@qlever-llc/trellis 0.8.3 → 0.9.0-rc.2

package/esm/npm/src/server.js

@@ -9,14 +9,27 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _TrellisServiceRuntime_instances, _TrellisServiceRuntime_version, _TrellisServiceRuntime_log, _TrellisServiceRuntime_operations, _TrellisServiceRuntime_mountedOperationControls, _TrellisServiceRuntime_stopPromise, _TrellisServiceRuntime_transferSupport, _TrellisServiceRuntime_resolveOperation, _TrellisServiceRuntime_applyOperationUpdate, _TrellisServiceRuntime_makeAcceptedOperation, _TrellisServiceRuntime_acceptOperation, _TrellisServiceRuntime_authenticateOperationMessage, _TrellisServiceRuntime_ensureOperationControlLoop;
+var _TrellisServiceRuntime_instances, _TrellisServiceRuntime_version, _TrellisServiceRuntime_log, _TrellisServiceRuntime_operations, _TrellisServiceRuntime_mountedOperationControls, _TrellisServiceRuntime_stopPromise, _TrellisServiceRuntime_transferSupport, _TrellisServiceRuntime_signals, _TrellisServiceRuntime_nextSignal, _TrellisServiceRuntime_nextSignalAfter, _TrellisServiceRuntime_resolveOperation, _TrellisServiceRuntime_applyOperationUpdate, _TrellisServiceRuntime_validateOperationValue, _TrellisServiceRuntime_applyControlledOperationUpdate, _TrellisServiceRuntime_controlOperation, _TrellisServiceRuntime_makeControlledOperation, _TrellisServiceRuntime_makeAcceptedOperation, _TrellisServiceRuntime_controlAuthContext, _TrellisServiceRuntime_terminalSignalError, _TrellisServiceRuntime_unsupportedCancelError, _TrellisServiceRuntime_rejectSignalWaiters, _TrellisServiceRuntime_acceptSignal, _TrellisServiceRuntime_acceptOperation, _TrellisServiceRuntime_authenticateOperationMessage, _TrellisServiceRuntime_ensureOperationControlLoop;
 import { Pointer } from "typebox/value";
 import { AsyncResult, err, isErr, ok, } from "@qlever-llc/result";
 import { ulid } from "ulid";
 import { parseSchema } from "./codec.js";
-import { AuthError, TransferError, UnexpectedError, } from "./errors/index.js";
+import { AuthError, TransferError, UnexpectedError, ValidationError, } from "./errors/index.js";
 import { serverLogger } from "./server_logger.js";
 import { base64urlDecode, base64urlEncode, buildProofInput, buildRuntimeOperationSnapshot, isOperationDeferred, isResultLike, isTerminalRuntimeOperationSnapshot, safeJson, sha256, toArrayBuffer, Trellis, } from "./trellis.js";
+function isJsonValue(value) {
+    if (value === null || typeof value === "string" || typeof value === "number" ||
+        typeof value === "boolean") {
+        return true;
+    }
+    if (Array.isArray(value))
+        return value.every(isJsonValue);
+    if (typeof value !== "object")
+        return false;
+    if (Object.getPrototypeOf(value) !== Object.prototype)
+        return false;
+    return Object.values(value).every(isJsonValue);
+}
 function asStringPointerValue(operation, input, pointer, field) {
     const value = Pointer.Get(input, pointer);
     if (typeof value !== "string" || value.length === 0) {
@@ -113,6 +126,8 @@ export class TrellisServiceRuntime extends Trellis {
             cancel: (operationId) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyOperationUpdate).call(this, operationId, "cancelled", {
                 event: { type: "cancelled" },
             }),
+            signals: (operationId) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_signals).call(this, operationId),
+            nextSignal: (operationId, name) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignal).call(this, operationId, name),
         };
     }
     mountRuntime(method, fn) {
@@ -128,6 +143,10 @@ export class TrellisServiceRuntime extends Trellis {
             throw new Error(`Unknown operation '${operation.toString()}'. Did you forget to include its API module?`);
         }
         return {
+            control: (operationId) => {
+                __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_ensureOperationControlLoop).call(this, String(operation), ctx);
+                return __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_controlOperation).call(this, String(operation), ctx, operationId);
+            },
             accept: ({ sessionKey }) => {
                 __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_ensureOperationControlLoop).call(this, String(operation), ctx);
                 if (ctx.transfer) {
@@ -135,7 +154,7 @@ export class TrellisServiceRuntime extends Trellis {
                         cause: new Error(`Operation '${String(operation)}' uses transfer-capable start semantics and cannot be accepted manually`),
                     }));
                 }
-                return AsyncResult.from(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_acceptOperation).call(this, String(operation), sessionKey));
