@shware/workflow 2.0.1 → 3.1.0

package/README.md

@@ -169,15 +169,18 @@ export default defineConfig({
 // src/index.ts
 import { type JourneyEnv, journeyWorker } from '@shware/workflow/cloudflare';
 import { postgresJsStore } from '@shware/workflow/postgres-js';
+import { cloudflareEmailTransport } from '@shware/workflow/transports/cloudflare-email';
 import config from '../workflow.config';
 
 interface Env extends JourneyEnv {
   HYPERDRIVE: { connectionString: string };
+  EMAIL: NonNullable<JourneyEnv['EMAIL']>;
 }
 
 const journeys = journeyWorker<Env>({
   config,
   store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database),
+  email: (env) => cloudflareEmailTransport({ binding: env.EMAIL }),
 });
 
 /** The wrangler `workflows` binding's class_name. */
@@ -464,7 +467,7 @@ the compile fails.
 `emailTemplate({ id, from, replyTo?, unsubscribeUrl?, title, description?, props, subject, preview, component })`
 declares one. The Worker renders it with `@shware/workflow/react-email` (React's
 streaming renderer, which waits for react-email's `<Tailwind>`) and sends it
-through the `EMAIL` send_email binding, from the template's own `from`:
+through the host's email transport, from the template's own `from`:
 
 ```ts
 // src/email/welcome.tsx
@@ -503,6 +506,23 @@ email: {
 },
 ```
 
+The transport is the host's `email` option, chosen independently of where the
+workflow runs. Rendering, tracking and the tracked-link commit happen before it,
+the same for every provider (`EmailSender`):
+
+| Transport                                                                  | Import                                         |
+| -------------------------------------------------------------------------- | ---------------------------------------------- |
+| `cloudflareEmailTransport({ binding })` — a Worker's `send_email`          | `@shware/workflow/transports/cloudflare-email` |
+| `cloudflareEmailTransport({ accountId, apiToken })` — REST, anywhere       | `@shware/workflow/transports/cloudflare-email` |
+| `sesEmailTransport({ region, credentials? })` — SES v2, SigV4 over `fetch` | `@shware/workflow/transports/ses`              |
+
+`sesEmailTransport` runs in a Worker and in Node alike. Without `credentials` it
+reads `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN` at send
+time (a Lambda's execution role); a Worker passes them, or a provider, from its
+env. Delivery is at least once: SES has no de-duplication key, so an email the
+provider accepted just before the step's checkpoint failed can go out twice.
+Without an `email` option the email channel fails its sends, saying so.
+
 An email step refuses to send when the profile has no `email`.
 `GET /preview/<id>?props=<JSON>` renders a template, with the subject in the
 `x-subject` header.
@@ -705,7 +725,7 @@ The default store needs three bindings, named as in `JourneyEnv`:
 | `JOURNEY`     | Workflow     | The `JourneyRunner` entrypoint            |
 
 A Worker on Postgres needs only `JOURNEY`. Add the `EMAIL` send_email binding
-when the config registers email templates, and a `triggers.crons` entry with `scheduled`
+when it sends through Cloudflare Email (`cloudflareEmailTransport({ binding: env.EMAIL })`), and a `triggers.crons` entry with `scheduled`
 exported to run the segment sweep.
 
 Set `API_TOKEN` in production. Without it every mutating endpoint is open, and
@@ -726,6 +746,90 @@ There are no migrations, and re-applying the file is not one: every statement is
 the first insert needing a new column fails. Recreate it instead. The demo has
 `pnpm db:reset`.
 
+## AWS Lambda
+
+The same config runs as one Lambda durable function behind a Function URL, on
+Postgres. `@aws/durable-execution-sdk-js` and `@aws-sdk/client-lambda` are optional
+peer dependencies, needed only by `@shware/workflow/aws`. The durable SDK's own type
+declarations reference `aws-lambda`, so a TypeScript project that type-checks
+dependencies (no `skipLibCheck`) also needs `@types/aws-lambda`.
+
+```ts
+// src/aws.ts
+import { journeyLambda } from '@shware/workflow/aws';
+import { postgresJsStore } from '@shware/workflow/postgres-js';
+import { sesEmailTransport } from '@shware/workflow/transports/ses';
+import config from '../workflow.config';
+import { env } from './env.aws'; // process.env, parsed with zod
+
+const journeys = journeyLambda({
+  config,
+  env,
+  store: (env, database) => postgresJsStore(env.DATABASE_URL, database),
+  email: (env) => sesEmailTransport({ region: env.AWS_REGION }),
+});
+
+export const handler = journeys.handler;
+```
+
+One handler serves three inputs, told apart by the event's top-level shape, so
+no HTTP body can pass for the others:
+
+- **A Function URL request**: the HTTP API, as on Cloudflare. A journey it
+  starts is its own durable execution, submitted with an asynchronous `Invoke`
+  of this function's numbered version under a stable execution name, and the
+  request returns.
+- **A run** (`$workflow.run`): one instance. Steps, delays and waits map onto
+  the durable SDK's `step`, `wait` and callbacks; a wait parks on a fresh
+  callback, recorded in Postgres, which the next relevant event completes.
+- **A sweep** (`{ "type": "$workflow.sweep" }`, from EventBridge Scheduler, or
+  `POST /segments/sweep` from an existing cron): the segment sweep, plus
+  retrying starts whose submit was never confirmed and reconciling executions
+  the platform ended (timeout, stop) into the ledger. Without one, clock-only
+  segments and this upkeep do not happen.
+
+A start is recorded with its entry in one transaction (the `execution` table),
+so a lost `Invoke` response is retried with the same name and payload and never
+re-entered as a second execution. Retries stop after 12 hours (`startRetryMs`,
+keep it under the execution retention) and the start is left unresolved. A
+failed entry that is entered again gets a new execution, never the closed one.
+
+Erasing a user (`POST /users/forget`) stops their executions, then waits
+`stopDrainMs` (15 minutes by default; at least the function's timeout) before
+erasing: a stop does not interrupt an invocation already running, which goes on
+to its next checkpoint. Until then the erasure answers `erased: false` and the
+sweep finishes it.
+
+Deploy one artifact per version: publish a numbered version and point the
+`live` alias, which the Function URL is bound to, at it. Each version carries its
+compiled bundle and makes it live by itself, only over an older one. Each route
+records the version that applied it, and an instance it starts runs on that
+version, so its IR and its code always match, even while an older version is
+still serving; executions stay on the version that started them. `POST /deploy` of an arbitrary bundle is
+refused.
+
+```yaml
+Workflow:
+  Type: AWS::Serverless::Function
+  Properties:
+    Runtime: nodejs24.x
+    Handler: aws.handler
+    Timeout: 60
+    AutoPublishAlias: live
+    # ExecutionTimeout: the longest journey (waits, delays and the goal window), up to 366 days
+    DurableConfig: { ExecutionTimeout: 2592000, RetentionPeriodInDays: 30 }
+    FunctionUrlConfig: { AuthType: NONE, InvokeMode: BUFFERED }
+```
+
+The execution role needs the durable checkpoint permissions,
+`lambda:InvokeFunction` on its own versions, `lambda:SendDurableExecutionCallbackSuccess`,
+`lambda:GetDurableExecution`, `lambda:ListDurableExecutionsByFunction` and
+`lambda:StopDurableExecution`, plus `ses:SendEmail` when it sends through SES.
+With `AuthType: NONE`, scope the public `lambda:InvokeFunction` grant to
+`lambda:InvokedViaFunctionUrl = true` so the URL cannot be used to invoke the
+function directly. APNs goes over Node's HTTP/2 client; a custom domain needs
+CloudFront (or another HTTPS proxy) in front of the Function URL.
+
 ## Postgres
 
 A host on Postgres (through Hyperdrive, say) keeps Cloudflare Workflows for

package/dist/apns-relay.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_http2_client = require("./http2-client.cjs");
 let node_http = require("node:http");
-let node_http2 = require("node:http2");
 //#region src/apns-relay.ts
 const DEFAULT_ALLOW = ["https://api.push.apple.com", "https://api.sandbox.push.apple.com"];
 /** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */
@@ -16,19 +16,7 @@ const FORWARDED = [
 ];
 function startApnsRelay(options) {
 	const allow = new Set(options.allow ?? DEFAULT_ALLOW);
-	const sessions = /* @__PURE__ */ new Map();
-	function session(upstream) {
-		const existing = sessions.get(upstream);
-		if (existing !== void 0 && !existing.closed && !existing.destroyed) return existing;
-		const created = (0, node_http2.connect)(upstream);
-		const forget = () => {
-			if (sessions.get(upstream) === created) sessions.delete(upstream);
-		};
-		created.on("error", forget);
-		created.on("close", forget);
-		sessions.set(upstream, created);
-		return created;
-	}
+	const sessions = require_http2_client.http2Sessions();
 	function relay(req, res) {
 		const upstreamHeader = req.headers["apns-relay-upstream"];
 		const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;
@@ -53,7 +41,7 @@ function startApnsRelay(options) {
 			}
 			let stream;
 			try {
-				stream = session(upstream).request(headers);
+				stream = sessions.session(upstream).request(headers);
 			} catch (error) {
 				res.writeHead(502, { "content-type": "application/json" });
 				res.end(JSON.stringify({
@@ -91,8 +79,7 @@ function startApnsRelay(options) {
 			resolve({
 				port: typeof address === "object" && address !== null ? address.port : options.port,
 				close: () => new Promise((done) => {
-					for (const open of sessions.values()) open.close();
-					sessions.clear();
+					sessions.close();
 					server.close(() => done());
 				})
 			});

