchWorkflowState,_ as registerDrizzleWorkflowStorage,c as runAuthorityDispatchedAttempt,i as runShellStep,j as sameAllocationRef,M as sameDurableOutcome,p as submitAttemptOutcome,r as workflowDefinitionsDual,b as workflowEnginePackage,e as workflowExecutionStateDual,t as workflowExecutionStateEventsDual,a as workflowExecutionsDual,d as workflowFinalizationsDual,o as workflowStepSpansDual,s as worklogFrameEntriesDual,l as worklogSummariesDual};

package/dist/workflow-engine/package.d.mts

@@ -1,2 +1,2 @@
-import { n as createWorkflowEnginePackage, r as workflowEnginePackage, t as WorkflowEngineToken } from "../package-BNFTUFLB.mjs";
+import { n as createWorkflowEnginePackage, r as workflowEnginePackage, t as WorkflowEngineToken } from "../package-efR90JGe.mjs";
 export { WorkflowEngineToken, createWorkflowEnginePackage, workflowEnginePackage };

package/dist/workflow-engine/package.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../package-B01gmu75.mjs";export{n as WorkflowEngineToken,e as createWorkflowEnginePackage,t as workflowEnginePackage};
+import{n as e,r as t,t as n}from"../package-Cgjpm9om.mjs";export{n as WorkflowEngineToken,e as createWorkflowEnginePackage,t as workflowEnginePackage};

package/dist/workflow-engine/testing/index.d.mts

@@ -1,5 +1,5 @@
 import { a as ProviderOperationClaim, i as ProcessBoundProvisionerLossProof, l as ProviderOperationOwnershipRecord } from "../../provider-operation-DbdyFwNm.mjs";
-import { C as ProvisioningClaimDecision, a as BeginProvisioningInput, h as ExecutionAttemptRepository, p as ExecutionAttemptRecord } from "../../execution-attempt-repository-BJ2W6wwx.mjs";
+import { E as ProvisioningClaimDecision, S as OutcomeCodec, a as BeginProvisioningInput, g as ExecutionAttemptRepository, m as ExecutionAttemptRecord } from "../../execution-attempt-repository-DY4KTptE.mjs";
 import { BoundedRecoveryEvidence, ProviderAllocationRef, WorkflowRunResult } from "@makaio/framework/contracts";
 
 //#region subsystems/workflow-engine/src/testing/in-memory-attempt-repository.d.ts
@@ -7,17 +7,30 @@ import { BoundedRecoveryEvidence, ProviderAllocationRef, WorkflowRunResult } fro
  * Durable state the in-memory realization keeps.
  *
  * The four maps mirror the four durable facts the port owns: canonical attempt
- * state, fenced provider-operation ownership, committed workflow outcomes, and
- * which attempt is currently active for an execution. They are exposed so a
- * test can seed state before the first call and assert against it afterwards.
+ * state, fenced provider-operation ownership, committed outcomes, and which
+ * attempt is currently active for an owner. They are exposed so a test can
+ * seed state before the first call and assert against it afterwards.
+ *
+ * Not generic over the outcome type: the committed outcomes are held as the
+ * codec's durable text, the same representation a store's column holds, so
+ * none of the four maps carries an outcome-typed value.
  */
 interface InMemoryAttemptRepositoryState {
   /** Attempt records keyed by `executionAttemptId`. */
   readonly attempts: Map<string, ExecutionAttemptRecord>;
   /** Provider operation records keyed by `executionAttemptId`. */
   readonly operations: Map<string, ProviderOperationOwnershipRecord>;
-  /** Committed canonical outcomes keyed by `executionAttemptId`. */
-  readonly committedOutcomes: Map<string, WorkflowRunResult>;
+  /**
+   * Committed outcome texts keyed by `executionAttemptId`.
+   *
+   * The codec text and nothing else, exactly the `workflow_result` column a
+   * durable realization keeps: it is what a retry is compared against, and
+   * every outcome the port reports is a fresh decode of it. Keeping the
+   * decoded value here instead would hand every reader one shared instance,
+   * and a codec may reconstruct a mutable object — a `URL`, say — that no
+   * freeze can protect.