+                return AsyncResult.from(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_acceptOperation).call(this, String(operation), ctx, sessionKey));
             },
             handle: async (handler) => {
                 const startSubject = ctx.subject;
@@ -219,6 +238,7 @@ export class TrellisServiceRuntime extends Trellis {
                                 snapshot,
                             });
                             await flushWaiters(runtime);
+                            __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_rejectSignalWaiters).call(this, runtime);
                             return ok(snapshot);
                         })()),
                         fail: (error) => AsyncResult.from((async () => {
@@ -238,6 +258,7 @@ export class TrellisServiceRuntime extends Trellis {
                                 snapshot,
                             });
                             await flushWaiters(runtime);
+                            __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_rejectSignalWaiters).call(this, runtime);
                             return ok(snapshot);
                         })()),
                         cancel: () => AsyncResult.from((async () => {
@@ -256,6 +277,7 @@ export class TrellisServiceRuntime extends Trellis {
                                 snapshot,
                             });
                             await flushWaiters(runtime);
+                            __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_rejectSignalWaiters).call(this, runtime);
                             return ok(snapshot);
                         })()),
                         attach: (job) => AsyncResult.from((async () => {
@@ -272,6 +294,8 @@ export class TrellisServiceRuntime extends Trellis {
                             }
                             return ok(finalRuntime.snapshot);
                         })()),
+                        signals: () => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_signals).call(this, runtime.id),
+                        nextSignal: (name) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignal).call(this, runtime.id, name),
                         defer: () => ({ kind: "deferred" }),
                     };
                 };
@@ -292,14 +316,20 @@ export class TrellisServiceRuntime extends Trellis {
                     }
                     const sessionKey = msg.headers?.get("session-key");
                     const proof = msg.headers?.get("proof");
+                    const iatHeader = msg.headers?.get("iat");
+                    const requestId = msg.headers?.get("request-id");
                     if (!sessionKey) {
                         return err(new AuthError({ reason: "missing_session_key" }));
                     }
                     if (!proof)
                         return err(new AuthError({ reason: "missing_proof" }));
+                    const iat = Number(iatHeader);
+                    if (!Number.isSafeInteger(iat) || !requestId) {
+                        return err(new AuthError({ reason: "invalid_signature" }));
+                    }
                     const payloadBytes = msg.data ?? new Uint8Array();
                     const payloadHash = await sha256(payloadBytes);
-                    const proofInput = buildProofInput(sessionKey, msg.subject, payloadHash);
+                    const proofInput = buildProofInput(sessionKey, msg.subject, payloadHash, iat, requestId);
                     const digest = await sha256(proofInput);
                     const verifyResult = await AsyncResult.try(async () => {
                         const publicKeyRaw = base64urlDecode(sessionKey);
@@ -319,6 +349,8 @@ export class TrellisServiceRuntime extends Trellis {
                         proof,
                         subject: msg.subject,
                         payloadHash: base64urlEncode(payloadHash),
+                        iat,
+                        requestId,
                         capabilities: ctx.callerCapabilities
                             ? [...ctx.callerCapabilities]
                             : undefined,
@@ -420,9 +452,12 @@ export class TrellisServiceRuntime extends Trellis {
                                 updatedAt: createdAt,
                             },
                             sequence: 0,
+                            signalSequence: 0,
+                            signals: [],
                             terminal: false,
                             watchers: new Set(),
                             waiters: new Set(),
+                            signalWaiters: new Set(),
                         };