package/dist/apns-relay.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"apns-relay.cjs","names":["connect","createServer"],"sources":["../src/apns-relay.ts"],"sourcesContent":["import { type IncomingMessage, type ServerResponse, createServer } from 'node:http';\nimport { type ClientHttp2Session, connect } from 'node:http2';\n\n/**\n * `@shware/workflow/apns-relay` — a development-only HTTP/1.1 → HTTP/2 relay\n * for APNs, run under Node next to `wrangler dev`.\n *\n * APNs accepts HTTP/2 only, and workerd (the local Workers runtime) cannot\n * make an HTTP/2 subrequest, so a journey that pushes to an iPhone from a\n * local Worker has nowhere to go. A deployed Worker needs none of this: its\n * `fetch` negotiates HTTP/2 with Apple. The relay forwards each request to the\n * origin named in its `apns-relay-upstream` header (the sender sets it along\n * with `origin`), keeping one HTTP/2 session per upstream.\n *\n * Only Apple's two hosts are relayed by default; `allow` widens that for tests.\n */\n\nexport interface ApnsRelayOptions {\n  port: number;\n  /** Interface to listen on; loopback by default — the relay has no auth of its own. */\n  hostname?: string;\n  /** Upstream origins that may be relayed; Apple's production and sandbox hosts by default. */\n  allow?: readonly string[];\n}\n\nexport interface ApnsRelay {\n  port: number;\n  close(): Promise<void>;\n}\n\nconst DEFAULT_ALLOW = ['https://api.push.apple.com', 'https://api.sandbox.push.apple.com'];\n\n/** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */\nconst FORWARDED = [\n  'authorization',\n  'apns-topic',\n  'apns-push-type',\n  'apns-priority',\n  'apns-expiration',\n  'apns-collapse-id',\n  'apns-id',\n  'content-type',\n];\n\nexport function startApnsRelay(options: ApnsRelayOptions): Promise<ApnsRelay> {\n  const allow = new Set(options.allow ?? DEFAULT_ALLOW);\n  const sessions = new Map<string, ClientHttp2Session>();\n\n  function session(upstream: string): ClientHttp2Session {\n    const existing = sessions.get(upstream);\n    if (existing !== undefined && !existing.closed && !existing.destroyed) return existing;\n    const created = connect(upstream);\n    const forget = () => {\n      if (sessions.get(upstream) === created) sessions.delete(upstream);\n    };\n    created.on('error', forget);\n    created.on('close', forget);\n    sessions.set(upstream, created);\n    return created;\n  }\n\n  function relay(req: IncomingMessage, res: ServerResponse): void {\n    const upstreamHeader = req.headers['apns-relay-upstream'];\n    const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;\n    if (upstream === undefined || !allow.has(upstream)) {\n      res.writeHead(400, { 'content-type': 'application/json' });\n      res.end(JSON.stringify({ reason: 'RelayUpstreamNotAllowed', upstream: upstream ?? null }));\n      return;\n    }\n\n    const chunks: Buffer[] = [];\n    req.on('data', (chunk: Buffer) => chunks.push(chunk));\n    req.on('end', () => {\n      const headers: Record<string, string> = {\n        ':method': req.method ?? 'POST',\n        ':path': req.url ?? '/',\n      };\n      for (const name of FORWARDED) {\n        const value = req.headers[name];\n        if (typeof value === 'string') headers[name] = value;\n      }\n      let stream;\n      try {\n        stream = session(upstream).request(headers);\n      } catch (error) {\n        res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayConnectFailed', error: String(error) }));\n        return;\n      }\n      const body: Buffer[] = [];\n      stream.on('response', (responseHeaders) => {\n        const status = responseHeaders[':status'] ?? 502;\n        const apnsId = responseHeaders['apns-id'];\n        res.writeHead(status, {\n          'content-type': 'application/json',\n          ...(typeof apnsId === 'string' ? { 'apns-id': apnsId } : {}),\n        });\n      });\n      stream.on('data', (chunk: Buffer) => body.push(chunk));\n      stream.on('end', () => res.end(Buffer.concat(body)));\n      stream.on('error', (error) => {\n        if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayUpstreamError', error: String(error) }));\n      });\n      stream.end(Buffer.concat(chunks));\n    });\n  }\n\n  const server = createServer(relay);\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port, options.hostname ?? '127.0.0.1', () => {\n      const address = server.address();\n      const port = typeof address === 'object' && address !== null ? address.port : options.port;\n      resolve({\n        port,\n        close: () =>\n          new Promise((done) => {\n            for (const open of sessions.values()) open.close();\n            sessions.clear();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"],"mappings":";;;;AA8BA,MAAM,gBAAgB,CAAC,8BAA8B,oCAAoC;;AAGzF,MAAM,YAAY;CAChB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,eAAe,SAA+C;CAC5E,MAAM,QAAQ,IAAI,IAAI,QAAQ,SAAS,aAAa;CACpD,MAAM,2BAAW,IAAI,IAAgC;CAErD,SAAS,QAAQ,UAAsC;EACrD,MAAM,WAAW,SAAS,IAAI,QAAQ;EACtC,IAAI,aAAa,KAAA,KAAa,CAAC,SAAS,UAAU,CAAC,SAAS,WAAW,OAAO;EAC9E,MAAM,WAAA,GAAUA,WAAAA,QAAAA,CAAQ,QAAQ;EAChC,MAAM,eAAe;GACnB,IAAI,SAAS,IAAI,QAAQ,MAAM,SAAS,SAAS,OAAO,QAAQ;EAClE;EACA,QAAQ,GAAG,SAAS,MAAM;EAC1B,QAAQ,GAAG,SAAS,MAAM;EAC1B,SAAS,IAAI,UAAU,OAAO;EAC9B,OAAO;CACT;CAEA,SAAS,MAAM,KAAsB,KAA2B;EAC9D,MAAM,iBAAiB,IAAI,QAAQ;EACnC,MAAM,WAAW,MAAM,QAAQ,cAAc,IAAI,eAAe,KAAK;EACrE,IAAI,aAAa,KAAA,KAAa,CAAC,MAAM,IAAI,QAAQ,GAAG;GAClD,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IAAI,KAAK,UAAU;IAAE,QAAQ;IAA2B,UAAU,YAAY;GAAK,CAAC,CAAC;GACzF;EACF;EAEA,MAAM,SAAmB,CAAC;EAC1B,IAAI,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;EACpD,IAAI,GAAG,aAAa;GAClB,MAAM,UAAkC;IACtC,WAAW,IAAI,UAAU;IACzB,SAAS,IAAI,OAAO;GACtB;GACA,KAAK,MAAM,QAAQ,WAAW;IAC5B,MAAM,QAAQ,IAAI,QAAQ;IAC1B,IAAI,OAAO,UAAU,UAAU,QAAQ,QAAQ;GACjD;GACA,IAAI;GACJ,IAAI;IACF,SAAS,QAAQ,QAAQ,CAAC,CAAC,QAAQ,OAAO;GAC5C,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;IAC9E;GACF;GACA,MAAM,OAAiB,CAAC;GACxB,OAAO,GAAG,aAAa,oBAAoB;IACzC,MAAM,SAAS,gBAAgB,cAAc;IAC7C,MAAM,SAAS,gBAAgB;IAC/B,IAAI,UAAU,QAAQ;KACpB,gBAAgB;KAChB,GAAI,OAAO,WAAW,WAAW,EAAE,WAAW,OAAO,IAAI,CAAC;IAC5D,CAAC;GACH,CAAC;GACD,OAAO,GAAG,SAAS,UAAkB,KAAK,KAAK,KAAK,CAAC;GACrD,OAAO,GAAG,aAAa,IAAI,IAAI,OAAO,OAAO,IAAI,CAAC,CAAC;GACnD,OAAO,GAAG,UAAU,UAAU;IAC5B,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IAC/E,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;GAChF,CAAC;GACD,OAAO,IAAI,OAAO,OAAO,MAAM,CAAC;EAClC,CAAC;CACH;CAEA,MAAM,UAAA,GAASC,UAAAA,aAAAA,CAAa,KAAK;CACjC,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,QAAQ,MAAM,QAAQ,YAAY,mBAAmB;GACjE,MAAM,UAAU,OAAO,QAAQ;GAE/B,QAAQ;IACN,MAFW,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,QAAQ;IAGpF,aACE,IAAI,SAAS,SAAS;KACpB,KAAK,MAAM,QAAQ,SAAS,OAAO,GAAG,KAAK,MAAM;KACjD,SAAS,MAAM;KACf,OAAO,YAAY,KAAK,CAAC;IAC3B,CAAC;GACL,CAAC;EACH,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"apns-relay.cjs","names":["http2Sessions","createServer"],"sources":["../src/apns-relay.ts"],"sourcesContent":["import { type IncomingMessage, type ServerResponse, createServer } from 'node:http';\nimport { http2Sessions } from './http2-client';\n\n/**\n * `@shware/workflow/apns-relay` — a development-only HTTP/1.1 → HTTP/2 relay\n * for APNs, run under Node next to `wrangler dev`.\n *\n * APNs accepts HTTP/2 only, and workerd (the local Workers runtime) cannot\n * make an HTTP/2 subrequest, so a journey that pushes to an iPhone from a\n * local Worker has nowhere to go. A deployed Worker needs none of this: its\n * `fetch` negotiates HTTP/2 with Apple. The relay forwards each request to the\n * origin named in its `apns-relay-upstream` header (the sender sets it along\n * with `origin`), keeping one HTTP/2 session per upstream.\n *\n * Only Apple's two hosts are relayed by default; `allow` widens that for tests.\n */\n\nexport interface ApnsRelayOptions {\n  port: number;\n  /** Interface to listen on; loopback by default — the relay has no auth of its own. */\n  hostname?: string;\n  /** Upstream origins that may be relayed; Apple's production and sandbox hosts by default. */\n  allow?: readonly string[];\n}\n\nexport interface ApnsRelay {\n  port: number;\n  close(): Promise<void>;\n}\n\nconst DEFAULT_ALLOW = ['https://api.push.apple.com', 'https://api.sandbox.push.apple.com'];\n\n/** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */\nconst FORWARDED = [\n  'authorization',\n  'apns-topic',\n  'apns-push-type',\n  'apns-priority',\n  'apns-expiration',\n  'apns-collapse-id',\n  'apns-id',\n  'content-type',\n];\n\nexport function startApnsRelay(options: ApnsRelayOptions): Promise<ApnsRelay> {\n  const allow = new Set(options.allow ?? DEFAULT_ALLOW);\n  const sessions = http2Sessions();\n\n  function relay(req: IncomingMessage, res: ServerResponse): void {\n    const upstreamHeader = req.headers['apns-relay-upstream'];\n    const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;\n    if (upstream === undefined || !allow.has(upstream)) {\n      res.writeHead(400, { 'content-type': 'application/json' });\n      res.end(JSON.stringify({ reason: 'RelayUpstreamNotAllowed', upstream: upstream ?? null }));\n      return;\n    }\n\n    const chunks: Buffer[] = [];\n    req.on('data', (chunk: Buffer) => chunks.push(chunk));\n    req.on('end', () => {\n      const headers: Record<string, string> = {\n        ':method': req.method ?? 'POST',\n        ':path': req.url ?? '/',\n      };\n      for (const name of FORWARDED) {\n        const value = req.headers[name];\n        if (typeof value === 'string') headers[name] = value;\n      }\n      let stream;\n      try {\n        stream = sessions.session(upstream).request(headers);\n      } catch (error) {\n        res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayConnectFailed', error: String(error) }));\n        return;\n      }\n      const body: Buffer[] = [];\n      stream.on('response', (responseHeaders) => {\n        const status = responseHeaders[':status'] ?? 502;\n        const apnsId = responseHeaders['apns-id'];\n        res.writeHead(status, {\n          'content-type': 'application/json',\n          ...(typeof apnsId === 'string' ? { 'apns-id': apnsId } : {}),\n        });\n      });\n      stream.on('data', (chunk: Buffer) => body.push(chunk));\n      stream.on('end', () => res.end(Buffer.concat(body)));\n      stream.on('error', (error) => {\n        if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayUpstreamError', error: String(error) }));\n      });\n      stream.end(Buffer.concat(chunks));\n    });\n  }\n\n  const server = createServer(relay);\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port, options.hostname ?? '127.0.0.1', () => {\n      const address = server.address();\n      const port = typeof address === 'object' && address !== null ? address.port : options.port;\n      resolve({\n        port,\n        close: () =>\n          new Promise((done) => {\n            sessions.close();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"],"mappings":";;;;AA8BA,MAAM,gBAAgB,CAAC,8BAA8B,oCAAoC;;AAGzF,MAAM,YAAY;CAChB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,eAAe,SAA+C;CAC5E,MAAM,QAAQ,IAAI,IAAI,QAAQ,SAAS,aAAa;CACpD,MAAM,WAAWA,qBAAAA,cAAc;CAE/B,SAAS,MAAM,KAAsB,KAA2B;EAC9D,MAAM,iBAAiB,IAAI,QAAQ;EACnC,MAAM,WAAW,MAAM,QAAQ,cAAc,IAAI,eAAe,KAAK;EACrE,IAAI,aAAa,KAAA,KAAa,CAAC,MAAM,IAAI,QAAQ,GAAG;GAClD,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IAAI,KAAK,UAAU;IAAE,QAAQ;IAA2B,UAAU,YAAY;GAAK,CAAC,CAAC;GACzF;EACF;EAEA,MAAM,SAAmB,CAAC;EAC1B,IAAI,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;EACpD,IAAI,GAAG,aAAa;GAClB,MAAM,UAAkC;IACtC,WAAW,IAAI,UAAU;IACzB,SAAS,IAAI,OAAO;GACtB;GACA,KAAK,MAAM,QAAQ,WAAW;IAC5B,MAAM,QAAQ,IAAI,QAAQ;IAC1B,IAAI,OAAO,UAAU,UAAU,QAAQ,QAAQ;GACjD;GACA,IAAI;GACJ,IAAI;IACF,SAAS,SAAS,QAAQ,QAAQ,CAAC,CAAC,QAAQ,OAAO;GACrD,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;IAC9E;GACF;GACA,MAAM,OAAiB,CAAC;GACxB,OAAO,GAAG,aAAa,oBAAoB;IACzC,MAAM,SAAS,gBAAgB,cAAc;IAC7C,MAAM,SAAS,gBAAgB;IAC/B,IAAI,UAAU,QAAQ;KACpB,gBAAgB;KAChB,GAAI,OAAO,WAAW,WAAW,EAAE,WAAW,OAAO,IAAI,CAAC;IAC5D,CAAC;GACH,CAAC;GACD,OAAO,GAAG,SAAS,UAAkB,KAAK,KAAK,KAAK,CAAC;GACrD,OAAO,GAAG,aAAa,IAAI,IAAI,OAAO,OAAO,IAAI,CAAC,CAAC;GACnD,OAAO,GAAG,UAAU,UAAU;IAC5B,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IAC/E,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;GAChF,CAAC;GACD,OAAO,IAAI,OAAO,OAAO,MAAM,CAAC;EAClC,CAAC;CACH;CAEA,MAAM,UAAA,GAASC,UAAAA,aAAAA,CAAa,KAAK;CACjC,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,QAAQ,MAAM,QAAQ,YAAY,mBAAmB;GACjE,MAAM,UAAU,OAAO,QAAQ;GAE/B,QAAQ;IACN,MAFW,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,QAAQ;IAGpF,aACE,IAAI,SAAS,SAAS;KACpB,SAAS,MAAM;KACf,OAAO,YAAY,KAAK,CAAC;IAC3B,CAAC;GACL,CAAC;EACH,CAAC;CACH,CAAC;AACH"}