+   */
+  readonly committedOutcomes: Map<string, string>;
   /** Active attempt per `executionId`, the fence every bootstrap path reads. */
   readonly activeAttempts: Map<string, string>;
 }
@@ -30,8 +43,9 @@ interface InMemoryAttemptRepositoryState {
  * a single failing durable write without losing the rest of the state machine.
  * Replacing a recovery operation means spreading `recovery` too, which is the
  * port's own rule that recovery is offered whole or not at all.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
  */
-interface InMemoryAttemptRepository extends Required<ExecutionAttemptRepository>, InMemoryAttemptRepositoryState {}
+interface InMemoryAttemptRepository<TOutcome> extends Required<ExecutionAttemptRepository<TOutcome>>, InMemoryAttemptRepositoryState {}
 /**
  * Create the in-memory reference realization of {@link ExecutionAttemptRepository}.
  *
@@ -55,10 +69,12 @@ interface InMemoryAttemptRepository extends Required<ExecutionAttemptRepository>
  * model transaction isolation. Use it wherever a test needs the port's
  * decisions without a database, and `createSqliteAttemptRepository` when the
  * test needs real transactional fencing between two independent connections.
+ * @param codec - Owner-injected codec that validates every submitted outcome.
  * @param seed - Pre-existing state to build on, shared with the caller.
  * @returns A repository exposing the full port surface, plus its backing state.
+ * @typeParam TOutcome - Owner-specific outcome type committed per attempt.
  */
-declare function createInMemoryAttemptRepository(seed?: Partial<InMemoryAttemptRepositoryState>): InMemoryAttemptRepository;
+declare function createInMemoryAttemptRepository<TOutcome>(codec: OutcomeCodec<TOutcome>, seed?: Partial<InMemoryAttemptRepositoryState>): InMemoryAttemptRepository<TOutcome>;
 //#endregion
 //#region subsystems/workflow-engine/src/testing/attempt-fixtures.d.ts
 /** Controller process incarnation used by tests that need one fixed owner. */
@@ -135,6 +151,11 @@ declare function makeProcessLossProof(provisionerIncarnationId?: string, evidenc
  * @returns A versioned allocation reference.
  */
 declare function makeTestAllocationRef(providerId?: string, providerData?: Record<string, unknown>): ProviderAllocationRef;
+/**
+ * Outcome codec for the workflow adapter: validates through
+ * {@link WorkflowRunResultSchema} and persists the canonical JSON text.
+ */
+declare const workflowRunResultOutcomeCodec: OutcomeCodec<WorkflowRunResult>;
 /**
  * Build a terminal workflow result the port can commit.
  * @param executionId - Execution the result belongs to.
@@ -143,4 +164,4 @@ declare function makeTestAllocationRef(providerId?: string, providerData?: Recor
  */
 declare function makeTestWorkflowResult(executionId: string, status?: 'completed' | 'failed'): WorkflowRunResult;
 //#endregion
-export { type InMemoryAttemptRepository, type InMemoryAttemptRepositoryState, type ProvisioningClaimGrantor, TEST_OWNER_ID, TEST_PROVIDER_ID, TEST_PROVISIONER_INCARNATION_ID, beginTestProvisioning, createInMemoryAttemptRepository, leaseAt, makeBeginProvisioningInput, makeEvidence, makeProcessLossProof, makeTestAllocationRef, makeTestWorkflowResult };