                         __classPrivateFieldGet(this, _TrellisServiceRuntime_operations, "f").set(operationId, runtime);
                         await this.saveOperationRecord(runtime);
@@ -516,7 +551,57 @@ export class TrellisServiceRuntime extends Trellis {
         await __classPrivateFieldGet(this, _TrellisServiceRuntime_stopPromise, "f");
     }
 }
-_TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new WeakMap(), _TrellisServiceRuntime_operations = new WeakMap(), _TrellisServiceRuntime_mountedOperationControls = new WeakMap(), _TrellisServiceRuntime_stopPromise = new WeakMap(), _TrellisServiceRuntime_transferSupport = new WeakMap(), _TrellisServiceRuntime_instances = new WeakSet(), _TrellisServiceRuntime_resolveOperation = async function _TrellisServiceRuntime_resolveOperation(operationId) {
+_TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new WeakMap(), _TrellisServiceRuntime_operations = new WeakMap(), _TrellisServiceRuntime_mountedOperationControls = new WeakMap(), _TrellisServiceRuntime_stopPromise = new WeakMap(), _TrellisServiceRuntime_transferSupport = new WeakMap(), _TrellisServiceRuntime_instances = new WeakSet(), _TrellisServiceRuntime_signals = async function* _TrellisServiceRuntime_signals(operationId) {
+    let cursor = 0;
+    while (true) {
+        const next = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignalAfter).call(this, operationId, cursor).take();
+        if (isErr(next)) {
+            throw next.error;
+        }
+        cursor = next.sequence;
+        yield next;
+    }
+}, _TrellisServiceRuntime_nextSignal = function _TrellisServiceRuntime_nextSignal(operationId, name) {
+    return AsyncResult.from((async () => {
+        let cursor = 0;
+        while (true) {
+            const next = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignalAfter).call(this, operationId, cursor).take();
+            if (isErr(next))
+                return next;
+            cursor = next.sequence;
+            if (!name || next.signal === name)
+                return ok(next);
+        }
+    })());
+}, _TrellisServiceRuntime_nextSignalAfter = function _TrellisServiceRuntime_nextSignalAfter(operationId, afterSequence) {
+    return AsyncResult.from((async () => {
+        const runtime = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_resolveOperation).call(this, operationId);
+        if (!runtime) {
+            return err(new UnexpectedError({
+                cause: new Error(`Unknown operation '${operationId}'`),
+            }));
+        }
+        const queued = runtime.signals.find((signal) => signal.sequence > afterSequence);
+        if (queued)
+            return ok(queued);
+        if (runtime.terminal) {
+            return err(new UnexpectedError({
+                cause: new Error("operation already terminal"),
+            }));
+        }
+        return await new Promise((resolve) => {
+            const waiter = (result) => {
+                const value = result.take();
+                if (!isErr(value) && value.sequence <= afterSequence) {
+                    return;
+                }
+                runtime.signalWaiters.delete(waiter);
+                resolve(result);
+            };
+            runtime.signalWaiters.add(waiter);
+        });
+    })());
+}, _TrellisServiceRuntime_resolveOperation = async function _TrellisServiceRuntime_resolveOperation(operationId) {
     const existing = __classPrivateFieldGet(this, _TrellisServiceRuntime_operations, "f").get(operationId);
     if (existing)
         return existing;
@@ -533,8 +618,11 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
         terminal: durable.snapshot.state === "completed" ||
             durable.snapshot.state === "failed" ||
             durable.snapshot.state === "cancelled",
+        signalSequence: durable.signalSequence ?? 0,
+        signals: durable.signals ?? [],
         watchers: new Set(),
         waiters: new Set(),
+        signalWaiters: new Set(),
     };
     __classPrivateFieldGet(this, _TrellisServiceRuntime_operations, "f").set(operationId, runtime);
     return runtime;
@@ -546,7 +634,7 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                 cause: new Error(`Unknown operation '${operationId}'`),
             }));
         }
-        if (runtime.terminal && state !== "cancelled") {
+        if (runtime.terminal) {
             return err(new UnexpectedError({
                 cause: new Error("operation already terminal"),
             }));
@@ -573,10 +661,110 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                 await this.nats.publish(reply, JSON.stringify(terminalFrame));
             }
             runtime.waiters.clear();
+            __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_rejectSignalWaiters).call(this, runtime);