package/dist/apns-relay.mjs

@@ -1,5 +1,5 @@
+import { http2Sessions } from "./http2-client.mjs";
 import { createServer } from "node:http";
-import { connect } from "node:http2";
 //#region src/apns-relay.ts
 const DEFAULT_ALLOW = ["https://api.push.apple.com", "https://api.sandbox.push.apple.com"];
 /** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */
@@ -15,19 +15,7 @@ const FORWARDED = [
 ];
 function startApnsRelay(options) {
 	const allow = new Set(options.allow ?? DEFAULT_ALLOW);
-	const sessions = /* @__PURE__ */ new Map();
-	function session(upstream) {
-		const existing = sessions.get(upstream);
-		if (existing !== void 0 && !existing.closed && !existing.destroyed) return existing;
-		const created = connect(upstream);
-		const forget = () => {
-			if (sessions.get(upstream) === created) sessions.delete(upstream);
-		};
-		created.on("error", forget);
-		created.on("close", forget);
-		sessions.set(upstream, created);
-		return created;
-	}
+	const sessions = http2Sessions();
 	function relay(req, res) {
 		const upstreamHeader = req.headers["apns-relay-upstream"];
 		const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;
@@ -52,7 +40,7 @@ function startApnsRelay(options) {
 			}
 			let stream;
 			try {
-				stream = session(upstream).request(headers);
+				stream = sessions.session(upstream).request(headers);
 			} catch (error) {
 				res.writeHead(502, { "content-type": "application/json" });
 				res.end(JSON.stringify({
@@ -90,8 +78,7 @@ function startApnsRelay(options) {
 			resolve({
 				port: typeof address === "object" && address !== null ? address.port : options.port,
 				close: () => new Promise((done) => {
-					for (const open of sessions.values()) open.close();
-					sessions.clear();
+					sessions.close();
 					server.close(() => done());
 				})
 			});