+export { type InMemoryAttemptRepository, type InMemoryAttemptRepositoryState, type ProvisioningClaimGrantor, TEST_OWNER_ID, TEST_PROVIDER_ID, TEST_PROVISIONER_INCARNATION_ID, beginTestProvisioning, createInMemoryAttemptRepository, leaseAt, makeBeginProvisioningInput, makeEvidence, makeProcessLossProof, makeTestAllocationRef, makeTestWorkflowResult, workflowRunResultOutcomeCodec };

package/dist/workflow-engine/testing/index.mjs

@@ -1 +1 @@
-import{DuplicateExecutionAttemptError as e,sameAllocationRef as t,sameWorkflowResult as n}from"../execution-attempt-repository.mjs";import{a as r,c as i,i as a,l as o,n as s,o as c,r as l,s as u,t as d}from"../../attempt-record-codec-BYfYkj4M.mjs";import{BoundedRecoveryEvidenceSchema as f,PROVIDER_ALLOCATION_REF_VERSION as p}from"@makaio/framework/contracts";function m(p={}){let m=p.attempts??new Map,h=p.operations??new Map,g=p.committedOutcomes??new Map,_=p.activeAttempts??new Map,v=e=>{let t=m.get(e.executionAttemptId),n=h.get(e.executionAttemptId);return!t||!n?{kind:`not-found`}:t.settlementKind==null?n.token===null||n.token!==e.token||n.generation!==e.generation||n.ownerId!==e.ownerId?{kind:`stale`,attempt:t}:{kind:`authorized`,attempt:t,operation:n}:{kind:`resolved`,attempt:t}},y=(e,t)=>{h.set(e.executionAttemptId,{...e,ownerId:null,token:null,leaseExpiresAt:null,lastFailure:t})},b=(e,n)=>{let a=r(e.allocationRef),o=v(e.claim);if(o.kind!==`not-found`&&i(o.attempt,a),o.kind===`resolved`)return{kind:`resolved`,allocationRef:o.attempt.allocationRef};if(o.kind!==`authorized`)return{kind:o.kind};let{attempt:s,operation:c}=o;if(s.allocationRef!==null)return t(s.allocationRef,a)?{kind:`duplicate`,allocationRef:s.allocationRef}:{kind:`conflict`,allocationRef:s.allocationRef};let l=_.get(s.executionId)===s.executionAttemptId;return m.set(s.executionAttemptId,{...s,status:`allocated`,allocationRef:a,claimable:n&&l}),h.set(c.executionAttemptId,{...c,obligation:`allocation-control`}),{kind:`recorded`}};return{async createAttempt(t){if(m.has(t.executionAttemptId))throw new e(t.executionAttemptId);let n={executionAttemptId:t.executionAttemptId,executionId:t.executionId,status:`pending`,allocationRef:null,createdAt:new Date().toISOString(),providerId:null,allocationLifetime:null,provisionerIncarnationId:null,settlementKind:null,claimable:!1,claimExpiresAt:null},r=_.get(t.executionId),i=r===void 0?void 0:m.get(r);return i?.status===`allocated`&&m.set(i.executionAttemptId,{...i,claimable:!1}),m.set(t.executionAttemptId,n),_.set(t.executionId,t.executionAttemptId),n},async beginProvisioning(e){let t=a(e.allocationLifetime),n=m.get(e.executionAttemptId);if(!n||n.executionId!==e.executionId)return{kind:`not-found`};if(_.get(e.executionId)!==e.executionAttemptId)return{kind:`fenced`};if(n.settlementKind!=null)return{kind:`resolved`,allocationRef:n.allocationRef};if(n.allocationRef!==null)return{kind:`allocated`,allocationRef:n.allocationRef};if(n.status!==`pending`)return{kind:`already-provisioning`};m.set(e.executionAttemptId,{...n,status:`provisioning`,providerId:e.providerId,allocationLifetime:t,provisionerIncarnationId:e.provisionerIncarnationId});let r={executionAttemptId:e.executionAttemptId,generation:1,ownerId:e.ownerId,token:crypto.randomUUID(),leaseExpiresAt:l(e.leaseExpiresAt)};return h.set(e.executionAttemptId,{executionAttemptId:e.executionAttemptId,generation:r.generation,ownerId:r.ownerId,token:r.token,leaseExpiresAt:r.leaseExpiresAt,obligation:`provisioning-resolution`,failureCount:0,lastFailure:null}),{kind:`started`,claim:r}},async getProviderOperation(e){return h.get(e)??null},async renewProviderOperationClaim(e){let t=v(e.claim);if(t.kind!