         }
         return ok(runtime.snapshot);
     })());
-}, _TrellisServiceRuntime_makeAcceptedOperation = function _TrellisServiceRuntime_makeAcceptedOperation(runtime) {
+}, _TrellisServiceRuntime_validateOperationValue = function _TrellisServiceRuntime_validateOperationValue(ctx, kind, value) {
+    const schema = kind === "progress" ? ctx.progress : ctx.output;
+    if (schema === undefined)
+        return ok(value);
+    if (!isJsonValue(value)) {
+        return err(new ValidationError({
+            errors: [{
+                    path: "/",
+                    message: `Operation ${kind} must be JSON-serializable`,
+                }],
+            context: { kind },
+        }));
+    }
+    const parsed = parseSchema(schema, value).take();
+    if (isErr(parsed))
+        return err(parsed.error);
+    return ok(parsed);
+}, _TrellisServiceRuntime_applyControlledOperationUpdate = function _TrellisServiceRuntime_applyControlledOperationUpdate(runtime, ctx, state, opts) {
+    return AsyncResult.from((async () => {
+        if (opts.patch?.progress !== undefined) {
+            const parsed = __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_validateOperationValue).call(this, ctx, "progress", opts.patch.progress).take();
+            if (isErr(parsed))
+                return parsed;
+            opts.patch.progress = parsed;
+            if ("progress" in opts.event)
+                opts.event.progress = parsed;
+        }
+        if (opts.patch?.output !== undefined) {
+            const parsed = __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_validateOperationValue).call(this, ctx, "output", opts.patch.output).take();
+            if (isErr(parsed))
+                return parsed;
+            opts.patch.output = parsed;
+        }
+        return await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyOperationUpdate).call(this, runtime.id, state, opts);
+    })());
+}, _TrellisServiceRuntime_controlOperation = function _TrellisServiceRuntime_controlOperation(operation, ctx, operationId) {
+    return AsyncResult.from((async () => {
+        const runtime = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_resolveOperation).call(this, operationId);
+        if (!runtime) {
+            return err(new UnexpectedError({
+                cause: new Error(`Unknown operation '${operationId}'`),
+            }));
+        }
+        if (runtime.service !== this.name) {
+            return err(new UnexpectedError({
+                cause: new Error(`Operation '${operationId}' belongs to service '${runtime.service}', not '${this.name}'`),
+            }));
+        }
+        if (runtime.operation !== operation) {
+            return err(new UnexpectedError({
+                cause: new Error(`Operation '${operationId}' is '${runtime.operation}', not '${operation}'`),
+            }));
+        }
+        return ok(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_makeControlledOperation).call(this, runtime, ctx));
+    })());
+}, _TrellisServiceRuntime_makeControlledOperation = function _TrellisServiceRuntime_makeControlledOperation(runtime, ctx) {
+    return {
+        id: runtime.id,
+        started: () => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyControlledOperationUpdate).call(this, runtime, ctx, "running", {
+            event: { type: "started" },
+        }),
+        progress: (value) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyControlledOperationUpdate).call(this, runtime, ctx, "running", {
+            patch: { progress: value },
+            event: { type: "progress", progress: value },
+        }),
+        complete: (value) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyControlledOperationUpdate).call(this, runtime, ctx, "completed", {
+            patch: { output: value },
+            event: { type: "completed" },
+        }),
+        fail: (error) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyControlledOperationUpdate).call(this, runtime, ctx, "failed", {
+            patch: { error: { type: error.name, message: error.message } },
+            event: { type: "failed" },
+        }),
+        cancel: () => {
+            if (ctx.cancel !== true) {
+                return AsyncResult.err(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_unsupportedCancelError).call(this, runtime.operation));
+            }
+            return __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_applyControlledOperationUpdate).call(this, runtime, ctx, "cancelled", {
+                event: { type: "cancelled" },
+            });
+        },
+        attach: (job) => AsyncResult.from((async () => {
+            const waited = await job.wait();
+            const waitedValue = waited.take();