package/dist/apns-relay.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apns-relay.mjs","names":[],"sources":["../src/apns-relay.ts"],"sourcesContent":["import { type IncomingMessage, type ServerResponse, createServer } from 'node:http';\nimport { type ClientHttp2Session, connect } from 'node:http2';\n\n/**\n * `@shware/workflow/apns-relay` — a development-only HTTP/1.1 → HTTP/2 relay\n * for APNs, run under Node next to `wrangler dev`.\n *\n * APNs accepts HTTP/2 only, and workerd (the local Workers runtime) cannot\n * make an HTTP/2 subrequest, so a journey that pushes to an iPhone from a\n * local Worker has nowhere to go. A deployed Worker needs none of this: its\n * `fetch` negotiates HTTP/2 with Apple. The relay forwards each request to the\n * origin named in its `apns-relay-upstream` header (the sender sets it along\n * with `origin`), keeping one HTTP/2 session per upstream.\n *\n * Only Apple's two hosts are relayed by default; `allow` widens that for tests.\n */\n\nexport interface ApnsRelayOptions {\n  port: number;\n  /** Interface to listen on; loopback by default — the relay has no auth of its own. */\n  hostname?: string;\n  /** Upstream origins that may be relayed; Apple's production and sandbox hosts by default. */\n  allow?: readonly string[];\n}\n\nexport interface ApnsRelay {\n  port: number;\n  close(): Promise<void>;\n}\n\nconst DEFAULT_ALLOW = ['https://api.push.apple.com', 'https://api.sandbox.push.apple.com'];\n\n/** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */\nconst FORWARDED = [\n  'authorization',\n  'apns-topic',\n  'apns-push-type',\n  'apns-priority',\n  'apns-expiration',\n  'apns-collapse-id',\n  'apns-id',\n  'content-type',\n];\n\nexport function startApnsRelay(options: ApnsRelayOptions): Promise<ApnsRelay> {\n  const allow = new Set(options.allow ?? DEFAULT_ALLOW);\n  const sessions = new Map<string, ClientHttp2Session>();\n\n  function session(upstream: string): ClientHttp2Session {\n    const existing = sessions.get(upstream);\n    if (existing !== undefined && !existing.closed && !existing.destroyed) return existing;\n    const created = connect(upstream);\n    const forget = () => {\n      if (sessions.get(upstream) === created) sessions.delete(upstream);\n    };\n    created.on('error', forget);\n    created.on('close', forget);\n    sessions.set(upstream, created);\n    return created;\n  }\n\n  function relay(req: IncomingMessage, res: ServerResponse): void {\n    const upstreamHeader = req.headers['apns-relay-upstream'];\n    const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;\n    if (upstream === undefined || !allow.has(upstream)) {\n      res.writeHead(400, { 'content-type': 'application/json' });\n      res.end(JSON.stringify({ reason: 'RelayUpstreamNotAllowed', upstream: upstream ?? null }));\n      return;\n    }\n\n    const chunks: Buffer[] = [];\n    req.on('data', (chunk: Buffer) => chunks.push(chunk));\n    req.on('end', () => {\n      const headers: Record<string, string> = {\n        ':method': req.method ?? 'POST',\n        ':path': req.url ?? '/',\n      };\n      for (const name of FORWARDED) {\n        const value = req.headers[name];\n        if (typeof value === 'string') headers[name] = value;\n      }\n      let stream;\n      try {\n        stream = session(upstream).request(headers);\n      } catch (error) {\n        res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayConnectFailed', error: String(error) }));\n        return;\n      }\n      const body: Buffer[] = [];\n      stream.on('response', (responseHeaders) => {\n        const status = responseHeaders[':status'] ?? 502;\n        const apnsId = responseHeaders['apns-id'];\n        res.writeHead(status, {\n          'content-type': 'application/json',\n          ...(typeof apnsId === 'string' ? { 'apns-id': apnsId } : {}),\n        });\n      });\n      stream.on('data', (chunk: Buffer) => body.push(chunk));\n      stream.on('end', () => res.end(Buffer.concat(body)));\n      stream.on('error', (error) => {\n        if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayUpstreamError', error: String(error) }));\n      });\n      stream.end(Buffer.concat(chunks));\n    });\n  }\n\n  const server = createServer(relay);\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port, options.hostname ?? '127.0.0.1', () => {\n      const address = server.address();\n      const port = typeof address === 'object' && address !== null ? address.port : options.port;\n      resolve({\n        port,\n        close: () =>\n          new Promise((done) => {\n            for (const open of sessions.values()) open.close();\n            sessions.clear();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"],"mappings":";;;AA8BA,MAAM,gBAAgB,CAAC,8BAA8B,oCAAoC;;AAGzF,MAAM,YAAY;CAChB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,eAAe,SAA+C;CAC5E,MAAM,QAAQ,IAAI,IAAI,QAAQ,SAAS,aAAa;CACpD,MAAM,2BAAW,IAAI,IAAgC;CAErD,SAAS,QAAQ,UAAsC;EACrD,MAAM,WAAW,SAAS,IAAI,QAAQ;EACtC,IAAI,aAAa,KAAA,KAAa,CAAC,SAAS,UAAU,CAAC,SAAS,WAAW,OAAO;EAC9E,MAAM,UAAU,QAAQ,QAAQ;EAChC,MAAM,eAAe;GACnB,IAAI,SAAS,IAAI,QAAQ,MAAM,SAAS,SAAS,OAAO,QAAQ;EAClE;EACA,QAAQ,GAAG,SAAS,MAAM;EAC1B,QAAQ,GAAG,SAAS,MAAM;EAC1B,SAAS,IAAI,UAAU,OAAO;EAC9B,OAAO;CACT;CAEA,SAAS,MAAM,KAAsB,KAA2B;EAC9D,MAAM,iBAAiB,IAAI,QAAQ;EACnC,MAAM,WAAW,MAAM,QAAQ,cAAc,IAAI,eAAe,KAAK;EACrE,IAAI,aAAa,KAAA,KAAa,CAAC,MAAM,IAAI,QAAQ,GAAG;GAClD,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IAAI,KAAK,UAAU;IAAE,QAAQ;IAA2B,UAAU,YAAY;GAAK,CAAC,CAAC;GACzF;EACF;EAEA,MAAM,SAAmB,CAAC;EAC1B,IAAI,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;EACpD,IAAI,GAAG,aAAa;GAClB,MAAM,UAAkC;IACtC,WAAW,IAAI,UAAU;IACzB,SAAS,IAAI,OAAO;GACtB;GACA,KAAK,MAAM,QAAQ,WAAW;IAC5B,MAAM,QAAQ,IAAI,QAAQ;IAC1B,IAAI,OAAO,UAAU,UAAU,QAAQ,QAAQ;GACjD;GACA,IAAI;GACJ,IAAI;IACF,SAAS,QAAQ,QAAQ,CAAC,CAAC,QAAQ,OAAO;GAC5C,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;IAC9E;GACF;GACA,MAAM,OAAiB,CAAC;GACxB,OAAO,GAAG,aAAa,oBAAoB;IACzC,MAAM,SAAS,gBAAgB,cAAc;IAC7C,MAAM,SAAS,gBAAgB;IAC/B,IAAI,UAAU,QAAQ;KACpB,gBAAgB;KAChB,GAAI,OAAO,WAAW,WAAW,EAAE,WAAW,OAAO,IAAI,CAAC;IAC5D,CAAC;GACH,CAAC;GACD,OAAO,GAAG,SAAS,UAAkB,KAAK,KAAK,KAAK,CAAC;GACrD,OAAO,GAAG,aAAa,IAAI,IAAI,OAAO,OAAO,IAAI,CAAC,CAAC;GACnD,OAAO,GAAG,UAAU,UAAU;IAC5B,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IAC/E,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;GAChF,CAAC;GACD,OAAO,IAAI,OAAO,OAAO,MAAM,CAAC;EAClC,CAAC;CACH;CAEA,MAAM,SAAS,aAAa,KAAK;CACjC,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,QAAQ,MAAM,QAAQ,YAAY,mBAAmB;GACjE,MAAM,UAAU,OAAO,QAAQ;GAE/B,QAAQ;IACN,MAFW,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,QAAQ;IAGpF,aACE,IAAI,SAAS,SAAS;KACpB,KAAK,MAAM,QAAQ,SAAS,OAAO,GAAG,KAAK,MAAM;KACjD,SAAS,MAAM;KACf,OAAO,YAAY,KAAK,CAAC;IAC3B,CAAC;GACL,CAAC;EACH,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"apns-relay.mjs","names":[],"sources":["../src/apns-relay.ts"],"sourcesContent":["import { type IncomingMessage, type ServerResponse, createServer } from 'node:http';\nimport { http2Sessions } from './http2-client';\n\n/**\n * `@shware/workflow/apns-relay` — a development-only HTTP/1.1 → HTTP/2 relay\n * for APNs, run under Node next to `wrangler dev`.\n *\n * APNs accepts HTTP/2 only, and workerd (the local Workers runtime) cannot\n * make an HTTP/2 subrequest, so a journey that pushes to an iPhone from a\n * local Worker has nowhere to go. A deployed Worker needs none of this: its\n * `fetch` negotiates HTTP/2 with Apple. The relay forwards each request to the\n * origin named in its `apns-relay-upstream` header (the sender sets it along\n * with `origin`), keeping one HTTP/2 session per upstream.\n *\n * Only Apple's two hosts are relayed by default; `allow` widens that for tests.\n */\n\nexport interface ApnsRelayOptions {\n  port: number;\n  /** Interface to listen on; loopback by default — the relay has no auth of its own. */\n  hostname?: string;\n  /** Upstream origins that may be relayed; Apple's production and sandbox hosts by default. */\n  allow?: readonly string[];\n}\n\nexport interface ApnsRelay {\n  port: number;\n  close(): Promise<void>;\n}\n\nconst DEFAULT_ALLOW = ['https://api.push.apple.com', 'https://api.sandbox.push.apple.com'];\n\n/** Request headers APNs reads; everything else (host, content-length, …) is the relay's own business. */\nconst FORWARDED = [\n  'authorization',\n  'apns-topic',\n  'apns-push-type',\n  'apns-priority',\n  'apns-expiration',\n  'apns-collapse-id',\n  'apns-id',\n  'content-type',\n];\n\nexport function startApnsRelay(options: ApnsRelayOptions): Promise<ApnsRelay> {\n  const allow = new Set(options.allow ?? DEFAULT_ALLOW);\n  const sessions = http2Sessions();\n\n  function relay(req: IncomingMessage, res: ServerResponse): void {\n    const upstreamHeader = req.headers['apns-relay-upstream'];\n    const upstream = Array.isArray(upstreamHeader) ? upstreamHeader[0] : upstreamHeader;\n    if (upstream === undefined || !allow.has(upstream)) {\n      res.writeHead(400, { 'content-type': 'application/json' });\n      res.end(JSON.stringify({ reason: 'RelayUpstreamNotAllowed', upstream: upstream ?? null }));\n      return;\n    }\n\n    const chunks: Buffer[] = [];\n    req.on('data', (chunk: Buffer) => chunks.push(chunk));\n    req.on('end', () => {\n      const headers: Record<string, string> = {\n        ':method': req.method ?? 'POST',\n        ':path': req.url ?? '/',\n      };\n      for (const name of FORWARDED) {\n        const value = req.headers[name];\n        if (typeof value === 'string') headers[name] = value;\n      }\n      let stream;\n      try {\n        stream = sessions.session(upstream).request(headers);\n      } catch (error) {\n        res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayConnectFailed', error: String(error) }));\n        return;\n      }\n      const body: Buffer[] = [];\n      stream.on('response', (responseHeaders) => {\n        const status = responseHeaders[':status'] ?? 502;\n        const apnsId = responseHeaders['apns-id'];\n        res.writeHead(status, {\n          'content-type': 'application/json',\n          ...(typeof apnsId === 'string' ? { 'apns-id': apnsId } : {}),\n        });\n      });\n      stream.on('data', (chunk: Buffer) => body.push(chunk));\n      stream.on('end', () => res.end(Buffer.concat(body)));\n      stream.on('error', (error) => {\n        if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json' });\n        res.end(JSON.stringify({ reason: 'RelayUpstreamError', error: String(error) }));\n      });\n      stream.end(Buffer.concat(chunks));\n    });\n  }\n\n  const server = createServer(relay);\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(options.port, options.hostname ?? '127.0.0.1', () => {\n      const address = server.address();\n      const port = typeof address === 'object' && address !== null ? address.port : options.port;\n      resolve({\n        port,\n        close: () =>\n          new Promise((done) => {\n            sessions.close();\n            server.close(() => done());\n          }),\n      });\n    });\n  });\n}\n"],"mappings":";;;AA8BA,MAAM,gBAAgB,CAAC,8BAA8B,oCAAoC;;AAGzF,MAAM,YAAY;CAChB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,eAAe,SAA+C;CAC5E,MAAM,QAAQ,IAAI,IAAI,QAAQ,SAAS,aAAa;CACpD,MAAM,WAAW,cAAc;CAE/B,SAAS,MAAM,KAAsB,KAA2B;EAC9D,MAAM,iBAAiB,IAAI,QAAQ;EACnC,MAAM,WAAW,MAAM,QAAQ,cAAc,IAAI,eAAe,KAAK;EACrE,IAAI,aAAa,KAAA,KAAa,CAAC,MAAM,IAAI,QAAQ,GAAG;GAClD,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IAAI,KAAK,UAAU;IAAE,QAAQ;IAA2B,UAAU,YAAY;GAAK,CAAC,CAAC;GACzF;EACF;EAEA,MAAM,SAAmB,CAAC;EAC1B,IAAI,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;EACpD,IAAI,GAAG,aAAa;GAClB,MAAM,UAAkC;IACtC,WAAW,IAAI,UAAU;IACzB,SAAS,IAAI,OAAO;GACtB;GACA,KAAK,MAAM,QAAQ,WAAW;IAC5B,MAAM,QAAQ,IAAI,QAAQ;IAC1B,IAAI,OAAO,UAAU,UAAU,QAAQ,QAAQ;GACjD;GACA,IAAI;GACJ,IAAI;IACF,SAAS,SAAS,QAAQ,QAAQ,CAAC,CAAC,QAAQ,OAAO;GACrD,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;IAC9E;GACF;GACA,MAAM,OAAiB,CAAC;GACxB,OAAO,GAAG,aAAa,oBAAoB;IACzC,MAAM,SAAS,gBAAgB,cAAc;IAC7C,MAAM,SAAS,gBAAgB;IAC/B,IAAI,UAAU,QAAQ;KACpB,gBAAgB;KAChB,GAAI,OAAO,WAAW,WAAW,EAAE,WAAW,OAAO,IAAI,CAAC;IAC5D,CAAC;GACH,CAAC;GACD,OAAO,GAAG,SAAS,UAAkB,KAAK,KAAK,KAAK,CAAC;GACrD,OAAO,GAAG,aAAa,IAAI,IAAI,OAAO,OAAO,IAAI,CAAC,CAAC;GACnD,OAAO,GAAG,UAAU,UAAU;IAC5B,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IAC/E,IAAI,IAAI,KAAK,UAAU;KAAE,QAAQ;KAAsB,OAAO,OAAO,KAAK;IAAE,CAAC,CAAC;GAChF,CAAC;GACD,OAAO,IAAI,OAAO,OAAO,MAAM,CAAC;EAClC,CAAC;CACH;CAEA,MAAM,SAAS,aAAa,KAAK;CACjC,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,QAAQ,MAAM,QAAQ,YAAY,mBAAmB;GACjE,MAAM,UAAU,OAAO,QAAQ;GAE/B,QAAQ;IACN,MAFW,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,QAAQ;IAGpF,aACE,IAAI,SAAS,SAAS;KACpB,SAAS,MAAM;KACf,OAAO,YAAY,KAAK,CAAC;IAC3B,CAAC;GACL,CAAC;EACH,CAAC;CACH,CAAC;AACH"}