==`authorized`)return{kind:t.kind};let n=l(e.leaseExpiresAt);return h.set(e.claim.executionAttemptId,{...t.operation,leaseExpiresAt:n}),{kind:`claimed`,claim:{...e.claim,leaseExpiresAt:n}}},async takeOverProviderOperation(e){let t=m.get(e.executionAttemptId),n=h.get(e.executionAttemptId);if(!t||!n)return{kind:`not-found`};if(t.settlementKind!=null)return{kind:`resolved`};if(n.ownerId!==null&&n.leaseExpiresAt!==null&&s(n.leaseExpiresAt)>s(e.observedAt))return{kind:`stale`};let r={executionAttemptId:e.executionAttemptId,generation:n.generation+1,ownerId:e.ownerId,token:crypto.randomUUID(),leaseExpiresAt:l(e.leaseExpiresAt)};return h.set(e.executionAttemptId,{...n,generation:r.generation,ownerId:r.ownerId,token:r.token,leaseExpiresAt:r.leaseExpiresAt}),{kind:`claimed`,claim:r}},async handoffProviderOperation(e){let t=e.evidence===void 0?void 0:f.parse(e.evidence),n=v(e.claim);return n.kind===`authorized`?(h.set(e.claim.executionAttemptId,{...n.operation,ownerId:null,token:null,leaseExpiresAt:null,lastFailure:t??n.operation.lastFailure}),{kind:`recorded`}):{kind:n.kind}},async recordProviderOperationUncertainty(e){let t=f.parse(e.evidence),n=v(e.claim);return n.kind===`authorized`?(h.set(e.claim.executionAttemptId,{...n.operation,failureCount:n.operation.failureCount+1,lastFailure:t}),{kind:`recorded`}):{kind:n.kind}},async recordAllocation(e){return b(e,!0)},async recordProvisioningAbsent(e){let t=f.parse(e.evidence),n=v(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.executionId===e.executionId?r.allocationRef===null?(m.set(r.executionAttemptId,{...r,status:`settled`,settlementKind:`abandoned`,claimable:!1}),y(i,t),{kind:`recorded`}):{kind:`allocated`,allocationRef:r.allocationRef}:{kind:`not-found`}},async recordProvisionerIncarnationLost(e){let t=f.parse(e.proof.evidence),n=v(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.executionId===e.executionId?r.allocationLifetime===`provisioner-process-bound`?r.provisionerIncarnationId===null||r.provisionerIncarnationId!==e.proof.provisionerIncarnationId?{kind:`incarnation-mismatch`,provisionerIncarnationId:r.provisionerIncarnationId}:r.allocationRef===null?(m.set(r.executionAttemptId,{...r,status:`settled`,settlementKind:`abandoned`,claimable:!1}),y(i,t),{kind:`recorded`}):{kind:`allocated`,allocationRef:r.allocationRef}:{kind:`not-process-bound`,allocationLifetime:r.allocationLifetime}:{kind:`not-found`}},async recordAllocationTerminated(e){let t=f.parse(e.evidence),n=v(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.allocationRef===null?{kind:`not-allocated`}:(h.set(i.executionAttemptId,{...i,obligation:`terminal-convergence`,lastFailure:t}),{kind:`recorded`})},async recordInfrastructureFailure(e){let t=v(e.claim);if(t.kind!==`authorized`)return{kind:t.kind};let{attempt:n,operation:r}=t;return n.executionId===e.executionId?n.allocationRef===null?{kind:`not-allocated`}:r.obligation===`terminal-convergence`?