+            if (isErr(waitedValue)) {
+                return err(new UnexpectedError({ cause: waitedValue.error }));
+            }
+            const finalRuntime = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_resolveOperation).call(this, runtime.id);
+            if (!finalRuntime || !finalRuntime.terminal) {
+                return err(new UnexpectedError({
+                    cause: new Error("attached job completed without terminal operation state"),
+                }));
+            }
+            return ok(finalRuntime.snapshot);
+        })()),
+        signals: () => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_signals).call(this, runtime.id),
+        nextSignal: (name) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignal).call(this, runtime.id, name),
+        defer: () => ({ kind: "deferred" }),
+    };
+}, _TrellisServiceRuntime_makeAcceptedOperation = function _TrellisServiceRuntime_makeAcceptedOperation(runtime, ctx) {
     return {
         id: runtime.id,
         ref: {
@@ -589,7 +777,12 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
         progress: (value) => this.operations.progress(runtime.id, value),
         complete: (value) => this.operations.complete(runtime.id, value),
         fail: (error) => this.operations.fail(runtime.id, error),
-        cancel: () => this.operations.cancel(runtime.id),
+        cancel: () => {
+            if (ctx.cancel !== true) {
+                return AsyncResult.err(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_unsupportedCancelError).call(this, runtime.operation));
+            }
+            return this.operations.cancel(runtime.id);
+        },
         attach: (job) => AsyncResult.from((async () => {
             const waited = await job.wait();
             const waitedValue = waited.take();
@@ -604,9 +797,79 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
             }
             return ok(finalRuntime.snapshot);
         })()),
+        signals: () => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_signals).call(this, runtime.id),
+        nextSignal: (name) => __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_nextSignal).call(this, runtime.id, name),
         defer: () => ({ kind: "deferred" }),
     };
-}, _TrellisServiceRuntime_acceptOperation = async function _TrellisServiceRuntime_acceptOperation(operation, sessionKey) {
+}, _TrellisServiceRuntime_controlAuthContext = function _TrellisServiceRuntime_controlAuthContext(ctx, action) {
+    if (action === "signal" && ctx.controlCapabilities !== undefined) {
+        return { ...ctx, callerCapabilities: ctx.controlCapabilities };
+    }
+    if (action === "cancel" && ctx.cancelCapabilities !== undefined) {
+        return { ...ctx, callerCapabilities: ctx.cancelCapabilities };
+    }
+    return ctx;
+}, _TrellisServiceRuntime_terminalSignalError = function _TrellisServiceRuntime_terminalSignalError() {
+    return new UnexpectedError({
+        cause: new Error("operation already terminal"),
+    });
+}, _TrellisServiceRuntime_unsupportedCancelError = function _TrellisServiceRuntime_unsupportedCancelError(operation) {
+    return new ValidationError({
+        errors: [{
+                path: "/action",
+                message: `Operation '${operation}' does not support cancel`,
+            }],
+        context: { operation, action: "cancel" },
+    });
+}, _TrellisServiceRuntime_rejectSignalWaiters = function _TrellisServiceRuntime_rejectSignalWaiters(runtime) {
+    const result = err(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_terminalSignalError).call(this));
+    for (const waiter of runtime.signalWaiters) {
+        waiter(result);
+    }
+    runtime.signalWaiters.clear();
+}, _TrellisServiceRuntime_acceptSignal = async function _TrellisServiceRuntime_acceptSignal(runtime, ctx, control) {
+    if (runtime.terminal) {
+        return err(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_terminalSignalError).call(this));
+    }
+    const descriptor = ctx.signals?.[control.signal];
+    if (!descriptor) {
+        return err(new ValidationError({
+            errors: [{
+                    path: "/signal",
+                    message: `Unknown operation signal '${control.signal}'`,
+                }],
+            context: { operation: runtime.operation, signal: control.signal },
+        }));
+    }
+    const input = control.input;
+    const parsed = parseSchema(descriptor.input, input).take();
+    if (isErr(parsed)) {
+        return err(parsed.error);
+    }
+    runtime.signalSequence += 1;
+    const acceptedAt = new Date().toISOString();
+    const signal = {
+        operationId: runtime.id,
+        sequence: runtime.signalSequence,