package/dist/aws/engine-step.cjs

@@ -0,0 +1,104 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _aws_durable_execution_sdk_js = require("@aws/durable-execution-sdk-js");
+//#region src/aws/engine-step.ts
+/**
+* EngineStep over a Lambda durable execution.
+*
+* Steps, sleeps and wakes map onto the SDK's `step`, `wait` and callbacks. A wake handle is a
+* callback, which is one-shot, so every wait arms a fresh one (the interpreter subscribes on
+* every attempt): created where the durable context allows it — outside any step, so its id
+* replays — then recorded in Postgres together with the subscription rows, numbered by a
+* generation so a late wake or cleanup of an older wait cannot touch a newer one. The callback
+* is only a hint; the facts the wait re-checks are Postgres'.
+*/
+/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */
+const NON_RETRYABLE = /* @__PURE__ */ new Set(["TemplateValidationError", "ContractValidationError"]);
+/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */
+function stepRetry(error, attempt) {
+	if (NON_RETRYABLE.has(error.name) || attempt >= 6) return { shouldRetry: false };
+	return {
+		shouldRetry: true,
+		delay: { seconds: Math.min(60, 2 ** attempt) }
+	};
+}
+var AwsEngineStep = class {
+	context;
+	store;
+	executions;
+	lambda;
+	userId;
+	instanceId;
+	generation = 0;
+	armed;
+	constructor(context, store, executions, lambda, userId, instanceId) {
+		this.context = context;
+		this.store = store;
+		this.executions = executions;
+		this.lambda = lambda;
+		this.userId = userId;
+		this.instanceId = instanceId;
+	}
+	do(name, fn) {
+		return this.context.step(name, () => fn(), { retryStrategy: stepRetry });
+	}
+	async sleep(name, ms) {
+		if (!(ms > 0)) return;
+		await this.context.wait(name, { seconds: Math.ceil(ms / 1e3) });
+	}
+	async sleepUntil(name, timestampMs) {
+		const remaining = await this.context.step(`${name}:remaining`, async () => timestampMs - Date.now());
+		await this.sleep(name, remaining);
+	}
+	async subscribe(name, events, options = {}) {
+		const generation = ++this.generation;
+		const { deadlineMs } = options;
+		const seconds = deadlineMs === void 0 ? void 0 : await this.context.step(`${name}:timeout`, async () => Math.max(1, Math.ceil((deadlineMs - Date.now()) / 1e3)));
+		const [promise, callbackId] = await this.context.createCallback(`${name}:callback`, seconds === void 0 ? {} : { timeout: { seconds } });
+		const previous = this.armed;
+		this.armed = {
+			promise,
+			callbackId,
+			generation,
+			settled: false
+		};
+		await this.context.step(name, async () => {
+			await this.store.subscribe(this.instanceId, this.userId, events, Date.now());
+			await this.executions.armCallback(this.instanceId, {
+				id: callbackId,
+				generation,
+				deadlineAt: deadlineMs
+			});
+			if (previous !== void 0 && !previous.settled) await this.lambda.completeCallback(previous.callbackId, "{}");
+		}, { retryStrategy: stepRetry });
+		if (previous !== void 0) previous.settled = true;
+	}
+	async unsubscribe(name) {
+		const armed = this.armed;
+		await this.context.step(name, async () => {
+			await this.store.unsubscribe(this.instanceId);
+			if (armed === void 0) return;
+			await this.executions.clearCallback(this.instanceId, armed.generation);
+			if (!armed.settled) await this.lambda.completeCallback(armed.callbackId, "{}");
+		}, { retryStrategy: stepRetry });
+		if (armed !== void 0) armed.settled = true;
+		this.armed = void 0;
+	}
+	async waitForWake(name, _timeoutMs) {
+		const armed = this.armed;
+		if (armed === void 0) throw new Error(`waitForWake '${name}' without a subscribe: nothing is armed to wake it`);
+		try {
+			await armed.promise;
+			return "event";
+		} catch (error) {
+			if (error instanceof _aws_durable_execution_sdk_js.CallbackTimeoutError) return "timeout";
+			throw error;
+		} finally {
+			armed.settled = true;
+		}
+	}
+};
+//#endregion
+exports.AwsEngineStep = AwsEngineStep;
+exports.stepRetry = stepRetry;
+
+//# sourceMappingURL=engine-step.cjs.map