(m.set(n.executionAttemptId,{...n,status:`settled`,settlementKind:`infrastructure-failure`,claimable:!1}),y(r,r.lastFailure),{kind:`recorded`}):{kind:`not-terminated`}:{kind:`not-found`}},async getActiveAttempt(e,t){return _.get(e)===t?m.get(t)??null:null},async commitOutcome(e){let t=u(e.result);if(_.get(e.executionId)!==e.executionAttemptId)return{kind:`fenced`};let r=m.get(e.executionAttemptId);if(r===void 0)return{kind:`fenced`};let i=g.get(e.executionAttemptId);if(i)return n(i,t)?{kind:`duplicate`,outcome:i}:{kind:`conflict`};if(r.settlementKind!=null)return{kind:`conflict`};g.set(e.executionAttemptId,t),m.set(e.executionAttemptId,{...r,status:`settled`,settlementKind:`outcome`,claimable:!1});let a=h.get(e.executionAttemptId);return a&&y(a,a.lastFailure),{kind:`accepted`,outcome:t}},async abandonPendingAttempt(e,t){if(_.get(t)!==e)return{kind:`fenced`};let n=m.get(e);return n?n.status===`allocated`?{kind:`allocated`}:n.status===`provisioning`?{kind:`provisioning`}:n.status===`settled`?{kind:n.settlementKind===`abandoned`?`already-abandoned`:`already-settled`}:(m.set(e,{...n,status:`settled`,settlementKind:`abandoned`,claimable:!1}),{kind:`abandoned`}):{kind:`fenced`}},recovery:{async getAttemptWithAllocation(e){return m.get(e)??null},async recordDiscoveredAllocation(e){return b(e,!1)},async evolveAllocationRef(e){let{currentRef:n,nextRef:r}=c(e),i=v(e.claim);if(i.kind===`stale`)return{kind:`stale`,storedRef:i.attempt.allocationRef};if(i.kind!==`authorized`)return{kind:i.kind};let{attempt:a}=i;return a.executionId===e.executionId?a.allocationRef===null?{kind:`not-allocated`}:t(a.allocationRef,n)?(m.set(a.executionAttemptId,{...a,allocationRef:r}),{kind:`evolved`}):{kind:`stale`,storedRef:a.allocationRef}:{kind:`not-found`}},async getRecoverableAttempts(e){let t=s(new Date().toISOString()),n=[];for(let r of m.values())r.executionId===e&&r.status===`allocated`&&r.allocationRef!==null&&r.claimable===!0&&r.settlementKind==null&&(r.claimExpiresAt!=null&&s(r.claimExpiresAt)<t||n.push(o(r)));return n.sort(d)}},attempts:m,operations:h,committedOutcomes:g,activeAttempts:_}}const h=`controller-incarnation-1`,g=`provisioner-incarnation-1`,_=`test-provider`;function v(e){return new Date(Date.now()+e).toISOString()}function y(e,t,n={}){return{executionAttemptId:e,executionId:t,providerId:_,allocationLifetime:`provider-managed`,provisionerIncarnationId:g,ownerId:h,leaseExpiresAt:v(6e4),...n}}async function b(e,t,n,r={}){let i=await e.beginProvisioning(y(t,n,r));if(i.kind!==`started`)throw Error(`Expected provisioning to start, got '${i.kind}'`);return i.claim}function x(e={}){return{source:_,summary:`provider rejected the request before creating anything`,observedAt:new Date().toISOString(),...e}}function S(e=g,t=x({summary:`supervisor observed the provisioner process exit`})){return{kind:`provisioner-incarnation-lost`,provisionerIncarnationId:e,evidence:t}}function C(e=_,t={runId:1}){return{version:p,providerId:e,providerData:t}}function w(e,t=`completed`){let n={executionId:e,workflowId:`contract-workflow`};return t===`completed`?{...n,status:`completed`}:{...n,status:`failed`,error:`contract failure`}}export{h as TEST_OWNER_ID,_ as TEST_PROVIDER_ID,g as TEST_PROVISIONER_INCARNATION_ID,b as beginTestProvisioning,m as createInMemoryAttemptRepository,v as leaseAt,y as makeBeginProvisioningInput,x as makeEvidence,S as makeProcessLossProof,C as makeTestAllocationRef,w as makeTestWorkflowResult};