+        signal: control.signal,
+        ...(control.input !== undefined ? { input: control.input } : {}),
+        acceptedAt,
+    };
+    runtime.signals.push(signal);
+    await this.saveOperationRecord(runtime);
+    const result = ok(signal);
+    for (const waiter of runtime.signalWaiters) {
+        waiter(result);
+    }
+    return ok({
+        kind: "signal-accepted",
+        operationId: runtime.id,
+        signal: signal.signal,
+        signalSequence: signal.sequence,
+        acceptedAt,
+        snapshot: runtime.snapshot,
+    });
+}, _TrellisServiceRuntime_acceptOperation = async function _TrellisServiceRuntime_acceptOperation(operation, ctx, sessionKey) {
     const createdAt = new Date().toISOString();
     const operationId = ulid();
     const runtime = {
@@ -624,13 +887,16 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
             updatedAt: createdAt,
         },
         sequence: 0,
+        signalSequence: 0,
+        signals: [],
         terminal: false,
         watchers: new Set(),
         waiters: new Set(),
+        signalWaiters: new Set(),
     };
     __classPrivateFieldGet(this, _TrellisServiceRuntime_operations, "f").set(operationId, runtime);
     await this.saveOperationRecord(runtime);
-    return ok(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_makeAcceptedOperation).call(this, runtime));
+    return ok(__classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_makeAcceptedOperation).call(this, runtime, ctx));
 }, _TrellisServiceRuntime_authenticateOperationMessage = async function _TrellisServiceRuntime_authenticateOperationMessage(msg, ctx, parseInput) {
     const jsonData = safeJson(msg).take();
     if (isErr(jsonData))
@@ -648,14 +914,20 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
     }
     const sessionKey = msg.headers?.get("session-key");
     const proof = msg.headers?.get("proof");
+    const iatHeader = msg.headers?.get("iat");
+    const requestId = msg.headers?.get("request-id");
     if (!sessionKey) {
         return err(new AuthError({ reason: "missing_session_key" }));
     }
     if (!proof)
         return err(new AuthError({ reason: "missing_proof" }));
+    const iat = Number(iatHeader);
+    if (!Number.isSafeInteger(iat) || !requestId) {
+        return err(new AuthError({ reason: "invalid_signature" }));
+    }
     const payloadBytes = msg.data ?? new Uint8Array();
     const payloadHash = await sha256(payloadBytes);
-    const proofInput = buildProofInput(sessionKey, msg.subject, payloadHash);
+    const proofInput = buildProofInput(sessionKey, msg.subject, payloadHash, iat, requestId);
     const digest = await sha256(proofInput);
     const verifyResult = await AsyncResult.try(async () => {
         const publicKeyRaw = base64urlDecode(sessionKey);
@@ -675,6 +947,8 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
         proof,
         subject: msg.subject,
         payloadHash: base64urlEncode(payloadHash),
+        iat,
+        requestId,
         capabilities: ctx.callerCapabilities
             ? [...ctx.callerCapabilities]
             : undefined,
@@ -716,18 +990,18 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
     const publishSnapshot = async (reply, snapshot) => {
         await publishFrame(reply, { kind: "snapshot", snapshot });
     };
+    const respondControlError = (msg, error) => {
+        msg.respond(JSON.stringify({
+            kind: "error",
+            error: { type: error.name, message: error.message },
+        }));
+    };
     const controlSub = this.nats.subscribe(controlSubject);
     void (async () => {
         for await (const msg of controlSub) {
-            const validated = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_authenticateOperationMessage).call(this, msg, ctx, false);
-            const value = validated.take();
-            if (isErr(value)) {
-                this.respondWithError(msg, value.error);
-                continue;
-            }
             const request = safeJson(msg).take();
             if (isErr(request)) {
-                this.respondWithError(msg, request.error);
+                respondControlError(msg, request.error);
                 continue;
             }
             if (!request ||
@@ -736,27 +1010,35 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                     "string" ||
                 typeof request.operationId !==
                     "string") {
-                this.respondWithError(msg, new UnexpectedError({
+                respondControlError(msg, new UnexpectedError({
                     cause: new Error("Invalid operation control request"),
                 }));
                 continue;
             }
             const control = request;