package/dist/aws/engine-step.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-step.cjs","names":["CallbackTimeoutError"],"sources":["../../src/aws/engine-step.ts"],"sourcesContent":["import {\n  CallbackTimeoutError,\n  type DurableContext,\n  type DurablePromise,\n  type RetryDecision,\n} from '@aws/durable-execution-sdk-js';\nimport type { EngineStep } from '../engine/ports';\nimport type { ExecutionRegistry, JourneyStore } from '../store/index';\nimport type { LambdaApi } from './lambda-api';\n\n/**\n * EngineStep over a Lambda durable execution.\n *\n * Steps, sleeps and wakes map onto the SDK's `step`, `wait` and callbacks. A wake handle is a\n * callback, which is one-shot, so every wait arms a fresh one (the interpreter subscribes on\n * every attempt): created where the durable context allows it — outside any step, so its id\n * replays — then recorded in Postgres together with the subscription rows, numbered by a\n * generation so a late wake or cleanup of an older wait cannot touch a newer one. The callback\n * is only a hint; the facts the wait re-checks are Postgres'.\n */\n\n/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */\nconst NON_RETRYABLE = new Set(['TemplateValidationError', 'ContractValidationError']);\n\n/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */\nexport function stepRetry(error: Error, attempt: number): RetryDecision {\n  if (NON_RETRYABLE.has(error.name) || attempt >= 6) return { shouldRetry: false };\n  return { shouldRetry: true, delay: { seconds: Math.min(60, 2 ** attempt) } };\n}\n\ninterface Armed {\n  promise: DurablePromise<string>;\n  callbackId: string;\n  generation: number;\n  /** The wait consumed it (woken or timed out): there is nothing left to close. */\n  settled: boolean;\n}\n\nexport class AwsEngineStep implements EngineStep {\n  private generation = 0;\n  private armed: Armed | undefined;\n\n  constructor(\n    private readonly context: DurableContext,\n    private readonly store: JourneyStore,\n    private readonly executions: ExecutionRegistry,\n    private readonly lambda: LambdaApi,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.context.step(name, () => fn(), { retryStrategy: stepRetry });\n  }\n\n  async sleep(name: string, ms: number): Promise<void> {\n    // A wait is whole seconds: rounded up, so it never ends early; nothing to wait at zero\n    if (!(ms > 0)) return;\n    await this.context.wait(name, { seconds: Math.ceil(ms / 1000) });\n  }\n\n  async sleepUntil(name: string, timestampMs: number): Promise<void> {\n    // The remaining time is checkpointed: a replay must not recompute it from a later clock\n    const remaining = await this.context.step(\n      `${name}:remaining`,\n      async () => timestampMs - Date.now()\n    );\n    await this.sleep(name, remaining);\n  }\n\n  async subscribe(\n    name: string,\n    events: readonly string[],\n    options: { deadlineMs?: number } = {}\n  ): Promise<void> {\n    const generation = ++this.generation;\n    const { deadlineMs } = options;\n    // The callback's own timeout is the wait's deadline: fixed when it is created\n    const seconds =\n      deadlineMs === undefined\n        ? undefined\n        : await this.context.step(`${name}:timeout`, async () =>\n            Math.max(1, Math.ceil((deadlineMs - Date.now()) / 1000))\n          );\n    const [promise, callbackId] = await this.context.createCallback(\n      `${name}:callback`,\n      seconds === undefined ? {} : { timeout: { seconds } }\n    );\n    const previous = this.armed;\n    this.armed = { promise, callbackId, generation, settled: false };\n    await this.context.step(\n      name,\n      async () => {\n        // Rows first, then the callback: a wake that lands in between finds the rows and the\n        // callback of the last wait — its completion is refused, and this wait checks the facts\n        await this.store.subscribe(this.instanceId, this.userId, events, Date.now());\n        await this.executions.armCallback(this.instanceId, {\n          id: callbackId,\n          generation,\n          deadlineAt: deadlineMs,\n        });\n        if (previous !== undefined && !previous.settled) {\n          await this.lambda.completeCallback(previous.callbackId, '{}');\n        }\n      },\n      { retryStrategy: stepRetry }\n    );\n    if (previous !== undefined) previous.settled = true;\n  }\n\n  async unsubscribe(name: string): Promise<void> {\n    const armed = this.armed;\n    await this.context.step(\n      name,\n      async () => {\n        await this.store.unsubscribe(this.instanceId);\n        if (armed === undefined) return;\n        await this.executions.clearCallback(this.instanceId, armed.generation);\n        // The condition held before the wait parked: its callback is closed through the public\n        // API (a closed one answers false), rather than left open until it times out\n        if (!armed.settled) await this.lambda.completeCallback(armed.callbackId, '{}');\n      },\n      { retryStrategy: stepRetry }\n    );\n    if (armed !== undefined) armed.settled = true;\n    this.armed = undefined;\n  }\n\n  async waitForWake(name: string, _timeoutMs: number): Promise<'event' | 'timeout'> {\n    const armed = this.armed;\n    if (armed === undefined) {\n      throw new Error(`waitForWake '${name}' without a subscribe: nothing is armed to wake it`);\n    }\n    try {\n      await armed.promise;\n      return 'event';\n    } catch (error) {\n      // Only the callback's own expiry is a timeout; any other failure is a failure\n      if (error instanceof CallbackTimeoutError) return 'timeout';\n      throw error;\n    } finally {\n      armed.settled = true;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAsBA,MAAM,gCAAgB,IAAI,IAAI,CAAC,2BAA2B,yBAAyB,CAAC;;AAGpF,SAAgB,UAAU,OAAc,SAAgC;CACtE,IAAI,cAAc,IAAI,MAAM,IAAI,KAAK,WAAW,GAAG,OAAO,EAAE,aAAa,MAAM;CAC/E,OAAO;EAAE,aAAa;EAAM,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE;CAAE;AAC7E;AAUA,IAAa,gBAAb,MAAiD;CAK5B;CACA;CACA;CACA;CACA;CACA;CATnB,aAAqB;CACrB;CAEA,YACE,SACA,OACA,YACA,QACA,QACA,YACA;EANiB,KAAA,UAAA;EACA,KAAA,QAAA;EACA,KAAA,aAAA;EACA,KAAA,SAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;CAEH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,QAAQ,KAAK,YAAY,GAAG,GAAG,EAAE,eAAe,UAAU,CAAC;CACzE;CAEA,MAAM,MAAM,MAAc,IAA2B;EAEnD,IAAI,EAAE,KAAK,IAAI;EACf,MAAM,KAAK,QAAQ,KAAK,MAAM,EAAE,SAAS,KAAK,KAAK,KAAK,GAAI,EAAE,CAAC;CACjE;CAEA,MAAM,WAAW,MAAc,aAAoC;EAEjE,MAAM,YAAY,MAAM,KAAK,QAAQ,KACnC,GAAG,KAAK,aACR,YAAY,cAAc,KAAK,IAAI,CACrC;EACA,MAAM,KAAK,MAAM,MAAM,SAAS;CAClC;CAEA,MAAM,UACJ,MACA,QACA,UAAmC,CAAC,GACrB;EACf,MAAM,aAAa,EAAE,KAAK;EAC1B,MAAM,EAAE,eAAe;EAEvB,MAAM,UACJ,eAAe,KAAA,IACX,KAAA,IACA,MAAM,KAAK,QAAQ,KAAK,GAAG,KAAK,WAAW,YACzC,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,KAAK,IAAI,KAAK,GAAI,CAAC,CACzD;EACN,MAAM,CAAC,SAAS,cAAc,MAAM,KAAK,QAAQ,eAC/C,GAAG,KAAK,YACR,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CACtD;EACA,MAAM,WAAW,KAAK;EACtB,KAAK,QAAQ;GAAE;GAAS;GAAY;GAAY,SAAS;EAAM;EAC/D,MAAM,KAAK,QAAQ,KACjB,MACA,YAAY;GAGV,MAAM,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC;GAC3E,MAAM,KAAK,WAAW,YAAY,KAAK,YAAY;IACjD,IAAI;IACJ;IACA,YAAY;GACd,CAAC;GACD,IAAI,aAAa,KAAA,KAAa,CAAC,SAAS,SACtC,MAAM,KAAK,OAAO,iBAAiB,SAAS,YAAY,IAAI;EAEhE,GACA,EAAE,eAAe,UAAU,CAC7B;EACA,IAAI,aAAa,KAAA,GAAW,SAAS,UAAU;CACjD;CAEA,MAAM,YAAY,MAA6B;EAC7C,MAAM,QAAQ,KAAK;EACnB,MAAM,KAAK,QAAQ,KACjB,MACA,YAAY;GACV,MAAM,KAAK,MAAM,YAAY,KAAK,UAAU;GAC5C,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,KAAK,WAAW,cAAc,KAAK,YAAY,MAAM,UAAU;GAGrE,IAAI,CAAC,MAAM,SAAS,MAAM,KAAK,OAAO,iBAAiB,MAAM,YAAY,IAAI;EAC/E,GACA,EAAE,eAAe,UAAU,CAC7B;EACA,IAAI,UAAU,KAAA,GAAW,MAAM,UAAU;EACzC,KAAK,QAAQ,KAAA;CACf;CAEA,MAAM,YAAY,MAAc,YAAkD;EAChF,MAAM,QAAQ,KAAK;EACnB,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,gBAAgB,KAAK,mDAAmD;EAE1F,IAAI;GACF,MAAM,MAAM;GACZ,OAAO;EACT,SAAS,OAAO;GAEd,IAAI,iBAAiBA,8BAAAA,sBAAsB,OAAO;GAClD,MAAM;EACR,UAAU;GACR,MAAM,UAAU;EAClB;CACF;AACF"}