+import{DuplicateExecutionAttemptError as e,decodeDurableOutcome as t,durableOutcome as n,sameAllocationRef as r,sameDurableOutcome as i}from"../execution-attempt-repository.mjs";import{a,c as o,i as s,n as c,o as l,r as u,s as d,t as f}from"../../attempt-record-codec-dC9LSFUE.mjs";import{BoundedRecoveryEvidenceSchema as p,PROVIDER_ALLOCATION_REF_VERSION as m,WorkflowRunResultSchema as h}from"@makaio/framework/contracts";function g(m,h={}){let g=h.attempts??new Map,_=h.operations??new Map,v=h.committedOutcomes??new Map,y=h.activeAttempts??new Map,b=e=>{let t=g.get(e.executionAttemptId),n=_.get(e.executionAttemptId);return!t||!n?{kind:`not-found`}:t.settlementKind==null?n.token===null||n.token!==e.token||n.generation!==e.generation||n.ownerId!==e.ownerId?{kind:`stale`,attempt:t}:{kind:`authorized`,attempt:t,operation:n}:{kind:`resolved`,attempt:t}},x=(e,t)=>{_.set(e.executionAttemptId,{...e,ownerId:null,token:null,leaseExpiresAt:null,lastFailure:t})},S=(e,t)=>{let n=a(e.allocationRef),i=b(e.claim);if(i.kind!==`not-found`&&d(i.attempt,n),i.kind===`resolved`)return{kind:`resolved`,allocationRef:i.attempt.allocationRef};if(i.kind!==`authorized`)return{kind:i.kind};let{attempt:o,operation:s}=i;if(o.allocationRef!==null)return r(o.allocationRef,n)?{kind:`duplicate`,allocationRef:o.allocationRef}:{kind:`conflict`,allocationRef:o.allocationRef};let c=y.get(o.executionId)===o.executionAttemptId;return g.set(o.executionAttemptId,{...o,status:`allocated`,allocationRef:n,claimable:t&&c}),_.set(s.executionAttemptId,{...s,obligation:`allocation-control`}),{kind:`recorded`}};return{async createAttempt(t){if(g.has(t.executionAttemptId))throw new e(t.executionAttemptId);let n={executionAttemptId:t.executionAttemptId,executionId:t.executionId,status:`pending`,allocationRef:null,createdAt:new Date().toISOString(),providerId:null,allocationLifetime:null,provisionerIncarnationId:null,settlementKind:null,claimable:!1,claimExpiresAt:null},r=y.get(t.executionId),i=r===void 0?void 0:g.get(r);return i?.status===`allocated`&&g.set(i.executionAttemptId,{...i,claimable:!1}),g.set(t.executionAttemptId,n),y.set(t.executionId,t.executionAttemptId),n},async beginProvisioning(e){let t=s(e.allocationLifetime),n=g.get(e.executionAttemptId);if(!n||n.executionId!==e.executionId)return{kind:`not-found`};if(y.get(e.executionId)!==e.executionAttemptId)return{kind:`fenced`};if(n.settlementKind!=null)return{kind:`resolved`,allocationRef:n.allocationRef};if(n.allocationRef!==null)return{kind:`allocated`,allocationRef:n.allocationRef};if(n.status!==`pending`)return{kind:`already-provisioning`};g.set(e.executionAttemptId,{...n,status:`provisioning`,providerId:e.providerId,allocationLifetime:t,provisionerIncarnationId:e.provisionerIncarnationId});let r={executionAttemptId:e.executionAttemptId,generation:1,ownerId:e.ownerId,token:crypto.randomUUID(),leaseExpiresAt:u(e.leaseExpiresAt)};return _.set(e.executionAttemptId,{executionAttemptId:e.executionAttemptId,generation:r.generation,ownerId:r.ownerId,token:r.token,leaseExpiresAt:r.leaseExpiresAt,obligation:`provisioning-resolution`,failureCount:0,lastFailure:null}),{kind:`started`,claim:r}},async getProviderOperation(e){return _.get(e)??null},async renewProviderOperationClaim(e){let t=b(e.claim);if(t.kind!