-            const runtime = __classPrivateFieldGet(this, _TrellisServiceRuntime_operations, "f").get(control.operationId);
-            const durableRecord = runtime
-                ? null
-                : await this.loadOperationRecord(control.operationId);
-            if (!runtime && !durableRecord) {
-                this.respondWithError(msg, new UnexpectedError({
+            const validated = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_authenticateOperationMessage).call(this, msg, __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_controlAuthContext).call(this, ctx, control.action), false);
+            const value = validated.take();
+            if (isErr(value)) {
+                respondControlError(msg, value.error);
+                continue;
+            }
+            const runtime = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_resolveOperation).call(this, control.operationId);
+            if (!runtime) {
+                respondControlError(msg, new UnexpectedError({
                     cause: new Error(`Unknown operation '${control.operationId}'`),
                 }));
                 continue;
             }
-            const snapshot = runtime?.snapshot ?? durableRecord.snapshot;
-            const ownerSessionKey = runtime?.ownerSessionKey ??
-                durableRecord.ownerSessionKey;
+            if (runtime.service !== this.name || runtime.operation !== operation) {
+                respondControlError(msg, new UnexpectedError({
+                    cause: new Error(`Operation '${control.operationId}' belongs to service '${runtime.service}' operation '${runtime.operation}', not service '${this.name}' operation '${operation}'`),
+                }));
+                continue;
+            }
+            const snapshot = runtime.snapshot;
+            const ownerSessionKey = runtime.ownerSessionKey;
             if (ownerSessionKey !== value.sessionKey) {
-                this.respondWithError(msg, new AuthError({
+                respondControlError(msg, new AuthError({
                     reason: "forbidden",
                     context: { ownerSessionKey },
                 }));
@@ -780,12 +1062,12 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                     runtime.waiters.add(msg.reply);
                 }
                 else if (msg.reply) {
-                    this.respondWithError(msg, new UnexpectedError({
+                    respondControlError(msg, new UnexpectedError({
                         cause: new Error("operation is not running in this process"),
                     }));
                 }
                 else {
-                    this.respondWithError(msg, new UnexpectedError({
+                    respondControlError(msg, new UnexpectedError({
                         cause: new Error("missing reply subject for wait request"),
                     }));
                 }
@@ -796,8 +1078,12 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                 continue;
             }
             if (control.action === "cancel") {
-                if (!runtime) {
-                    msg.respond(JSON.stringify({ kind: "snapshot", snapshot }));
+                if (ctx.cancel !== true) {
+                    respondControlError(msg, __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_unsupportedCancelError).call(this, operation));
+                    continue;
+                }
+                if (runtime.terminal) {
+                    respondControlError(msg, __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_terminalSignalError).call(this));
                     continue;
                 }
                 runtime.snapshot = {
@@ -825,10 +1111,27 @@ _TrellisServiceRuntime_version = new WeakMap(), _TrellisServiceRuntime_log = new
                     await this.nats.publish(reply, JSON.stringify({ kind: "snapshot", snapshot: runtime.snapshot }));
                 }
                 runtime.waiters.clear();
+                __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_rejectSignalWaiters).call(this, runtime);
                 msg.respond(JSON.stringify({ kind: "snapshot", snapshot: runtime.snapshot }));
                 continue;
             }
-            this.respondWithError(msg, new UnexpectedError({
+            if (control.action === "signal") {
+                if (!runtime) {
+                    respondControlError(msg, new UnexpectedError({
+                        cause: new Error("operation is not running in this process"),
+                    }));
+                    continue;
+                }
+                const accepted = await __classPrivateFieldGet(this, _TrellisServiceRuntime_instances, "m", _TrellisServiceRuntime_acceptSignal).call(this, runtime, ctx, control);