package/dist/aws/engine-step.d.cts

@@ -0,0 +1,28 @@
+import { EngineStep } from "../engine/ports.cjs";
+import { ExecutionRegistry, JourneyStore } from "../store/index.cjs";
+import { LambdaApi } from "./lambda-api.cjs";
+import { DurableContext, RetryDecision } from "@aws/durable-execution-sdk-js";
+//#region src/aws/engine-step.d.ts
+/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */
+export declare function stepRetry(error: Error, attempt: number): RetryDecision;
+export declare class AwsEngineStep implements EngineStep {
+  private readonly context;
+  private readonly store;
+  private readonly executions;
+  private readonly lambda;
+  private readonly userId;
+  private readonly instanceId;
+  private generation;
+  private armed;
+  constructor(context: DurableContext, store: JourneyStore, executions: ExecutionRegistry, lambda: LambdaApi, userId: string, instanceId: string);
+  do<T>(name: string, fn: () => Promise<T>): Promise<T>;
+  sleep(name: string, ms: number): Promise<void>;
+  sleepUntil(name: string, timestampMs: number): Promise<void>;
+  subscribe(name: string, events: readonly string[], options?: {
+    deadlineMs?: number;
+  }): Promise<void>;
+  unsubscribe(name: string): Promise<void>;
+  waitForWake(name: string, _timeoutMs: number): Promise<'event' | 'timeout'>;
+}
+//#endregion
+//# sourceMappingURL=engine-step.d.cts.map

package/dist/aws/engine-step.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-step.d.cts","names":[],"sources":["../../src/aws/engine-step.ts"],"mappings":";;;;;;wBAyBgB,UAAU,OAAO,OAAO,kBAAkB;qBAa7C,yBAAyB;mBAKjB;mBACA;mBACA;mBACA;mBACA;mBACA;UATX;UACA;EAER,YACmB,SAAS,gBACT,OAAO,cACP,YAAY,mBACZ,QAAQ,WACR,gBACA;EAGnB,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;EAI7C,MAAM,cAAc,aAAa;EAMjC,WAAW,cAAc,sBAAsB;EAS/C,UACJ,cACA,2BACA;IAAW;MACV;EAoCG,YAAY,eAAe;EAkB3B,YAAY,cAAc,qBAAqB"}

package/dist/aws/engine-step.d.mts

@@ -0,0 +1,28 @@
+import { EngineStep } from "../engine/ports.mjs";
+import { ExecutionRegistry, JourneyStore } from "../store/index.mjs";
+import { LambdaApi } from "./lambda-api.mjs";
+import { DurableContext, RetryDecision } from "@aws/durable-execution-sdk-js";
+//#region src/aws/engine-step.d.ts
+/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */
+export declare function stepRetry(error: Error, attempt: number): RetryDecision;
+export declare class AwsEngineStep implements EngineStep {
+  private readonly context;
+  private readonly store;
+  private readonly executions;
+  private readonly lambda;
+  private readonly userId;
+  private readonly instanceId;
+  private generation;
+  private armed;
+  constructor(context: DurableContext, store: JourneyStore, executions: ExecutionRegistry, lambda: LambdaApi, userId: string, instanceId: string);
+  do<T>(name: string, fn: () => Promise<T>): Promise<T>;
+  sleep(name: string, ms: number): Promise<void>;
+  sleepUntil(name: string, timestampMs: number): Promise<void>;
+  subscribe(name: string, events: readonly string[], options?: {
+    deadlineMs?: number;
+  }): Promise<void>;
+  unsubscribe(name: string): Promise<void>;
+  waitForWake(name: string, _timeoutMs: number): Promise<'event' | 'timeout'>;
+}
+//#endregion
+//# sourceMappingURL=engine-step.d.mts.map

package/dist/aws/engine-step.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-step.d.mts","names":[],"sources":["../../src/aws/engine-step.ts"],"mappings":";;;;;;wBAyBgB,UAAU,OAAO,OAAO,kBAAkB;qBAa7C,yBAAyB;mBAKjB;mBACA;mBACA;mBACA;mBACA;mBACA;UATX;UACA;EAER,YACmB,SAAS,gBACT,OAAO,cACP,YAAY,mBACZ,QAAQ,WACR,gBACA;EAGnB,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;EAI7C,MAAM,cAAc,aAAa;EAMjC,WAAW,cAAc,sBAAsB;EAS/C,UACJ,cACA,2BACA;IAAW;MACV;EAoCG,YAAY,eAAe;EAkB3B,YAAY,cAAc,qBAAqB"}

package/dist/aws/engine-step.mjs

@@ -0,0 +1,102 @@
+import { CallbackTimeoutError } from "@aws/durable-execution-sdk-js";
+//#region src/aws/engine-step.ts
+/**
+* EngineStep over a Lambda durable execution.
+*
+* Steps, sleeps and wakes map onto the SDK's `step`, `wait` and callbacks. A wake handle is a
+* callback, which is one-shot, so every wait arms a fresh one (the interpreter subscribes on
+* every attempt): created where the durable context allows it — outside any step, so its id
+* replays — then recorded in Postgres together with the subscription rows, numbered by a
+* generation so a late wake or cleanup of an older wait cannot touch a newer one. The callback
+* is only a hint; the facts the wait re-checks are Postgres'.
+*/
+/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */
+const NON_RETRYABLE = /* @__PURE__ */ new Set(["TemplateValidationError", "ContractValidationError"]);
+/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */
+function stepRetry(error, attempt) {
+	if (NON_RETRYABLE.has(error.name) || attempt >= 6) return { shouldRetry: false };
+	return {
+		shouldRetry: true,
+		delay: { seconds: Math.min(60, 2 ** attempt) }
+	};
+}
+var AwsEngineStep = class {
+	context;
+	store;
+	executions;
+	lambda;
+	userId;
+	instanceId;
+	generation = 0;
+	armed;
+	constructor(context, store, executions, lambda, userId, instanceId) {
+		this.context = context;
+		this.store = store;
+		this.executions = executions;
+		this.lambda = lambda;
+		this.userId = userId;
+		this.instanceId = instanceId;
+	}
+	do(name, fn) {
+		return this.context.step(name, () => fn(), { retryStrategy: stepRetry });
+	}
+	async sleep(name, ms) {
+		if (!(ms > 0)) return;
+		await this.context.wait(name, { seconds: Math.ceil(ms / 1e3) });
+	}
+	async sleepUntil(name, timestampMs) {
+		const remaining = await this.context.step(`${name}:remaining`, async () => timestampMs - Date.now());
+		await this.sleep(name, remaining);
+	}
+	async subscribe(name, events, options = {}) {
+		const generation = ++this.generation;
+		const { deadlineMs } = options;
+		const seconds = deadlineMs === void 0 ? void 0 : await this.context.step(`${name}:timeout`, async () => Math.max(1, Math.ceil((deadlineMs - Date.now()) / 1e3)));
+		const [promise, callbackId] = await this.context.createCallback(`${name}:callback`, seconds === void 0 ? {} : { timeout: { seconds } });
+		const previous = this.armed;
+		this.armed = {
+			promise,
+			callbackId,
+			generation,
+			settled: false
+		};
+		await this.context.step(name, async () => {
+			await this.store.subscribe(this.instanceId, this.userId, events, Date.now());
+			await this.executions.armCallback(this.instanceId, {
+				id: callbackId,
+				generation,
+				deadlineAt: deadlineMs
+			});
+			if (previous !== void 0 && !previous.settled) await this.lambda.completeCallback(previous.callbackId, "{}");
+		}, { retryStrategy: stepRetry });
+		if (previous !== void 0) previous.settled = true;
+	}
+	async unsubscribe(name) {
+		const armed = this.armed;
+		await this.context.step(name, async () => {
+			await this.store.unsubscribe(this.instanceId);
+			if (armed === void 0) return;
+			await this.executions.clearCallback(this.instanceId, armed.generation);
+			if (!armed.settled) await this.lambda.completeCallback(armed.callbackId, "{}");
+		}, { retryStrategy: stepRetry });
+		if (armed !== void 0) armed.settled = true;
+		this.armed = void 0;
+	}
+	async waitForWake(name, _timeoutMs) {
+		const armed = this.armed;
+		if (armed === void 0) throw new Error(`waitForWake '${name}' without a subscribe: nothing is armed to wake it`);
+		try {
+			await armed.promise;
+			return "event";
+		} catch (error) {
+			if (error instanceof CallbackTimeoutError) return "timeout";
+			throw error;
+		} finally {
+			armed.settled = true;
+		}
+	}
+};
+//#endregion
+export { AwsEngineStep, stepRetry };
+
+//# sourceMappingURL=engine-step.mjs.map