==`authorized`)return{kind:t.kind};let n=u(e.leaseExpiresAt);return _.set(e.claim.executionAttemptId,{...t.operation,leaseExpiresAt:n}),{kind:`claimed`,claim:{...e.claim,leaseExpiresAt:n}}},async takeOverProviderOperation(e){let t=g.get(e.executionAttemptId),n=_.get(e.executionAttemptId);if(!t||!n)return{kind:`not-found`};if(t.settlementKind!=null)return{kind:`resolved`};if(n.ownerId!==null&&n.leaseExpiresAt!==null&&c(n.leaseExpiresAt)>c(e.observedAt))return{kind:`stale`};let r={executionAttemptId:e.executionAttemptId,generation:n.generation+1,ownerId:e.ownerId,token:crypto.randomUUID(),leaseExpiresAt:u(e.leaseExpiresAt)};return _.set(e.executionAttemptId,{...n,generation:r.generation,ownerId:r.ownerId,token:r.token,leaseExpiresAt:r.leaseExpiresAt}),{kind:`claimed`,claim:r}},async handoffProviderOperation(e){let t=e.evidence===void 0?void 0:p.parse(e.evidence),n=b(e.claim);return n.kind===`authorized`?(_.set(e.claim.executionAttemptId,{...n.operation,ownerId:null,token:null,leaseExpiresAt:null,lastFailure:t??n.operation.lastFailure}),{kind:`recorded`}):{kind:n.kind}},async recordProviderOperationUncertainty(e){let t=p.parse(e.evidence),n=b(e.claim);return n.kind===`authorized`?(_.set(e.claim.executionAttemptId,{...n.operation,failureCount:n.operation.failureCount+1,lastFailure:t}),{kind:`recorded`}):{kind:n.kind}},async recordAllocation(e){return S(e,!0)},async recordProvisioningAbsent(e){let t=p.parse(e.evidence),n=b(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.executionId===e.executionId?r.allocationRef===null?(g.set(r.executionAttemptId,{...r,status:`settled`,settlementKind:`abandoned`,claimable:!1}),x(i,t),{kind:`recorded`}):{kind:`allocated`,allocationRef:r.allocationRef}:{kind:`not-found`}},async recordProvisionerIncarnationLost(e){let t=p.parse(e.proof.evidence),n=b(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.executionId===e.executionId?r.allocationLifetime===`provisioner-process-bound`?r.provisionerIncarnationId===null||r.provisionerIncarnationId!==e.proof.provisionerIncarnationId?{kind:`incarnation-mismatch`,provisionerIncarnationId:r.provisionerIncarnationId}:r.allocationRef===null?(g.set(r.executionAttemptId,{...r,status:`settled`,settlementKind:`abandoned`,claimable:!1}),x(i,t),{kind:`recorded`}):{kind:`allocated`,allocationRef:r.allocationRef}:{kind:`not-process-bound`,allocationLifetime:r.allocationLifetime}:{kind:`not-found`}},async recordAllocationTerminated(e){let t=p.parse(e.evidence),n=b(e.claim);if(n.kind!==`authorized`)return{kind:n.kind};let{attempt:r,operation:i}=n;return r.allocationRef===null?{kind:`not-allocated`}:(_.set(i.executionAttemptId,{...i,obligation:`terminal-convergence`,lastFailure:t}),{kind:`recorded`})},async recordInfrastructureFailure(e){let t=b(e.claim);if(t.kind!==`authorized`)return{kind:t.kind};let{attempt:n,operation:r}=t;return n.executionId===e.executionId?n.allocationRef===null?{kind:`not-allocated`}:r.obligation===`terminal-convergence`?(g.set(n.executionAttemptId,{...n,status:`settled`,settlementKind:`infrastructure-failure`,claimable:!1}),x(r,r.lastFailure),{kind:`recorded`}):{kind:`not-terminated`}:{kind:`not-found`}},async getActiveAttempt(e,t){return y.get(e)===t?g.get(t)??null:null},canonicalizeOutcome(e){return n(m,e)},decodeOutcome(e){return t(m,e)},async commitOutcome(e){let n=e.result;if(y.get(e.executionId)!