+                const acceptedValue = accepted.take();
+                if (isErr(acceptedValue)) {
+                    respondControlError(msg, acceptedValue.error);
+                    continue;
+                }
+                msg.respond(JSON.stringify(acceptedValue));
+                continue;
+            }
+            respondControlError(msg, new UnexpectedError({
                 cause: new Error(`Unknown operation control action '${control.action}' for '${operation}'`),
             }));
         }

package/esm/npm/src/store.d.ts

@@ -2,6 +2,7 @@ import { type ObjectStore } from "@nats-io/obj";
 import type { NatsConnection } from "@nats-io/nats-core/internal";
 import { AsyncResult } from "@qlever-llc/result";
 import { StoreError } from "./errors/index.js";
+import type { PageResponse } from "./models/trellis/Page.js";
 export type StoreBody = Uint8Array | ReadableStream<Uint8Array> | AsyncIterable<Uint8Array>;
 export type StoreWaitOptions = {
     timeoutMs?: number;
@@ -18,6 +19,12 @@ export type StorePutOptions = {
     contentType?: string;
     metadata?: Record<string, string>;
 };
+/** Explicit bounded query for listing object metadata in a typed store. */
+export type StoreListOptions = {
+    prefix?: string;
+    offset?: number;
+    limit: number;
+};
 export type StoreInfo = {
     key: string;
     size: number;
@@ -45,7 +52,7 @@ export declare class TypedStore {
      */
     waitFor(key: string, options?: StoreWaitOptions): AsyncResult<TypedStoreEntry, StoreError>;
     delete(key: string): AsyncResult<void, StoreError>;
-    list(prefix?: string): AsyncResult<AsyncIterable<StoreInfo>, StoreError>;
+    list(opts: StoreListOptions): AsyncResult<PageResponse<StoreInfo>, StoreError>;
     status(): AsyncResult<StoreStatus, StoreError>;
 }
 export declare class TypedStoreEntry {

package/esm/npm/src/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAGjB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,WAAW,EAGZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK/C,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAsMF,qBAAa,UAAU;;IAMrB,OAAO;IAcP,MAAM,CAAC,IAAI,CACT,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,gBAAqB,GAC7B,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC;IAuBtC,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,eAAe,GACxB,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAgBhC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,eAAe,GACxB,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAIhC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;IAS1D;;OAEG;IACH,OAAO,CACL,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,gBAAqB,GAC7B,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;IA6C3C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAalD,IAAI,CAAC,MAAM,SAAK,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAuBpE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC;CA4D/C;AAqBD,qBAAa,eAAe;;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;gBAGb,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS;IAM/C,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IA0B7D,KAAK,IAAI,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC;CAwB7C;AA4BD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,OAAO,CAAC,UAAU,CAAC,CAErB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAGjB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,WAAW,EAGZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAM7D,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AA2OF,qBAAa,UAAU;;IAMrB,OAAO;IAcP,MAAM,CAAC,IAAI,CACT,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,gBAAqB,GAC7B,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC;IAuBtC,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,eAAe,GACxB,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAgBhC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,eAAe,GACxB,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAIhC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;IAS1D;;OAEG;IACH,OAAO,CACL,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,gBAAqB,GAC7B,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;IA6C3C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC;IAalD,IAAI,CACF,IAAI,EAAE,gBAAgB,GACrB,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAiCnD,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC;CA4D/C;AAqBD,qBAAa,eAAe;;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;gBAGb,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS;IAM/C,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IA0B7D,KAAK,IAAI,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC;CAwB7C;AA4BD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,OAAO,CAAC,UAAU,CAAC,CAErB"}