package/dist/aws/engine-step.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-step.mjs","names":[],"sources":["../../src/aws/engine-step.ts"],"sourcesContent":["import {\n  CallbackTimeoutError,\n  type DurableContext,\n  type DurablePromise,\n  type RetryDecision,\n} from '@aws/durable-execution-sdk-js';\nimport type { EngineStep } from '../engine/ports';\nimport type { ExecutionRegistry, JourneyStore } from '../store/index';\nimport type { LambdaApi } from './lambda-api';\n\n/**\n * EngineStep over a Lambda durable execution.\n *\n * Steps, sleeps and wakes map onto the SDK's `step`, `wait` and callbacks. A wake handle is a\n * callback, which is one-shot, so every wait arms a fresh one (the interpreter subscribes on\n * every attempt): created where the durable context allows it — outside any step, so its id\n * replays — then recorded in Postgres together with the subscription rows, numbered by a\n * generation so a late wake or cleanup of an older wait cannot touch a newer one. The callback\n * is only a hint; the facts the wait re-checks are Postgres'.\n */\n\n/** Refusals a retry would only repeat: a template's props, an emitted event's payload. */\nconst NON_RETRYABLE = new Set(['TemplateValidationError', 'ContractValidationError']);\n\n/** What the step retries, bounded: 6 attempts with exponential backoff up to a minute. */\nexport function stepRetry(error: Error, attempt: number): RetryDecision {\n  if (NON_RETRYABLE.has(error.name) || attempt >= 6) return { shouldRetry: false };\n  return { shouldRetry: true, delay: { seconds: Math.min(60, 2 ** attempt) } };\n}\n\ninterface Armed {\n  promise: DurablePromise<string>;\n  callbackId: string;\n  generation: number;\n  /** The wait consumed it (woken or timed out): there is nothing left to close. */\n  settled: boolean;\n}\n\nexport class AwsEngineStep implements EngineStep {\n  private generation = 0;\n  private armed: Armed | undefined;\n\n  constructor(\n    private readonly context: DurableContext,\n    private readonly store: JourneyStore,\n    private readonly executions: ExecutionRegistry,\n    private readonly lambda: LambdaApi,\n    private readonly userId: string,\n    private readonly instanceId: string\n  ) {}\n\n  do<T>(name: string, fn: () => Promise<T>): Promise<T> {\n    return this.context.step(name, () => fn(), { retryStrategy: stepRetry });\n  }\n\n  async sleep(name: string, ms: number): Promise<void> {\n    // A wait is whole seconds: rounded up, so it never ends early; nothing to wait at zero\n    if (!(ms > 0)) return;\n    await this.context.wait(name, { seconds: Math.ceil(ms / 1000) });\n  }\n\n  async sleepUntil(name: string, timestampMs: number): Promise<void> {\n    // The remaining time is checkpointed: a replay must not recompute it from a later clock\n    const remaining = await this.context.step(\n      `${name}:remaining`,\n      async () => timestampMs - Date.now()\n    );\n    await this.sleep(name, remaining);\n  }\n\n  async subscribe(\n    name: string,\n    events: readonly string[],\n    options: { deadlineMs?: number } = {}\n  ): Promise<void> {\n    const generation = ++this.generation;\n    const { deadlineMs } = options;\n    // The callback's own timeout is the wait's deadline: fixed when it is created\n    const seconds =\n      deadlineMs === undefined\n        ? undefined\n        : await this.context.step(`${name}:timeout`, async () =>\n            Math.max(1, Math.ceil((deadlineMs - Date.now()) / 1000))\n          );\n    const [promise, callbackId] = await this.context.createCallback(\n      `${name}:callback`,\n      seconds === undefined ? {} : { timeout: { seconds } }\n    );\n    const previous = this.armed;\n    this.armed = { promise, callbackId, generation, settled: false };\n    await this.context.step(\n      name,\n      async () => {\n        // Rows first, then the callback: a wake that lands in between finds the rows and the\n        // callback of the last wait — its completion is refused, and this wait checks the facts\n        await this.store.subscribe(this.instanceId, this.userId, events, Date.now());\n        await this.executions.armCallback(this.instanceId, {\n          id: callbackId,\n          generation,\n          deadlineAt: deadlineMs,\n        });\n        if (previous !== undefined && !previous.settled) {\n          await this.lambda.completeCallback(previous.callbackId, '{}');\n        }\n      },\n      { retryStrategy: stepRetry }\n    );\n    if (previous !== undefined) previous.settled = true;\n  }\n\n  async unsubscribe(name: string): Promise<void> {\n    const armed = this.armed;\n    await this.context.step(\n      name,\n      async () => {\n        await this.store.unsubscribe(this.instanceId);\n        if (armed === undefined) return;\n        await this.executions.clearCallback(this.instanceId, armed.generation);\n        // The condition held before the wait parked: its callback is closed through the public\n        // API (a closed one answers false), rather than left open until it times out\n        if (!armed.settled) await this.lambda.completeCallback(armed.callbackId, '{}');\n      },\n      { retryStrategy: stepRetry }\n    );\n    if (armed !== undefined) armed.settled = true;\n    this.armed = undefined;\n  }\n\n  async waitForWake(name: string, _timeoutMs: number): Promise<'event' | 'timeout'> {\n    const armed = this.armed;\n    if (armed === undefined) {\n      throw new Error(`waitForWake '${name}' without a subscribe: nothing is armed to wake it`);\n    }\n    try {\n      await armed.promise;\n      return 'event';\n    } catch (error) {\n      // Only the callback's own expiry is a timeout; any other failure is a failure\n      if (error instanceof CallbackTimeoutError) return 'timeout';\n      throw error;\n    } finally {\n      armed.settled = true;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAsBA,MAAM,gCAAgB,IAAI,IAAI,CAAC,2BAA2B,yBAAyB,CAAC;;AAGpF,SAAgB,UAAU,OAAc,SAAgC;CACtE,IAAI,cAAc,IAAI,MAAM,IAAI,KAAK,WAAW,GAAG,OAAO,EAAE,aAAa,MAAM;CAC/E,OAAO;EAAE,aAAa;EAAM,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE;CAAE;AAC7E;AAUA,IAAa,gBAAb,MAAiD;CAK5B;CACA;CACA;CACA;CACA;CACA;CATnB,aAAqB;CACrB;CAEA,YACE,SACA,OACA,YACA,QACA,QACA,YACA;EANiB,KAAA,UAAA;EACA,KAAA,QAAA;EACA,KAAA,aAAA;EACA,KAAA,SAAA;EACA,KAAA,SAAA;EACA,KAAA,aAAA;CAChB;CAEH,GAAM,MAAc,IAAkC;EACpD,OAAO,KAAK,QAAQ,KAAK,YAAY,GAAG,GAAG,EAAE,eAAe,UAAU,CAAC;CACzE;CAEA,MAAM,MAAM,MAAc,IAA2B;EAEnD,IAAI,EAAE,KAAK,IAAI;EACf,MAAM,KAAK,QAAQ,KAAK,MAAM,EAAE,SAAS,KAAK,KAAK,KAAK,GAAI,EAAE,CAAC;CACjE;CAEA,MAAM,WAAW,MAAc,aAAoC;EAEjE,MAAM,YAAY,MAAM,KAAK,QAAQ,KACnC,GAAG,KAAK,aACR,YAAY,cAAc,KAAK,IAAI,CACrC;EACA,MAAM,KAAK,MAAM,MAAM,SAAS;CAClC;CAEA,MAAM,UACJ,MACA,QACA,UAAmC,CAAC,GACrB;EACf,MAAM,aAAa,EAAE,KAAK;EAC1B,MAAM,EAAE,eAAe;EAEvB,MAAM,UACJ,eAAe,KAAA,IACX,KAAA,IACA,MAAM,KAAK,QAAQ,KAAK,GAAG,KAAK,WAAW,YACzC,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,KAAK,IAAI,KAAK,GAAI,CAAC,CACzD;EACN,MAAM,CAAC,SAAS,cAAc,MAAM,KAAK,QAAQ,eAC/C,GAAG,KAAK,YACR,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CACtD;EACA,MAAM,WAAW,KAAK;EACtB,KAAK,QAAQ;GAAE;GAAS;GAAY;GAAY,SAAS;EAAM;EAC/D,MAAM,KAAK,QAAQ,KACjB,MACA,YAAY;GAGV,MAAM,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,QAAQ,QAAQ,KAAK,IAAI,CAAC;GAC3E,MAAM,KAAK,WAAW,YAAY,KAAK,YAAY;IACjD,IAAI;IACJ;IACA,YAAY;GACd,CAAC;GACD,IAAI,aAAa,KAAA,KAAa,CAAC,SAAS,SACtC,MAAM,KAAK,OAAO,iBAAiB,SAAS,YAAY,IAAI;EAEhE,GACA,EAAE,eAAe,UAAU,CAC7B;EACA,IAAI,aAAa,KAAA,GAAW,SAAS,UAAU;CACjD;CAEA,MAAM,YAAY,MAA6B;EAC7C,MAAM,QAAQ,KAAK;EACnB,MAAM,KAAK,QAAQ,KACjB,MACA,YAAY;GACV,MAAM,KAAK,MAAM,YAAY,KAAK,UAAU;GAC5C,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,KAAK,WAAW,cAAc,KAAK,YAAY,MAAM,UAAU;GAGrE,IAAI,CAAC,MAAM,SAAS,MAAM,KAAK,OAAO,iBAAiB,MAAM,YAAY,IAAI;EAC/E,GACA,EAAE,eAAe,UAAU,CAC7B;EACA,IAAI,UAAU,KAAA,GAAW,MAAM,UAAU;EACzC,KAAK,QAAQ,KAAA;CACf;CAEA,MAAM,YAAY,MAAc,YAAkD;EAChF,MAAM,QAAQ,KAAK;EACnB,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,gBAAgB,KAAK,mDAAmD;EAE1F,IAAI;GACF,MAAM,MAAM;GACZ,OAAO;EACT,SAAS,OAAO;GAEd,IAAI,iBAAiB,sBAAsB,OAAO;GAClD,MAAM;EACR,UAAU;GACR,MAAM,UAAU;EAClB;CACF;AACF"}