==e.executionAttemptId)return{kind:`fenced`};let r=g.get(e.executionAttemptId);if(r===void 0)return{kind:`fenced`};let a=v.get(e.executionAttemptId);if(a!==void 0){let e=t(m,a);return i(a,n.text)?{kind:`duplicate`,outcome:e,text:a}:{kind:`conflict`}}if(r.settlementKind!=null)return{kind:`conflict`};v.set(e.executionAttemptId,n.text),g.set(e.executionAttemptId,{...r,status:`settled`,settlementKind:`outcome`,claimable:!1});let o=_.get(e.executionAttemptId);return o&&x(o,o.lastFailure),{kind:`accepted`,outcome:t(m,n.text),text:n.text}},async abandonPendingAttempt(e,t){if(y.get(t)!==e)return{kind:`fenced`};let n=g.get(e);return n?n.status===`allocated`?{kind:`allocated`}:n.status===`provisioning`?{kind:`provisioning`}:n.status===`settled`?{kind:n.settlementKind===`abandoned`?`already-abandoned`:`already-settled`}:(g.set(e,{...n,status:`settled`,settlementKind:`abandoned`,claimable:!1}),{kind:`abandoned`}):{kind:`fenced`}},recovery:{async getAttemptWithAllocation(e){return g.get(e)??null},async recordDiscoveredAllocation(e){return S(e,!1)},async evolveAllocationRef(e){let{currentRef:t,nextRef:n}=l(e),i=b(e.claim);if(i.kind===`stale`)return{kind:`stale`,storedRef:i.attempt.allocationRef};if(i.kind!==`authorized`)return{kind:i.kind};let{attempt:a}=i;return a.executionId===e.executionId?a.allocationRef===null?{kind:`not-allocated`}:r(a.allocationRef,t)?(g.set(a.executionAttemptId,{...a,allocationRef:n}),{kind:`evolved`}):{kind:`stale`,storedRef:a.allocationRef}:{kind:`not-found`}},async getRecoverableAttempts(e){let t=c(new Date().toISOString()),n=[];for(let r of g.values())r.executionId===e&&r.status===`allocated`&&r.allocationRef!==null&&r.claimable===!0&&r.settlementKind==null&&(r.claimExpiresAt!=null&&c(r.claimExpiresAt)<t||n.push(o(r)));return n.sort(f)}},attempts:g,operations:_,committedOutcomes:v,activeAttempts:y}}const _=`controller-incarnation-1`,v=`provisioner-incarnation-1`,y=`test-provider`;function b(e){return new Date(Date.now()+e).toISOString()}function x(e,t,n={}){return{executionAttemptId:e,executionId:t,providerId:y,allocationLifetime:`provider-managed`,provisionerIncarnationId:v,ownerId:_,leaseExpiresAt:b(6e4),...n}}async function S(e,t,n,r={}){let i=await e.beginProvisioning(x(t,n,r));if(i.kind!==`started`)throw Error(`Expected provisioning to start, got '${i.kind}'`);return i.claim}function C(e={}){return{source:y,summary:`provider rejected the request before creating anything`,observedAt:new Date().toISOString(),...e}}function w(e=v,t=C({summary:`supervisor observed the provisioner process exit`})){return{kind:`provisioner-incarnation-lost`,provisionerIncarnationId:e,evidence:t}}function T(e=y,t={runId:1}){return{version:m,providerId:e,providerData:t}}const E={parse:e=>h.parse(e),serialize:e=>JSON.stringify(e)};function D(e,t=`completed`){let n={executionId:e,workflowId:`contract-workflow`};return t===`completed`?{...n,status:`completed`}:{...n,status:`failed`,error:`contract failure`}}export{_ as TEST_OWNER_ID,y as TEST_PROVIDER_ID,v as TEST_PROVISIONER_INCARNATION_ID,S as beginTestProvisioning,g as createInMemoryAttemptRepository,b as leaseAt,x as makeBeginProvisioningInput,C as makeEvidence,w as makeProcessLossProof,T as makeTestAllocationRef,D as makeTestWorkflowResult,E as workflowRunResultOutcomeCodec};